Re: [Freeipa-devel] [PATCH] 266 Fixed Web UI build error caused by rhino changes in F19

2013-03-18 Thread Martin Kosek
On 03/16/2013 12:22 AM, Endi Sukma Dewata wrote: On 3/11/2013 8:27 AM, Petr Vobornik wrote: rhino-1.7R4-2.fc19.noarch dropped -main flag which made the build fail in rawhide (F19). We can't use the same command for rhino-1.7R3-6 (F18) and rhino-1.7R4-2 (F19). This patch adds check if rhino

Re: [Freeipa-devel] master is broken on F18

2013-03-18 Thread Alexander Bokovoy
On Mon, 18 Mar 2013, Martin Kosek wrote: On 03/17/2013 02:42 PM, John Dennis wrote: On 03/16/2013 05:19 PM, Kai Engert wrote: On Fri, 2013-03-15 at 16:07 -0400, John Dennis wrote: On 03/15/2013 12:56 PM, Alexander Bokovoy wrote: Hi! I was investigating why installing master fails on F18 +

[Freeipa-devel] [PATCH] 0008 Fix internal error for ipa show-mappings

2013-03-18 Thread Ana Krivokapic
Hello, I found a bug in the ipa show-mappings command. The attached patch fixes it. Can we push it under the one-liner rule? -- Regards, Ana Krivokapic Associate Software Engineer FreeIPA team Red Hat Inc. From 357c4b62f4038a2b1684f5eecb6b381e5f2f45de Mon Sep 17 00:00:00 2001 From: Ana

Re: [Freeipa-devel] [PATCH] 263 Web UI: configurable SID blacklists

2013-03-18 Thread Petr Vobornik
On 03/06/2013 01:25 PM, Petr Vobornik wrote: On 03/04/2013 06:14 PM, Endi Sukma Dewata wrote: On 2/18/2013 10:37 AM, Petr Vobornik wrote: Added blacklists section, with ipantsidblacklistincoming and ipantsidblacklistoutgoing multivalued textbox fields, into trust details page.

Re: [Freeipa-devel] [PATCH] 0008 Fix internal error for ipa show-mappings

2013-03-18 Thread Martin Kosek
On 03/18/2013 02:34 PM, Ana Krivokapic wrote: Hello, I found a bug in the ipa show-mappings command. The attached patch fixes it. Can we push it under the one-liner rule? Yeah, this is regression caused by ticket 2732. Thanks for the fix. one-liner ACK, pushed to master, ipa-3-1.

Re: [Freeipa-devel] [PATCH] 260-262 Global trust configuration page

2013-03-18 Thread Petr Vobornik
On 03/06/2013 01:42 PM, Petr Vobornik wrote: On 03/02/2013 08:40 PM, Endi Sukma Dewata wrote: - Original Message - First two patches are bug fixes which are required for third patch. Depends on my patch #259 (Combobox keyboard support) 1) [PATCH] Fix dirty state update of editable

[Freeipa-devel] [PATCH 0042] Allow host re-enrollment using delegation

2013-03-18 Thread Tomas Babej
Hi, A new option --force-join has been added to ipa-client-install. It forces the host enrollment even if the host entry exists. Old certificate is revoked, new certificate and ssh key pair generated. See the relevant design for the re-enrollment part:

Re: [Freeipa-devel] [PATCH] 259 Combobox keyboard support

2013-03-18 Thread Petr Vobornik
On 03/06/2013 01:37 PM, Petr Vobornik wrote: On 03/02/2013 08:38 PM, Endi Sukma Dewata wrote: On 02/27/2013 06:54 AM, Petr Vobornik wrote: On 02/27/2013 01:50 AM, Endi Sukma Dewata wrote: Another minor thing, if the search box is in focus, you can use the Up/Down arrow to go to the list.

Re: [Freeipa-devel] [PATCH 0042] Allow host re-enrollment using delegation

2013-03-18 Thread Tomas Babej
On 03/18/2013 02:46 PM, Tomas Babej wrote: Hi, A new option --force-join has been added to ipa-client-install. It forces the host enrollment even if the host entry exists. Old certificate is revoked, new certificate and ssh key pair generated. See the relevant design for the re-enrollment part:

Re: [Freeipa-devel] [PATCH] 1092 Fix LDAP lockout plugin

2013-03-18 Thread Martin Kosek
On 03/15/2013 04:42 PM, Rob Crittenden wrote: Rob Crittenden wrote: Martin Kosek wrote: On 03/11/2013 10:07 PM, Rob Crittenden wrote: Fixed a number of issues applying password policy against LDAP binds. See patch for details. rob I see some issues with this fix: 1) Shouldn't group

Re: [Freeipa-devel] [PROPOSAL] Kerberos flags

2013-03-18 Thread Simo Sorce
On Sat, 2013-03-16 at 16:46 -0400, Dmitri Pal wrote: On 03/12/2013 02:02 PM, Simo Sorce wrote: On Tue, 2013-03-12 at 18:31 +0100, Jan Cholasta wrote: On 12.3.2013 18:01, Simo Sorce wrote: On Tue, 2013-03-12 at 17:31 +0100, Jan Cholasta wrote: On 12.3.2013 17:24, Simo Sorce wrote: On

Re: [Freeipa-devel] [PATCH] 1092 Fix LDAP lockout plugin

2013-03-18 Thread Rob Crittenden
Martin Kosek wrote: On 03/15/2013 04:42 PM, Rob Crittenden wrote: Rob Crittenden wrote: Martin Kosek wrote: On 03/11/2013 10:07 PM, Rob Crittenden wrote: Fixed a number of issues applying password policy against LDAP binds. See patch for details. rob I see some issues with this fix: 1)

Re: [Freeipa-devel] master is broken on F18

2013-03-18 Thread Alexander Bokovoy
On Mon, 18 Mar 2013, Alexander Bokovoy wrote: On Mon, 18 Mar 2013, Martin Kosek wrote: On 03/17/2013 02:42 PM, John Dennis wrote: On 03/16/2013 05:19 PM, Kai Engert wrote: On Fri, 2013-03-15 at 16:07 -0400, John Dennis wrote: On 03/15/2013 12:56 PM, Alexander Bokovoy wrote: Hi! I was

Re: [Freeipa-devel] [PATCHES] 0197-0204 Installing without a CA, with custom SSL certs

2013-03-18 Thread Dmitri Pal
On 03/18/2013 07:58 AM, Petr Viktorin wrote: Hello, While the work is not complete, these patches allowed me to install an IPA server without a CA, using PKCS#12 files for the server certs. The patches don't break normal installation. The --selfsign option (but not yet the code behind it) is

Re: [Freeipa-devel] [PATCHES] 0197-0204 Installing without a CA, with custom SSL certs

2013-03-18 Thread Rob Crittenden
Petr Viktorin wrote: Hello, While the work is not complete, these patches allowed me to install an IPA server without a CA, using PKCS#12 files for the server certs. The patches don't break normal installation. The --selfsign option (but not yet the code behind it) is removed. The absence of a