A text field has been added for specifying external user, host, and
service for HBAC testing.
Ticket #388
--
Endi S. Dewata
From 441a96d27c0862a3f0eabd05bcef982727a92434 Mon Sep 17 00:00:00 2001
From: Endi Sukma Dewata
Date: Mon, 21 Nov 2011 18:58:38 -0600
Subject: [PATCH] Added external fields
On 11/21/2011 7:33 PM, Endi Sukma Dewata wrote:
The search filter in HBAC Test has been fixed to work properly.
Ticket #388
Updated patch attached.
--
Endi S. Dewata
From 8e60a7fb610753863f8745fd955a497fade5b118 Mon Sep 17 00:00:00 2001
From: Endi Sukma Dewata
Date: Mon, 21 Nov 2011 17:11:49
On 11/21/2011 7:31 PM, Endi Sukma Dewata wrote:
The Back, Next, and New Test buttons in HBAC Test have been fixed
to work properly.
Ticket #388
Updated patch attached.
--
Endi S. Dewata
From f61c2c2967cefeed7ff5d0ab0319cd4b1944ba31 Mon Sep 17 00:00:00 2001
From: Endi Sukma Dewata
Date: Mon,
On 11/21/2011 12:38 PM, Endi Sukma Dewata wrote:
This is the initial implementation of HBAC Test page. Currently it
can select user, source/target group, service, rules, and execute
the test. Other functionalities to be implemented include the search
filter, external users/hosts, back/next button
On 11/21/2011 12:23 PM, Endi Sukma Dewata wrote:
The current code assumes that an entity will always have a corresponding
LDAPObject on the server, so it looks for the metadata in a fixed
location. This assumption doesn't work for HBAC Test since it is a
Command, not an LDAPObject, so the metadat
On 11/21/2011 12:18 PM, Endi Sukma Dewata wrote:
The table widget has been modified to support single-valued attribute
using radio buttons needed by some facets in HBAC Test. The widget now
uses 'pagination' flag to determine whether to show the pagination
control. The test data has also been upd
On Fri, 2011-12-02 at 10:10 -0500, Simo Sorce wrote:
> On Fri, 2011-12-02 at 09:27 -0500, Rob Crittenden wrote:
> > Simo Sorce wrote:
> > > Hello all,
> > >
> > > with this set of patches it is possible to allow constrained delegation
> > > of credentials so that a service can impersonate a user wh
Straightforward cleanup.
Simo.
--
Simo Sorce * Red Hat, Inc * New York
>From 1da9fb9c63d77fe9c30d26ae1ed376c74f7bf93a Mon Sep 17 00:00:00 2001
From: Simo Sorce
Date: Mon, 5 Dec 2011 15:54:27 -0500
Subject: [PATCH] ipa-kdb: return properly when no PAC is available
---
daemons/ipa-kdb/ipa_kdb_ms
Dmitri Pal wrote:
Hi
These have patches on the list:
https://fedorahosted.org/freeipa/ticket/1496
NACKd on 12/2
https://fedorahosted.org/freeipa/ticket/1827
Needs a rebase and I had a question/suggestion.
I did the reviews Friday afternoon after Alexander's day had ended.
He'll take a lo
Hi
These have patches on the list:
https://fedorahosted.org/freeipa/ticket/1496
https://fedorahosted.org/freeipa/ticket/1827
These tickets depend on external work:
https://fedorahosted.org/freeipa/ticket/2103
https://fedorahosted.org/freeipa/ticket/2117
--
Thank you,
Dmitri Pal
Sr. Engineering
Alexander Bokovoy wrote:
On Mon, 05 Dec 2011, Martin Kosek wrote:
On Fri, 2011-12-02 at 10:20 -0500, John Dennis wrote:
On 12/02/2011 07:58 AM, Alexander Bokovoy wrote:
Hi,
I'm working on ticket https://fedorahosted.org/freeipa/ticket/1837
which concerns portability of ipapython.dnsclient mod
On 12/05/2011 12:27 PM, Endi Sukma Dewata wrote:
On 12/5/2011 9:37 AM, Petr Vobornik wrote:
Created format method for getting translated messages for boolean values
- IPA.boolean_column_format.
Used in hosts, sudo rules, hbac rules.
https://fedorahosted.org/freeipa/ticket/2027
The patch work
On 12/5/2011 9:37 AM, Petr Vobornik wrote:
Created format method for getting translated messages for boolean values
- IPA.boolean_column_format.
Used in hosts, sudo rules, hbac rules.
https://fedorahosted.org/freeipa/ticket/2027
The patch works, so it's ACKed. There are a few suggestions but
On 12/5/2011 7:41 AM, Petr Vobornik wrote:
> All tests passed.
ACK 32-47, 49-1, 50. Pushed to master. YAY!
--
Endi S. Dewata
___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel
On Mon, 05 Dec 2011, Simo Sorce wrote:
> > > I like second approach more too. Although I think the best solution here
> > > would be to discard ipapython.dnsclient as is and use dnspython directly
> > > in our code. ipapython.dnsclient is not used on that many places in our
> > > code anyway.
> > >
On Mon, 2011-12-05 at 18:09 +0200, Alexander Bokovoy wrote:
> On Mon, 05 Dec 2011, Martin Kosek wrote:
> > On Fri, 2011-12-02 at 10:20 -0500, John Dennis wrote:
> > > On 12/02/2011 07:58 AM, Alexander Bokovoy wrote:
> > > > Hi,
> > > >
> > > > I'm working on ticket https://fedorahosted.org/freeipa/
On Mon, 05 Dec 2011, Martin Kosek wrote:
> On Fri, 2011-12-02 at 10:20 -0500, John Dennis wrote:
> > On 12/02/2011 07:58 AM, Alexander Bokovoy wrote:
> > > Hi,
> > >
> > > I'm working on ticket https://fedorahosted.org/freeipa/ticket/1837
> > > which concerns portability of ipapython.dnsclient modu
Evgeny Sinelnikov wrote:
The ipa_kpasswd daemon can't listen ldap on tcp and access to
/dev/urandom due to an error in the selinux policies on Fedora 16.
Attached patch fixed it instead of "setsebool
authlogin_nsswitch_use_ldap on" using.
ACK, pushed to master.
I'll work on adding this to th
On Fri, 2011-12-02 at 10:20 -0500, John Dennis wrote:
> On 12/02/2011 07:58 AM, Alexander Bokovoy wrote:
> > Hi,
> >
> > I'm working on ticket https://fedorahosted.org/freeipa/ticket/1837
> > which concerns portability of ipapython.dnsclient module.
> >
> > ipapython.dnsclient module uses acutil mo
Created format method for getting translated messages for boolean values
- IPA.boolean_column_format.
Used in hosts, sudo rules, hbac rules.
https://fedorahosted.org/freeipa/ticket/2027
--
Petr Vobornik
From df21f935ae6ce05ed0a4709aade99d9e94d2f810 Mon Sep 17 00:00:00 2001
From: Petr Vobornik
On Mon, 2011-12-05 at 09:42 -0500, Dmitri Pal wrote:
> On 12/05/2011 09:33 AM, Stephen Gallagher wrote:
> > On Sat, 2011-12-03 at 14:06 -0500, Dmitri Pal wrote:
> > > On 12/01/2011 08:48 PM, Simo Sorce wrote:
> > > > On Thu, 2011-12-01 at 19:31 -0500, John Dennis wrote:
> > > > > On 12/01/2011 06:
On 12/05/2011 09:33 AM, Stephen Gallagher wrote:
> On Sat, 2011-12-03 at 14:06 -0500, Dmitri Pal wrote:
>> On 12/01/2011 08:48 PM, Simo Sorce wrote:
>>> On Thu, 2011-12-01 at 19:31 -0500, John Dennis wrote:
On 12/01/2011 06:54 PM, Dmitri Pal wrote:
> Seems reasonable. I agree with pros and
On Sat, 2011-12-03 at 14:06 -0500, Dmitri Pal wrote:
> On 12/01/2011 08:48 PM, Simo Sorce wrote:
> > On Thu, 2011-12-01 at 19:31 -0500, John Dennis wrote:
> >> On 12/01/2011 06:54 PM, Dmitri Pal wrote:
> >>> Seems reasonable. I agree with pros and cons and suggestions but I am
> >>> not the person
On 12/02/2011 04:16 PM, Rob Crittenden wrote:
Ondrej Hamada wrote:
On 11/29/2011 10:33 PM, Rob Crittenden wrote:
Ondrej Hamada wrote:
On 11/11/2011 02:55 PM, Ondrej Hamada wrote:
https://fedorahosted.org/freeipa/ticket/2063
In order to check presence of nss_ldap when installing client with
'
On Wed, 30 Nov 2011, Martin Kosek wrote:
> On Wed, 2011-11-30 at 10:11 +0100, Sumit Bose wrote:
> > On Tue, Nov 29, 2011 at 11:25:41PM +0200, Alexander Bokovoy wrote:
> > > On Tue, 29 Nov 2011, Sumit Bose wrote:
> > > > @@ -199,10 +216,11 @@ class ADTRUSTInstance(service.Service):
> > > >
On Mon, 28 Nov 2011, Sumit Bose wrote:
> Hi,
>
> in IPAv3 we introduce a new attribute 'ipaNTHash' to store the NT hash.
> Currently the plugin handling the change password extended operation
> only sets and updates 'sambaNTPassword'. This patch add support for the
> new attribute without removing
26 matches
Mail list logo