Re: [Freeipa-devel] [PATCH] 381, 387 Preserve order of servers in ipa-client-install

2013-03-14 Thread Martin Kosek
On 03/13/2013 06:43 PM, Rob Crittenden wrote: Martin Kosek wrote: On 03/13/2013 02:58 PM, Martin Kosek wrote: On 03/11/2013 12:40 PM, Martin Kosek wrote: On 03/07/2013 03:07 PM, Petr Viktorin wrote: On 03/07/2013 02:00 PM, Martin Kosek wrote: When multiple servers are passed via --server

Re: [Freeipa-devel] [PATCH] 376-377, 385 Use tkey-gssapi-keytab in named.conf

2013-03-14 Thread Martin Kosek
On 03/13/2013 06:06 PM, Rob Crittenden wrote: Martin Kosek wrote: On 03/11/2013 09:39 AM, Petr Spacek wrote: On 11.3.2013 09:09, Martin Kosek wrote: On 03/08/2013 09:49 AM, Petr Spacek wrote: On 8.3.2013 00:14, Rob Crittenden wrote: Martin Kosek wrote: Remove obsolete BIND GSSAPI

[Freeipa-devel] [PATCH] 388-389 Improve client install LDAP cert retrieval fallback

2013-03-14 Thread Martin Kosek
[freeipa-mkosek-388-use-temporary-ccache-in-ipa-client-install.patch]: ipa-client-install failed if user had set his own KRB5CCNAME in his environment. Use a temporary CCACHE for the installer to avoid these kind of errors.

Re: [Freeipa-devel] [PATCH] 0006 Remove check for alphabetic only characters from domain name validation

2013-03-14 Thread Martin Kosek
On 03/11/2013 01:02 PM, Ana Krivokapic wrote: On 02/27/2013 10:58 AM, Martin Kosek wrote: On 02/22/2013 04:02 PM, Ana Krivokapic wrote: On 02/22/2013 10:19 AM, Petr Spacek wrote: On 20.2.2013 11:03, Ana Krivokapic wrote: On 02/18/2013 01:08 PM, Martin Kosek wrote: On 02/18/2013 12:47 PM,

Re: [Freeipa-devel] [PATCH 0039] Enforce exact SID match when adding or modifying a ID range

2013-03-14 Thread Martin Kosek
On 03/14/2013 10:48 AM, Tomas Babej wrote: On 03/13/2013 05:23 PM, Martin Kosek wrote: On 03/13/2013 09:50 AM, Tomas Babej wrote: On Wed 13 Mar 2013 09:47:09 AM CET, Tomas Babej wrote: Hi, SID validation in idrange.py now enforces exact match on SIDs, thus one can no longer use SID of an

Re: [Freeipa-devel] [PATCH] 0002 Add missing error message when adding duplicate external member to group

2013-03-14 Thread Rob Crittenden
Ana Krivokapic wrote: On 02/19/2013 09:46 PM, Rob Crittenden wrote: Ana Krivokapic wrote: When adding a duplicate member to a group, an error message is issued, informing the user that the entry is already a member of the group. This message was missing in case of an external member. Ticket:

Re: [Freeipa-devel] [PATCH] 376-377, 385 Use tkey-gssapi-keytab in named.conf

2013-03-14 Thread Rob Crittenden
Martin Kosek wrote: On 03/13/2013 06:06 PM, Rob Crittenden wrote: Martin Kosek wrote: On 03/11/2013 09:39 AM, Petr Spacek wrote: On 11.3.2013 09:09, Martin Kosek wrote: On 03/08/2013 09:49 AM, Petr Spacek wrote: On 8.3.2013 00:14, Rob Crittenden wrote: Martin Kosek wrote: Remove obsolete

Re: [Freeipa-devel] [WIP] Web UI Refactoring plugins effort - current state

2013-03-14 Thread Petr Vobornik
Update of the effort: Current state in git://fedorapeople.org/~pvoborni/freeipa.git branch menu. Patches will be squashed later. Fixed regressions: * facet refreshed only when pkeys and args are changed * menu has 'memory'. One will return to previously selected facet of entity. * fixed

Re: [Freeipa-devel] [PATCH] 386 Fix client discovery crash

2013-03-14 Thread Rob Crittenden
Martin Kosek wrote: Client discovery LDAP search assumes that the remote LDAP server will send an entry with lowercase attribute names. When it discovers for example on openldap which sends it in CamelCase, the discovery crashes. Convert retrieved entry to CIDict to avoid this error. Also add a

Re: [Freeipa-devel] [PATCH] 1089 fix some ipa-replica-manage error handling

2013-03-14 Thread Martin Kosek
On 03/01/2013 11:58 PM, Rob Crittenden wrote: I found a couple of problems in error handling in ipa-replica-manage when doing some oddball testing. See the ticket for full details. This may apply by itself but in my tree it exists after patch 1088. rob Looks and works OK, ACK! I

Re: [Freeipa-devel] [PATCH] 1089 fix some ipa-replica-manage error handling

2013-03-14 Thread Rob Crittenden
Martin Kosek wrote: On 03/01/2013 11:58 PM, Rob Crittenden wrote: I found a couple of problems in error handling in ipa-replica-manage when doing some oddball testing. See the ticket for full details. This may apply by itself but in my tree it exists after patch 1088. rob Looks and works

Re: [Freeipa-devel] [PATCH] 0007 Web UI: Realm Domains page

2013-03-14 Thread Rob Crittenden
Petr Vobornik wrote: On 03/07/2013 05:32 PM, Petr Vobornik wrote: On 03/07/2013 02:19 PM, Ana Krivokapic wrote: On 03/07/2013 12:41 PM, Petr Vobornik wrote: On 03/06/2013 08:26 PM, Ana Krivokapic wrote: On 03/06/2013 10:40 AM, Petr Vobornik wrote: On 03/05/2013 05:52 PM, Ana Krivokapic