Re: [Freeipa-devel] idempotent installer [from LinuxAlt 2013]

2013-11-15 Thread Jan Pazdziora
On Fri, Nov 15, 2013 at 08:38:11AM +0100, Petr Spacek wrote: The point is that you have a chance to fix the problem (reconfigure firewall, DNS etc.), run the installer again and it will finish the installation or fail later on some other problem. It means that you don't need to start from

Re: [Freeipa-devel] Include proposal to contrib (expired user accounts query tool)

2013-11-15 Thread Alexander Bokovoy
On Fri, 15 Nov 2013, Antti Peltonen wrote: Hi, On 14 November 2013 21:06, Dmitri Pal d...@redhat.com wrote: A quick look at the tool's command line indicates that it is probably not using any of the IPA framework and rather goes over LDAP. I am not sure that this is the best approach, let us

Re: [Freeipa-devel] [PATCH 0016] Add RADIUS proxy support to ipalib CLI

2013-11-15 Thread Petr Viktorin
On 11/12/2013 12:17 AM, Nathaniel McCallum wrote: On Fri, 2013-11-08 at 13:26 +0100, Petr Viktorin wrote: On 09/25/2013 10:56 PM, Nathaniel McCallum wrote: On Fri, 2013-09-20 at 12:38 -0400, Nathaniel McCallum wrote: On Thu, 2013-09-12 at 16:48 -0400, Nathaniel McCallum wrote: On Thu,

Re: [Freeipa-devel] [PATCHES] 0068-0070 Automember rebuild membership

2013-11-15 Thread Martin Kosek
On 11/14/2013 03:30 PM, Ana Krivokapic wrote: On 11/14/2013 03:11 PM, Martin Kosek wrote: On 11/13/2013 04:56 PM, Ana Krivokapic wrote: On 11/13/2013 03:08 PM, Martin Kosek wrote: On 10/29/2013 12:30 PM, Ana Krivokapic wrote: On 10/15/2013 06:09 PM, Ana Krivokapic wrote: On 09/30/2013 10:02

Re: [Freeipa-devel] [PATCHES] 0019-0020 Broken Firefox configuration files in freeipa-client package

2013-11-15 Thread Petr Vobornik
On 11/13/2013 04:34 PM, Petr Vobornik wrote: On 11/12/2013 01:48 PM, Martin Basti wrote: On Fri, 2013-11-08 at 16:28 +0100, Petr Vobornik wrote: On 11/05/2013 10:34 AM, Martin Basti wrote: ipa-client-install now allows to configure firefox using --configure-firefox option and optionally with

Re: [Freeipa-devel] [PATCHES] 0072-0074 Add automember rebuild membership to the web UI

2013-11-15 Thread Petr Vobornik
On 11/14/2013 10:55 AM, Petr Vobornik wrote: On 10/29/2013 12:33 PM, Ana Krivokapic wrote: On 10/24/2013 03:48 PM, Petr Vobornik wrote: On 10/16/2013 11:37 PM, Ana Krivokapic wrote: On 09/27/2013 04:38 PM, Petr Vobornik wrote: On 09/25/2013 11:51 AM, Ana Krivokapic wrote: Hello, This patch

[Freeipa-devel] [PATCH] 463-530 First part of RCUE adoption

2013-11-15 Thread Petr Vobornik
Hello list, this is a first part of RCUE adoption effort. Main themes of this patch set are: - use RCUE navigation https://fedorahosted.org/freeipa/ticket/3902 - new styles for textboxes, textareas, radio/checkbox buttons and buttons- part of https://fedorahosted.org/freeipa/ticket/3904 -

Re: [Freeipa-devel] [PATCH 0130] platform: Add Fedora 19 platform file

2013-11-15 Thread Ana Krivokapic
On 11/13/2013 02:56 PM, Tomas Babej wrote: Hi, Part of: https://fedorahosted.org/freeipa/ticket/3504 ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel ACK -- Regards, Ana

Re: [Freeipa-devel] [PATCH] 463-530 First part of RCUE adoption

2013-11-15 Thread Petr Viktorin
On 11/15/2013 02:26 PM, Petr Vobornik wrote: Hello list, this is a first part of RCUE adoption effort. Main themes of this patch set are: - use RCUE navigation https://fedorahosted.org/freeipa/ticket/3902 - new styles for textboxes, textareas, radio/checkbox buttons and buttons- part of

Re: [Freeipa-devel] [PATCH 111] ipa-client-install: Publish CA certificate to systemwide store

2013-11-15 Thread Ana Krivokapic
On 11/13/2013 02:57 PM, Tomas Babej wrote: On 09/27/2013 10:14 AM, Martin Kosek wrote: On 09/26/2013 04:46 PM, Jan Cholasta wrote: On 26.9.2013 12:59, Tomas Babej wrote: On 09/26/2013 12:54 PM, Jan Cholasta wrote: On 24.9.2013 18:14, Nalin Dahyabhai wrote: On Tue, Sep 24, 2013 at 01:30:10PM

Re: [Freeipa-devel] idempotent installer [from LinuxAlt 2013]

2013-11-15 Thread Rob Crittenden
Jan Pazdziora wrote: On Thu, Nov 14, 2013 at 03:40:52PM +0100, Petr Spacek wrote: In reality, it means that you can re-run OpenStack installer on the same machine/set of machines (with the same configuration, of course!) and it will re-do everything again. You can re-run The point is that it

Re: [Freeipa-devel] [PATCH] 463-530 First part of RCUE adoption

2013-11-15 Thread Petr Vobornik
On 11/15/2013 02:40 PM, Petr Viktorin wrote: On 11/15/2013 02:26 PM, Petr Vobornik wrote: Hello list, this is a first part of RCUE adoption effort. Main themes of this patch set are: - use RCUE navigation https://fedorahosted.org/freeipa/ticket/3902 - new styles for textboxes, textareas,

Re: [Freeipa-devel] [PATCH 111] ipa-client-install: Publish CA certificate to systemwide store

2013-11-15 Thread Tomas Babej
On 11/15/2013 02:46 PM, Ana Krivokapic wrote: On 11/13/2013 02:57 PM, Tomas Babej wrote: On 09/27/2013 10:14 AM, Martin Kosek wrote: On 09/26/2013 04:46 PM, Jan Cholasta wrote: On 26.9.2013 12:59, Tomas Babej wrote: On 09/26/2013 12:54 PM, Jan Cholasta wrote: On 24.9.2013 18:14, Nalin

Re: [Freeipa-devel] [PATCH 111] ipa-client-install: Publish CA certificate to systemwide store

2013-11-15 Thread Rob Crittenden
Tomas Babej wrote: On 11/15/2013 02:46 PM, Ana Krivokapic wrote: On 11/13/2013 02:57 PM, Tomas Babej wrote: On 09/27/2013 10:14 AM, Martin Kosek wrote: On 09/26/2013 04:46 PM, Jan Cholasta wrote: On 26.9.2013 12:59, Tomas Babej wrote: On 09/26/2013 12:54 PM, Jan Cholasta wrote: On

[Freeipa-devel] DNS tests [from LinuxAlt 2013]

2013-11-15 Thread Petr Spacek
Hello list, as you may know, we don't have any tests for bind-dyndb-ldap/DNS in FreeIPA. It seems that we have a chance to change that now. The LinuxAlt conference 2013 brought the information that Knot DNS [1] developers plan to write a new test suite for their server, but as usual,

Re: [Freeipa-devel] [PATCH] 0084 Make sure state of services is preserved after client uninstall

2013-11-15 Thread Tomas Babej
On 11/07/2013 05:25 PM, Ana Krivokapic wrote: Hello, This patch addresses ticket https://fedorahosted.org/freeipa/ticket/3790. ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel Looking

Re: [Freeipa-devel] [PATCHES] 0258-0265 Add schema updater based on IPA schema files

