Re: [Freeipa-devel] slow response

2012-07-31 Thread Petr Spacek
On 07/31/2012 12:27 AM, John Dennis wrote: What is taking so long with session bookkeeping? I don't know yet. I would need more timing instrumentation. I will say when I looked at the python-krb5 code (which we use to populate the ccache from the session and read back to store in the session) se

Re: [Freeipa-devel] [PATCH] 0065 Ensure ipa-adtrust-install is run with administrator privileges and Kerberos ticket

2012-07-31 Thread Alexander Bokovoy
On Mon, 30 Jul 2012, Martin Kosek wrote: On 07/30/2012 01:34 PM, Alexander Bokovoy wrote: On Fri, 27 Jul 2012, Rob Crittenden wrote: Alexander Bokovoy wrote: On Thu, 26 Jul 2012, Alexander Bokovoy wrote: Hi, When setting up AD trusts support, ipa-adtrust-install utility needs to be run as:

[Freeipa-devel] [PATCH] 291 Avoid redundant info message during RPM update

2012-07-31 Thread Martin Kosek
This is just s short patch fixing a regression introduced in ticket 2652. I would like to get this one to beta 2. -- A change to ipa-ldap-updater (and thus an RPM update %post scriptlet) avoiding redundat "IPA is not configured" message in stderr introdocued in c20d4c71b87365b3b8d9c53418a79f992e68

[Freeipa-devel] [PATCH] 0067 Set Domain Users SID for ipausers group

2012-07-31 Thread Alexander Bokovoy
Hi, Set 'Domain Users' SID for ipausers group during ipa-adtrust-install Since all users belong to ipausers group, setting Domain Users SID (-513) will give them status of domain users. This is needed for Kerberos driver to generate MS-PAC. -- / Alexander Bokovoy >From 08aa97ebf2b7958ac58a59a2

Re: [Freeipa-devel] [PATCH] 0073 Update translations

2012-07-31 Thread John Dennis
On 07/26/2012 10:57 AM, Petr Viktorin wrote: On 07/26/2012 03:49 PM, Petr Viktorin wrote: On 07/26/2012 10:17 AM, Petr Viktorin wrote: Update the pot to match current source, and pull translations from Transifex. Warning: when this patch is pushed, the source strings on Transifex will update.

Re: [Freeipa-devel] [PATCH] 0067 Set Domain Users SID for ipausers group

2012-07-31 Thread Alexander Bokovoy
On Tue, 31 Jul 2012, Alexander Bokovoy wrote: Hi, Set 'Domain Users' SID for ipausers group during ipa-adtrust-install Since all users belong to ipausers group, setting Domain Users SID (-513) will give them status of domain users. This is needed for Kerberos driver to generate MS-PAC. I've c

Re: [Freeipa-devel] [PATCH] 0065 Ensure ipa-adtrust-install is run with administrator privileges and Kerberos ticket

2012-07-31 Thread Martin Kosek
On 07/31/2012 02:00 PM, Alexander Bokovoy wrote: > On Mon, 30 Jul 2012, Martin Kosek wrote: >> On 07/30/2012 01:34 PM, Alexander Bokovoy wrote: >>> On Fri, 27 Jul 2012, Rob Crittenden wrote: Alexander Bokovoy wrote: > On Thu, 26 Jul 2012, Alexander Bokovoy wrote: >> Hi, >> >> W

Re: [Freeipa-devel] [PATCH] 0073 Update translations

2012-07-31 Thread Martin Kosek
On 07/31/2012 03:09 PM, John Dennis wrote: > On 07/26/2012 10:57 AM, Petr Viktorin wrote: >> On 07/26/2012 03:49 PM, Petr Viktorin wrote: >>> On 07/26/2012 10:17 AM, Petr Viktorin wrote: Update the pot to match current source, and pull translations from Transifex. Warning:

Re: [Freeipa-devel] [PATCH] 0065 Ensure ipa-adtrust-install is run with administrator privileges and Kerberos ticket

2012-07-31 Thread Alexander Bokovoy
On Tue, 31 Jul 2012, Martin Kosek wrote: On 07/31/2012 02:00 PM, Alexander Bokovoy wrote: On Mon, 30 Jul 2012, Martin Kosek wrote: On 07/30/2012 01:34 PM, Alexander Bokovoy wrote: On Fri, 27 Jul 2012, Rob Crittenden wrote: Alexander Bokovoy wrote: On Thu, 26 Jul 2012, Alexander Bokovoy wrote

Re: [Freeipa-devel] slow response

2012-07-31 Thread Stephen Ingram
On Mon, Jul 30, 2012 at 3:27 PM, John Dennis wrote: > Stephen finally got his server patched with my timing instrumentation. He > sent me his log file and I ran my script to parse it. The results are quite > interesting. > > Basically I timed two things > > cmd_duration is the elapsed time to exec

Re: [Freeipa-devel] slow response

2012-07-31 Thread Stephen Ingram
On Tue, Jul 31, 2012 at 1:39 AM, Petr Spacek wrote: > On 07/31/2012 12:27 AM, John Dennis wrote: >> >> >> What is taking so long with session bookkeeping? I don't know yet. I would >> need more timing instrumentation. I will say when I looked at the >> python-krb5 >> code (which we use to populate

Re: [Freeipa-devel] [PATCH] 0065 Ensure ipa-adtrust-install is run with administrator privileges and Kerberos ticket

2012-07-31 Thread Martin Kosek
On 07/31/2012 04:20 PM, Alexander Bokovoy wrote: > On Tue, 31 Jul 2012, Martin Kosek wrote: >> On 07/31/2012 02:00 PM, Alexander Bokovoy wrote: >>> On Mon, 30 Jul 2012, Martin Kosek wrote: On 07/30/2012 01:34 PM, Alexander Bokovoy wrote: > On Fri, 27 Jul 2012, Rob Crittenden wrote: >>

Re: [Freeipa-devel] [PATCH] 175, 176 Fixed: Unable to select option in combobox in IE and Chrome

2012-07-31 Thread Endi Sukma Dewata
On 7/27/2012 10:55 AM, Petr Vobornik wrote: [PATCH] 175 Fixed: Unable to select option in combobox in IE and Chrome There's probably a bug regarding z-index stacking in Chrome and IE. It appears when combobox is used in dialog. Combobox's select area had z-index=1010. When first jquery dialog is

Re: [Freeipa-devel] [PATCHES] 177-184 Rebase of jquery and jquery-ui libs

2012-07-31 Thread Endi Sukma Dewata
On 7/27/2012 11:59 AM, Petr Vobornik wrote: This effort was driven by ticket https://fedorahosted.org/freeipa/ticket/2817 which needed update of jqury-ui library. When I was at it I also updated core jquery lib. All patches are associated with ticket #2817 which might be bad. Should I split it to

[Freeipa-devel] Strange issue I keep hitting with invalid tickets

2012-07-31 Thread Michael Gregg
I am not sure why, but when I let my ipa machines sit around for a while(overnight-24hours), and then kinit. When I try to run IPA commands I get output like this: [root@zippyvm12 ~]# ipa host-find ipa: ERROR: Local error: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor c