Re: [Freeipa-devel] [PATCH] 0051 Handle --subject option in ipa-server-install

2013-08-01 Thread Petr Viktorin
On 07/31/2013 11:51 AM, Ana Krivokapic wrote: On 07/30/2013 06:24 PM, Petr Viktorin wrote: On 07/30/2013 10:27 AM, Ana Krivokapic wrote: Hello, This patch addresses ticket https://fedorahosted.org/freeipa/ticket/3783. Thanks for the patch, I have a concern below:

Re: [Freeipa-devel] [PATCH] 0051 Handle --subject option in ipa-server-install

2013-08-01 Thread Martin Kosek
On 08/01/2013 02:54 PM, Petr Viktorin wrote: On 07/31/2013 11:51 AM, Ana Krivokapic wrote: On 07/30/2013 06:24 PM, Petr Viktorin wrote: On 07/30/2013 10:27 AM, Ana Krivokapic wrote: Hello, This patch addresses ticket https://fedorahosted.org/freeipa/ticket/3783. Thanks for the patch, I

Re: [Freeipa-devel] [PATCH] 0051 Handle --subject option in ipa-server-install

2013-08-01 Thread Petr Viktorin
On 08/01/2013 02:58 PM, Martin Kosek wrote: On 08/01/2013 02:54 PM, Petr Viktorin wrote: On 07/31/2013 11:51 AM, Ana Krivokapic wrote: On 07/30/2013 06:24 PM, Petr Viktorin wrote: On 07/30/2013 10:27 AM, Ana Krivokapic wrote: Hello, This patch addresses ticket

[Freeipa-devel] [PATCH 0182] Fix false error messages when nonexistent object/attribute is deleted

2013-08-01 Thread Petr Spacek
Hello, Fix false error messages when nonexistent object/attribute is deleted. This patch should go to branches v3 and master. -- Petr^2 Spacek From cf67953f278ee1dc4d31bbbc99b8ef8fe63ccfa7 Mon Sep 17 00:00:00 2001 From: Petr Spacek pspa...@redhat.com Date: Mon, 29 Jul 2013 11:47:46 +0200

[Freeipa-devel] [PATCH 0183] Move data structures for parser from ldap_qresult_t to ldap_entry_t

2013-08-01 Thread Petr Spacek
Hello, Move data structures for parser from ldap_qresult_t to ldap_entry_t. The target branch is master. -- Petr^2 Spacek From b32ba3f02460eb3e9d81c53b6774bb34b2ff08bb Mon Sep 17 00:00:00 2001 From: Petr Spacek pspa...@redhat.com Date: Mon, 22 Jul 2013 15:18:55 +0200 Subject: [PATCH] Move

[Freeipa-devel] [PATCH 0184] Use DNS_RDATA_MAXLENGTH from rdata.h instead of own definition

2013-08-01 Thread Petr Spacek
Hello, Use DNS_RDATA_MAXLENGTH from rdata.h instead of own definition. This minor fix could go to v3 and master. -- Petr^2 Spacek From 894b4bb5ae8ab6f4591998e9263965355d5a87c3 Mon Sep 17 00:00:00 2001 From: Petr Spacek pspa...@redhat.com Date: Mon, 22 Jul 2013 15:23:16 +0200 Subject: [PATCH]

[Freeipa-devel] [PATCH] 0052 Add ipa-advise plugins for legacy clients

2013-08-01 Thread Ana Krivokapic
Hello, This patch adds ipa-advise plugins to help configure legacy clients for access to trusted domain resources. For more details, please read the commit message. Plugins are currently named config-redhat-sssd-before-1-9 and config-generic-sssd-before-1-9; suggestions for better names are

[Freeipa-devel] [PATCH 0185] Do not execute new LDAP search for each updated object

2013-08-01 Thread Petr Spacek
Hello, Do not execute new LDAP search for each updated object. Syncrepl delivers notification about change in particular object along with all data from the object. Resource Records are parsed out from this data instead of data obtained via separate LDAP search. Current code doesn't have any

Re: [Freeipa-devel] Plugin registration API (Was: [PATCH] Return klass in api.register())

2013-08-01 Thread Petr Viktorin
On 07/31/2013 06:43 PM, Nathaniel McCallum wrote: Mostly, we're agreed. This was mostly an inventory of approaches I've seen in the Python world before. On Wed, 2013-07-31 at 11:08 +0200, Petr Viktorin wrote: On 07/30/2013 08:05 PM, Nathaniel McCallum wrote: On Tue, 2013-07-30 at 18:58 +0200,

Re: [Freeipa-devel] [PATCH] 0052 Add ipa-advise plugins for legacy clients

2013-08-01 Thread Alexander Bokovoy
Hi! On Thu, 01 Aug 2013, Ana Krivokapic wrote: Hello, This patch adds ipa-advise plugins to help configure legacy clients for access to trusted domain resources. For more details, please read the commit message. Plugins are currently named config-redhat-sssd-before-1-9 and

Re: [Freeipa-devel] [PATCH] 0051 Handle --subject option in ipa-server-install

2013-08-01 Thread Rob Crittenden
Petr Viktorin wrote: On 08/01/2013 02:58 PM, Martin Kosek wrote: On 08/01/2013 02:54 PM, Petr Viktorin wrote: On 07/31/2013 11:51 AM, Ana Krivokapic wrote: On 07/30/2013 06:24 PM, Petr Viktorin wrote: On 07/30/2013 10:27 AM, Ana Krivokapic wrote: Hello, This patch addresses ticket

Re: [Freeipa-devel] [PATCH] slapi-nis support for trusted domains

2013-08-01 Thread Nalin Dahyabhai
On Wed, Jul 31, 2013 at 03:53:21PM +0300, Alexander Bokovoy wrote: Authentication is handled for both IPA and trusted domain users. The former case requires some specific handling of the SLAPI_BIND_TARGET_SDN to rewrite it to the original entry's DN. As result successful bind looks like this

Re: [Freeipa-devel] [PATCH] slapi-nis support for trusted domains

2013-08-01 Thread Alexander Bokovoy
Hi Nalin! Thanks for the review. On Thu, 01 Aug 2013, Nalin Dahyabhai wrote: On Wed, Jul 31, 2013 at 03:53:21PM +0300, Alexander Bokovoy wrote: Authentication is handled for both IPA and trusted domain users. The former case requires some specific handling of the SLAPI_BIND_TARGET_SDN to