Re: [Freeipa-devel] [PATCH] 151 Add --zonemgr validator

2011-10-24 Thread Martin Kosek
On Fri, 2011-10-21 at 11:31 -0400, Rob Crittenden wrote: > Martin Kosek wrote: > > On Fri, 2011-10-14 at 14:11 -0400, Rob Crittenden wrote: > >> Martin Kosek wrote: > >>> Do at least a basic validation of DNS zone manager mail address. > >>> > >>> Do not require '@' to be in the mail address as it

Re: [Freeipa-devel] [PATCH] 151 Add --zonemgr validator

2011-10-24 Thread Rob Crittenden
Martin Kosek wrote: On Fri, 2011-10-21 at 11:31 -0400, Rob Crittenden wrote: Martin Kosek wrote: On Fri, 2011-10-14 at 14:11 -0400, Rob Crittenden wrote: Martin Kosek wrote: Do at least a basic validation of DNS zone manager mail address. Do not require '@' to be in the mail address as it is

Re: [Freeipa-devel] [PATCH, 2.1] 0021 Fedora 16 and systemd support

2011-10-24 Thread Martin Kosek
On Tue, 2011-10-18 at 15:29 +0200, Martin Kosek wrote: > On Tue, 2011-10-18 at 15:48 +0300, Alexander Bokovoy wrote: > > On Tue, 18 Oct 2011, Alexander Bokovoy wrote: > > > > ipa.init was removed from the git, but it was never moved to > > > > init/SystemV/. > > > It should have been moved (rm+new

Re: [Freeipa-devel] [PATHC] 0291-show-enrollment-time-for-host.patch

2011-10-24 Thread Endi Sukma Dewata
On 10/21/2011 3:36 PM, Adam Young wrote: Based on IRC discussion the column for krblastpwdchange will be removed for now, so: NACK 291, ACK 292, and pushed to master. The column for has_keytab will be added in a separate patch. -- Endi S. Dewata __

Re: [Freeipa-devel] [PATCH] 151 Add --zonemgr validator

2011-10-24 Thread Martin Kosek
On Mon, 2011-10-24 at 09:02 -0400, Rob Crittenden wrote: > Martin Kosek wrote: > > On Fri, 2011-10-21 at 11:31 -0400, Rob Crittenden wrote: > >> Martin Kosek wrote: > >>> On Fri, 2011-10-14 at 14:11 -0400, Rob Crittenden wrote: > Martin Kosek wrote: > > Do at least a basic validation of DN

Re: [Freeipa-devel] [PATCH] 55 Parse comma-separated lists of values in all parameter types

2011-10-24 Thread Rob Crittenden
Jan Cholasta wrote: Dne 20.10.2011 13:20, Jan Cholasta napsal(a): Parse comma-separated lists of values in all parameter types. This can enabled for a specific parameter by setting the "csvlist" option to True. Remove List parameter type and replace all occurences with Str with csvlist enabled.

Re: [Freeipa-devel] [PATCH] 028 Code cleanup of HBAC, Sudo rules

2011-10-24 Thread Endi Sukma Dewata
On 10/24/2011 3:29 AM, Petr Vobornik wrote: https://fedorahosted.org/freeipa/ticket/1515 Changes: * Added functionality for widget composition. This allows to gather update information from nested widgets and gradually combine it to the facet level. * Details' facet update method was split to se

Re: [Freeipa-devel] [PATCH] 151 Add --zonemgr validator

2011-10-24 Thread Martin Kosek
On Mon, 2011-10-24 at 17:08 +0200, Martin Kosek wrote: > On Mon, 2011-10-24 at 09:02 -0400, Rob Crittenden wrote: > > Martin Kosek wrote: > > > On Fri, 2011-10-21 at 11:31 -0400, Rob Crittenden wrote: > > >> Martin Kosek wrote: > > >>> On Fri, 2011-10-14 at 14:11 -0400, Rob Crittenden wrote: > > >>

Re: [Freeipa-devel] [PATCH] 55 Parse comma-separated lists of values in all parameter types

2011-10-24 Thread Jan Cholasta
Dne 24.10.2011 17:42, Rob Crittenden napsal(a): Jan Cholasta wrote: Dne 20.10.2011 13:20, Jan Cholasta napsal(a): Parse comma-separated lists of values in all parameter types. This can enabled for a specific parameter by setting the "csvlist" option to True. Remove List parameter type and repl

Re: [Freeipa-devel] [PATCH] 295 Fixed inconsistent required/optional attributes.

2011-10-24 Thread Endi Sukma Dewata
On 10/21/2011 6:40 AM, Petr Vobornik wrote: 1) Wouldn't be better if the asterisk has different color than the label? Visually I don't like it that much and I think it can be overlook. Attaching a proposition. I used green IPAish color because red usually means error. Code from browser how it wa

[Freeipa-devel] [PATCH] 296 Removed HBAC deny rule warning.

2011-10-24 Thread Endi Sukma Dewata
The HBAC deny rule is no longer supported so it's no longer necessary to show the warning. Ticket #1444 -- Endi S. Dewata From 65e621bbb8f4181e83b7391fc9e6cd6f8ad7a376 Mon Sep 17 00:00:00 2001 From: Endi S. Dewata Date: Mon, 24 Oct 2011 18:18:10 -0500 Subject: [PATCH] Removed HBAC deny rule war

[Freeipa-devel] Keytab for talking to PKI CA from IPA

2011-10-24 Thread Adam Young
When setting up replication, it should not be necessary to cache any passwords, anywhere, until the replication agreemsnts are set up, and then, all caching should be using known secure mechanisms. The two main repositories we care about are the Directory Server instances managed by IPA and th

[Freeipa-devel] Keytab for talking to PKI CA from IPA

2011-10-24 Thread Adam Young
When setting up replication, it should not be necessary to cache any passwords, anywhere, until the replication agreemsnts are set up, and then, all caching should be using known secure mechanisms. The two main repositories we care about are the Directory Server instances managed by IPA and