Re: [Freeipa-devel] [PATCH] 1024 add client session support

2012-06-13 Thread Martin Kosek
On Tue, 2012-06-12 at 14:10 -0400, Rob Crittenden wrote: Petr Viktorin wrote: On 06/11/2012 06:49 PM, Martin Kosek wrote: On Thu, 2012-06-07 at 22:55 -0400, Rob Crittenden wrote: Rob Crittenden wrote: Rob Crittenden wrote: This adds client session support. The session key is stored in

Re: [Freeipa-devel] [PATCH] 272-273 Add service membership to host objects

2012-06-13 Thread Martin Kosek
On Mon, 2012-06-11 at 14:37 -0400, Rob Crittenden wrote: Martin Kosek wrote: On Wed, 2012-06-06 at 09:11 +0200, Petr Vobornik wrote: On 06/06/2012 08:01 AM, Martin Kosek wrote: On Tue, 2012-06-05 at 17:35 -0400, Rob Crittenden wrote: Martin Kosek wrote: This set of patches 1) Adds a

Re: [Freeipa-devel] [PATCH] move samba4-specific python code to a subpackage

2012-06-13 Thread Sumit Bose
On Tue, Jun 12, 2012 at 04:08:12PM +0300, Alexander Bokovoy wrote: DCERPC code in AD trusts implementation depends on Samba 4 Python bindings. Make this dependency optional for main freeipa-server package by moving the dependency to freeipa-server-trust-ad subpackage. Main interface to AD

Re: [Freeipa-devel] [PATCH] move samba4-specific python code to a subpackage

2012-06-13 Thread Alexander Bokovoy
On Wed, 13 Jun 2012, Sumit Bose wrote: On Tue, Jun 12, 2012 at 04:08:12PM +0300, Alexander Bokovoy wrote: DCERPC code in AD trusts implementation depends on Samba 4 Python bindings. Make this dependency optional for main freeipa-server package by moving the dependency to

[Freeipa-devel] httpd sometimes returns 400 Bad Request

2012-06-13 Thread Martin Kosek
Hello all, when I created a new F17 VM this week, httpd started to sometimes return a 400 Bad Request error (some header parsing error) even though the request was OK. This happens for requests via web browsers, CLI XMLRPC interface or JSON-RPC interface. I logged a bugzilla:

Re: [Freeipa-devel] [PATCH] 157 Added password reset capabilities to unauthorized dialog

2012-06-13 Thread Petr Vobornik
I'll address all issues once we decide on the solution. On 06/13/2012 01:24 AM, Endi Sukma Dewata wrote: On 6/8/2012 10:52 AM, Petr Vobornik wrote: and now the patch... On 06/08/2012 05:51 PM, Petr Vobornik wrote: For those of you who are only interest in user perspective I prepared a set of

Re: [Freeipa-devel] [PATCH] 272-273 Add service membership to host objects

2012-06-13 Thread Rob Crittenden
Martin Kosek wrote: On Mon, 2012-06-11 at 14:37 -0400, Rob Crittenden wrote: Martin Kosek wrote: On Wed, 2012-06-06 at 09:11 +0200, Petr Vobornik wrote: On 06/06/2012 08:01 AM, Martin Kosek wrote: On Tue, 2012-06-05 at 17:35 -0400, Rob Crittenden wrote: Martin Kosek wrote: This set of

Re: [Freeipa-devel] [PATCH] 158 Separate reset password page

2012-06-13 Thread Petr Vobornik
On 06/13/2012 01:25 AM, Endi Sukma Dewata wrote: On 6/8/2012 10:54 AM, Petr Vobornik wrote: This patch adds separate reset password page. It is a complement to separate login page. It differentiate from reset password capabilities in Web UI's anauthorized dialog by not performing login. This is

Re: [Freeipa-devel] [PATCH] 275 Do not crash in Decimal parameter conversion

2012-06-13 Thread Martin Kosek
On Thu, 2012-06-07 at 22:38 -0400, Rob Crittenden wrote: Martin Kosek wrote: When invalid data is passed, an unhandled decimal exception could be raised in Decimal number conversion. Handle the exception more gracefully and report proper ipalib.errors.ConversionError.

Re: [Freeipa-devel] [PATCH] 155 Action panel for host enrollment

2012-06-13 Thread Petr Vobornik
On 06/13/2012 01:24 AM, Endi Sukma Dewata wrote: On 6/6/2012 10:59 AM, Petr Vobornik wrote: Widgets in host enrollment sections were modified. They now serve only for displaying of has_key and has_password status. Functionality for setting otp and unprovisioning was moved to separate dialogs.

Re: [Freeipa-devel] [PATCH] 156 Action panel for service provisioning

2012-06-13 Thread Petr Vobornik
On 06/13/2012 01:24 AM, Endi Sukma Dewata wrote: On 6/7/2012 3:52 AM, Petr Vobornik wrote: Service provisioning status widget was modified only to display the has_keytab status. Button for 'delete key,unprovision' was moved as action to newly created action panel in the same section. This

Re: [Freeipa-devel] [PATCH] 1024 add client session support

2012-06-13 Thread Rob Crittenden
Martin Kosek wrote: On Tue, 2012-06-12 at 14:10 -0400, Rob Crittenden wrote: Petr Viktorin wrote: On 06/11/2012 06:49 PM, Martin Kosek wrote: On Thu, 2012-06-07 at 22:55 -0400, Rob Crittenden wrote: Rob Crittenden wrote: Rob Crittenden wrote: This adds client session support. The session

Re: [Freeipa-devel] [PATCH] 157 Added password reset capabilities to unauthorized dialog

2012-06-13 Thread Endi Sukma Dewata
On 6/13/2012 8:15 AM, Petr Vobornik wrote: I'll address all issues once we decide on the solution. 1. If you click 'form-based authentication the dialog title still shows 'Kerberos ticket no longer valid' which is not relevant for form-based authentication. It might be better to use 'Login' as

Re: [Freeipa-devel] [PATCH] 158 Separate reset password page

2012-06-13 Thread Endi Sukma Dewata
On 6/13/2012 8:32 AM, Petr Vobornik wrote: On 06/13/2012 01:25 AM, Endi Sukma Dewata wrote: On 6/8/2012 10:54 AM, Petr Vobornik wrote: This patch adds separate reset password page. It is a complement to separate login page. It differentiate from reset password capabilities in Web UI's

[Freeipa-devel] [PATCHES] 22-24 Add initial support for ID ranges

2012-06-13 Thread Sumit Bose
Hi, to keep track of the different ranges we use for UIDs/GIDs for local users/groups and users from trusted domains new range objects are introduced which are stored below cn=range,cn=etc,$SUFFIX. 0022: LDAP schema update 0023: Create a range object during installation fir the local ID range

Re: [Freeipa-devel] [PATCH] 1024 add client session support

2012-06-13 Thread Rob Crittenden
Rob Crittenden wrote: Martin Kosek wrote: On Tue, 2012-06-12 at 14:10 -0400, Rob Crittenden wrote: Petr Viktorin wrote: On 06/11/2012 06:49 PM, Martin Kosek wrote: On Thu, 2012-06-07 at 22:55 -0400, Rob Crittenden wrote: Rob Crittenden wrote: Rob Crittenden wrote: This adds client session

Re: [Freeipa-devel] [PATCH] 0062 Don't crash when server returns extra output

2012-06-13 Thread Rob Crittenden
Petr Viktorin wrote: On 06/12/2012 02:38 PM, Simo Sorce wrote: On Tue, 2012-06-12 at 13:12 +0200, Petr Viktorin wrote: This will make older clients usable if new output items get added to commands. Since there might be important information in the extra output, it's not ignored as the ticket

Re: [Freeipa-devel] [PATCH] 275 Do not crash in Decimal parameter conversion

2012-06-13 Thread Rob Crittenden
Martin Kosek wrote: On Thu, 2012-06-07 at 22:38 -0400, Rob Crittenden wrote: Martin Kosek wrote: When invalid data is passed, an unhandled decimal exception could be raised in Decimal number conversion. Handle the exception more gracefully and report proper ipalib.errors.ConversionError.

Re: [Freeipa-devel] [PATCHES] 22-24 Add initial support for ID ranges

2012-06-13 Thread Simo Sorce
On Wed, 2012-06-13 at 21:17 +0200, Sumit Bose wrote: The ipa*IDRange objectclasses will be used to store the used Posix ID ranges of the local domains (ipaLocalIDrange) or the ranges reserved for AD domains (ipaNTIDrange). To be able to map the Posix IDs to a RID and back the corresponding

Re: [Freeipa-devel] [PATCHES] 22-24 Add initial support for ID ranges

2012-06-13 Thread Simo Sorce
On Wed, 2012-06-13 at 21:17 +0200, Sumit Bose wrote: to keep track of the different ranges we use for UIDs/GIDs for local users/groups and users from trusted domains new range objects are introduced which are stored below cn=range,cn=etc,$SUFFIX. 0022: LDAP schema update ack 0023: