[Freeipa-devel] New Devel branch 2.2

Hello fellow developers, The Hunting Season for version 2.2 is officially open. I have just pushed the ipa-2-2 branch into the upstream git tree. The current version is set to 2.1.90 and will go up from there until we are ready to release FreeIPA version 2.2.0 The 2.1 branch is now officially

Re: [Freeipa-devel] [PATCH] [WIP] 182 Create per-type DNS API based on options

Martin Kosek wrote: On Wed, 2011-12-21 at 16:46 +0100, Martin Kosek wrote: This is a fully functional prototype of the new DNS API based on new options instead of new commands. It still has rough edges (missing tests, extended help) but should give a very good picture about the new API and

Re: [Freeipa-devel] [PATCH] 062-065 Ticket 1466 Validate AAAA records as valid IPv6 prior to sending to server

Endi Sukma Dewata wrote: On 1/10/2012 3:34 AM, Petr Vobornik wrote: Updated patch attached. ACK and pushed to master. We might be able to fix the create_add_command() in entity_adder dialog to iterate through the record's contents instead of using the fields list. Then you can customize the

Re: [Freeipa-devel] [PATCH] 066 Added support for memberof attribute in permission

Endi Sukma Dewata wrote: On 1/10/2012 3:11 AM, Petr Vobornik wrote: Updated patch attached. ACK and pushed to master. It looks like there's a server problem, in the details page setting the member of to empty will generate an error. pushed to ipa-2-2

Re: [Freeipa-devel] [PATCH] 337 Load user data and policies in a single batch.

Petr Vobornik wrote: On 01/10/2012 08:36 AM, Endi Sukma Dewata wrote: The user details facet has been modified to load the user data, password policy and Kerberos ticket policy in a single batch command. Ticket #703 ACK and pushed to master pushed to ipa-2-2

Re: [Freeipa-devel] [PATCH] s4u2proxy support

Alexander Bokovoy wrote: On Wed, 04 Jan 2012, Rob Crittenden wrote: +parser.add_option('--delegate', action='store_true', +help='Delegate the TGT to the IPA server', +) Otherwise ACK. Updated both patches. The first (914) to address Alexander's concern. The

Re: [Freeipa-devel] [PATCH] #2169 Fix PAC Validation

Simo Sorce wrote: PAC Validation was not correct for all cases. In order to test this patch you must use the krb5 packages in the ipa-devel repo as they contains some patches that were necessary to fix various issues with s4u2proxy cases including PAC verification. Fixes 2169 Simo. ACK

Re: [Freeipa-devel] [PATCH] #2170 Properly sign PACs

Simo Sorce wrote: The PAC signing code would fail to add the correct KDC checksum in the cross-realm TGT case. This was discovered while investigating s4u2proxy issues. This patch is dependent on patch 472 for ticket #2169 Fixes #2170 Simo. ACK

Re: [Freeipa-devel] [PATCH] #2169 Fix PAC Validation

On Wed, 2012-01-11 at 17:29 -0500, Rob Crittenden wrote: Simo Sorce wrote: PAC Validation was not correct for all cases. In order to test this patch you must use the krb5 packages in the ipa-devel repo as they contains some patches that were necessary to fix various issues with

Re: [Freeipa-devel] [PATCH] #2170 Properly sign PACs

On Wed, 2012-01-11 at 17:30 -0500, Rob Crittenden wrote: Simo Sorce wrote: The PAC signing code would fail to add the correct KDC checksum in the cross-realm TGT case. This was discovered while investigating s4u2proxy issues. This patch is dependent on patch 472 for ticket #2169

Re: [Freeipa-devel] New Devel branch 2.2

On 01/11/2012 02:32 PM, Simo Sorce wrote: Hello fellow developers, The Hunting Season for version 2.2 is officially open. I have just pushed the ipa-2-2 branch into the upstream git tree. The current version is set to 2.1.90 and will go up from there until we are ready to release FreeIPA

Re: [Freeipa-devel] [SSSD] New SSSD FAQ page in the works

On Tue, Jan 10, 2012 at 02:31:51PM -0500, Stephen Gallagher wrote: It's come up more than once that SSSD needs a Frequently Asked Questions page to field some of our more common questions. I'm reaching out to the SSSD and FreeIPA user and developer communities to help us flesh out this page.