Re: [Freeipa-devel] [PATCH] 1088 Recover DNA ranges when deleting a master

2013-03-13 Thread Rob Crittenden
Martin Kosek wrote: On 03/13/2013 11:03 AM, Petr Viktorin wrote: On 03/12/2013 06:50 PM, Rob Crittenden wrote: Petr Viktorin wrote: On 03/11/2013 05:00 PM, Rob Crittenden wrote: Petr Viktorin wrote: On 03/07/2013 08:27 PM, Rob Crittenden wrote: Petr Viktorin wrote: On 03/06/2013 09:52 PM,

Re: [Freeipa-devel] [PATCH] 1088 Recover DNA ranges when deleting a master

2013-03-13 Thread Martin Kosek
On 03/13/2013 11:03 AM, Petr Viktorin wrote: > On 03/12/2013 06:50 PM, Rob Crittenden wrote: >> Petr Viktorin wrote: >>> On 03/11/2013 05:00 PM, Rob Crittenden wrote: Petr Viktorin wrote: > On 03/07/2013 08:27 PM, Rob Crittenden wrote: >> Petr Viktorin wrote: >>> On 03/06/2013 09:5

Re: [Freeipa-devel] [PATCH] 1088 Recover DNA ranges when deleting a master

2013-03-13 Thread Petr Viktorin
On 03/12/2013 06:50 PM, Rob Crittenden wrote: Petr Viktorin wrote: On 03/11/2013 05:00 PM, Rob Crittenden wrote: Petr Viktorin wrote: On 03/07/2013 08:27 PM, Rob Crittenden wrote: Petr Viktorin wrote: On 03/06/2013 09:52 PM, Rob Crittenden wrote: Petr Viktorin wrote: [...] On new installs

Re: [Freeipa-devel] [PATCH] 1088 Recover DNA ranges when deleting a master

2013-03-12 Thread Rob Crittenden
Petr Viktorin wrote: On 03/11/2013 05:00 PM, Rob Crittenden wrote: Petr Viktorin wrote: On 03/07/2013 08:27 PM, Rob Crittenden wrote: Petr Viktorin wrote: On 03/06/2013 09:52 PM, Rob Crittenden wrote: Petr Viktorin wrote: [...] On new installs, the ACI on cn=Posix IDs,cn=Distributed Numeri

Re: [Freeipa-devel] [PATCH] 1088 Recover DNA ranges when deleting a master

2013-03-12 Thread Petr Viktorin
On 03/11/2013 05:00 PM, Rob Crittenden wrote: Petr Viktorin wrote: On 03/07/2013 08:27 PM, Rob Crittenden wrote: Petr Viktorin wrote: On 03/06/2013 09:52 PM, Rob Crittenden wrote: Petr Viktorin wrote: [...] On new installs, the ACI on cn=Posix IDs,cn=Distributed Numeric Assignment Plugin,cn

Re: [Freeipa-devel] [PATCH] 1088 Recover DNA ranges when deleting a master

2013-03-11 Thread Rob Crittenden
Petr Viktorin wrote: On 03/07/2013 08:27 PM, Rob Crittenden wrote: Petr Viktorin wrote: On 03/06/2013 09:52 PM, Rob Crittenden wrote: Petr Viktorin wrote: [...] On new installs, the ACI on cn=Posix IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config is added before the entry it

Re: [Freeipa-devel] [PATCH] 1088 Recover DNA ranges when deleting a master

2013-03-08 Thread Petr Viktorin
On 03/07/2013 08:27 PM, Rob Crittenden wrote: Petr Viktorin wrote: On 03/06/2013 09:52 PM, Rob Crittenden wrote: Petr Viktorin wrote: [...] On new installs, the ACI on cn=Posix IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config is added before the entry itself. I didn't test ev

Re: [Freeipa-devel] [PATCH] 1088 Recover DNA ranges when deleting a master

2013-03-07 Thread Rob Crittenden
Petr Viktorin wrote: On 03/06/2013 09:52 PM, Rob Crittenden wrote: Petr Viktorin wrote: [...] On new installs, the ACI on cn=Posix IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config is added before the entry itself. I didn't test everything as I didn't get the access. It shoul

Re: [Freeipa-devel] [PATCH] 1088 Recover DNA ranges when deleting a master

2013-03-07 Thread Petr Viktorin
On 03/06/2013 09:52 PM, Rob Crittenden wrote: Petr Viktorin wrote: [...] On new installs, the ACI on cn=Posix IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config is added before the entry itself. I didn't test everything as I didn't get the access. It shouldn't make a difference

Re: [Freeipa-devel] [PATCH] 1088 Recover DNA ranges when deleting a master

2013-03-06 Thread Rob Crittenden
Petr Viktorin wrote: On 03/01/2013 11:57 PM, Rob Crittenden wrote: Implement the design at http://freeipa.org/page/V3/Recover_DNA_Ranges Could you add the link to the commit message? done Note that this required some new ACIs in cn=config which is not replicated so the range-set commands

Re: [Freeipa-devel] [PATCH] 1088 Recover DNA ranges when deleting a master

2013-03-04 Thread Rob Crittenden
Petr Viktorin wrote: [snip] --- a/ipaserver/ipaldap.py +++ b/ipaserver/ipaldap.py @@ -1775,6 +1775,8 @@ class IPAdmin(LDAPClient): if removes: if not force_replace: modlist.append((ldap.MOD_DELETE, key, removes)) +

Re: [Freeipa-devel] [PATCH] 1088 Recover DNA ranges when deleting a master

2013-03-04 Thread Petr Viktorin
On 03/01/2013 11:57 PM, Rob Crittenden wrote: Implement the design at http://freeipa.org/page/V3/Recover_DNA_Ranges Could you add the link to the commit message? Note that this required some new ACIs in cn=config which is not replicated so the range-set commands won't work against older insta

[Freeipa-devel] [PATCH] 1088 Recover DNA ranges when deleting a master

2013-03-01 Thread Rob Crittenden
Implement the design at http://freeipa.org/page/V3/Recover_DNA_Ranges Note that this required some new ACIs in cn=config which is not replicated so the range-set commands won't work against older instances. It should be gracefully handled though. It also doesn't work so well if you try it usi