Re: [Freeipa-devel] [PATCH] 0098 Provide explicit user name for Dogtag installation scripts

2012-11-14 Thread Martin Kosek
On 11/13/2012 11:23 PM, Rob Crittenden wrote: Petr Viktorin wrote: See commit message. Dogtag is changing its behavior soon (as in: tomorrow). This patch will be needed for IPA to install on Fedora 18. It would be nice if this went in our daily builds ASAP, so Dogtag people can test.

[Freeipa-devel] [PATCH] 334 Add requires for new dogtag10 and its server theme

2012-11-14 Thread Martin Kosek
Remove redundant pki-* package Requires and change PKI server theme Requires to correct package name. https://fedorahosted.org/freeipa/ticket/3213 --- The patch fixes broken Requires with the new server theme package name (thanks Ade for help): # rpm -q pki-ca pki-ca-10.0.0-0.52.b3.fc18.noarch

Re: [Freeipa-devel] [PATCH] 0098 Provide explicit user name for Dogtag installation scripts

2012-11-14 Thread Petr Viktorin
On 11/13/2012 11:23 PM, Rob Crittenden wrote: Petr Viktorin wrote: See commit message. Dogtag is changing its behavior soon (as in: tomorrow). This patch will be needed for IPA to install on Fedora 18. It would be nice if this went in our daily builds ASAP, so Dogtag people can test. Sorry

Re: [Freeipa-devel] [PATCH] 333 Run index task for new indexes

2012-11-14 Thread Petr Viktorin
On 11/13/2012 06:20 PM, Martin Kosek wrote: On 11/13/2012 06:05 PM, Simo Sorce wrote: On Tue, 2012-11-13 at 17:46 +0100, Martin Kosek wrote: Index task need to be run for both index updates and new indexes, otherwise some current values may not be indexed and could cause issues when searching

Re: [Freeipa-devel] [PATCH] 333 Run index task for new indexes

2012-11-14 Thread Martin Kosek
On 11/14/2012 09:49 AM, Petr Viktorin wrote: On 11/13/2012 06:20 PM, Martin Kosek wrote: On 11/13/2012 06:05 PM, Simo Sorce wrote: On Tue, 2012-11-13 at 17:46 +0100, Martin Kosek wrote: Index task need to be run for both index updates and new indexes, otherwise some current values may not be

Re: [Freeipa-devel] [PATCH] Make enabling the autofs service more robust

2012-11-14 Thread Martin Kosek
On 11/13/2012 11:33 AM, Jakub Hrozek wrote: On Mon, Nov 12, 2012 at 05:54:22PM +0100, Jan Cholasta wrote: On 9.11.2012 16:06, Jakub Hrozek wrote: On Tue, Nov 06, 2012 at 08:57:06AM +0100, Jan Cholasta wrote: On 29.10.2012 17:21, Jakub Hrozek wrote: An improvement based on Honza's suggestion.

Re: [Freeipa-devel] [PATCH 0022] Relax restriction for leading/trailing whitespaces in *-find commands

2012-11-14 Thread Martin Kosek
On 10/31/2012 01:16 PM, Tomas Babej wrote: On 10/31/2012 12:15 PM, Martin Kosek wrote: On 10/31/2012 10:16 AM, Martin Kosek wrote: On 10/30/2012 03:08 PM, Tomas Babej wrote: Hi, All *-find commands now enable leading/trailing whitespaces in the search phrase. Behaviour has been implemented

Re: [Freeipa-devel] [PATCH] Fixed the catch of the hostname option during ipa-server-install

2012-11-14 Thread Martin Kosek
On 11/13/2012 06:37 PM, Lynn Root wrote: Er, correctly formatted patch :D (I hope) Lynn Root Associate Software Engineer Red Hat --- Hi all - Originally ipa-server-install would still prompt for the

Re: [Freeipa-devel] [PATCH] 334 Add requires for new dogtag10 and its server theme

2012-11-14 Thread Rob Crittenden
Martin Kosek wrote: Remove redundant pki-* package Requires and change PKI server theme Requires to correct package name. https://fedorahosted.org/freeipa/ticket/3213 --- The patch fixes broken Requires with the new server theme package name (thanks Ade for help): # rpm -q pki-ca

Re: [Freeipa-devel] [PATCH] 334 Add requires for new dogtag10 and its server theme

2012-11-14 Thread Martin Kosek
On 11/14/2012 02:41 PM, Rob Crittenden wrote: Martin Kosek wrote: Remove redundant pki-* package Requires and change PKI server theme Requires to correct package name. https://fedorahosted.org/freeipa/ticket/3213 --- The patch fixes broken Requires with the new server theme package name

[Freeipa-devel] [PATCH 0091] Harden dn_to_text() conversion

2012-11-14 Thread Petr Spacek
Hello, Harden dn_to_text() conversion. All cases covered by new checks will silently cause errors in other parts of plugin. This code should catch problematic inputs and stop processing at the beginning. -- Petr^2 Spacek From 71feac726d814469291eeb413fa8c90aca02cd2d Mon Sep 17

[Freeipa-devel] [PATCH] Lookup the user SID in external group as well

2012-11-14 Thread Sumit Bose
Hi, Jakub found that currently only group SIDs are used to find group memberships of users from trusted domain. The attached patch adds the user SID as well. Fixes https://fedorahosted.org/freeipa/ticket/3257 . bye, Sumit From 9525242dc9912a62b89dc65633917ab660df1704 Mon Sep 17 00:00:00 2001

Re: [Freeipa-devel] [PATCH] Lookup the user SID in external group as well

2012-11-14 Thread Simo Sorce
On Wed, 2012-11-14 at 18:26 +0100, Sumit Bose wrote: Hi, Jakub found that currently only group SIDs are used to find group memberships of users from trusted domain. The attached patch adds the user SID as well. Fixes https://fedorahosted.org/freeipa/ticket/3257 . ack Simo. -- Simo

Re: [Freeipa-devel] [PATCH] 226 Better error message for login of users from other realms

2012-11-14 Thread Simo Sorce
On Wed, 2012-11-14 at 19:04 +0100, Petr Vobornik wrote: This is Web UI part of #3252 which depends on tbabej's python part which will be send by tbabej later. When user from other realm than FreeIPA's tries to use Web UI (login via forms-based auth or with valid trusted realm ticket), he

[Freeipa-devel] cert-find design

2012-11-14 Thread Rob Crittenden
There is currently no way to search for a certificate. You can only look it up if you already know the serial number. Dogtag 10 has a fresh API which makes searching very easy. I've started designing a search interface here: http://freeipa.org/page/Cert_find Comments welcome. I was able to

Re: [Freeipa-devel] cert-find design

2012-11-14 Thread Simo Sorce
On Wed, 2012-11-14 at 17:36 -0500, Rob Crittenden wrote: There is currently no way to search for a certificate. You can only look it up if you already know the serial number. Dogtag 10 has a fresh API which makes searching very easy. I've started designing a search interface here: