Re: [Freeipa-devel] Structured DNS record API proposal - summary

2011-09-23 Thread Martin Kosek
On Thu, 2011-09-22 at 19:31 -0500, Endi Sukma Dewata wrote: On 9/22/2011 7:24 AM, Martin Kosek wrote: 2) Some DNS records may be pretty large. MX record data is small, but for example CERT records have an entire certificate stored in it. Wouldn't there be a problem if we place the large DNS

Re: [Freeipa-devel] Structured DNS record API proposal - summary

2011-09-23 Thread Martin Kosek
On Thu, 2011-09-22 at 22:05 -0400, Adam Young wrote: On 09/22/2011 08:31 PM, Endi Sukma Dewata wrote: OPEN QUESTION: should we implement these new commands also for discrete DNS records types to be consistent? I mean for example A, , CNAME, PTR, ... They would look like ipa

Re: [Freeipa-devel] [PATCH] 881 don't log OTP in client install log

2011-09-23 Thread Martin Kosek
On Thu, 2011-09-22 at 11:55 -0400, Rob Crittenden wrote: Obfuscate the one-time password in the client installer log. rob NACK. You missed a case when OTP is interactively prompted (-W parameter is passed). Martin ___ Freeipa-devel mailing list

Re: [Freeipa-devel] [PATCH] 879 ensure ssl socket is shut down

2011-09-23 Thread Martin Kosek
On Mon, 2011-09-19 at 17:32 -0400, Rob Crittenden wrote: httplib makes a copy of the nss file descriptor but doesn't close it when the response code != 200 so we need to close it ourselves. rob ACK. I saw that jdennis agreed with this solution in Trac comments as well. Pushed to master,

Re: [Freeipa-devel] Structured DNS record API proposal

2011-09-23 Thread Jakub Hrozek
On Thu, Sep 22, 2011 at 09:59:01PM -0400, Dmitri Pal wrote: On 09/22/2011 03:37 AM, Jakub Hrozek wrote: On Thu, Sep 22, 2011 at 08:25:01AM +0200, Jan Cholasta wrote: On 21.9.2011 23:55, Dmitri Pal wrote: On 09/21/2011 10:27 AM, Adam Young wrote: On 09/20/2011 11:11 AM, Martin Kosek wrote:

Re: [Freeipa-devel] FreeIPA and per-machine views

2011-09-23 Thread Stephen Gallagher
On Thu, 2011-09-22 at 21:55 -0400, Dmitri Pal wrote: On 09/21/2011 10:07 PM, Stephen Gallagher wrote: I've ben working on the multiple search base feature in SSSD and I've had some thoughts that might be relevant to the FreeIPA v3 core effort. The idea behind multiple search bases is

Re: [Freeipa-devel] [PATCH] 281 Fixed problem on combobox with search limit.

2011-09-23 Thread Petr Vobornik
On 09/20/2011 11:18 PM, Endi Sukma Dewata wrote: The IPA.combobox_widget has been modified such that if the drop-down list doesn't contain the stored value (due to search limit) it will not select anything from the list. The widget has also been modified not to select the value that matches the

Re: [Freeipa-devel] [PATCH] 881 don't log OTP in client install log

2011-09-23 Thread Rob Crittenden
Martin Kosek wrote: On Thu, 2011-09-22 at 11:55 -0400, Rob Crittenden wrote: Obfuscate the one-time password in the client installer log. rob NACK. You missed a case when OTP is interactively prompted (-W parameter is passed). Martin Nice catch, updated patch rob From

Re: [Freeipa-devel] FreeIPA and per-machine views

2011-09-23 Thread Simo Sorce
On Thu, 2011-09-22 at 21:55 -0400, Dmitri Pal wrote: I do not think we want to deal with multiple subtrees of users in the same IPA instance. We already decided against it in the past when we flattened the tree. At least I am not convinced that this is actually needed. I am actually aware of

Re: [Freeipa-devel] [PATCH] 881 don't log OTP in client install log

2011-09-23 Thread Martin Kosek
On Fri, 2011-09-23 at 09:07 -0400, Rob Crittenden wrote: Martin Kosek wrote: On Thu, 2011-09-22 at 11:55 -0400, Rob Crittenden wrote: Obfuscate the one-time password in the client installer log. rob NACK. You missed a case when OTP is interactively prompted (-W parameter is passed).

[Freeipa-devel] [PATCH] 6 Add admin SIDs

2011-09-23 Thread Sumit Bose
Hi, this patch extends the ipa-adtrust-install utility by adding SIDs to the IPA admin user and the admins group. bye, Sumit From 9d24a20c8d81440398f38e71efd024320b20577d Mon Sep 17 00:00:00 2001 From: Sumit Bose sb...@redhat.com Date: Fri, 23 Sep 2011 15:11:23 +0200 Subject: [PATCH] Add admin

Re: [Freeipa-devel] [PATCH] 271 Modified dialog to use sections.

2011-09-23 Thread Endi Sukma Dewata
On 9/23/2011 4:31 AM, Petr Vobornik wrote: On 09/22/2011 09:15 PM, Endi Sukma Dewata wrote: I've split the patch into two: 4a is the revised original patch, ACK 4b is the additional cleanup for the undo. you missed: dns.js:562 and host.js:406 . Beside this it's OK. Fixed. We actually

Re: [Freeipa-devel] [PATCH] 281 Fixed problem on combobox with search limit.

2011-09-23 Thread Endi Sukma Dewata
On 9/23/2011 7:46 AM, Petr Vobornik wrote: On 09/20/2011 11:18 PM, Endi Sukma Dewata wrote: The IPA.combobox_widget has been modified such that if the drop-down list doesn't contain the stored value (due to search limit) it will not select anything from the list. The widget has also been

Re: [Freeipa-devel] Structured DNS record API proposal - summary

2011-09-23 Thread Adam Young
On 09/23/2011 02:02 AM, Martin Kosek wrote: On Thu, 2011-09-22 at 22:05 -0400, Adam Young wrote: On 09/22/2011 08:31 PM, Endi Sukma Dewata wrote: OPEN QUESTION: should we implement these new commands also for discrete DNS records types to be consistent? I mean for example A, , CNAME, PTR,

Re: [Freeipa-devel] Structured DNS record API proposal - summary

2011-09-23 Thread Martin Kosek
On Fri, 2011-09-23 at 10:46 -0400, Adam Young wrote: On 09/23/2011 02:02 AM, Martin Kosek wrote: On Thu, 2011-09-22 at 22:05 -0400, Adam Young wrote: On 09/22/2011 08:31 PM, Endi Sukma Dewata wrote: OPEN QUESTION: should we implement these new commands also for discrete DNS records types

[Freeipa-devel] [PATCH] 017 Fixed: Column header for attributes table should be full, width

2011-09-23 Thread Petr Vobornik
https://fedorahosted.org/freeipa/ticket/1841 The column header for the attributes table (IPA.attributes_widget) does not cover the entire width of the table. This problem appears in the adder dialog and details page for permissions, self-service permissions, and delegations. Note: * span

Re: [Freeipa-devel] Structured DNS record API proposal - summary

2011-09-23 Thread Adam Young
On 09/23/2011 11:52 AM, Rob Crittenden wrote: Adam Young wrote: On 09/23/2011 02:02 AM, Martin Kosek wrote: On Thu, 2011-09-22 at 22:05 -0400, Adam Young wrote: On 09/22/2011 08:31 PM, Endi Sukma Dewata wrote: OPEN QUESTION: should we implement these new commands also for discrete DNS

Re: [Freeipa-devel] Structured DNS record API proposal - summary

2011-09-23 Thread Martin Kosek
On Fri, 2011-09-23 at 13:17 -0400, Adam Young wrote: On 09/23/2011 11:52 AM, Rob Crittenden wrote: Adam Young wrote: On 09/23/2011 02:02 AM, Martin Kosek wrote: On Thu, 2011-09-22 at 22:05 -0400, Adam Young wrote: On 09/22/2011 08:31 PM, Endi Sukma Dewata wrote: OPEN QUESTION: should we

[Freeipa-devel] [PATCH] 883 display failed service/service group members in hbacrule membership

2011-09-23 Thread Rob Crittenden
When trying to add/remove services and service groups as members of an hbacrule failures were not being displayed due to a missing label. Tickets show how to duplicate and test patch. rob From a015ccfcb5a22677cb648ba61578d4e2f1a2e2e1 Mon Sep 17 00:00:00 2001 From: Rob Crittenden