Re: [Freeipa-devel] [PATCH] 258 Remove LDAP limits from DNS service

2012-05-22 Thread Petr Viktorin
On 05/10/2012 09:31 AM, Martin Kosek wrote: bind-dyndb-ldap persistent search queries LDAP for all DNS records. The LDAP connection must have no size or time limits to work properly. This patch updates limits both for existing service principal on updated machine and for new service principals a

Re: [Freeipa-devel] [PATCH] 258 Remove LDAP limits from DNS service

2012-05-22 Thread Martin Kosek
On Tue, 2012-05-22 at 12:15 +0200, Petr Viktorin wrote: > On 05/10/2012 09:31 AM, Martin Kosek wrote: > > bind-dyndb-ldap persistent search queries LDAP for all DNS records. > > The LDAP connection must have no size or time limits to work > > properly. > > > > This patch updates limits both for exi

[Freeipa-devel] [PATCH] 25 ipa-server-install: s/calculated/determined/

2012-05-22 Thread Ondrej Hamada
https://fedorahosted.org/freeipa/ticket/2704 Output message of the 'read_domain_name' function in ipa-server-install was reworded. -- Regards, Ondrej Hamada FreeIPA team jabber: oh...@jabbim.cz IRC: ohamada From 4a7eda9b2a97b10ee0767696406fda09c1a9de86 Mon Sep 17 00:00:00 2001 From: Ondrej Ham

Re: [Freeipa-devel] [PATCH] 260 Replace DNS client based on acutil with python-dns

2012-05-22 Thread Petr Viktorin
On 05/16/2012 09:44 AM, Martin Kosek wrote: On Tue, 2012-05-15 at 14:02 +0200, Petr Viktorin wrote: > On 05/11/2012 06:52 PM, Martin Kosek wrote: > > python-dns is very feature-rich and it can help us a lot with our DNS > > related code. This patch does the first step, i.e. replaces acutil

Re: [Freeipa-devel] [PATCH] 25 ipa-server-install: s/calculated/determined/

2012-05-22 Thread Petr Viktorin
On 05/22/2012 12:38 PM, Ondrej Hamada wrote: https://fedorahosted.org/freeipa/ticket/2704 Output message of the 'read_domain_name' function in ipa-server-install was reworded. ACK -- Petr³ ___ Freeipa-devel mailing list Freeipa-devel@redhat.com h

Re: [Freeipa-devel] [PATCH] 1018 enforce sizelimit when searching for permissions

2012-05-22 Thread Martin Kosek
On Fri, 2012-05-18 at 10:17 -0400, Rob Crittenden wrote: > Rob Crittenden wrote: > > Martin Kosek wrote: > >> On Thu, 2012-05-17 at 16:11 -0400, Rob Crittenden wrote: > >>> We do two searches when looking for permissions. One within the > >>> permission object itself and a second in the ACIs. We we

Re: [Freeipa-devel] [PATCH] 25 ipa-server-install: s/calculated/determined/

2012-05-22 Thread Martin Kosek
On Tue, 2012-05-22 at 14:50 +0200, Petr Viktorin wrote: > On 05/22/2012 12:38 PM, Ondrej Hamada wrote: > > https://fedorahosted.org/freeipa/ticket/2704 > > > > Output message of the 'read_domain_name' function in ipa-server-install > > was reworded. > > > > ACK > > Pushed to master. Martin __

Re: [Freeipa-devel] [PATCH] 1019 require policycoreutils if SELinux is enabled

2012-05-22 Thread Petr Viktorin
On 2012-05-18 17:53, Rob Crittenden wrote: We don't have an explicit requires on the policycoreutils package in the client because SELinux is not required (just recommended). SELinux can be enabled without this package so check for that condition and don't allow installation if it is the case. T

Re: [Freeipa-devel] [PATCH] 0040 Move install script error handling to a common function

2012-05-22 Thread Petr Viktorin
On 2012-04-23 17:05, John Dennis wrote: On 04/23/2012 05:19 AM, Petr Viktorin wrote: This fixes https://fedorahosted.org/freeipa/ticket/2071 (Add final debug message in installers). I submitted an earlier version of this patch before (0014), but it was too much to include in 2.2. Hopefully now

Re: [Freeipa-devel] [PATCH] 1018 enforce sizelimit when searching for permissions

2012-05-22 Thread Rob Crittenden
Martin Kosek wrote: On Fri, 2012-05-18 at 10:17 -0400, Rob Crittenden wrote: Rob Crittenden wrote: Martin Kosek wrote: On Thu, 2012-05-17 at 16:11 -0400, Rob Crittenden wrote: We do two searches when looking for permissions. One within the permission object itself and a second in the ACIs. We