Re: [Freeipa-devel] [PATCH 0007][DOC] Tip on restoring admin account

2014-03-03 Thread Gabe Alford
Yes, the attached patch looks good. I see what you are saying how it did
look misleading.

Thanks,

Gabe


On Mon, Mar 3, 2014 at 3:13 AM, Petr Viktorin pvikt...@redhat.com wrote:

 On 03/02/2014 11:26 PM, Gabe Alford wrote:

 Here is an updated patch that merges the notes and adds info about
 preventing removal of the last admin.

 Gabe


 That looks misleading to me -- by default, the group administrators
 privilege actually excludes the right to modify admins. Only admins or the
 Directory Manager can add new admins.

 I took a stab at correcting this; does the attached patch look good?



 On Fri, Feb 28, 2014 at 8:39 AM, Gabe Alford redhatri...@gmail.com
 mailto:redhatri...@gmail.com wrote:

 That does make more sense to merge them under the same note. I can
 also include a little blurb about ipa user-del and ipa
 group-remove-member.


 On Fri, Feb 28, 2014 at 5:54 AM, Petr Viktorin pvikt...@redhat.com
 mailto:pvikt...@redhat.com wrote:

 On 02/26/2014 04:01 PM, Gabe Alford wrote:

 Hi all,

 I added a tip in the deleting users section on restoring
 admin account.
 Please review.

 https://fedorahosted.org/__freeipa/ticket/2746

 https://fedorahosted.org/freeipa/ticket/2746



 Hello,

 The new tip is added right under a Note about the same thing (or
 a very similar thing, from the user's POV). Would it be possible
 to merge those two into a single Note?

 Nowadays[0], ipa user-del and ipa group-remove-member will
 refuse to delete the last admin. I think this information should
 be added to the main docs. (Also, this reduces the importance of
 the recovery instructions.)

 [0] https://fedorahosted.org/__freeipa/ticket/2564
 https://fedorahosted.org/freeipa/ticket/2564

 --
 Petrł





 --
 Petr³

___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] [PATCH 0007][DOC] Tip on restoring admin account

2014-03-03 Thread Petr Viktorin

On 03/03/2014 03:16 PM, Gabe Alford wrote:

Yes, the attached patch looks good. I see what you are saying how it did
look misleading.

Thanks,

Gabe


Thank you for your help!
Pushed to docs master: dfb1b16b4b62e87540b34bae8b4454021f17fd71




On Mon, Mar 3, 2014 at 3:13 AM, Petr Viktorin pvikt...@redhat.com
mailto:pvikt...@redhat.com wrote:

On 03/02/2014 11:26 PM, Gabe Alford wrote:

Here is an updated patch that merges the notes and adds info about
preventing removal of the last admin.

Gabe


That looks misleading to me -- by default, the group
administrators privilege actually excludes the right to modify
admins. Only admins or the Directory Manager can add new admins.

I took a stab at correcting this; does the attached patch look good?



On Fri, Feb 28, 2014 at 8:39 AM, Gabe Alford
redhatri...@gmail.com mailto:redhatri...@gmail.com
mailto:redhatri...@gmail.com mailto:redhatri...@gmail.com__
wrote:

 That does make more sense to merge them under the same
note. I can
 also include a little blurb about ipa user-del and ipa
 group-remove-member.


 On Fri, Feb 28, 2014 at 5:54 AM, Petr Viktorin
pvikt...@redhat.com mailto:pvikt...@redhat.com
 mailto:pvikt...@redhat.com mailto:pvikt...@redhat.com
wrote:

 On 02/26/2014 04:01 PM, Gabe Alford wrote:

 Hi all,

 I added a tip in the deleting users section on
restoring
 admin account.
 Please review.

https://fedorahosted.org/freeipa/ticket/2746
https://fedorahosted.org/__freeipa/ticket/2746

 https://fedorahosted.org/__freeipa/ticket/2746
https://fedorahosted.org/freeipa/ticket/2746



 Hello,

 The new tip is added right under a Note about the same
thing (or
 a very similar thing, from the user's POV). Would it be
possible
 to merge those two into a single Note?

 Nowadays[0], ipa user-del and ipa group-remove-member will
 refuse to delete the last admin. I think this
information should
 be added to the main docs. (Also, this reduces the
importance of
 the recovery instructions.)

 [0] https://fedorahosted.org/freeipa/ticket/2564
https://fedorahosted.org/__freeipa/ticket/2564
 https://fedorahosted.org/__freeipa/ticket/2564
https://fedorahosted.org/freeipa/ticket/2564

 --
 Petrł





--
Petr³





--
Petr³

___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] [PATCH 0007][DOC] Tip on restoring admin account

2014-03-02 Thread Gabe Alford
Here is an updated patch that merges the notes and adds info about
preventing removal of the last admin.

Gabe


On Fri, Feb 28, 2014 at 8:39 AM, Gabe Alford redhatri...@gmail.com wrote:

 That does make more sense to merge them under the same note. I can also
 include a little blurb about ipa user-del and ipa group-remove-member.


 On Fri, Feb 28, 2014 at 5:54 AM, Petr Viktorin pvikt...@redhat.comwrote:

 On 02/26/2014 04:01 PM, Gabe Alford wrote:

 Hi all,

 I added a tip in the deleting users section on restoring admin account.
 Please review.

 https://fedorahosted.org/freeipa/ticket/2746



 Hello,

 The new tip is added right under a Note about the same thing (or a very
 similar thing, from the user's POV). Would it be possible to merge those
 two into a single Note?

 Nowadays[0], ipa user-del and ipa group-remove-member will refuse to
 delete the last admin. I think this information should be added to the main
 docs. (Also, this reduces the importance of the recovery instructions.)

 [0] https://fedorahosted.org/freeipa/ticket/2564

 --
 Petrł





freeipa-rga-0007-2-DOC-Document-steps-to-restore-deleted-admin-account.patch
Description: Binary data
___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] [PATCH 0007][DOC] Tip on restoring admin account

2014-02-28 Thread Petr Viktorin

On 02/26/2014 04:01 PM, Gabe Alford wrote:

Hi all,

I added a tip in the deleting users section on restoring admin account.
Please review.

https://fedorahosted.org/freeipa/ticket/2746



Hello,

The new tip is added right under a Note about the same thing (or a very 
similar thing, from the user's POV). Would it be possible to merge those 
two into a single Note?


Nowadays[0], ipa user-del and ipa group-remove-member will refuse to 
delete the last admin. I think this information should be added to the 
main docs. (Also, this reduces the importance of the recovery instructions.)


[0] https://fedorahosted.org/freeipa/ticket/2564

--
Petr³

___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel