Re: [Freeipa-devel] [PATCH] 266 Fixed Web UI build error caused by rhino changes in F19

2013-03-21 Thread Martin Kosek
On 03/18/2013 10:08 AM, Martin Kosek wrote: On 03/16/2013 12:22 AM, Endi Sukma Dewata wrote: On 3/11/2013 8:27 AM, Petr Vobornik wrote: rhino-1.7R4-2.fc19.noarch dropped -main flag which made the build fail in rawhide (F19). We can't use the same command for rhino-1.7R3-6 (F18) and

Re: [Freeipa-devel] patch for trac 2575

2013-03-21 Thread Martin Kosek
On 02/21/2013 02:39 PM, Martin Kosek wrote: Thanks Brian. I still see few issues though: 1) The patch adds a whitespace error: $ git apply ~/freeipa-bcook-0001-Add-DNS-Setup-Prompt-to-Install.patch /home/mkosek/freeipa-bcook-0001-Add-DNS-Setup-Prompt-to-Install.patch:41: trailing

[Freeipa-devel] New RFC: An Information Model for Kerberos Version 5

2013-03-21 Thread Petr Spacek
Hello list, a new RFC An Information Model for Kerberos Version 5 was published: http://tools.ietf.org/html/rfc6880 RFC status and other metadata: https://datatracker.ietf.org/doc/rfc6880/ Kerberos experts, is it interesting for FreeIPA? -- Petr^2 Spacek

[Freeipa-devel] [PATCH] 391-395 Fedora 19 build and install fixes

2013-03-21 Thread Martin Kosek
This set of patches (details in commit messages) allow build and installation of FreeIPA in Fedora 19. I tested server and replica install (master on f18, replica on f19) and both worked fine. The patches are compatible with Fedora 18 (I tested). If your Fedora 19 does not have

Re: [Freeipa-devel] [PATCHES] 0197-0204 Installing without a CA, with custom SSL certs

2013-03-21 Thread Petr Viktorin
On 03/20/2013 06:34 PM, Dmitri Pal wrote: On 03/20/2013 01:28 PM, Rob Crittenden wrote: Petr Viktorin wrote: On 03/18/2013 10:24 PM, Rob Crittenden wrote: Petr Viktorin wrote: [...] From what I've learned, PKCS#12 files are just a bag of certificates; there are basically no restrictions

[Freeipa-devel] [PATCH 0121] Fix crash during invalid zone reload process

2013-03-21 Thread Petr Spacek
Hello, Fix crash during invalid zone reload process. This bug was created during settings refactoring and is present only in master, not in v2 branch. -- Petr^2 Spacek From 79594a484f30c6677dd901e7f8285719e31bab6b Mon Sep 17 00:00:00 2001 From: Petr Spacek pspa...@redhat.com Date: Thu,

Re: [Freeipa-devel] New RFC: An Information Model for Kerberos Version 5

2013-03-21 Thread Simo Sorce
On Thu, 2013-03-21 at 10:27 +0100, Petr Spacek wrote: Hello list, a new RFC An Information Model for Kerberos Version 5 was published: http://tools.ietf.org/html/rfc6880 RFC status and other metadata: https://datatracker.ietf.org/doc/rfc6880/ Kerberos experts, is it interesting for

[Freeipa-devel] [PATCH 0120] Fix automatic reloading of invalid zone after each change in zone data

2013-03-21 Thread Petr Spacek
Hello, Fix automatic reloading of invalid zone after each change in zone data. Reload wasn't done when serial_autoincrement feature was disabled. https://fedorahosted.org/bind-dyndb-ldap/ticket/102 -- Petr^2 Spacek From 1700a5d7dbf6c36ce235091a449e13a5e18fbb8b Mon Sep 17 00:00:00

[Freeipa-devel] [PATCH 0122] Log successful zone reload after record change.

2013-03-21 Thread Petr Spacek
Hello, Log successful zone reload after record change. This should be last piece of https://fedorahosted.org/bind-dyndb-ldap/ticket/102 -- Petr^2 Spacek From 06c414c2922bb09c18afd9fadc52b2b0f4529f90 Mon Sep 17 00:00:00 2001 From: Petr Spacek pspa...@redhat.com Date: Thu, 21 Mar 2013

[Freeipa-devel] [PATCH] 396 Fix structured DNS record output

2013-03-21 Thread Martin Kosek
Recent LDAP refactoring replaced entry_attrs regular dict with normalized keys (i.e. lowercase) with LDAPEntry instance which keys may not be normalized. This broke CND command output when --structured and --all options were used. Force lowercase normalization of the LDAPEntry keys in DNS plugin

