[Freeipa-devel] [PATCH] 124 ipactl does not stop dirsrv

2011-09-20 Thread Martin Kosek
Remove an invalid instance name passed to dirsrv service so that it is correctly stopped. https://fedorahosted.org/freeipa/ticket/1800 >From b2e5ba49e22509327bcc521370c11d1cbb9d8de4 Mon Sep 17 00:00:00 2001 From: Martin Kosek Date: Tue, 20 Sep 2011 10:11:35 +0200 Subject: [PATCH] ipactl does not

[Freeipa-devel] [PATCH] 125 Remove checks for ds-replication plugin

2011-09-20 Thread Martin Kosek
The replication plugin is no longer shipped as a separate package. Remove the code checking its existence. https://fedorahosted.org/freeipa/ticket/1815 >From d9765a3dbc32fece32c4d7f7908b06695769 Mon Sep 17 00:00:00 2001 From: Martin Kosek Date: Tue, 20 Sep 2011 10:40:16 +0200 Subject: [PATCH

Re: [Freeipa-devel] [PATCH] 124 ipactl does not stop dirsrv

2011-09-20 Thread Alexander Bokovoy
On Tue, 20 Sep 2011, Martin Kosek wrote: > Remove an invalid instance name passed to dirsrv service so that > it is correctly stopped. > > https://fedorahosted.org/freeipa/ticket/1800 ACK. -- / Alexander Bokovoy ___ Freeipa-devel mailing list Freeipa-

Re: [Freeipa-devel] [PATCH] 124 ipactl does not stop dirsrv

2011-09-20 Thread Martin Kosek
On Tue, 2011-09-20 at 11:47 +0300, Alexander Bokovoy wrote: > On Tue, 20 Sep 2011, Martin Kosek wrote: > > Remove an invalid instance name passed to dirsrv service so that > > it is correctly stopped. > > > > https://fedorahosted.org/freeipa/ticket/1800 > ACK. > Pushed to master, ipa-2-1. Marti

Re: [Freeipa-devel] [PATCH] 124 ipactl does not stop dirsrv

2011-09-20 Thread Martin Kosek
On Tue, 2011-09-20 at 10:52 +0200, Martin Kosek wrote: > On Tue, 2011-09-20 at 11:47 +0300, Alexander Bokovoy wrote: > > On Tue, 20 Sep 2011, Martin Kosek wrote: > > > Remove an invalid instance name passed to dirsrv service so that > > > it is correctly stopped. > > > > > > https://fedorahosted.o

Re: [Freeipa-devel] [PATCH] 124 ipactl does not stop dirsrv

2011-09-20 Thread Alexander Bokovoy
On Tue, 20 Sep 2011, Martin Kosek wrote: > > Pushed to master, ipa-2-1. > > > Alexander just noticed, that dirsrv stop in ipactl start fallback code > was not right either. One-liner patch attached. ACK as well. -- / Alexander Bokovoy ___ Freeipa-deve

Re: [Freeipa-devel] [PATCH] #1728 New schema for IPAv3 required attributes

2011-09-20 Thread Sumit Bose
On Mon, Sep 19, 2011 at 12:34:36PM -0400, Simo Sorce wrote: > Attached find a patch for new attributes and objectclasses for the IPA > v3 goal of configuring trust relationships between freeipa and windows > domains. I think everything is ok, I just started to wonder if it is maybe safer to always

Re: [Freeipa-devel] [PATCH] 124 ipactl does not stop dirsrv

2011-09-20 Thread Martin Kosek
On Tue, 2011-09-20 at 12:30 +0300, Alexander Bokovoy wrote: > On Tue, 20 Sep 2011, Martin Kosek wrote: > > > Pushed to master, ipa-2-1. > > > > > Alexander just noticed, that dirsrv stop in ipactl start fallback code > > was not right either. One-liner patch attached. > ACK as well. > Pushed to m

Re: [Freeipa-devel] [PATCH] 25 Create Tool for Enabling Disabling Managed Entry

2011-09-20 Thread Martin Kosek
On Fri, 2011-09-16 at 16:37 +, JR Aquino wrote: > On Sep 16, 2011, at 2:11 AM, Martin Kosek wrote: > > > On Thu, 2011-09-15 at 17:25 +, JR Aquino wrote: > >> On Sep 15, 2011, at 1:47 AM, Martin Kosek wrote: > >> > >>> On Thu, 2011-09-15 at 00:47 +, JR Aquino wrote: > On Jul 22, 2

Re: [Freeipa-devel] Structured DNS record API proposal

2011-09-20 Thread Martin Kosek
On Fri, 2011-09-16 at 09:42 +0200, Martin Kosek wrote: > On Thu, 2011-09-15 at 15:28 -0400, Adam Young wrote: > > On 09/14/2011 12:18 PM, Martin Kosek wrote: > > > Attached in the txt file. If you have any comments or suggestions to > > > this proposal, please let me know. > > > > > > https://fed

Re: [Freeipa-devel] [PATCH] 876 normalize user principal

2011-09-20 Thread Martin Kosek
On Fri, 2011-09-16 at 10:16 -0400, Rob Crittenden wrote: > Rob Crittenden wrote: > > Normalize and validate user principals in user and passwd plugins. The > > uid in the principal should be lower-case. > > > > rob > > With updated API.txt > > rob This works fine. I would just suggest improving

Re: [Freeipa-devel] [PATCH] 270 Fixed posix group checkbox.

2011-09-20 Thread Petr Vobornik
On 09/16/2011 03:59 PM, Endi Sukma Dewata wrote: Attached is the updated patch. I fixed the test case and did some cleanup. This is actually the problem I mentioned in the meeting (so patch 271 is actually fine). It looks like currently the checkbox widget is only used with boolean attributes.

Re: [Freeipa-devel] [PATCH] 272 Fixed columns in HBAC/sudo rules list pages.

2011-09-20 Thread Petr Vobornik
On 09/16/2011 06:24 PM, Endi Sukma Dewata wrote: The following list pages were modified to show these columns only: * HBAC rules: name, type, enabled, description * Sudo rules: name, enabled, description Ticket #1796 ___ Freeipa-devel mailing list F

Re: [Freeipa-devel] [PATCH] #1728 New schema for IPAv3 required attributes

2011-09-20 Thread Simo Sorce
On Tue, 2011-09-20 at 12:36 +0200, Sumit Bose wrote: > On Mon, Sep 19, 2011 at 12:34:36PM -0400, Simo Sorce wrote: > > Attached find a patch for new attributes and objectclasses for the IPA > > v3 goal of configuring trust relationships between freeipa and windows > > domains. > > I think everythi

Re: [Freeipa-devel] [PATCH] 879 ensure ssl socket is shut down

2011-09-20 Thread Rob Crittenden
Jan Cholasta wrote: On 19.9.2011 23:32, Rob Crittenden wrote: httplib makes a copy of the nss file descriptor but doesn't close it when the response code != 200 so we need to close it ourselves. rob Can we be sure that httplib's behavior is consistent and won't change? I would rather try to

Re: [Freeipa-devel] [PATCH] #1728 New schema for IPAv3 required attributes

2011-09-20 Thread Sumit Bose
On Tue, Sep 20, 2011 at 08:47:58AM -0400, Simo Sorce wrote: > On Tue, 2011-09-20 at 12:36 +0200, Sumit Bose wrote: > > On Mon, Sep 19, 2011 at 12:34:36PM -0400, Simo Sorce wrote: > > > Attached find a patch for new attributes and objectclasses for the IPA > > > v3 goal of configuring trust relation

Re: [Freeipa-devel] [PATCH] 273 Removed HBAC rule type.

2011-09-20 Thread Petr Vobornik
On 09/16/2011 06:24 PM, Endi Sukma Dewata wrote: HBAC rule type has been removed from the list page and details page because it is no longer supported in IPA 3.0. Ticket #1795 This should be pushed to master branch only. ___ Freeipa-devel mailing l

Re: [Freeipa-devel] Structured DNS record API proposal

2011-09-20 Thread Adam Young
This discussion got me thinking, always a dangerous proposal: We are currently exposing record add with the lie that when you add a record, it has a type. THe reality is that a record is just this big collection of multi value attributes, and each of those is the "type" of the record.

Re: [Freeipa-devel] [PATCH] #1728 New schema for IPAv3 required attributes

2011-09-20 Thread Simo Sorce
On Tue, 2011-09-20 at 14:59 +0200, Sumit Bose wrote: > On Tue, Sep 20, 2011 at 08:47:58AM -0400, Simo Sorce wrote: > > On Tue, 2011-09-20 at 12:36 +0200, Sumit Bose wrote: > > > On Mon, Sep 19, 2011 at 12:34:36PM -0400, Simo Sorce wrote: > > > > Attached find a patch for new attributes and objectcl

Re: [Freeipa-devel] Structured DNS record API proposal

2011-09-20 Thread Martin Kosek
On Tue, 2011-09-20 at 10:02 -0400, Adam Young wrote: > This discussion got me thinking, always a dangerous proposal: > > We are currently exposing record add with the lie that when you add a > record, it has a type. THe reality is that a record is just this big > collection of multi value att

Re: [Freeipa-devel] [PATCH] 25 Create Tool for Enabling Disabling Managed Entry

2011-09-20 Thread JR Aquino
On Sep 20, 2011, at 4:13 AM, Martin Kosek wrote: > On Fri, 2011-09-16 at 16:37 +, JR Aquino wrote: >> On Sep 16, 2011, at 2:11 AM, Martin Kosek wrote: >> >>> On Thu, 2011-09-15 at 17:25 +, JR Aquino wrote: On Sep 15, 2011, at 1:47 AM, Martin Kosek wrote: > On Thu, 2011-09-1

Re: [Freeipa-devel] Structured DNS record API proposal

2011-09-20 Thread Endi Sukma Dewata
On 9/20/2011 6:15 AM, Martin Kosek wrote: ACK. Proposal looks like it will work fairly easily with the UI. We'll have to make some chagnes due to the Add doing something different based on the type, but that is the case anyway. Yes, I was thinking how can we integrate this new API to WebUI. AF

Re: [Freeipa-devel] Still failing on 5.7 with the same error........

2011-09-20 Thread JR Aquino
On Sep 19, 2011, at 10:16 PM, JR Aquino wrote: > We're having significant reproducible problems with rhel 5.7 + FreeIPA > master... > I'm not sure if it is localized to us or even which side is responsible for > the error... > > Has anyone had success with rhel 5.7's repo included FreeIPA clie

[Freeipa-devel] [PATCH] 280 Fixed problem displaying special characters.

2011-09-20 Thread Endi Sukma Dewata
Some jQuery objects in various locations have been modified to use text() to show values obtained from the server (except messages). The text() will automatically encode special characters. Ticket #1798 -- Endi S. Dewata From 2af9922e6e271f1f48a47d20296facee5d6cb049 Mon Sep 17 00:00:00 2001 From

Re: [Freeipa-devel] [PATCH] 270 Fixed posix group checkbox.

2011-09-20 Thread Endi Sukma Dewata
On 9/20/2011 6:57 AM, Petr Vobornik wrote: Attached is the updated patch. I fixed the test case and did some cleanup. This is actually the problem I mentioned in the meeting (so patch 271 is actually fine). It looks like currently the checkbox widget is only used with boolean attributes. And it

Re: [Freeipa-devel] Still failing on 5.7 with the same error........

2011-09-20 Thread Rob Crittenden
JR Aquino wrote: On Sep 19, 2011, at 10:16 PM, JR Aquino wrote: We're having significant reproducible problems with rhel 5.7 + FreeIPA master... I'm not sure if it is localized to us or even which side is responsible for the error... Has anyone had success with rhel 5.7's repo included FreeI

[Freeipa-devel] [PATCH] 281 Fixed problem on combobox with search limit.

2011-09-20 Thread Endi Sukma Dewata
The IPA.combobox_widget has been modified such that if the drop-down list doesn't contain the stored value (due to search limit) it will not select anything from the list. The widget has also been modified not to select the value that matches the filter automatically because that might not be the

Re: [Freeipa-devel] [PATCH] 3 Fix ACIs in ipa-adtrust-install

2011-09-20 Thread Simo Sorce
On Mon, 2011-09-19 at 15:53 +0200, Sumit Bose wrote: > Hi, > > while testing the creation of trust objects I found a typo in the ACI > allowing to read the NT hash and realized that an ACI was missing to > allow the samba user to add and modify the trust objects. The attached > patch should fix it

Re: [Freeipa-devel] [PATCH] 4 Update samba LDAP schema

2011-09-20 Thread Simo Sorce
On Mon, 2011-09-19 at 16:10 +0200, Sumit Bose wrote: > Hi, > > this patch updates the samba LDAP schema to the latest version > available. I think the next change to this file will be removing it > because Simo is working on new objectclasses for IPA which will replace > the ones from the samba sc