Re: [Freeipa-devel] [PATCH] 390 ipa-client discovery with anonymous access off

2013-03-20 Thread Martin Kosek
On 03/19/2013 10:20 AM, Petr Viktorin wrote: On 03/19/2013 09:11 AM, Martin Kosek wrote: When RootDSE could be read (nsslapd-allow-anonymous-access set to rootdse), autodiscovery module failed to report success to the client installer. Remove faulty verified_servers flag from autodiscovery

[Freeipa-devel] [PATCH 0119] Prevent crash caused by race condition during plugin initialization

2013-03-20 Thread Petr Spacek
Hello, Prevent crash caused by race condition during plugin initialization. Processing of global configuration was postponed. Now the persistent search watcher thread doesn't change configuration directly. The problem was that isc_task_beginexclusive() was called before

Re: [Freeipa-devel] [PATCH] 1092 Fix LDAP lockout plugin

2013-03-20 Thread Martin Kosek
On 03/19/2013 05:09 PM, Rob Crittenden wrote: Martin Kosek wrote: On 03/19/2013 10:57 AM, Martin Kosek wrote: On 03/18/2013 04:07 PM, Rob Crittenden wrote: Martin Kosek wrote: On 03/15/2013 04:42 PM, Rob Crittenden wrote: Rob Crittenden wrote: Martin Kosek wrote: On 03/11/2013 10:07 PM,

Re: [Freeipa-devel] [PATCH 0119] Prevent crash caused by race condition during plugin initialization

2013-03-20 Thread Adam Tkac
On Wed, Mar 20, 2013 at 01:10:58PM +0100, Petr Spacek wrote: Hello, Prevent crash caused by race condition during plugin initialization. Processing of global configuration was postponed. Now the persistent search watcher thread doesn't change configuration directly. The

Re: [Freeipa-devel] [PATCH 0119] Prevent crash caused by race condition during plugin initialization

2013-03-20 Thread Petr Spacek
On 20.3.2013 14:28, Adam Tkac wrote: On Wed, Mar 20, 2013 at 01:10:58PM +0100, Petr Spacek wrote: Hello, Prevent crash caused by race condition during plugin initialization. Processing of global configuration was postponed. Now the persistent search watcher thread doesn't

Re: [Freeipa-devel] [PATCH] 1092 Fix LDAP lockout plugin

2013-03-20 Thread Rob Crittenden
Martin Kosek wrote: On 03/19/2013 05:09 PM, Rob Crittenden wrote: Martin Kosek wrote: On 03/19/2013 10:57 AM, Martin Kosek wrote: On 03/18/2013 04:07 PM, Rob Crittenden wrote: Martin Kosek wrote: On 03/15/2013 04:42 PM, Rob Crittenden wrote: Rob Crittenden wrote: Martin Kosek wrote: On

[Freeipa-devel] [RFE] Drop --selfsign

2013-03-20 Thread Petr Viktorin
Here is a RFE for https://fedorahosted.org/freeipa/ticket/3494. It's for dropping the --selfsign option from ipa-server-install. The functionality itself stays in for now (on upgraded self-signed masters). http://freeipa.org/page/V3/Drop_selfsign -- PetrĀ³ __NOTOC__ = Overview = Ticket

Re: [Freeipa-devel] [PATCHES] 0197-0204 Installing without a CA, with custom SSL certs

2013-03-20 Thread Petr Viktorin
On 03/18/2013 10:24 PM, Rob Crittenden wrote: Petr Viktorin wrote: [...] From what I've learned, PKCS#12 files are just a bag of certificates; there are basically no restrictions on their contents. But we assume there's only one cert inside that has a private key, and use that for the server

Re: [Freeipa-devel] [PATCHES] 0197-0204 Installing without a CA, with custom SSL certs

2013-03-20 Thread Rob Crittenden
Petr Viktorin wrote: On 03/18/2013 10:24 PM, Rob Crittenden wrote: Petr Viktorin wrote: [...] From what I've learned, PKCS#12 files are just a bag of certificates; there are basically no restrictions on their contents. But we assume there's only one cert inside that has a private key, and

Re: [Freeipa-devel] [PATCHES] 0197-0204 Installing without a CA, with custom SSL certs

2013-03-20 Thread Dmitri Pal
On 03/20/2013 01:28 PM, Rob Crittenden wrote: Petr Viktorin wrote: On 03/18/2013 10:24 PM, Rob Crittenden wrote: Petr Viktorin wrote: [...] From what I've learned, PKCS#12 files are just a bag of certificates; there are basically no restrictions on their contents. But we assume there's

Re: [Freeipa-devel] [PATCH] 1092 Fix LDAP lockout plugin

2013-03-20 Thread Martin Kosek
On 03/20/2013 04:52 PM, Rob Crittenden wrote: Martin Kosek wrote: On 03/19/2013 05:09 PM, Rob Crittenden wrote: Martin Kosek wrote: On 03/19/2013 10:57 AM, Martin Kosek wrote: On 03/18/2013 04:07 PM, Rob Crittenden wrote: Martin Kosek wrote: On 03/15/2013 04:42 PM, Rob Crittenden wrote:

Re: [Freeipa-devel] [PATCH] 1092 Fix LDAP lockout plugin

2013-03-20 Thread Rob Crittenden
Martin Kosek wrote: On 03/20/2013 04:52 PM, Rob Crittenden wrote: Martin Kosek wrote: On 03/19/2013 05:09 PM, Rob Crittenden wrote: Martin Kosek wrote: On 03/19/2013 10:57 AM, Martin Kosek wrote: On 03/18/2013 04:07 PM, Rob Crittenden wrote: Martin Kosek wrote: On 03/15/2013 04:42 PM, Rob