[Freeipa-devel] [PATCH] 200 Fix issue which broke setup of Web UI unit tests

2012-08-27 Thread Petr Vobornik
Fix issue which broke setup of Web UI unit tests Web UI itself wasn't negatively affected. Issue introduced in be144da672e0634f7aaeff69d662cbc4d11aff0f (#2897). https://fedorahosted.org/freeipa/ticket/2897 -- Petr Vobornik From c2ee98f3923a1f916d078e466658cf13922514c6 Mon Sep 17 00:00:00 2001

[Freeipa-devel] [PATCH] 201 Successful action notification

2012-08-27 Thread Petr Vobornik
User was not notified about success of actions executed from action list, action panel or facet control bar. This patch adds IPA.notify_success(message) call. It creates a yellow notification area with supplied message in Web UI header in the middle of the green area (empty space of first leve

Re: [Freeipa-devel] [PATCH] 0006 Removes sssd.conf after uninstall.

2012-08-27 Thread Martin Kosek
On 08/17/2012 03:04 PM, Tomas Babej wrote: > Hi, > > The sssd.conf file is no longer left behind in case sssd was not > configured before the installation. > > https://fedorahosted.org/freeipa/ticket/2740 > > Tomas > I found few issues with this approach: 1) (major) We do not want to delete s

Re: [Freeipa-devel] [PATCH] 0008 Fixes different behaviour of permission-mod and show.

2012-08-27 Thread Tomas Babej
On 08/23/2012 02:46 PM, Rob Crittenden wrote: Tomas Babej wrote: On 08/22/2012 05:15 PM, Rob Crittenden wrote: Tomas Babej wrote: Hi, Both commands now produce the same output regarding the attributelevelrights. https://fedorahosted.org/freeipa/ticket/2875 I think some unit tests would be

Re: [Freeipa-devel] [PATCH] Patch to allow IPA to work with dogtag 10 on f18

2012-08-27 Thread Dmitri Pal
On 08/17/2012 12:06 PM, Rob Crittenden wrote: > Ade Lee wrote: >> On Fri, 2012-08-17 at 09:34 -0400, Ade Lee wrote: >>> On Thu, 2012-08-16 at 18:45 +0200, Martin Kosek wrote: On 08/16/2012 01:28 PM, Ade Lee wrote: > Patch attached this time. I should know better than to do this in > t

Re: [Freeipa-devel] Ticket #2866 - referential integrity in IPA

2012-08-27 Thread Dmitri Pal
On 08/17/2012 10:00 AM, Rich Megginson wrote: > On 08/17/2012 07:44 AM, Martin Kosek wrote: >> Hi guys, >> >> I am now investigating ticket #2866: >> https://fedorahosted.org/freeipa/ticket/2866 >> >> And I am thinking about possible solutions for this problem. In a >> nutshell, we do not properly

Re: [Freeipa-devel] [PATCH 0042] Flush zones and RRs cache when handling persistent search reconnection

2012-08-27 Thread Dmitri Pal
On 08/15/2012 05:18 AM, Simo Sorce wrote: > - Original Message - >> On 08/14/2012 08:25 PM, Simo Sorce wrote: >>> See man ldap_result, the entries return with type >>> LDAP_RES_SEARCH_ENTRY, the last message is instead >>> LDAP_RES_SEARCH_RESULT which tells you the searc is complete. >>> >>

Re: [Freeipa-devel] Freeipa wiki editing

2012-08-27 Thread Dmitri Pal
On 07/26/2012 02:01 AM, Javier Ramirez wrote: > Hi, > > As per the instructions found at http://freeipa.com/page/Contribute , I send > this email to request for a freeipa wiki account . I have some amends to make > to http://freeipa.com/page/ConfiguringAixClients . > Javier, sorry for the delay.

Re: [Freeipa-devel] [PATCH] Set TTL during ipa-client-install for DNS records

2012-08-27 Thread Dmitri Pal
On 08/14/2012 10:38 AM, James Hogarth wrote: > Hi, > > Please see attached patch to allow the TTL to be specified when an IPA > client is configured. > > The default is to use the 1200 that is currently in place. > > Regardless of is it is set or not as an argument ipa_dyndns_ttl is set > in sssd.c

Re: [Freeipa-devel] [PATCH] 194 Handle case when trusted domain user access the Web UI

2012-08-27 Thread Dmitri Pal
On 08/10/2012 07:11 AM, Petr Vobornik wrote: > WebUI catches the fact that the user can't access LDAP server with a > current ticket. It shows form-based auth login dialog. Previoustly an > ugly error was returned on an almost empty page, and user had no > recourse. > > https://fedorahosted.org/fre

Re: [Freeipa-devel] Ticket #2866 - referential integrity in IPA

2012-08-27 Thread Dmitri Pal
On 08/17/2012 10:00 AM, Rich Megginson wrote: > On 08/17/2012 07:44 AM, Martin Kosek wrote: >> Hi guys, >> >> I am now investigating ticket #2866: >> https://fedorahosted.org/freeipa/ticket/2866 >> >> And I am thinking about possible solutions for this problem. In a >> nutshell, we do not properly

Re: [Freeipa-devel] [PATCH] Patch to allow IPA to work with dogtag 10 on f18

2012-08-27 Thread Petr Viktorin
On 08/27/2012 02:39 PM, Dmitri Pal wrote: On 08/17/2012 12:06 PM, Rob Crittenden wrote: Ade Lee wrote: On Fri, 2012-08-17 at 09:34 -0400, Ade Lee wrote: On Thu, 2012-08-16 at 18:45 +0200, Martin Kosek wrote: On 08/16/2012 01:28 PM, Ade Lee wrote: Patch attached this time. I should know bett

Re: [Freeipa-devel] [PATCH] 0006 Removes sssd.conf after uninstall.

2012-08-27 Thread Martin Kosek
On 08/27/2012 01:42 PM, Martin Kosek wrote: > On 08/17/2012 03:04 PM, Tomas Babej wrote: >> Hi, >> >> The sssd.conf file is no longer left behind in case sssd was not >> configured before the installation. >> >> https://fedorahosted.org/freeipa/ticket/2740 >> >> Tomas >> > > I found few issues wit

Re: [Freeipa-devel] [PATCH] 194 Handle case when trusted domain user access the Web UI

2012-08-27 Thread Petr Vobornik
On 08/14/2012 03:21 AM, Endi Sukma Dewata wrote: On 8/10/2012 6:11 AM, Petr Vobornik wrote: WebUI catches the fact that the user can't access LDAP server with a current ticket. It shows form-based auth login dialog. Previoustly an ugly error was returned on an almost empty page, and user had no

Re: [Freeipa-devel] [PATCH] 1047 remove bogus complaint on no password history

2012-08-27 Thread Martin Kosek
On 08/24/2012 07:58 PM, Rob Crittenden wrote: > If the password policy is set to store no history (hostory=0) then whenever a > password is set a bogus log entry is created on 389-ds reporting "failed to > generate new password history!?" It fails to generate history because policy > tells it not t

Re: [Freeipa-devel] [PATCH] Set TTL during ipa-client-install for DNS records

2012-08-27 Thread Rob Crittenden
Dmitri Pal wrote: On 08/14/2012 10:38 AM, James Hogarth wrote: Hi, Please see attached patch to allow the TTL to be specified when an IPA client is configured. The default is to use the 1200 that is currently in place. Regardless of is it is set or not as an argument ipa_dyndns_ttl is set in

Re: [Freeipa-devel] [PATCH] Patch to allow IPA to work with dogtag 10 on f18

2012-08-27 Thread Rob Crittenden
Petr Viktorin wrote: On 08/27/2012 02:39 PM, Dmitri Pal wrote: On 08/17/2012 12:06 PM, Rob Crittenden wrote: Ade Lee wrote: On Fri, 2012-08-17 at 09:34 -0400, Ade Lee wrote: On Thu, 2012-08-16 at 18:45 +0200, Martin Kosek wrote: On 08/16/2012 01:28 PM, Ade Lee wrote: Patch attached this tim

Re: [Freeipa-devel] [PATCH] 0006 Removes sssd.conf after uninstall.

2012-08-27 Thread Jakub Hrozek
On Mon, Aug 27, 2012 at 02:57:44PM +0200, Martin Kosek wrote: > I think that the right behavior of SSSD conf uninstall should be the > following: > > * sssd.conf existed before IPA install + non-IPA domains in sssd.conf found: > - move backed conf up sssd.conf.bkp (and inform the user) > - us

Re: [Freeipa-devel] [PATCH 80] Ticket #2850 - Ipactl exception not handled well

2012-08-27 Thread Martin Kosek
On 08/22/2012 04:45 PM, Petr Viktorin wrote: >> From fda504233ee46a494b7ed6b85593e7e586739425 Mon Sep 17 00:00:00 2001 >> From: John Dennis >> Date: Mon, 20 Aug 2012 16:47:52 -0400 >> Subject: [PATCH 80] Ticket #2850 - Ipactl exception not handled well >> Content-Type: text/plain; charset="utf-8" >

Re: [Freeipa-devel] [PATCH] 0006 Removes sssd.conf after uninstall.

2012-08-27 Thread Martin Kosek
On 08/27/2012 03:37 PM, Jakub Hrozek wrote: > On Mon, Aug 27, 2012 at 02:57:44PM +0200, Martin Kosek wrote: >> I think that the right behavior of SSSD conf uninstall should be the >> following: >> >> * sssd.conf existed before IPA install + non-IPA domains in sssd.conf found: >> - move backed co

Re: [Freeipa-devel] Ticket #2866 - referential integrity in IPA

2012-08-27 Thread Rich Megginson
On 08/27/2012 06:41 AM, Dmitri Pal wrote: On 08/17/2012 10:00 AM, Rich Megginson wrote: On 08/17/2012 07:44 AM, Martin Kosek wrote: Hi guys, I am now investigating ticket #2866: https://fedorahosted.org/freeipa/ticket/2866 And I am thinking about possible solutions for this problem. In a nuts

[Freeipa-devel] [PATCH] 202 Password policy paging with proper sorting

2012-08-27 Thread Petr Vobornik
This patch adds option to disable sorting when paging. It allowed to enable paging in password policy with order of items untouched (they are sorted on server side by priority). Also fixing issue when paging is disabled and command summary = null. It displayed 'null' in facet footer. https:/

Re: [Freeipa-devel] Ticket #2866 - referential integrity in IPA

2012-08-27 Thread Rich Megginson
On 08/27/2012 09:25 AM, Rich Megginson wrote: On 08/27/2012 06:41 AM, Dmitri Pal wrote: On 08/17/2012 10:00 AM, Rich Megginson wrote: On 08/17/2012 07:44 AM, Martin Kosek wrote: Hi guys, I am now investigating ticket #2866: https://fedorahosted.org/freeipa/ticket/2866 And I am thinking about

Re: [Freeipa-devel] Ticket #2866 - referential integrity in IPA

2012-08-27 Thread Martin Kosek
On 08/17/2012 04:00 PM, Rich Megginson wrote: > On 08/17/2012 07:44 AM, Martin Kosek wrote: >> Hi guys, >> >> I am now investigating ticket #2866: >> https://fedorahosted.org/freeipa/ticket/2866 >> >> And I am thinking about possible solutions for this problem. In a >> nutshell, we do not properly

Re: [Freeipa-devel] Ticket #2866 - referential integrity in IPA

2012-08-27 Thread Rich Megginson
On 08/27/2012 10:24 AM, Martin Kosek wrote: On 08/17/2012 04:00 PM, Rich Megginson wrote: On 08/17/2012 07:44 AM, Martin Kosek wrote: Hi guys, I am now investigating ticket #2866: https://fedorahosted.org/freeipa/ticket/2866 And I am thinking about possible solutions for this problem. In a nu

Re: [Freeipa-devel] Ticket #2866 - referential integrity in IPA

2012-08-27 Thread John Dennis
Just out of curiosity, I saw something this weekend while testing and I'm wondering if it's expected behavior or if referential integrity would address it. I was able to add a non-existent user to a group. Shouldn't that have been an error? Do we check for that in the ldap pre callback? Do we

Re: [Freeipa-devel] Ticket #2866 - referential integrity in IPA

2012-08-27 Thread Rob Crittenden
Rich Megginson wrote: On 08/27/2012 06:41 AM, Dmitri Pal wrote: On 08/17/2012 10:00 AM, Rich Megginson wrote: On 08/17/2012 07:44 AM, Martin Kosek wrote: Hi guys, I am now investigating ticket #2866: https://fedorahosted.org/freeipa/ticket/2866 And I am thinking about possible solutions for

Re: [Freeipa-devel] Ticket #2866 - referential integrity in IPA

2012-08-27 Thread Rich Megginson
On 08/27/2012 11:12 AM, Rob Crittenden wrote: Rich Megginson wrote: On 08/27/2012 06:41 AM, Dmitri Pal wrote: On 08/17/2012 10:00 AM, Rich Megginson wrote: On 08/17/2012 07:44 AM, Martin Kosek wrote: Hi guys, I am now investigating ticket #2866: https://fedorahosted.org/freeipa/ticket/2866

Re: [Freeipa-devel] Ticket #2866 - referential integrity in IPA

2012-08-27 Thread Rich Megginson
On 08/27/2012 10:39 AM, John Dennis wrote: Just out of curiosity, I saw something this weekend while testing and I'm wondering if it's expected behavior or if referential integrity would address it. I was able to add a non-existent user to a group. Shouldn't that have been an error? Do we che

Re: [Freeipa-devel] Ticket #2866 - referential integrity in IPA

2012-08-27 Thread Dmitri Pal
On 08/27/2012 11:25 AM, Rich Megginson wrote: > On 08/27/2012 06:41 AM, Dmitri Pal wrote: >> On 08/17/2012 10:00 AM, Rich Megginson wrote: >>> On 08/17/2012 07:44 AM, Martin Kosek wrote: Hi guys, I am now investigating ticket #2866: https://fedorahosted.org/freeipa/ticket/2866 >

Re: [Freeipa-devel] Ticket #2866 - referential integrity in IPA

2012-08-27 Thread Martin Kosek
On Mon, 2012-08-27 at 10:29 -0600, Rich Megginson wrote: > On 08/27/2012 10:24 AM, Martin Kosek wrote: > > On 08/17/2012 04:00 PM, Rich Megginson wrote: > >> On 08/17/2012 07:44 AM, Martin Kosek wrote: > >>> Hi guys, > >>> > >>> I am now investigating ticket #2866: > >>> https://fedorahosted.org/fr

Re: [Freeipa-devel] [PATCH] 295 Fix managedBy label for DNS zone

2012-08-27 Thread Rob Crittenden
Martin Kosek wrote: Even though managedBy output parameter was only used for failed host managedBy memberships, it was defined in global baseldap.py classes. Incorrect label was then being displayed also for DNS zone per-zone permission attribute with the same name. Move managedBy output paramet

Re: [Freeipa-devel] Ticket #2866 - referential integrity in IPA

2012-08-27 Thread Rob Crittenden
Rich Megginson wrote: On 08/27/2012 10:39 AM, John Dennis wrote: Just out of curiosity, I saw something this weekend while testing and I'm wondering if it's expected behavior or if referential integrity would address it. I was able to add a non-existent user to a group. Shouldn't that have been

Re: [Freeipa-devel] Ticket #2866 - referential integrity in IPA

2012-08-27 Thread Rich Megginson
On 08/27/2012 02:27 PM, Martin Kosek wrote: On Mon, 2012-08-27 at 10:29 -0600, Rich Megginson wrote: On 08/27/2012 10:24 AM, Martin Kosek wrote: On 08/17/2012 04:00 PM, Rich Megginson wrote: On 08/17/2012 07:44 AM, Martin Kosek wrote: Hi guys, I am now investigating ticket #2866: https://fed

Re: [Freeipa-devel] [PATCH 0047] Avoid manual connection management outside ldap_query()

2012-08-27 Thread Petr Spacek
On 08/22/2012 03:35 PM, Adam Tkac wrote: On Mon, Aug 13, 2012 at 03:15:52PM +0200, Petr Spacek wrote: Hello, this patch improves connection management in bind-dyndb-ldap and closes https://fedorahosted.org/bind-dyndb-ldap/ticket/68 . It should prevent all deadlocks on connection pool in future