When a new DNS zone is being created a local hostname is set as a
nameserver of the new zone. However, when the zone is created
during ipa-replica-prepare, the the current master/replica doesn't
have to be an IPA server with DNS support. This would lead to DNS
zones with incorrect NS records as the
This patch depends on my patch 078. A special patch for stable branch
attached.
---
Create DNS domain for IPA server hostname first so that it's forward
record can be added. This results in 2 forward DNS zones created
when server hostname doesn't equal server domain.
https://fedorahosted.org/fre
On Thu, 2011-06-09 at 12:58 +0200, Martin Kosek wrote:
> This patch depends on my patch 078. A special patch for stable branch
> attached.
ACK
Simo.
--
Simo Sorce * Red Hat, Inc * New York
___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https
On Thu, 2011-06-09 at 11:31 +0200, Martin Kosek wrote:
> When a new DNS zone is being created a local hostname is set as a
> nameserver of the new zone. However, when the zone is created
> during ipa-replica-prepare, the the current master/replica doesn't
> have to be an IPA server with DNS support
On Wed, 2011-06-08 at 15:21 +0200, Jan Cholasta wrote:
> https://fedorahosted.org/freeipa/ticket/1283
> https://fedorahosted.org/freeipa/ticket/1284
>
> Honza
Patch works fine, but I'd like to improve code quality a bit. Please
don't call sys.exit() from get_dirman_password(). It doesn't make rea
On Mon, 2011-06-06 at 13:47 -0400, Rob Crittenden wrote:
> Our translation files haven't been updated for a few months, this brings
> things up to date. It is intended for master only.
>
> All I did to generate this patch was to run make update-po in
> install/po. It is otherwise untouched by hu
On 06/09/2011 08:56 AM, Martin Kosek wrote:
> On Mon, 2011-06-06 at 13:47 -0400, Rob Crittenden wrote:
>> Our translation files haven't been updated for a few months, this brings
>> things up to date. It is intended for master only.
>>
>> All I did to generate this patch was to run make update-po
On Wed, 2011-06-08 at 16:02 -0400, Rob Crittenden wrote:
> External CA installations were broken when we added a separate SSL
> certificate for the dogtag DS instance so that replication is done over
> SSL. We need to initialize the CADS instance with a bit more information
> so the certificate
There was no point in limiting autobind root to just search cn=config
since it could always just modify its way out of the box, so remove the
restriction.
The upgrade log wasn't being created. Clearing all other loggers before
we calling logging.basicConfig() fixes this.
Add a global exceptio
JR Aquino wrote:
https://fedorahosted.org/freeipa/ticket/1277
Raise DuplicateEntry Error when adding a duplicate sudo option
nack, this will still fail if no ipasudoopt is passed in.
Also, is this case-sensitive?
rob
___
Freeipa-devel mailing list
Martin Kosek wrote:
On Mon, 2011-05-23 at 14:38 -0400, Rob Crittenden wrote:
In an attempt to support multiple direct maps we always included the
automountinformation in the key dn. This makes showing keys impossible a
bit of a catch-22. You want to get the mount info but to get it you need
the
Martin Kosek wrote:
Patch for both master and ipa-2-0 branch attached.
---
--no-host-dns option should allow installing IPA server on a host
without a DNS resolvable name.
Update parse_ip_address and verify_ip_address functions has been
changed not to return None and print error messages in case
Martin Kosek wrote:
LDAP search operation may return a search reference pointing to
an LDAP resource. As the framework does not handle search
references, skip these results to prevent result processing
failures.
Migrate operation crashed when the migrated DS contained search
references. Now, it
Martin Kosek wrote:
How to test:
1) Create a custom DS instance with for example 60radius.ldif schema
present (as in the original report in ticket #1266)
2) Populate DS with users/groups with custom unsupported object
class/attribute
3) Try to migrate these users and groups to IPAv2. Only the enh
Rob Crittenden wrote:
There was no point in limiting autobind root to just search cn=config
since it could always just modify its way out of the box, so remove the
restriction.
The upgrade log wasn't being created. Clearing all other loggers before
we calling logging.basicConfig() fixes this.
A
A selectable option has been added to the table widget to show/hide
the checkbox column for selecting table rows. By default it's set
to true. The indirect association facet has been modified to hide
the column because it is non-editable.
--
Endi S. Dewata
From a5b4c76264704670ead3e00d5531d29210e
A new facet has been added to show entitlement status and download
the registration certificate.
--
Endi S. Dewata
From 34b60284da66082b7d7a954ed02b545665fd1d16 Mon Sep 17 00:00:00 2001
From: Endi S. Dewata
Date: Wed, 27 Apr 2011 12:17:13 -0500
Subject: [PATCH] Entitlement status.
A new facet h
On Thu, 2011-06-09 at 14:14 -0400, Rob Crittenden wrote:
> Martin Kosek wrote:
> > Patch for both master and ipa-2-0 branch attached.
> > ---
> > --no-host-dns option should allow installing IPA server on a host
> > without a DNS resolvable name.
> >
> > Update parse_ip_address and verify_ip_addres
On Thu, 2011-06-09 at 15:04 -0400, Rob Crittenden wrote:
> Martin Kosek wrote:
> > LDAP search operation may return a search reference pointing to
> > an LDAP resource. As the framework does not handle search
> > references, skip these results to prevent result processing
> > failures.
> >
> > Migr
19 matches
Mail list logo