Re: [Freeipa-devel] [DRAFT] Per-domain DNS update permissions

2012-06-18 Thread Martin Kosek
On Fri, 2012-06-15 at 10:15 -0400, Simo Sorce wrote: On Fri, 2012-06-15 at 15:22 +0200, Martin Kosek wrote: Hello all, In a scope of ticket 2511 I would like to implement an ability to delegate a DNS update permissions to chosen user (or host) without having to give the user full

Re: [Freeipa-devel] [PATCH] 1026 increase header limit

2012-06-18 Thread Martin Kosek
On Thu, 2012-06-14 at 11:39 -0400, Rob Crittenden wrote: Increase the request header limit to accommodate a 64KiB PAC. It's hard to test this outside of trust but you can do a reverse test to be sure this is doing anything by setting the limit to 10. You should get a 400 error back. And

[Freeipa-devel] Wiki account request

2012-06-18 Thread James Hogarth
Hi, I just finished implementing name based virtual hosts with SSL (via SNI) and individual keytabs for authentication with IPA handling the certificates (via dogtag/certmonger). It was suggested on IRC this might be useful to add to the wiki. Please could an account be created so that I

Re: [Freeipa-devel] Wiki account request

2012-06-18 Thread Rob Crittenden
James Hogarth wrote: Hi, I just finished implementing name based virtual hosts with SSL (via SNI) and individual keytabs for authentication with IPA handling the certificates (via dogtag/certmonger). It was suggested on IRC this might be useful to add to the wiki. Please could an account

Re: [Freeipa-devel] [PATCH] 0056 Framework for admin/install tools, with ipa-ldap-updater

2012-06-18 Thread Petr Viktorin
On 06/04/2012 04:56 PM, Petr Viktorin wrote: Currently, FreeIPA's install/admin scripts are long pieces of code that aren't very reusable, importable, or testable. They have been extended over time with features such as logging and error handling, but since each tool was extended individually,

Re: [Freeipa-devel] [SSSD] Announcing SSSD 1.9.0 beta 2

2012-06-18 Thread Stephen Gallagher
Ok, I have a bit of egg on my face here. I accidentally pushed a patch related to the Kerberos DIR cache support that had a debugging #if 0 left in it. Because of this, DIR cache support is actually non-functional in 1.9.0 beta 2. I'm attaching a patch to fix this to this email (already pushed

Re: [Freeipa-devel] [DRAFT] Per-domain DNS update permissions

2012-06-18 Thread Rob Crittenden
Martin Kosek wrote: On Fri, 2012-06-15 at 10:15 -0400, Simo Sorce wrote: On Fri, 2012-06-15 at 15:22 +0200, Martin Kosek wrote: Hello all, In a scope of ticket 2511 I would like to implement an ability to delegate a DNS update permissions to chosen user (or host) without having to give the

Re: [Freeipa-devel] [PATCH] 0061, 63 Improve ipa-client-install debug output

2012-06-18 Thread Rob Crittenden
Petr Viktorin wrote: On 06/12/2012 11:14 PM, Rob Crittenden wrote: Petr Viktorin wrote: I went through all the output/debug messages in ipa-client-install, removed duplicates, and routed them through the log manager. I used these log levels: DEBUG - detailed messages the user probably doesn't

[Freeipa-devel] [PATCH] 1027 add logging to ipa-upgradeconfig

2012-06-18 Thread Rob Crittenden
Add some additional logging to ipa-upgradeconfig and have it update /var/log/ipaupgrade.log so we can see what an upgrade has already done. rob From 3c85401bf62577acc4c8dd6ca62f166a7cb48701 Mon Sep 17 00:00:00 2001 From: Rob Crittenden rcrit...@redhat.com Date: Mon, 18 Jun 2012 16:41:06 -0400