Re: [Freeipa-devel] bind DN of executing command

2014-05-05 Thread Sumit Bose
On Fri, May 02, 2014 at 05:06:06PM -0400, Nathaniel McCallum wrote: > I need the DN of the user who is running the current command. This may > be defined as the user who is bound or will bind to execute the LDAP > commands I have prepared. > > Does anyone know how to do this in the FreeIPA api? I

Re: [Freeipa-devel] LDAP schema for DNSSEC keys

2014-05-05 Thread Ludwig Krispenz
Hi Petr, On 05/02/2014 08:48 PM, Petr Spacek wrote: On 1.5.2014 16:10, Rich Megginson wrote: On 04/30/2014 10:19 AM, Petr Spacek wrote: Hello list, following text summarizes schema & DIT layout for DNSSEC key storage in LDAP. This is subset of full PKCS#11 schema [0]. It stores bare keys w

Re: [Freeipa-devel] [PATCH 0046] Fix a typo in the otptoken doc string

2014-05-05 Thread Jan Cholasta
Hi, On 2.5.2014 23:45, Nathaniel McCallum wrote: Patch attached ACK, but there is one additional occurence of "otp-add" in a comment in install/ui/src/freeipa/otptoken.js. Honza -- Jan Cholasta ___ Freeipa-devel mailing list Freeipa-devel@redhat

Re: [Freeipa-devel] [PATCH] 587 webui-ci: adjust id range tests to new validator

2014-05-05 Thread Misnyovszki Adam
On Fri, 25 Apr 2014 15:02:27 +0200 Petr Vobornik wrote: > SSIA LGFM, integration tests for range now runs smoothly. ACK Thanks Adam ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] [PATCH] 588 webui: fix switching between multiple_choice_section choices

2014-05-05 Thread Misnyovszki Adam
On Fri, 25 Apr 2014 19:24:35 +0200 Petr Vobornik wrote: > - required indicators are not present for all sections except the last > - validation has wrong color for the same sections > > There was only one layout for all choices. Layout should not be reused > because `create` method will reset la

Re: [Freeipa-devel] LDAP schema for DNSSEC keys

2014-05-05 Thread Jan Cholasta
On 5.5.2014 10:45, Ludwig Krispenz wrote: Hi Petr, On 05/02/2014 08:48 PM, Petr Spacek wrote: On 1.5.2014 16:10, Rich Megginson wrote: On 04/30/2014 10:19 AM, Petr Spacek wrote: - We need to decide about object naming: - One obvious option for RDN is to use uniqueID but I don't like it. It

Re: [Freeipa-devel] bind DN of executing command

2014-05-05 Thread Rob Crittenden
Sumit Bose wrote: On Fri, May 02, 2014 at 05:06:06PM -0400, Nathaniel McCallum wrote: I need the DN of the user who is running the current command. This may be defined as the user who is bound or will bind to execute the LDAP commands I have prepared. Does anyone know how to do this in the Free

Re: [Freeipa-devel] [PATCH] 18 webui otptoken test data added

2014-05-05 Thread Misnyovszki Adam
On Wed, 30 Apr 2014 13:37:10 +0200 Petr Vobornik wrote: > On 29.4.2014 16:30, Misnyovszki Adam wrote: > > On Fri, 25 Apr 2014 17:16:48 +0200 > > Misnyovszki Adam wrote: > > > >> Hi, > >> this patch adds some static test data for the webui otptoken part. > >> Adam > > > > Attached corrected DN's.

Re: [Freeipa-devel] [PATCH 0236] Fix crash in create_zone()

2014-05-05 Thread Tomas Hozza
- Original Message - > Hello, > > Fix crash in create_zone(). > > dns_zone_getmgr(zone) call in cleanup section was called even if zone > was NULL. > > This patch should go to master, v4 and v3 branches where applicable. > > You probably need to use debugger to reproduce this crash. I h

Re: [Freeipa-devel] [PATCH 0237] Handle paths without trailing / in fs_dirs_create()

2014-05-05 Thread Tomas Hozza
- Original Message - > Hello, > > Handle paths without trailing / in fs_dirs_create(). > > This patch should go to all branches with fs_dirs_create() function. > > -- > Petr^2 Spacek > Looks good. ACK Regards, -- Tomas Hozza Software Engineer - EMEA ENG Developer Experience PGP: 1D

Re: [Freeipa-devel] [PATCH 0238] Update .gitignore to skip Eclipse and Autotools file

2014-05-05 Thread Tomas Hozza
- Original Message - > Hello, > > Update .gitignore to skip Eclipse and Autotools files. > > -- > Petr^2 Spacek > ACK -- Tomas Hozza Software Engineer - EMEA ENG Developer Experience PGP: 1D9F3C2D Red Hat Inc. http://cz.redhat.com __

Re: [Freeipa-devel] [PATCH 0236] Fix crash in create_zone()

2014-05-05 Thread Petr Spacek
On 5.5.2014 16:46, Tomas Hozza wrote: Fix crash in create_zone(). dns_zone_getmgr(zone) call in cleanup section was called even if zone was NULL. This patch should go to master, v4 and v3 branches where applicable. You probably need to use debugger to reproduce this crash. I have encountered i

Re: [Freeipa-devel] [PATCH 0237] Handle paths without trailing / in fs_dirs_create()

2014-05-05 Thread Petr Spacek
On 5.5.2014 16:56, Tomas Hozza wrote: Hello, > >Handle paths without trailing / in fs_dirs_create(). > >This patch should go to all branches with fs_dirs_create() function. > >-- >Petr^2 Spacek > Looks good. ACK Pushed to master: 21136d9b6933a733586fba3a83e9b2be050a948d -- Petr^2 Spacek ___

Re: [Freeipa-devel] [PATCH 0238] Update .gitignore to skip Eclipse and Autotools file

2014-05-05 Thread Petr Spacek
On 5.5.2014 16:56, Tomas Hozza wrote: Hello, > >Update .gitignore to skip Eclipse and Autotools files. > >-- >Petr^2 Spacek > ACK Pushed to master: 5dbb7fa8426cd5512cd7ce99dc6546b7928cfbfb -- Petr^2 Spacek ___ Freeipa-devel mailing list Freeipa-dev

Re: [Freeipa-devel] [PATCH 0034] Deny LDAP binds for user accounts with expired principal

2014-05-05 Thread Alexander Bokovoy
On Wed, 30 Apr 2014, Tomas Babej wrote: +if (current_time > expire_time && expire_time > 0) { +LOG_FATAL("kerberos principal in %s is expired\n", dn); +errMesg = "Kerberos principal is expired."; +auth_failed = true; +

Re: [Freeipa-devel] [PATCH] 587 webui-ci: adjust id range tests to new validator

2014-05-05 Thread Petr Vobornik
On 5.5.2014 14:05, Misnyovszki Adam wrote: On Fri, 25 Apr 2014 15:02:27 +0200 Petr Vobornik wrote: SSIA LGFM, integration tests for range now runs smoothly. ACK Thanks Adam Pushed to master: 7eff8ad7dc385070b600ddb2b2ba1f39835718b6 -- Petr Vobornik _

Re: [Freeipa-devel] [PATCH] 588 webui: fix switching between multiple_choice_section choices

2014-05-05 Thread Petr Vobornik
On 5.5.2014 14:40, Misnyovszki Adam wrote: On Fri, 25 Apr 2014 19:24:35 +0200 Petr Vobornik wrote: - required indicators are not present for all sections except the last - validation has wrong color for the same sections There was only one layout for all choices. Layout should not be reused b

Re: [Freeipa-devel] [PATCH 0137] ipalib: Add DateTime parameter

2014-05-05 Thread Alexander Bokovoy
On Wed, 30 Apr 2014, Tomas Babej wrote: On 04/25/2014 11:08 AM, Jan Cholasta wrote: On 22.4.2014 13:32, Tomas Babej wrote: Thank you for the suggestions. Updated, rebased patch is attached. This API.txt change from the next patch belongs in this patch: +capability: datetime_values 2.84 I

Re: [Freeipa-devel] [PATCH 0138] ipalib: Expose krbPrincipalExpiration in CLI

2014-05-05 Thread Alexander Bokovoy
On Wed, 30 Apr 2014, Tomas Babej wrote: On 04/25/2014 11:10 AM, Jan Cholasta wrote: On 22.4.2014 13:34, Tomas Babej wrote: Updated, rebased patch attached. This API.txt change belongs in the previous patch: +capability: datetime_values 2.84 Fixed, updated patch attached. I also added se

Re: [Freeipa-devel] [PATCH 0034] Deny LDAP binds for user accounts with expired principal

2014-05-05 Thread Alexander Bokovoy
On Mon, 05 May 2014, Alexander Bokovoy wrote: On Wed, 30 Apr 2014, Tomas Babej wrote: +if (current_time > expire_time && expire_time > 0) { +LOG_FATAL("kerberos principal in %s is expired\n", dn); +errMesg = "Kerberos principal is expired."

