Re: [Freeipa-devel] [PATCH] 993 disable UPG for migration

2012-04-03 Thread Martin Kosek
On Mon, 2012-04-02 at 15:18 -0400, Rob Crittenden wrote: > Martin Kosek wrote: > > On Fri, 2012-03-30 at 09:05 -0400, Rob Crittenden wrote: > >> Martin Kosek wrote: > >>> On Thu, 2012-03-29 at 11:27 -0400, Rob Crittenden wrote: > Martin Kosek wrote: > > On Wed, 2012-03-28 at 17:28 -0400, R

Re: [Freeipa-devel] [PATCH] 998 certmonger restarts services on renewal

2012-04-03 Thread Martin Kosek
On Mon, 2012-04-02 at 15:36 -0400, Rob Crittenden wrote: > Rob Crittenden wrote: > > Martin Kosek wrote: > >> On Tue, 2012-03-27 at 17:40 -0400, Rob Crittenden wrote: > >>> Certmonger will currently automatically renew server certificates but > >>> doesn't restart the services so you can still end

[Freeipa-devel] [PATCH] 246 Configure SELinux for httpd during upgrades

2012-04-03 Thread Martin Kosek
SELinux configuration for httpd instance was set for new installations only. Upgraded IPA servers (namely 2.1.x -> 2.2.x upgrade) missed the configuration. This lead to AVCs when httpd tries to contact ipa_memcached and user not being able to log in. This patch updates ipa-upgradeconfig to configu

[Freeipa-devel] [PATCH] 73 Check whether the default user group is POSIX when adding new user with --noprivate

2012-04-03 Thread Jan Cholasta
https://fedorahosted.org/freeipa/ticket/2572 Honza -- Jan Cholasta >From 2fbfab66064d045c192d2cc8d747d30bca1ebdc6 Mon Sep 17 00:00:00 2001 From: Jan Cholasta Date: Thu, 29 Mar 2012 09:12:36 -0400 Subject: [PATCH] Check whether the default user group is POSIX when adding new user with --nopriva

[Freeipa-devel] [PATCH] 20 Fix empty external member processing

2012-04-03 Thread Ondrej Hamada
https://fedorahosted.org/freeipa/ticket/2447 Validation of external member was failing for empty strings because of wrong condition. -- Regards, Ondrej Hamada FreeIPA team jabber: oh...@jabbim.cz IRC: ohamada From 137c676c6c182f839cbcd9332f9d0f6d8d18b3f0 Mon Sep 17 00:00:00 2001 From: Ondrej H

Re: [Freeipa-devel] [PATCH] 73 Check whether the default user group is POSIX when adding new user with --noprivate

2012-04-03 Thread Martin Kosek
On Tue, 2012-04-03 at 11:58 +0200, Jan Cholasta wrote: > https://fedorahosted.org/freeipa/ticket/2572 > > Honza > NACK. This creates a regression: # ipa group-show foogroup Group name: foogroup Description: foo GID: 358800017 # ipa user-add --first=Foo --last=Bar fbar5 --gidnumber=35880

Re: [Freeipa-devel] [PATCH] 73 Check whether the default user group is POSIX when adding new user with --noprivate

2012-04-03 Thread Martin Kosek
On Tue, 2012-04-03 at 13:02 +0200, Martin Kosek wrote: > On Tue, 2012-04-03 at 11:58 +0200, Jan Cholasta wrote: > > https://fedorahosted.org/freeipa/ticket/2572 > > > > Honza > > > > NACK. > > This creates a regression: > > # ipa group-show foogroup > Group name: foogroup > Description: fo

[Freeipa-devel] [PATCH] 0015 Don't try to remove auxiliary nodes from internal RBT

2012-04-03 Thread Petr Spacek
Hello, this patch optimizes code for removing deleted zones from BIND instance little bit. In some cases there are auxiliary zones (= not really served zones) in internal Red-Black tree. Current code tries to remove these auxiliary zones on each zone_refresh attempt. Everything works fine,

Re: [Freeipa-devel] [PATCH] 998 certmonger restarts services on renewal

2012-04-03 Thread Rob Crittenden
Martin Kosek wrote: On Mon, 2012-04-02 at 15:36 -0400, Rob Crittenden wrote: Rob Crittenden wrote: Martin Kosek wrote: On Tue, 2012-03-27 at 17:40 -0400, Rob Crittenden wrote: Certmonger will currently automatically renew server certificates but doesn't restart the services so you can still e

Re: [Freeipa-devel] [PATCH] 20 Fix empty external member processing

2012-04-03 Thread Ondrej Hamada
On 04/03/2012 12:22 PM, Ondrej Hamada wrote: https://fedorahosted.org/freeipa/ticket/2447 Validation of external member was failing for empty strings because of wrong condition. ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.red

Re: [Freeipa-devel] [PATCH] 490 Fix s4u2proxy handling when a MS-PAC is available

2012-04-03 Thread Simo Sorce
On Wed, 2012-03-28 at 11:36 +0200, Sumit Bose wrote: > On Tue, Mar 27, 2012 at 03:17:06PM -0400, Simo Sorce wrote: > > This patch fixes #2504, the logic to choose the client principal to use > > was basically reversed, and we ended up using the wrong principal to > > verify the PAC owner. > > > >

[Freeipa-devel] [PATCH] 74 Check configured maximum user login length on user rename

2012-04-03 Thread Jan Cholasta
https://fedorahosted.org/freeipa/ticket/2587 Honza -- Jan Cholasta >From 595e012ae9b6a7f4f6eef7d534dcb9e7c7574144 Mon Sep 17 00:00:00 2001 From: Jan Cholasta Date: Tue, 3 Apr 2012 09:23:39 -0400 Subject: [PATCH] Check configured maximum user login length on user rename. ticket 2587 --- ipalib

Re: [Freeipa-devel] [PATCH] 998 certmonger restarts services on renewal

2012-04-03 Thread Rob Crittenden
Rob Crittenden wrote: Martin Kosek wrote: On Mon, 2012-04-02 at 15:36 -0400, Rob Crittenden wrote: Rob Crittenden wrote: Martin Kosek wrote: On Tue, 2012-03-27 at 17:40 -0400, Rob Crittenden wrote: Certmonger will currently automatically renew server certificates but doesn't restart the serv

Re: [Freeipa-devel] [PATCH] 0042-0048 AD trusts support (master)

2012-04-03 Thread Sumit Bose
On Tue, Apr 03, 2012 at 01:41:35PM +0300, Alexander Bokovoy wrote: > Hi! > > Attached are the current patches for adding support for Active Directory > trusts for FreeIPA v3 (master). > > These are tested and working with samba4 build available in ipa-devel@ > repo. You have to use --delegate unt

Re: [Freeipa-devel] More types of replica in FreeIPA

2012-04-03 Thread Ondrej Hamada
On 03/13/2012 01:13 AM, Dmitri Pal wrote: On 03/12/2012 06:10 PM, Simo Sorce wrote: On Mon, 2012-03-12 at 17:40 -0400, Dmitri Pal wrote: On 03/12/2012 04:16 PM, Simo Sorce wrote: On Mon, 2012-03-12 at 20:38 +0100, Ondrej Hamada wrote: USER'S operations when connection is OK: -

Re: [Freeipa-devel] [PATCH] 20 Fix empty external member processing

2012-04-03 Thread Martin Kosek
On Tue, 2012-04-03 at 15:22 +0200, Ondrej Hamada wrote: > On 04/03/2012 12:22 PM, Ondrej Hamada wrote: > > https://fedorahosted.org/freeipa/ticket/2447 > > > > Validation of external member was failing for empty strings because > > of > > wrong condition. > > > > > > > > ___

Re: [Freeipa-devel] [PATCH] 998 certmonger restarts services on renewal

2012-04-03 Thread Martin Kosek
On Tue, 2012-04-03 at 10:45 -0400, Rob Crittenden wrote: > Rob Crittenden wrote: > > Martin Kosek wrote: > >> On Mon, 2012-04-02 at 15:36 -0400, Rob Crittenden wrote: > >>> Rob Crittenden wrote: > Martin Kosek wrote: > > On Tue, 2012-03-27 at 17:40 -0400, Rob Crittenden wrote: > >> Cer

Re: [Freeipa-devel] [PATCH] 998 certmonger restarts services on renewal

2012-04-03 Thread Rob Crittenden
Martin Kosek wrote: On Tue, 2012-04-03 at 10:45 -0400, Rob Crittenden wrote: Rob Crittenden wrote: Martin Kosek wrote: On Mon, 2012-04-02 at 15:36 -0400, Rob Crittenden wrote: Rob Crittenden wrote: Martin Kosek wrote: On Tue, 2012-03-27 at 17:40 -0400, Rob Crittenden wrote: Certmonger will