Re: [Freeipa-devel] [PATCH] 1 Do lazy initializiation ipalib

2011-11-09 Thread Jan Cholasta
Dne 3.11.2011 12:43, Alexander Bokovoy napsal(a): On Thu, 03 Nov 2011, Jan Cholasta wrote: The problem with the API class is that it creates all the plugin instances every time. Both mine and your patch don't change that, they deal only with finalization, which is the easier part of the lazy

Re: [Freeipa-devel] [PATCH] 1 Do lazy initializiation ipalib

2011-11-09 Thread Alexander Bokovoy
On Wed, 09 Nov 2011, Jan Cholasta wrote: would't suffer from a facelift - currently it is messy, hard to read code, with bits nobody ever used or uses anymore, some of the docstrings and comments aren't correct, etc.) A review of API class is a good idea. However, I think it is currently

[Freeipa-devel] [PATCH] 163+164 Fix DNS zone --allow-dynupdate option behavior

2011-11-09 Thread Martin Kosek
Patch 164 fixes dnszone-mod --allow-dynupdate behavior which disables the zone dynamic updates value whenever a dnszone-mod command is run and --allow-dynupdate options is not set. I introduced a Param.encode() function (patch 163) to our framework to help encoding Python native values to LDAP

Re: [Freeipa-devel] [Freeipa-users] OpenSSH integration - known_hosts

2011-11-09 Thread Simo Sorce
On Tue, 2011-11-08 at 20:45 -0500, Dan Scott wrote: Hi, On Tue, Nov 8, 2011 at 18:35, Simo Sorce s...@redhat.com wrote: On Tue, 2011-11-08 at 17:57 -0500, Dmitri Pal wrote: On 11/08/2011 02:56 PM, Dan Scott wrote: Hi, This is a great feature. It feels like I'm always re-installing

Re: [Freeipa-devel] [PATCH] 163+164 Fix DNS zone --allow-dynupdate option behavior

2011-11-09 Thread Alexander Bokovoy
On Wed, 09 Nov 2011, Martin Kosek wrote: Patch 164 fixes dnszone-mod --allow-dynupdate behavior which disables the zone dynamic updates value whenever a dnszone-mod command is run and --allow-dynupdate options is not set. As discussed on IRC, please rename the CLI option name to

Re: [Freeipa-devel] [Freeipa-users] OpenSSH integration - known_hosts

2011-11-09 Thread Dan Scott
Hi, On Tue, Nov 8, 2011 at 18:35, Simo Sorce s...@redhat.com wrote: On Tue, 2011-11-08 at 17:57 -0500, Dmitri Pal wrote: On 11/08/2011 02:56 PM, Dan Scott wrote: Hi, This is a great feature. It feels like I'm always re-installing VMs and having to remove old SSH keys and re-accept new

Re: [Freeipa-devel] [PATCH] 1 Do lazy initializiation ipalib

2011-11-09 Thread Jan Cholasta
Dne 9.11.2011 11:59, Alexander Bokovoy napsal(a): On Wed, 09 Nov 2011, Jan Cholasta wrote: would't suffer from a facelift - currently it is messy, hard to read code, with bits nobody ever used or uses anymore, some of the docstrings and comments aren't correct, etc.) A review of API class is a

Re: [Freeipa-devel] [PATCH] 163+164 Fix DNS zone --allow-dynupdate option behavior

2011-11-09 Thread Martin Kosek
On Wed, 2011-11-09 at 16:14 +0200, Alexander Bokovoy wrote: On Wed, 09 Nov 2011, Martin Kosek wrote: Patch 164 fixes dnszone-mod --allow-dynupdate behavior which disables the zone dynamic updates value whenever a dnszone-mod command is run and --allow-dynupdate options is not set. As

Re: [Freeipa-devel] [Freeipa-users] OpenSSH integration - known_hosts

2011-11-09 Thread Simo Sorce
CCing freeipa-devel so that others can benefit from replies too. On Wed, 2011-11-09 at 09:49 -0500, Dan Scott wrote: Well in 2-way trusts you could do that. But in general you do not want to have any client in realm1 to contact any server in realm2. They might be geographically very far and

[Freeipa-devel] [PATCH] 311 Added paging on search facet.

2011-11-09 Thread Endi Sukma Dewata
The search facet has been modified to support paging on most entities using the --pkey-only option to get the primary keys and a batch command to get the complete records. Paging on DNS records is not supported because a record may appear as multiple rows. The following entities do not have

Re: [Freeipa-devel] Screens For HBAC Testing (Ticket #388)

2011-11-09 Thread Dmitri Pal
On 11/09/2011 05:08 PM, Kyle Baker wrote: Endi and I worked to create the model for the new HBAC Testing section. The screens are attached. Kyle Baker Visual Designer Desk (978) 392 3116 UX Team IRC kylebaker Since from host is unreliable, one of the latest decisions