[Freeipa-devel] [PATCH] 255 Improve error message in zonemgr validator

2012-04-30 Thread Martin Kosek
This patch consolidates zonemgr function to move the most of the checks to common functions in order to provide consistent output. The error messages produced by the validator should now be more helpful when identifying the source of error. https://fedorahosted.org/freeipa/ticket/1966 From

[Freeipa-devel] [PATCH] 0044 Validate externalhost (when added by --addattr/--setattr)

2012-04-30 Thread Petr Viktorin
Change the externalhost attribute of hbacrule, netgroup and sudorule into a full-fledged Parameter, and attach a validator to it. RFC 1123 specifies that only [-a-z0-9] are allowed, but apparently Windows and some phones also use underscores in hostnames. So the new validator allows the

Re: [Freeipa-devel] [PATCHES] 0042-43 Fix internal server errors with empty options

2012-04-30 Thread Petr Viktorin
On 04/27/2012 03:23 PM, Petr Viktorin wrote: Empty values in reverse_member options, and attattr/setattr/delattr, caused internal server errors. We convert empty values to None and bypass normal validation, so they need special care. https://fedorahosted.org/freeipa/ticket/2680

Re: [Freeipa-devel] [PATCH] 255 Improve error message in zonemgr validator

2012-04-30 Thread Martin Kosek
On Mon, 2012-04-30 at 14:02 +0200, Martin Kosek wrote: This patch consolidates zonemgr function to move the most of the checks to common functions in order to provide consistent output. The error messages produced by the validator should now be more helpful when identifying the source of

[Freeipa-devel] [PATCH] reverted patches for ticket 2293

2012-04-30 Thread Rob Crittenden
I pushed out reverts for 2 patches in ticket https://fedorahosted.org/freeipa/ticket/2293 to master and ipa-2-2. We are going to take a different approach to this problem. Rather than trying to restrict permissions to a set of attributes, which can change over time, we are going to warn when

Re: [Freeipa-devel] [PATCH] 255 Improve error message in zonemgr validator

2012-04-30 Thread Martin Kosek
On Mon, 2012-04-30 at 16:29 +0200, Martin Kosek wrote: On Mon, 2012-04-30 at 14:02 +0200, Martin Kosek wrote: This patch consolidates zonemgr function to move the most of the checks to common functions in order to provide consistent output. The error messages produced by the validator

[Freeipa-devel] [PATCH] Set the KerberosAuthentication option in sshd_config to no instead of yes

2012-04-30 Thread Jan Cholasta
Setting the option to yes causes sshd to handle kinits itself, bypassing SSSD. https://fedorahosted.org/freeipa/ticket/2689 Honza -- Jan Cholasta From 9f69b7e77a989c5dbd84942de170a409ad52d22f Mon Sep 17 00:00:00 2001 From: Jan Cholasta jchol...@redhat.com Date: Mon, 30 Apr 2012 11:58:55 -0400

Re: [Freeipa-devel] [PATCH] 255 Improve error message in zonemgr validator

2012-04-30 Thread Rob Crittenden
Martin Kosek wrote: On Mon, 2012-04-30 at 16:29 +0200, Martin Kosek wrote: On Mon, 2012-04-30 at 14:02 +0200, Martin Kosek wrote: This patch consolidates zonemgr function to move the most of the checks to common functions in order to provide consistent output. The error messages produced by

Re: [Freeipa-devel] [PATCH] Set the KerberosAuthentication option in sshd_config to no instead of yes

2012-04-30 Thread Rob Crittenden
Jan Cholasta wrote: Setting the option to yes causes sshd to handle kinits itself, bypassing SSSD. https://fedorahosted.org/freeipa/ticket/2689 Honza ACK, pushed to master and ipa-2-2 ___ Freeipa-devel mailing list Freeipa-devel@redhat.com