Re: [Freeipa-devel] [PATCH] 352-354 Add support for AD users to hbactest command

2013-01-23 Thread Martin Kosek
On 01/19/2013 07:35 PM, Simo Sorce wrote: On Fri, 2013-01-18 at 18:24 +0100, Martin Kosek wrote: How this works: 1. When a trusted domain user is tested, AD GC is searched for the user entry Distinguished Name My head is not clear today but it looks to me you are doing 2 searches.

Re: [Freeipa-devel] A new proopsal for Location Based Discovery

2013-01-23 Thread Adam Tkac
On Tue, Jan 22, 2013 at 07:33:53PM -0500, Simo Sorce wrote: On Tue, 2013-01-22 at 17:46 +0100, Adam Tkac wrote: On Tue, Jan 22, 2013 at 11:19:30AM -0500, Simo Sorce wrote: On Tue, 2013-01-22 at 17:02 +0100, Adam Tkac wrote: On Tue, Jan 22, 2013 at 10:25:21AM -0500, Simo Sorce wrote:

Re: [Freeipa-devel] [PATCH] 352-354 Add support for AD users to hbactest command

2013-01-23 Thread Simo Sorce
On Wed, 2013-01-23 at 09:10 +0100, Martin Kosek wrote: On 01/19/2013 07:35 PM, Simo Sorce wrote: On Fri, 2013-01-18 at 18:24 +0100, Martin Kosek wrote: How this works: 1. When a trusted domain user is tested, AD GC is searched for the user entry Distinguished Name My head is

Re: [Freeipa-devel] [PATCH 0026] Prevent integer overflow when setting krbPasswordExpiration

2013-01-23 Thread Tomas Babej
On 01/22/2013 07:39 PM, Dmitri Pal wrote: On 01/22/2013 10:57 AM, Simo Sorce wrote: On Tue, 2013-01-22 at 15:50 +0100, Tomas Babej wrote: Here I bring the updated version of the patch. Please note, that I *added* a flag attribute to ipadb_ldap_attr_to_krb5_timestamp function, that controls

[Freeipa-devel] Announcing FreeIPA 3.1.2

2013-01-23 Thread Simo Sorce
The FreeIPA team is proud to announce version FreeIPA v3.1.2 This release contains Security Updates It can be downloaded from http://www.freeipa.org/page/Downloads. == Highlights == During the past few months a number of security Issues have been found that affect FreeIPA. Three Security

Re: [Freeipa-devel] [PATCHES] 91-92 Add support for RFC 6594 SSHFP DNS records

2013-01-23 Thread Rob Crittenden
Jan Cholasta wrote: On 10.1.2013 05:56, Jan Cholasta wrote: Hi, Patch 91 removes module ipapython.compat. The code that uses it doesn't work with ancient Python versions anyway, so there's no need to keep it around. Patch 92 adds support for automatic generation of RFC 6594 SSHFP DNS records

Re: [Freeipa-devel] [PATCH] 352-354 Add support for AD users to hbactest command

2013-01-23 Thread Martin Kosek
On 01/23/2013 02:23 PM, Simo Sorce wrote: On Wed, 2013-01-23 at 09:10 +0100, Martin Kosek wrote: On 01/19/2013 07:35 PM, Simo Sorce wrote: On Fri, 2013-01-18 at 18:24 +0100, Martin Kosek wrote: How this works: 1. When a trusted domain user is tested, AD GC is searched for the user