[Freeipa-devel] IPAv3.1 and Redhat 6.4

2013-05-31 Thread Nicholas MacKenzie
Will IPAv3.1 ever come to 6.4 or perhaps 6.5? Are there any rumors
surrounding release dates?
___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] [file ipa_cldap.c, line 148]: Failed to create socket

2013-05-28 Thread Nicholas MacKenzie
You were spot on about that. I enabled IPv6 and now the CLDAP plugin
installs fine. I am now faced with this...

dcerpc: alter_resp - rpc fault: WERR_ACCESS_DENIED
Failed to bind to uuid 12345778-1234-abcd-ef00-0123456789ab for
12345778-1234-abcd-ef00-0123456789ab@ncacn_ip_tcp:
domain_controller.ad.dc.com[49500] NT_STATUS_NET_WRITE_FAULT
[Tue May 28 08:20:03 2013] [error] ipa: INFO: ad...@ipa.dc.com: trust_add(u'
ad.dc.sita.aero', trust_type=u'ad', realm_admin=u'username',
realm_passwd=u'', range_size=20, all=False, raw=False,
version=u'2.46'): ACIError



On Tue, May 28, 2013 at 3:46 AM, Alexander Bokovoy aboko...@redhat.comwrote:

 On Tue, 28 May 2013, Nicholas MacKenzie wrote:

 Hello,

 I have seen this happen on multiple fresh installs now. Can anyone shed
 any
 light on it? I am unable to add a trust because of this, I assume. An
 smbclient lookup against the DC works.
 ==
 # ipa trust-add --type=ad ad.dc.com --admin username --password
 Active directory domain administrator's password:
 ipa: ERROR: Cannot find specified domain or server name
 ==
 /var/log/httpd/error_log:
 [Tue May 28 07:05:01 2013] [error] ipa: INFO: ad...@ipa.dc.com:
 trust_add(u'
 ad.dc.sita.aero', trust_46'): NotFound
 ==
 # ipactl restart
 Restarting Directory Service
 Shutting down dirsrv:
IPA-DC-COM.[  OK  ]
PKI-IPA... [  OK  ]
 Starting dirsrv:
   IPA-DC-COM ...[28/May/2013:07:09:24 +] ipa_cldap_init_service -
 [file ipa_cldap.c, line 148]: Failed to create socket

 What operating system is that?

 Here is what we have in ipa_cldap.c:
ctx-sd = socket(PF_INET6, SOCK_DGRAM, 0);
 if (ctx-sd == -1) {
 LOG_FATAL(Failed to create socket\n);
 ret = EIO;
 goto done;
 }

 So we failed to create a socket using PF_INET6 family. It looks like you
 don't have IPv6 enabled in your kernel?

 --
 / Alexander Bokovoy

___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] [file ipa_cldap.c, line 148]: Failed to create socket

2013-05-28 Thread Nicholas MacKenzie
Nevermind. I used the Administrator account and all is well. This is a
lovely site.

Added Active Directory trust for realm ad.dc.com

  Realm name: ad.dc.com
  Domain NetBIOS name: AD
  Domain Security Identifier: S-1-5-21-1226121717-3896983829-760149474
  Trust direction: Two-way trust
  Trust type: Active Directory domain
  Trust status: Established and verified



On Tue, May 28, 2013 at 4:24 AM, Nicholas MacKenzie nic...@gmail.comwrote:

 You were spot on about that. I enabled IPv6 and now the CLDAP plugin
 installs fine. I am now faced with this...

 dcerpc: alter_resp - rpc fault: WERR_ACCESS_DENIED
 Failed to bind to uuid 12345778-1234-abcd-ef00-0123456789ab for
 12345778-1234-abcd-ef00-0123456789ab@ncacn_ip_tcp:
 domain_controller.ad.dc.com[49500] NT_STATUS_NET_WRITE_FAULT
 [Tue May 28 08:20:03 2013] [error] ipa: INFO: ad...@ipa.dc.com:
 trust_add(u'ad.dc.sita.aero', trust_type=u'ad', realm_admin=u'username',
 realm_passwd=u'', range_size=20, all=False, raw=False,
 version=u'2.46'): ACIError



 On Tue, May 28, 2013 at 3:46 AM, Alexander Bokovoy aboko...@redhat.comwrote:

 On Tue, 28 May 2013, Nicholas MacKenzie wrote:

