[Freeipa-devel] [PATCH] 0504 Default read ACIs for Sudo objects

2014-04-03 Thread Petr Viktorin
Hello, This adds read permissions to read Sudo commands, command groups, rules. Read access is given to all authenticated users. -- Petr³ From bb9ff134db5427621b13f94e062ed24f725bc280 Mon Sep 17 00:00:00 2001 From: Petr Viktorin Date: Wed, 26 Mar 2014 14:19:44 +0100 Subject: [PATCH] Add manage

[Freeipa-devel] [PATCH] 0505 Default read ACIs for HBAC objects

2014-04-03 Thread Petr Viktorin
Hello, This adds read permissions to read HBAC rules, services, and service groups. Read access is given to all authenticated users. -- Petr³ From e0aa9e6e22ecdb42c0f3b21d42d66e5b5945d80d Mon Sep 17 00:00:00 2001 From: Petr Viktorin Date: Wed, 26 Mar 2014 15:33:49 +0100 Subject: [PATCH] Add man

[Freeipa-devel] [PATCH] 0506 Default read ACIs for hosts

2014-04-03 Thread Petr Viktorin
Hello, This adds read permissions to read hosts. Read access is given to all authenticated users. For reading host membership info, there is a separate permission that also defaults to all authenticated users. The userPassword attribute is not included for obvious reasons. -- Petr³ From 0e528

Re: [Freeipa-devel] [PATCH] 565-568 webui: field and widget binding refactoring

2014-04-03 Thread Petr Vobornik
On 2.4.2014 17:57, Misnyovszki Adam wrote: On Thu, 27 Mar 2014 16:07:55 +0100 Petr Vobornik wrote: The last refactoring I did while implementing RCUE login or more precisely support for standalone facets which have forms but are not details facets. [PATCH] webui: field and widget binding refa

[Freeipa-devel] [PATCHES 163-166] Various ipatests fixes

2014-04-03 Thread Tomas Babej
Hi. these fix the following: * not properly removed PKI instance on IPA uninstall * improper usage of external hostname of AD subdomain in the legacy client tests * relax regex checks in legacy client tests * put 2 seconds of sleep after restart of SSSD when clearing the cache -- Tomas Babej As

Re: [Freeipa-devel] [PATCHES 163-166] Various ipatests fixes

2014-04-03 Thread Petr Viktorin
On 04/03/2014 12:42 PM, Tomas Babej wrote: Hi. these fix the following: * not properly removed PKI instance on IPA uninstall * improper usage of external hostname of AD subdomain in the legacy client tests * relax regex checks in legacy client tests * put 2 seconds of sleep after restart of SSS

[Freeipa-devel] [PATCH] 0507 Allow anonymous read access to containers

2014-04-03 Thread Petr Viktorin
Hello, This adds anonymous read access to containers, as discussed in this thread: https://www.redhat.com/archives/freeipa-devel/2014-March/msg00442.html Additionally access is granted for $SUFFIX itself with targetfilter "(objectclass=domain)", and attributes objectclass, dc, info, nisDomain

Re: [Freeipa-devel] [PATCH] 0507 Allow anonymous read access to containers

2014-04-03 Thread Simo Sorce
On Thu, 2014-04-03 at 13:34 +0200, Petr Viktorin wrote: > Hello, > This adds anonymous read access to containers, as discussed in this > thread: > https://www.redhat.com/archives/freeipa-devel/2014-March/msg00442.html > > Additionally access is granted for $SUFFIX itself with targetfilter > "(o

Re: [Freeipa-devel] [PATCH] 0507 Allow anonymous read access to containers

2014-04-03 Thread Petr Viktorin
On 04/03/2014 02:53 PM, Simo Sorce wrote: On Thu, 2014-04-03 at 13:34 +0200, Petr Viktorin wrote: Hello, This adds anonymous read access to containers, as discussed in this thread: https://www.redhat.com/archives/freeipa-devel/2014-March/msg00442.html Additionally access is granted for $SUFFIX

Re: [Freeipa-devel] [PATCH] 0507 Allow anonymous read access to containers

2014-04-03 Thread Simo Sorce
On Thu, 2014-04-03 at 15:19 +0200, Petr Viktorin wrote: > On 04/03/2014 02:53 PM, Simo Sorce wrote: > > On Thu, 2014-04-03 at 13:34 +0200, Petr Viktorin wrote: > >> Hello, > >> This adds anonymous read access to containers, as discussed in this > >> thread: > >> https://www.redhat.com/archives/free

Re: [Freeipa-devel] [PATCH 0029-0046] Internationalized domain names in DNS plugin

2014-04-03 Thread Jan Cholasta
On 2.4.2014 14:07, Martin Basti wrote: Helo list, this patchset allows to use internationalized domian in DNS plugin. - dns names are stored in ACE form(punycoded) in LDAP - raw option shows dns data in ACE form, otherwise dns names are converted to unicode - plugin allow all characters in domai

Re: [Freeipa-devel] [PATCH 0161] ipa-range-check: Fix memory leaks when freeing range object

2014-04-03 Thread Alexander Bokovoy
On Wed, 02 Apr 2014, Martin Kosek wrote: On 04/01/2014 12:03 PM, Jan Pazdziora wrote: On Tue, Apr 01, 2014 at 10:05:39AM +0200, Tomas Babej wrote: Yes, that was the intention. Mistake on my part, I'll send updated patches. Updated patch attached. Ack based on reading the code and documen

[Freeipa-devel] Changing RCUE to PatternFly

2014-04-03 Thread Petr Vobornik
Hi all, this is a notice about what I'm going to do so you can raise objections before I spend any time on it. == Intro == First some facts: 1. RCUE was based on Bootstrap 2 (BS2), it used BS2 css file and provided it's own less files with overrides 2. the RCUE adoption started with this ver

Re: [Freeipa-devel] OTP work, what's left?

2014-04-03 Thread Nathaniel McCallum
On Tue, 2014-04-01 at 17:12 +0200, Martin Kosek wrote: > On 03/28/2014 10:17 AM, Martin Kosek wrote: > > On 03/23/2014 10:26 PM, Alexander Bokovoy wrote: > >> Hi! > >> > >> I've updated my COPR repo with current git master versions of FreeIPA > >> and SSSD with few added patches on top that close O

[Freeipa-devel] Ipa-server-install Firewall Support

2014-04-03 Thread Justin Brown
This discussion morphs out of some questions that I asked over on the user's mailing list: https://www.redhat.com/archives/freeipa-users/2014-April/msg00033.html. It's also related to Trac #2110. (The subject says ipa-server-install, but this will also apply to replica installs, too.) What is the

Re: [Freeipa-devel] Ipa-server-install Firewall Support

2014-04-03 Thread Martin Kosek
On 04/03/2014 06:33 PM, Justin Brown wrote: > This discussion morphs out of some questions that I asked over on the > user's mailing list: > https://www.redhat.com/archives/freeipa-users/2014-April/msg00033.html. > It's also related to Trac #2110. (The subject says ipa-server-install, > but this wi

Re: [Freeipa-devel] [PATCHES] OTP Patches

2014-04-03 Thread Martin Kosek
On 03/24/2014 02:33 PM, Nathaniel McCallum wrote: > On Wed, 2014-03-19 at 17:37 +0200, Alexander Bokovoy wrote: >> On Fri, 21 Feb 2014, Nathaniel McCallum wrote: >>> On Fri, 2014-02-21 at 00:08 +0200, Alexander Bokovoy wrote: On Thu, 20 Feb 2014, Nathaniel McCallum wrote: > There is an

Re: [Freeipa-devel] OTP work, what's left?

2014-04-03 Thread Martin Kosek
On 04/03/2014 05:07 PM, Nathaniel McCallum wrote: > On Tue, 2014-04-01 at 17:12 +0200, Martin Kosek wrote: >> On 03/28/2014 10:17 AM, Martin Kosek wrote: >>> On 03/23/2014 10:26 PM, Alexander Bokovoy wrote: Hi! I've updated my COPR repo with current git master versions of FreeIPA >>>