Re: [Freeipa-devel] [PATCH 0037] Added /etc/krb5.conf.d/ to krb5.conf

2016-05-27 Thread Alexander Bokovoy
On Fri, 27 May 2016, Robbie Harwood wrote: Stanislav Laznicka writes: From 7a55f169181ab8647cd2d919f35c004b14d5bc7f Mon Sep 17 00:00:00 2001 From: Stanislav Laznicka Date: Fri, 27 May 2016 16:12:31 +0200 Subject: [PATCH] Added krb5.conf.d/ to

Re: [Freeipa-devel] [Testplan] Support of UPN for trusted domains

2016-05-27 Thread Sumit Bose
On Fri, May 27, 2016 at 09:57:37AM +0200, Lenka Doudova wrote: > Hi all, > > > here [1] is a draft of test plan for V4 RFE Support of UPN for trusted > domains. > > Please review this and let me know if there's something missing or wrong. Hi Lenka, thank you for the test plan. About the TBD,

Re: [Freeipa-devel] [Testplan] Support of UPN for trusted domains

2016-05-27 Thread Alexander Bokovoy
On Fri, 27 May 2016, Sumit Bose wrote: On Fri, May 27, 2016 at 09:57:37AM +0200, Lenka Doudova wrote: Hi all, here [1] is a draft of test plan for V4 RFE Support of UPN for trusted domains. Please review this and let me know if there's something missing or wrong. Hi Lenka, thank you for

Re: [Freeipa-devel] [WIP] Thin client

2016-05-27 Thread Petr Spacek
On 27.5.2016 09:26, Martin Basti wrote: > > > On 27.05.2016 07:49, Jan Cholasta wrote: >> On 26.5.2016 18:43, Martin Basti wrote: >>> >>> >>> On 26.05.2016 11:21, Martin Basti wrote: On 26.05.2016 07:15, Jan Cholasta wrote: > On 25.5.2016 18:17, Martin Basti wrote: >>

Re: [Freeipa-devel] [PATCH] bind-dyndb-ldap: hashsize() return type changed in libdns v164

2016-05-27 Thread Petr Spacek
On 27.5.2016 10:41, Tomas Hozza wrote: > Hello. > > Since bind version 9.10.4b1 (libdns version 164), the return type of > hashsize() has changed from unsigned int to size_t. Without this change > the plugin does not compile against bind 9.10.4b1 or newer on 64bit > architecture. > > I tested

[Freeipa-devel] [PATCH] 0003 batch command can be used to trigger internal errors on server

2016-05-27 Thread Florence Blanc-Renaud
Hi all, the following patch checks the format of parameters passed to a method called through the batch command. I picked the ConversionError for invalid parameters format but this choice can be discussed if you have better suggestions... Fixes: https://fedorahosted.org/freeipa/ticket/5810

[Freeipa-devel] [PATCH 0037] Added /etc/krb5.conf.d/ to krb5.conf

2016-05-27 Thread Stanislav Laznicka
https://fedorahosted.org/freeipa/ticket/5912 From 7a55f169181ab8647cd2d919f35c004b14d5bc7f Mon Sep 17 00:00:00 2001 From: Stanislav Laznicka Date: Fri, 27 May 2016 16:12:31 +0200 Subject: [PATCH] Added krb5.conf.d/ to included dirs in krb5.conf The include of

[Freeipa-devel] [PATCH 0036] Increased mod_wsgi socket-timeout

2016-05-27 Thread Stanislav Laznicka
https://fedorahosted.org/freeipa/ticket/5833 From e69514ade7bae97bb2bb0e541c080c727ff7056c Mon Sep 17 00:00:00 2001 From: Stanislav Laznicka Date: Fri, 27 May 2016 14:44:30 +0200 Subject: [PATCH] Increased mod_wsgi socket-timeout Longer-running CLI commands sometimes fail

[Freeipa-devel] [PATCH] 0002 Add the culprit line when a configuration file has an incorrect format

2016-05-27 Thread Florence Blanc-Renaud
Hi all, this patch adds information to the output of ipa-client-install when it fails due to invalid format in a configuration file: ipa-client-install failing with SyntaxError: Syntax Error: Unknown line format Fixes: https://fedorahosted.org/freeipa/ticket/5811 -- Florence Blanc-Renaud

[Freeipa-devel] [PATCH 0034] Added some attributes to the Modify Users permission

2016-05-27 Thread Stanislav Laznicka
https://fedorahosted.org/freeipa/ticket/5911 From f10e9b782bd92b86eb05ebd947d9799093a14091 Mon Sep 17 00:00:00 2001 From: Stanislav Laznicka Date: Fri, 27 May 2016 13:27:03 +0200 Subject: [PATCH] Added some attributes to Modify Users permission Added 'employeenumber',

[Freeipa-devel] [PATCH 35] Added pyusb dependency

2016-05-27 Thread Stanislav Laznicka
https://fedorahosted.org/freeipa/ticket/5886 From 38eda0f2a08b6bff65217d6c4517fffc1e1b0f86 Mon Sep 17 00:00:00 2001 From: Stanislav Laznicka Date: Fri, 27 May 2016 13:45:57 +0200 Subject: [PATCH] Added pyusb as a dependency https://fedorahosted.org/freeipa/ticket/5886 ---

Re: [Freeipa-devel] [PATCH 0123-132] DNS upgrade: change forwarding policy to "only" if private IPs are used

2016-05-27 Thread Petr Spacek
On 25.5.2016 12:50, Martin Basti wrote: > > > On 20.05.2016 12:19, Petr Spacek wrote: >> On 11.5.2016 12:08, Martin Basti wrote: >>> >>> On 03.05.2016 14:59, Petr Spacek wrote: Hello, DNS upgrade: change forwarding policy to "only" if private IPs are used.

Re: [Freeipa-devel] [PATCH 0110] DNS: Warn if forwarding policy conflicts with automatic empty zone

2016-05-27 Thread Petr Spacek
On 25.5.2016 12:30, Martin Basti wrote: > > > On 04.05.2016 10:43, Petr Spacek wrote: >> Hello, >> >> DNS: Warn if forwarding policy conflicts with automatic empty zones >> >> Forwarding policy "first" or "none" may conflicts with some automatic empty >> zones. Queries for zones specified by RFC

Re: [Freeipa-devel] [PATCH 0093] Enable service authentication indicator management

2016-05-27 Thread Nathaniel McCallum
On Fri, 2016-05-27 at 18:35 +0300, Alexander Bokovoy wrote: > On Fri, 27 May 2016, Nathaniel McCallum wrote: > > All core functionality for authentication indicators has already > > been > > merged. All that is left is the CLI and UI patches. Attached is the > > CLI > > patch. > > > > One

Re: [Freeipa-devel] [PATCH 0094] Migrate from #ifndef guards to #pragma once

2016-05-27 Thread Nathaniel McCallum
On Tue, 2016-05-24 at 12:25 -0400, Nathaniel McCallum wrote: > On Tue, 2016-05-24 at 11:01 -0400, Nathaniel McCallum wrote: > > On Tue, 2016-05-24 at 16:55 +0200, Martin Kosek wrote: > > > On 05/24/2016 04:29 PM, Nathaniel McCallum wrote: > > > > Using a pragma instead of guards is easier to

Re: [Freeipa-devel] [PATCH 0093] Enable service authentication indicator management

2016-05-27 Thread Nathaniel McCallum
Pavel, since we made the change here from a StrEnum to a Str, we need to update the UI patch accordingly. On Fri, 2016-05-27 at 11:55 -0400, Nathaniel McCallum wrote: > On Fri, 2016-05-27 at 18:35 +0300, Alexander Bokovoy wrote: > > On Fri, 27 May 2016, Nathaniel McCallum wrote: > > > All core

Re: [Freeipa-devel] [PATCH 0093] Enable service authentication indicator management

2016-05-27 Thread Alexander Bokovoy
On Fri, 27 May 2016, Nathaniel McCallum wrote: All core functionality for authentication indicators has already been merged. All that is left is the CLI and UI patches. Attached is the CLI patch. One outstanding question that I have is how to future-proof this patch. Right now, we want to only

Re: [Freeipa-devel] [PATCH] 0034: webui: Authentication indicators

2016-05-27 Thread Pavel Vomacka
On 05/12/2016 11:13 PM, Nathaniel McCallum wrote: On Wed, 2016-05-11 at 13:08 +0200, Pavel Vomacka wrote: Hi, the patch adds webui part for authentication indicators. Ticket: https://fedorahosted.org/freeipa/ticket/5872 The otp option displays as: OTP. The radius option displays as:

Re: [Freeipa-devel] [PATCH] 0034: webui: Authentication indicators

2016-05-27 Thread Nathaniel McCallum
On Fri, 2016-05-27 at 17:43 +0200, Pavel Vomacka wrote: > > On 05/12/2016 11:13 PM, Nathaniel McCallum wrote: > > On Wed, 2016-05-11 at 13:08 +0200, Pavel Vomacka wrote: > > > Hi, > > > > > > the patch adds webui part for authentication indicators. > > > > > > Ticket:

[Freeipa-devel] [PATCH 0095] Fix RADIUS capitalization

2016-05-27 Thread Nathaniel McCallum
RADIUS is an acryonym. This patch fixes its usage to match our capitalization of other acronyms, like OTP.From 33f10766a9793531984d3be3fb7ec12c8ab1cde0 Mon Sep 17 00:00:00 2001 From: Nathaniel McCallum Date: Fri, 27 May 2016 12:10:00 -0400 Subject: [PATCH] Fix RADIUS

Re: [Freeipa-devel] [PATCH 0146-0147] Server Roles: basic infrastructure

2016-05-27 Thread Martin Babinsky
On 05/19/2016 04:59 PM, Martin Babinsky wrote: Patch 0146 implements lower-lever infrastructure for querying server roles/attributes Patch 0147 are some basic tests slapped together for the `serverroles` backend to ensure that it works as expected. The new/modified CLI commands specified in

Re: [Freeipa-devel] [PATCH] 0034: webui: Authentication indicators

2016-05-27 Thread Pavel Vomacka
On 05/27/2016 05:44 PM, Nathaniel McCallum wrote: On Fri, 2016-05-27 at 17:43 +0200, Pavel Vomacka wrote: On 05/12/2016 11:13 PM, Nathaniel McCallum wrote: On Wed, 2016-05-11 at 13:08 +0200, Pavel Vomacka wrote: Hi, the patch adds webui part for authentication indicators. Ticket:

[Freeipa-devel] [PATCH 0093] Enable service authentication indicator management

2016-05-27 Thread Nathaniel McCallum
All core functionality for authentication indicators has already been merged. All that is left is the CLI and UI patches. Attached is the CLI patch. One outstanding question that I have is how to future-proof this patch. Right now, we want to only permit two possible values: otp and radius. So we

Re: [Freeipa-devel] [PATCH 0037] Added /etc/krb5.conf.d/ to krb5.conf

2016-05-27 Thread Robbie Harwood
Stanislav Laznicka writes: > From 7a55f169181ab8647cd2d919f35c004b14d5bc7f Mon Sep 17 00:00:00 2001 > From: Stanislav Laznicka > Date: Fri, 27 May 2016 16:12:31 +0200 > Subject: [PATCH] Added krb5.conf.d/ to included dirs in krb5.conf > > The include of

[Freeipa-devel] [Testplan] Support of UPN for trusted domains

2016-05-27 Thread Lenka Doudova
Hi all, here [1] is a draft of test plan for V4 RFE Support of UPN for trusted domains. Please review this and let me know if there's something missing or wrong. Thanks, Lenka [1] http://www.freeipa.org/page/V4/Support_of_UPN_for_trusted_domains/Test_Plan -- Manage your subscription

Re: [Freeipa-devel] [WIP] Thin client

2016-05-27 Thread Martin Basti
On 27.05.2016 07:49, Jan Cholasta wrote: On 26.5.2016 18:43, Martin Basti wrote: On 26.05.2016 11:21, Martin Basti wrote: On 26.05.2016 07:15, Jan Cholasta wrote: On 25.5.2016 18:17, Martin Basti wrote: On 25.05.2016 16:07, Jan Cholasta wrote: On 25.5.2016 15:03, David Kupka wrote: