Re: [Freeipa-devel] [file ipa_cldap.c, line 148]: Failed to create socket

2013-05-29 Thread Nicholas MacKenzie
Agreed. I was using an AD Enterprise Admin account from an "ADMIN" realm out of habit. Once I used the "Administrator" user from the "AD" realm it was fine. Thanks again. On Tue, May 28, 2013 at 4:30 AM, Alexander Bokovoy wrote: > On Tue, 28 May 2013, Nicholas MacKenzie wrote: > >> You were spot

Re: [Freeipa-devel] [PATCH 0159] Deprecate configuration without persistent search

2013-05-29 Thread Petr Spacek
On 28.5.2013 15:55, Petr Spacek wrote: Hello, Deprecate configuration without persistent search. https://fedorahosted.org/bind-dyndb-ldap/ticket/120 This version of the patch adds notice to the README. -- Petr^2 Spacek From 7b685ff7077d10c1917c5a9a97b50d77587b8f04 Mon Sep 17 00:00:00 2001 Fr

Re: [Freeipa-devel] [PATCHES 0156-0158] Automatically disable empty zones when necessary

2013-05-29 Thread Petr Spacek
On 29.5.2013 16:38, Tomas Hozza wrote: ACK. Patches look good and work as expected! Pushed to master: 96f795180d182bcc008159e5ce0102af9fc8324f, 3df30edeae3e1025c899338b554460aa9f0c742e, c9cdbe34b0d9a514d2b95a295d239ce0b2a0386f -- Petr^2 Spacek ___

Re: [Freeipa-devel] [PATCHES 0156-0158] Automatically disable empty zones when necessary

2013-05-29 Thread Tomas Hozza
ACK. Patches look good and work as expected! Regards, Tomas Hozza - Original Message - > Hello, > > this patch set enables bind-dyndb-ldap to automatically unload empty zone > (see > RFC 6303) if an explicit configuration for this zone is present in LDAP. > > Please test it with idnsZ

Re: [Freeipa-devel] [RFC] Serving legacy systems cliens for trusts

2013-05-29 Thread Dmitri Pal
On 05/29/2013 03:28 AM, Sumit Bose wrote: > On Wed, May 29, 2013 at 08:38:37AM +0300, Alexander Bokovoy wrote: >> On Tue, 28 May 2013, Dmitri Pal wrote: >>> On 05/28/2013 04:29 PM, Alexander Bokovoy wrote: On Tue, 28 May 2013, Dmitri Pal wrote: > On 05/28/2013 03:48 PM, Alexander Bokovoy w

Re: [Freeipa-devel] [Patchwork] command line client

2013-05-29 Thread Simo Sorce
On Wed, 2013-05-29 at 10:06 +0200, Petr Spacek wrote: > On 28.5.2013 14:12, Simo Sorce wrote: > > On Tue, 2013-05-28 at 10:46 +0200, Martin Kosek wrote: > >> On 05/28/2013 10:38 AM, Petr Spacek wrote: > >>> On 27.5.2013 22:05, Simo Sorce wrote: > On Mon, 2013-05-27 at 16:36 +0200, Petr Spacek

[Freeipa-devel] [PATCH 0031] Deprecate options --dom-sid and --dom-name in idrange-mod

2013-05-29 Thread Ana Krivokapic
Hello, This patch addresses ticket https://fedorahosted.org/freeipa/ticket/3636 -- Regards, Ana Krivokapic Associate Software Engineer FreeIPA team Red Hat Inc. From 704114481caed03cf02daac56d78dc43a3759a3a Mon Sep 17 00:00:00 2001 From: Ana Krivokapic Date: Wed, 29 May 2013 09:15:19 -0400 Su

[Freeipa-devel] [PATCH 0161] Validate authentication settings strictly

2013-05-29 Thread Petr Spacek
Hello, Validate authentication settings strictly. - auth_method 'SASL' do not accept bind_dn and password options - auth_method 'simple' do not accept sasl_* and krb5_* options - auth_method 'none' do not accept any of options above -- Petr^2 Spacek From 6866c4e1edb5633b5a82c2d28f603f9660994d6a

[Freeipa-devel] [PATCH 0160] Fix crash triggered by missing sasl_user parameter

2013-05-29 Thread Petr Spacek
Hello, Fix crash triggered by missing sasl_user parameter. -- Petr^2 Spacek From 5e9454744939b64825b330135c7ab5579567be0e Mon Sep 17 00:00:00 2001 From: Petr Spacek Date: Wed, 29 May 2013 14:56:28 +0200 Subject: [PATCH] Fix crash triggered by missing sasl_user parameter. Signed-off-by: Petr Sp

Re: [Freeipa-devel] [PATCH] 417 Regression fix: missing control buttons in nested search facets

2013-05-29 Thread Ana Krivokapic
On 05/29/2013 10:38 AM, Petr Vobornik wrote: > Automount maps, keys and dnsrecord search facet are missing control > buttons (add, delete, refresh). > > Regression introduced by 6e90920233cc9a7c9feb040dea22cda837715c39 - > 'Move spec modifications from facet factories to pre_ops'. > > https://fedor

