Re: [Freeipa-devel] Integration with the provisioning systems

2013-04-23 Thread Martin Kosek
On 04/22/2013 03:42 PM, Simo Sorce wrote: On Mon, 2013-04-22 at 08:48 -0400, Dmitri Pal wrote: On 04/22/2013 07:34 AM, Martin Kosek wrote: On 04/21/2013 09:14 PM, Dmitri Pal wrote: Hello, Please review the design page for the following ticket: https://fedorahosted.org/freeipa/ticket/3583

[Freeipa-devel] [PATCH] 402 Add userClass attribute for hosts

2013-04-23 Thread Martin Kosek
This new freeform host attribute will allow provisioning systems to add custom tags for host objects which can be later used for in automember rules or for additional local interpretation. Design page: http://www.freeipa.org/page/V3/Integration_with_a_provisioning_systems Ticket:

Re: [Freeipa-devel] [PATCH 0023 Do not display ports to open when password is incorrect during ipa-client-install

2013-04-23 Thread Ana Krivokapic
On 04/23/2013 12:06 AM, Rob Crittenden wrote: Ana Krivokapic wrote: Do not display ports to open when password is incorrect during ipa-client-install https://fedorahosted.org/freeipa/ticket/3573 What happens if port 88 is not open so it can't connect to the KDC? I'm not sure how the best

Re: [Freeipa-devel] [PATCH] 402 Add userClass attribute for hosts

2013-04-23 Thread Martin Kosek
On 04/23/2013 10:10 AM, Martin Kosek wrote: This new freeform host attribute will allow provisioning systems to add custom tags for host objects which can be later used for in automember rules or for additional local interpretation. Design page:

[Freeipa-devel] [PATCH 0049] Avoid removing sss from nssswitch.conf during client uninstall

2013-04-23 Thread Tomas Babej
Hi, This patch makes sure that sss is not removed from nsswitch.conf which causes probles with later uses of sssd. Makes sure that authconfig with --disablesssd option is not executed during ipa client uninstall. https://fedorahosted.org/freeipa/ticket/3577 Tomas From

[Freeipa-devel] [PATCH 0050] Add hint message about --force-join option when enrollment fails

2013-04-23 Thread Tomas Babej
Hi, When client enrollment fails due to the fact that host entry already exists on the server, display an message informing the user about the possibility of using --force-join option. https://fedorahosted.org/freeipa/ticket/3572 Tomas From 72fd08bef07c8126cfa4f4b1dd601be635c62de7 Mon Sep 17

Re: [Freeipa-devel] [PATCH] 402 Add userClass attribute for hosts

2013-04-23 Thread Petr Vobornik
On 04/23/2013 12:22 PM, Martin Kosek wrote: On 04/23/2013 10:10 AM, Martin Kosek wrote: This new freeform host attribute will allow provisioning systems to add custom tags for host objects which can be later used for in automember rules or for additional local interpretation. Design page:

[Freeipa-devel] [PATCH 0051] Preserve already configured options in openldap conf

2013-04-23 Thread Tomas Babej
Hi, We should respect already configured options present in /etc/openldap/ldap.conf when generating our own configuration. With this patch, we only rewrite URI, BASE and TLS_CACERT options. https://fedorahosted.org/freeipa/ticket/3582 Tomas From 87646955d8e75495fbb4519aa29e4e35c8dfe32b Mon Sep

Re: [Freeipa-devel] [PATCHES] 0218-0219 https://fedorahosted.org/freeipa/ticket/3578

2013-04-23 Thread Petr Viktorin
On 04/22/2013 07:30 PM, Petr Viktorin wrote: Hello, These patches fix errors in our schema files. The syntax errors would prevent future versions of 389 from starting. I haven't done functional testing with development 389 versions, I'll get in touch with mreynolds for that. So don't push

Re: [Freeipa-devel] [PATCH 0049] Avoid removing sss from nssswitch.conf during client uninstall

2013-04-23 Thread Petr Viktorin
On 04/23/2013 12:25 PM, Tomas Babej wrote: Hi, This patch makes sure that sss is not removed from nsswitch.conf which causes probles with later uses of sssd. Makes sure that authconfig with --disablesssd option is not executed during ipa client uninstall.

