[Freeipa-devel] Minor error: format not a string literal and no format arguments [-Werror=format-security]

2013-05-30 Thread Diane Trout
Hi, I was trying to compile freeipa on debian and the compiler threw a minor error. Resolve a -Werror=format-security error. ipa_extdom_extop.c: In function 'ipa_extdom_extop': ipa_extdom_extop.c:144:9: error: format not a string literal and no format arguments [-Werror=format-security]

Re: [Freeipa-devel] [RFC] Serving legacy systems cliens for trusts

2013-05-30 Thread Sumit Bose
On Wed, May 29, 2013 at 09:53:14AM -0400, Dmitri Pal wrote: > On 05/29/2013 03:28 AM, Sumit Bose wrote: > > On Wed, May 29, 2013 at 08:38:37AM +0300, Alexander Bokovoy wrote: > >> On Tue, 28 May 2013, Dmitri Pal wrote: > >>> On 05/28/2013 04:29 PM, Alexander Bokovoy wrote: > On Tue, 28 May 201

Re: [Freeipa-devel] [RFC] Serving legacy systems cliens for trusts

2013-05-30 Thread Jakub Hrozek
On Thu, May 30, 2013 at 11:01:02AM +0200, Sumit Bose wrote: > > For Lunix and older SSSD version we in fact have a problem. > > What I want to avoid is to have to define procedures and patches for all > ^^ ? > > the clients. However if you use ipa-client-install it would configu

Re: [Freeipa-devel] Minor error: format not a string literal and no format arguments [-Werror=format-security]

2013-05-30 Thread Sumit Bose
On Wed, May 29, 2013 at 11:26:17PM -0700, Diane Trout wrote: > Hi, > > I was trying to compile freeipa on debian and the compiler threw a minor > error. > > Resolve a -Werror=format-security error. > > ipa_extdom_extop.c: In function 'ipa_extdom_extop': > ipa_extdom_extop.c:144:9: error:

Re: [Freeipa-devel] [PATCH 0056] Support multiple local domain ranges with RID base set

2013-05-30 Thread Alexander Bokovoy
On Mon, 13 May 2013, Tomas Babej wrote: Hi, In ipa-adtrust-install, "adding RID bases" step would fail if there was more than one local range defined. This can be a common case if e.g. there are users that migrated from previous IdM solution. With this patch, we fail only if there are multiple

Re: [Freeipa-devel] [PATCH 0056] Support multiple local domain ranges with RID base set

2013-05-30 Thread Martin Kosek
On 05/30/2013 12:30 PM, Alexander Bokovoy wrote: > On Mon, 13 May 2013, Tomas Babej wrote: >> Hi, >> >> In ipa-adtrust-install, "adding RID bases" step would fail >> if there was more than one local range defined. This can be a >> common case if e.g. there are users that migrated from previous >> I

Re: [Freeipa-devel] CLDAP Netlogon fixes

2013-05-30 Thread Martin Kosek
On 05/28/2013 05:21 PM, Martin Kosek wrote: > On 05/28/2013 04:13 PM, Martin Kosek wrote: >> On 05/28/2013 04:12 PM, Martin Kosek wrote: >>> On 05/28/2013 02:35 PM, Alexander Bokovoy wrote: On Thu, 23 May 2013, Simo Sorce wrote: >>> As you can see, incorrect parameters still return empty d

Re: [Freeipa-devel] [RFC] Serving legacy systems cliens for trusts

2013-05-30 Thread Alexander Bokovoy
On Thu, 30 May 2013, Sumit Bose wrote: On Wed, May 29, 2013 at 09:53:14AM -0400, Dmitri Pal wrote: On 05/29/2013 03:28 AM, Sumit Bose wrote: > On Wed, May 29, 2013 at 08:38:37AM +0300, Alexander Bokovoy wrote: >> On Tue, 28 May 2013, Dmitri Pal wrote: >>> On 05/28/2013 04:29 PM, Alexander Bokovo

Re: [Freeipa-devel] [PATCHES 0053-0055] Prompt for RID base if trusted domain SID / name is specified and vice versa

2013-05-30 Thread Ana Krivokapic
On 05/13/2013 05:42 PM, Tomas Babej wrote: > On 05/10/2013 04:39 PM, Tomas Babej wrote: >> Hi, >> >> this patcheset deals with https://fedorahosted.org/freeipa/ticket/3602 >> >> See commit messages for details. >> >> Tomas >> >> >> ___ >> Freeipa-devel ma

[Freeipa-devel] [PATCH 0061/0063] Add ipaRangeType attribute to LDAP Schema

2013-05-30 Thread Tomas Babej
Hi, This adds a new LDAP attribute ipaRangeType with OID 2.16.840.1.113730.3.8.11.41 to the LDAP Schema. ObjectClass ipaIDrange has been altered to require ipaRangeType attribute. Part of https://fedorahosted.org/freeipa/ticket/3647 Tomas From ba79625c7e19b5f9764e583c6057f6640c22336e Mon Sep 1

[Freeipa-devel] [PATCH 0062/0063] Add update plugin to fill in ipaRangeType attribute

2013-05-30 Thread Tomas Babej
Hi, Previously, we deduced the range type from the range objectclass and filled in virtual attribute in post_callback phase. Having a ipaRangeType attributeType in schema, we need to fill the attribute values to ranges created in previous IPA versions. The plugin follows the same approach, sett

[Freeipa-devel] [PATCH 0063/0063] Extend idrange commands to support new range origin

2013-05-30 Thread Tomas Babej
Hi, Following values of ipaRangeType attribute are supported and translated accordingly in the idrange commands: 'ipa-local': 'local domain range' 'ipa-ad-winsync': 'Active Directory winsync range' 'ipa-ad-trust': 'Active Directory domain range' 'ipa-ad-trust-posix': 'Active Directory trust rang

[Freeipa-devel] [PATCH] 0032 Ignore files generated by build

2013-05-30 Thread Ana Krivokapic
Hello, This patch adds some additional files to .gitignore. -- Regards, Ana Krivokapic Associate Software Engineer FreeIPA team Red Hat Inc. From ba2b8ca9c3b2ad2be6ba5ac4097bccd1d36de431 Mon Sep 17 00:00:00 2001 From: Ana Krivokapic Date: Thu, 30 May 2013 14:36:13 +0200 Subject: [PATCH] Ignor

Re: [Freeipa-devel] [PATCH] 0032 Ignore files generated by build

2013-05-30 Thread Tomas Babej
On 05/30/2013 02:41 PM, Ana Krivokapic wrote: Hello, This patch adds some additional files to .gitignore. ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel ACK Tomas

Re: [Freeipa-devel] [PATCH 0057] Do not allow removal of ID range of an active trust

2013-05-30 Thread Tomas Babej
On 05/29/2013 12:25 PM, Martin Kosek wrote: On 05/28/2013 03:48 PM, Alexander Bokovoy wrote: On Tue, 28 May 2013, Tomas Babej wrote: On 05/28/2013 02:35 PM, Alexander Bokovoy wrote: On Mon, 27 May 2013, Tomas Babej wrote: We got rid of openldap utilities now. While using python.ldap module, I

Re: [Freeipa-devel] [RFC] Serving legacy systems cliens for trusts

2013-05-30 Thread Dmitri Pal
[...] >>> >>> For Lunix and older SSSD version we in fact have a problem. >>> What I want to avoid is to have to define procedures and patches for >>> all >>^^ ? >>> the clients. However if you use ipa-client-install it would configure >>> sssd the old way. >>> How to make it co