[Freeipa-devel] [PATCH] 383 Check subject name encoding in ipa-cacert-manage renew

Hi, the attached patch fixes . Honza -- Jan Cholasta >From d1d323fa046a9aabed08571c2be2d91a02e866e0 Mon Sep 17 00:00:00 2001 From: Jan Cholasta Date: Thu, 4 Dec 2014 08:15:46 + Subject: [PATCH] Check subject name encoding in ipa-cacert-manage r

Re: [Freeipa-devel] [PATCH 3] ipa-client-install shouldn't be eager in specifying zone when doing nsupdate

On Wed, Dec 03, 2014 at 05:16:23PM +0100, Martin Basti wrote: > On 02/12/14 13:00, Jan Pazdziora wrote: > >Hello, > > > >presumably explicitly specifying zone is not needed and can be > >harmful. > > > This should be fixed in template for uploading SSHFP keys as well. > > I have zone bububu.test.

Re: [Freeipa-devel] [PATCH 3] ipa-client-install shouldn't be eager in specifying zone when doing nsupdate

On 04/12/14 10:03, Jan Pazdziora wrote: On Wed, Dec 03, 2014 at 05:16:23PM +0100, Martin Basti wrote: On 02/12/14 13:00, Jan Pazdziora wrote: Hello, presumably explicitly specifying zone is not needed and can be harmful. This should be fixed in template for uploading SSHFP keys as well. I h

Re: [Freeipa-devel] ds-migrate feature enhancements

On 11/26/2014 11:52 AM, Martin Kosek wrote: > On 11/24/2014 11:24 PM, Alan Evans wrote: >> I am in the midst of preparing for a migration from OpenLDAP to FreeIPA. >> ds-migrate wasn't going to fill all of my needs so I thought I would use it >> for most and then make up some LDIF's and massage the

Re: [Freeipa-devel] [PATCH 0036] Add missing python files to Makefile

Thanks for the assistance Lukas! I have an updated patch attached. Thanks, Gabe On Wed, Dec 3, 2014 at 9:30 AM, Lukas Slebodnik wrote: > On (02/12/14 21:13), Gabe Alford wrote: > >This patch removes the changelog and Makefile.am for ipaclient as well. > > > >Thanks, > > > >Gabe > > > >On Mon,

[Freeipa-devel] topology management question

hi, I just have another (hopefully this will end soon) issue I want to get your input. (please read to teh end first) To recapture the conditions: - the topology plugin manages the connections between servers as segments in the shared tree - it is authoritative for managed servers, eg it con

Re: [Freeipa-devel] [PATCH 0074] Make token window sizes configurable

On 2.12.2014 20:57, Nathaniel McCallum wrote: I'm little confused with a state of reviews. Thierry were some of the patches ACKed in different threads or are they under review (I'm not reviewing DS plugin parts)? Patches 0001, 0002, 0003 are ACKed by Thierry, but not merged. They can and shoul

[Freeipa-devel] [PATCH 0174] Show SSHFP record in CLI if contains space in fingerprint part

SSHFP records added by nsupdate contains space in fingerprint part, this space prevent framework to show record. Fixes https://fedorahosted.org/freeipa/ticket/4789 https://fedorahosted.org/freeipa/ticket/4790 Patch attached. -- Martin Basti From 37fa4ddcd331807067f88142e43edddc1012ce52 Mon Se

Re: [Freeipa-devel] [PATCH 0289] hosts: Display assigned ID view by default in host-find and show

On 12/02/2014 05:23 PM, Jan Cholasta wrote: > Dne 2.12.2014 v 17:01 Tomas Babej napsal(a): >> >> On 12/02/2014 04:14 PM, Jan Cholasta wrote: >>> Hi, >>> >>> Dne 2.12.2014 v 15:43 Tomas Babej napsal(a): Hi, Makes ipaassignedidview a default attribute and takes care about the con

[Freeipa-devel] [PATCH 0315] Support BIND 9.10

Hello, Support BIND 9.10. https://fedorahosted.org/bind-dyndb-ldap/ticket/139 This patch definitely needs more testing but ...: - It compiles with BIND 9.9 and BIND 9.10. - It seems that it is able to load master and forward zones. - Basic dynamic updates work. I did not test other features ye

Re: [Freeipa-devel] [PATCH 0074] Make token window sizes configurable

On Thu, 2014-12-04 at 14:56 +0100, Petr Vobornik wrote: > On 2.12.2014 20:57, Nathaniel McCallum wrote: > > The attached patches I think have a much better overall aesthetic. Now > > patch 0004 introduces only two new commands: > > * otpconfig-mod > > * otpconfig-show > > > > Under the covers, a si

Re: [Freeipa-devel] [PATCH 0019] Prefer TCP connections to UDP in krb5 clients

On Tue, 2014-12-02 at 11:55 -0500, Nathaniel McCallum wrote: > On Tue, 2014-12-02 at 17:51 +0100, Martin Kosek wrote: > > On 12/02/2014 05:49 PM, Nathaniel McCallum wrote: > > > On Tue, 2014-12-02 at 17:48 +0100, Martin Kosek wrote: > > >> On 12/02/2014 05:36 PM, Simo Sorce wrote: > > >>> On Tue, 0

Re: [Freeipa-devel] [PATCH 0080] Expose the disabled User Auth Type

On Wed, 2014-12-03 at 17:18 +0100, Petr Vobornik wrote: > On 13.11.2014 18:04, Nathaniel McCallum wrote: > > Additionally, fix a small bug in ipa-kdb so that the disabled User > > Auth Type is properly handled. > > > > https://fedorahosted.org/freeipa/ticket/4720 > > > > The patch itself looks goo

Re: [Freeipa-devel] [PATCH 0080] Expose the disabled User Auth Type

On 12/04/2014 07:25 PM, Nathaniel McCallum wrote: On Wed, 2014-12-03 at 17:18 +0100, Petr Vobornik wrote: On 13.11.2014 18:04, Nathaniel McCallum wrote: Additionally, fix a small bug in ipa-kdb so that the disabled User Auth Type is properly handled. https://fedorahosted.org/freeipa/ticket/472

Re: [Freeipa-devel] ds-migrate feature enhancements

Hello Martin, I have spent some time looking into how to address https://fedorahosted.org/freeipa/ticket/3709. I thought I would look at --setattr --addattr from user-add and others to see if I could reuse code for --user-attr-default. At least for parsing the commandline arguments anyway. It d