Re: [Freeipa-devel] [PATCH 0047] Allow underscore in DNAME targets

2013-04-23 Thread Tomas Babej
On 04/11/2013 04:35 PM, Petr Viktorin wrote: On 04/11/2013 03:59 PM, Simo Sorce wrote: On Thu, 2013-04-11 at 14:52 +0200, Petr Viktorin wrote: On 04/11/2013 02:43 PM, Simo Sorce wrote: On Thu, 2013-04-11 at 14:24 +0200, Petr Viktorin wrote: On 04/11/2013 12:05 PM, Tomas Babej wrote: Hi,

Re: [Freeipa-devel] [PATCH 0049] Avoid removing sss from nssswitch.conf during client uninstall

2013-04-23 Thread Tomas Babej
On 04/23/2013 01:23 PM, Petr Viktorin wrote: On 04/23/2013 12:25 PM, Tomas Babej wrote: Hi, This patch makes sure that sss is not removed from nsswitch.conf which causes probles with later uses of sssd. Makes sure that authconfig with --disablesssd option is not executed during ipa client

Re: [Freeipa-devel] [PATCH] 402 Add userClass attribute for hosts

2013-04-23 Thread Dmitri Pal
On 04/23/2013 06:28 AM, Petr Vobornik wrote: On 04/23/2013 12:22 PM, Martin Kosek wrote: On 04/23/2013 10:10 AM, Martin Kosek wrote: This new freeform host attribute will allow provisioning systems to add custom tags for host objects which can be later used for in automember rules or for

Re: [Freeipa-devel] [PATCHES] 131-132 Add DNS records for existing masters when installing DNS for the first time

2013-04-23 Thread Petr Viktorin
On 04/23/2013 10:35 AM, Jan Cholasta wrote: Hi, the attached patches fix https://fedorahosted.org/freeipa/ticket/3564. Honza Works well for me, ACK. -- PetrĀ³ ___ Freeipa-devel mailing list Freeipa-devel@redhat.com

Re: [Freeipa-devel] [PATCH 0049] Avoid removing sss from nssswitch.conf during client uninstall

2013-04-23 Thread Petr Viktorin
On 04/23/2013 02:11 PM, Tomas Babej wrote: On 04/23/2013 01:23 PM, Petr Viktorin wrote: On 04/23/2013 12:25 PM, Tomas Babej wrote: Hi, This patch makes sure that sss is not removed from nsswitch.conf which causes probles with later uses of sssd. Makes sure that authconfig with --disablesssd

Re: [Freeipa-devel] [PATCHES] 0218-0219 Fix syntax errors in schema files

2013-04-23 Thread Petr Viktorin
On 04/23/2013 12:51 PM, Petr Viktorin wrote: On 04/22/2013 07:30 PM, Petr Viktorin wrote: Hello, These patches fix errors in our schema files. The syntax errors would prevent future versions of 389 from starting. I haven't done functional testing with development 389 versions, I'll get in

Re: [Freeipa-devel] [PATCH 0050] Add hint message about --force-join option when enrollment fails

2013-04-23 Thread Rob Crittenden
Petr Viktorin wrote: On 04/23/2013 12:25 PM, Tomas Babej wrote: Hi, When client enrollment fails due to the fact that host entry already exists on the server, display an message informing the user about the possibility of using --force-join option. https://fedorahosted.org/freeipa/ticket/3572

Re: [Freeipa-devel] [PATCH 0049] Avoid removing sss from nssswitch.conf during client uninstall

2013-04-23 Thread Rob Crittenden
Petr Viktorin wrote: On 04/23/2013 02:11 PM, Tomas Babej wrote: On 04/23/2013 01:23 PM, Petr Viktorin wrote: On 04/23/2013 12:25 PM, Tomas Babej wrote: Hi, This patch makes sure that sss is not removed from nsswitch.conf which causes probles with later uses of sssd. Makes sure that