Re: [Freeipa-devel] [PATCH] 019 Disables gid field if not posix group in group adder dialog

2011-10-05 Thread Petr Vobornik
On 10/04/2011 11:59 PM, Adam Young wrote: On 10/04/2011 12:43 PM, Petr Vobornik wrote: https://fedorahosted.org/freeipa/ticket/1922 gidNumber is not an allowed attribute for a non-posix group. When adding a non-posix group from the UI, unchecking the Is this a POSIX group?: box should disable

Re: [Freeipa-devel] [PATCH] make users in nested groups show up in compat groups

2011-10-05 Thread Martin Kosek
On Tue, 2011-10-04 at 18:04 +0200, Jan Zelený wrote: Jan Zeleny notes that users who are members of groups which are themselves members of groups don't show up in the compat entries of the the containing groups. Nalin Ack Jan Pushed to master, ipa-2-1. Martin

Re: [Freeipa-devel] [PATCH] 0016 Setup and restore ntp configuration on the

2011-10-05 Thread Alexander Bokovoy
On Tue, 04 Oct 2011, Alexander Bokovoy wrote: Reproduced. This happens when the package freeipa-client is upgraded after client is enrolled with previous version -- in such case there is no backup state and therefore we can't restore. Also add fstore to /etc/sysconfig/ntpd to really backup

Re: [Freeipa-devel] [PATCH] 0016 Setup and restore ntp configuration on the

2011-10-05 Thread Jan Cholasta
On 5.10.2011 10:38, Alexander Bokovoy wrote: On Tue, 04 Oct 2011, Alexander Bokovoy wrote: Reproduced. This happens when the package freeipa-client is upgraded after client is enrolled with previous version -- in such case there is no backup state and therefore we can't restore. Also add

[Freeipa-devel] [PATCH] 0019 Sync time with NTP before joining the domain

2011-10-05 Thread Alexander Bokovoy
Hi, https://fedorahosted.org/freeipa/ticket/1773 -- / Alexander Bokovoy From 8b022ee7b1290cabd4e1a54971dc66420d73c1cc Mon Sep 17 00:00:00 2001 From: Alexander Bokovoy aboko...@redhat.com Date: Wed, 5 Oct 2011 15:02:58 +0300 Subject: [PATCH] Before kinit, try to sync time with the NTP servers of

[Freeipa-devel] [PATCH] 0020 fix 'referenced before assignment'

2011-10-05 Thread Alexander Bokovoy
Hi, in 1770 due to code moving from one part of the file to another, restored variable didn't get a proper assignment. One line patch. -- / Alexander Bokovoy From 8c46d269fb412887cf0eb70ec69bb6861933f56a Mon Sep 17 00:00:00 2001 From: Alexander Bokovoy aboko...@redhat.com Date: Wed, 5 Oct

Re: [Freeipa-devel] [PATCH] 49 Work around pkisilent bugs

2011-10-05 Thread Jan Cholasta
On 4.10.2011 20:35, Rob Crittenden wrote: Jan Cholasta wrote: Work around pkisilent bugs. Check directory manager password for invalid characters. (https://bugzilla.redhat.com/show_bug.cgi?id=658641) Shell-escape pkisilent command-line arguments.

Re: [Freeipa-devel] [PATCH] ipa-pwd-extop: allow password change on all connections with SSF1

2011-10-05 Thread Martin Kosek
On Wed, 2011-10-05 at 16:41 +0200, Jan Cholasta wrote: On 5.10.2011 16:36, Sumit Bose wrote: On Wed, Oct 05, 2011 at 03:06:19PM +0200, Jan Cholasta wrote: On 5.10.2011 11:58, Sumit Bose wrote: On Tue, Oct 04, 2011 at 11:15:04AM +0200, Jan Cholasta wrote: On 27.9.2011 10:15, Sumit Bose

[Freeipa-devel] [PATCH] #1900 fix replica-prepare issues with anonynous binds disabled

2011-10-05 Thread Simo Sorce
With anonymous binds disabled we were failing to run ipa-replica-prepare because some tests were done anonymously. During the creation of this patch we also hit a NSS Shutdown issue, to work around this issue ipa-repica-prepare has been hardcoded to use ldapi:// installed of ldaps:// The patch

Re: [Freeipa-devel] [PATCH] 49 Work around pkisilent bugs

2011-10-05 Thread Rob Crittenden
Jan Cholasta wrote: On 4.10.2011 20:35, Rob Crittenden wrote: Jan Cholasta wrote: Work around pkisilent bugs. Check directory manager password for invalid characters. (https://bugzilla.redhat.com/show_bug.cgi?id=658641) Shell-escape pkisilent command-line arguments.

Re: [Freeipa-devel] [PATCH] 134 Improve handling of GIDs when migrating groups

2011-10-05 Thread Rob Crittenden
Martin Kosek wrote: Since IPA v2 server already contain predefined groups that may collide with groups in migrated (IPA v1) server (for example admins, ipausers), users having colliding group as their primary group may happen to belong to an unknown group on new IPA v2 server. Implement