Re: [Freeipa-devel] Plans for bind-dyndb-ldap

2010-12-15 Thread Jakub Hrozek
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/14/2010 08:38 PM, Stephen Gallagher wrote: > On 12/14/2010 01:57 PM, Stephen Gallagher wrote: >> 1) Petition the Fedora Infrastructure team to turn over ownership of >> this upstream project. This is likely to meet with resistance without >> the

Re: [Freeipa-devel] Plans for bind-dyndb-ldap

2010-12-15 Thread Jakub Hrozek
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/15/2010 10:53 AM, Jakub Hrozek wrote: >> Apparently, this was indeed sufficient to take over the project. I've >> > been made the project sponsor, and I've granted Simo commit privilege as >> > well. So we should be alright to make fixes as neede

Re: [Freeipa-devel] [PATCH] admiyo-0117-aci-unit-tests

2010-12-15 Thread Adam Young
On 12/13/2010 12:54 PM, Adam Young wrote: This depends on my patch 0116. Something not mentioned in the commit message is that this also fixes the 'filter only' options. ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com

Re: [Freeipa-devel] [PATCH] admiyo-0116-aci-ui

2010-12-15 Thread Adam Young
On 12/10/2010 11:33 PM, Adam Young wrote: ONly the first ACI section, not self sign or groups, yet. ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel I'm going to pull this patch and merge it

Re: [Freeipa-devel] [PATCH] 647 check for 389-ds replication plugin

2010-12-15 Thread Rich Megginson
On 12/15/2010 01:36 AM, Jan Zelený wrote: Rob Crittenden wrote: Ensure that the replication plugin exists before creeating or installing a replica. ticket 502 rob ack, but I'm not a big fan of hardcoding the path of plugins in the code. It may be good for Fedora/RHEL, but how about other dis

[Freeipa-devel] [PATCH] do not use extensibleObject if not needed

2010-12-15 Thread Simo Sorce
I pushed the attached patch under the one-liner rule. Simo. -- Simo Sorce * Red Hat, Inc * New York >From 06343d4486122c4d94b472141cc1d1d3687b7cd8 Mon Sep 17 00:00:00 2001 From: Simo Sorce Date: Tue, 14 Dec 2010 19:03:44 -0500 Subject: [PATCH] Use nsContainer and not extensibleObject for master

[Freeipa-devel] [PATCH] Bugfixes for bind-dyndb-ldap

2010-12-15 Thread Adam Tkac
Hello, those four patches for bind-dyndb-ldap fix following issues: 0001-Bugfix-Improve-LDAP-schema-to-be-loadable-by-OpenLDA.patch: - Current schema is not loadable by OpenLDAP - https://bugzilla.redhat.com/show_bug.cgi?id=622604 0002-Change-bug-reporting-address-to-freeipa-devel-redhat.patch -

Re: [Freeipa-devel] [PATCH] Bugfixes for bind-dyndb-ldap

2010-12-15 Thread Simo Sorce
On Wed, 15 Dec 2010 18:21:20 +0100 Adam Tkac wrote: > Hello, > > those four patches for bind-dyndb-ldap fix following issues: > > 0001-Bugfix-Improve-LDAP-schema-to-be-loadable-by-OpenLDA.patch: > - Current schema is not loadable by OpenLDAP > - https://bugzilla.redhat.com/show_bug.cgi?id=62260

[Freeipa-devel] [PATCH] 024 Change FreeIPA license to GPLv3+

2010-12-15 Thread Jakub Hrozek
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, attached is a patch that replaces all GPLv2 license blobs with GPLv3+ blobs. The new blobs also tell users to see a website for the complete license text (the old ones advised to write to a snail mail address..). The SLAPI plugins use a different

[Freeipa-devel] [PATCH] SUDO plugin support for external hosts and users

2010-12-15 Thread JR Aquino
Attached is the patch to provide cli support for external hosts and users. This is accomplished similarly to the netgroup plugin. If the plugin is input with a hostname/user that does not exist in the directory, the plugin will then assume that the User had intended for these objects to be inse

Re: [Freeipa-devel] [PATCH] sudo and netgroup schema compat updates

2010-12-15 Thread JR Aquino
Thank you very much Nalin, at first glance these patches appear to solve what we are after. However, it looks like the master has drifted a little and these don't apply correctly. Could I ask you to do a quick spot-check and verify that we can apply these against the current master? I'd like to

[Freeipa-devel] [PATCH] Fix to man page for ipa-compat-manage (one liner)

2010-12-15 Thread JR Aquino
There was a typo for the manpage, this is a one liner to fix. -.\" A man page for ipa-ldap-updater +.\" A man page for ipa-compat-manage freeipa-jraquino-0010-Fix-to-man-page-for-ipa-compat-manage.patch Description: freeipa-jraquino-0010-Fix-to-man-page-for-ipa-compat-manage.patch _

Re: [Freeipa-devel] [PATCH] sudo and netgroup schema compat updates

2010-12-15 Thread Nalin Dahyabhai
On Wed, Dec 15, 2010 at 09:29:53PM +, JR Aquino wrote: > Thank you very much Nalin, at first glance these patches appear to solve > what we are after. > > However, it looks like the master has drifted a little and these don't > apply correctly. > > Could I ask you to do a quick spot-check and

Re: [Freeipa-devel] [PATCH] sudo and netgroup schema compat updates

2010-12-15 Thread JR Aquino
Thanks! Testing now. On 12/15/10 2:49 PM, "Nalin Dahyabhai" wrote: >On Wed, Dec 15, 2010 at 09:29:53PM +, JR Aquino wrote: >> Thank you very much Nalin, at first glance these patches appear to solve >> what we are after. >> >> However, it looks like the master has drifted a little and these

[Freeipa-devel] [PATCH] 0032 Cleanup when deleting a replica

2010-12-15 Thread Simo Sorce
Clean up records related to the master being deleted in the shared tree. This also avoid issues later on if you want to rejoin the server as a master. It is also needed in order to give back valid information for patch 0035 Simo. -- Simo Sorce * Red Hat, Inc * New York >From 270b9335fd6ead2b49

[Freeipa-devel] [PATCH] 0033 Add disconnect command to change topology

2010-12-15 Thread Simo Sorce
This command will delete a replication agreement unless it is the last one on either server. It is used to change replication topology without actually removing any single master for the domain (the del command must be used if that the intent). Simo. -- Simo Sorce * Red Hat, Inc * New York >Fro

[Freeipa-devel] [PATCH] 0034 REname command for consistency

2010-12-15 Thread Simo Sorce
Rename the "add" command to "connect", this makes it evident it is the opposite of disconnect. "add" was also ambiguos, one could think it could be used to add a new replica, while it can only add agreements between existing replicas thus "connecting" them. This patch also enhances a bit the pars

[Freeipa-devel] [PATCH] 0035 Improve ipa-replica-manage list

2010-12-15 Thread Simo Sorce
With the previous incarnation it wasn't possible to get a list of all replicas, only of the replicas directly connected to the one on which the command was run. This new version will return all known replicas (as per entries under cn=master,cn=ipa,cn=etc,$SUFFIX). If a server name is passed as an

Re: [Freeipa-devel] [PATCH] sudo and netgroup schema compat updates

2010-12-15 Thread JR Aquino
Perfect! All tests check out clean! One final piece I think needs a quick one liner: From: http://www.gratisoft.us/sudo/sudoers.ldap.man.html --The sudoers configuration is contained in the ou=SUDOers LDAP container.-- Currently the plugin creates 'cn=sudoers' as opposed to 'ou=sudoers'. Afte