[Freeipa-devel] [PATCH] 078 Improve DNS zone creation

2011-06-09 Thread Martin Kosek
When a new DNS zone is being created a local hostname is set as a nameserver of the new zone. However, when the zone is created during ipa-replica-prepare, the the current master/replica doesn't have to be an IPA server with DNS support. This would lead to DNS zones with incorrect NS records as the

[Freeipa-devel] [PATCH] 079 DNS installation fails when domain and host domain mismatch

2011-06-09 Thread Martin Kosek
This patch depends on my patch 078. A special patch for stable branch attached. --- Create DNS domain for IPA server hostname first so that it's forward record can be added. This results in 2 forward DNS zones created when server hostname doesn't equal server domain. https://fedorahosted.org/fre

Re: [Freeipa-devel] [PATCH] 079 DNS installation fails when domain and host domain mismatch

2011-06-09 Thread Simo Sorce
On Thu, 2011-06-09 at 12:58 +0200, Martin Kosek wrote: > This patch depends on my patch 078. A special patch for stable branch > attached. ACK Simo. -- Simo Sorce * Red Hat, Inc * New York ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https

Re: [Freeipa-devel] [PATCH] 078 Improve DNS zone creation

2011-06-09 Thread Simo Sorce
On Thu, 2011-06-09 at 11:31 +0200, Martin Kosek wrote: > When a new DNS zone is being created a local hostname is set as a > nameserver of the new zone. However, when the zone is created > during ipa-replica-prepare, the the current master/replica doesn't > have to be an IPA server with DNS support

Re: [Freeipa-devel] [PATCH] 21 Fix directory manager password validation in ipa-nis-manage

2011-06-09 Thread Martin Kosek
On Wed, 2011-06-08 at 15:21 +0200, Jan Cholasta wrote: > https://fedorahosted.org/freeipa/ticket/1283 > https://fedorahosted.org/freeipa/ticket/1284 > > Honza Patch works fine, but I'd like to improve code quality a bit. Please don't call sys.exit() from get_dirman_password(). It doesn't make rea

Re: [Freeipa-devel] [PATCH] 792 Update translations

2011-06-09 Thread Martin Kosek
On Mon, 2011-06-06 at 13:47 -0400, Rob Crittenden wrote: > Our translation files haven't been updated for a few months, this brings > things up to date. It is intended for master only. > > All I did to generate this patch was to run make update-po in > install/po. It is otherwise untouched by hu

Re: [Freeipa-devel] [PATCH] 792 Update translations

2011-06-09 Thread Dmitri Pal
On 06/09/2011 08:56 AM, Martin Kosek wrote: > On Mon, 2011-06-06 at 13:47 -0400, Rob Crittenden wrote: >> Our translation files haven't been updated for a few months, this brings >> things up to date. It is intended for master only. >> >> All I did to generate this patch was to run make update-po

Re: [Freeipa-devel] [PATCH] 794 Fix external CA installations

2011-06-09 Thread Martin Kosek
On Wed, 2011-06-08 at 16:02 -0400, Rob Crittenden wrote: > External CA installations were broken when we added a separate SSL > certificate for the dogtag DS instance so that replication is done over > SSL. We need to initialize the CADS instance with a bit more information > so the certificate

[Freeipa-devel] [PATCH] 795 Remove root autobind search restriction, fix upgrade logging & error handling.

