[Freeipa-devel] [PATCH] Fix various typos

2012-09-17 Thread Martin Kosek
ACK for typo fixes made by Yuri Chornoivan (patch attached). Pushed to master, ipa-3-0. Martin From c1b421a6bfdf0d0b2eec8aed409b720c6e1ab783 Mon Sep 17 00:00:00 2001 From: Yuri Chornoivan Date: Sun, 16 Sep 2012 19:35:56 +0300 Subject: [PATCH] Fix various typos. https://fedorahosted.org/freeipa/

Re: [Freeipa-devel] [PATCH] 212 Fix integer validation when boundary value is empty string

2012-09-17 Thread Endi Sukma Dewata
On 9/11/2012 10:09 AM, Petr Vobornik wrote: There was an error in number validation check. If boundary value was an empty string, validation of a number always failed. This patch fixes the problem by not performing the check in these cases. Basic unit tests for IPA.metadata_validator created.

Re: [Freeipa-devel] [PATCH] 214 Fix jquery error when using '??' in a pkey

2012-09-17 Thread Endi Sukma Dewata
On 9/14/2012 8:00 AM, Petr Vobornik wrote: This patch is only for FreeIPA 2.2. It is already fixed in 3.0. If '??' is used in a adder dialog as a pkey it can cause "jQuery15208158273949015573_1346241267446 was not called" error. Update of jquery library fixes the issue. Update reveals an incorr

Re: [Freeipa-devel] [PATCH] 302 Stricter IP network validator in dnszone-add command

2012-09-17 Thread Rob Crittenden
Martin Kosek wrote: On 09/05/2012 01:02 PM, Jan Cholasta wrote: Dne 5.9.2012 12:48, Martin Kosek napsal(a): On 09/05/2012 12:36 PM, Jan Cholasta wrote: Dne 5.9.2012 12:22, Petr Spacek napsal(a): On 09/05/2012 11:30 AM, Jan Cholasta wrote: Dne 5.9.2012 10:04, Martin Kosek napsal(a): We allow

Re: [Freeipa-devel] [PATCH] 0077 Check direct/reverse hostname/address resolution in ipa-replica-install

2012-09-17 Thread Rob Crittenden
Petr Viktorin wrote: On 09/14/2012 08:46 AM, Martin Kosek wrote: On 09/13/2012 10:35 PM, Rob Crittenden wrote: Petr Viktorin wrote: On 09/11/2012 11:05 PM, Rob Crittenden wrote: Petr Viktorin wrote: On 09/04/2012 07:44 PM, Rob Crittenden wrote: Petr Viktorin wrote: https://fedorahosted.or

Re: [Freeipa-devel] [PATCH] 0079 Update the pot file (translation source)

2012-09-17 Thread Jérôme Fenal
2012/9/17 Petr Viktorin > On 09/14/2012 09:36 PM, Jérôme Fenal wrote: > >> 2012/9/14 Petr Viktorin mailto:pvikt...@redhat.com >> >> >> > > I pushed the pot manually. >> Since we have infrequent explicit string freezes I don't think it's >> necessary to configure automatic pot updates

Re: [Freeipa-devel] [PATCH] 1050 prevent replica orphans

2012-09-17 Thread Martin Kosek
On 09/17/2012 04:06 PM, Martin Kosek wrote: > On 09/14/2012 09:16 PM, Rob Crittenden wrote: >> Martin Kosek wrote: >>> On 09/10/2012 08:34 PM, Rob Crittenden wrote: Martin Kosek wrote: > On Thu, 2012-09-06 at 17:22 -0400, Rob Crittenden wrote: >> Martin Kosek wrote: >>> On 08/31/20

Re: [Freeipa-devel] [PATCH] 1031 run cleanallruv task

2012-09-17 Thread Martin Kosek
On 09/17/2012 04:15 PM, Rob Crittenden wrote: > Martin Kosek wrote: >> On 09/17/2012 04:04 PM, Rob Crittenden wrote: >>> Martin Kosek wrote: On 09/14/2012 09:17 PM, Rob Crittenden wrote: > Martin Kosek wrote: >> On 09/06/2012 11:17 PM, Rob Crittenden wrote: >>> Martin Kosek wrote:

[Freeipa-devel] [PATCH] 0073 Add trust verification code

2012-09-17 Thread Alexander Bokovoy
Hi, Following patch adds trust verification sequence to the case when we establish trust with knowledge of AD administrative credentials. As we found out, in order to validate/verify trust, one has to have administrative credentials for the trusted domain, since there are few RPCs that should be

