Re: [Freeipa-devel] [PATCH] 1031 run cleanallruv task

2012-09-07 Thread Martin Kosek
On Thu, 2012-09-06 at 17:17 -0400, Rob Crittenden wrote: Martin Kosek wrote: On 09/06/2012 05:55 PM, Rob Crittenden wrote: Rob Crittenden wrote: Rob Crittenden wrote: Martin Kosek wrote: On 09/05/2012 08:06 PM, Rob Crittenden wrote: Rob Crittenden wrote: Martin Kosek wrote: On

Re: [Freeipa-devel] [PATCH] 1050 prevent replica orphans

2012-09-07 Thread Martin Kosek
On Thu, 2012-09-06 at 17:22 -0400, Rob Crittenden wrote: Martin Kosek wrote: On 08/31/2012 07:40 PM, Rob Crittenden wrote: Rob Crittenden wrote: It was possible use ipa-replica-manage connect/disconnect/del to end up orphaning or or more IPA masters. This is an attempt to catch and

Re: [Freeipa-devel] [PATCH] 1052 add version to prepared replica files

2012-09-07 Thread Martin Kosek
On Fri, 2012-08-31 at 13:49 -0400, Rob Crittenden wrote: When installing a replica in an upgrade situation we want to be sure we install the same version or higher. This will have to bake a bit until the next full version of IPA but the idea is to prevent installing a newer replica file on

Re: [Freeipa-devel] [PATCH] 305 Update DNS zone allow-query validation test

2012-09-07 Thread Martin Kosek
On Thu, 2012-09-06 at 14:00 +0200, Martin Kosek wrote: On 09/06/2012 01:35 PM, Petr Vobornik wrote: On 09/06/2012 11:51 AM, Martin Kosek wrote: Loopback address, localhost and localnets ACIs are no longer an issue for bind-dyndb-ldap. Allow them in our validators. Martin's patch

[Freeipa-devel] [PATCH] 211 Prevent opening of multiple dirty dialogs on navigation

2012-09-07 Thread Petr Vobornik
Facets which performs AJAX call after update refresh (clear dirty state) after calling callback of dirty dialog. It might lead to multiple openings of dirty dialog. Assuming that calling dirty dialog's callback can be evaluated as dirty state is gone, we can call reset in the callback to

Re: [Freeipa-devel] [PATCH] 306 Cast DNS SOA serial maximum boundary to long

2012-09-07 Thread Martin Kosek
On Fri, 2012-09-07 at 09:38 -0400, Rob Crittenden wrote: Martin Kosek wrote: This will fix i386 builds where the SOA serial value written in API.txt was already of a long type while on x86_64 it was still of an int type. -- I verified that IPA now builds both on i386 and x86_64

Re: [Freeipa-devel] [PATCH] 306 Cast DNS SOA serial maximum boundary to long

2012-09-07 Thread Rob Crittenden
Martin Kosek wrote: This will fix i386 builds where the SOA serial value written in API.txt was already of a long type while on x86_64 it was still of an int type. -- I verified that IPA now builds both on i386 and x86_64 platforms. Martin ACK

Re: [Freeipa-devel] [PATCH] 83 Use OpenSSH-style public keys as the preferred format of SSH public keys

2012-09-07 Thread Jan Cholasta
Dne 6.9.2012 17:47, Jan Cholasta napsal(a): Dne 5.9.2012 22:57, Rob Crittenden napsal(a): Jan Cholasta wrote: Hi, this patch changes the format of the sshpubkey parameter to the format used by OpenSSH (see sshd(8)). Public keys in the old format (raw RFC 4253 blob) are automatically

Re: [Freeipa-devel] [PATCH] 1048 update certificate renewal scripts

2012-09-07 Thread Jan Cholasta
Dne 24.8.2012 23:52, Rob Crittenden napsal(a): A couple of issues were found in the CA renewal scripts. The api wasn't being initialized so restart_dirsrv() didn't have access to api.env.startup_timeout() I believe it was I who mislead you into removing it when I reviewed the original CA

Re: [Freeipa-devel] [PATCH] 1048 update certificate renewal scripts

2012-09-07 Thread Rob Crittenden
Jan Cholasta wrote: Dne 24.8.2012 23:52, Rob Crittenden napsal(a): A couple of issues were found in the CA renewal scripts. The api wasn't being initialized so restart_dirsrv() didn't have access to api.env.startup_timeout() I believe it was I who mislead you into removing it when I reviewed

Re: [Freeipa-devel] [PATCH] 83 Use OpenSSH-style public keys as the preferred format of SSH public keys

2012-09-07 Thread Rob Crittenden
Jan Cholasta wrote: Dne 6.9.2012 17:47, Jan Cholasta napsal(a): Dne 5.9.2012 22:57, Rob Crittenden napsal(a): Jan Cholasta wrote: Hi, this patch changes the format of the sshpubkey parameter to the format used by OpenSSH (see sshd(8)). Public keys in the old format (raw RFC 4253 blob) are

Re: [Freeipa-devel] [PATCH] 205 Reflect API change of SSH store in Web UI

2012-09-07 Thread Rob Crittenden
Endi Sukma Dewata wrote: On 9/5/2012 3:14 AM, Petr Vobornik wrote: Format of ipasshpubkey in users and hosts changed from BYTES to STR. Web UI no longer gets the value as base64 encoded string in an object. Label was changed to reflect that the key don't have to be plain base64 encoded blob.