Re: [Freeipa-devel] [RFC] Serving legacy systems cliens for trusts

2013-05-29 Thread Alexander Bokovoy
On Wed, 29 May 2013, Sumit Bose wrote: On Tue, May 28, 2013 at 02:50:59PM +0300, Alexander Bokovoy wrote: Hi, http://www.freeipa.org/page/V3/Serving_legacy_clients_for_trusts = Overview = Since version 3.0 FreeIPA supports cross-realm trusts with Active Directory. In order to allow AD users

[Freeipa-devel] [PATCH] 418 Make ssbrowser.html work in IE 10

2013-05-29 Thread Petr Vobornik
Manual configuration page for other browsers (ssbrowser.html) doesn't work in IE 10 - error page is displayed. This patch is conditioning creation of Firefox configuration object so that configure.jar is requested only in Firefox. IE doesn't request it and so it does not fail. https://fedora

Re: [Freeipa-devel] [PATCH 0155] Fix IPv6 handling in PTR record synchronization

2013-05-29 Thread Petr Spacek
On 28.5.2013 10:44, Tomas Hozza wrote: ACK The patch looks good and works as expected. Pushed to master: 304b7e74e9d92d0973ef4428be7b9794c8905056 -- Petr^2 Spacek ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailma

Re: [Freeipa-devel] [PATCH 0057] Do not allow removal of ID range of an active trust

2013-05-29 Thread Martin Kosek
On 05/28/2013 03:48 PM, Alexander Bokovoy wrote: > On Tue, 28 May 2013, Tomas Babej wrote: >> On 05/28/2013 02:35 PM, Alexander Bokovoy wrote: >>> On Mon, 27 May 2013, Tomas Babej wrote: >>> We got rid of openldap utilities now. While using python.ldap module, I >>> also made the tests much

Re: [Freeipa-devel] [RFC] Serving legacy systems cliens for trusts

2013-05-29 Thread Sumit Bose
On Tue, May 28, 2013 at 02:50:59PM +0300, Alexander Bokovoy wrote: > Hi, > > > http://www.freeipa.org/page/V3/Serving_legacy_clients_for_trusts > > = Overview = > > Since version 3.0 FreeIPA supports cross-realm trusts with Active > Directory. In order to allow AD users to utilize services on I

Re: [Freeipa-devel] [PATCH 0057] Do not allow removal of ID range of an active trust

2013-05-29 Thread Tomas Babej
On 05/28/2013 03:48 PM, Alexander Bokovoy wrote: On Tue, 28 May 2013, Tomas Babej wrote: On 05/28/2013 02:35 PM, Alexander Bokovoy wrote: On Mon, 27 May 2013, Tomas Babej wrote: We got rid of openldap utilities now. While using python.ldap module, I also made the tests much more robust and add

[Freeipa-devel] [PATCH] 417 Regression fix: missing control buttons in nested search facets

2013-05-29 Thread Petr Vobornik
Automount maps, keys and dnsrecord search facet are missing control buttons (add, delete, refresh). Regression introduced by 6e90920233cc9a7c9feb040dea22cda837715c39 - 'Move spec modifications from facet factories to pre_ops'. https://fedorahosted.org/freeipa/ticket/3605 -- Petr Vobornik From

Re: [Freeipa-devel] [PATCH 0060] Do not translate trust type and direction with --raw in trust-show

2013-05-29 Thread Tomas Babej
On 05/28/2013 05:32 PM, Ana Krivokapic wrote: On 05/28/2013 01:20 PM, Tomas Babej wrote: On 05/27/2013 03:04 PM, Ana Krivokapic wrote: On 05/27/2013 02:38 PM, Tomas Babej wrote: Hi, In trust_show command, make sure that --raw flag is honoured. Attributes ipanttrusttype and ipanttrustdirection

Re: [Freeipa-devel] [PATCH 0060] Do not translate trust type and direction with --raw in trust-show

2013-05-29 Thread Petr Viktorin
On 05/28/2013 05:32 PM, Ana Krivokapic wrote: On 05/28/2013 01:20 PM, Tomas Babej wrote: On 05/27/2013 03:04 PM, Ana Krivokapic wrote: On 05/27/2013 02:38 PM, Tomas Babej wrote: Hi, In trust_show command, make sure that --raw flag is honoured. Attributes ipanttrusttype and ipanttrustdirection

Re: [Freeipa-devel] [Patchwork] command line client

2013-05-29 Thread Petr Spacek
On 28.5.2013 14:12, Simo Sorce wrote: On Tue, 2013-05-28 at 10:46 +0200, Martin Kosek wrote: On 05/28/2013 10:38 AM, Petr Spacek wrote: On 27.5.2013 22:05, Simo Sorce wrote: On Mon, 2013-05-27 at 16:36 +0200, Petr Spacek wrote: On 27.5.2013 15:57, Simo Sorce wrote: On Mon, 2013-05-27 at 10:4

Re: [Freeipa-devel] [RFC] Serving legacy systems cliens for trusts

2013-05-29 Thread Sumit Bose
On Wed, May 29, 2013 at 08:38:37AM +0300, Alexander Bokovoy wrote: > On Tue, 28 May 2013, Dmitri Pal wrote: > >On 05/28/2013 04:29 PM, Alexander Bokovoy wrote: > >>On Tue, 28 May 2013, Dmitri Pal wrote: > >>>On 05/28/2013 03:48 PM, Alexander Bokovoy wrote: > On Tue, 28 May 2013, Dmitri Pal wrot