Re: [Freeipa-devel] [PATCHES] 59-65 SSH public key management

2012-01-25 Thread Jan Cholasta
Dne 24.1.2012 23:11, Rob Crittenden napsal(a): Jan Cholasta wrote: I have updated and rebased the patches: [PATCH] 59 Add LDAP schema for SSH public keys. No changes. [PATCH] 60 Add LDAP ACIs for SSH public key schema. Requires patch 59. No changes. [PATCH] 61 Add support for SSH public

[Freeipa-devel] [PATCH] 202 Add reverse DNS record when forward is created

2012-01-25 Thread Martin Kosek
Adding reverse DNS record may be a time consuming task, especially for IPv6 addresses. Having a way to automatically create a reverse record when a forward record is created could speed up the process. host-add command already has this possibility. This patch takes advantage of the new per-type

Re: [Freeipa-devel] [PATCH 59] Modify spec file to add ipa_memcached service Install , control ipa_memcached instance

2012-01-25 Thread Rob Crittenden
John Dennis wrote: This patch supersedes the previous patch, it corrects two issue Rob raised in a later patch review The fixed issues are: * spec file did not install ipa_memcached SysV initscript on SvsV systems. * Typo in the name of the pid file variable in the ipa_memcached initscript

Re: [Freeipa-devel] [PATCH 61] Cache authentication in session

2012-01-25 Thread Simo Sorce
On Wed, 2012-01-25 at 09:16 -0500, Rob Crittenden wrote: John Dennis wrote: On 01/23/2012 06:15 PM, John Dennis wrote: Rebased patch attached (includes contents of previous patch 60). The issues with ipa_memcached belonged to patch 59, that patch was rebased and resubmitted. I

Re: [Freeipa-devel] [PATCHES] 59-65 SSH public key management

2012-01-25 Thread Rob Crittenden
Jan Cholasta wrote: Dne 24.1.2012 23:11, Rob Crittenden napsal(a): Jan Cholasta wrote: I have updated and rebased the patches: [PATCH] 59 Add LDAP schema for SSH public keys. No changes. [PATCH] 60 Add LDAP ACIs for SSH public key schema. Requires patch 59. No changes. [PATCH] 61 Add

[Freeipa-devel] [PATCH] 10 --no-reverse option in ipa-replica-install is not honoured

2012-01-25 Thread Ondrej Hamada
https://fedorahosted.org/freeipa/ticket/2161 The option '--no-reverse' was not honoured in replica-install because of wrongly placed condition checking. -- Regards, Ondrej Hamada FreeIPA team jabber: oh...@jabbim.cz IRC: ohamada From 5aa9a2238ee5c32aeebf3c2cabc6aa5c31794822 Mon Sep 17

Re: [Freeipa-devel] [PATCH] 932 Add support for storing MAC address in host entries.

2012-01-25 Thread Rob Crittenden
Martin Kosek wrote: On Mon, 2012-01-23 at 11:14 +0100, Jan Cholasta wrote: Dne 20.1.2012 21:15, Rob Crittenden napsal(a): macaddress is a multi-valued attribute and we allow multiple entries. This is from the objectclass ieee802device. This is added manually when doing a mod or add and not as

Re: [Freeipa-devel] [PATCH] 927 fix deleting hbac rules when selinux user maps are involved

2012-01-25 Thread Rob Crittenden
Martin Kosek wrote: On Tue, 2012-01-24 at 10:08 -0500, Rob Crittenden wrote: Martin Kosek wrote: On Mon, 2012-01-23 at 12:20 -0500, Rob Crittenden wrote: Martin Kosek wrote: On Tue, 2012-01-17 at 17:59 -0500, Rob Crittenden wrote: When deleting an HBAC rule we need to ensure that an SELinux

Re: [Freeipa-devel] [PATCH] 9 Don't set nsds5replicaupdateschedule in replication agreements

2012-01-25 Thread Rob Crittenden
Ondrej Hamada wrote: https://fedorahosted.org/freeipa/ticket/1482 The nsDS5ReplicaUpdateSchedule parameter is omitted what results in replication being run all the time. The parameter is still used for forcing replica update but after that action it is always deleted. ACK, pushed to master

Re: [Freeipa-devel] [PATCH] 195-199 New DNS features

2012-01-25 Thread Rob Crittenden
Martin Kosek wrote: This set of patches implements support and API for features introduced in a new bind-dyndb-ldap (bind-dyndb-ldap-1.1.0-0.6.a1): - global bind-dyndb-ldap settings in LDAP (cn=dns,$SUFFIX) - conditional per-zone forwarding - per-zone configuration of automatic PTR

Re: [Freeipa-devel] [PATCH] 178+179 Add missing managing hosts filtering options

2012-01-25 Thread Endi Sukma Dewata
On 12/13/2011 8:13 AM, Martin Kosek wrote: Host object has a virtual attribute managing containing all hosts it manages (governed by managedBy attribute). This patch also adds standard membership filtering options: --man-hosts=HOSTS: Only hosts managing _all_ HOSTS are returned