Re: [Freeipa-devel] [PATCH] Patch to allow IPA to work with dogtag 10 on f18

2012-08-15 Thread Martin Kosek
On 08/16/2012 05:41 AM, Ade Lee wrote: > On Wed, 2012-08-15 at 16:34 +0200, Martin Kosek wrote: .. 3) I had installed IPA with dogtag10 on master. Replica had dogtag10 as well and I got the following error: # ipa-ca-install /home/mkosek/replica-info-vm-114.idm.lab.bo

Re: [Freeipa-devel] [PATCH] Patch to allow IPA to work with dogtag 10 on f18

2012-08-15 Thread Ade Lee
On Wed, 2012-08-15 at 23:41 -0400, Ade Lee wrote: > On Wed, 2012-08-15 at 16:34 +0200, Martin Kosek wrote: > > On 08/15/2012 03:54 PM, Ade Lee wrote: > > > On Wed, 2012-08-15 at 13:24 +0200, Martin Kosek wrote: > > >> On 08/08/2012 10:05 PM, Ade Lee wrote: > > >>> Hi, > > >>> > > >>> Dogtag 10 is

Re: [Freeipa-devel] [PATCH] Patch to allow IPA to work with dogtag 10 on f18

2012-08-15 Thread Ade Lee
On Wed, 2012-08-15 at 16:34 +0200, Martin Kosek wrote: > On 08/15/2012 03:54 PM, Ade Lee wrote: > > On Wed, 2012-08-15 at 13:24 +0200, Martin Kosek wrote: > >> On 08/08/2012 10:05 PM, Ade Lee wrote: > >>> Hi, > >>> > >>> Dogtag 10 is being released on f18, and has a number of changes that > >>> wi

[Freeipa-devel] [PATCH 77] Ticket #2584 - Installation fails when CN is set in, certificate subject base

2012-08-15 Thread John Dennis
-- John Dennis Looking to carve out IT costs? www.redhat.com/carveoutcosts/ >From 32cf59ac8963982d2de59562f3f1570e67e92a3e Mon Sep 17 00:00:00 2001 From: John Dennis Date: Wed, 15 Aug 2012 21:33:15 -0400 Subject: [PATCH 77] Ticket #2584 - Installation fails when CN is set in certificate subje

[Freeipa-devel] [PATCH] 1045 selinuxusermap fixes

2012-08-15 Thread Rob Crittenden
Fix setting the user in a rule using setattr. We weren't verifying that it was in the ordered list. I also noticed that no mls was allowed when it shouldn't be. Made that required. rob >From 4fa293408f3605ef52bf2aec42305562414f7bae Mon Sep 17 00:00:00 2001 From: Rob Crittenden Date: Wed, 15

[Freeipa-devel] [PATCH] 1044 DN ldap syntax exception

2012-08-15 Thread Rob Crittenden
Raise the proper IPA exception when a value isn't a valid DN. rob >From 916f1e9b80c0f8bc88da2651a44d0d33ad3bec30 Mon Sep 17 00:00:00 2001 From: Rob Crittenden Date: Wed, 15 Aug 2012 16:30:24 -0400 Subject: [PATCH] Raise proper exception when given a bad DN attribute. --- ipalib/plugins/baselda

[Freeipa-devel] [PATCH] 1043 fix ipa-replica-manage connect

2012-08-15 Thread Rob Crittenden
A dn needed to be converted to a DN object. rob >From f242875811f887d80328eb84c96efdfd0ad5fa72 Mon Sep 17 00:00:00 2001 From: Rob Crittenden Date: Wed, 15 Aug 2012 13:56:04 -0400 Subject: [PATCH] Use DN object for Directory Manager in ipa-replica-manage connect command --- install/tools/ipa-r

Re: [Freeipa-devel] [PATCH] Patch to allow IPA to work with dogtag 10 on f18

2012-08-15 Thread Martin Kosek
On 08/15/2012 03:54 PM, Ade Lee wrote: > On Wed, 2012-08-15 at 13:24 +0200, Martin Kosek wrote: >> On 08/08/2012 10:05 PM, Ade Lee wrote: >>> Hi, >>> >>> Dogtag 10 is being released on f18, and has a number of changes that >>> will affect IPA. In particular, the following changes will affect >>>

Re: [Freeipa-devel] [PATCH 0046] Separate RR data parsing from LDAP connections

2012-08-15 Thread Petr Spacek
On 08/15/2012 03:31 PM, Adam Tkac wrote: On Wed, Aug 01, 2012 at 04:19:11PM +0200, Petr Spacek wrote: Hello, this patch finishes LDAP connection vs. LDAP result separation. It is first step necessary for: https://fedorahosted.org/bind-dyndb-ldap/ticket/68 Avoid manual connection management out

Re: [Freeipa-devel] [PATCH 0042] Flush zones and RRs cache when handling persistent search reconnection

2012-08-15 Thread Petr Spacek
On 08/15/2012 03:11 PM, Adam Tkac wrote: On Fri, Jul 27, 2012 at 12:16:07PM +0200, Petr Spacek wrote: Hello, this patch implements "Flush zones and RRs cache when handling persistent search reconnection" behaviour as requested in ticket https://fedorahosted.org/bind-dyndb-ldap/ticket/44 . Petr

Re: [Freeipa-devel] [PATCH] Patch to allow IPA to work with dogtag 10 on f18

2012-08-15 Thread Ade Lee
On Wed, 2012-08-15 at 13:24 +0200, Martin Kosek wrote: > On 08/08/2012 10:05 PM, Ade Lee wrote: > > Hi, > > > > Dogtag 10 is being released on f18, and has a number of changes that > > will affect IPA. In particular, the following changes will affect > > current IPA code. > > > > * The directo

Re: [Freeipa-devel] [PATCH 0044] Fix and comment ispersistent() call in LDAP driver interface

2012-08-15 Thread Petr Spacek
On 08/15/2012 03:13 PM, Adam Tkac wrote: On Fri, Jul 27, 2012 at 03:06:05PM +0200, Petr Spacek wrote: Hello, this patch fixes ispersistent() call in LDAP driver interface. We were lucky, because ISC_R_NOTIMPLEMENTED is evaluated as ISC_TRUE every time, but I want to be sure. Petr^2 Spacek A

Re: [Freeipa-devel] [PATCH 0043] Extend API to be compatible with libdns interface >= 90

2012-08-15 Thread Petr Spacek
On 08/15/2012 03:11 PM, Adam Tkac wrote: On Fri, Jul 27, 2012 at 02:23:49PM +0200, Petr Spacek wrote: Hello, this patch prevents compiler warning on systems with libdns interface version >= 90. This libdns version comes with BIND 9.0.0. Both new methods are not obligatory, see in bind/lib/dns/

Re: [Freeipa-devel] [PATCH 0046] Separate RR data parsing from LDAP connections

2012-08-15 Thread Adam Tkac
On Wed, Aug 01, 2012 at 04:19:11PM +0200, Petr Spacek wrote: > Hello, > > this patch finishes LDAP connection vs. LDAP result separation. > > It is first step necessary for: > https://fedorahosted.org/bind-dyndb-ldap/ticket/68 > Avoid manual connection management outside ldap_query() > > It shou

Re: [Freeipa-devel] [PATCH 0044] Fix and comment ispersistent() call in LDAP driver interface

2012-08-15 Thread Adam Tkac
On Fri, Jul 27, 2012 at 03:06:05PM +0200, Petr Spacek wrote: > Hello, > > this patch fixes ispersistent() call in LDAP driver interface. > > We were lucky, because ISC_R_NOTIMPLEMENTED is evaluated as ISC_TRUE > every time, but I want to be sure. > > Petr^2 Spacek Ack > From bfa32f2fa7d880a5c1

Re: [Freeipa-devel] [PATCH 0042] Flush zones and RRs cache when handling persistent search reconnection

2012-08-15 Thread Adam Tkac
On Fri, Jul 27, 2012 at 12:16:07PM +0200, Petr Spacek wrote: > Hello, > > this patch implements "Flush zones and RRs cache when handling > persistent search reconnection" behaviour as requested > in ticket https://fedorahosted.org/bind-dyndb-ldap/ticket/44 . > > Petr^2 Spacek > +isc_result_t > +

Re: [Freeipa-devel] [PATCH 0043] Extend API to be compatible with libdns interface >= 90

2012-08-15 Thread Adam Tkac
On Fri, Jul 27, 2012 at 02:23:49PM +0200, Petr Spacek wrote: > Hello, > > this patch prevents compiler warning on systems with libdns > interface version >= 90. This libdns version comes with BIND 9.0.0. > > Both new methods are not obligatory, see in bind/lib/dns/db.c, > functions dns_db_findext

Re: [Freeipa-devel] [PATCH] Patch to allow IPA to work with dogtag 10 on f18

2012-08-15 Thread Martin Kosek
On 08/08/2012 10:05 PM, Ade Lee wrote: > Hi, > > Dogtag 10 is being released on f18, and has a number of changes that > will affect IPA. In particular, the following changes will affect > current IPA code. > > * The directory layout of the dogtag instance has changed. Instead of > using separ

[Freeipa-devel] [PATCH 0053] Use richer set of return codes for LDAP connection error handling code

2012-08-15 Thread Petr Spacek
Hello, current code return very generic ISC_R_FAILURE code in nearly all (error) cases. This patch distinguishes between different LDAP errors and returns richer set of return codes from LDAP connection error handling code. It should lead to clearer log messages. Petr^2 Spacek From 15d6b38c9

[Freeipa-devel] [PATCH 0051-0052] Log successful reconnection to LDAP server

2012-08-15 Thread Petr Spacek
Hello, this two patches solves upstream ticket https://fedorahosted.org/bind-dyndb-ldap/ticket/71 "Log successful reconnect" Patch 51: Adds log_info(): logging facility with log level INFO. Patch 52: Logs successful reconnection to LDAP server. LDAP connection error handling was mo

Re: [Freeipa-devel] [PATCH 0042] Flush zones and RRs cache when handling persistent search reconnection

2012-08-15 Thread Simo Sorce
- Original Message - > On 08/14/2012 08:25 PM, Simo Sorce wrote: > > See man ldap_result, the entries return with type > > LDAP_RES_SEARCH_ENTRY, the last message is instead > > LDAP_RES_SEARCH_RESULT which tells you the searc is complete. > > > > This last message is never sent for a persi

Re: [Freeipa-devel] [PATCH 0042] Flush zones and RRs cache when handling persistent search reconnection

2012-08-15 Thread Petr Spacek
On 08/14/2012 08:25 PM, Simo Sorce wrote: On 08/12/2012 11:59 AM, Simo Sorce wrote: On 07/27/2012 12:15 PM, Petr Spacek wrote: Hello, this patch implements "Flush zones and RRs cache when handling persistent search reconnection" behaviour as requested in ticket https://fedorahosted.org/bind-dy