Re: [Freeipa-devel] [PATCH] admiyo-0215-Fixed-labels-for-sudo-and-hbac-rules

2011-03-29 Thread Martin Kosek
On Mon, 2011-03-28 at 16:49 -0400, Adam Young wrote: Putting these two patches togetehr because the first changes labels from the server, and the second is only for test data. The second is a separate patch becasue there are other changes from older server side updates. Patch 215: ACK

Re: [Freeipa-devel] [PATCH] 3 Add ability to specify netmask with IP addresses during installation

2011-03-29 Thread Jan Cholasta
Dne 28.3.2011 15:50, Adam Young napsal(a): On 03/28/2011 06:54 AM, Jan Cholasta wrote: This patch enables the user to specify netmask/prefix length with IP addresses (see http://packages.python.org/netaddr/netaddr.ip.IPNetwork-class.html) during installation for proper DNS reverse zone setup.

Re: [Freeipa-devel] [PATCH] 3 Add ability to specify netmask with IP addresses during installation

2011-03-29 Thread Jan Cholasta
Sorry, forgot to attach the patch. -- Jan Cholasta From 0e859303c63b895efb82bd1fa4c09108baf18f43 Mon Sep 17 00:00:00 2001 From: Jan Cholasta jchol...@redhat.com Date: Tue, 29 Mar 2011 15:15:23 +0200 Subject: [PATCH] Add ability to specify netmask/prefix length with IP addresses during install

Re: [Freeipa-devel] FreeIPA in RN 15

2011-03-29 Thread Adam Young
On 03/29/2011 06:08 AM, Luigi Votta wrote: Hi Adam we are writing the Release Notes for F15. I've found your post on the Planet about FreeIPA v2.0 and I have appended it in the Security Beat for the RN: https://fedoraproject.org/wiki/Documentation_Security_Beat#FreeIPA_2.0 I'm not sure if the

[Freeipa-devel] [PATCH] 5 Add note about ipa-dns-install to ipa-server-install man page

2011-03-29 Thread Jan Cholasta
Added the note so that users know that they can setup DNS at any time after ipa-server-install. https://fedorahosted.org/freeipa/ticket/1082 -- Jan Cholasta From d7d892db3af102b02d6af638e08d85bd51e7c4b6 Mon Sep 17 00:00:00 2001 From: Jan Cholasta jchol...@redhat.com Date: Tue, 29 Mar 2011

[Freeipa-devel] Turn off all for searches

2011-03-29 Thread Adam Young
When we do search or details, we blindly add {all: false} to the JSON params. This is a mistake: all triggers far more server side work than we want to do. In the case of SUDO, it is causing enough problems that JrAquino's server errors out. Aside from correctness issues, we want to avoid

Re: [Freeipa-devel] Turn off all for searches

2011-03-29 Thread Adam Young
On 03/29/2011 10:16 AM, Adam Young wrote: When we do search or details, we blindly add {all: false} to the JSON params. This is a mistake: all triggers far more server side work than we want to do. In the case of SUDO, it is causing enough problems that JrAquino's server errors out. Aside

[Freeipa-devel] [PATCH] 758 make CA retrieval during discovery non-fatal

2011-03-29 Thread Rob Crittenden
This makes the CA retrieval during IPA discovery non-fatal. If we can't get the CA cert then this likely isn't an IPA server so we should just return. ticket 1135 rob freeipa-rcrit-758-client.patch Description: application/mbox ___ Freeipa-devel

Re: [Freeipa-devel] [PATCH] Fix gidnumber option of user-add command.

2011-03-29 Thread Rob Crittenden
Pavel Zuna wrote: With this patch, the gidNumber is set automatically only if it wasn't specified explicitly by the user. Ticket #1127 Pavel ack, pushed to master and ipa-2-0 ___ Freeipa-devel mailing list Freeipa-devel@redhat.com

Re: [Freeipa-devel] [PATCH] 043 Inconsistent error message for duplicate user

2011-03-29 Thread Rob Crittenden
Martin Kosek wrote: Target branches: master, ipa-2-0 --- When duplicate user is added an inconsistent error message to the rest of the framework is printed. This patch changes this to standard duplicate error message. https://fedorahosted.org/freeipa/ticket/1116 ack, pushed to master and

Re: [Freeipa-devel] [PATCH] 3 Add ability to specify netmask with IP addresses during installation

2011-03-29 Thread Rob Crittenden
Jan Cholasta wrote: Sorry, forgot to attach the patch. Is this why you have some blind excepts? installutils._IPAddressWithPrefix('192.168.0.1/33') Traceback (most recent call last): File stdin, line 1, in module File ipaserver/install/installutils.py, line 167, in __init__ net =

Re: [Freeipa-devel] [PATCH] 3 Add ability to specify netmask with IP addresses during installation

2011-03-29 Thread Dmitri Pal
On 03/29/2011 04:15 PM, Rob Crittenden wrote: Jan Cholasta wrote: Sorry, forgot to attach the patch. Is this why you have some blind excepts? installutils._IPAddressWithPrefix('192.168.0.1/33') Traceback (most recent call last): File stdin, line 1, in module File

Re: [Freeipa-devel] [PATCH] 3 Add ability to specify netmask with IP addresses during installation

2011-03-29 Thread Rob Crittenden
Dmitri Pal wrote: On 03/29/2011 04:15 PM, Rob Crittenden wrote: Jan Cholasta wrote: Sorry, forgot to attach the patch. Is this why you have some blind excepts? installutils._IPAddressWithPrefix('192.168.0.1/33') Traceback (most recent call last): File stdin, line 1, inmodule File

Re: [Freeipa-devel] [PATCH] 041 Replica installation fails for self-signed server

2011-03-29 Thread Rob Crittenden
Martin Kosek wrote: When IPA server was configured as self-signed (--selfsign option) the replica always failed to install. https://fedorahosted.org/freeipa/ticket/1122 Why not just make install_ca return (None, None) instead if we aren't installing dogtag? rob

Re: [Freeipa-devel] [PATCH] 128 Fixed undefined label in permission adder dialog box.

2011-03-29 Thread Adam Young
On 03/21/2011 01:48 PM, Endi Sukma Dewata wrote: The IPA.rights_widget was fixed to invoke the base init() method to load the i18n labels properly. Ticket 1113 I think this patch should be added to 2.0.x because the bug is visible in plain sight and the fix is very simple.

Re: [Freeipa-devel] [PATCH] 5 Add note about ipa-dns-install to ipa-server-install man page

2011-03-29 Thread David O'Brien
Jan Cholasta wrote: Added the note so that users know that they can setup DNS at any time after ipa-server-install. https://fedorahosted.org/freeipa/ticket/1082 ___