Re: [Freeipa-devel] [PATCH] 1092 Fix LDAP lockout plugin

2013-03-15 Thread Martin Kosek
On 03/11/2013 10:07 PM, Rob Crittenden wrote: Fixed a number of issues applying password policy against LDAP binds. See patch for details. rob I see some issues with this fix: 1) Shouldn't group password policy serve only as an override to the main policy? I.e. if I have this policy: #

Re: [Freeipa-devel] [PATCH] 0006 Remove check for alphabetic only characters from domain name validation

2013-03-15 Thread Petr Spacek
On 14.3.2013 15:08, Martin Kosek wrote: On 03/11/2013 01:02 PM, Ana Krivokapic wrote: On 02/27/2013 10:58 AM, Martin Kosek wrote: On 02/22/2013 04:02 PM, Ana Krivokapic wrote: On 02/22/2013 10:19 AM, Petr Spacek wrote: On 20.2.2013 11:03, Ana Krivokapic wrote: On 02/18/2013 01:08 PM, Martin

Re: [Freeipa-devel] [PATCH] 0006 Remove check for alphabetic only characters from domain name validation

2013-03-15 Thread Martin Kosek
On 03/15/2013 12:08 PM, Petr Spacek wrote: On 14.3.2013 15:08, Martin Kosek wrote: On 03/11/2013 01:02 PM, Ana Krivokapic wrote: On 02/27/2013 10:58 AM, Martin Kosek wrote: On 02/22/2013 04:02 PM, Ana Krivokapic wrote: On 02/22/2013 10:19 AM, Petr Spacek wrote: On 20.2.2013 11:03, Ana

Re: [Freeipa-devel] [PATCH] 0006 Remove check for alphabetic only characters from domain name validation

2013-03-15 Thread Martin Kosek
On 03/15/2013 12:11 PM, Martin Kosek wrote: On 03/15/2013 12:08 PM, Petr Spacek wrote: On 14.3.2013 15:08, Martin Kosek wrote: On 03/11/2013 01:02 PM, Ana Krivokapic wrote: On 02/27/2013 10:58 AM, Martin Kosek wrote: On 02/22/2013 04:02 PM, Ana Krivokapic wrote: On 02/22/2013 10:19 AM, Petr

Re: [Freeipa-devel] [PATCH] 1092 Fix LDAP lockout plugin

2013-03-15 Thread Rob Crittenden
Rob Crittenden wrote: Martin Kosek wrote: On 03/11/2013 10:07 PM, Rob Crittenden wrote: Fixed a number of issues applying password policy against LDAP binds. See patch for details. rob I see some issues with this fix: 1) Shouldn't group password policy serve only as an override to the

[Freeipa-devel] master is broken on F18

2013-03-15 Thread Alexander Bokovoy
Hi! I was investigating why installing master fails on F18 + updates-testing and found out that install fails with freeipa-server-3.1.99-0.20130313T1838Zgit158bf45.fc18.x86_64 from ipa-devel repo 2013-03-15T16:17:40Z DEBUG args=/usr/bin/certutil -d /etc/httpd/alias -R -s

Re: [Freeipa-devel] master is broken on F18

2013-03-15 Thread John Dennis
On 03/15/2013 12:56 PM, Alexander Bokovoy wrote: Hi! I was investigating why installing master fails on F18 + updates-testing and found out that install fails with freeipa-server-3.1.99-0.20130313T1838Zgit158bf45.fc18.x86_64 from ipa-devel repo 2013-03-15T16:17:40Z DEBUG args=/usr/bin/certutil

Re: [Freeipa-devel] [PATCH] 264-265 Web UI:Certificate pages

2013-03-15 Thread Endi Sukma Dewata
On 3/6/2013 9:51 AM, Petr Vobornik wrote: 1. As previously discussed, the cert-find is only available with Dogtag CA, so the Certificates page should be disabled with self-signed CA. But if self-signed CA is dropped, then it's not necessary to disable the Certificates page. We may need to keep

Re: [Freeipa-devel] [PATCH] 255 Added Web UI support for service PAC type option: NONE

2013-03-15 Thread Endi Sukma Dewata
On 3/7/2013 7:37 AM, Petr Vobornik wrote: Ideally it should be generic enough to combine any widgets. This might be a common scenario somewhere else: Something: ( ) Option 1 ( ) Option 2 (o) Other: [something else ] This design has a flaw:

Re: [Freeipa-devel] [PATCH] 266 Fixed Web UI build error caused by rhino changes in F19

2013-03-15 Thread Endi Sukma Dewata
On 3/11/2013 8:27 AM, Petr Vobornik wrote: rhino-1.7R4-2.fc19.noarch dropped -main flag which made the build fail in rawhide (F19). We can't use the same command for rhino-1.7R3-6 (F18) and rhino-1.7R4-2 (F19). This patch adds check if rhino supports '-require' option. If so it calls rhino with

Re: [Freeipa-devel] [PATCH] 267 Filter groups by type (normal, posix, external)

2013-03-15 Thread Endi Sukma Dewata
On 3/12/2013 11:28 AM, Petr Vobornik wrote: Here's a patch for filtering groups by type. Design page: http://www.freeipa.org/page/V3/Filtering_groups_by_type The interface is: StrEnum('type?', cli_name='type', label=_('Type'), doc=_('Group type'), values=(u'posix', u'normal',

Re: [Freeipa-devel] [PATCH] 260-262 Global trust configuration page

2013-03-15 Thread Endi Sukma Dewata
On 3/12/2013 11:35 AM, Petr Vobornik wrote: Another problem is that hidden 'Default SMB Group' is not listed. Hence it couldn't be set again after a modification. I made the combobox editable (first usage, so it revealed a bug) to avoid this problem. User can enter garbage, but the framework