Re: [Freeipa-devel] IPA server resolv.conf

2012-09-17 Thread Martin Kosek
On 09/17/2012 09:06 AM, Petr Spacek wrote: Discussion about patch Set master_kdc and dns_lookup_kdc to true) reminds one related problem: Our server installer puts line nameserver 127.0.0.1 to /etc/resolv.conf, but this file should contain all (or three nearest) DNS servers in IPA domain.

Re: [Freeipa-devel] [PATCH] 0079 Update the pot file (translation source)

2012-09-17 Thread Petr Viktorin
On 09/14/2012 09:36 PM, Jérôme Fenal wrote: 2012/9/14 Petr Viktorin pvikt...@redhat.com mailto:pvikt...@redhat.com I pushed the pot manually. Since we have infrequent explicit string freezes I don't think it's necessary to configure automatic pot updates again. Thanks Petr!

Re: [Freeipa-devel] IPA server resolv.conf

2012-09-17 Thread Petr Spacek
On 09/17/2012 09:15 AM, Martin Kosek wrote: On 09/17/2012 09:06 AM, Petr Spacek wrote: Discussion about patch Set master_kdc and dns_lookup_kdc to true) reminds one related problem: Our server installer puts line nameserver 127.0.0.1 to /etc/resolv.conf, but this file should contain all (or

Re: [Freeipa-devel] [PATCH] Set master_kdc and dns_lookup_kdc to true

2012-09-17 Thread Sumit Bose
On Sat, Sep 15, 2012 at 06:14:56PM -0400, Simo Sorce wrote: On Sat, 2012-09-15 at 22:02 +0200, Sumit Bose wrote: On Fri, Sep 14, 2012 at 05:57:23PM -0400, Rob Crittenden wrote: Sumit Bose wrote: Hi, those two patches should fix https://fedorahosted.org/freeipa/ticket/2515 . The

Re: [Freeipa-devel] IPA server resolv.conf

2012-09-17 Thread Sumit Bose
On Mon, Sep 17, 2012 at 11:18:53AM +0200, Petr Spacek wrote: On 09/17/2012 09:15 AM, Martin Kosek wrote: On 09/17/2012 09:06 AM, Petr Spacek wrote: Discussion about patch Set master_kdc and dns_lookup_kdc to true) reminds one related problem: Our server installer puts line nameserver

Re: [Freeipa-devel] [PATCH] 0077 Check direct/reverse hostname/address resolution in ipa-replica-install

2012-09-17 Thread Petr Viktorin
On 09/14/2012 08:46 AM, Martin Kosek wrote: On 09/13/2012 10:35 PM, Rob Crittenden wrote: Petr Viktorin wrote: On 09/11/2012 11:05 PM, Rob Crittenden wrote: Petr Viktorin wrote: On 09/04/2012 07:44 PM, Rob Crittenden wrote: Petr Viktorin wrote: https://fedorahosted.org/freeipa/ticket/2845

Re: [Freeipa-devel] [PATCH] Patch to allow IPA to work with dogtag 10 on f18

2012-09-17 Thread Petr Viktorin
On 09/14/2012 11:19 PM, Rob Crittenden wrote: Petr Viktorin wrote: On 09/12/2012 06:40 PM, Petr Viktorin wrote: A new Dogtag build with changed pkispawn/pkidestroy locations should be out later today. The attached patch should work with that build. Fresh install is failing in F-18.

[Freeipa-devel] [PATCH 0063] Notify DNS slaves if zone serial number modification was detected.

2012-09-17 Thread Petr Spacek
Hello, this patch adds missing notification to DNS slaves if zone serial number modification was detected. Petr^2 Spacek From eb8d7fc0c02e03b9c7c90e497225536c449fab1c Mon Sep 17 00:00:00 2001 From: Petr Spacek pspa...@redhat.com Date: Mon, 17 Sep 2012 14:29:45 +0200 Subject: [PATCH] Notify

Re: [Freeipa-devel] [PATCH] 1050 prevent replica orphans

2012-09-17 Thread Martin Kosek
On 09/14/2012 09:16 PM, Rob Crittenden wrote: Martin Kosek wrote: On 09/10/2012 08:34 PM, Rob Crittenden wrote: Martin Kosek wrote: On Thu, 2012-09-06 at 17:22 -0400, Rob Crittenden wrote: Martin Kosek wrote: On 08/31/2012 07:40 PM, Rob Crittenden wrote: Rob Crittenden wrote: It was

Re: [Freeipa-devel] [PATCH] 1031 run cleanallruv task

2012-09-17 Thread Martin Kosek
On 09/17/2012 04:04 PM, Rob Crittenden wrote: Martin Kosek wrote: On 09/14/2012 09:17 PM, Rob Crittenden wrote: Martin Kosek wrote: On 09/06/2012 11:17 PM, Rob Crittenden wrote: Martin Kosek wrote: On 09/06/2012 05:55 PM, Rob Crittenden wrote: Rob Crittenden wrote: Rob Crittenden wrote:

Re: [Freeipa-devel] [PATCH] 1031 run cleanallruv task

2012-09-17 Thread Rob Crittenden
Martin Kosek wrote: On 09/17/2012 04:04 PM, Rob Crittenden wrote: Martin Kosek wrote: On 09/14/2012 09:17 PM, Rob Crittenden wrote: Martin Kosek wrote: On 09/06/2012 11:17 PM, Rob Crittenden wrote: Martin Kosek wrote: On 09/06/2012 05:55 PM, Rob Crittenden wrote: Rob Crittenden wrote:

Re: [Freeipa-devel] [PATCH] Patch to allow IPA to work with dogtag 10 on f18

2012-09-17 Thread Ade Lee
On Mon, 2012-09-17 at 14:32 +0200, Petr Viktorin wrote: On 09/14/2012 11:19 PM, Rob Crittenden wrote: Petr Viktorin wrote: On 09/12/2012 06:40 PM, Petr Viktorin wrote: A new Dogtag build with changed pkispawn/pkidestroy locations should be out later today. The attached patch should work

[Freeipa-devel] [PATCH 0064] Improve log message about improperly formated Resource Records

2012-09-17 Thread Petr Spacek
Hello, this patch adds DN to log message about improperly formated Resource Records. Petr^2 Spacek From d36ae54c593c33a45ef9936720357ff7de30c8b5 Mon Sep 17 00:00:00 2001 From: Petr Spacek pspa...@redhat.com Date: Mon, 17 Sep 2012 17:01:41 +0200 Subject: [PATCH] Improve log message about

Re: [Freeipa-devel] [PATCH] 309 Fix addattr internal error

2012-09-17 Thread Rob Crittenden
Martin Kosek wrote: On 09/13/2012 09:19 PM, Rob Crittenden wrote: Martin Kosek wrote: When ADD command is being executed and a single-value object attribute is being set with both option and addattr IPA ends up in an internal error. Make better value sanitizing job in this case and let IPA

Re: [Freeipa-devel] [PATCH] 305-308 Expand Referential Integrity checks

2012-09-17 Thread Rob Crittenden
Martin Kosek wrote: On 09/13/2012 06:40 PM, Rob Crittenden wrote: Martin Kosek wrote: To test, add sudo commands, hosts or users to a sudo rule or hbac rule and then rename or delete the linked object. After the update, the links should be amended. - Many attributes in IPA (e.g.

Re: [Freeipa-devel] [PATCH] Patch to allow IPA to work with dogtag 10 on f18

2012-09-17 Thread Ade Lee
On Mon, 2012-09-17 at 14:32 +0200, Petr Viktorin wrote: On 09/14/2012 11:19 PM, Rob Crittenden wrote: Petr Viktorin wrote: On 09/12/2012 06:40 PM, Petr Viktorin wrote: A new Dogtag build with changed pkispawn/pkidestroy locations should be out later today. The attached patch should work

[Freeipa-devel] [PATCH] 0073 Add trust verification code

2012-09-17 Thread Alexander Bokovoy
Hi, Following patch adds trust verification sequence to the case when we establish trust with knowledge of AD administrative credentials. As we found out, in order to validate/verify trust, one has to have administrative credentials for the trusted domain, since there are few RPCs that should

Re: [Freeipa-devel] [PATCH] 1031 run cleanallruv task

2012-09-17 Thread Martin Kosek
On 09/17/2012 04:15 PM, Rob Crittenden wrote: Martin Kosek wrote: On 09/17/2012 04:04 PM, Rob Crittenden wrote: Martin Kosek wrote: On 09/14/2012 09:17 PM, Rob Crittenden wrote: Martin Kosek wrote: On 09/06/2012 11:17 PM, Rob Crittenden wrote: Martin Kosek wrote: On 09/06/2012 05:55 PM,

Re: [Freeipa-devel] [PATCH] 1050 prevent replica orphans

2012-09-17 Thread Martin Kosek
On 09/17/2012 04:06 PM, Martin Kosek wrote: On 09/14/2012 09:16 PM, Rob Crittenden wrote: Martin Kosek wrote: On 09/10/2012 08:34 PM, Rob Crittenden wrote: Martin Kosek wrote: On Thu, 2012-09-06 at 17:22 -0400, Rob Crittenden wrote: Martin Kosek wrote: On 08/31/2012 07:40 PM, Rob Crittenden

Re: [Freeipa-devel] [PATCH] 0079 Update the pot file (translation source)

2012-09-17 Thread Jérôme Fenal
2012/9/17 Petr Viktorin pvikt...@redhat.com On 09/14/2012 09:36 PM, Jérôme Fenal wrote: 2012/9/14 Petr Viktorin pvikt...@redhat.com mailto:pvikt...@redhat.com I pushed the pot manually. Since we have infrequent explicit string freezes I don't think it's necessary to

Re: [Freeipa-devel] [PATCH] 0077 Check direct/reverse hostname/address resolution in ipa-replica-install

2012-09-17 Thread Rob Crittenden
Petr Viktorin wrote: On 09/14/2012 08:46 AM, Martin Kosek wrote: On 09/13/2012 10:35 PM, Rob Crittenden wrote: Petr Viktorin wrote: On 09/11/2012 11:05 PM, Rob Crittenden wrote: Petr Viktorin wrote: On 09/04/2012 07:44 PM, Rob Crittenden wrote: Petr Viktorin wrote:

Re: [Freeipa-devel] [PATCH] 302 Stricter IP network validator in dnszone-add command

2012-09-17 Thread Rob Crittenden
Martin Kosek wrote: On 09/05/2012 01:02 PM, Jan Cholasta wrote: Dne 5.9.2012 12:48, Martin Kosek napsal(a): On 09/05/2012 12:36 PM, Jan Cholasta wrote: Dne 5.9.2012 12:22, Petr Spacek napsal(a): On 09/05/2012 11:30 AM, Jan Cholasta wrote: Dne 5.9.2012 10:04, Martin Kosek napsal(a): We

Re: [Freeipa-devel] [PATCH] 212 Fix integer validation when boundary value is empty string

2012-09-17 Thread Endi Sukma Dewata
On 9/11/2012 10:09 AM, Petr Vobornik wrote: There was an error in number validation check. If boundary value was an empty string, validation of a number always failed. This patch fixes the problem by not performing the check in these cases. Basic unit tests for IPA.metadata_validator created.

Re: [Freeipa-devel] [PATCH] 214 Fix jquery error when using '??' in a pkey

2012-09-17 Thread Endi Sukma Dewata
On 9/14/2012 8:00 AM, Petr Vobornik wrote: This patch is only for FreeIPA 2.2. It is already fixed in 3.0. If '??' is used in a adder dialog as a pkey it can cause jQuery15208158273949015573_1346241267446 was not called error. Update of jquery library fixes the issue. Update reveals an