[Freeipa-devel] Minor error: format not a string literal and no format arguments [-Werror=format-security]

2013-05-30 Thread Diane Trout
Hi, I was trying to compile freeipa on debian and the compiler threw a minor error. Resolve a -Werror=format-security error. ipa_extdom_extop.c: In function 'ipa_extdom_extop': ipa_extdom_extop.c:144:9: error: format not a string literal and no format arguments

Re: [Freeipa-devel] [RFC] Serving legacy systems cliens for trusts

2013-05-30 Thread Sumit Bose
On Wed, May 29, 2013 at 09:53:14AM -0400, Dmitri Pal wrote: On 05/29/2013 03:28 AM, Sumit Bose wrote: On Wed, May 29, 2013 at 08:38:37AM +0300, Alexander Bokovoy wrote: On Tue, 28 May 2013, Dmitri Pal wrote: On 05/28/2013 04:29 PM, Alexander Bokovoy wrote: On Tue, 28 May 2013, Dmitri Pal

Re: [Freeipa-devel] Minor error: format not a string literal and no format arguments [-Werror=format-security]

2013-05-30 Thread Sumit Bose
On Wed, May 29, 2013 at 11:26:17PM -0700, Diane Trout wrote: Hi, I was trying to compile freeipa on debian and the compiler threw a minor error. Resolve a -Werror=format-security error. ipa_extdom_extop.c: In function 'ipa_extdom_extop': ipa_extdom_extop.c:144:9: error: format

Re: [Freeipa-devel] [PATCH 0056] Support multiple local domain ranges with RID base set

2013-05-30 Thread Alexander Bokovoy
On Mon, 13 May 2013, Tomas Babej wrote: Hi, In ipa-adtrust-install, adding RID bases step would fail if there was more than one local range defined. This can be a common case if e.g. there are users that migrated from previous IdM solution. With this patch, we fail only if there are multiple

Re: [Freeipa-devel] [PATCH 0056] Support multiple local domain ranges with RID base set

2013-05-30 Thread Martin Kosek
On 05/30/2013 12:30 PM, Alexander Bokovoy wrote: On Mon, 13 May 2013, Tomas Babej wrote: Hi, In ipa-adtrust-install, adding RID bases step would fail if there was more than one local range defined. This can be a common case if e.g. there are users that migrated from previous IdM solution.

Re: [Freeipa-devel] CLDAP Netlogon fixes

2013-05-30 Thread Martin Kosek
On 05/28/2013 05:21 PM, Martin Kosek wrote: On 05/28/2013 04:13 PM, Martin Kosek wrote: On 05/28/2013 04:12 PM, Martin Kosek wrote: On 05/28/2013 02:35 PM, Alexander Bokovoy wrote: On Thu, 23 May 2013, Simo Sorce wrote: As you can see, incorrect parameters still return empty dn and netlogon

Re: [Freeipa-devel] [RFC] Serving legacy systems cliens for trusts

2013-05-30 Thread Alexander Bokovoy
On Thu, 30 May 2013, Sumit Bose wrote: On Wed, May 29, 2013 at 09:53:14AM -0400, Dmitri Pal wrote: On 05/29/2013 03:28 AM, Sumit Bose wrote: On Wed, May 29, 2013 at 08:38:37AM +0300, Alexander Bokovoy wrote: On Tue, 28 May 2013, Dmitri Pal wrote: On 05/28/2013 04:29 PM, Alexander Bokovoy

Re: [Freeipa-devel] [PATCHES 0053-0055] Prompt for RID base if trusted domain SID / name is specified and vice versa

2013-05-30 Thread Ana Krivokapic
On 05/13/2013 05:42 PM, Tomas Babej wrote: On 05/10/2013 04:39 PM, Tomas Babej wrote: Hi, this patcheset deals with https://fedorahosted.org/freeipa/ticket/3602 See commit messages for details. Tomas ___ Freeipa-devel mailing list

[Freeipa-devel] [PATCH 0062/0063] Add update plugin to fill in ipaRangeType attribute

2013-05-30 Thread Tomas Babej
Hi, Previously, we deduced the range type from the range objectclass and filled in virtual attribute in post_callback phase. Having a ipaRangeType attributeType in schema, we need to fill the attribute values to ranges created in previous IPA versions. The plugin follows the same approach,

[Freeipa-devel] [PATCH 0063/0063] Extend idrange commands to support new range origin

2013-05-30 Thread Tomas Babej
Hi, Following values of ipaRangeType attribute are supported and translated accordingly in the idrange commands: 'ipa-local': 'local domain range' 'ipa-ad-winsync': 'Active Directory winsync range' 'ipa-ad-trust': 'Active Directory domain range' 'ipa-ad-trust-posix': 'Active Directory trust

[Freeipa-devel] [PATCH] 0032 Ignore files generated by build

2013-05-30 Thread Ana Krivokapic
Hello, This patch adds some additional files to .gitignore. -- Regards, Ana Krivokapic Associate Software Engineer FreeIPA team Red Hat Inc. From ba2b8ca9c3b2ad2be6ba5ac4097bccd1d36de431 Mon Sep 17 00:00:00 2001 From: Ana Krivokapic akriv...@redhat.com Date: Thu, 30 May 2013 14:36:13 +0200

Re: [Freeipa-devel] [PATCH] 0032 Ignore files generated by build

2013-05-30 Thread Tomas Babej
On 05/30/2013 02:41 PM, Ana Krivokapic wrote: Hello, This patch adds some additional files to .gitignore. ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel ACK Tomas

Re: [Freeipa-devel] [PATCH 0057] Do not allow removal of ID range of an active trust

2013-05-30 Thread Tomas Babej
On 05/29/2013 12:25 PM, Martin Kosek wrote: On 05/28/2013 03:48 PM, Alexander Bokovoy wrote: On Tue, 28 May 2013, Tomas Babej wrote: On 05/28/2013 02:35 PM, Alexander Bokovoy wrote: On Mon, 27 May 2013, Tomas Babej wrote: We got rid of openldap utilities now. While using python.ldap module,

Re: [Freeipa-devel] [RFC] Serving legacy systems cliens for trusts

2013-05-30 Thread Dmitri Pal
[...] For Lunix and older SSSD version we in fact have a problem. What I want to avoid is to have to define procedures and patches for all ^^ ? the clients. However if you use ipa-client-install it would configure sssd the old way. How to make it configured the new way?