Re: [Freeipa-devel] [PATCH] 1008 use mixed-case for dns permission name

2012-04-23 Thread Martin Kosek
On Fri, 2012-04-20 at 11:10 -0400, Rob Crittenden wrote: A new DNS permission that went into 2.2 uses all lower case to be consistent with existing DNS Permissions. This switches it to use mixed case as well. We'll investigate renaming the existing entries as well. rob ACK. Pushed to

Re: [Freeipa-devel] [PATCH] 1009 improve user-status

2012-04-23 Thread Martin Kosek
On Fri, 2012-04-20 at 17:00 -0400, Rob Crittenden wrote: Make some minor improvements to user-status. This beefs up the docs a bit, adds nsaccountlock to the output and includes the time we checked each master. It is a bit of a kludge to put nsaccountlock into the summary but I don't

[Freeipa-devel] [PATCH] 0040 Move install script error handling to a common function

2012-04-23 Thread Petr Viktorin
This fixes https://fedorahosted.org/freeipa/ticket/2071 (Add final debug message in installers). I submitted an earlier version of this patch before (0014), but it was too much to include in 2.2. Hopefully now there's more space for restructuring. I think it's better to start a new thread

Re: [Freeipa-devel] DNS zone serial number updates [#2554]

2012-04-23 Thread Adam Tkac
On Wed, Apr 18, 2012 at 11:53:24AM -0400, Simo Sorce wrote: On Wed, 2012-04-18 at 17:21 +0200, Petr Spacek wrote: If this happens, it is possible that on one of the masters the serial will be updated twice even though no other change was performed on the entry-set. That is not a big

Re: [Freeipa-devel] More types of replica in FreeIPA

2012-04-23 Thread Dmitri Pal
On 04/20/2012 04:29 PM, Simo Sorce wrote: On Fri, 2012-04-20 at 16:09 -0400, Dmitri Pal wrote: I was under the assumption that to be able to wrap things properly you need both user password in clear that you have only at the moment the hashes are created and the key for the branch office

Re: [Freeipa-devel] More types of replica in FreeIPA

2012-04-23 Thread Simo Sorce
On Mon, 2012-04-23 at 09:54 -0400, Dmitri Pal wrote: On 04/20/2012 04:29 PM, Simo Sorce wrote: On Fri, 2012-04-20 at 16:09 -0400, Dmitri Pal wrote: I was under the assumption that to be able to wrap things properly you need both user password in clear that you have only at the moment the

[Freeipa-devel] [PATCH] 76 Refactor exc_callback invocation

2012-04-23 Thread Jan Cholasta
Hi, this patch replaces _call_exc_callbacks with a function wrapper, which will automatically call exception callbacks when an exception is raised from the function. This removes the need to specify the function and its arguments twice (once in the function call itself and once in

Re: [Freeipa-devel] [PATCH] index fqdn and macAddress attributes

2012-04-23 Thread Jan Cholasta
On 16.4.2012 22:32, Nalin Dahyabhai wrote: When we implement ticket #2259, indexing fqdn and macAddress should help the Schema Compatibility and NIS Server plugins locate relevant computer entries more easily. Nalin Please add the indices to install/share/indices.ldif as well. Honza -- Jan

Re: [Freeipa-devel] [PATCH] 0040 Move install script error handling to a common function

2012-04-23 Thread John Dennis
On 04/23/2012 05:19 AM, Petr Viktorin wrote: This fixes https://fedorahosted.org/freeipa/ticket/2071 (Add final debug message in installers). I submitted an earlier version of this patch before (0014), but it was too much to include in 2.2. Hopefully now there's more space for restructuring. I

Re: [Freeipa-devel] [PATCH] add ethers.byname and ethers.byaddr NIS maps

2012-04-23 Thread Jan Cholasta
On 16.4.2012 22:51, Nalin Dahyabhai wrote: The ethers.byname and ethers.byaddr NIS maps pair host names and hardware network addresses. This should close ticket #2259. Nalin Please add this to install/updates/50-nis.update as well. Besides that, ACK on all 3 patches. I have checked only if

Re: [Freeipa-devel] [PATCH] add ethers.byname and ethers.byaddr NIS maps

2012-04-23 Thread Jan Cholasta
On 23.4.2012 17:21, Jan Cholasta wrote: On 16.4.2012 22:51, Nalin Dahyabhai wrote: The ethers.byname and ethers.byaddr NIS maps pair host names and hardware network addresses. This should close ticket #2259. Nalin Please add this to install/updates/50-nis.update as well. Besides that, ACK

Re: [Freeipa-devel] [PATCH] add ethers.byname and ethers.byaddr NIS maps

2012-04-23 Thread Rob Crittenden
Jan Cholasta wrote: On 23.4.2012 17:21, Jan Cholasta wrote: On 16.4.2012 22:51, Nalin Dahyabhai wrote: The ethers.byname and ethers.byaddr NIS maps pair host names and hardware network addresses. This should close ticket #2259. Nalin Please add this to install/updates/50-nis.update as

[Freeipa-devel] have you been running master?

2012-04-23 Thread John Dennis
Just curious, some changes went into master that modified how we call into ldap (for both the installer and normal server operation). But those changes occurred when many of us we working on 2.2 almost exclusively. So has anybody been using master, doing installs, running the server, etc. on a

Re: [Freeipa-devel] have you been running master?

2012-04-23 Thread Jan Cholasta
On 23.4.2012 17:51, John Dennis wrote: Just curious, some changes went into master that modified how we call into ldap (for both the installer and normal server operation). But those changes occurred when many of us we working on 2.2 almost exclusively. So has anybody been using master, doing

[Freeipa-devel] please review ticket #337 - improve CLEANRUV functionality

2012-04-23 Thread Mark Reynolds
https://fedorahosted.org/389/ticket/337 https://fedorahosted.org/389/attachment/ticket/337/0001-Ticket-337-RFE-Improve-CLEANRUV-functionality.patch Previously the steps to remove a replica and its RUV was problematic. I created two new tasks to take care of the entire replication environment.

Re: [Freeipa-devel] have you been running master?

2012-04-23 Thread John Dennis
On 04/23/2012 12:00 PM, Jan Cholasta wrote: On 23.4.2012 17:51, John Dennis wrote: Just curious, some changes went into master that modified how we call into ldap (for both the installer and normal server operation). But those changes occurred when many of us we working on 2.2 almost

Re: [Freeipa-devel] have you been running master?

2012-04-23 Thread Sumit Bose
On Mon, Apr 23, 2012 at 11:51:09AM -0400, John Dennis wrote: Just curious, some changes went into master that modified how we call into ldap (for both the installer and normal server operation). But those changes occurred when many of us we working on 2.2 almost exclusively. So has anybody

Re: [Freeipa-devel] [PATCH] 76 Refactor exc_callback invocation

2012-04-23 Thread Petr Viktorin
On 04/23/2012 04:33 PM, Jan Cholasta wrote: Hi, this patch replaces _call_exc_callbacks with a function wrapper, which will automatically call exception callbacks when an exception is raised from the function. This removes the need to specify the function and its arguments twice (once in the

Re: [Freeipa-devel] More types of replica in FreeIPA

2012-04-23 Thread Dmitri Pal
On 04/23/2012 10:02 AM, Simo Sorce wrote: On Mon, 2012-04-23 at 09:54 -0400, Dmitri Pal wrote: On 04/20/2012 04:29 PM, Simo Sorce wrote: On Fri, 2012-04-20 at 16:09 -0400, Dmitri Pal wrote: I was under the assumption that to be able to wrap things properly you need both user password in

Re: [Freeipa-devel] More types of replica in FreeIPA

2012-04-23 Thread Simo Sorce
On Mon, 2012-04-23 at 13:04 -0400, Dmitri Pal wrote: On 04/23/2012 10:02 AM, Simo Sorce wrote: On Mon, 2012-04-23 at 09:54 -0400, Dmitri Pal wrote: On 04/20/2012 04:29 PM, Simo Sorce wrote: On Fri, 2012-04-20 at 16:09 -0400, Dmitri Pal wrote: I was under the assumption that to be able

Re: [Freeipa-devel] More types of replica in FreeIPA

2012-04-23 Thread Dmitri Pal
On 04/23/2012 01:35 PM, Simo Sorce wrote: On Mon, 2012-04-23 at 13:04 -0400, Dmitri Pal wrote: On 04/23/2012 10:02 AM, Simo Sorce wrote: On Mon, 2012-04-23 at 09:54 -0400, Dmitri Pal wrote: On 04/20/2012 04:29 PM, Simo Sorce wrote: On Fri, 2012-04-20 at 16:09 -0400, Dmitri Pal wrote: I was

Re: [Freeipa-devel] More types of replica in FreeIPA

2012-04-23 Thread Simo Sorce
On Mon, 2012-04-23 at 13:50 -0400, Dmitri Pal wrote: Ah OK. Another semantic difference. Doing it in phases is one thing and delivering is another. Let us say we identified 10 things that needs to be implemented. The problem is so huge that Ondrej would likely be able to tackle only couple

Re: [Freeipa-devel] [PATCH] compat ieee802Device entries for ipaHost entries

2012-04-23 Thread Nalin Dahyabhai
On Mon, Apr 23, 2012 at 05:03:28PM +0200, Jan Cholasta wrote: On 16.4.2012 22:39, Nalin Dahyabhai wrote: This bit of configuration creates a cn=computers area under cn=compat which we populate with ieee802Device entries corresponding to any ipaHost entries which have both fqdn and macAddress

Re: [Freeipa-devel] [PATCH] index fqdn and macAddress attributes

2012-04-23 Thread Nalin Dahyabhai
On Mon, Apr 23, 2012 at 04:40:11PM +0200, Jan Cholasta wrote: On 16.4.2012 22:32, Nalin Dahyabhai wrote: When we implement ticket #2259, indexing fqdn and macAddress should help the Schema Compatibility and NIS Server plugins locate relevant computer entries more easily. Please add the

Re: [Freeipa-devel] [PATCH] add ethers.byname and ethers.byaddr NIS maps

2012-04-23 Thread Nalin Dahyabhai
On Mon, Apr 23, 2012 at 05:40:27PM +0200, Jan Cholasta wrote: On 23.4.2012 17:21, Jan Cholasta wrote: On 16.4.2012 22:51, Nalin Dahyabhai wrote: The ethers.byname and ethers.byaddr NIS maps pair host names and hardware network addresses. This should close ticket #2259. Please add this to