Re: [Freeipa-devel] [PATCH] Patch to allow IPA to work with dogtag 10 on f18

2012-09-17 Thread Ade Lee
On Mon, 2012-09-17 at 14:32 +0200, Petr Viktorin wrote: > On 09/14/2012 11:19 PM, Rob Crittenden wrote: > > Petr Viktorin wrote: > >> On 09/12/2012 06:40 PM, Petr Viktorin wrote: > >>> A new Dogtag build with changed pkispawn/pkidestroy locations should be > >>> out later today. The attached patch

Re: [Freeipa-devel] [PATCH] 305-308 Expand Referential Integrity checks

2012-09-17 Thread Rob Crittenden
Martin Kosek wrote: On 09/13/2012 06:40 PM, Rob Crittenden wrote: Martin Kosek wrote: To test, add sudo commands, hosts or users to a sudo rule or hbac rule and then rename or delete the linked object. After the update, the links should be amended. - Many attributes in IPA (e.g. manag

Re: [Freeipa-devel] [PATCH] 309 Fix addattr internal error

2012-09-17 Thread Rob Crittenden
Martin Kosek wrote: On 09/13/2012 09:19 PM, Rob Crittenden wrote: Martin Kosek wrote: When ADD command is being executed and a single-value object attribute is being set with both option and addattr IPA ends up in an internal error. Make better value sanitizing job in this case and let IPA thr

[Freeipa-devel] [PATCH 0064] Improve log message about improperly formated Resource Records

2012-09-17 Thread Petr Spacek
Hello, this patch adds DN to log message about improperly formated Resource Records. Petr^2 Spacek From d36ae54c593c33a45ef9936720357ff7de30c8b5 Mon Sep 17 00:00:00 2001 From: Petr Spacek Date: Mon, 17 Sep 2012 17:01:41 +0200 Subject: [PATCH] Improve log message about improperly formated Resour

Re: [Freeipa-devel] [PATCH] Patch to allow IPA to work with dogtag 10 on f18

2012-09-17 Thread Ade Lee
On Mon, 2012-09-17 at 14:32 +0200, Petr Viktorin wrote: > On 09/14/2012 11:19 PM, Rob Crittenden wrote: > > Petr Viktorin wrote: > >> On 09/12/2012 06:40 PM, Petr Viktorin wrote: > >>> A new Dogtag build with changed pkispawn/pkidestroy locations should be > >>> out later today. The attached patch

Re: [Freeipa-devel] [PATCH] 1031 run cleanallruv task

2012-09-17 Thread Rob Crittenden
Martin Kosek wrote: On 09/17/2012 04:04 PM, Rob Crittenden wrote: Martin Kosek wrote: On 09/14/2012 09:17 PM, Rob Crittenden wrote: Martin Kosek wrote: On 09/06/2012 11:17 PM, Rob Crittenden wrote: Martin Kosek wrote: On 09/06/2012 05:55 PM, Rob Crittenden wrote: Rob Crittenden wrote: Rob

Re: [Freeipa-devel] [PATCH] 1031 run cleanallruv task

2012-09-17 Thread Martin Kosek
On 09/17/2012 04:04 PM, Rob Crittenden wrote: > Martin Kosek wrote: >> On 09/14/2012 09:17 PM, Rob Crittenden wrote: >>> Martin Kosek wrote: On 09/06/2012 11:17 PM, Rob Crittenden wrote: > Martin Kosek wrote: >> On 09/06/2012 05:55 PM, Rob Crittenden wrote: >>> Rob Crittenden wrote

Re: [Freeipa-devel] [PATCH] 1050 prevent replica orphans

2012-09-17 Thread Martin Kosek
On 09/14/2012 09:16 PM, Rob Crittenden wrote: > Martin Kosek wrote: >> On 09/10/2012 08:34 PM, Rob Crittenden wrote: >>> Martin Kosek wrote: On Thu, 2012-09-06 at 17:22 -0400, Rob Crittenden wrote: > Martin Kosek wrote: >> On 08/31/2012 07:40 PM, Rob Crittenden wrote: >>> Rob Critt

Re: [Freeipa-devel] [PATCH] 1031 run cleanallruv task

2012-09-17 Thread Rob Crittenden
Martin Kosek wrote: On 09/14/2012 09:17 PM, Rob Crittenden wrote: Martin Kosek wrote: On 09/06/2012 11:17 PM, Rob Crittenden wrote: Martin Kosek wrote: On 09/06/2012 05:55 PM, Rob Crittenden wrote: Rob Crittenden wrote: Rob Crittenden wrote: Martin Kosek wrote: On 09/05/2012 08:06 PM, Rob

[Freeipa-devel] [PATCH 0063] Notify DNS slaves if zone serial number modification was detected.

2012-09-17 Thread Petr Spacek
Hello, this patch adds missing notification to DNS slaves if zone serial number modification was detected. Petr^2 Spacek From eb8d7fc0c02e03b9c7c90e497225536c449fab1c Mon Sep 17 00:00:00 2001 From: Petr Spacek Date: Mon, 17 Sep 2012 14:29:45 +0200 Subject: [PATCH] Notify DNS slaves if zone se

Re: [Freeipa-devel] [PATCH] Patch to allow IPA to work with dogtag 10 on f18

2012-09-17 Thread Petr Viktorin
On 09/14/2012 11:19 PM, Rob Crittenden wrote: Petr Viktorin wrote: On 09/12/2012 06:40 PM, Petr Viktorin wrote: A new Dogtag build with changed pkispawn/pkidestroy locations should be out later today. The attached patch should work with that build. Fresh install is failing in F-18. ki-tools-

Re: [Freeipa-devel] [PATCH] 0077 Check direct/reverse hostname/address resolution in ipa-replica-install

2012-09-17 Thread Petr Viktorin
On 09/14/2012 08:46 AM, Martin Kosek wrote: On 09/13/2012 10:35 PM, Rob Crittenden wrote: Petr Viktorin wrote: On 09/11/2012 11:05 PM, Rob Crittenden wrote: Petr Viktorin wrote: On 09/04/2012 07:44 PM, Rob Crittenden wrote: Petr Viktorin wrote: https://fedorahosted.org/freeipa/ticket/2845

Re: [Freeipa-devel] IPA server resolv.conf

2012-09-17 Thread Sumit Bose
On Mon, Sep 17, 2012 at 11:18:53AM +0200, Petr Spacek wrote: > On 09/17/2012 09:15 AM, Martin Kosek wrote: > >On 09/17/2012 09:06 AM, Petr Spacek wrote: > >>Discussion about patch "Set master_kdc and dns_lookup_kdc to true)" reminds > >>one > >>related problem: > >> > >>Our server installer puts l

Re: [Freeipa-devel] [PATCH] Set master_kdc and dns_lookup_kdc to true

2012-09-17 Thread Sumit Bose
On Sat, Sep 15, 2012 at 06:14:56PM -0400, Simo Sorce wrote: > On Sat, 2012-09-15 at 22:02 +0200, Sumit Bose wrote: > > On Fri, Sep 14, 2012 at 05:57:23PM -0400, Rob Crittenden wrote: > > > Sumit Bose wrote: > > > >Hi, > > > > > > > >those two patches should fix > > > >https://fedorahosted.org/freei

Re: [Freeipa-devel] IPA server resolv.conf

2012-09-17 Thread Petr Spacek
On 09/17/2012 09:15 AM, Martin Kosek wrote: On 09/17/2012 09:06 AM, Petr Spacek wrote: Discussion about patch "Set master_kdc and dns_lookup_kdc to true)" reminds one related problem: Our server installer puts line "nameserver 127.0.0.1" to /etc/resolv.conf, but this file should contain all (or

Re: [Freeipa-devel] [PATCH] 1031 run cleanallruv task

2012-09-17 Thread Martin Kosek
On 09/14/2012 09:17 PM, Rob Crittenden wrote: > Martin Kosek wrote: >> On 09/06/2012 11:17 PM, Rob Crittenden wrote: >>> Martin Kosek wrote: On 09/06/2012 05:55 PM, Rob Crittenden wrote: > Rob Crittenden wrote: >> Rob Crittenden wrote: >>> Martin Kosek wrote: On 09/05/2012

Re: [Freeipa-devel] [PATCH] 0079 Update the pot file (translation source)

2012-09-17 Thread Petr Viktorin
On 09/14/2012 09:36 PM, Jérôme Fenal wrote: 2012/9/14 Petr Viktorin mailto:pvikt...@redhat.com>> I pushed the pot manually. Since we have infrequent explicit string freezes I don't think it's necessary to configure automatic pot updates again. Thanks Petr! Actually, having the s

Re: [Freeipa-devel] IPA server resolv.conf

2012-09-17 Thread Martin Kosek
On 09/17/2012 09:06 AM, Petr Spacek wrote: > Discussion about patch "Set master_kdc and dns_lookup_kdc to true)" reminds > one > related problem: > > Our server installer puts line "nameserver 127.0.0.1" to /etc/resolv.conf, but > this file should contain all (or three nearest) DNS servers in IPA

[Freeipa-devel] IPA server resolv.conf (was: [PATCH] Set master_kdc and dns_lookup_kdc to true)

2012-09-17 Thread Petr Spacek
Discussion about patch "Set master_kdc and dns_lookup_kdc to true)" reminds one related problem: Our server installer puts line "nameserver 127.0.0.1" to /etc/resolv.conf, but this file should contain all (or three nearest) DNS servers in IPA domain. As a result, IPA server will work even aft