Re: [Freeipa-devel] [PATCH] 277 Per-domain DNS record permissions

2012-06-18 Thread Martin Kosek
On Mon, 2012-06-18 at 11:37 -0400, Rob Crittenden wrote: > Martin Kosek wrote: > > On Fri, 2012-06-15 at 10:15 -0400, Simo Sorce wrote: > >> On Fri, 2012-06-15 at 15:22 +0200, Martin Kosek wrote: > >>> Hello all, > >>> > >>> In a scope of ticket 2511 I would like to implement an ability to > >>> de

Re: [Freeipa-devel] [PATCH] 158 Separate reset password page

2012-06-18 Thread Petr Vobornik
On 06/13/2012 07:22 PM, Endi Sukma Dewata wrote: On 6/13/2012 8:32 AM, Petr Vobornik wrote: On 06/13/2012 01:25 AM, Endi Sukma Dewata wrote: On 6/8/2012 10:54 AM, Petr Vobornik wrote: This patch adds separate reset password page. It is a complement to separate login page. It differentiate from

[Freeipa-devel] [PATCH] 1027 add logging to ipa-upgradeconfig

2012-06-18 Thread Rob Crittenden
Add some additional logging to ipa-upgradeconfig and have it update /var/log/ipaupgrade.log so we can see what an upgrade has already done. rob >From 3c85401bf62577acc4c8dd6ca62f166a7cb48701 Mon Sep 17 00:00:00 2001 From: Rob Crittenden Date: Mon, 18 Jun 2012 16:41:06 -0400 Subject: [PATCH] Add

Re: [Freeipa-devel] [PATCH] 275 Do not crash in Decimal parameter conversion

2012-06-18 Thread Rob Crittenden
Martin Kosek wrote: On Thu, 2012-06-14 at 09:05 -0400, Rob Crittenden wrote: Martin Kosek wrote: On Wed, 2012-06-13 at 18:05 -0400, Rob Crittenden wrote: Martin Kosek wrote: On Thu, 2012-06-07 at 22:38 -0400, Rob Crittenden wrote: Martin Kosek wrote: When invalid data is passed, an unhandle

Re: [Freeipa-devel] [PATCH] 0061, 63 Improve ipa-client-install debug output

2012-06-18 Thread Rob Crittenden
Petr Viktorin wrote: On 06/12/2012 11:14 PM, Rob Crittenden wrote: Petr Viktorin wrote: I went through all the output/debug messages in ipa-client-install, removed duplicates, and routed them through the log manager. I used these log levels: DEBUG - detailed messages the user probably doesn't

Re: [Freeipa-devel] [DRAFT] Per-domain DNS update permissions

2012-06-18 Thread Rob Crittenden
Martin Kosek wrote: On Fri, 2012-06-15 at 10:15 -0400, Simo Sorce wrote: On Fri, 2012-06-15 at 15:22 +0200, Martin Kosek wrote: Hello all, In a scope of ticket 2511 I would like to implement an ability to delegate a DNS update permissions to chosen user (or host) without having to give the use

Re: [Freeipa-devel] [SSSD] Announcing SSSD 1.9.0 beta 2

2012-06-18 Thread Stephen Gallagher
Ok, I have a bit of egg on my face here. I accidentally pushed a patch related to the Kerberos DIR cache support that had a debugging "#if 0" left in it. Because of this, DIR cache support is actually non-functional in 1.9.0 beta 2. I'm attaching a patch to fix this to this email (already pushed up

Re: [Freeipa-devel] [PATCH] 0056 Framework for admin/install tools, with ipa-ldap-updater

2012-06-18 Thread Petr Viktorin
On 06/04/2012 04:56 PM, Petr Viktorin wrote: Currently, FreeIPA's install/admin scripts are long pieces of code that aren't very reusable, importable, or testable. They have been extended over time with features such as logging and error handling, but since each tool was extended individually, th

Re: [Freeipa-devel] Wiki account request

2012-06-18 Thread Rob Crittenden
James Hogarth wrote: Hi, I just finished implementing name based virtual hosts with SSL (via SNI) and individual keytabs for authentication with IPA handling the certificates (via dogtag/certmonger). It was suggested on IRC this might be useful to add to the wiki. Please could an account b

[Freeipa-devel] Wiki account request

2012-06-18 Thread James Hogarth
Hi, I just finished implementing name based virtual hosts with SSL (via SNI) and individual keytabs for authentication with IPA handling the certificates (via dogtag/certmonger). It was suggested on IRC this might be useful to add to the wiki. Please could an account be created so that I can

Re: [Freeipa-devel] [PATCH] 1026 increase header limit

2012-06-18 Thread Martin Kosek
On Thu, 2012-06-14 at 11:39 -0400, Rob Crittenden wrote: > Increase the request header limit to accommodate a 64KiB PAC. > > It's hard to test this outside of trust but you can do a reverse test to > be sure this is doing anything by setting the limit to 10. You should > get a 400 error back. >