Re: [Freeipa-devel] [PATCH 0137] ipalib: Add DateTime parameter

2014-01-14 Thread Jan Cholasta
On 13.1.2014 14:57, Petr Vobornik wrote: On 13.1.2014 13:41, Jan Cholasta wrote: Hi, On 10.1.2014 21:21, Nathaniel McCallum wrote: On Thu, 2014-01-09 at 16:30 +0100, Tomas Babej wrote: Hi, Adds a parameter that represents a DateTime format using datetime.datetime object from python's native

Re: [Freeipa-devel] [PATCH 0138] ipalib: Expose krbPrincipalExpiration in CLI

2014-01-14 Thread Jan Cholasta
On 9.1.2014 16:31, Tomas Babej wrote: Hi, Adds a krbPrincipalExpiration attribute to the user class in user.py ipalib plugin as a DateTime parameter. Part of: https://fedorahosted.org/freeipa/ticket/3306 ACK. -- Jan Cholasta ___ Freeipa-devel

Re: [Freeipa-devel] [PATCH] 0084 Make sure state of services is preserved after client uninstall

2014-01-14 Thread Martin Kosek
On 01/13/2014 05:36 PM, Rob Crittenden wrote: Ana Krivokapic wrote: On 11/15/2013 05:03 PM, Tomas Babej wrote: On 11/07/2013 05:25 PM, Ana Krivokapic wrote: Hello, This patch addresses tickethttps://fedorahosted.org/freeipa/ticket/3790. ___

Re: [Freeipa-devel] [PATCH 0139] acl: Remove krbPrincipalExpiration from list of excluded attrs

2014-01-14 Thread Jan Cholasta
On 9.1.2014 16:31, Tomas Babej wrote: Hi, Since we're exposing the krbPrincipalExpiration attribute for direct editing in the CLI, remove it from the list of attributes that admin cannot edit by default. Part of: https://fedorahosted.org/freeipa/ticket/3306 ACK. -- Jan Cholasta

Re: [Freeipa-devel] [PATCH 0140] [PATCH 140/140] ipalib: Use DateTime parameter class for OTP token

2014-01-14 Thread Jan Cholasta
On 9.1.2014 16:32, Tomas Babej wrote: Hi, For ipatokennotbefore and ipatokennotafter attributes use DateTime parameter class instead of Str, since these are represented as LDAP Generalized Time in LDAP. Tomas ACK. -- Jan Cholasta ___

Re: [Freeipa-devel] [PATCH 0137] ipalib: Add DateTime parameter

2014-01-14 Thread Petr Viktorin
On 01/14/2014 09:27 AM, Jan Cholasta wrote: On 13.1.2014 14:57, Petr Vobornik wrote: On 13.1.2014 13:41, Jan Cholasta wrote: Hi, On 10.1.2014 21:21, Nathaniel McCallum wrote: On Thu, 2014-01-09 at 16:30 +0100, Tomas Babej wrote: Hi, Adds a parameter that represents a DateTime format using

Re: [Freeipa-devel] [PATCH] 0079 Enable Retro Changelog and Content Synchronization DS plugins

2014-01-14 Thread Petr Spacek
On 28.11.2013 10:33, Ana Krivokapic wrote: On 10/29/2013 06:57 PM, Ana Krivokapic wrote: On 10/29/2013 12:46 PM, Martin Kosek wrote: On 10/25/2013 05:03 PM, Ana Krivokapic wrote: Hello, This patch addresses ticket https://fedorahosted.org/freeipa/ticket/3967. NACK. I do not think this will

[Freeipa-devel] [PATCH 0006] Treat error during write to /etc/resolv.conf as non-fatal

2014-01-14 Thread Petr Spacek
Hello, Treat error during write to /etc/resolv.conf as non-fatal. https://fedorahosted.org/freeipa/ticket/4110 -- Petr^2 Spacek From 23104ca67953c0346005567af2710c29689980d5 Mon Sep 17 00:00:00 2001 From: Petr Spacek pspa...@redhat.com Date: Tue, 14 Jan 2014 10:48:31 +0100 Subject: [PATCH]

[Freeipa-devel] [PATCH] 0130 -- create missing idranges in trust-fetch-domains

2014-01-14 Thread Alexander Bokovoy
Hi, attached patch implements missing idranges when new child domains discovered through 'ipa trust-fetch-domains'. This functionality existed in 'ipa trust-add' but was not exposed in the 'ipa trust-fetch-domains'. Additionally, error message is shown in case trust name is incorrect.

Re: [Freeipa-devel] [PATCH] 0130 -- create missing idranges in trust-fetch-domains

2014-01-14 Thread Martin Kosek
On 01/14/2014 01:02 PM, Alexander Bokovoy wrote: Hi, attached patch implements missing idranges when new child domains discovered through 'ipa trust-fetch-domains'. This functionality existed in 'ipa trust-add' but was not exposed in the 'ipa trust-fetch-domains'. Additionally, error

Re: [Freeipa-devel] [PATCH] 0130 -- create missing idranges in trust-fetch-domains

2014-01-14 Thread Alexander Bokovoy
On Tue, 14 Jan 2014, Martin Kosek wrote: On 01/14/2014 01:02 PM, Alexander Bokovoy wrote: Hi, attached patch implements missing idranges when new child domains discovered through 'ipa trust-fetch-domains'. This functionality existed in 'ipa trust-add' but was not exposed in the 'ipa

Re: [Freeipa-devel] [PATCH] 0130 -- create missing idranges in trust-fetch-domains

2014-01-14 Thread Martin Kosek
On 01/14/2014 01:27 PM, Alexander Bokovoy wrote: On Tue, 14 Jan 2014, Martin Kosek wrote: On 01/14/2014 01:02 PM, Alexander Bokovoy wrote: Hi, attached patch implements missing idranges when new child domains discovered through 'ipa trust-fetch-domains'. This functionality existed in 'ipa

Re: [Freeipa-devel] [PATCH] 0335 ipa-replica-install: Move check for existing host before DNS resolution check

2014-01-14 Thread Petr Viktorin
On 01/13/2014 05:19 PM, Rob Crittenden wrote: Petr Viktorin wrote: See commit message ticket for details. https://fedorahosted.org/freeipa/ticket/3889 If memory serves this was done so that both the replication and the host checks would be done so the admin wouldn't die a death of a

Re: [Freeipa-devel] [PATCH 125] CLDAP: do not prepend \\

2014-01-14 Thread Alexander Bokovoy
On Mon, 13 Jan 2014, Sumit Bose wrote: Hi, Scott found that the fix for https://fedorahosted.org/freeipa/ticket/4028 is not complete. After some checks and comparisons with samba and AD behaviour I came to the conclusion that the two \\ at the beginning of the NetBIOS name of the IPA server is

Re: [Freeipa-devel] [PATCH] 0336 rpcserver: Consolidate __call__ in xmlclient and jsonclient_kerb

2014-01-14 Thread Petr Viktorin
On 01/13/2014 05:11 PM, Rob Crittenden wrote: Petr Viktorin wrote: See commit message ticket. https://fedorahosted.org/freeipa/ticket/4069 Our handling of XML-RPC introspection is iffy as it is and this would remove those methods completely. Can you add them back into the xmlserver class?

Re: [Freeipa-devel] [PATCH] 0130 -- create missing idranges in trust-fetch-domains

2014-01-14 Thread Alexander Bokovoy
On Tue, 14 Jan 2014, Martin Kosek wrote: On 01/14/2014 01:27 PM, Alexander Bokovoy wrote: On Tue, 14 Jan 2014, Martin Kosek wrote: On 01/14/2014 01:02 PM, Alexander Bokovoy wrote: Hi, attached patch implements missing idranges when new child domains discovered through 'ipa

Re: [Freeipa-devel] [PATCH] 0130 -- create missing idranges in trust-fetch-domains

2014-01-14 Thread Sumit Bose
On Tue, Jan 14, 2014 at 04:03:06PM +0200, Alexander Bokovoy wrote: On Tue, 14 Jan 2014, Martin Kosek wrote: On 01/14/2014 01:27 PM, Alexander Bokovoy wrote: On Tue, 14 Jan 2014, Martin Kosek wrote: On 01/14/2014 01:02 PM, Alexander Bokovoy wrote: Hi, attached patch implements missing

Re: [Freeipa-devel] [PATCH 0138] ipalib: Expose krbPrincipalExpiration in CLI

2014-01-14 Thread Petr Viktorin
On 01/14/2014 09:28 AM, Jan Cholasta wrote: On 9.1.2014 16:31, Tomas Babej wrote: Hi, Adds a krbPrincipalExpiration attribute to the user class in user.py ipalib plugin as a DateTime parameter. Part of: https://fedorahosted.org/freeipa/ticket/3306 ACK. This apparently depends on

Re: [Freeipa-devel] [PATCH 0139] acl: Remove krbPrincipalExpiration from list of excluded attrs

2014-01-14 Thread Petr Viktorin
On 01/14/2014 09:33 AM, Jan Cholasta wrote: On 9.1.2014 16:31, Tomas Babej wrote: Hi, Since we're exposing the krbPrincipalExpiration attribute for direct editing in the CLI, remove it from the list of attributes that admin cannot edit by default. Part of:

Re: [Freeipa-devel] [PATCH 0138] ipalib: Expose krbPrincipalExpiration in CLI

2014-01-14 Thread Jan Cholasta
On 14.1.2014 16:39, Martin Kosek wrote: On 01/14/2014 03:19 PM, Petr Viktorin wrote: On 01/14/2014 09:28 AM, Jan Cholasta wrote: On 9.1.2014 16:31, Tomas Babej wrote: Hi, Adds a krbPrincipalExpiration attribute to the user class in user.py ipalib plugin as a DateTime parameter. Part of:

Re: [Freeipa-devel] [PATCH 0138] ipalib: Expose krbPrincipalExpiration in CLI

2014-01-14 Thread Martin Kosek
On 01/14/2014 03:19 PM, Petr Viktorin wrote: On 01/14/2014 09:28 AM, Jan Cholasta wrote: On 9.1.2014 16:31, Tomas Babej wrote: Hi, Adds a krbPrincipalExpiration attribute to the user class in user.py ipalib plugin as a DateTime parameter. Part of:

[Freeipa-devel] [PATCH] 0451 integration tests OpenSSHTransport: Expand tilde to home in, root_ssh_key_filename

2014-01-14 Thread Petr Viktorin
https://fedorahosted.org/freeipa/ticket/4115 The tilde was not expanded in the $IPA_ROOT_SSH_KEY configuration variable, so the default (~/.ssh/id_rsa) did not work. Here's a fix. -- PetrĀ³ From 78164b1a6f9fd5d247511d664f616697fef1d1ca Mon Sep 17 00:00:00 2001 From: Petr Viktorin

Re: [Freeipa-devel] [PATCH] 0451 integration tests OpenSSHTransport: Expand tilde to home in, root_ssh_key_filename

2014-01-14 Thread Simo Sorce
On Tue, 2014-01-14 at 18:02 +0100, Petr Viktorin wrote: https://fedorahosted.org/freeipa/ticket/4115 The tilde was not expanded in the $IPA_ROOT_SSH_KEY configuration variable, so the default (~/.ssh/id_rsa) did not work. Here's a fix. Looks good. Simo. -- Simo Sorce * Red Hat, Inc * New

Re: [Freeipa-devel] [PATCH] 0335 ipa-replica-install: Move check for existing host before DNS resolution check

2014-01-14 Thread Rob Crittenden
Petr Viktorin wrote: On 01/13/2014 05:19 PM, Rob Crittenden wrote: Petr Viktorin wrote: See commit message ticket for details. https://fedorahosted.org/freeipa/ticket/3889 If memory serves this was done so that both the replication and the host checks would be done so the admin wouldn't

[Freeipa-devel] [PATCH] 1105 fix creating host with --password=

2014-01-14 Thread Rob Crittenden
Fix creating a host with --password= (yes, an empty password). The ticket has full reproduction details. rob From 1f854bf29e8584169a6f7e0607b2dcc9d641f84d Mon Sep 17 00:00:00 2001 From: Rob Crittenden rcrit...@redhat.com Date: Tue, 14 Jan 2014 14:23:47 -0500 Subject: [PATCH] Change the way we

[Freeipa-devel] [PATCHES] 506-507 Fix ticket #4085

2014-01-14 Thread Simo Sorce
Uniform fallback for global_policy and stop explicitly adding the default policy to all user accounts. Tested. Simo. -- Simo Sorce * Red Hat, Inc * New York From f53bc36f1631c7835746ff96d62c1011944f2f00 Mon Sep 17 00:00:00 2001 From: Simo Sorce s...@redhat.com Date: Tue, 14 Jan 2014 10:09:37

Re: [Freeipa-devel] python-kerberos patch

2014-01-14 Thread Simo Sorce
On Tue, 2014-01-14 at 13:12 -0500, Rob Crittenden wrote: Simo Sorce wrote: On Mon, 2014-01-13 at 14:45 -0500, Rob Crittenden wrote: In an effort to be able to to use GSS-Proxy as a client in IPA I've written a patch against python-kerberos to add a call to gss_cred_inquire so we can peek