Re: [Freeipa-devel] DNSSEC design page

2014-02-27 Thread Martin Kosek
On 02/27/2014 05:46 PM, Rich Megginson wrote: > On 02/27/2014 09:37 AM, Petr Spacek wrote: >> On 27.2.2014 17:24, Ludwig Krispenz wrote: >>> >>> On 02/27/2014 03:56 PM, Jan Cholasta wrote: On 27.2.2014 15:23, Ludwig Krispenz wrote: > > On 02/27/2014 02:14 PM, Jan Cholasta wrote: >>

Re: [Freeipa-devel] Client-side command in the IPA framework

2014-02-27 Thread Rob Crittenden
Alexander Bokovoy wrote: On Thu, 27 Feb 2014, Nathaniel McCallum wrote: So the recent discussion on importing tokens led me to write a script to parse RFC 6030 xml files into IPA token data. This all works well. But now I need to integrate it into the IPA framework. This command will parse one

Re: [Freeipa-devel] How to restore an IPA Replica when the CSN number generator has moved impossibly far into the future or past

2014-02-27 Thread Rich Megginson
On 02/03/2014 10:37 PM, JR Aquino wrote: If you are seeing clock skew errors in /var/log/dirsrv/slapd-EXAMPLE-COM/errors that look like this, then you will need to verify the time/date of the server to make sure NTP isn't freaked out. If the system date i

Re: [Freeipa-devel] Client-side command in the IPA framework

2014-02-27 Thread Alexander Bokovoy
On Thu, 27 Feb 2014, Nathaniel McCallum wrote: So the recent discussion on importing tokens led me to write a script to parse RFC 6030 xml files into IPA token data. This all works well. But now I need to integrate it into the IPA framework. This command will parse one or more xml files, creatin

Re: [Freeipa-devel] Client-side command in the IPA framework

2014-02-27 Thread Nathaniel McCallum
On Thu, 2014-02-27 at 17:44 -0500, Nathaniel McCallum wrote: > So the recent discussion on importing tokens led me to write a script to > parse RFC 6030 xml files into IPA token data. This all works well. But > now I need to integrate it into the IPA framework. > > This command will parse one or m

[Freeipa-devel] Client-side command in the IPA framework

2014-02-27 Thread Nathaniel McCallum
So the recent discussion on importing tokens led me to write a script to parse RFC 6030 xml files into IPA token data. This all works well. But now I need to integrate it into the IPA framework. This command will parse one or more xml files, creating a set of tokens to be added. Given that we alre

Re: [Freeipa-devel] [PATCH] 1106 IPA REST smart proxy

2014-02-27 Thread Rob Crittenden
Rob Crittenden wrote: Dmitri Pal wrote: On 02/17/2014 04:57 PM, Rob Crittenden wrote: Dmitri Pal wrote: On 02/17/2014 04:13 PM, Rob Crittenden wrote: Dmitri Pal wrote: On 02/17/2014 02:33 PM, Rob Crittenden wrote: Dmitri Pal wrote: On 02/17/2014 01:21 PM, Rob Crittenden wrote: Martin Kose

Re: [Freeipa-devel] DNSSEC design page

2014-02-27 Thread Rich Megginson
On 02/27/2014 01:10 PM, Petr Spacek wrote: On 27.2.2014 17:55, Ludwig Krispenz wrote: On 02/27/2014 05:46 PM, Rich Megginson wrote: On 02/27/2014 09:37 AM, Petr Spacek wrote: On 27.2.2014 17:24, Ludwig Krispenz wrote: On 02/27/2014 03:56 PM, Jan Cholasta wrote: On 27.2.2014 15:23, Ludwig K

Re: [Freeipa-devel] DNSSEC design page

2014-02-27 Thread Petr Spacek
On 27.2.2014 17:55, Ludwig Krispenz wrote: On 02/27/2014 05:46 PM, Rich Megginson wrote: On 02/27/2014 09:37 AM, Petr Spacek wrote: On 27.2.2014 17:24, Ludwig Krispenz wrote: On 02/27/2014 03:56 PM, Jan Cholasta wrote: On 27.2.2014 15:23, Ludwig Krispenz wrote: On 02/27/2014 02:14 PM, Jan

