Re: [Freeipa-devel] [PATCH] 134 Improve handling of GIDs when migrating groups

2011-10-07 Thread Martin Kosek
On Thu, 2011-10-06 at 21:31 -0400, Rob Crittenden wrote: Martin Kosek wrote: On Wed, 2011-10-05 at 13:44 -0400, Rob Crittenden wrote: Martin Kosek wrote: Since IPA v2 server already contain predefined groups that may collide with groups in migrated (IPA v1) server (for example admins,

Re: [Freeipa-devel] [PATCH] 888 always verify hostname

2011-10-07 Thread Martin Kosek
On Thu, 2011-10-06 at 22:59 -0400, Rob Crittenden wrote: When installing with DNS we skip a few hostname checks on the assumption that the DNS we are installing will cover things. We still need to verify /etc/hosts and we do this with gethostbyname_ex() which returns the primary name and

[Freeipa-devel] [PATCH] 141 Make sure ipa-client-install returns correct error code

2011-10-07 Thread Martin Kosek
https://fedorahosted.org/freeipa/ticket/1937 From d2c9d1518929fa83d8574e7ae555817e8cc96c5e Mon Sep 17 00:00:00 2001 From: Martin Kosek mko...@redhat.com Date: Fri, 7 Oct 2011 14:47:28 +0200 Subject: [PATCH] Make sure ipa-client-install returns correct error code

Re: [Freeipa-devel] [PATCH] 887 add missing aci prefix to dns acis

2011-10-07 Thread Rob Crittenden
Martin Kosek wrote: On Thu, 2011-10-06 at 17:06 -0400, Rob Crittenden wrote: Rob Crittenden wrote: Martin Kosek wrote: On Thu, 2011-10-06 at 14:05 -0400, Rob Crittenden wrote: Martin Kosek wrote: On Wed, 2011-10-05 at 17:18 -0400, Rob Crittenden wrote: The aci prefix was missing in the

Re: [Freeipa-devel] [PATCH] 888 always verify hostname

2011-10-07 Thread Rob Crittenden
Martin Kosek wrote: On Thu, 2011-10-06 at 22:59 -0400, Rob Crittenden wrote: When installing with DNS we skip a few hostname checks on the assumption that the DNS we are installing will cover things. We still need to verify /etc/hosts and we do this with gethostbyname_ex() which returns the

Re: [Freeipa-devel] [PATCH] 888 always verify hostname

2011-10-07 Thread Martin Kosek
On Fri, 2011-10-07 at 08:58 -0400, Rob Crittenden wrote: Martin Kosek wrote: On Thu, 2011-10-06 at 22:59 -0400, Rob Crittenden wrote: When installing with DNS we skip a few hostname checks on the assumption that the DNS we are installing will cover things. We still need to verify

Re: [Freeipa-devel] [PATCH] 888 always verify hostname

2011-10-07 Thread Rob Crittenden
Martin Kosek wrote: On Fri, 2011-10-07 at 08:58 -0400, Rob Crittenden wrote: Martin Kosek wrote: On Thu, 2011-10-06 at 22:59 -0400, Rob Crittenden wrote: When installing with DNS we skip a few hostname checks on the assumption that the DNS we are installing will cover things. We still need to

Re: [Freeipa-devel] [PATCH] 141 Make sure ipa-client-install returns correct error code

2011-10-07 Thread Martin Kosek
On Fri, 2011-10-07 at 16:17 +0300, Alexander Bokovoy wrote: On Fri, 07 Oct 2011, Martin Kosek wrote: https://fedorahosted.org/freeipa/ticket/1937 From d2c9d1518929fa83d8574e7ae555817e8cc96c5e Mon Sep 17 00:00:00 2001 From: Martin Kosek mko...@redhat.com Date: Fri, 7 Oct 2011 14:47:28

Re: [Freeipa-devel] [PATCH] 885 optimize indirect member calculation

2011-10-07 Thread Rob Crittenden
Alexander Bokovoy wrote: On Wed, 05 Oct 2011, Rob Crittenden wrote: When calculating indirect membership of a group all members are examined and if those have members, those are added as well. This does not need to be done when the member in question is a user or a host as they cannot have

Re: [Freeipa-devel] [PATCH] 887 add missing aci prefix to dns acis

2011-10-07 Thread Martin Kosek
On Fri, 2011-10-07 at 08:52 -0400, Rob Crittenden wrote: Martin Kosek wrote: On Thu, 2011-10-06 at 17:06 -0400, Rob Crittenden wrote: Rob Crittenden wrote: Martin Kosek wrote: On Thu, 2011-10-06 at 14:05 -0400, Rob Crittenden wrote: Martin Kosek wrote: On Wed, 2011-10-05 at 17:18

Re: [Freeipa-devel] [PATCH] 887 add missing aci prefix to dns acis

2011-10-07 Thread Rob Crittenden
Martin Kosek wrote: On Fri, 2011-10-07 at 08:52 -0400, Rob Crittenden wrote: Martin Kosek wrote: On Thu, 2011-10-06 at 17:06 -0400, Rob Crittenden wrote: Rob Crittenden wrote: Martin Kosek wrote: On Thu, 2011-10-06 at 14:05 -0400, Rob Crittenden wrote: Martin Kosek wrote: On Wed,

Re: [Freeipa-devel] [PATCHES] 0287 and 0288 for Proxy upgrade

2011-10-07 Thread Adam Young
On 10/06/2011 10:21 PM, Rob Crittenden wrote: Adam Young wrote: Not yet ready for prime time. I've tested the changes to updateinstance by hand, so I know they work. I'm having problems with the python import setup. RPM build fails with: install/tools/ipa-upgradeconfig:36: [F0401] Unable to

Re: [Freeipa-devel] [PATCHES] 0287 and 0288 for Proxy upgrade

2011-10-07 Thread Rob Crittenden
Adam Young wrote: On 10/06/2011 10:21 PM, Rob Crittenden wrote: Adam Young wrote: Not yet ready for prime time. I've tested the changes to updateinstance by hand, so I know they work. I'm having problems with the python import setup. RPM build fails with:

Re: [Freeipa-devel] [PATCH] 021 Split Web UI initialization to several smaller calls

2011-10-07 Thread Adam Young
On 10/07/2011 11:55 AM, Petr Vobornik wrote: https://fedorahosted.org/freeipa/ticket/1933 based on ayoung-0286-split-metadata-call Web UI init method was modified to get initialization data in 3 calls. First call remains the same as before except that the json_metadata command was removed.

Re: [Freeipa-devel] [PATCHES] 0287 and 0288 for Proxy upgrade

2011-10-07 Thread Adam Young
On 10/07/2011 02:42 PM, Rob Crittenden wrote: Adam Young wrote: On 10/06/2011 10:21 PM, Rob Crittenden wrote: Adam Young wrote: Not yet ready for prime time. I've tested the changes to updateinstance by hand, so I know they work. I'm having problems with the python import setup. RPM build