Re: [Freeipa-devel] [PATCH] 998 certmonger restarts services on renewal

2012-04-06 Thread Martin Kosek
On Thu, 2012-04-05 at 16:47 -0400, Rob Crittenden wrote: Rob Crittenden wrote: Martin Kosek wrote: On Tue, 2012-04-03 at 10:45 -0400, Rob Crittenden wrote: Rob Crittenden wrote: Martin Kosek wrote: On Mon, 2012-04-02 at 15:36 -0400, Rob Crittenden wrote: Rob Crittenden wrote: Martin

Re: [Freeipa-devel] [PATCH 72] Validate DN RDN parameters for migrate command

2012-04-06 Thread Martin Kosek
On Thu, 2012-04-05 at 21:26 -0400, John Dennis wrote: ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel 1) We still crash when the parameter is empty. We may want to make it required (the

[Freeipa-devel] [PATCH] 0034 Limit permission and selfservice names

2012-04-06 Thread Petr Viktorin
https://fedorahosted.org/freeipa/ticket/2585: ipa permission-add throws internal server error when name contains '', '' or other special characters. The problem is, of course, proper escaping; not only in DNs but also in ACIs. Right now we don't really do either. This patch is just a simple

Re: [Freeipa-devel] [PATCH] 1003 return consistent value in netgroup triple

2012-04-06 Thread Jan Cholasta
On 5.4.2012 20:55, Rob Crittenden wrote: Jan Cholasta wrote: On 5.4.2012 17:04, Rob Crittenden wrote: When constructing netgroup triples with hostcat or usercat set to all we weren't setting the user/host part of the triple correctly. The first entry would have '' as the host/user value as

Re: [Freeipa-devel] [PATCH] 74 Check configured maximum user login length on user rename

2012-04-06 Thread Jan Cholasta
On 5.4.2012 23:38, Rob Crittenden wrote: Jan Cholasta wrote: https://fedorahosted.org/freeipa/ticket/2587 Honza This looks ok, it would be nice to have a unit test. rob Test added. Honza -- Jan Cholasta From bdb9fa42a4bc892a97ffe5f3d6721b24ed1686a9 Mon Sep 17 00:00:00 2001 From: Jan

Re: [Freeipa-devel] [PATCH 72] Validate DN RDN parameters for migrate command

2012-04-06 Thread John Dennis
On 04/06/2012 04:40 AM, Martin Kosek wrote: 1) We still crash when the parameter is empty. We may want to make it required (the same fix Rob did for cert rejection reason): # echo secret123 | ipa migrate-ds ldap://vm-054.idm.lab.bos.redhat.com --with-compat --base-dn=dc=greyoak,dc=com

Re: [Freeipa-devel] More types of replica in FreeIPA

2012-04-06 Thread Ondrej Hamada
On 04/04/2012 06:16 PM, Ondrej Hamada wrote: On 04/04/2012 03:02 PM, Simo Sorce wrote: On Tue, 2012-04-03 at 18:45 +0200, Ondrej Hamada wrote: On 03/13/2012 01:13 AM, Dmitri Pal wrote: On 03/12/2012 06:10 PM, Simo Sorce wrote: On Mon, 2012-03-12 at 17:40 -0400, Dmitri Pal wrote: On