Re: [Freeipa-devel] DNSSEC design page

2014-02-27 Thread Ludwig Krispenz
On 02/27/2014 05:46 PM, Rich Megginson wrote: On 02/27/2014 09:37 AM, Petr Spacek wrote: On 27.2.2014 17:24, Ludwig Krispenz wrote: On 02/27/2014 03:56 PM, Jan Cholasta wrote: On 27.2.2014 15:23, Ludwig Krispenz wrote: On 02/27/2014 02:14 PM, Jan Cholasta wrote: On 18.2.2014 17:19, Martin

Re: [Freeipa-devel] DNSSEC design page

2014-02-27 Thread Jan Cholasta
On 27.2.2014 17:49, Ludwig Krispenz wrote: On 02/27/2014 05:48 PM, Jan Cholasta wrote: On 27.2.2014 17:24, Ludwig Krispenz wrote: On 02/27/2014 03:56 PM, Jan Cholasta wrote: On 27.2.2014 15:23, Ludwig Krispenz wrote: On 02/27/2014 02:14 PM, Jan Cholasta wrote: On 18.2.2014 17:19, Martin K

Re: [Freeipa-devel] DNSSEC design page

2014-02-27 Thread Ludwig Krispenz
On 02/27/2014 05:48 PM, Jan Cholasta wrote: On 27.2.2014 17:24, Ludwig Krispenz wrote: On 02/27/2014 03:56 PM, Jan Cholasta wrote: On 27.2.2014 15:23, Ludwig Krispenz wrote: On 02/27/2014 02:14 PM, Jan Cholasta wrote: On 18.2.2014 17:19, Martin Kosek wrote: On 02/18/2014 04:38 PM, Jan Cho

Re: [Freeipa-devel] DNSSEC design page

2014-02-27 Thread Jan Cholasta
On 27.2.2014 17:24, Ludwig Krispenz wrote: On 02/27/2014 03:56 PM, Jan Cholasta wrote: On 27.2.2014 15:23, Ludwig Krispenz wrote: On 02/27/2014 02:14 PM, Jan Cholasta wrote: On 18.2.2014 17:19, Martin Kosek wrote: On 02/18/2014 04:38 PM, Jan Cholasta wrote: On 18.2.2014 16:35, Petr Spacek

Re: [Freeipa-devel] DNSSEC design page

2014-02-27 Thread Rich Megginson
On 02/27/2014 09:37 AM, Petr Spacek wrote: On 27.2.2014 17:24, Ludwig Krispenz wrote: On 02/27/2014 03:56 PM, Jan Cholasta wrote: On 27.2.2014 15:23, Ludwig Krispenz wrote: On 02/27/2014 02:14 PM, Jan Cholasta wrote: On 18.2.2014 17:19, Martin Kosek wrote: On 02/18/2014 04:38 PM, Jan Chola

Re: [Freeipa-devel] [PATCH] 531-541 OTP UI

2014-02-27 Thread Nathaniel McCallum
On Thu, 2014-02-27 at 17:29 +0100, Petr Vobornik wrote: > On 27.2.2014 16:51, Nathaniel McCallum wrote: > > On Thu, 2014-02-27 at 13:35 +0100, Petr Vobornik wrote: > >> On 21.2.2014 15:24, Petr Vobornik wrote: > >>> On 10.2.2014 14:12, Petr Vobornik wrote: > On 13.1.2014 17:09, Petr Vobornik w

Re: [Freeipa-devel] DNSSEC design page

2014-02-27 Thread Petr Spacek
On 27.2.2014 17:24, Ludwig Krispenz wrote: On 02/27/2014 03:56 PM, Jan Cholasta wrote: On 27.2.2014 15:23, Ludwig Krispenz wrote: On 02/27/2014 02:14 PM, Jan Cholasta wrote: On 18.2.2014 17:19, Martin Kosek wrote: On 02/18/2014 04:38 PM, Jan Cholasta wrote: On 18.2.2014 16:35, Petr Spacek

Re: [Freeipa-devel] [389-devel] Design review (second): Access control on entries specified in MODDN operation (ticket 47553)

2014-02-27 Thread Ludwig Krispenz
Hi, in the replication section you describe the behaviour when replicating to older versions of ds, but this is for n1, how about the new design ? Ludwig On 02/27/2014 04:46 PM, thierry bordaz wrote: Hello, Thanks to all your feedbacks, they helped me a lot and raised a severe limitation in

Re: [Freeipa-devel] Is there RPC documentation?

2014-02-27 Thread Simo Sorce
On Thu, 2014-02-27 at 08:41 -0700, Rich Megginson wrote: > On 02/27/2014 06:19 AM, Rob Crittenden wrote: > > Rich Megginson wrote: > >> On 02/26/2014 03:48 PM, Simo Sorce wrote: > >>> On Wed, 2014-02-26 at 15:28 -0700, Rich Megginson wrote: > On 02/26/2014 03:22 PM, Rob Crittenden wrote: > >>>

Re: [Freeipa-devel] Is there RPC documentation?

2014-02-27 Thread Simo Sorce
On Thu, 2014-02-27 at 11:32 -0500, Rob Crittenden wrote: > Rich Megginson wrote: > > On 02/27/2014 06:19 AM, Rob Crittenden wrote: > >> Rich Megginson wrote: > >>> On 02/26/2014 03:48 PM, Simo Sorce wrote: > On Wed, 2014-02-26 at 15:28 -0700, Rich Megginson wrote: > > On 02/26/2014 03:22 P

Re: [Freeipa-devel] Is there RPC documentation?

2014-02-27 Thread Rob Crittenden
Rich Megginson wrote: On 02/27/2014 06:19 AM, Rob Crittenden wrote: Rich Megginson wrote: On 02/26/2014 03:48 PM, Simo Sorce wrote: On Wed, 2014-02-26 at 15:28 -0700, Rich Megginson wrote: On 02/26/2014 03:22 PM, Rob Crittenden wrote: Rich Megginson wrote: On 02/26/2014 02:19 PM, Rob Critte

Re: [Freeipa-devel] [PATCH] 531-541 OTP UI

2014-02-27 Thread Petr Vobornik
On 27.2.2014 16:51, Nathaniel McCallum wrote: On Thu, 2014-02-27 at 13:35 +0100, Petr Vobornik wrote: On 21.2.2014 15:24, Petr Vobornik wrote: On 10.2.2014 14:12, Petr Vobornik wrote: On 13.1.2014 17:09, Petr Vobornik wrote: Hi, these patches implements the OTP Web UI. Last 5 patches is the

Re: [Freeipa-devel] DNSSEC design page

2014-02-27 Thread Ludwig Krispenz
On 02/27/2014 03:56 PM, Jan Cholasta wrote: On 27.2.2014 15:23, Ludwig Krispenz wrote: On 02/27/2014 02:14 PM, Jan Cholasta wrote: On 18.2.2014 17:19, Martin Kosek wrote: On 02/18/2014 04:38 PM, Jan Cholasta wrote: On 18.2.2014 16:35, Petr Spacek wrote: On 18.2.2014 16:31, Jan Cholasta wro

[Freeipa-devel] [389-devel] Design review (second): Access control on entries specified in MODDN operation (ticket 47553)

2014-02-27 Thread thierry bordaz
Hello, Thanks to all your feedbacks, they helped me a lot and raised a severe limitation in the original design. I updated the design following the aci syntax proposed during the discussion. On the implementation side, it is a bit more complex but less than I expected. I have not yet investiga

Re: [Freeipa-devel] [PATCH] 531-541 OTP UI

2014-02-27 Thread Nathaniel McCallum
On Thu, 2014-02-27 at 13:35 +0100, Petr Vobornik wrote: > On 21.2.2014 15:24, Petr Vobornik wrote: > > On 10.2.2014 14:12, Petr Vobornik wrote: > >> On 13.1.2014 17:09, Petr Vobornik wrote: > >>> Hi, > >>> > >>> these patches implements the OTP Web UI. > >>> > >>> Last 5 patches is the OTP UI. > >>

Re: [Freeipa-devel] Is there RPC documentation?

2014-02-27 Thread Rich Megginson
On 02/27/2014 06:19 AM, Rob Crittenden wrote: Rich Megginson wrote: On 02/26/2014 03:48 PM, Simo Sorce wrote: On Wed, 2014-02-26 at 15:28 -0700, Rich Megginson wrote: On 02/26/2014 03:22 PM, Rob Crittenden wrote: Rich Megginson wrote: On 02/26/2014 02:19 PM, Rob Crittenden wrote: Rich Meggi

Re: [Freeipa-devel] Thank you for FreeOTP!

2014-02-27 Thread Nathaniel McCallum
On Tue, 2014-02-25 at 23:03 +0530, Kashyap Chamarthy wrote: > Heya, > > Just wanted to say thank you for FreeOTP, Nathaniel and co. > > And, of course, more thankful to all the Identity open source/free > software from this awesome team! > > A happy user. Kashyap, Glad you like it! Thanks for

Re: [Freeipa-devel] DNSSEC design page

2014-02-27 Thread Jan Cholasta
On 27.2.2014 15:23, Ludwig Krispenz wrote: On 02/27/2014 02:14 PM, Jan Cholasta wrote: On 18.2.2014 17:19, Martin Kosek wrote: On 02/18/2014 04:38 PM, Jan Cholasta wrote: On 18.2.2014 16:35, Petr Spacek wrote: On 18.2.2014 16:31, Jan Cholasta wrote: 2] low level replacement for eg the sqli

Re: [Freeipa-devel] Thank you for FreeOTP!

2014-02-27 Thread Simo Sorce
On Tue, 2014-02-25 at 23:03 +0530, Kashyap Chamarthy wrote: > Heya, > > Just wanted to say thank you for FreeOTP, Nathaniel and co. > > And, of course, more thankful to all the Identity open source/free > software from this awesome team! > > A happy user. > Thanks Kashyap, really appreciated.

Re: [Freeipa-devel] DNSSEC design page

2014-02-27 Thread Ludwig Krispenz
On 02/27/2014 02:14 PM, Jan Cholasta wrote: On 18.2.2014 17:19, Martin Kosek wrote: On 02/18/2014 04:38 PM, Jan Cholasta wrote: On 18.2.2014 16:35, Petr Spacek wrote: On 18.2.2014 16:31, Jan Cholasta wrote: 2] low level replacement for eg the sqlite3 database in softhsm. That's what I somet

[Freeipa-devel] [PATCH][bind-dyndb-ldap] AUTOCONF: Improve detection of bind9 header files

2014-02-27 Thread Lukas Slebodnik
ehlo, I did some reviews of bind-dyndb-ldap last week and it was little bit annoying to export special CFLAGS for bind9 header files. It can be automatically detected in configure script using utility isc-config. Attached patch should improve this and CFLAGS needn't be exported. LS >From 118301

Re: [Freeipa-devel] [PATCH] 0143: catch access denial when removing old trust object when using non-privileged AD user to create trust

2014-02-27 Thread Martin Kosek
On 02/26/2014 04:54 PM, Alexander Bokovoy wrote: > Hi, > > this patch fixes a case when non-privileged AD user account is used to > re-establish trust. We need to catch one specific exception in deleting > the old trust and bail out earlier with proper error message. > > https://fedorahosted.org/

Re: [Freeipa-devel] Is there RPC documentation?

2014-02-27 Thread Rob Crittenden
Rich Megginson wrote: On 02/26/2014 03:48 PM, Simo Sorce wrote: On Wed, 2014-02-26 at 15:28 -0700, Rich Megginson wrote: On 02/26/2014 03:22 PM, Rob Crittenden wrote: Rich Megginson wrote: On 02/26/2014 02:19 PM, Rob Crittenden wrote: Rich Megginson wrote: On 02/26/2014 08:53 AM, Petr Vikto

Re: [Freeipa-devel] [PATCH] 0144: trust: make sure we always discover topology of the forest trust

2014-02-27 Thread Martin Kosek
On 02/27/2014 01:43 PM, Alexander Bokovoy wrote: > On Thu, 27 Feb 2014, Martin Kosek wrote: >> On 02/27/2014 12:48 PM, Alexander Bokovoy wrote: >>> Thanks to Martin for noticing we had been fetching information about >>> subdomains only in case there is algorithmic ID mapping in use. Instead, >>> w

Re: [Freeipa-devel] DNSSEC design page

2014-02-27 Thread Jan Cholasta
On 18.2.2014 17:19, Martin Kosek wrote: On 02/18/2014 04:38 PM, Jan Cholasta wrote: On 18.2.2014 16:35, Petr Spacek wrote: On 18.2.2014 16:31, Jan Cholasta wrote: 2] low level replacement for eg the sqlite3 database in softhsm. That's what I sometimes get the impression what is wanted. SoftHs

Re: [Freeipa-devel] [PATCH] 0144: trust: make sure we always discover topology of the forest trust

2014-02-27 Thread Alexander Bokovoy
On Thu, 27 Feb 2014, Martin Kosek wrote: On 02/27/2014 12:48 PM, Alexander Bokovoy wrote: Thanks to Martin for noticing we had been fetching information about subdomains only in case there is algorithmic ID mapping in use. Instead, we should always fetch the subdomains but create new ranges only

Re: [Freeipa-devel] [PATCH] 531-541 OTP UI

2014-02-27 Thread Petr Vobornik
On 21.2.2014 15:24, Petr Vobornik wrote: On 10.2.2014 14:12, Petr Vobornik wrote: On 13.1.2014 17:09, Petr Vobornik wrote: Hi, these patches implements the OTP Web UI. Last 5 patches is the OTP UI. First 6 patches is a little refactoring/bug fixes needed for them. General password dialog is

Re: [Freeipa-devel] [PATCH] 0144: trust: make sure we always discover topology of the forest trust

2014-02-27 Thread Martin Kosek
On 02/27/2014 12:48 PM, Alexander Bokovoy wrote: > Thanks to Martin for noticing we had been fetching information about > subdomains only in case there is algorithmic ID mapping in use. Instead, > we should always fetch the subdomains but create new ranges only for > algorithmic case. > > https://

[Freeipa-devel] [PATCH 0230] Remove release tag from BIND dependency

2014-02-27 Thread Petr Spacek
Hello, Remove release tag from BIND dependency. This change should allow to build v3 branch on RHEL/CentOS 6. Pushed to v3 branch 2ec56086e811a2247e7a75b5eb5d4784751cb2a5. -- Petr^2 Spacek From 2ec56086e811a2247e7a75b5eb5d4784751cb2a5 Mon Sep 17 00:00:00 2001 From: Petr Spacek Date: Thu, 27 F

Re: [Freeipa-devel] [PATCH] 0478 ipalib.plugins: Expose LDAPObjects' eligibility for permission --type in JSON metadata

2014-02-27 Thread Petr Viktorin
On 02/27/2014 12:52 PM, Alexander Bokovoy wrote: On Thu, 27 Feb 2014, Petr Viktorin wrote: Hello, This patch exposes object metadata needed for permission WebUI. https://fedorahosted.org/freeipa/ticket/4201 -- Petr³ From cbebd3328715db4ddd4afe9bdbd6c6edf0bf7148 Mon Sep 17 00:00:00 2001 From

Re: [Freeipa-devel] [PATCH 0156] trusts: Remove usage of deprecated LDAP API

2014-02-27 Thread Petr Viktorin
On 02/27/2014 12:51 PM, Alexander Bokovoy wrote: On Thu, 27 Feb 2014, Tomas Babej wrote: Hi, Remove a reference to the old deprecated LDAP API invoked by the usage of trust_add method. https://fedorahosted.org/freeipa/ticket/4204 -- Tomas Babej Associate Software Engeneer | Red Hat | Identity

Re: [Freeipa-devel] [PATCH] 0478 ipalib.plugins: Expose LDAPObjects' eligibility for permission --type in JSON metadata

2014-02-27 Thread Alexander Bokovoy
On Thu, 27 Feb 2014, Petr Viktorin wrote: Hello, This patch exposes object metadata needed for permission WebUI. https://fedorahosted.org/freeipa/ticket/4201 -- Petr³ From cbebd3328715db4ddd4afe9bdbd6c6edf0bf7148 Mon Sep 17 00:00:00 2001 From: Petr Viktorin Date: Wed, 26 Feb 2014 16:39:49 +

Re: [Freeipa-devel] [PATCH 0156] trusts: Remove usage of deprecated LDAP API

2014-02-27 Thread Alexander Bokovoy
On Thu, 27 Feb 2014, Tomas Babej wrote: Hi, Remove a reference to the old deprecated LDAP API invoked by the usage of trust_add method. https://fedorahosted.org/freeipa/ticket/4204 -- Tomas Babej Associate Software Engeneer | Red Hat | Identity Management RHCE | Brno Site | IRC: tbabej | freei

[Freeipa-devel] [PATCH] 0144: trust: make sure we always discover topology of the forest trust

2014-02-27 Thread Alexander Bokovoy
Thanks to Martin for noticing we had been fetching information about subdomains only in case there is algorithmic ID mapping in use. Instead, we should always fetch the subdomains but create new ranges only for algorithmic case. https://fedorahosted.org/freeipa/ticket/4205 -- / Alexander Bokovoy

[Freeipa-devel] [PATCH] 0478 ipalib.plugins: Expose LDAPObjects' eligibility for permission --type in JSON metadata

2014-02-27 Thread Petr Viktorin
Hello, This patch exposes object metadata needed for permission WebUI. https://fedorahosted.org/freeipa/ticket/4201 -- Petr³ From cbebd3328715db4ddd4afe9bdbd6c6edf0bf7148 Mon Sep 17 00:00:00 2001 From: Petr Viktorin Date: Wed, 26 Feb 2014 16:39:49 +0100 Subject: [PATCH] ipalib.plugins: Expose L

Re: [Freeipa-devel] [PATCH] 6 webui: Too big font in input fields

2014-02-27 Thread Petr Vobornik
On 26.2.2014 18:24, Adam Misnyovszki wrote: - Original Message - From: "Petr Vobornik" To: "Adam Misnyovszki" , freeipa-devel@redhat.com, "Martin Kosek" Sent: Wednesday, February 26, 2014 2:32:52 PM Subject: Re: [Freeipa-devel] [PATCH] Too big font in input fields On 26.2.2014 13:0

Re: [Freeipa-devel] [PATCH] 0139 trustdomain_find: make sure we skip short entries when --pkey-only is specified

2014-02-27 Thread Martin Kosek
On 02/27/2014 11:06 AM, Alexander Bokovoy wrote: > On Thu, 27 Feb 2014, Martin Kosek wrote: >> On 02/26/2014 05:03 PM, Alexander Bokovoy wrote: >>> On Wed, 26 Feb 2014, Martin Kosek wrote: On 02/25/2014 06:56 PM, Alexander Bokovoy wrote: > Hi, > > Simple patch to fix KeyError as --

Re: [Freeipa-devel] DNSSEC design page

2014-02-27 Thread Jan Cholasta
On 27.2.2014 11:28, Ludwig Krispenz wrote: On 02/27/2014 10:17 AM, Jan Cholasta wrote: On 26.2.2014 17:37, Petr Spacek wrote: On 26.2.2014 15:20, Ludwig Krispenz wrote: I was talking about 'layer of indirection' previously. I'm digging into details and it seems like a good idea to imitate wha

Re: [Freeipa-devel] DNSSEC design page

2014-02-27 Thread Ludwig Krispenz
On 02/27/2014 10:17 AM, Jan Cholasta wrote: On 26.2.2014 17:37, Petr Spacek wrote: On 26.2.2014 15:20, Ludwig Krispenz wrote: I was talking about 'layer of indirection' previously. I'm digging into details and it seems like a good idea to imitate what DNS registrars do - use concept of key se

Re: [Freeipa-devel] [PATCH] 0139 trustdomain_find: make sure we skip short entries when --pkey-only is specified

2014-02-27 Thread Alexander Bokovoy
On Thu, 27 Feb 2014, Martin Kosek wrote: On 02/26/2014 05:03 PM, Alexander Bokovoy wrote: On Wed, 26 Feb 2014, Martin Kosek wrote: On 02/25/2014 06:56 PM, Alexander Bokovoy wrote: Hi, Simple patch to fix KeyError as --pkey-only causes no attributes to be returned and trustdomain_find.post_cal

Re: [Freeipa-devel] [PATCH] 0139 trustdomain_find: make sure we skip short entries when --pkey-only is specified

2014-02-27 Thread Martin Kosek
On 02/26/2014 05:03 PM, Alexander Bokovoy wrote: > On Wed, 26 Feb 2014, Martin Kosek wrote: >> On 02/25/2014 06:56 PM, Alexander Bokovoy wrote: >>> Hi, >>> >>> Simple patch to fix KeyError as --pkey-only causes no attributes to be >>> returned and trustdomain_find.post_callback checked them >>> unc

Re: [Freeipa-devel] [PATCH] 544 webui: Focus expand/collapse link in batch_error dialog

2014-02-27 Thread Petr Viktorin
On 02/26/2014 04:55 PM, Adam Misnyovszki wrote: - Original Message - From: "Petr Vobornik" To: "freeipa-devel" Sent: Tuesday, February 25, 2014 2:19:21 PM Subject: [Freeipa-devel] [PATCH] 544 webui: Focus expand/collapse link in batch_error dialog Dialog loses focus when the

[Freeipa-devel] [PATCH 0156] trusts: Remove usage of deprecated LDAP API

2014-02-27 Thread Tomas Babej
Hi, Remove a reference to the old deprecated LDAP API invoked by the usage of trust_add method. https://fedorahosted.org/freeipa/ticket/4204 -- Tomas Babej Associate Software Engeneer | Red Hat | Identity Management RHCE | Brno Site | IRC: tbabej | freeipa.org >From ee59e86f5ee91da97de0484fd

Re: [Freeipa-devel] DNSSEC design page

2014-02-27 Thread Jan Cholasta
On 26.2.2014 17:37, Petr Spacek wrote: On 26.2.2014 15:20, Ludwig Krispenz wrote: I was talking about 'layer of indirection' previously. I'm digging into details and it seems like a good idea to imitate what DNS registrars do - use concept of key sets. It means that keys are not linked to a zone

Re: [Freeipa-devel] FreeIPA 3.4 -> 4.0

2014-02-27 Thread Martin Kosek
On 02/26/2014 11:50 PM, Dmitri Pal wrote: > On 02/26/2014 09:46 AM, Petr Viktorin wrote: >> On 02/26/2014 12:24 PM, Martin Kosek wrote: >>> Hello all, >>> >>> I would like to discuss a proposal that Simo had on FreeIPA devel meeting. >>> Given permission/ACI refactoring that Petr3 is working on, pe