2011-06-09 Thread Rob Crittenden
There was no point in limiting autobind root to just search cn=config since it could always just modify its way out of the box, so remove the restriction. The upgrade log wasn't being created. Clearing all other loggers before we calling logging.basicConfig() fixes this. Add a global exceptio

Re: [Freeipa-devel] [PATCH] 29 Raise DuplicateEntry Error when adding a duplicate sudo option

2011-06-09 Thread Rob Crittenden
JR Aquino wrote: https://fedorahosted.org/freeipa/ticket/1277 Raise DuplicateEntry Error when adding a duplicate sudo option nack, this will still fail if no ipasudoopt is passed in. Also, is this case-sensitive? rob ___ Freeipa-devel mailing list

Re: [Freeipa-devel] [PATCH] 788 remove automountinformation from automount dns

2011-06-09 Thread Rob Crittenden
Martin Kosek wrote: On Mon, 2011-05-23 at 14:38 -0400, Rob Crittenden wrote: In an attempt to support multiple direct maps we always included the automountinformation in the key dn. This makes showing keys impossible a bit of a catch-22. You want to get the mount info but to get it you need the

Re: [Freeipa-devel] [PATCH] 073 IPA installation with --no-host-dns fails

2011-06-09 Thread Rob Crittenden
Martin Kosek wrote: Patch for both master and ipa-2-0 branch attached. --- --no-host-dns option should allow installing IPA server on a host without a DNS resolvable name. Update parse_ip_address and verify_ip_address functions has been changed not to return None and print error messages in case

Re: [Freeipa-devel] [PATCH] 074 Handle LDAP search references

2011-06-09 Thread Rob Crittenden
Martin Kosek wrote: LDAP search operation may return a search reference pointing to an LDAP resource. As the framework does not handle search references, skip these results to prevent result processing failures. Migrate operation crashed when the migrated DS contained search references. Now, it

Re: [Freeipa-devel] [PATCH] 075 Add ignore lists to migrate-ds command

2011-06-09 Thread Rob Crittenden
Martin Kosek wrote: How to test: 1) Create a custom DS instance with for example 60radius.ldif schema present (as in the original report in ticket #1266) 2) Populate DS with users/groups with custom unsupported object class/attribute 3) Try to migrate these users and groups to IPAv2. Only the enh

Re: [Freeipa-devel] [PATCH] 795 Remove root autobind search restriction, fix upgrade logging & error handling.

2011-06-09 Thread Rob Crittenden
Rob Crittenden wrote: There was no point in limiting autobind root to just search cn=config since it could always just modify its way out of the box, so remove the restriction. The upgrade log wasn't being created. Clearing all other loggers before we calling logging.basicConfig() fixes this. A

[Freeipa-devel] [PATCH] 174 Added selectable option for table widget.

2011-06-09 Thread Endi Sukma Dewata
A selectable option has been added to the table widget to show/hide the checkbox column for selecting table rows. By default it's set to true. The indirect association facet has been modified to hide the column because it is non-editable. -- Endi S. Dewata From a5b4c76264704670ead3e00d5531d29210e

[Freeipa-devel] [PATCH] 175 Entitlement status.

2011-06-09 Thread Endi Sukma Dewata
A new facet has been added to show entitlement status and download the registration certificate. -- Endi S. Dewata From 34b60284da66082b7d7a954ed02b545665fd1d16 Mon Sep 17 00:00:00 2001 From: Endi S. Dewata Date: Wed, 27 Apr 2011 12:17:13 -0500 Subject: [PATCH] Entitlement status. A new facet h

Re: [Freeipa-devel] [PATCH] 073 IPA installation with --no-host-dns fails

2011-06-09 Thread Martin Kosek
On Thu, 2011-06-09 at 14:14 -0400, Rob Crittenden wrote: > Martin Kosek wrote: > > Patch for both master and ipa-2-0 branch attached. > > --- > > --no-host-dns option should allow installing IPA server on a host > > without a DNS resolvable name. > > > > Update parse_ip_address and verify_ip_addres

Re: [Freeipa-devel] [PATCH] 074 Handle LDAP search references

2011-06-09 Thread Martin Kosek
On Thu, 2011-06-09 at 15:04 -0400, Rob Crittenden wrote: > Martin Kosek wrote: > > LDAP search operation may return a search reference pointing to > > an LDAP resource. As the framework does not handle search > > references, skip these results to prevent result processing > > failures. > > > > Migr