On Thu, 01 Dec 2011, Simo Sorce wrote:
> Very simple patch to remove unused stuff, could have been a onelliner I
> guess, but here we go :)
ACK.
--
/ Alexander Bokovoy
___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mail
Hello all,
with this set of patches it is possible to allow constrained delegation
of credentials so that a service can impersonate a user when
communicating with another service w/o requiring the user to actually
forward their TGT. This makes for a much better method of delegating
credentials as
Very simple patch to remove unused stuff, could have been a onelliner I
guess, but here we go :)
Simo.
--
Simo Sorce * Red Hat, Inc * New York
>From d18a84c440e6bf0798c8a6f0c05d1581089176e8 Mon Sep 17 00:00:00 2001
From: Simo Sorce
Date: Wed, 30 Nov 2011 08:47:26 -0500
Subject: [PATCH] ipa-kdb:
Hi Adam,
I haven't replied to this summary so far for 2 reasons.
I had little time to ponder it (and Java is not my forte) and it is
still a bit up in the air.
I am a bit concerned about the relatively unstable/young support for
some of the tech that would have to be involved, but on the other han
On Wed, 2011-11-30 at 17:33 -0500, John Dennis wrote:
> Comments? Suggestions?
>
Sorry for the late reply.
First of all, excellent write-up John, it is very comprehensive and lays
down things very clearly.
I agree that using ipa:ipa for memcached and wsgi would be a better
proposition for us. Al
On Thu, 2011-12-01 at 19:31 -0500, John Dennis wrote:
> On 12/01/2011 06:54 PM, Dmitri Pal wrote:
> > Seems reasonable. I agree with pros and cons and suggestions but I am
> > not the person to make the final approval. Simo?
> >
> > Question for John: Is there any benefit for CLI or it is for UI on
On Thu, 2011-12-01 at 10:50 -0800, Nathan Kinder wrote:
> On 12/01/2011 06:27 AM, Simo Sorce wrote:
> > On Thu, 2011-12-01 at 09:00 -0500, Jiri Kuncar wrote:
> >> I've added an attribute "idnsAllowSyncPTR" to "idnsZone" to enable or
> >> disable synchronization of PTR records. However the bind-dynd
On 12/01/2011 06:54 PM, Dmitri Pal wrote:
Seems reasonable. I agree with pros and cons and suggestions but I am
not the person to make the final approval. Simo?
Question for John: Is there any benefit for CLI or it is for UI only?
Currently it would benefit the UI only. That's mostly because t
On 11/30/2011 05:33 PM, John Dennis wrote:
>
>
> ___
> Freeipa-devel mailing list
> Freeipa-devel@redhat.com
> https://www.redhat.com/mailman/listinfo/freeipa-devel
Seems reasonable. I agree with pros and cons and suggestions but I am
not the person to ma
Martin Kosek wrote:
On Mon, 2011-11-28 at 17:35 +0100, Martin Kosek wrote:
I have prepared a working prototype of the new structured DNS API. It
may still have rough edges (and unit tests are not ready), but it will
provide a base for discussion and for WebUI folks - so that they can
start devel
Martin Kosek wrote:
Make sure that --enable-migration in config plugin works correctly
and user can use to both enable and disable migration.
https://fedorahosted.org/freeipa/ticket/2150
ack pushed to master
___
Freeipa-devel mailing list
Freeipa-d
On 12/01/2011 06:27 AM, Simo Sorce wrote:
On Thu, 2011-12-01 at 09:00 -0500, Jiri Kuncar wrote:
I've added an attribute "idnsAllowSyncPTR" to "idnsZone" to enable or
disable synchronization of PTR records. However the bind-dyndb-ldap
plugin option "sync_ptr" has to be included in /etc/named.conf
On 12/01/2011 10:02 AM, Petr Vobornik wrote:
Attaching patch for unit tests.
Couple of widget tests still fail.
They raise couple questions:
1) Should widget expect that array of values like ['value'] will be
always passed to update(values) method or the update method should
also work with s
On 12/01/2011 09:39 AM, John Dennis wrote:
1) Never import the Python logging module, instead:
from ipapython.log_manager import *
Opps, mea culpa, that should be ipa_log_manager, not log_manager
from ipapython.ipa_log_manager import *
--
John Dennis
Looking to carve out IT costs?
www.redh
A few days ago changes were checked into the master branch to improve
the way logging works. The modules ipapython.ipa_log_manager and
ipapython.log_manager were added and contain extensive documentation
(links to their HTML version appear below). But you don't need to read
through it all, you
On Thu, 2011-12-01 at 09:00 -0500, Jiri Kuncar wrote:
> I've added an attribute "idnsAllowSyncPTR" to "idnsZone" to enable or
> disable synchronization of PTR records. However the bind-dyndb-ldap
> plugin option "sync_ptr" has to be included in /etc/named.conf to run
> synchronization feature.
We
I've added an attribute "idnsAllowSyncPTR" to "idnsZone" to enable or disable
synchronization of PTR records. However the bind-dyndb-ldap plugin option
"sync_ptr" has to be included in /etc/named.conf to run synchronization feature.
My quick fix of LDAP schema in /usr/share/ipa/60basev2.ldif:
--
On 11/29/2011 10:33 PM, Rob Crittenden wrote:
Ondrej Hamada wrote:
On 11/11/2011 02:55 PM, Ondrej Hamada wrote:
https://fedorahosted.org/freeipa/ticket/2063
In order to check presence of nss_ldap when installing client with
'--no-sssd' option there was added code into ipa-client-install. Check
Make sure that --enable-migration in config plugin works correctly
and user can use to both enable and disable migration.
https://fedorahosted.org/freeipa/ticket/2150
>From 0ccac787296c97cff98ce77560889a07047ef9b2 Mon Sep 17 00:00:00 2001
From: Martin Kosek
Date: Thu, 1 Dec 2011 09:23:07 +0100
S
19 matches
Mail list logo