Re: [Freeipa-devel] PostgreSQL + freeipa

2013-10-01 Thread Gorbachev Ivan
Thank you! And one more question, what does error mean - "GSSAPI continuation error: No credentials found with supported encryption types". This error appears when I try to log in from another computer within the domain IPA. On Mon, Sep 30, 2013 at 7:58 PM, Alexander Bokovoy wrote: > On Mon, 30

Re: [Freeipa-devel] [PATCHES] 0289-0302 Managed Read permissions

2013-10-01 Thread Petr Viktorin
On 10/01/2013 10:56 AM, Petr Viktorin wrote: Hello, These patches implement the framework for https://fedorahosted.org/freeipa/ticket/3566 Design is at http://www.freeipa.org/page/V3/Managed_Read_permissions. As you can see from the TODOs it's not yet complete; I'll need a few more discussions

Re: [Freeipa-devel] Multiple CA certificates in LDAP, questions

2013-10-01 Thread Jan Cholasta
On 13.9.2013 11:05, Jan Cholasta wrote: On 13.9.2013 10:53, Martin Kosek wrote: On 09/13/2013 10:51 AM, Jan Cholasta wrote: On 5.9.2013 10:28, Jan Cholasta wrote: On 3.9.2013 18:16, Dmitri Pal wrote: On 09/02/2013 04:49 AM, Petr Spacek wrote: It reminds me problems with key-rotation for DNSS

Re: [Freeipa-devel] Multiple CA certificates in LDAP, questions

2013-10-01 Thread Stef Walter
On 01.10.2013 12:32, Jan Cholasta wrote: > On 13.9.2013 11:05, Jan Cholasta wrote: >> On 13.9.2013 10:53, Martin Kosek wrote: >>> On 09/13/2013 10:51 AM, Jan Cholasta wrote: On 5.9.2013 10:28, Jan Cholasta wrote: > On 3.9.2013 18:16, Dmitri Pal wrote: >> On 09/02/2013 04:49 AM, Petr Sp

Re: [Freeipa-devel] [PATCH 0192] Prevent deadlock in PTR record synchronization (versions <= 2.x)

2013-10-01 Thread Tomas Hozza
On 09/26/2013 03:11 PM, Petr Spacek wrote: > Hello, > > attached patch prevents/hides deadlock in plugin versions versions <= 2.x. > > I plan to push it to v2 branch. Branches v3 and newer shouldn't be > affected. > > https://fedorahosted.org/bind-dyndb-ldap/ticket/113 ACK. I tested the patch

Re: [Freeipa-devel] [DOC] Chapter 4 text

2013-10-01 Thread Petr Vobornik
On 09/27/2013 05:52 PM, Martin Basti wrote: On Wed, 2013-09-18 at 17:10 +0200, Martin Basti wrote: Patch fix examples in chapter 4, adds new examples, fix out of date information. NOTE: Patch doesn't cover part 4.3 Logging with web UI Updated patch NACK 1. Table 4.1. Configuration Areas

Re: [Freeipa-devel] [DOC] 0005 Updated chapter 4 - login into web UI

2013-10-01 Thread Petr Vobornik
On 09/30/2013 06:45 PM, Martin Basti wrote: On Fri, 2013-09-20 at 17:39 +0200, Petr Vobornik wrote: On 09/20/2013 04:06 PM, Martin Basti wrote: Logging into web UI and configuring web browser sections were outdated Thanks for the path. Here are my comments (some for existing issues): 1. Th

Re: [Freeipa-devel] PostgreSQL + freeipa

2013-10-01 Thread Alexander Bokovoy
On Tue, 01 Oct 2013, Gorbachev Ivan wrote: Thank you! And one more question, what does error mean - "GSSAPI continuation error: No credentials found with supported encryption types". This error appears when I try to log in from another computer within the domain IPA. You need to look into what e

Re: [Freeipa-devel] Multiple CA certificates in LDAP, questions

2013-10-01 Thread Simo Sorce
- Original Message - > On 13.9.2013 11:05, Jan Cholasta wrote: > > On 13.9.2013 10:53, Martin Kosek wrote: > >> On 09/13/2013 10:51 AM, Jan Cholasta wrote: > >>> On 5.9.2013 10:28, Jan Cholasta wrote: > On 3.9.2013 18:16, Dmitri Pal wrote: > > On 09/02/2013 04:49 AM, Petr Spacek wr

Re: [Freeipa-devel] [PATCHES] 0289-0302 Managed Read permissions

2013-10-01 Thread Simo Sorce
- Original Message - > On 10/01/2013 10:56 AM, Petr Viktorin wrote: > > Hello, > > > > These patches implement the framework for > > https://fedorahosted.org/freeipa/ticket/3566 > > > > Design is at http://www.freeipa.org/page/V3/Managed_Read_permissions. > > As you can see from the TODOs

Re: [Freeipa-devel] Multiple CA certificates in LDAP, questions

2013-10-01 Thread Stef Walter
On 01.10.2013 21:57, Simo Sorce wrote: > - Original Message - >> On 13.9.2013 11:05, Jan Cholasta wrote: >>> On 13.9.2013 10:53, Martin Kosek wrote: On 09/13/2013 10:51 AM, Jan Cholasta wrote: > On 5.9.2013 10:28, Jan Cholasta wrote: >> On 3.9.2013 18:16, Dmitri Pal wrote:

Re: [Freeipa-devel] Multiple CA certificates in LDAP, questions

2013-10-01 Thread Rob Crittenden
Simo Sorce wrote: - Original Message - On 13.9.2013 11:05, Jan Cholasta wrote: On 13.9.2013 10:53, Martin Kosek wrote: On 09/13/2013 10:51 AM, Jan Cholasta wrote: On 5.9.2013 10:28, Jan Cholasta wrote: On 3.9.2013 18:16, Dmitri Pal wrote: On 09/02/2013 04:49 AM, Petr Spacek wrote:

Re: [Freeipa-devel] [PATCH 0017] Add OTP support to ipalib CLI

2013-10-01 Thread Nathaniel McCallum
On Thu, 2013-09-05 at 12:19 +0200, Petr Viktorin wrote: > On 09/05/2013 06:38 AM, Nathaniel McCallum wrote: > > 3. I had to make the 'id' option optional to make the uuid > > autogeneration work in otp-add. However, this has the side-effect that > > 'id' is now optional in all the other commands. T