2013-11-15 Thread Petr Viktorin
On 11/15/2013 02:09 PM, Petr Viktorin wrote: On 11/11/2013 04:18 PM, Ana Krivokapic wrote: On 11/11/2013 02:53 PM, Ana Krivokapic wrote: On 11/11/2013 12:32 PM, Petr Viktorin wrote: On 11/07/2013 02:34 PM, Ana Krivokapic wrote: On 11/01/2013 03:26 PM, Petr Viktorin wrote: On 09/13/2013

Re: [Freeipa-devel] [PATCH] 463-530 First part of RCUE adoption

2013-11-15 Thread Petr Viktorin
On 11/15/2013 03:28 PM, Petr Vobornik wrote: On 11/15/2013 02:40 PM, Petr Viktorin wrote: On 11/15/2013 02:26 PM, Petr Vobornik wrote: Hello list, this is a first part of RCUE adoption effort. Main themes of this patch set are: - use RCUE navigation

Re: [Freeipa-devel] idempotent installer [from LinuxAlt 2013]

2013-11-15 Thread Derek Moore
Practically though, I think an idempotent installer opens a lot of cans of worms. Do we limit some answers to their original? Take for instance the REALM. Can someone change it on-the-fly? It would have some deep repercussions. Similarly, changing the hostname. There are all kinds of corner

Re: [Freeipa-devel] Include proposal to contrib (expired user accounts query tool)

2013-11-15 Thread Antti Peltonen
Hi, Neat little dirty rework but it appears that the framework took all the fun out of learning Python-LDAP away. ;) I think I keep the current codebase of my tool as it is and do a fork from it to run as a IPA plugin. I will on later date submit that for a contrib review when it is as complete

Re: [Freeipa-devel] DNS tests [from LinuxAlt 2013]

2013-11-15 Thread Derek Moore
Is there an opportunity to also bring in OpenShift Origin, in particular Broker, which also uses its own BIND with dyndb and/or nsupdate? Maybe they don't care as much since they use a limited subset of BIND only for namespace and app subdomains. Knot DNS looks cool, hadn't heard of these guys

Re: [Freeipa-devel] [PATCH] 463-530 First part of RCUE adoption

2013-11-15 Thread James
On Fri, Nov 15, 2013 at 8:26 AM, Petr Vobornik pvobo...@redhat.com wrote: Example is at: http://pvoborni.fedorapeople.org/rcue/ And here I thought FreeIPA couldn't get any prettier... Nice work. +1 James ___ Freeipa-devel mailing list

Re: [Freeipa-devel] [PATCH] 463-530 First part of RCUE adoption

2013-11-15 Thread Dmitri Pal
On 11/15/2013 04:44 PM, James wrote: On Fri, Nov 15, 2013 at 8:26 AM, Petr Vobornik pvobo...@redhat.com wrote: Example is at: http://pvoborni.fedorapeople.org/rcue/ And here I thought FreeIPA couldn't get any prettier... Nice work. +1 James ___

Re: [Freeipa-devel] [PATCH] 463-530 First part of RCUE adoption

2013-11-15 Thread Jérôme Fenal
2013/11/15 Dmitri Pal d...@redhat.com: On 11/15/2013 04:44 PM, James wrote: On Fri, Nov 15, 2013 at 8:26 AM, Petr Vobornik pvobo...@redhat.com wrote: Example is at: http://pvoborni.fedorapeople.org/rcue/ And here I thought FreeIPA couldn't get any prettier... Nice work. +1 James

Re: [Freeipa-devel] [PATCH] 463-530 First part of RCUE adoption

2013-11-15 Thread Simo Sorce
On Fri, 2013-11-15 at 14:26 +0100, Petr Vobornik wrote: It's quite a lot of patches so I did not attach them here. You can see the code in my private repo: git://fedorapeople.org/~pvoborni/freeipa.git branch 'rcue'. I can't see it listed here: http://fedorapeople.org/cgit Can you `touch