[Freeipa-devel] [PATCH] 746-747 append domain into network.negotiate-auth.trusted-uris

2014-08-29 Thread Petr Vobornik
[PATCH] 746 webui: append network.negotiate-auth.trusted-uris https://fedorahosted.org/freeipa/ticket/4478 [PATCH] 747 install: create ff krb extension on every install, replica install and upgrade We don't want to copy the extension from master to replica because the replica may use newer ve

Re: [Freeipa-devel] [PATCH] 0154-0158 improve trust operations

2014-08-29 Thread Alexander Bokovoy
On Fri, 29 Aug 2014, Martin Kosek wrote: On 08/29/2014 11:35 AM, Alexander Bokovoy wrote: On Fri, 29 Aug 2014, Sumit Bose wrote: On Thu, Aug 21, 2014 at 01:43:35PM +0300, Alexander Bokovoy wrote: Hi! Attached patchset improves trust operations: 1. Ensures we only allow establishing trust to

Re: [Freeipa-devel] [Patch] 0001-2 User Life Cycle: create containers and scoping DS plugins

2014-08-29 Thread thierry bordaz
Hello, Partially reverts commit of 04ea75a7a5109907ede2a0216bd39fac46a992c0 The fix 04ea75a7a5109907ede2a0216bd39fac46a992c0 restricted the DNA scope to 'cn=accounts,SUFFIX' . This was invalid. If you run recent master instance (with that scoping) you may need to reinstall IPA or

Re: [Freeipa-devel] [PATCH] 0154-0158 improve trust operations

2014-08-29 Thread Martin Kosek
On 08/29/2014 11:35 AM, Alexander Bokovoy wrote: > On Fri, 29 Aug 2014, Sumit Bose wrote: >> On Thu, Aug 21, 2014 at 01:43:35PM +0300, Alexander Bokovoy wrote: >>> Hi! >>> >>> Attached patchset improves trust operations: >>> >>> 1. Ensures we only allow establishing trust to forest root domain >>>

Re: [Freeipa-devel] [PATCH 0062] Use delete/add for OTP counter/watermark updates

2014-08-29 Thread Simo Sorce
On Thu, 2014-08-28 at 22:54 -0400, Nathaniel McCallum wrote: > This prevents any local attempt at rapid token code replay. If two > token codes hit the system at roughly the same moment, only the > first write will succeed. All subsequent authentications will fail. > > This obviates the need for a

Re: [Freeipa-devel] [Patch] 0001-2 User Life Cycle: create containers and scoping DS plugins

2014-08-29 Thread thierry bordaz
On 08/28/2014 08:58 PM, Sumit Bose wrote: On Thu, Aug 28, 2014 at 08:41:57PM +0200, thierry bordaz wrote: On 08/28/2014 08:30 PM, Sumit Bose wrote: On Thu, Aug 28, 2014 at 07:26:51PM +0200, thierry bordaz wrote: On 08/28/2014 06:51 PM, Sumit Bose wrote: On Thu, Aug 14, 2014 at 07:18:40PM +020

Re: [Freeipa-devel] [PATCH] 0008 Use certmonger D-Bus API instead of messing with its files.

2014-08-29 Thread David Kupka
Hope, I've addressed all the issues (except 9 and 11, inline). Let's go for another round :-) On 08/27/2014 11:05 AM, Jan Cholasta wrote: Hi, Dne 25.8.2014 v 15:39 David Kupka napsal(a): On 08/19/2014 05:44 PM, Rob Crittenden wrote: David Kupka wrote: On 08/19/2014 09:58 AM, Martin Kosek wr

Re: [Freeipa-devel] [PATCH] 0154-0158 improve trust operations

2014-08-29 Thread Sumit Bose
On Fri, Aug 29, 2014 at 12:35:05PM +0300, Alexander Bokovoy wrote: > On Fri, 29 Aug 2014, Sumit Bose wrote: > >On Thu, Aug 21, 2014 at 01:43:35PM +0300, Alexander Bokovoy wrote: > >>Hi! > >> > >>Attached patchset improves trust operations: > >> > >>1. Ensures we only allow establishing trust to for

Re: [Freeipa-devel] [PATCH] 0154-0158 improve trust operations

2014-08-29 Thread Alexander Bokovoy
On Fri, 29 Aug 2014, Sumit Bose wrote: On Thu, Aug 21, 2014 at 01:43:35PM +0300, Alexander Bokovoy wrote: Hi! Attached patchset improves trust operations: 1. Ensures we only allow establishing trust to forest root domain 2. Ensures that we select primary domain controllers 3. Ensures first cre

Re: [Freeipa-devel] [PATCH] 0154-0158 improve trust operations

2014-08-29 Thread Sumit Bose
On Thu, Aug 21, 2014 at 01:43:35PM +0300, Alexander Bokovoy wrote: > Hi! > > Attached patchset improves trust operations: > > 1. Ensures we only allow establishing trust to forest root domain > 2. Ensures that we select primary domain controllers > 3. Ensures first create trust and later set it t

[Freeipa-devel] [PATCH] 745 webui: notify psw change success only once

2014-08-29 Thread Petr Vobornik
Password change initiated from header menu notified success twice. First one in `dialogs.password.dialog` and second one in a success callback. The second notification was removed. Caused by: https://fedorahosted.org/freeipa/changeset/870db2f677dff01750aeec104c90fce3ca0e54be/ -- Petr Vobornik Fro