[Freeipa-devel] Freeipa wiki editing

2012-07-26 Thread Javier Ramirez
Hi, As per the instructions found at http://freeipa.com/page/Contribute , I send this email to request for a freeipa wiki account . I have some amends to make to http://freeipa.com/page/ConfiguringAixClients . Thanks. ___ Freeipa-devel mailing list

Re: [Freeipa-devel] slow response

2012-07-26 Thread Stephen Ingram
On Wed, Jul 25, 2012 at 4:31 AM, John Dennis jden...@redhat.com wrote: On 07/25/2012 02:59 AM, Stephen Ingram wrote: Seeing python2.7, I'm guessing these patches were against Fedora. Since I couldn't get them to apply against RH 6.3 I applied them by hand. I couldn't get the WebUI to load

Re: [Freeipa-devel] [PATCH 0041] Cleanup in logging code

2012-07-26 Thread Adam Tkac
On Wed, Jul 25, 2012 at 03:31:34PM +0200, Petr Spacek wrote: Hello, this patch clears logging code a bit. Adding functions like log_info() and similar will be trivial from now. It will be necessary for ticket #71: Log successful reconnect https://fedorahosted.org/bind-dyndb-ldap/ticket/71

Re: [Freeipa-devel] [PATCH 0041] Cleanup in logging code

2012-07-26 Thread Petr Spacek
On 07/26/2012 10:06 AM, Adam Tkac wrote: On Wed, Jul 25, 2012 at 03:31:34PM +0200, Petr Spacek wrote: Hello, this patch clears logging code a bit. Adding functions like log_info() and similar will be trivial from now. It will be necessary for ticket #71: Log successful reconnect

[Freeipa-devel] [PATCH] 0073 Update translations

2012-07-26 Thread Petr Viktorin
Update the pot to match current source, and pull translations from Transifex. Warning: when this patch is pushed, the source strings on Transifex will update. The old versions will be lost from the site. The patch is quite large (5MB), so I haven't attached it here (should I?). Please

[Freeipa-devel] [PATCH] 0065 Ensure ipa-adtrust-install is run with administrator privileges and Kerberos ticket

2012-07-26 Thread Alexander Bokovoy
Hi, When setting up AD trusts support, ipa-adtrust-install utility needs to be run as: - root, for performing Samba configuration and using LDAPI/autobind - kinit-ed IPA admin user, to ensure proper ACIs are granted to fetch keytab As result, we can get rid of Directory Manager

Re: [Freeipa-devel] [PATCH] 0073 Update translations

2012-07-26 Thread Petr Viktorin
On 07/26/2012 03:49 PM, Petr Viktorin wrote: On 07/26/2012 10:17 AM, Petr Viktorin wrote: Update the pot to match current source, and pull translations from Transifex. Warning: when this patch is pushed, the source strings on Transifex will update. The old versions will be lost from the site.

Re: [Freeipa-devel] [PATCH] 1033 renew CA subsystem certificates

2012-07-26 Thread Jan Cholasta
Dne 25.7.2012 22:58, Rob Crittenden napsal(a): Jan Cholasta wrote: Dne 25.7.2012 16:01, Rob Crittenden napsal(a): Petr Viktorin wrote: On 07/23/2012 10:03 PM, Rob Crittenden wrote: Rob Crittenden wrote: Andrew Wnuk wrote: On 07/16/2012 01:35 PM, Rob Crittenden wrote: Nalin Dahyabhai

[Freeipa-devel] [PATCH] Minor fix to sidgen plugin

2012-07-26 Thread Simo Sorce
Remove an unnecessary check that may give spurious failures on modified server where 999 is a valid ID. -- Simo Sorce * Red Hat, Inc. * New York From efbe4a5d21b8567f146c9170becd54e3dd671498 Mon Sep 17 00:00:00 2001 From: Simo Sorce sso...@redhat.com Date: Thu, 26 Jul 2012 14:30:39 -0400

Re: [Freeipa-devel] DN patch and documentation

2012-07-26 Thread John Dennis
On 07/11/2012 03:59 AM, Petr Viktorin wrote: I went over the changes to ipaserver/plugins/ldap2.py; now I can start the testing. I must ask about the wrapped _ext methods. I assume python-ldap exposes them only to mimic the C interface, which has them because C doesn't have default arguments.

Re: [Freeipa-devel] DN patch and documentation

2012-07-26 Thread John Dennis
On 07/17/2012 06:47 PM, John Dennis wrote: ipapython/dn.py: in docstring: DN(arg0, ..., locked=False, first_key_match=True) followed by: def __init__(self, *args, **kwds): and: kwds.get('first_key_match', True) I don't see the reason for this. Just write `def

Re: [Freeipa-devel] DN patch and documentation

2012-07-26 Thread John Dennis
I have applied the suggested fixes, rebased against master, run all the unit tests successfully, built RPM's, did a full install without errors, and brought up the web UI successfully. The current code can be found here: git clone git://fedorapeople.org/~jdennis/freeipa.dn.git git checkout dn

Re: [Freeipa-devel] [PATCH] Minor fix to sidgen plugin

2012-07-26 Thread Alexander Bokovoy
On Thu, 26 Jul 2012, Simo Sorce wrote: Remove an unnecessary check that may give spurious failures on modified server where 999 is a valid ID. ACK. -- / Alexander Bokovoy ___ Freeipa-devel mailing list Freeipa-devel@redhat.com

Re: [Freeipa-devel] [PATCH] 0065 Ensure ipa-adtrust-install is run with administrator privileges and Kerberos ticket

2012-07-26 Thread Alexander Bokovoy
On Thu, 26 Jul 2012, Alexander Bokovoy wrote: Hi, When setting up AD trusts support, ipa-adtrust-install utility needs to be run as: - root, for performing Samba configuration and using LDAPI/autobind - kinit-ed IPA admin user, to ensure proper ACIs are granted to fetch keytab As

Re: [Freeipa-devel] [PATCHES][RFC] Implement special operation to revoer NT hash for a user

2012-07-26 Thread Alexander Bokovoy
On Thu, 12 Jul 2012, Alexander Bokovoy wrote: On Thu, 12 Jul 2012, Simo Sorce wrote: On Thu, 2012-07-12 at 10:48 +0300, Alexander Bokovoy wrote: On Wed, 11 Jul 2012, Simo Sorce wrote: From 84ef09a1193ff42fc301fb71354055c5039f51a5 Mon Sep 17 00:00:00 2001 From: Simo Sorce sso...@redhat.com