Re: [Freeipa-devel] [PATCH] 1012 validate domain in installer

2012-05-17 Thread Martin Kosek
On Wed, 2012-05-16 at 14:04 -0400, Rob Crittenden wrote: Martin Kosek wrote: On Mon, 2012-05-14 at 17:29 -0400, Rob Crittenden wrote: Martin Kosek wrote: On Fri, 2012-05-11 at 16:03 -0400, Rob Crittenden wrote: Use our domain validator to validate the domain name we get in the

Re: [Freeipa-devel] [PATCH] 1016 check for replication agreements

2012-05-17 Thread Martin Kosek
On Thu, 2012-05-17 at 10:52 -0400, Rob Crittenden wrote: Martin Kosek wrote: On Wed, 2012-05-16 at 18:25 -0400, Rob Crittenden wrote: In ipa-replica-install we infer that a replication agreement exists if the host exists. Add an explicit check instead. What I did to test this was to

[Freeipa-devel] [PATCH] 1017 fix handling of unlocked users

2012-05-17 Thread Rob Crittenden
There was a problem in admin-unlocked accounts in that while still in the lock duration they would never be re-locked. More info in the patch. rob From d649a17bc0b9b339c91ba1df328c31af9808ea93 Mon Sep 17 00:00:00 2001 From: Rob Crittenden rcrit...@redhat.com Date: Thu, 17 May 2012 13:17:21

[Freeipa-devel] [PATCH] 1018 enforce sizelimit when searching for permissions

2012-05-17 Thread Rob Crittenden
We do two searches when looking for permissions. One within the permission object itself and a second in the ACIs. We weren't enforcing a sizelimit on either search. rob From 0da6bac9acf5fc6696761a7fa4a14b54863d3018 Mon Sep 17 00:00:00 2001 From: Rob Crittenden rcrit...@redhat.com Date: Thu,