Re: [Freeipa-devel] [PATCH] 11 - re-enable uninstall option in ipa-kra-install

2014-09-15 Thread Petr Viktorin
On 09/10/2014 01:34 PM, Petr Viktorin wrote: On 09/02/2014 05:05 AM, Ade Lee wrote: Re-enable uninstall feature for ipa-kra-install The underlying Dogtag issue (Dogtag ticket 1113) has been fixed. We can therefore re-enable the uninstall option for ipa-kra-install. Also, fixes

Re: [Freeipa-devel] Announcing FreeIPA 4.0.3

2014-09-15 Thread Nathaniel McCallum
FYI, for any Fedora testers out there, we have updated to 4.0.3 in Fedora 21 in part because it substantially reduces the size of the install media for the upcoming Alpha release. If you'd like to test and provide feedback on the packages, the link is here:

Re: [Freeipa-devel] [PATCHES 0114-0115, 0120-0121] DNS: allow to add root zone '.'

2014-09-15 Thread Petr Spacek
On 12.9.2014 15:19, Martin Basti wrote: On 03/09/14 12:45, Martin Basti wrote: On 03/09/14 12:27, Martin Kosek wrote: On 09/02/2014 05:46 PM, Petr Spacek wrote: On 25.8.2014 14:52, Martin Basti wrote: Patches attached. Ticket: https://fedorahosted.org/freeipa/ticket/4149 There is a bug in

Re: [Freeipa-devel] [PATCHES 0114-0115, 0120-0121] DNS: allow to add root zone '.'

2014-09-15 Thread Martin Basti
On 15/09/14 17:10, Petr Spacek wrote: On 12.9.2014 15:19, Martin Basti wrote: On 03/09/14 12:45, Martin Basti wrote: On 03/09/14 12:27, Martin Kosek wrote: On 09/02/2014 05:46 PM, Petr Spacek wrote: On 25.8.2014 14:52, Martin Basti wrote: Patches attached. Ticket:

Re: [Freeipa-devel] Announcing FreeIPA 4.0.3

2014-09-15 Thread Petr Viktorin
On 09/15/2014 04:45 PM, Nathaniel McCallum wrote: FYI, for any Fedora testers out there, we have updated to 4.0.3 in Fedora 21 in part because it substantially reduces the size of the install media for the upcoming Alpha release. If you'd like to test and provide feedback on the packages, the

Re: [Freeipa-devel] Announcing FreeIPA 4.0.3

2014-09-15 Thread Nathaniel McCallum
On Mon, 2014-09-15 at 17:26 +0200, Petr Viktorin wrote: On 09/15/2014 04:45 PM, Nathaniel McCallum wrote: FYI, for any Fedora testers out there, we have updated to 4.0.3 in Fedora 21 in part because it substantially reduces the size of the install media for the upcoming Alpha release. If

Re: [Freeipa-devel] Announcing FreeIPA 4.0.3

2014-09-15 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/15/2014 12:16 PM, Nathaniel McCallum wrote: On Mon, 2014-09-15 at 17:26 +0200, Petr Viktorin wrote: On 09/15/2014 04:45 PM, Nathaniel McCallum wrote: FYI, for any Fedora testers out there, we have updated to 4.0.3 in Fedora 21 in part

Re: [Freeipa-devel] [PATCHES 0114-0115, 0120-0121] DNS: allow to add root zone '.'

2014-09-15 Thread Martin Kosek
On 09/15/2014 05:16 PM, Martin Basti wrote: On 15/09/14 17:10, Petr Spacek wrote: On 12.9.2014 15:19, Martin Basti wrote: On 03/09/14 12:45, Martin Basti wrote: On 03/09/14 12:27, Martin Kosek wrote: On 09/02/2014 05:46 PM, Petr Spacek wrote: On 25.8.2014 14:52, Martin Basti wrote: Patches

Re: [Freeipa-devel] Announcing FreeIPA 4.0.3

2014-09-15 Thread Nathaniel McCallum
On Mon, 2014-09-15 at 14:29 -0400, Stephen Gallagher wrote: On 09/15/2014 12:16 PM, Nathaniel McCallum wrote: On Mon, 2014-09-15 at 17:26 +0200, Petr Viktorin wrote: On 09/15/2014 04:45 PM, Nathaniel McCallum wrote: FYI, for any Fedora testers out there, we have updated to 4.0.3 in Fedora

[Freeipa-devel] [PATCH 0064] Create ipa-otp-decrement 389DS plugin

2014-09-15 Thread Nathaniel McCallum
This plugin ensures that all counter/watermark operations are atomic and never decrement. Also, deletion is not permitted. https://fedorahosted.org/freeipa/ticket/4494 From 9256d83755bb9a19eae98a248eb0a33a4fecd089 Mon Sep 17 00:00:00 2001 From: Nathaniel McCallum npmccal...@redhat.com Date: Wed,

Re: [Freeipa-devel] [PATCH 0062] Use delete/add for OTP counter/watermark updates

2014-09-15 Thread Nathaniel McCallum
On Thu, 2014-08-28 at 22:54 -0400, Nathaniel McCallum wrote: This prevents any local attempt at rapid token code replay. If two token codes hit the system at roughly the same moment, only the first write will succeed. All subsequent authentications will fail. This obviates the need for an

Re: [Freeipa-devel] Announcing FreeIPA 4.0.3

2014-09-15 Thread Martin Kosek
On 09/15/2014 09:04 PM, Nathaniel McCallum wrote: On Mon, 2014-09-15 at 14:29 -0400, Stephen Gallagher wrote: On 09/15/2014 12:16 PM, Nathaniel McCallum wrote: On Mon, 2014-09-15 at 17:26 +0200, Petr Viktorin wrote: On 09/15/2014 04:45 PM, Nathaniel McCallum wrote: FYI, for any Fedora