Re: [Freeipa-devel] [PATCHES] 241-253 CA certificate renewal

2014-04-25 Thread Petr Viktorin
On 04/24/2014 11:16 PM, Rob Crittenden wrote: Jan Cholasta wrote: On 10.4.2014 22:06, Rob Crittenden wrote: Some in-line, a whole ton of data appended to end. Jan Cholasta wrote: On 7.4.2014 20:09, Rob Crittenden wrote: Rob Crittenden wrote: [...] $ ipa-cacert-manage -v renew ipa.ipaserver

Re: [Freeipa-devel] First beta release of ConnID FreeIPA connector

2014-04-25 Thread Martin Kosek
On 04/24/2014 11:21 PM, Dmitri Pal wrote: > On 04/24/2014 09:58 AM, Massimiliano Perrone (tirasa.net) wrote: >> Hi guys, >> this mail only to share with you that ConnID FreeIPA connector (beta version) >> is released. >> >> You can find more informations here [1] >> >> Massimiliano >> >> [1] http:/

Re: [Freeipa-devel] [PATCHES] 241-253 CA certificate renewal

2014-04-25 Thread Jan Cholasta
On 24.4.2014 23:16, Rob Crittenden wrote: Jan Cholasta wrote: On 10.4.2014 22:06, Rob Crittenden wrote: Some in-line, a whole ton of data appended to end. Jan Cholasta wrote: On 7.4.2014 20:09, Rob Crittenden wrote: Rob Crittenden wrote: 247 We've been burned by hardcoded timeouts in the

Re: [Freeipa-devel] [PATCH 0137] ipalib: Add DateTime parameter

2014-04-25 Thread Jan Cholasta
On 22.4.2014 13:32, Tomas Babej wrote: Thank you for the suggestions. Updated, rebased patch is attached. This API.txt change from the next patch belongs in this patch: +capability: datetime_values 2.84 I think you should use the LDAP_GENERALIZED_TIME_FORMAT constant here: +accepted_fo

Re: [Freeipa-devel] [PATCH 0138] ipalib: Expose krbPrincipalExpiration in CLI

2014-04-25 Thread Jan Cholasta
On 22.4.2014 13:34, Tomas Babej wrote: Updated, rebased patch attached. This API.txt change belongs in the previous patch: +capability: datetime_values 2.84 -- Jan Cholasta ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat

[Freeipa-devel] [PATCH] 0538 aci-update: Trim the admin write blacklist

2014-04-25 Thread Petr Viktorin
On 04/24/2014 05:15 PM, Simo Sorce wrote: On Thu, 2014-04-24 at 16:47 +0200, Martin Kosek wrote: On 04/24/2014 03:42 PM, Simo Sorce wrote: On Thu, 2014-04-24 at 15:18 +0200, Martin Kosek wrote: On 04/24/2014 02:28 PM, Simo Sorce wrote: On Thu, 2014-04-24 at 14:17 +0200, Martin Kosek wrote: O

[Freeipa-devel] [PATCH] 16-17 Attribute box in permission UI is too small

2014-04-25 Thread Misnyovszki Adam
Hi, first patch redesigns attribute box in permission forms, making it a bigger scrollable checkboxlist. Second one adds a filter field to it for better user experience, if the checkboxlist would be too large. Also, webui unit tests for rbac are updated to work properly with the new widget. Thanks

Re: [Freeipa-devel] [PATCH] 0538 aci-update: Trim the admin write blacklist

2014-04-25 Thread Martin Kosek
On 04/25/2014 01:01 PM, Petr Viktorin wrote: > On 04/24/2014 05:15 PM, Simo Sorce wrote: >> On Thu, 2014-04-24 at 16:47 +0200, Martin Kosek wrote: >>> On 04/24/2014 03:42 PM, Simo Sorce wrote: On Thu, 2014-04-24 at 15:18 +0200, Martin Kosek wrote: > On 04/24/2014 02:28 PM, Simo Sorce wrote

Re: [Freeipa-devel] [PATCH] 0529 Add managed read permission to trusts

2014-04-25 Thread Petr Viktorin
On 04/23/2014 02:46 PM, Martin Kosek wrote: On 04/22/2014 01:38 PM, Petr Viktorin wrote: On 04/16/2014 05:56 PM, Simo Sorce wrote: On Wed, 2014-04-16 at 18:34 +0300, Alexander Bokovoy wrote: On Wed, 16 Apr 2014, Martin Kosek wrote: In general I am not sure all authenticated users need access

Re: [Freeipa-devel] [PATCH] 0537-0539 aci-update: Trim the admin write blacklist & Add ACI for read-only admin attributes

2014-04-25 Thread Petr Viktorin
On 04/25/2014 01:08 PM, Martin Kosek wrote: On 04/25/2014 01:01 PM, Petr Viktorin wrote: On 04/24/2014 05:15 PM, Simo Sorce wrote: On Thu, 2014-04-24 at 16:47 +0200, Martin Kosek wrote: On 04/24/2014 03:42 PM, Simo Sorce wrote: On Thu, 2014-04-24 at 15:18 +0200, Martin Kosek wrote: On 04/24/

Re: [Freeipa-devel] [PATCH] 0537-0539 aci-update: Trim the admin write blacklist & Add ACI for read-only admin attributes

2014-04-25 Thread Martin Kosek
On 04/25/2014 01:29 PM, Petr Viktorin wrote: > On 04/25/2014 01:08 PM, Martin Kosek wrote: >> On 04/25/2014 01:01 PM, Petr Viktorin wrote: >>> On 04/24/2014 05:15 PM, Simo Sorce wrote: On Thu, 2014-04-24 at 16:47 +0200, Martin Kosek wrote: > On 04/24/2014 03:42 PM, Simo Sorce wrote: >>

[Freeipa-devel] [PATCH] webui: regression - enable fields on idrange type change (add)

2014-04-25 Thread Petr Vobornik
ID range adder dialog was not properly addressed in field binding refactoring. The usage of reset caused some weird loops. https://fedorahosted.org/freeipa/ticket/4326 -- Petr Vobornik From 9e9e72dc795156811662b5130ad58084a898974c Mon Sep 17 00:00:00 2001 From: Petr Vobornik Date: Thu, 24 Apr

[Freeipa-devel] [PATCH] 587 webui-ci: adjust id range tests to new validator

2014-04-25 Thread Petr Vobornik
SSIA -- Petr Vobornik From 66410a435d641a90da7bc0f525d5e73e3a5c549d Mon Sep 17 00:00:00 2001 From: Petr Vobornik Date: Thu, 24 Apr 2014 17:24:59 +0200 Subject: [PATCH] webui-ci: adjust id range tests to new validator --- ipatests/test_webui/task_range.py | 33 +++--

Re: [Freeipa-devel] [PATCHES] 241-253 CA certificate renewal

2014-04-25 Thread Rob Crittenden
Petr Viktorin wrote: On 04/24/2014 11:16 PM, Rob Crittenden wrote: Jan Cholasta wrote: On 10.4.2014 22:06, Rob Crittenden wrote: Some in-line, a whole ton of data appended to end. Jan Cholasta wrote: On 7.4.2014 20:09, Rob Crittenden wrote: Rob Crittenden wrote: [...] $ ipa-cacert-manage

[Freeipa-devel] [PATCH] Stop ntpd before running ntpdate

2014-04-25 Thread Gabe Alford
Hello, Here is a patch for https://fedorahosted.org/freeipa/ticket/3735. It seemed better to try to stop ntpd before running ntpdate rather than not running ntpdate if ntpd was already running. I believe this patch only applies to the ipa-3-3 branch as ntpdate is not used anymore in the ma

[Freeipa-devel] [PATCH] 18 webui otptoken test data added

2014-04-25 Thread Misnyovszki Adam
Hi, this patch adds some static test data for the webui otptoken part. Adam>From a119f23cde594a0c9a4a2bf3cb91d259c5ce06b1 Mon Sep 17 00:00:00 2001 From: Adam Misnyovszki Date: Fri, 25 Apr 2014 16:33:11 +0200 Subject: [PATCH] webui OTP token test data added --- install/ui/test/data/otptoken_add.j

[Freeipa-devel] [PATCH] 588 webui: fix switching between multiple_choice_section choices

2014-04-25 Thread Petr Vobornik
- required indicators are not present for all sections except the last - validation has wrong color for the same sections There was only one layout for all choices. Layout should not be reused because `create` method will reset layout's rows therefore it worked properly only for the last choice.