[Freeipa-devel] [PATCH] 397 Bump selinux-policy requires

2013-03-21 Thread Martin Kosek
The higher version is reported to fix a Fedora 17 to 18 upgrade issue. https://fedorahosted.org/freeipa/ticket/3399 From 96d75334b52ac8464b9d621489f541636e1892d4 Mon Sep 17 00:00:00 2001 From: Martin Kosek mko...@redhat.com Date: Thu, 21 Mar 2013 15:10:13 +0100 Subject: [PATCH] Bump

Re: [Freeipa-devel] [PATCH] 388-389 Improve client install LDAP cert retrieval fallback

2013-03-21 Thread Martin Kosek
On 03/19/2013 03:42 PM, Tomas Babej wrote: On 03/14/2013 02:41 PM, Martin Kosek wrote: [freeipa-mkosek-388-use-temporary-ccache-in-ipa-client-install.patch]: ipa-client-install failed if user had set his own KRB5CCNAME in his environment. Use a temporary CCACHE for the installer to avoid

[Freeipa-devel] [PATCH] 269 Run permission target switch action only for visible widgets

2013-03-21 Thread Petr Vobornik
Permission details page was incorrectly evaluated as dirty (update button enabled) right after load when permission type={subtree,filter} and some attrs are set. Can be reproduced by opening 'Modify Automount maps' permission. The culprit is that attrs widget is populated and dirty-checked

[Freeipa-devel] [PATCH] 270 Load extension.js after UI AMD modules.

2013-03-21 Thread Petr Vobornik
This patch is a fix for upcoming ipa-3-1 minor release. Loading of extension.js was removed with introduction of AMD modules. This patch returns the feature to avoid regressions. In 3.2 it will be handled differently (multiple plugins). -- Petr Vobornik From

[Freeipa-devel] [PATCH] Dogtag exception handling

2013-03-21 Thread Alexander Bokovoy
Hi, Martin asked me to update the patch I've attached to ticket https://fedorahosted.org/freeipa/ticket/3492 and here we go. Process exceptions when talking to Dogtag

Re: [Freeipa-devel] [PATCH] 267 Filter groups by type (normal, posix, external)

2013-03-21 Thread Martin Kosek
On 03/16/2013 03:32 AM, Endi Sukma Dewata wrote: On 3/12/2013 11:28 AM, Petr Vobornik wrote: Here's a patch for filtering groups by type. Design page: http://www.freeipa.org/page/V3/Filtering_groups_by_type The interface is: StrEnum('type?', cli_name='type', label=_('Type'),

Re: [Freeipa-devel] [PATCH] 269 Run permission target switch action only for visible widgets

2013-03-21 Thread Ana Krivokapic
On 03/21/2013 04:34 PM, Petr Vobornik wrote: Permission details page was incorrectly evaluated as dirty (update button enabled) right after load when permission type={subtree,filter} and some attrs are set. Can be reproduced by opening 'Modify Automount maps' permission. The culprit is that

Re: [Freeipa-devel] [PATCH] Dogtag exception handling

2013-03-21 Thread Martin Kosek
On 03/21/2013 05:07 PM, Alexander Bokovoy wrote: Hi, Martin asked me to update the patch I've attached to ticket https://fedorahosted.org/freeipa/ticket/3492 and here we go. Process exceptions when talking to Dogtag

Re: [Freeipa-devel] [PATCHES] 0197-0204 Installing without a CA, with custom SSL certs

2013-03-21 Thread Petr Viktorin
[...] another thing: When drafting the feature page, I realized the --{http,dirsrv}_pin options are unfortunate. Giving the passwords in command line options is unsafe. I'd like to replace them with --{http,dirsrv}-pin-file, with prompting if they're not given. -- PetrĀ³

[Freeipa-devel] IPA Git mirror

2013-03-21 Thread Petr Viktorin
Hello, Since our git repo has gotten extremely slow, I've been asked about my Github mirror. Since it might benefit others I'm sharing on the list. The pull URL is git://github.com/encukou/freeipa.git, and it's updated twice an hour*. I'd like to ask people that push patches to include the

Re: [Freeipa-devel] [PATCH] 267 Filter groups by type (normal, posix, external)

2013-03-21 Thread Petr Vobornik
On 03/21/2013 05:10 PM, Martin Kosek wrote: On 03/16/2013 03:32 AM, Endi Sukma Dewata wrote: On 3/12/2013 11:28 AM, Petr Vobornik wrote: Here's a patch for filtering groups by type. Design page: http://www.freeipa.org/page/V3/Filtering_groups_by_type The interface is: StrEnum('type?',

Re: [Freeipa-devel] [PATCH] 1092 Fix LDAP lockout plugin

2013-03-21 Thread Rob Crittenden
Martin Kosek wrote: Good job! I noticed just one last case when there is inconsistency with Kerberos auth. If you have Lockout duration set to 0, Failure reset interval does not work in postop. Also, following errors in 389-ds-base error log are printed: [21/Mar/2013:07:54:01 -0400] -