Re: [Freeipa-devel] [PATCHES] 0552-0554 Upgrading write permissions

2014-06-04 Thread Petr Viktorin
On 06/04/2014 05:23 PM, Martin Kosek wrote: On 06/04/2014 10:43 AM, Petr Viktorin wrote: On 06/04/2014 10:15 AM, Martin Kosek wrote: On 06/03/2014 02:41 PM, Petr Viktorin wrote: On 05/28/2014 04:36 PM, Petr Viktorin wrote: On 05/28/2014 04:27 PM, Petr Viktorin wrote: On 05/27/2014 04:20 PM,

Re: [Freeipa-devel] [PATCHES] 0552-0554 Upgrading write permissions

2014-06-04 Thread Martin Kosek
On 06/04/2014 10:43 AM, Petr Viktorin wrote: > On 06/04/2014 10:15 AM, Martin Kosek wrote: >> On 06/03/2014 02:41 PM, Petr Viktorin wrote: >>> On 05/28/2014 04:36 PM, Petr Viktorin wrote: On 05/28/2014 04:27 PM, Petr Viktorin wrote: > On 05/27/2014 04:20 PM, Martin Kosek wrote: >> On 0

Re: [Freeipa-devel] [PATCHES] 0552-0554 Upgrading write permissions

2014-06-04 Thread Petr Viktorin
On 06/04/2014 10:15 AM, Martin Kosek wrote: On 06/03/2014 02:41 PM, Petr Viktorin wrote: On 05/28/2014 04:36 PM, Petr Viktorin wrote: On 05/28/2014 04:27 PM, Petr Viktorin wrote: On 05/27/2014 04:20 PM, Martin Kosek wrote: On 05/26/2014 04:44 PM, Petr Viktorin wrote: On 05/22/2014 03:07 PM,

Re: [Freeipa-devel] [PATCHES] 0552-0554 Upgrading write permissions

2014-06-04 Thread Martin Kosek
On 06/03/2014 02:41 PM, Petr Viktorin wrote: > On 05/28/2014 04:36 PM, Petr Viktorin wrote: >> On 05/28/2014 04:27 PM, Petr Viktorin wrote: >>> On 05/27/2014 04:20 PM, Martin Kosek wrote: On 05/26/2014 04:44 PM, Petr Viktorin wrote: > On 05/22/2014 03:07 PM, Petr Viktorin wrote: >> Hel

Re: [Freeipa-devel] [PATCHES] 0552-0554 Upgrading write permissions

2014-06-03 Thread Petr Viktorin
On 05/28/2014 04:36 PM, Petr Viktorin wrote: On 05/28/2014 04:27 PM, Petr Viktorin wrote: On 05/27/2014 04:20 PM, Martin Kosek wrote: On 05/26/2014 04:44 PM, Petr Viktorin wrote: On 05/22/2014 03:07 PM, Petr Viktorin wrote: Hello, Here I start upgrading the existing default permissions to th

Re: [Freeipa-devel] [PATCHES] 0552-0554 Upgrading write permissions

2014-05-28 Thread Martin Kosek
On 05/28/2014 05:13 PM, Ludwig Krispenz wrote: > > On 05/28/2014 05:08 PM, Martin Kosek wrote: >> On 05/28/2014 05:03 PM, Ludwig Krispenz wrote: >>> On 05/28/2014 04:56 PM, Martin Kosek wrote: On 05/28/2014 04:50 PM, Simo Sorce wrote: > On Wed, 2014-05-28 at 16:27 +0200, Petr Viktorin wro

Re: [Freeipa-devel] [PATCHES] 0552-0554 Upgrading write permissions

2014-05-28 Thread Ludwig Krispenz
On 05/28/2014 05:08 PM, Martin Kosek wrote: On 05/28/2014 05:03 PM, Ludwig Krispenz wrote: On 05/28/2014 04:56 PM, Martin Kosek wrote: On 05/28/2014 04:50 PM, Simo Sorce wrote: On Wed, 2014-05-28 at 16:27 +0200, Petr Viktorin wrote: Simo, I hazily remember discussing that we should only allo

Re: [Freeipa-devel] [PATCHES] 0552-0554 Upgrading write permissions

2014-05-28 Thread Martin Kosek
On 05/28/2014 05:03 PM, Ludwig Krispenz wrote: > > On 05/28/2014 04:56 PM, Martin Kosek wrote: >> On 05/28/2014 04:50 PM, Simo Sorce wrote: >>> On Wed, 2014-05-28 at 16:27 +0200, Petr Viktorin wrote: Simo, I hazily remember discussing that we should only allow specific attributes on add,

Re: [Freeipa-devel] [PATCHES] 0552-0554 Upgrading write permissions

2014-05-28 Thread Ludwig Krispenz
On 05/28/2014 04:56 PM, Martin Kosek wrote: On 05/28/2014 04:50 PM, Simo Sorce wrote: On Wed, 2014-05-28 at 16:27 +0200, Petr Viktorin wrote: Simo, I hazily remember discussing that we should only allow specific attributes on add, otherwise users can add entries with any extra objectclasses an

Re: [Freeipa-devel] [PATCHES] 0552-0554 Upgrading write permissions

2014-05-28 Thread Martin Kosek
On 05/28/2014 04:50 PM, Simo Sorce wrote: > On Wed, 2014-05-28 at 16:27 +0200, Petr Viktorin wrote: >> Simo, I hazily remember discussing that we should only allow specific >> attributes on add, otherwise users can add entries with any extra >> objectclasses and attributes. Did we come to a concl

Re: [Freeipa-devel] [PATCHES] 0552-0554 Upgrading write permissions

2014-05-28 Thread Simo Sorce
On Wed, 2014-05-28 at 16:27 +0200, Petr Viktorin wrote: > Simo, I hazily remember discussing that we should only allow specific > attributes on add, otherwise users can add entries with any extra > objectclasses and attributes. Did we come to a conclusion? > I might have confused targetattr with

Re: [Freeipa-devel] [PATCHES] 0552-0554 Upgrading write permissions

2014-05-28 Thread Petr Viktorin
On 05/28/2014 04:27 PM, Petr Viktorin wrote: On 05/27/2014 04:20 PM, Martin Kosek wrote: On 05/26/2014 04:44 PM, Petr Viktorin wrote: On 05/22/2014 03:07 PM, Petr Viktorin wrote: Hello, Here I start upgrading the existing default permissions to the new Managed style. https://fedorahosted.org

Re: [Freeipa-devel] [PATCHES] 0552-0554 Upgrading write permissions

2014-05-28 Thread Petr Viktorin
On 05/27/2014 04:20 PM, Martin Kosek wrote: On 05/26/2014 04:44 PM, Petr Viktorin wrote: On 05/22/2014 03:07 PM, Petr Viktorin wrote: Hello, Here I start upgrading the existing default permissions to the new Managed style. https://fedorahosted.org/freeipa/ticket/4346 The patches rely on my p

Re: [Freeipa-devel] [PATCHES] 0552-0554 Upgrading write permissions

2014-05-27 Thread Martin Kosek
On 05/26/2014 04:44 PM, Petr Viktorin wrote: > On 05/22/2014 03:07 PM, Petr Viktorin wrote: >> Hello, >> Here I start upgrading the existing default permissions to the new >> Managed style. >> >> https://fedorahosted.org/freeipa/ticket/4346 >> >> The patches rely on my patch 0551 >> (https://fedor

Re: [Freeipa-devel] [PATCHES] 0552-0554 Upgrading write permissions

2014-05-26 Thread Petr Viktorin
On 05/22/2014 03:07 PM, Petr Viktorin wrote: Hello, Here I start upgrading the existing default permissions to the new Managed style. https://fedorahosted.org/freeipa/ticket/4346 The patches rely on my patch 0551 (https://fedorahosted.org/freeipa/ticket/4349) You may run into what seems to be

[Freeipa-devel] [PATCHES] 0552-0554 Upgrading write permissions

2014-05-22 Thread Petr Viktorin
Hello, Here I start upgrading the existing default permissions to the new Managed style. https://fedorahosted.org/freeipa/ticket/4346 The patches rely on my patch 0551 (https://fedorahosted.org/freeipa/ticket/4349) You may run into what seems to be a 389 bug. If you get a "Midair Collision"