Re: [Freeipa-devel] [PATCH 0007][DOC] Tip on restoring admin account
Yes, the attached patch looks good. I see what you are saying how it did look misleading. Thanks, Gabe On Mon, Mar 3, 2014 at 3:13 AM, Petr Viktorin pvikt...@redhat.com wrote: On 03/02/2014 11:26 PM, Gabe Alford wrote: Here is an updated patch that merges the notes and adds info about preventing removal of the last admin. Gabe That looks misleading to me -- by default, the group administrators privilege actually excludes the right to modify admins. Only admins or the Directory Manager can add new admins. I took a stab at correcting this; does the attached patch look good? On Fri, Feb 28, 2014 at 8:39 AM, Gabe Alford redhatri...@gmail.com mailto:redhatri...@gmail.com wrote: That does make more sense to merge them under the same note. I can also include a little blurb about ipa user-del and ipa group-remove-member. On Fri, Feb 28, 2014 at 5:54 AM, Petr Viktorin pvikt...@redhat.com mailto:pvikt...@redhat.com wrote: On 02/26/2014 04:01 PM, Gabe Alford wrote: Hi all, I added a tip in the deleting users section on restoring admin account. Please review. https://fedorahosted.org/__freeipa/ticket/2746 https://fedorahosted.org/freeipa/ticket/2746 Hello, The new tip is added right under a Note about the same thing (or a very similar thing, from the user's POV). Would it be possible to merge those two into a single Note? Nowadays[0], ipa user-del and ipa group-remove-member will refuse to delete the last admin. I think this information should be added to the main docs. (Also, this reduces the importance of the recovery instructions.) [0] https://fedorahosted.org/__freeipa/ticket/2564 https://fedorahosted.org/freeipa/ticket/2564 -- Petrł -- Petr³ ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel
Re: [Freeipa-devel] [PATCH 0007][DOC] Tip on restoring admin account
On 03/03/2014 03:16 PM, Gabe Alford wrote: Yes, the attached patch looks good. I see what you are saying how it did look misleading. Thanks, Gabe Thank you for your help! Pushed to docs master: dfb1b16b4b62e87540b34bae8b4454021f17fd71 On Mon, Mar 3, 2014 at 3:13 AM, Petr Viktorin pvikt...@redhat.com mailto:pvikt...@redhat.com wrote: On 03/02/2014 11:26 PM, Gabe Alford wrote: Here is an updated patch that merges the notes and adds info about preventing removal of the last admin. Gabe That looks misleading to me -- by default, the group administrators privilege actually excludes the right to modify admins. Only admins or the Directory Manager can add new admins. I took a stab at correcting this; does the attached patch look good? On Fri, Feb 28, 2014 at 8:39 AM, Gabe Alford redhatri...@gmail.com mailto:redhatri...@gmail.com mailto:redhatri...@gmail.com mailto:redhatri...@gmail.com__ wrote: That does make more sense to merge them under the same note. I can also include a little blurb about ipa user-del and ipa group-remove-member. On Fri, Feb 28, 2014 at 5:54 AM, Petr Viktorin pvikt...@redhat.com mailto:pvikt...@redhat.com mailto:pvikt...@redhat.com mailto:pvikt...@redhat.com wrote: On 02/26/2014 04:01 PM, Gabe Alford wrote: Hi all, I added a tip in the deleting users section on restoring admin account. Please review. https://fedorahosted.org/freeipa/ticket/2746 https://fedorahosted.org/__freeipa/ticket/2746 https://fedorahosted.org/__freeipa/ticket/2746 https://fedorahosted.org/freeipa/ticket/2746 Hello, The new tip is added right under a Note about the same thing (or a very similar thing, from the user's POV). Would it be possible to merge those two into a single Note? Nowadays[0], ipa user-del and ipa group-remove-member will refuse to delete the last admin. I think this information should be added to the main docs. (Also, this reduces the importance of the recovery instructions.) [0] https://fedorahosted.org/freeipa/ticket/2564 https://fedorahosted.org/__freeipa/ticket/2564 https://fedorahosted.org/__freeipa/ticket/2564 https://fedorahosted.org/freeipa/ticket/2564 -- Petrł -- Petr³ -- Petr³ ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel
Re: [Freeipa-devel] [PATCH 0007][DOC] Tip on restoring admin account
Here is an updated patch that merges the notes and adds info about preventing removal of the last admin. Gabe On Fri, Feb 28, 2014 at 8:39 AM, Gabe Alford redhatri...@gmail.com wrote: That does make more sense to merge them under the same note. I can also include a little blurb about ipa user-del and ipa group-remove-member. On Fri, Feb 28, 2014 at 5:54 AM, Petr Viktorin pvikt...@redhat.comwrote: On 02/26/2014 04:01 PM, Gabe Alford wrote: Hi all, I added a tip in the deleting users section on restoring admin account. Please review. https://fedorahosted.org/freeipa/ticket/2746 Hello, The new tip is added right under a Note about the same thing (or a very similar thing, from the user's POV). Would it be possible to merge those two into a single Note? Nowadays[0], ipa user-del and ipa group-remove-member will refuse to delete the last admin. I think this information should be added to the main docs. (Also, this reduces the importance of the recovery instructions.) [0] https://fedorahosted.org/freeipa/ticket/2564 -- Petrł freeipa-rga-0007-2-DOC-Document-steps-to-restore-deleted-admin-account.patch Description: Binary data ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel
Re: [Freeipa-devel] [PATCH 0007][DOC] Tip on restoring admin account
On 02/26/2014 04:01 PM, Gabe Alford wrote: Hi all, I added a tip in the deleting users section on restoring admin account. Please review. https://fedorahosted.org/freeipa/ticket/2746 Hello, The new tip is added right under a Note about the same thing (or a very similar thing, from the user's POV). Would it be possible to merge those two into a single Note? Nowadays[0], ipa user-del and ipa group-remove-member will refuse to delete the last admin. I think this information should be added to the main docs. (Also, this reduces the importance of the recovery instructions.) [0] https://fedorahosted.org/freeipa/ticket/2564 -- Petr³ ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel