[Freeipa-devel] [PATCH] 465 fix client bulk enrollment

2010-06-11 Thread Rob Crittenden
We need to fetch the CA cert so our ldaps connection will succeed. rob freeipa-465-client.patch Description: application/mbox ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel

[Freeipa-devel] [PATCH] 466 drop serviceName schema

2010-06-11 Thread Rob Crittenden
Drop the serviceName attribute from the schema. We replaced this with memberService. rob freeipa-466-schema.patch Description: application/mbox ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-de

Re: [Freeipa-devel] [PATCH] 466 drop serviceName schema

2010-06-11 Thread Dmitri Pal
Rob Crittenden wrote: > Drop the serviceName attribute from the schema. We replaced this with > memberService. > > rob > > > ___ > Freeipa-devel mailing list > Freeipa-devel@redhat.c

[Freeipa-devel] [PATCH] 467 fix aci-mod command

2010-06-11 Thread Rob Crittenden
Convert the ACI back into keywords so we can merge in any changes, then re-create the ACI. This is a much safer method of doing it. I also switched to use the declarative test mechanism and tripled the number of aci tests we perform. rob freeipa-467-aci.patch Description: application/mbox _

[Freeipa-devel] [PATCH] 468 don't run through pre-bind code on enrollment

2010-06-11 Thread Rob Crittenden
Don't try to convert a host's password into a keytab. The migration plugin uses a pre-op function to automatically create kerberos credentials when binding using a password. The problem is that we do a simple bind when doing password-base host enrollment. This was causing krbPasswordExpiratio

Re: [Freeipa-devel] [PATCH] 467 fix aci-mod command

2010-06-11 Thread Simo Sorce
On Fri, 11 Jun 2010 12:16:23 -0400 Rob Crittenden wrote: > Convert the ACI back into keywords so we can merge in any changes, > then re-create the ACI. This is a much safer method of doing it. > > I also switched to use the declarative test mechanism and tripled the > number of aci tests we per

Re: [Freeipa-devel] [PATCH] 468 don't run through pre-bind code on enrollment

2010-06-11 Thread Simo Sorce
On Fri, 11 Jun 2010 16:16:32 -0400 Rob Crittenden wrote: > Don't try to convert a host's password into a keytab. > > The migration plugin uses a pre-op function to automatically create > kerberos credentials when binding using a password. > > The problem is that we do a simple bind when doing

Re: [Freeipa-devel] [PATCH] 467 fix aci-mod command

2010-06-11 Thread Simo Sorce
On Fri, 11 Jun 2010 12:16:23 -0400 Rob Crittenden wrote: > Convert the ACI back into keywords so we can merge in any changes, > then re-create the ACI. This is a much safer method of doing it. > > I also switched to use the declarative test mechanism and tripled the > number of aci tests we per

Re: [Freeipa-devel] [PATCH] 464 User-Private groups

2010-06-11 Thread Adam Young
When the patch was applied, and the packages were installed on a clean system, ipa-server-install kicked directly into the debugger afterthe line: [7/21]: configuring user private groups stack trace showed dsinstance.py(124)has_managed_entries() ->try On 06/08/2010 04:23 PM, Rob Crittende