Re: [Freeipa-devel] [PATCH] 767-770 webui: hide applied to hosts tab for Default Trust View

2014-10-20 Thread Alexander Bokovoy
On Mon, 20 Oct 2014, Endi Sukma Dewata wrote: On 10/17/2014 4:55 PM, Petr Vobornik wrote: On 17.10.2014 22:51, Endi Sukma Dewata wrote: On 10/10/2014 6:44 AM, Petr Vobornik wrote: Web UI part of: https://fedorahosted.org/freeipa/ticket/4615 Patch 767 is a little refactoring needed for

Re: [Freeipa-devel] [PATCH] slapi-nis: normalize memberUid search filter term for AD users

2014-10-20 Thread Alexander Bokovoy
On Sun, 19 Oct 2014, Jakub Hrozek wrote: On Thu, Oct 09, 2014 at 02:01:16PM +0300, Alexander Bokovoy wrote: Hi, memberUid attribute has case-sensitive comparison defined but when we construct memberUid for AD users (coming through SSSD), they are normalized to lower case. Interestingly enough,

Re: [Freeipa-devel] [PATCH] 482 Update contributors

2014-10-20 Thread Martin Kosek
On 10/17/2014 09:18 PM, Gabe Alford wrote: Not sure I can do this, but ACK. Gabe On Wed, Sep 24, 2014 at 6:32 AM, Martin Kosek mko...@redhat.com wrote: Add missing developers contributing to project git. Cancel Past and Occcasional section and merge the people in the right categories.

Re: [Freeipa-devel] Dogtag 10.2.0 is now in Debian

2014-10-20 Thread Martin Kosek
On 10/18/2014 05:42 PM, Timo Aaltonen wrote: On 18.10.2014 18:39, Timo Aaltonen wrote: Hi! I'm happy to announce that Dogtag (version 10.2.0) has finally entered Debian unstable repository this week. Assuming there won't be any nasty surprises, the next stable release (Jessie) will

Re: [Freeipa-devel] [PATCH] 764 webui: management of keytab permissions

2014-10-20 Thread Petr Vobornik
On 17.10.2014 19:54, Endi Sukma Dewata wrote: On 10/17/2014 8:36 AM, Petr Vobornik wrote: Server part has been pushed. Version which matches its API attached. ACK. Pushed to: master: d8f05d88414217c57aba0abbd43d1623fba477f8 ipa-4-1: 905238fbeef3730e9db5fbea540e4d0b416f52e5 -- Petr Vobornik

Re: [Freeipa-devel] [PATCH 0064] Create ipa-otp-decrement 389DS plugin

2014-10-20 Thread Martin Kosek
On 10/17/2014 07:22 PM, Nathaniel McCallum wrote: On Fri, 2014-10-17 at 12:05 +0200, Martin Kosek wrote: On 10/16/2014 11:53 PM, Nathaniel McCallum wrote: On Thu, 2014-10-16 at 21:02 +0200, Martin Kosek wrote: On 10/15/2014 09:22 AM, Martin Kosek wrote: On 10/14/2014 09:01 PM, Nathaniel

Re: [Freeipa-devel] [PATCH 0073] Configure IPA OTP Last Token plugin on upgrade

2014-10-20 Thread Martin Kosek
On 10/17/2014 07:18 PM, Nathaniel McCallum wrote: While working on the OTP Counter plugin I realized that the OTP Last Token plugin never gets configured during upgrades. This patch fixes this problem. Good catch! Works fine, ACK. Pushed to: master: 68825e7ac6e074ee62bc3787a718ae78ef29a88e

Re: [Freeipa-devel] [PATCH] 131-132 extdom: add support for sss_nss_getorigbyname()

2014-10-20 Thread Sumit Bose
On Sun, Oct 19, 2014 at 10:04:29PM +0200, Jakub Hrozek wrote: On Fri, Oct 17, 2014 at 11:53:44AM +0200, Sumit Bose wrote: Hi, the first patch replaces sss_nss_getsidbyname() by sss_nss_getorigbyname() for the new version of the extdom interface. The new call returns more data about the

[Freeipa-devel] [PATCH 0001] migrate-ds: Fix to exclude attrs with uppercase characters from migration

2014-10-20 Thread Thorsten Scherf
From 6dd24dc6f08f01997bf3d7ccc06d77a7fd239e61 Mon Sep 17 00:00:00 2001 From: Thorsten Scherf tsch...@redhat.com Date: Mon, 20 Oct 2014 11:47:18 +0200 Subject: [PATCH] Fix entry_attr case to make migrate-ds work again Migration of a OpenLDAP based directory to FreeIPA with some objectclasses

Re: [Freeipa-devel] [PATCH] 765 webui: allow --force in dnszone-mod and dnsrecord-add

2014-10-20 Thread Petr Vobornik
On 17.10.2014 21:03, Endi Sukma Dewata wrote: On 10/3/2014 11:48 AM, Petr Vobornik wrote: Allow to use --force when changing authoritative nameserver address in DNS zone. Same for dnsrecord-add for NS record. https://fedorahosted.org/freeipa/ticket/4573 ACK, just some minor issues: Pushed

Re: [Freeipa-devel] [PATCH] 767-770 webui: hide applied to hosts tab for Default Trust View

2014-10-20 Thread Tomas Babej
On 10/20/2014 08:09 AM, Alexander Bokovoy wrote: On Mon, 20 Oct 2014, Endi Sukma Dewata wrote: On 10/17/2014 4:55 PM, Petr Vobornik wrote: On 17.10.2014 22:51, Endi Sukma Dewata wrote: On 10/10/2014 6:44 AM, Petr Vobornik wrote: Web UI part of: https://fedorahosted.org/freeipa/ticket/4615

Re: [Freeipa-devel] [PATCH] 767-770 webui: hide applied to hosts tab for Default Trust View

2014-10-20 Thread Petr Vobornik
On 20.10.2014 07:51, Endi Sukma Dewata wrote: On 10/17/2014 4:55 PM, Petr Vobornik wrote: On 17.10.2014 22:51, Endi Sukma Dewata wrote: On 10/10/2014 6:44 AM, Petr Vobornik wrote: Web UI part of: https://fedorahosted.org/freeipa/ticket/4615 2. The description field in the Settings page

Re: [Freeipa-devel] [PATCH] 771 webui: do not offer ipa users to Default Trust View

2014-10-20 Thread Petr Vobornik
On 20.10.2014 07:51, Endi Sukma Dewata wrote: On 10/19/2014 8:22 AM, Petr Vobornik wrote: On 17.10.2014 22:51, Endi Sukma Dewata wrote: On 10/10/2014 6:45 AM, Petr Vobornik wrote: https://fedorahosted.org/freeipa/ticket/4616 This patch does not apply. Does it depend on another patch?

Re: [Freeipa-devel] [PATCH] 767-770 webui: hide applied to hosts tab for Default Trust View

2014-10-20 Thread Alexander Bokovoy
On Mon, 20 Oct 2014, Tomas Babej wrote: On 10/20/2014 08:09 AM, Alexander Bokovoy wrote: On Mon, 20 Oct 2014, Endi Sukma Dewata wrote: On 10/17/2014 4:55 PM, Petr Vobornik wrote: On 17.10.2014 22:51, Endi Sukma Dewata wrote: On 10/10/2014 6:44 AM, Petr Vobornik wrote: Web UI part of:

Re: [Freeipa-devel] [PATCH] 767-770 webui: hide applied to hosts tab for Default Trust View

2014-10-20 Thread Tomas Babej
On 10/20/2014 12:30 PM, Alexander Bokovoy wrote: On Mon, 20 Oct 2014, Tomas Babej wrote: On 10/20/2014 08:09 AM, Alexander Bokovoy wrote: On Mon, 20 Oct 2014, Endi Sukma Dewata wrote: On 10/17/2014 4:55 PM, Petr Vobornik wrote: On 17.10.2014 22:51, Endi Sukma Dewata wrote: On 10/10/2014

Re: [Freeipa-devel] [PATCH] 767-770 webui: hide applied to hosts tab for Default Trust View

2014-10-20 Thread Alexander Bokovoy
On Mon, 20 Oct 2014, Tomas Babej wrote: What about filtering out 'Default Trust View' if no trusts are in place? This would be a bit problematic for the case when you had trusts and deleted them and currently have none of them but overrides are in place, but at least it would be consistent --

[Freeipa-devel] [PATCH 0284] Bump 4.2 development version to 4.1.99

2014-10-20 Thread Tomas Babej
Hi, we need to bump the version in master since 389-ds-base already conflicts with FreeIPA 4.0.3. -- Tomas Babej Associate Software Engineer | Red Hat | Identity Management RHCE | Brno Site | IRC: tbabej | freeipa.org From eb042b774050042e1972083b72d5826a83766464 Mon Sep 17 00:00:00 2001

Re: [Freeipa-devel] [PATCH 0284] Bump 4.2 development version to 4.1.99

2014-10-20 Thread Tomas Babej
On 10/20/2014 01:22 PM, Martin Kosek wrote: On 10/20/2014 01:17 PM, Tomas Babej wrote: Hi, we need to bump the version in master since 389-ds-base already conflicts with FreeIPA 4.0.3. Right. ACK for the master branch. Petr Spacek had a good idea of also including timestamp, but this is

[Freeipa-devel] [PATCH 0134] Remove ipaContainer, ipaOrderedContainer

2014-10-20 Thread Martin Basti
https://fedorahosted.org/freeipa/ticket/4646 Patch attached -- Martin Basti From 4f1014bc70090e0221d0f2e2e70fa4c05e83f550 Mon Sep 17 00:00:00 2001 From: Martin Basti mba...@redhat.com Date: Mon, 20 Oct 2014 13:41:48 +0200 Subject: [PATCH] Remove ipaContainer, ipaOrderedContainer objectclass

[Freeipa-devel] FreeIPA 4.1 release preparations

2014-10-20 Thread Martin Kosek
Gentlemen, We are getting very close to FreeIPA 4.1 release, so let us follow the usual drill :-) 1) Here is the WIP release notes, updates welcome: http://www.freeipa.org/page/Releases/4.1.0 2) I am looking for tickets /patches that are a must for 4.1 and that are not yet tracked in Trac

Re: [Freeipa-devel] [PATCH] 131-132 extdom: add support for sss_nss_getorigbyname()

2014-10-20 Thread Jakub Hrozek
On Mon, Oct 20, 2014 at 10:43:07AM +0200, Sumit Bose wrote: On Sun, Oct 19, 2014 at 10:04:29PM +0200, Jakub Hrozek wrote: On Fri, Oct 17, 2014 at 11:53:44AM +0200, Sumit Bose wrote: Hi, the first patch replaces sss_nss_getsidbyname() by sss_nss_getorigbyname() for the new version

Re: [Freeipa-devel] [PATCH] 131-132 extdom: add support for sss_nss_getorigbyname()

2014-10-20 Thread Martin Kosek
On 10/20/2014 03:30 PM, Jakub Hrozek wrote: On Mon, Oct 20, 2014 at 10:43:07AM +0200, Sumit Bose wrote: On Sun, Oct 19, 2014 at 10:04:29PM +0200, Jakub Hrozek wrote: On Fri, Oct 17, 2014 at 11:53:44AM +0200, Sumit Bose wrote: Hi, the first patch replaces sss_nss_getsidbyname() by

Re: [Freeipa-devel] FreeIPA 4.1 release preparations

2014-10-20 Thread Petr Vobornik
On 20.10.2014 13:59, Martin Kosek wrote: Gentlemen, We are getting very close to FreeIPA 4.1 release, so let us follow the usual drill :-) 1) Here is the WIP release notes, updates welcome: http://www.freeipa.org/page/Releases/4.1.0 2) I am looking for tickets /patches that are a must for 4.1

Re: [Freeipa-devel] FreeIPA 4.1 release preparations

2014-10-20 Thread Jan Pazdziora
On Mon, Oct 20, 2014 at 03:58:27PM +0200, Petr Vobornik wrote: The plan is to release 4.1 and then 4.0.4. Besides usual tarballs, 4.1 will go into Fedora rawhide, f21-updates-testing and mkosek/freeipa copr repo (to be usable on F20). And RHEL 7 / CentOS 7? -- Jan Pazdziora Principal

Re: [Freeipa-devel] FreeIPA 4.1 release preparations

2014-10-20 Thread Martin Kosek
On 10/20/2014 04:00 PM, Jan Pazdziora wrote: On Mon, Oct 20, 2014 at 03:58:27PM +0200, Petr Vobornik wrote: The plan is to release 4.1 and then 4.0.4. Besides usual tarballs, 4.1 will go into Fedora rawhide, f21-updates-testing and mkosek/freeipa copr repo (to be usable on F20). And RHEL 7

Re: [Freeipa-devel] [PATCH] 0159-0162 ID views in compat tree: ACIs, support for shell, gidNumber, and SSH keys

2014-10-20 Thread Tomas Babej
On 10/13/2014 12:14 PM, Petr Vobornik wrote: On 10.10.2014 17:56, Alexander Bokovoy wrote: On Fri, 10 Oct 2014, Petr Vobornik wrote: One more update for patch 0161, Petr noticed we need to call super post_callback() too. idoverrideuser_find callback causes internal error. I've attached new

Re: [Freeipa-devel] [PATCH 0134] Remove ipaContainer, ipaOrderedContainer

2014-10-20 Thread Martin Kosek
On 10/20/2014 01:48 PM, Martin Basti wrote: https://fedorahosted.org/freeipa/ticket/4646 Patch attached ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel Works for me, ACK.

Re: [Freeipa-devel] FreeIPA 4.1 release preparations

2014-10-20 Thread Martin Kosek
On 10/20/2014 01:59 PM, Martin Kosek wrote: Gentlemen, We are getting very close to FreeIPA 4.1 release, so let us follow the usual drill :-) 1) Here is the WIP release notes, updates welcome: http://www.freeipa.org/page/Releases/4.1.0 2) I am looking for tickets /patches that are a

Re: [Freeipa-devel] [PATCHES 0117, 0135-0149] DNSSEC support

2014-10-20 Thread Petr Spacek
On 20.10.2014 17:21, Martin Basti wrote: Hello! Hold your hats, DNSSEC patches are here. Martin^2, Petr^2 For testing you will need following package: http://koji.fedoraproject.org/koji/taskinfo?taskID=7915293 From me, functional self-ACK :-) -- Petr^2 Spacek

Re: [Freeipa-devel] [PATCHES 0117, 0135-0149] DNSSEC support

2014-10-20 Thread Jan Cholasta
Hi, Dne 20.10.2014 v 17:37 Petr Spacek napsal(a): On 20.10.2014 17:21, Martin Basti wrote: Hello! Hold your hats, DNSSEC patches are here. Martin^2, Petr^2 For testing you will need following package: http://koji.fedoraproject.org/koji/taskinfo?taskID=7915293 From me, functional self-ACK

[Freeipa-devel] [PATCH] 779 webui: do not show closed dialog

2014-10-20 Thread Petr Vobornik
Fixes issues when dialog is not removed from `IPA.opened_dialogs` registry when dialog.close() is called while the dialog is not shown, i.e., while other dialog is shown. Without it, the dialog is could be incorrectly displayed. New dialog's property `opened` handles whether dialog is

[Freeipa-devel] [PATCH] 780 webui: update combobox input on list click

2014-10-20 Thread Petr Vobornik
Change event of combobox is not triggered when there is only one value. Calling it's handler even for option's 'click' event makes sure that value of input gets always updated. -- Petr Vobornik From 144a808b2d7a0be0aa54439f14e855f09e9b3c57 Mon Sep 17 00:00:00 2001 From: Petr Vobornik

[Freeipa-devel] [PATCH, 4.1] 0166 updater: enable uid uniqueness plugin for posixAccount objects

2014-10-20 Thread Alexander Bokovoy
Hi! This patch is for ipa-4-1 branch to enable uniqueness plugin for uid attribute for entries with objectclass posixAccount. We don't have uid uniqueness enforced in FreeIPA 4.1 yet but for posixAccounts it worked due to our design of a flat tree: as uid attribute is part of the DN, renaming

Re: [Freeipa-devel] [PATCH] 779 webui: do not show closed dialog

2014-10-20 Thread Endi Sukma Dewata
On 10/20/2014 12:22 PM, Petr Vobornik wrote: Fixes issues when dialog is not removed from `IPA.opened_dialogs` registry when dialog.close() is called while the dialog is not shown, i.e., while other dialog is shown. Without it, the dialog is could be incorrectly displayed. New dialog's property