Re: [Freeipa-devel] Web UI refactoring effort ready for review

2013-05-06 Thread Martin Kosek
On 05/03/2013 07:35 PM, Endi Sukma Dewata wrote: Hi, Sorry for the delay, I have some questions comments. Registry: In the simpleuser.js the new 'user' entity is registered first then the old 'user' entity is removed, which could be confusing because they are both identified using

[Freeipa-devel] [PATCH] 403 Update pki proxy configuration

2013-05-06 Thread Martin Kosek
Replicas with Dogtag pki-ca 10.0.2 CA require access to additional Dogtag REST API calls. Update pki proxy configuration to allow that. https://fedorahosted.org/freeipa/ticket/3601 From 5c88f2b9d385b80bd6b5b49c15c29592e1b2372c Mon Sep 17 00:00:00 2001 From: Martin Kosek mko...@redhat.com Date:

Re: [Freeipa-devel] [PATCH] Resolve SIDs in Web UI

2013-05-06 Thread Sumit Bose
On Sat, May 04, 2013 at 08:24:52PM +0300, Alexander Bokovoy wrote: On Sat, 04 May 2013, Sumit Bose wrote: On Sat, May 04, 2013 at 06:02:27PM +0300, Alexander Bokovoy wrote: On Sat, 04 May 2013, Sumit Bose wrote: On Sat, May 04, 2013 at 08:13:17AM +0300, Alexander Bokovoy wrote: On Fri, 03 May

Re: [Freeipa-devel] [PATCH] Resolve SIDs in Web UI

2013-05-06 Thread Petr Vobornik
On 05/06/2013 10:47 AM, Sumit Bose wrote: On Sat, May 04, 2013 at 08:24:52PM +0300, Alexander Bokovoy wrote: On Sat, 04 May 2013, Sumit Bose wrote: On Sat, May 04, 2013 at 06:02:27PM +0300, Alexander Bokovoy wrote: On Sat, 04 May 2013, Sumit Bose wrote: On Sat, May 04, 2013 at 08:13:17AM

Re: [Freeipa-devel] [PATCH] Resolve SIDs in Web UI

2013-05-06 Thread Sumit Bose
On Mon, May 06, 2013 at 11:05:40AM +0200, Petr Vobornik wrote: On 05/06/2013 10:47 AM, Sumit Bose wrote: On Sat, May 04, 2013 at 08:24:52PM +0300, Alexander Bokovoy wrote: On Sat, 04 May 2013, Sumit Bose wrote: On Sat, May 04, 2013 at 06:02:27PM +0300, Alexander Bokovoy wrote: On Sat, 04 May

Re: [Freeipa-devel] [PATCH 0146] Disallow all dynamic updates if update policy configuration failed

2013-05-06 Thread Tomas Babej
On 04/16/2013 10:40 AM, Petr Spacek wrote: Hello, Disallow all dynamic updates if update policy configuration failed. Without this patch the old update policy stays in effect when re-configuration failed. ___ Freeipa-devel mailing list

Re: [Freeipa-devel] Possible fix for CA install bug?

2013-05-06 Thread Petr Viktorin
On 05/03/2013 12:43 PM, Martin Kosek wrote: On 05/02/2013 07:51 PM, Rob Crittenden wrote: Rob Crittenden wrote: Nathaniel McCallum wrote: When installing beta1, I encountered a bug where the CA install would fail. This may have already been fixed in dogtag or elsewhere, but if not, this patch

Re: [Freeipa-devel] [PATCH] 403 Update pki proxy configuration

2013-05-06 Thread Petr Viktorin
On 05/06/2013 10:13 AM, Martin Kosek wrote: Replicas with Dogtag pki-ca 10.0.2 CA require access to additional Dogtag REST API calls. Update pki proxy configuration to allow that. https://fedorahosted.org/freeipa/ticket/3601 With this, Rob's patch 1100 and the latest Dogtag (10.0.2-4), the

Re: [Freeipa-devel] [PATCH] 403 Update pki proxy configuration

2013-05-06 Thread Martin Kosek
On 05/06/2013 01:05 PM, Petr Viktorin wrote: On 05/06/2013 10:13 AM, Martin Kosek wrote: Replicas with Dogtag pki-ca 10.0.2 CA require access to additional Dogtag REST API calls. Update pki proxy configuration to allow that. https://fedorahosted.org/freeipa/ticket/3601 With this, Rob's

Re: [Freeipa-devel] Possible fix for CA install bug?

2013-05-06 Thread Martin Kosek
On 05/06/2013 01:05 PM, Petr Viktorin wrote: On 05/03/2013 12:43 PM, Martin Kosek wrote: On 05/02/2013 07:51 PM, Rob Crittenden wrote: Rob Crittenden wrote: Nathaniel McCallum wrote: When installing beta1, I encountered a bug where the CA install would fail. This may have already been fixed

Re: [Freeipa-devel] [PATCH] Resolve SIDs in Web UI

2013-05-06 Thread Petr Vobornik
Hello, here is review of Web UI part. ACK for abbra-102, it's a fix of error (typo), but it won't probably have any impact. Because links associated with 'a' elements are different than the resulting ones. NACK for abbra-103: NACK for abbra-pvoborni... (is included in new abbra-103) Are

Re: [Freeipa-devel] [PATCH 0149] Clean up PTR record synchronization code and make it more robust

2013-05-06 Thread Petr Spacek
On 18.4.2013 11:04, Petr Spacek wrote: Hello, Clean up PTR record synchronization code and make it more robust. PTR record synchronization was split to smaller functions. Input validation, error handling and logging was improved significantly. Tbabej's GCC cries about uninitialized variable

Re: [Freeipa-devel] [PATCH 0150] Do not delete whole node during PTR record synchronization.

2013-05-06 Thread Petr Spacek
On 18.4.2013 16:58, Petr Spacek wrote: Hello, Do not delete whole node during PTR record synchronization. https://fedorahosted.org/bind-dyndb-ldap/ticket/115 Tbabej's GCC cries about uninitialized variable 'delete_node', but we weren't able to find any real error. This version of the

Re: [Freeipa-devel] [PATCH 0147] Improve error logging for zones with idnsAllowDynUpdate == FALSE.

2013-05-06 Thread Tomas Babej
On 04/16/2013 12:44 PM, Petr Spacek wrote: Hello, Improve error logging for zones with idnsAllowDynUpdate == FALSE. Zones with dynamic updates disabled are re-configured with empty update policy string, so the update is refused by BIND and an error is logged.

Re: [Freeipa-devel] [PATCH 0149] Clean up PTR record synchronization code and make it more robust

2013-05-06 Thread Tomas Babej
On 05/06/2013 02:03 PM, Petr Spacek wrote: On 18.4.2013 11:04, Petr Spacek wrote: Hello, Clean up PTR record synchronization code and make it more robust. PTR record synchronization was split to smaller functions. Input validation, error handling and logging was improved significantly.

Re: [Freeipa-devel] [PATCH 0141] Generalize attribute_name-rdata_type conversions.

2013-05-06 Thread Tomas Hozza
On 04/08/2013 07:45 PM, Petr Spacek wrote: Hello, Generalize attribute_name-rdata_type conversions. Attribute names are generated on-the-fly: String Record is appended to textual representation of DNS RDATA type. String Record is cut down from the attribute name during attribute name

Re: [Freeipa-devel] [PATCH] Resolve SIDs in Web UI

2013-05-06 Thread Martin Kosek
On 05/06/2013 01:28 PM, Martin Kosek wrote: On 05/04/2013 07:13 AM, Alexander Bokovoy wrote: On Fri, 03 May 2013, Sumit Bose wrote: On Fri, May 03, 2013 at 09:46:47PM +0300, Alexander Bokovoy wrote: Hi! Attached are patches to allow resolving SIDs in Web UI in external membership panel for

Re: [Freeipa-devel] Web UI refactoring effort ready for review

2013-05-06 Thread Petr Vobornik
On 05/03/2013 07:35 PM, Endi Sukma Dewata wrote: Hi, Sorry for the delay, I have some questions comments. Registry: In the simpleuser.js the new 'user' entity is registered first then the old 'user' entity is removed, which could be confusing because they are both identified using 'user'.

Re: [Freeipa-devel] [PATCH] Resolve SIDs in Web UI

2013-05-06 Thread Sumit Bose
On Mon, May 06, 2013 at 05:55:35PM +0200, Martin Kosek wrote: On 05/06/2013 01:28 PM, Martin Kosek wrote: On 05/04/2013 07:13 AM, Alexander Bokovoy wrote: On Fri, 03 May 2013, Sumit Bose wrote: On Fri, May 03, 2013 at 09:46:47PM +0300, Alexander Bokovoy wrote: Hi! Attached are patches

[Freeipa-devel] mod_auth_kerb and DIR ccache

2013-05-06 Thread Rob Crittenden
The latest krb5 in F-19 updates-testing enables DIR ccache by default. This is breaking mod_auth_kerb. Attached is a WIP patch that works in permissive mode. At this point I'm not sure if we're better off trying to force a FILE ccache onto httpd in /tmp or go with the DIR method in which case