 Hello,

 I have seen this happen on multiple fresh installs now. Can anyone shed
 any
 light on it? I am unable to add a trust because of this, I assume. An
 smbclient lookup against the DC works.
 ==
 # ipa trust-add --type=ad ad.dc.com --admin username --password
 Active directory domain administrator's password:
 ipa: ERROR: Cannot find specified domain or server name
 ==
 /var/log/httpd/error_log:
 [Tue May 28 07:05:01 2013] [error] ipa: INFO: ad...@ipa.dc.com:
 trust_add(u'
 ad.dc.sita.aero', trust_46'): NotFound
 ==
 # ipactl restart
 Restarting Directory Service
 Shutting down dirsrv:
IPA-DC-COM.[  OK  ]
PKI-IPA... [  OK  ]
 Starting dirsrv:
   IPA-DC-COM ...[28/May/2013:07:09:24 +] ipa_cldap_init_service -
 [file ipa_cldap.c, line 148]: Failed to create socket

 What operating system is that?

 Here is what we have in ipa_cldap.c:
ctx-sd = socket(PF_INET6, SOCK_DGRAM, 0);
 if (ctx-sd == -1) {
 LOG_FATAL(Failed to create socket\n);
 ret = EIO;
 goto done;
 }

 So we failed to create a socket using PF_INET6 family. It looks like you
 don't have IPv6 enabled in your kernel?

 --
 / Alexander Bokovoy



___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] Freeipa-devel Digest, Vol 72, Issue 51

2013-05-15 Thread Nicholas MacKenzie
Unsubscribe
On May 15, 2013 12:01 PM, freeipa-devel-requ...@redhat.com wrote:

 Send Freeipa-devel mailing list submissions to
 freeipa-devel@redhat.com

 To subscribe or unsubscribe via the World Wide Web, visit
 https://www.redhat.com/mailman/listinfo/freeipa-devel
 or, via email, send a message with subject or body 'help' to
 freeipa-devel-requ...@redhat.com

 You can reach the person managing the list at
 freeipa-devel-ow...@redhat.com

 When replying, please edit your Subject line so it is more specific
 than Re: Contents of Freeipa-devel digest...


 Today's Topics:

1. Re: [PATCH] 0026 Do not display success message on failure in
   web UI (Ana Krivokapic)


 --

 Message: 1
 Date: Wed, 15 May 2013 17:43:28 +0200
 From: Ana Krivokapic akriv...@redhat.com
 To: Petr Vobornik pvobo...@redhat.com
 Cc: freeipa-devel freeipa-devel@redhat.com
 Subject: Re: [Freeipa-devel] [PATCH] 0026 Do not display success
 message on failure in web UI
 Message-ID: 5193ad20.1050...@redhat.com
 Content-Type: text/plain; charset=iso-8859-1

 On 05/13/2013 04:51 PM, Petr Vobornik wrote:
  On 05/07/2013 05:16 PM, Ana Krivokapic wrote:
  https://fedorahosted.org/freeipa/ticket/3591
 
 
  1) The change from on_success to on_error is causing problems when
  some command in a batch doesn't fail. Ie.: disable multiple users on
  user search facet. Disabling already disabled user causes an error.
  The dialog is shown but the page is not refreshed so the newly
  disabled records are still displayed as enabled. We might even call
  this case a success.
 
  IMO we shouldn't change the method because the batch itself succeeded.
  The problem should be fixed on caller side (users of batch command).
 
  2) Also `ajax` context should be left there instead of `this`,
  otherwise it would get the context of on_ok handler:
 
  3) (not an actual issue) Some of my old code doesn't contain space
  between for/if and opening curly bracet, opposite to the rest of the
  Web UI. Spaces should be added when touching these parts of code.

 Since the problem occurs in the case when the batch succeeds, but some
 commands from the batch fail, it should be enough to modify the message
 that is displayed. I modified it so it shows exactly how many items from
 the batch succeeded.

 Updated patch is attached.

 --
 Regards,

 Ana Krivokapic
 Associate Software Engineer
 FreeIPA team
 Red Hat Inc.

 -- next part --
 A non-text attachment was scrubbed...
 Name:
 freeipa-akrivoka-0026-02-Do-not-display-success-message-on-failure-in-web-UI.patch
 Type: text/x-patch
 Size: 2849 bytes
 Desc: not available
 URL: 
 https://www.redhat.com/archives/freeipa-devel/attachments/20130515/67c3a9c8/attachment.bin
 

 --

 ___
 Freeipa-devel mailing list
 Freeipa-devel@redhat.com
 https://www.redhat.com/mailman/listinfo/freeipa-devel

 End of Freeipa-devel Digest, Vol 72, Issue 51
 *

___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel