Re: [Freeipa-devel] [PATCH] 455 Fallback to global policy in ipa-lockout plugin

2014-02-04 Thread Petr Viktorin
On 02/03/2014 09:16 AM, Martin Kosek wrote: On 01/31/2014 04:39 PM, Rob Crittenden wrote: Martin Kosek wrote: On 01/30/2014 07:19 PM, Rob Crittenden wrote: Martin Kosek wrote: krbPwdPolicyReference is no longer filled default users. Instead, plugins fallback to hardcoded global policy

[Freeipa-devel] [PATCH] 456 ipa-lockout: do not fail when default realm cannot be read

2014-02-04 Thread Martin Kosek
When ipa-lockout plugin is started during FreeIPA server installation, the default realm may not be available and plugin should then not end with failure. Similarly to other plugins, start in degraded mode in this situation. Operation is fully restored during the final services restart.

Re: [Freeipa-devel] [PATCH] 455 Fallback to global policy in ipa-lockout plugin

2014-02-04 Thread Martin Kosek
On 02/04/2014 10:27 AM, Petr Viktorin wrote: On 02/03/2014 09:16 AM, Martin Kosek wrote: On 01/31/2014 04:39 PM, Rob Crittenden wrote: Martin Kosek wrote: On 01/30/2014 07:19 PM, Rob Crittenden wrote: Martin Kosek wrote: krbPwdPolicyReference is no longer filled default users. Instead,

Re: [Freeipa-devel] [PATCH] 456 ipa-lockout: do not fail when default realm cannot be read

2014-02-04 Thread Rob Crittenden
Martin Kosek wrote: When ipa-lockout plugin is started during FreeIPA server installation, the default realm may not be available and plugin should then not end with failure. Similarly to other plugins, start in degraded mode in this situation. Operation is fully restored during the final

Re: [Freeipa-devel] [PATCH] 456 ipa-lockout: do not fail when default realm cannot be read

2014-02-04 Thread Martin Kosek
On 02/04/2014 12:42 PM, Rob Crittenden wrote: Martin Kosek wrote: When ipa-lockout plugin is started during FreeIPA server installation, the default realm may not be available and plugin should then not end with failure. Similarly to other plugins, start in degraded mode in this situation.

[Freeipa-devel] [PATCH] 238 Fix modlist generation code not to generate empty replace mods

2014-02-04 Thread Jan Cholasta
Hi, the attached patch fixes https://fedorahosted.org/freeipa/ticket/4138. Honza -- Jan Cholasta From 907151a2adae30741a0ac585249e2fa627076f97 Mon Sep 17 00:00:00 2001 From: Jan Cholasta jchol...@redhat.com Date: Tue, 4 Feb 2014 11:39:35 +0100 Subject: [PATCH] Fix modlist generation code not

Re: [Freeipa-devel] [PATCH] 531-541 OTP UI

2014-02-04 Thread Petr Vobornik
On 4.2.2014 17:53, Nathaniel McCallum wrote: On Tue, 2014-01-21 at 17:45 +0100, Petr Vobornik wrote: On 13.1.2014 17:09, Petr Vobornik wrote: Hi, these patches implements the OTP Web UI. Last 5 patches is the OTP UI. First 6 patches is a little refactoring/bug fixes needed for them. General

Re: [Freeipa-devel] [PATCH] 531-541 OTP UI

2014-02-04 Thread Nathaniel McCallum
On Tue, 2014-02-04 at 18:44 +0100, Petr Vobornik wrote: On 4.2.2014 17:53, Nathaniel McCallum wrote: On Tue, 2014-01-21 at 17:45 +0100, Petr Vobornik wrote: On 13.1.2014 17:09, Petr Vobornik wrote: Hi, these patches implements the OTP Web UI. Last 5 patches is the OTP UI. First

Re: [Freeipa-devel] [PATCH] 0451 integration tests OpenSSHTransport: Expand tilde to home in, root_ssh_key_filename

2014-02-04 Thread Tomas Babej
On 01/14/2014 07:03 PM, Simo Sorce wrote: On Tue, 2014-01-14 at 18:02 +0100, Petr Viktorin wrote: https://fedorahosted.org/freeipa/ticket/4115 The tilde was not expanded in the $IPA_ROOT_SSH_KEY configuration variable, so the default (~/.ssh/id_rsa) did not work. Here's a fix. Looks good.

Re: [Freeipa-devel] [PATCH] 0451 integration tests OpenSSHTransport: Expand tilde to home in, root_ssh_key_filename

2014-02-04 Thread Petr Viktorin
On 02/05/2014 06:49 AM, Tomas Babej wrote: On 01/14/2014 07:03 PM, Simo Sorce wrote: On Tue, 2014-01-14 at 18:02 +0100, Petr Viktorin wrote: https://fedorahosted.org/freeipa/ticket/4115 The tilde was not expanded in the $IPA_ROOT_SSH_KEY configuration variable, so the default (~/.ssh/id_rsa)