Re: [Freeipa-devel] [PATCH] 813 fix enrolledBy regression

2011-07-13 Thread Martin Kosek
On Tue, 2011-07-12 at 15:11 -0400, Rob Crittenden wrote: Martin Kosek wrote: On Fri, 2011-07-01 at 11:41 -0400, Rob Crittenden wrote: enrolledBy represents the DN of the entry that enrolled a host. We don't want an admin to manipulate this but an aci allowed it. This was a regression.

Re: [Freeipa-devel] [PATCH] 823 validate certificate subject base

2011-07-13 Thread Martin Kosek
On Thu, 2011-07-07 at 12:02 -0400, Rob Crittenden wrote: Use John's new DN class to verify that the subject base passed into ipa-server-install is valid. https://fedorahosted.org/freeipa/ticket/1176 rob Works fine for basic errors. But what if the DN is syntactically valid, but it makes

Re: [Freeipa-devel] [PATCH] 0001 (2) Convert nsaccountlock to always work as bool towards Python and JavaScript

2011-07-13 Thread Martin Kosek
On Fri, 2011-07-08 at 00:40 +0300, Alexander Bokovoy wrote: On 08.07.2011 00:29, Adam Young wrote: On 07/07/2011 04:47 PM, Alexander Bokovoy wrote: Hi, this is refactoring of the patch for ticket 1259 (handling of boolean for nsaccountlock in LDAP). Now it is possible to just work

[Freeipa-devel] [PATCH] 29 Configure SSSD to store password if offline

2011-07-13 Thread Jan Cholasta
Enable the krb5_store_password_if_offline option in sssd.conf by default. To turn it off, use --no-krb5-offline-passwords option in ipa-client-install. https://fedorahosted.org/freeipa/ticket/1359 Honza -- Jan Cholasta From 7cd7a371fa85410f2dd22250ed9473a6a28ab71e Mon Sep 17 00:00:00 2001

[Freeipa-devel] [PATCH] 092 Filter reverse zones in dnszone-find

2011-07-13 Thread Martin Kosek
Implements a new option to filter out reverse zones. This patch also do some clean up in dns plugin - debug prints were accidentally left here in the last dns patch. https://fedorahosted.org/freeipa/ticket/1471 From 905790a18ac39023307d3e46f89f3808d94f02a2 Mon Sep 17 00:00:00 2001 From: Martin

Re: [Freeipa-devel] [PATCH] 092 Filter reverse zones in dnszone-find

2011-07-13 Thread Martin Kosek
On Wed, 2011-07-13 at 14:41 +0200, Jan Cholasta wrote: On 13.7.2011 14:08, Martin Kosek wrote: Implements a new option to filter out reverse zones. This patch also do some clean up in dns plugin - debug prints were accidentally left here in the last dns patch.

Re: [Freeipa-devel] [PATCH] 090 Remove sensitive information from logs

2011-07-13 Thread Jan Cholasta
On 12.7.2011 10:16, Martin Kosek wrote: When -w/--password option is passed to ipa-replica-install it is printed to ipareplica-install.log. Make sure that the value of this option is hidden. https://fedorahosted.org/freeipa/ticket/1378 ACK Honza -- Jan Cholasta

Re: [Freeipa-devel] [PATCH] 090 Remove sensitive information from logs

2011-07-13 Thread Martin Kosek
On Wed, 2011-07-13 at 15:13 +0200, Jan Cholasta wrote: On 12.7.2011 10:16, Martin Kosek wrote: When -w/--password option is passed to ipa-replica-install it is printed to ipareplica-install.log. Make sure that the value of this option is hidden.

Re: [Freeipa-devel] [PATCH] 0267-dnsrecord-mod-ui

2011-07-13 Thread Endi Sukma Dewata
On 7/12/2011 4:47 PM, Adam Young wrote: Some issues: 1. In DNS record adder dialog, the data field is required but it's not checked before submit. There is no param_info for this field, so the required flag may need to be specified explicitly in the field declaration. 2. Adding/deleting

Re: [Freeipa-devel] [PATCH] 0267-dnsrecord-mod-ui

2011-07-13 Thread Endi Sukma Dewata
On 7/13/2011 4:03 PM, Adam Young wrote: 3. I cannot try this due to issue #2, but in CLI when the last data is removed using -mod the record itself will be deleted. The record has to be re-added before it can be modified again. A user might encounter this issue if he removes all existing data,