D PGP SIGNATURE-
From ef3ee6ac3da9c95c57287b687a29bf7ea61f5613 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek
Date: Fri, 18 Feb 2011 13:53:27 +0100
Subject: [PATCH] Better doc for idnssoaminimum
---
API.txt | 30 +++---
ipalib/plugins/dns.py |8 ++
-
From f2eb0ec3cf4c2bcc698454bba97ed4501deb12b6 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek
Date: Fri, 18 Feb 2011 10:24:40 +0100
Subject: [PATCH] Set SRV discovery for clients only if it succeeded during installation
---
ipa-client/ipa-install/ipa-client-install |6 +++---
1 files changed, 3
http://enigmail.mozdev.org/
iEYEARECAAYFAk1eY7MACgkQHsardTLnvCUDvwCgipqeB9MLUJqm/LZnVhlmAxRi
rQ8AnjzZLU41MqL8lahQhWUEFJurtvBI
=7rSZ
-END PGP SIGNATURE-
From a0fa22d28602d09c9cb8358a9ef7876e3029b171 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek
Date: Fri, 18 Feb 2011 11:00:36 +0100
Subject: [PATCH] Validate
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 02/18/2011 05:19 AM, Rob Crittenden wrote:
> Right before rc1 I discovered a problem in ipa-replica-prepare. It was
> crashign when trying to generate the SSL certificates. The first time it
> failed on nss_shutdown() claiming that NSS wasn't initia
On Thu, Feb 17, 2011 at 03:23:18PM -0500, Rob Crittenden wrote:
> Configure SSSD to look in DNS for the IPA servers first, then fall
> back to the server we configured against.
>
> ticket 980
>
> rob
Works fine (tested both service discovery and failover), ack
__
On Thu, Feb 17, 2011 at 12:01:05PM -0500, Rob Crittenden wrote:
> nsaccountlock doesn't have a visible Param but we want do so some
> basic validation to be sure garbage doesn't get in there so do it in
> the pre_callback of add and mod.
>
> ticket 968
>
> rob
Ack
__
To test, try running "ipa cert-remove-hold 11" with a selfsigned install
>From f06c082f00d2b6506a796cc6a4317a77ba16f2f4 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek
Date: Thu, 17 Feb 2011 20:35:50 +0100
Subject: [PATCH] Raise NotImplementedError for selfsigned cert-remove-hold
-
On Thu, Feb 17, 2011 at 08:25:37PM +0100, Jakub Hrozek wrote:
> On Wed, Feb 09, 2011 at 10:23:27AM +0100, Jan Zelený wrote:
> > Jakub Hrozek wrote:
> > > On Thu, Feb 03, 2011 at 02:23:11PM +0100, Jan Zelený wrote:
> > > > Jakub Hrozek wrote:
> > > > >
On Wed, Feb 09, 2011 at 10:23:27AM +0100, Jan Zelený wrote:
> Jakub Hrozek wrote:
> > On Thu, Feb 03, 2011 at 02:23:11PM +0100, Jan Zelený wrote:
> > > Jakub Hrozek wrote:
> > > > Hi,
> > > >
> > > > attached is a patch to nsslib.py that ch
On Thu, Feb 17, 2011 at 11:30:03AM +0100, Jan Zelený wrote:
> Better, thanks. I'd also like to change the code which is using this function,
> so the conversion doesn't take place twice.
I think it's safe. The documentation on unicode() says:
---
More precisely, if object is a Unicode string or
On Thu, Feb 17, 2011 at 11:06:35AM +0100, Jan Zelený wrote:
> Jan Zelený wrote:
> > Jakub Hrozek wrote:
> > > While reviewing Rob's latest patch I found out that we didn't convert to
> > > unicode on couple of places in the host plugin.
> >
&g
mozdev.org/
iEYEARECAAYFAk1b8WUACgkQHsardTLnvCWRjwCfZfOqAStP6exuq7oRlw9N4CuF
YtkAnRHwT/In85pu3E+y/w0DetsumYBF
=XUgJ
-END PGP SIGNATURE-
From 998b867343d1870d26a548646a6652c0c7acb838 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek
Date: Wed, 16 Feb 2011 10:33:24 -0500
Subject: [PATCH] Use unicode
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 02/15/2011 09:06 PM, Rob Crittenden wrote:
> We are required by LDAP schema to have a cn value in a host record.
> Don't let a user modify it, it will just cause confusion.
>
> tickets 706 and 707
>
> rob
>
Ack
-BEGIN PGP SIGNATURE-
Vers
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 02/16/2011 03:28 PM, Jakub Hrozek wrote:
> On Tue, Feb 15, 2011 at 03:45:12PM -0500, Rob Crittenden wrote:
>> Jakub Hrozek wrote:
>>> -BEGIN PGP SIGNED MESSAGE-
>>> Hash: SHA1
>>>
>>> https://fe
, decimal takes precedence.
* a hexadecimal radix can be specified explicitly using the
traditional 0x prefix
https://fedorahosted.org/freeipa/ticket/958
https://fedorahosted.org/freeipa/ticket/953
>From d1a37986652947215422302cc574a321c68a76b5 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek
Date:
On Tue, Feb 15, 2011 at 03:45:12PM -0500, Rob Crittenden wrote:
> Jakub Hrozek wrote:
> >-BEGIN PGP SIGNED MESSAGE-
> >Hash: SHA1
> >
> >https://fedorahosted.org/freeipa/ticket/967
> >
> >I'm wondering whether to extend the patch - if the mail
XY0wCgtkc0kBdPorCgd9oyh4AazDy0
8hoAn0vgX5xQYJv2D9gjjTgnu0mgUMbp
=nzLT
-END PGP SIGNATURE-
From 9b76991ba0dae19c84a2cad2b60775f8ffa3cc9a Mon Sep 17 00:00:00 2001
From: Jakub Hrozek
Date: Tue, 15 Feb 2011 10:40:27 +0100
Subject: [PATCH] Validate MX records
https://fedorahosted.org/freeipa/ticket/967
---
4J0An2OtxBPcUaTXZ/4/ZugkyQk/gvDx
=JE8k
-END PGP SIGNATURE-
From 9576ac5fb07bc0ec799becf8aadd4e51e4901c49 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek
Date: Sun, 13 Feb 2011 18:30:18 +0100
Subject: [PATCH] Note --ip-address parameter of ipa-replica-prepare in man page
https://fedorahosted.org/freeipa
On 02/12/2011 12:13 AM, Rob Crittenden wrote:
The --out option wasn't working at all with cert-show.
Also fix some related problems in write_certificate(), handle either a
DER or base64-formatted incoming certificate and don't explode if the
filename is None.
ticket 954
rob
--out now works f
On Fri, Feb 11, 2011 at 01:34:39PM -0500, Rob Crittenden wrote:
> Add a replace verb to ipa-ldap-updater so an existing value can be
> replaced, but only if the value matches the old value in the update.
>
> This would be used for us to replace default values that the
> end-user hasn't already upd
On Thu, Feb 10, 2011 at 10:27:43PM -0500, Rob Crittenden wrote:
> Rob Crittenden wrote:
> >Jakub Hrozek wrote:
> >>On Tue, Feb 08, 2011 at 10:12:27AM -0500, Rob Crittenden wrote:
> >>>If /etc/krb5.conf doesn't exist or contains no default kerberos
> >>&g
https://fedorahosted.org/freeipa/ticket/932
>From 82787ce02ada90c17593e96d32faab45efce9a90 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek
Date: Sat, 12 Feb 2011 11:00:51 +0100
Subject: [PATCH] Set ldap_netgroup_search_base for in ipa-client-install
https://fedorahosted.org/freeipa/ticket/
I couldn't reproduce the traceback, but the code shows where the error
most probably is.
http://fedorahosted.org/freeipa/ticket/956
>From c9a9bc8c316c0c921a2865d600aaedc8135c8552 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek
Date: Sat, 12 Feb 2011 15:36:19 -0500
Subject: [PATCH] Fix chec
https://fedorahosted.org/freeipa/ticket/957
>From 20974e900dc062be3dbe527c2a6b7cddb7a0a641 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek
Date: Sat, 12 Feb 2011 10:28:06 +0100
Subject: [PATCH 1/2] Make sure only root can run ipa-client-install
https://fedorahosted.org/freeipa/ticket/957
---
Simo did a nice writeup of the changes in
https://fedorahosted.org/freeipa/ticket/931
>From d27c228160b5bfc460055392389e2ba966263709 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek
Date: Thu, 10 Feb 2011 21:47:45 +0100
Subject: [PATCH] Fine tuning DNS options
Add pointer to self to /etc/hosts
https://fedorahosted.org/freeipa/ticket/923
>From 5fdd046fb631a9c57cf6e9c6c98ee09e2cd77a6d Mon Sep 17 00:00:00 2001
From: Jakub Hrozek
Date: Thu, 10 Feb 2011 21:17:21 +0100
Subject: [PATCH] Remove obsolete record types from DNS
https://fedorahosted.org/freeipa/ticket/923
---
API.
On Thu, Feb 10, 2011 at 01:39:40PM -0500, Rob Crittenden wrote:
> The kw could contain another exception which was blowing up the
> marshalling. It doesn't seem to be used anywhere and contains
> information we've already saved in error as far as I can tell.
>
> ticket 905
>
> rob
Ack
_
On Thu, Feb 10, 2011 at 10:17:18PM -0500, Rob Crittenden wrote:
> Reset file ownership after calling update_file() and
> set_preference() in installutils. Out of the blue these would change
> file ownership to root:root which was breaking a dogtag profile.
>
> This fixes the error from cert-reques
On 02/10/2011 05:12 PM, Rob Crittenden wrote:
But what other roles do we need? The mind boggles and rather than
dictating what the initial ones will be I'm looking for some
guidance/suggestions.
thanks
rob
I'm actually wondering if we need to define many default roles in the
upstream project
On Tue, Feb 08, 2011 at 10:12:27AM -0500, Rob Crittenden wrote:
> If /etc/krb5.conf doesn't exist or contains no default kerberos
> realm then 389-ds won't start at all. This is a problem during
> installation because we configure 389 first.
>
> This patch will let the server come up, you just won
On Wed, Feb 09, 2011 at 05:04:57PM -0500, Rob Crittenden wrote:
> The performance patch depended on self.env.mode != 'production'. env
> and mode aren't guaranteed to exist in the object so check for those
> and only skip the work if the mode is explicitly production.
>
> rob
Ack
___
On Tue, Feb 08, 2011 at 06:39:05PM +0100, Jan Cholasta wrote:
> Fixing newbie mistake: included properly formated patch.
>
> It was tested in mock.
>
> Dne 8.2.2011 18:30, Jan Cholasta napsal(a):
> >Removed 2 unnecessary BuildRequires from freeipa.spec.in:
> >
> >* e2fsprogs-devel: obsoleted by l
On Tue, Feb 08, 2011 at 10:27:57PM -0500, Rob Crittenden wrote:
> The 389-ds replication plugin may not be installed on all platforms
> and our replication version plugin will cause 389-ds to not start if
> it is loaded and the replication plugin is not. So disable by
> default.
>
> When a replica
On Wed, Feb 09, 2011 at 01:57:46PM -0500, Rob Crittenden wrote:
> Disable nscd before starting sssd. We used to disable it after
> configuring sssd which would cause a warning message to appear in
> /var/log/messages from sssd. This was in effect bogus because we
> killed nscd as the very next step
On Wed, Feb 09, 2011 at 01:53:00PM -0500, Rob Crittenden wrote:
> At least in my xterm the prompt for "Do you want to proceed and
> configure the system with fixed values with no DNS discovery?" wraps
> around over itself.
>
> This patch shortens the message.
>
> ticket 940
>
> rob
Ack
___
On Wed, Feb 09, 2011 at 02:27:54PM -0500, Rob Crittenden wrote:
> Title says it all.
>
> ticket 926
>
> rob
Ack
___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel
/
iEYEARECAAYFAk1Skf4ACgkQHsardTLnvCXJUACgjTNaASanb8VaGc/wy1sb2Vf6
3nAAnR/rc1foyjcF1I9uXN2whH1z5AKp
=3v5+
-END PGP SIGNATURE-
From aec681b7bd5d7b044bea6fd76e2a87e542420b0f Mon Sep 17 00:00:00 2001
From: Jakub Hrozek
Date: Wed, 9 Feb 2011 08:05:00 -0500
Subject: [PATCH] Fix migration page
On Mon, Feb 07, 2011 at 02:10:40PM +0100, Pavel Zuna wrote:
> On 02/07/2011 01:10 PM, Jakub Hrozek wrote:
> >On Mon, Feb 07, 2011 at 11:13:56AM +0100, Pavel Zuna wrote:
> >>Fix #847
> >>
> >>Pavel
> >
> >
> >>_
On Thu, Feb 03, 2011 at 02:23:11PM +0100, Jan Zelený wrote:
> Jakub Hrozek wrote:
> > Hi,
> >
> > attached is a patch to nsslib.py that changes its semantics so
> > it is able to work with different address families. It is the last piece
> > of IPv6 support.
>
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 02/07/2011 10:54 AM, Jan Zelený wrote:
> Jakub Hrozek wrote:
>> On Wed, Feb 02, 2011 at 08:54:47AM +0100, Jan Zelený wrote:
>>> At Rob's suggestion I changed the argument type in class help, this is
>>> only on
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 02/07/2011 12:47 PM, Pavel Zuna wrote:
> Fix #837
>
> Pavel
>
Ack
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAk1P5RcACgkQHsardTLnvCX8ZACgo6Q/1rjYnKJ
On Mon, Feb 07, 2011 at 11:13:56AM +0100, Pavel Zuna wrote:
> Fix #847
>
> Pavel
> ___
> Freeipa-devel mailing list
> Freeipa-devel@redhat.com
> https://www.redhat.com/mailman/listinfo/freeipa-devel
Nack, please update API.txt
___
On Fri, Feb 04, 2011 at 03:20:55PM +0100, Martin Kosek wrote:
> This patch fixes the default domain functionality for user email(s).
> This setting may be configured via:
>
> ipa config-mod --emaildomain=example.com
>
> Then, when user is added/modified and --mail option is passed,
> the default
On Fri, Feb 04, 2011 at 06:40:54PM +0100, Jan Zeleny wrote:
> Recent changes in permission prefixes influenced also delegations. The
> plugin has been updated accordingly, but this one line has been
> forgotten.
>
> Jan
I think it is not needed, the only command preceding return from the
function
On Fri, Feb 04, 2011 at 06:41:41PM +0100, Jan Zeleny wrote:
> Trivial fix, can be pushed directly
>
> Jan
Ack
___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel
On Wed, Feb 02, 2011 at 08:54:47AM +0100, Jan Zelený wrote:
> At Rob's suggestion I changed the argument type in class help, this is only
> oneliner, I think it can be pushed directly.
>
> Jan
> -takes_args = (Bytes('command?'),)
> +takes_args = (Str('command?'),)
Nack, you also need to
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 02/03/2011 02:23 PM, Jan Zelený wrote:
> The patch looks ok, all my questions answered off-list. Also tested with IPv4
> (latest python-nss installed) and IPv6, both work fine.
>
> ACK
>
> Jan
>
As noted in the original mail, please don't push
e0def932f8ed6 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek
Date: Wed, 2 Feb 2011 13:57:16 +0100
Subject: [PATCH] Make nsslib IPv6 aware
---
ipapython/nsslib.py | 89 +-
1 files changed, 73 insertions(+), 16 deletions(-)
diff --git a/ipapytho
On 02/01/2011 08:25 PM, Rob Crittenden wrote:
Jakub Hrozek wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 02/01/2011 04:15 PM, Rob Crittenden wrote:
Jakub Hrozek wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 01/31/2011 04:29 PM, Rob Crittenden wrote:
Jakub Hrozek wrote
e9752923ee27bed10b5075cb83be165ff9f72c59 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek
Date: Mon, 31 Jan 2011 15:30:43 +0100
Subject: [PATCH] IPv6 enhancements
* Make host-add, host-del and reverse zone creation IPv6 aware
* Make Bind listen on IPv6 interfaces, too
https://fedorahosted.org/freeipa/ticket/398
---
install
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 02/01/2011 04:15 PM, Rob Crittenden wrote:
> Jakub Hrozek wrote:
>> -BEGIN PGP SIGNED MESSAGE-
>> Hash: SHA1
>>
>> On 01/31/2011 04:29 PM, Rob Crittenden wrote:
>>> Jakub Hrozek wrote:
>>>> --
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 01/31/2011 04:29 PM, Rob Crittenden wrote:
> Jakub Hrozek wrote:
>> -BEGIN PGP SIGNED MESSAGE-
>> Hash: SHA1
>>
>> On 01/05/2011 04:38 PM, Rob Crittenden wrote:
>>> This patch adds a plugin and tool
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 02/01/2011 04:15 AM, Rob Crittenden wrote:
> Jakub Hrozek wrote:
>> On Mon, Jan 31, 2011 at 05:52:08PM -0500, Simo Sorce wrote:
>>> On Mon, 31 Jan 2011 22:44:43 +0100
>>> Jakub Hrozek wrote:
>>>
>>>
On Mon, Jan 31, 2011 at 05:52:08PM -0500, Simo Sorce wrote:
> On Mon, 31 Jan 2011 22:44:43 +0100
> Jakub Hrozek wrote:
>
> > https://fedorahosted.org/freeipa/ticket/881
> >
> > We've run into a chicken-and-egg problem during installation. If the
> > hostna
e note that the --force flag is available via XML-RPC only, it is
completely hidden from the user otherwise.
>From 9fab50b971543746b2c9afab423874bdcb9f44e4 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek
Date: Mon, 31 Jan 2011 18:05:07 +0100
Subject: [PATCH] Add an address for a nameserver when a new zone
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 01/05/2011 04:38 PM, Rob Crittenden wrote:
> This patch adds a plugin and tools for managing entitlements for host
> machines.
>
> Testing is rather complex so I've attached a script to help set up the
> Candlepin server. You'll need to ping me out
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 01/27/2011 07:02 PM, Jakub Hrozek wrote:
> Bind cannot load a zone if any of its name server records is not
> resolvable.
>
> https://fedorahosted.org/freeipa/ticket/838
Rebased on top of new version of my patch 039
-BEGIN P
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 01/27/2011 01:31 PM, Jakub Hrozek wrote:
> On 01/26/2011 09:50 PM, Simo Sorce wrote:
>> On Mon, 2011-01-24 at 15:51 +0100, Jakub Hrozek wrote:
>>> -BEGIN PGP SIGNED MESSAGE-
>>> Hash: SHA1
>>>
>&g
/GUJnT102jH3cODixIV/GEJOV
=RnwG
-END PGP SIGNATURE-
From 5a09e2e12f38b46a2165daf4f70dbef016e59cd7 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek
Date: Fri, 28 Jan 2011 08:25:47 -0500
Subject: [PATCH] host-add should not add a PTR record with --no-reverse
https://fedorahosted.org/freeipa/ticket/866
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 01/27/2011 07:22 AM, Jakub Hrozek wrote:
> On Wed, Jan 26, 2011 at 11:25:03AM -0500, Rob Crittenden wrote:
>> Jakub Hrozek wrote:
>>> -BEGIN PGP SIGNED MESSAGE-
>>> Hash: SHA1
>>>
>>> On 01/26/
+fB6x0Iet+oFhjKcE
ocIAoNCC2hzLoH3O38NogER2M5AYYb5k
=pDMn
-END PGP SIGNATURE-
From 48f81b4c1be1534474afcd678b08753864d4e47e Mon Sep 17 00:00:00 2001
From: Jakub Hrozek
Date: Fri, 28 Jan 2011 07:33:04 -0500
Subject: [PATCH] Fix delegation help
---
ipalib/plugins/delegation.py | 12
From 571860d74d42b0a89d136fad4b0aaf6bd58e7acf Mon Sep 17 00:00:00 2001
From: Jakub Hrozek
Date: Fri, 28 Jan 2011 07:02:30 -0500
Subject: [PATCH] Fix filter_keys in ipa-getkeytab
https://fedorahosted.org/freeipa/ticket/723
---
ipa-client/ipa-getkeytab.c |8 ++--
1 files changed, 6 insertions(+), 2 deletions(-)
diff --git
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 01/28/2011 05:09 AM, Simo Sorce wrote:
> On Thu, 27 Jan 2011 19:03:40 +0100
> Jakub Hrozek wrote:
>
>> -BEGIN PGP SIGNED MESSAGE-
>> Hash: SHA1
>>
>> One of the recent API patches didn't update A
NVfA3
3XIAoJqoSeuZvIHZqdf58EKWVVPbXQAu
=xHUI
-END PGP SIGNATURE-
From 3990c87789bfcbcc6a14173ff39db3364b115c3f Mon Sep 17 00:00:00 2001
From: Jakub Hrozek
Date: Thu, 27 Jan 2011 18:54:36 +0100
Subject: [PATCH] Fix API.txt
---
API.txt | 20 +---
1 files changed, 13 insertions(
/
iEYEARECAAYFAk1Bs0sACgkQHsardTLnvCVgjACg4YojCm2ULsFZ2smpusWdJncp
+mgAniOndaa4ILr9YpuIwW9i+X97Vid2
=KEtu
-END PGP SIGNATURE-
From e68b5d044902e12dde5d74077b431e5eb1524373 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek
Date: Thu, 27 Jan 2011 11:16:22 -0500
Subject: [PATCH] Enforce that all NS
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 01/26/2011 09:50 PM, Simo Sorce wrote:
> On Mon, 2011-01-24 at 15:51 +0100, Jakub Hrozek wrote:
>> -BEGIN PGP SIGNED MESSAGE-
>> Hash: SHA1
>>
>> On 01/21/2011 05:54 PM, Rob Crittenden wrote:
>>> Jak
On Wed, Jan 26, 2011 at 11:25:03AM -0500, Rob Crittenden wrote:
> Jakub Hrozek wrote:
> >-BEGIN PGP SIGNED MESSAGE-
> >Hash: SHA1
> >
> >On 01/26/2011 03:38 PM, Jakub Hrozek wrote:
> >>https://fedorahosted.org/freeipa/ticket/846
> >
> >Th
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 01/26/2011 03:38 PM, Jakub Hrozek wrote:
> https://fedorahosted.org/freeipa/ticket/846
This version contains a better example (consistent zone name).
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fed
dJIAn3evO4cbgokA1+xfLBG5q1LhReKI
=azjr
-END PGP SIGNATURE-
From 082d3471fdfe1133a3dd83445ab3774c0304bae6 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek
Date: Wed, 26 Jan 2011 09:31:50 -0500
Subject: [PATCH] Add example of DNS SRV record and a simple validator
https://fedorahosted.org/freeipa/ticket/846
On Tue, Jan 25, 2011 at 12:11:01PM -0500, Simo Sorce wrote:
> On Tue, 25 Jan 2011 12:05:07 -0500
> Simo Sorce wrote:
>
> >
> > Some basic fixes to winsync replication setups.
> > Depends on 0069-4
> >
> > Ticket #807
>
> With the actual patch :)
>
Ack - I have found the same issue with pyli
On Tue, Jan 25, 2011 at 01:09:25PM +0100, Jakub Hrozek wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
> On 01/21/2011 11:43 AM, Jakub Hrozek wrote:
> > https://fedorahosted.org/freeipa/ticket/358
> >
> > Another part of this effort is running pylint du
On 01/24/2011 05:59 PM, Simo Sorce wrote:
See ticket #833 for a detailed explanation.
Simo.
Ack
___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel
On 01/25/2011 06:05 PM, Simo Sorce wrote:
On Tue, 25 Jan 2011 11:59:22 -0500
Simo Sorce wrote:
On Tue, 25 Jan 2011 17:47:49 +0100
Jakub Hrozek wrote:
On Tue, Jan 25, 2011 at 11:09:46AM -0500, Simo Sorce wrote:
On Tue, 25 Jan 2011 10:36:49 -0500
Simo Sorce wrote:
On Tue, 25 Jan 2011 15
On Tue, Jan 25, 2011 at 11:06:01AM -0500, Rob Crittenden wrote:
> I did some specfile clean up in preparation of proposing this as a
> package for Fedora 15.
>
> ticket 804.
>
> rob
Ack
___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://w
On Tue, Jan 25, 2011 at 11:09:46AM -0500, Simo Sorce wrote:
> On Tue, 25 Jan 2011 10:36:49 -0500
> Simo Sorce wrote:
>
> > On Tue, 25 Jan 2011 15:40:26 +0100
> > Jakub Hrozek wrote:
> >
> > > On Tue, Jan 25, 2011 at 08:57:57AM -0500, Simo Sorce wrote:
> &
On Tue, Jan 25, 2011 at 08:57:02AM -0500, Simo Sorce wrote:
> On Tue, 25 Jan 2011 08:28:49 -0500
> Simo Sorce wrote:
>
> > On Tue, 25 Jan 2011 10:41:39 +0100
> > Jakub Hrozek wrote:
> >
> > > -BEGIN PGP SIGNED MESSAGE-
> > > Hash: SHA1
&g
On Tue, Jan 25, 2011 at 08:57:57AM -0500, Simo Sorce wrote:
> On Mon, 24 Jan 2011 23:06:17 +0100
> Jakub Hrozek wrote:
>
> > On 01/23/2011 02:09 AM, Simo Sorce wrote:
> > >
> > > Do it always when the dns tree is available, even if the replica
> > > b
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 01/25/2011 04:42 AM, Rob Crittenden wrote:
> Jakub Hrozek wrote:
>> On 01/21/2011 05:55 PM, Rob Crittenden wrote:
>>> Jakub Hrozek wrote:
>>>> -BEGIN PGP SIGNED MESSAGE-
>>>> Hash: SHA1
>>&g
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 01/21/2011 11:43 AM, Jakub Hrozek wrote:
> https://fedorahosted.org/freeipa/ticket/358
>
> Another part of this effort is running pylint during build. I have
> started on this, but because we use python's dynamic features quit
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 01/23/2011 02:08 AM, Simo Sorce wrote:
> Ticket #820
>
> Simo.
>
>
I think there's a bug in how the defaultServerList attribute is cleaned
up when a replica is deleted - it seems to remove the FQDN of the host
ipa-replica-manage del is run. In R
On 01/23/2011 02:09 AM, Simo Sorce wrote:
Do it always when the dns tree is available, even if the replica being
installed doesn't provide dns service itself.
Ticket #824
Simo.
I tried applying this on top of both origin/master and 068 but did not
succeed. Can you rebase, please?
___
On 01/20/2011 01:43 AM, Simo Sorce wrote:
See ticket #817
Simo.
Ack
___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel
On 01/24/2011 09:27 PM, Simo Sorce wrote:
We have a default user name, which is also the recommended one, it made
no sense to force users to specify it at the command line for
unattended installations. Just use the default if none is provided.
Ticket #836
Simo.
Ack
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 01/24/2011 04:58 PM, Rob Crittenden wrote:
> Jakub Hrozek wrote:
>> -BEGIN PGP SIGNED MESSAGE-
>> Hash: SHA1
>>
>> On 01/24/2011 04:50 PM, Rob Crittenden wrote:
>>> In the host plugin we modify the de
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 01/24/2011 04:46 PM, Rob Crittenden wrote:
> It looks like python 2.7 changed the API of time.utcoffset(), this
> should fix the tests.
>
> We have recently relaxed what input a Str will take, the tests need to
> be updated to accomodate.
>
> rob
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 01/24/2011 04:50 PM, Rob Crittenden wrote:
> In the host plugin we modify the default set of objectclasses depending
> on what kind of host we're creating. This was actually updating the
> objectclass of the object itself so that the objectclass var
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 01/21/2011 05:54 PM, Rob Crittenden wrote:
> Jakub Hrozek wrote:
>> -BEGIN PGP SIGNED MESSAGE-
>> Hash: SHA1
>>
>> On 01/20/2011 11:53 PM, Simo Sorce wrote:
>>> On Thu, 20 Jan 2011 17:27:37 -0500
>
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 01/22/2011 02:28 AM, Adam Young wrote:
> Does any of this imply that we shopuld change the WebUI handling of Zone
> or Record deletes?
Sorry, I don't know enough about the WebUI to give an authoritative
answer. I'll try to summarize the changes I d
On 01/21/2011 05:55 PM, Rob Crittenden wrote:
Jakub Hrozek wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 01/10/2011 05:15 PM, Jakub Hrozek wrote:
On 12/20/2010 03:33 PM, Jakub Hrozek wrote:
On 12/20/2010 02:49 PM, Jakub Hrozek wrote:
Attached is a patch that changes the uniqueness
On 01/21/2011 09:48 PM, Simo Sorce wrote:
On Fri, 21 Jan 2011 15:14:52 -0500
Rob Crittenden wrote:
A couple of recent patches missed changes to API.txt. I pushed the
attached under the 1-liner rule.
rob
This begs the question: how were they tested?
why both the submitter and the reviewer di
On 01/21/2011 09:14 PM, Rob Crittenden wrote:
+option: Flag('del_all', autofill=True, default=False, label=Gettext('Delete
all associated records', domain='ipa', localedir=None))
I think you accidentally generated API.txt while still having my Nacked
DNS patch in tree.
_
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 01/20/2011 10:53 PM, Rob Crittenden wrote:
> An aci can take a filter as a target. This adds some bare minimum
> validation to it. It disallows empty filters and executes a search with
> the filter to see if it is at least well-formed (doesn't mean
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 01/21/2011 10:35 AM, Pavel Zůna wrote:
> Fix #825
>
> Pavel
>
Ack
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAk05pDIACgkQHsardTLnvCUnmgCdEXblfAXHIj9
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 01/20/2011 09:10 PM, Rob Crittenden wrote:
> If we don't want a command to be available on the command-line we need
> to set a flag in the command. The original was INTERNAL but this was a
> bit misleading because the command is still available to t
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 01/20/2011 11:53 PM, Simo Sorce wrote:
> On Thu, 20 Jan 2011 17:27:37 -0500
> Dmitri Pal wrote:
>
>> Michael Gregg wrote:
>>> Jakub Hrozek wrote:
>>> Hi,
>>>
>>> as discussed in https://bugzill
/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAk05YzYACgkQHsardTLnvCWB/wCeJ6iGxvPFf723ZkvIwklgTD00
47kAoJGxQdAVDdU2ezPC28pnd8+xVLlo
=DnHR
-END PGP SIGNATURE-
From f514849ff08c2f7c8ab4823546703bf5793ef912 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek
Date: T
D/Iev
VcgAoJzk5cCgzmhityA56g830wNnkaxE
=f60L
-END PGP SIGNATURE-
From 091daa04a752f9af7a004c6011ebeb033f824914 Mon Sep 17 00:00:00 2001
From: Jakub Hrozek
Date: Thu, 20 Jan 2011 07:54:14 -0500
Subject: [PATCH] Delete the whole DNS record with no parameters
Also fixes the DNS unit tests.
https://fedorahosted.org/fr
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 01/10/2011 05:15 PM, Jakub Hrozek wrote:
> On 12/20/2010 03:33 PM, Jakub Hrozek wrote:
>> On 12/20/2010 02:49 PM, Jakub Hrozek wrote:
>>> Attached is a patch that changes the uniqueness constraint of automount
>>> k
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 01/18/2011 06:27 PM, Pavel Zuna wrote:
> Fix #798
>
> Pavel
>
Ack (again, fast ack because I tested off-list before sending)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozde
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 01/18/2011 06:26 PM, Pavel Zuna wrote:
> Fix #799
>
> Pavel
>
Ack (fast ack as I tested the patch off-list before Pavel sent it)
I didn't see the bug during my testing as I only develop against real
Apache installation where this works OK. Pavel
201 - 300 of 476 matches
Mail list logo
