[Freeipa-devel] [PATCH] 336 Added policies into user details page.

2012-01-05 Thread Endi Sukma Dewata
The user details page has been modified to show the password policy and Kerberos ticket policy that apply to the user. The policy are displayed as read-only since they may affect other users. Changing a policy should be done in the respective policy details page. Ticket #703 -- Endi S. Dewata Fr

Re: [Freeipa-devel] [PATCH] 335 Added account status into user search facet.

2012-01-05 Thread Endi Sukma Dewata
On 1/5/2012 10:21 AM, Endi Sukma Dewata wrote: The user search facet has been modified to show the account status. The IPA.boolean_format has been converted into a class to allow behavior customization. Ticket #1996 Fixed jslint warning. -- Endi S. Dewata From da2ce1b9f4b78da5bcd70abe116617a3

[Freeipa-devel] [PATCH] 920 fix error message when re-adding users to sudorule

2012-01-05 Thread Rob Crittenden
When re-adding an external user to a sudorule the wrong error message was showing (not found instead of already a member). Also display external users by default. This relies on my patch 919 to apply. rob >From 6fe688c6d568219f8b736077cd3082a2367e914f Mon Sep 17 00:00:00 2001 From: Rob Critten

Re: [Freeipa-devel] [PATCH] 185-188 Let replicas install without DNS

2012-01-05 Thread Rob Crittenden
Martin Kosek wrote: Patches 185-186 are needed to make ipa-replica-install run without crashes. How to test: on server: 1) install the server (ipa.example.com is not resolvable) # ipa-server-install -p kokos123 -a kokos123 --no-host-dns --hostname=ipa.example.com 2) Add a record for replica.ex

Re: [Freeipa-devel] Translation to French for freeipa completed

2012-01-05 Thread Jérôme Fenal
2012/1/5 John Dennis > On 01/05/2012 04:32 AM, Jérôme Fenal wrote: > >> Just a quick note to let you know that Transifex did update the .po. >> I'm back at 58% completion :( >> > > Jérôme everyone on the IPA team would like to thank you for helping us > with the translation and wanted to express

Re: [Freeipa-devel] [PATCH] fix typo in ipalib/plugins/role.py (2)

2012-01-05 Thread Rob Crittenden
Jérôme Fenal wrote: diff --git a/ipalib/plugins/role.py b/ipalib/plugins/role.py --- a/ipalib/plugins/role.py +++ b/ipalib/plugins/role.py @@ -54,7 +54,7 @@ EXAMPLES: Display information about a role: ipa role-show junioradmin - The result of this is that any users in the group 'useradmi

Re: [Freeipa-devel] [PATCH] fix typo in ipalib/plugins/role.py

2012-01-05 Thread Rob Crittenden
Simo Sorce wrote: On Sat, 2011-12-31 at 10:15 +0100, Jérôme Fenal wrote: diff --git a/ipalib/plugins/role.py b/ipalib/plugins/role.py index bdca3ec..d01791b 100644 --- a/ipalib/plugins/role.py +++ b/ipalib/plugins/role.py @@ -45,7 +45,7 @@ EXAMPLES: Add some privileges to this role: ipa

Re: [Freeipa-devel] Fwd: [PATCH] 912 Display the value of memberOf ACIs in permission plugin.

2012-01-05 Thread Rob Crittenden
Endi Sukma Dewata wrote: On 1/4/2012 3:47 PM, Rob Crittenden wrote: I guess I'm just not convinced this additional complexity would buy us anything. Updated patch attached that fixes the memberof display and updates the tests trivially. OK, the mod output is fixed. Since the exclusivity rules

Re: [Freeipa-devel] [PATCH] s4u2proxy support

2012-01-05 Thread Rob Crittenden
Alexander Bokovoy wrote: On Wed, 04 Jan 2012, Rob Crittenden wrote: +parser.add_option('--delegate', action='store_true', +help='Delegate the TGT to the IPA server', +) Otherwise ACK. Updated both patches. The first (914) to address Alexander's concern. The secon

Re: [Freeipa-devel] [PATCH] 7 Ignore srchost option in hbactest

2012-01-05 Thread Alexander Bokovoy
On Thu, 05 Jan 2012, Ondrej Hamada wrote: > https://fedorahosted.org/freeipa/ticket/2085 > > New version of SSSD begins ignoring sourcehost value of HBAC rules by > default. In order to match this behaviour the sourcehost option in > hbactest is optional now, but the value of sourcehost is ignored

[Freeipa-devel] [PATCH] Added account status into user search facet.

2012-01-05 Thread Endi Sukma Dewata
The user search facet has been modified to show the account status. The IPA.boolean_format has been converted into a class to allow behavior customization. Ticket #1996 -- Endi S. Dewata From c2f496d8252198408f81aa9dd8f08ff1d7bf36a8 Mon Sep 17 00:00:00 2001 From: Endi Sukma Dewata Date: Thu, 5

[Freeipa-devel] [PATCH] 7 Ignore srchost option in hbactest

2012-01-05 Thread Ondrej Hamada
https://fedorahosted.org/freeipa/ticket/2085 New version of SSSD begins ignoring sourcehost value of HBAC rules by default. In order to match this behaviour the sourcehost option in hbactest is optional now, but the value of sourcehost is ignored in all rules. Every rule's sourcehost value is set

Re: [Freeipa-devel] Translation to French for freeipa completed

2012-01-05 Thread John Dennis
On 01/05/2012 04:32 AM, Jérôme Fenal wrote: Just a quick note to let you know that Transifex did update the .po. I'm back at 58% completion :( Jérôme everyone on the IPA team would like to thank you for helping us with the translation and wanted to express our regret some of your work was for

Re: [Freeipa-devel] CLDAP failures

2012-01-05 Thread Simo Sorce
On Thu, 2012-01-05 at 13:29 +0300, Alexander Bokovoy wrote: > On Thu, 22 Dec 2011, Simo Sorce wrote: > > > On Thu, 2011-12-22 at 16:20 +0200, Alexander Bokovoy wrote: > > > Hi, > > > > > > attached are two traces -- against IPA CLDAP plugin and AD win2k8. > > > > > > Please try the attached pat

Re: [Freeipa-devel] CLDAP failures

2012-01-05 Thread Alexander Bokovoy
On Thu, 22 Dec 2011, Simo Sorce wrote: > On Thu, 2011-12-22 at 16:20 +0200, Alexander Bokovoy wrote: > > Hi, > > > > attached are two traces -- against IPA CLDAP plugin and AD win2k8. > > > Please try the attached patch. Tested and it works now for the same environment. ACK. https://fedorahost

Re: [Freeipa-devel] [PATCH] s4u2proxy support

2012-01-05 Thread Alexander Bokovoy
On Wed, 04 Jan 2012, Rob Crittenden wrote: > >>+parser.add_option('--delegate', action='store_true', > >>+help='Delegate the TGT to the IPA server', > >>+) > > > >Otherwise ACK. > > > > Updated both patches. The first (914) to address Alexander's > concern. The second t

Re: [Freeipa-devel] Translation to French for freeipa completed

2012-01-05 Thread Jérôme Fenal
2012/1/4 Jérôme Fenal > 2012/1/4 John Dennis > >> On 01/04/2012 09:56 AM, Jérôme Fenal wrote: >> >> Thanks Dennis, I'll watch commits, and the subsequent update on >>> Transifex (is this part automated ?). >>> >> >> Yes, it's automated. Transifex watches our git repo and pulls the pot >> file w