Re: [Freeipa-devel] [PATCHES] 102-104 Remove DN normalization

2013-02-04 Thread Jan Cholasta
On 4.2.2013 17:35, Petr Viktorin wrote: On 02/04/2013 02:31 PM, Jan Cholasta wrote: Hi, this patchset removes DN normalization code from the framework. Full DNs including the configured suffix are used instead and must be used in new code. Honza Hooray for less magic! I've applied the patc

Re: [Freeipa-devel] [PATCH] 1083 improve migration performance

2013-02-04 Thread Rob Crittenden
Martin Kosek wrote: On 02/01/2013 04:21 PM, Rob Crittenden wrote: I did some analysis on migration and found several areas impacting performance: 1. We were calling user_mod to reset the magic value in description to not create a UPG. This caused a lot of unnecessary queries to display the user

Re: [Freeipa-devel] [PATCH 0110] Fix crash during per-zone cache flush

2013-02-04 Thread Petr Spacek
On 4.2.2013 17:45, Adam Tkac wrote: On Mon, Feb 04, 2013 at 05:37:05PM +0100, Petr Spacek wrote: >Hello, > > Fix crash during per-zone cache flush. > > https://fedorahosted.org/bind-dyndb-ldap/ticket/107 Ack, thanks for the patch. Pushed to master and v2: 42edc724eedd401bd1b1e06f1b1c6ef2ad87

Re: [Freeipa-devel] [PATCH] 362 Add LDAP server fallback to client installer

2013-02-04 Thread Rob Crittenden
Martin Kosek wrote: When ipa-client-install is run without --server option, it tries to search SRV records for IPA/LDAP server hostname, but it returns only the first record found and when the LDAP server on that hostname is not available, the whole client installation fails. Get all LDAP SRV re

Re: [Freeipa-devel] [PATCH 0027] Add checks for SELinux in install scripts

2013-02-04 Thread Tomas Babej
On 02/04/2013 04:21 PM, Rob Crittenden wrote: Tomas Babej wrote: On 01/30/2013 05:12 PM, Tomas Babej wrote: Hi, The checks make sure that SELinux is: - installed and enabled (on server install) - installed and enabled OR not installed (on client install) Please note that client installs w

Re: [Freeipa-devel] [PATCH 0110] Fix crash during per-zone cache flush

2013-02-04 Thread Adam Tkac
On Mon, Feb 04, 2013 at 05:37:05PM +0100, Petr Spacek wrote: > Hello, > > Fix crash during per-zone cache flush. > > https://fedorahosted.org/bind-dyndb-ldap/ticket/107 Ack, thanks for the patch. Regards, Adam > From 42edc724eedd401bd1b1e06f1b1c6ef2ad878ed2 Mon Sep 17 00:00:00 2001 > From: P

[Freeipa-devel] [PATCH 0110] Fix crash during per-zone cache flush

2013-02-04 Thread Petr Spacek
Hello, Fix crash during per-zone cache flush. https://fedorahosted.org/bind-dyndb-ldap/ticket/107 -- Petr^2 Spacek From 42edc724eedd401bd1b1e06f1b1c6ef2ad878ed2 Mon Sep 17 00:00:00 2001 From: Petr Spacek Date: Mon, 4 Feb 2013 17:35:24 +0100 Subject: [PATCH] Fix crash during per-zone cache fl

Re: [Freeipa-devel] [PATCHES] 102-104 Remove DN normalization

2013-02-04 Thread Petr Viktorin
On 02/04/2013 02:31 PM, Jan Cholasta wrote: Hi, this patchset removes DN normalization code from the framework. Full DNs including the configured suffix are used instead and must be used in new code. Honza Hooray for less magic! I've applied the patches on top of 98-101 (i.e. on top of the

[Freeipa-devel] [PATCH 0030] Add option to specify SID using domain name to idrange-add/mod

2013-02-04 Thread Tomas Babej
Hi, When adding/modifying an ID range for a trusted domain, the newly added option --dom-name can be used. This looks up SID of the trusted domain in LDAP and therefore the user is not required to write it down in CLI. If the lookup fails, error message asking the user to specify the SID manually

[Freeipa-devel] Roadmap

2013-02-04 Thread Rob Crittenden
In order to keep you informed of the current and future plans for FreeIPA we've updated our Roadmap with some more details: http://www.freeipa.org/page/Roadmap rob ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman

Re: [Freeipa-devel] [PATCH] 355 Avoid internal error when user is not Trust admin

2013-02-04 Thread Martin Kosek
On 01/24/2013 12:01 PM, Martin Kosek wrote: > When user tries to perform any action requiring communication with > trusted domain, IPA server tries to retrieve a trust secret on his > behalf to be able to establish the connection. This happens for > example during group-add-member command when exte

Re: [Freeipa-devel] [PATCH 0027] Add checks for SELinux in install scripts

2013-02-04 Thread Rob Crittenden
Tomas Babej wrote: On 01/30/2013 05:12 PM, Tomas Babej wrote: Hi, The checks make sure that SELinux is: - installed and enabled (on server install) - installed and enabled OR not installed (on client install) Please note that client installs with SELinux not installed are allowed since fre

Re: [Freeipa-devel] [PATCHES] 98-101 Preserve case of LDAP attribute names

2013-02-04 Thread Petr Viktorin
On 02/04/2013 02:25 PM, Jan Cholasta wrote: On 1.2.2013 12:12, Petr Viktorin wrote: On 01/31/2013 04:18 PM, Jan Cholasta wrote: Hi, these patches implement attribute name case preservation in LDAPEntry. Apply on top of Petr Viktorin's LDAP code refactoring patchset (up to part 5). Honza Pat

[Freeipa-devel] [PATCH] 362 Add LDAP server fallback to client installer

2013-02-04 Thread Martin Kosek
When ipa-client-install is run without --server option, it tries to search SRV records for IPA/LDAP server hostname, but it returns only the first record found and when the LDAP server on that hostname is not available, the whole client installation fails. Get all LDAP SRV records instead and fall

Re: [Freeipa-devel] [PATCH 0028] Prevent backtrace in ipa-replica-prepare

2013-02-04 Thread Rob Crittenden
Tomas Babej wrote: On Fri 01 Feb 2013 08:03:37 PM CET, Rob Crittenden wrote: Martin Kosek wrote: On 01/31/2013 12:05 PM, Tomas Babej wrote: On 01/31/2013 12:03 PM, Tomas Babej wrote: Hi, This was a regression due to change from DatabaseError to NetworkError when LDAP server is down. https:/

[Freeipa-devel] [PATCHES] 102-104 Remove DN normalization

2013-02-04 Thread Jan Cholasta
Hi, this patchset removes DN normalization code from the framework. Full DNs including the configured suffix are used instead and must be used in new code. Honza -- Jan Cholasta >From 27b613bd8b4e13a199d6e77d02a48e6bc0c3e050 Mon Sep 17 00:00:00 2001 From: Jan Cholasta Date: Mon, 4 Feb 2013

Re: [Freeipa-devel] [PATCHES] 98-101 Preserve case of LDAP attribute names

2013-02-04 Thread Jan Cholasta
On 1.2.2013 12:12, Petr Viktorin wrote: On 01/31/2013 04:18 PM, Jan Cholasta wrote: Hi, these patches implement attribute name case preservation in LDAPEntry. Apply on top of Petr Viktorin's LDAP code refactoring patchset (up to part 5). Honza Patches 99 & 101 need some tests to make sure th

Re: [Freeipa-devel] [PATCHES] 0107-0114 Fix Confusing ipa tool online help organization

2013-02-04 Thread Petr Viktorin
On 02/01/2013 06:06 PM, Rob Crittenden wrote: Petr Viktorin wrote: On 01/31/2013 07:35 PM, Rob Crittenden wrote: Petr Viktorin wrote: On 12/14/2012 01:46 AM, Dmitri Pal wrote: On 12/13/2012 10:21 AM, Petr Viktorin wrote: https://fedorahosted.org/freeipa/ticket/3060 Here is a collection of s

Re: [Freeipa-devel] [PATCH] 1083 improve migration performance

2013-02-04 Thread Martin Kosek
On 02/01/2013 04:21 PM, Rob Crittenden wrote: > I did some analysis on migration and found several areas impacting > performance: > > 1. We were calling user_mod to reset the magic value in description to not > create a UPG. This caused a lot of unnecessary queries to display the user. > > 2. We

Re: [Freeipa-devel] [PATCHES] 94-96 Remove Entry and Entity classes

2013-02-04 Thread Jan Cholasta
On 1.2.2013 16:34, Rob Crittenden wrote: Jan Cholasta wrote: On 22.1.2013 15:32, Jan Cholasta wrote: Hi, these patches remove the Entry and Entity classes and move instantiation of LDAPEntry objects to LDAPConnection.make_entry factory method. Apply on top of Petr Viktorin's LDAP code refacto