On 04/14/2014 07:18 PM, Simo Sorce wrote:
> On Mon, 2014-04-14 at 18:54 +0200, Petr Viktorin wrote:
>> Hello,
>>
>> The first patch adds default read permissions to krbtpolicy. Since the
>> plugin manages entries in two trees, there are two permissions. Since
>> two permissions are needed to cove
On 04/15/2014 09:38 AM, Martin Kosek wrote:
> On 04/14/2014 07:18 PM, Simo Sorce wrote:
>> On Mon, 2014-04-14 at 18:54 +0200, Petr Viktorin wrote:
>>> Hello,
>>>
>>> The first patch adds default read permissions to krbtpolicy. Since the
>>> plugin manages entries in two trees, there are two permis
On 04/14/2014 09:41 PM, Petr Viktorin wrote:
> It turns out the test failure caused by the realmdomains ACI was not a single
> occurrence. Another one was caused by Read Group Password Policy.
>
/me sighs.
This fixes the tests, ACK.
Pushed to master: 3deb76cf17a79a0736aa555f550415e6d9f2ed08
Ma
On 04/14/2014 10:00 PM, Petr Viktorin wrote:
> Read access is given to all authenticated users.
>
This only works when I added cn and objectclass attributes to the ACI. Is this
expected?
It would work when we add nsContainer ACI for cn=etc though as it has the
nsContainer objectlass.
Martin
_
OTP Token add failed because of invalid function call. qr_widget doesn't
contain `on_value_changed` method since it inherits from `IPA.widget`
and not from `IPA.input_widget`.
Emitting the event was preserved for future possible usage.
https://fedorahosted.org/freeipa/ticket/4306
--
Petr Vobor
On 04/15/2014 09:53 AM, Martin Kosek wrote:
On 04/14/2014 10:00 PM, Petr Viktorin wrote:
Read access is given to all authenticated users.
This only works when I added cn and objectclass attributes to the ACI. Is this
expected?
It would work when we add nsContainer ACI for cn=etc though as i
On 04/15/2014 10:37 AM, Petr Viktorin wrote:
> On 04/15/2014 09:53 AM, Martin Kosek wrote:
>> On 04/14/2014 10:00 PM, Petr Viktorin wrote:
>>> Read access is given to all authenticated users.
>>>
>>
>> This only works when I added cn and objectclass attributes to the ACI. Is
>> this
>> expected?
Hi,
I have started to write a design page for 'Migrating existing
environments to Trust'
http://www.freeipa.org/page/V3/Migrating_existing_environments_to_Trust
It shall cover https://fedorahosted.org/freeipa/ticket/3318 and
https://fedorahosted.org/freeipa/ticket/3979 .
I came across several que
On Tue, 15 Apr 2014 09:39:54 +0200
Petr Vobornik wrote:
> On 11.4.2014 14:31, Misnyovszki Adam wrote:
> > On Fri, 28 Mar 2014 14:04:13 +0100
> > Petr Vobornik wrote:
> >
> >> Attached patches replace IPA.unauthorized dialog with new Login
> >> Screen.
> >>
> >> To make it happen, a support for s
Hi,
this patch fixes FreeIPA Jenkins CI test
freeipa-integration-forced_client_reenrollment-f19, by turning sshfp
records into a set, and sorting them before assertion.
https://fedorahosted.org/freeipa/ticket/4298
Greets
Adam>From 552620f7924aff6b083c867af6101ebb49f8fef0 Mon Sep 17 00:00:00 2001
On 15.4.2014 12:05, Misnyovszki Adam wrote:
On Tue, 15 Apr 2014 09:39:54 +0200
Petr Vobornik wrote:
On 11.4.2014 14:31, Misnyovszki Adam wrote:
On Fri, 28 Mar 2014 14:04:13 +0100
Petr Vobornik wrote:
Attached patches replace IPA.unauthorized dialog with new Login
Screen.
To make it happen
On 04/15/2014 12:41 PM, Misnyovszki Adam wrote:
Hi,
this patch fixes FreeIPA Jenkins CI test
freeipa-integration-forced_client_reenrollment-f19, by turning sshfp
records into a set, and sorting them before assertion.
https://fedorahosted.org/freeipa/ticket/4298
Greets
Adam
The list.sort() met
On 04/15/2014 09:43 AM, Martin Kosek wrote:
On 04/15/2014 09:38 AM, Martin Kosek wrote:
On 04/14/2014 07:18 PM, Simo Sorce wrote:
On Mon, 2014-04-14 at 18:54 +0200, Petr Viktorin wrote:
Hello,
The first patch adds default read permissions to krbtpolicy. Since the
plugin manages entries in two
Read access to both rules and definitions is given to a new privilege,
'Automember Readers', as well as the existing 'Automember Task
Administrator'.
--
PetrĀ³
From d5d9ca67a3ac3219807efddad4670c71d54f5501 Mon Sep 17 00:00:00 2001
From: Petr Viktorin
Date: Wed, 26 Mar 2014 17:11:23 +0100
Subje
On Tue, 2014-04-15 at 13:13 +0200, Petr Viktorin wrote:
> On 04/15/2014 09:43 AM, Martin Kosek wrote:
> > On 04/15/2014 09:38 AM, Martin Kosek wrote:
> >> On 04/14/2014 07:18 PM, Simo Sorce wrote:
> >>> On Mon, 2014-04-14 at 18:54 +0200, Petr Viktorin wrote:
> Hello,
>
> The first pa
On Tue, 15 Apr 2014 09:54:22 +0200
Petr Vobornik wrote:
> OTP Token add failed because of invalid function call. qr_widget
> doesn't contain `on_value_changed` method since it inherits from
> `IPA.widget` and not from `IPA.input_widget`.
>
> Emitting the event was preserved for future possible u
On 04/15/2014 03:16 PM, Simo Sorce wrote:
> On Tue, 2014-04-15 at 13:13 +0200, Petr Viktorin wrote:
>> On 04/15/2014 09:43 AM, Martin Kosek wrote:
>>> On 04/15/2014 09:38 AM, Martin Kosek wrote:
On 04/14/2014 07:18 PM, Simo Sorce wrote:
> On Mon, 2014-04-14 at 18:54 +0200, Petr Viktorin wr
Hello,
At Devconf, we decided what most of the default read permissions should
look like, but we did not get to user.
Here is a draft of 4 read permissions. Please comment.
Basic info (anonymous):
[top]
objectclass
[person]
cn, sn, description
[organizationalPerson]
title
[inetOrgP
On Tue, 2014-04-15 at 16:48 +0200, Martin Kosek wrote:
> On 04/15/2014 03:16 PM, Simo Sorce wrote:
> > On Tue, 2014-04-15 at 13:13 +0200, Petr Viktorin wrote:
> >> On 04/15/2014 09:43 AM, Martin Kosek wrote:
> >>> On 04/15/2014 09:38 AM, Martin Kosek wrote:
> On 04/14/2014 07:18 PM, Simo Sorce
On 04/15/2014 05:08 PM, Simo Sorce wrote:
> On Tue, 2014-04-15 at 16:48 +0200, Martin Kosek wrote:
>> On 04/15/2014 03:16 PM, Simo Sorce wrote:
>>> On Tue, 2014-04-15 at 13:13 +0200, Petr Viktorin wrote:
On 04/15/2014 09:43 AM, Martin Kosek wrote:
> On 04/15/2014 09:38 AM, Martin Kosek wro
On Tue, 15 Apr 2014 12:51:47 +0200
Petr Viktorin wrote:
> On 04/15/2014 12:41 PM, Misnyovszki Adam wrote:
> > Hi,
> > this patch fixes FreeIPA Jenkins CI test
> > freeipa-integration-forced_client_reenrollment-f19, by turning sshfp
> > records into a set, and sorting them before assertion.
> >
>
Ade Lee wrote:
Attached a new patch to address some of the concerns below, specifically
I created a new base class DogtagInstance, in which much of the common
CA/KRA code is placed. I'm sure we could go further in reducing
duplication, and I'm open to further suggestions and refinements.
I did
On 04/15/2014 05:10 PM, Martin Kosek wrote:
On 04/15/2014 05:08 PM, Simo Sorce wrote:
On Tue, 2014-04-15 at 16:48 +0200, Martin Kosek wrote:
On 04/15/2014 03:16 PM, Simo Sorce wrote:
On Tue, 2014-04-15 at 13:13 +0200, Petr Viktorin wrote:
On 04/15/2014 09:43 AM, Martin Kosek wrote:
On 04/15
On 04/15/2014 05:45 PM, Ludwig Krispenz wrote:
On 04/15/2014 05:10 PM, Martin Kosek wrote:
On 04/15/2014 05:08 PM, Simo Sorce wrote:
On Tue, 2014-04-15 at 16:48 +0200, Martin Kosek wrote:
On 04/15/2014 03:16 PM, Simo Sorce wrote:
On Tue, 2014-04-15 at 13:13 +0200, Petr Viktorin wrote:
On 0
Hello,
Fix crash in create_zone().
dns_zone_getmgr(zone) call in cleanup section was called even if zone
was NULL.
This patch should go to master, v4 and v3 branches where applicable.
You probably need to use debugger to reproduce this crash. I have encountered
it during work on new DNSSEC co
Attached is a patch that adds the script ipa-drm-install.
This script will be used to install a drm in any ipa server that
contains a Dogtag CA. Right now, it works for a master. I will add
logic in a subsequent patch to allow the installation on a replica using
the same script.
This patch is t
Hello,
The following patches update the Solaris documentation and add a proxy
agent/profile for Solaris.
- Solaris documentation update
https://fedorahosted.org/freeipa/ticket/3731
- Patch adds default Proxy Agent and default_secure profile through
20-nss_ldap.update when ipa-server-install is r
On 04/15/2014 06:10 PM, Ludwig Krispenz wrote:
On 04/15/2014 05:45 PM, Ludwig Krispenz wrote:
On 04/15/2014 05:10 PM, Martin Kosek wrote:
On 04/15/2014 05:08 PM, Simo Sorce wrote:
On Tue, 2014-04-15 at 16:48 +0200, Martin Kosek wrote:
On 04/15/2014 03:16 PM, Simo Sorce wrote:
On Tue, 2014-
On 04/15/2014 05:36 PM, Misnyovszki Adam wrote:
On Tue, 15 Apr 2014 12:51:47 +0200
Petr Viktorin wrote:
On 04/15/2014 12:41 PM, Misnyovszki Adam wrote:
Hi,
this patch fixes FreeIPA Jenkins CI test
freeipa-integration-forced_client_reenrollment-f19, by turning sshfp
records into a set, and sor
29 matches
Mail list logo