Re: [Freeipa-devel] [PATCHES 180-182] ipatests: Improvements!

2014-05-05 Thread Alexander Bokovoy
On Fri, 02 May 2014, Jakub Hrozek wrote: On Wed, Apr 30, 2014 at 03:59:01PM +0200, Tomas Babej wrote: Hi, * patch 180 fixes incorrect hostname usage when connecting to legacy clients * patch 181 sets up SSSD in debug_level 7 by default * patch 182 does the same, but on the legacy clients -- To

[Freeipa-devel] [PATCH 0048] Default the token owner to the person adding the token

2014-05-05 Thread Nathaniel McCallum
Creating tokens for yourself is the most common operation. Making this the default optimizes for the common case. >From a35485a2ffe4f47792203ebc5a6ef4b955bf Mon Sep 17 00:00:00 2001 From: Nathaniel McCallum Date: Mon, 5 May 2014 10:41:20 -0400 Subject: [PATCH] Default the token owner to the pe

[Freeipa-devel] [PATCH 0049] Add support for protected tokens

2014-05-05 Thread Nathaniel McCallum
This also constitutes a rethinking of the token ACIs after the introduction of SELFDN support. Admins, as before, have full access to all token permissions. Normal users have read/search/compare access to all of the non-secret data for tokens assigned to them, whether protected or non-protected.

[Freeipa-devel] [PATCH 0050] Fix typo in token UI javascript comment

2014-05-05 Thread Nathaniel McCallum
Attached. >From de4185294e389679caac12996016f81fdb84c0f1 Mon Sep 17 00:00:00 2001 From: Nathaniel McCallum Date: Mon, 5 May 2014 13:08:35 -0400 Subject: [PATCH] Fix typo in token UI javascript comment --- install/ui/src/freeipa/otptoken.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

Re: [Freeipa-devel] [PATCH 0046] Fix a typo in the otptoken doc string

2014-05-05 Thread Nathaniel McCallum
On Mon, 2014-05-05 at 14:03 +0200, Jan Cholasta wrote: > Hi, > > On 2.5.2014 23:45, Nathaniel McCallum wrote: > > Patch attached > > ACK, but there is one additional occurence of "otp-add" in a comment in > install/ui/src/freeipa/otptoken.js. https://www.redhat.com/archives/freeipa-devel/2014-M

Re: [Freeipa-devel] [PATCH 0050] Fix typo in token UI javascript comment

2014-05-05 Thread Jan Cholasta
On 5.5.2014 19:10, Nathaniel McCallum wrote: Attached. ACK. -- Jan Cholasta ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] [PATCH 0044] Periodically refresh global ipa-kdb configuration

2014-05-05 Thread Dmitri Pal
On 05/02/2014 02:52 PM, Simo Sorce wrote: On Thu, 2014-05-01 at 16:22 -0400, Nathaniel McCallum wrote: On Tue, 2014-03-11 at 11:09 -0400, Simo Sorce wrote: On Tue, 2014-03-11 at 16:05 +0200, Alexander Bokovoy wrote: On Tue, 11 Mar 2014, Jan Pazdziora wrote: On Mon, Feb 24, 2014 at 02:26:27PM

[Freeipa-devel] minimum python version

2014-05-05 Thread Fraser Tweedale
Hi all, What's are the versions of Python that must be supported in the freeipa codebase? And do older branches have to support earlier versions? Any Python language features that should be avoided, by policy? Forward-portability considerations? I look forward to your responses and will write i

Re: [Freeipa-devel] [PATCH 0044] Periodically refresh global ipa-kdb configuration

2014-05-05 Thread Simo Sorce
On Mon, 2014-05-05 at 20:08 -0400, Dmitri Pal wrote: > On 05/02/2014 02:52 PM, Simo Sorce wrote: > > On Thu, 2014-05-01 at 16:22 -0400, Nathaniel McCallum wrote: > >> On Tue, 2014-03-11 at 11:09 -0400, Simo Sorce wrote: > >>> On Tue, 2014-03-11 at 16:05 +0200, Alexander Bokovoy wrote: > On Tue

Re: [Freeipa-devel] minimum python version

2014-05-05 Thread Alexander Bokovoy
On Tue, 06 May 2014, Fraser Tweedale wrote: Hi all, What's are the versions of Python that must be supported in the freeipa codebase? And do older branches have to support earlier versions? Any Python language features that should be avoided, by policy? Forward-portability considerations? We