Re: [Freeipa-devel] [RFC] Serving legacy systems cliens for trusts

2013-05-31 Thread Alexander Bokovoy
On Thu, 30 May 2013, Dmitri Pal wrote: [...] For Lunix and older SSSD version we in fact have a problem. What I want to avoid is to have to define procedures and patches for all ^^ ? the clients. However if you use ipa-client-install it would configure sssd the old way. How

Re: [Freeipa-devel] [PATCH] 0222 Remove code to install Dogtag 9

2013-05-31 Thread Petr Viktorin
On 05/27/2013 01:47 PM, Ana Krivokapic wrote: On 05/10/2013 04:54 PM, Petr Viktorin wrote: Re-sending this patch as it should go into Work towards next release. Since we depend on Dogtag 10 now, there is no need to keep code that installs a Dogtag 9 CA. Support for upgraded Dogtag-9-style ins

Re: [Freeipa-devel] [PATCH] 0032 Ignore files generated by build

2013-05-31 Thread Petr Viktorin
On 05/30/2013 03:07 PM, Tomas Babej wrote: On 05/30/2013 02:41 PM, Ana Krivokapic wrote: Hello, This patch adds some additional files to .gitignore. ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/fre

Re: [Freeipa-devel] [PATCH 0057] Do not allow removal of ID range of an active trust

2013-05-31 Thread Martin Kosek
On 05/30/2013 04:35 PM, Tomas Babej wrote: > On 05/29/2013 12:25 PM, Martin Kosek wrote: >> On 05/28/2013 03:48 PM, Alexander Bokovoy wrote: >>> On Tue, 28 May 2013, Tomas Babej wrote: On 05/28/2013 02:35 PM, Alexander Bokovoy wrote: > On Mon, 27 May 2013, Tomas Babej wrote: > We g

[Freeipa-devel] [PATCH] 0033 Fail when adding a trust with a different range

2013-05-31 Thread Ana Krivokapic
Hello, This patch addresses ticket https://fedorahosted.org/freeipa/ticket/3635. -- Regards, Ana Krivokapic Associate Software Engineer FreeIPA team Red Hat Inc. From 80c5f958a326679c67fac16b13bcfdbd0532d17d Mon Sep 17 00:00:00 2001 From: Ana Krivokapic Date: Fri, 31 May 2013 12:01:23 +0200 S

Re: [Freeipa-devel] [PATCHES 0053-0055] Prompt for RID base if trusted domain SID / name is specified and vice versa

2013-05-31 Thread Tomas Babej
On 05/30/2013 02:17 PM, Ana Krivokapic wrote: On 05/13/2013 05:42 PM, Tomas Babej wrote: On 05/10/2013 04:39 PM, Tomas Babej wrote: Hi, this patcheset deals with https://fedorahosted.org/freeipa/ticket/3602 See commit messages for details. Tomas

Re: [Freeipa-devel] [PATCH 0031] Deprecate options --dom-sid and --dom-name in idrange-mod

2013-05-31 Thread Tomas Babej
On 05/29/2013 03:24 PM, Ana Krivokapic wrote: Hello, This patch addresses ticket https://fedorahosted.org/freeipa/ticket/3636 ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel I edited yo

Re: [Freeipa-devel] [PATCH 0031] Deprecate options --dom-sid and --dom-name in idrange-mod

2013-05-31 Thread Tomas Babej
On 05/31/2013 12:25 PM, Tomas Babej wrote: On 05/29/2013 03:24 PM, Ana Krivokapic wrote: Hello, This patch addresses tickethttps://fedorahosted.org/freeipa/ticket/3636 ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/m

Re: [Freeipa-devel] [PATCH 0031] Deprecate options --dom-sid and --dom-name in idrange-mod

2013-05-31 Thread Tomas Babej
On 05/31/2013 12:51 PM, Tomas Babej wrote: On 05/31/2013 12:25 PM, Tomas Babej wrote: On 05/29/2013 03:24 PM, Ana Krivokapic wrote: Hello, This patch addresses tickethttps://fedorahosted.org/freeipa/ticket/3636 ___ Freeipa-devel mailing list Freei

Re: [Freeipa-devel] [PATCH 0160] Fix crash triggered by missing sasl_user parameter

2013-05-31 Thread Tomas Hozza
ACK Works as expected. Regards, Tomas Hozza - Original Message - > Hello, > > Fix crash triggered by missing sasl_user parameter. > > -- > Petr^2 Spacek > ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailm

Re: [Freeipa-devel] [PATCH 0031] Deprecate options --dom-sid and --dom-name in idrange-mod

2013-05-31 Thread Martin Kosek
On 05/31/2013 01:56 PM, Tomas Babej wrote: > On 05/31/2013 12:51 PM, Tomas Babej wrote: >> On 05/31/2013 12:25 PM, Tomas Babej wrote: >>> On 05/29/2013 03:24 PM, Ana Krivokapic wrote: Hello, This patch addresses ticket https://fedorahosted.org/freeipa/ticket/3636

Re: [Freeipa-devel] [PATCH 0161] Validate authentication settings strictly

2013-05-31 Thread Tomas Hozza
ACK. Works OK. Regards, Tomas Hozza - Original Message - > Hello, > > Validate authentication settings strictly. > > - auth_method 'SASL' do not accept bind_dn and password options > - auth_method 'simple' do not accept sasl_* and krb5_* options > - auth_method 'none' do not accept an

Re: [Freeipa-devel] [RFC] Serving legacy systems cliens for trusts

2013-05-31 Thread Simo Sorce
On Fri, 2013-05-31 at 10:54 +0300, Alexander Bokovoy wrote: > On Thu, 30 May 2013, Dmitri Pal wrote: > >[...] > > For Lunix and older SSSD version we in fact have a problem. > What I want to avoid is to have to define procedures and patches for > all > >>>^^

Re: [Freeipa-devel] [PATCHES 0053-0055] Prompt for RID base if trusted domain SID / name is specified and vice versa

2013-05-31 Thread Ana Krivokapic
On 05/31/2013 12:25 PM, Tomas Babej wrote: > On 05/30/2013 02:17 PM, Ana Krivokapic wrote: >> On 05/13/2013 05:42 PM, Tomas Babej wrote: >>> On 05/10/2013 04:39 PM, Tomas Babej wrote: Hi, this patcheset deals with https://fedorahosted.org/freeipa/ticket/3602 See commit mess

Re: [Freeipa-devel] [RFC] Serving legacy systems cliens for trusts

2013-05-31 Thread Alexander Bokovoy
On Fri, 31 May 2013, Simo Sorce wrote: On Fri, 2013-05-31 at 10:54 +0300, Alexander Bokovoy wrote: On Thu, 30 May 2013, Dmitri Pal wrote: >[...] For Lunix and older SSSD version we in fact have a problem. What I want to avoid is to have to define procedures and patches for al

Re: [Freeipa-devel] [PATCH 0159] Deprecate configuration without persistent search

2013-05-31 Thread Tomas Hozza
ACK. Looks good. Regards, Tomas Hozza - Original Message - > On 28.5.2013 15:55, Petr Spacek wrote: > > Hello, > > > > Deprecate configuration without persistent search. > > > > https://fedorahosted.org/bind-dyndb-ldap/ticket/120 > > This version of the patch adds notice to the README.

Re: [Freeipa-devel] [RFC] Serving legacy systems cliens for trusts

2013-05-31 Thread Simo Sorce
On Fri, 2013-05-31 at 16:35 +0300, Alexander Bokovoy wrote: > On Fri, 31 May 2013, Simo Sorce wrote: > >On Fri, 2013-05-31 at 10:54 +0300, Alexander Bokovoy wrote: > >> On Thu, 30 May 2013, Dmitri Pal wrote: > >> >[...] > >> > >> For Lunix and older SSSD version we in fact have a problem.

Re: [Freeipa-devel] [RFC] Serving legacy systems cliens for trusts

2013-05-31 Thread Rob Crittenden
Simo Sorce wrote: On Fri, 2013-05-31 at 16:35 +0300, Alexander Bokovoy wrote: On Fri, 31 May 2013, Simo Sorce wrote: On Fri, 2013-05-31 at 10:54 +0300, Alexander Bokovoy wrote: On Thu, 30 May 2013, Dmitri Pal wrote: [...] For Lunix and older SSSD version we in fact have a problem. What I wa

Re: [Freeipa-devel] [RFC] Serving legacy systems cliens for trusts

2013-05-31 Thread Simo Sorce
On Fri, 2013-05-31 at 10:35 -0400, Rob Crittenden wrote: > Simo Sorce wrote: > > On Fri, 2013-05-31 at 16:35 +0300, Alexander Bokovoy wrote: > >> On Fri, 31 May 2013, Simo Sorce wrote: > >>> On Fri, 2013-05-31 at 10:54 +0300, Alexander Bokovoy wrote: > On Thu, 30 May 2013, Dmitri Pal wrote: >

Re: [Freeipa-devel] [PATCHES 0053-0055] Prompt for RID base if trusted domain SID / name is specified and vice versa

2013-05-31 Thread Ana Krivokapic
On 05/31/2013 03:35 PM, Ana Krivokapic wrote: > On 05/31/2013 12:25 PM, Tomas Babej wrote: >> On 05/30/2013 02:17 PM, Ana Krivokapic wrote: >>> On 05/13/2013 05:42 PM, Tomas Babej wrote: On 05/10/2013 04:39 PM, Tomas Babej wrote: > Hi, > > this patcheset deals with https://fedoraho

Re: [Freeipa-devel] [PATCH 0030] Require rid-base and secondary-rid-base options in idrange-add when trust exists

2013-05-31 Thread Ana Krivokapic
On 05/28/2013 04:49 PM, Ana Krivokapic wrote: > Hello, > > This patch addresses https://fedorahosted.org/freeipa/ticket/3634 > > > > ___ > Freeipa-devel mailing list > Freeipa-devel@redhat.com > https://www.redhat.com/mailman/listinfo/freeipa-devel This

[Freeipa-devel] IPAv3.1 and Redhat 6.4

2013-05-31 Thread Nicholas MacKenzie
Will IPAv3.1 ever come to 6.4 or perhaps 6.5? Are there any rumors surrounding release dates? ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] IPAv3.1 and Redhat 6.4

2013-05-31 Thread Dmitri Pal
On 05/31/2013 04:47 PM, Nicholas MacKenzie wrote: > Will IPAv3.1 ever come to 6.4 or perhaps 6.5? Are there any rumors > surrounding release dates? > > > ___ > Freeipa-devel mailing list > Freeipa-devel@redhat.com > https://www.redhat.com/mailman/listinfo

Re: [Freeipa-devel] IPAv3.1 and Redhat 6.4

2013-05-31 Thread Stephen Ingram
On Fri, May 31, 2013 at 2:13 PM, Dmitri Pal wrote: > On 05/31/2013 04:47 PM, Nicholas MacKenzie wrote: > > Will IPAv3.1 ever come to 6.4 or perhaps 6.5? Are there any rumors > surrounding release dates? > > > ___ > Freeipa-devel mailing > listFreeipa-