Re: [Freeipa-devel] Upgrading a machine to use the proxy.

2011-09-15 Thread Adam Young
OK, here's something closer to releasable and written in Perl. This script will upgrade the proxy ports to 9444 by default, or allow you to override by setting the first parameter. enable_proxy_dogtag.pl Description: Perl program ___ Freeipa-devel

[Freeipa-devel] [PATCH] 875 fix rpm installation ordering

2011-09-15 Thread Rob Crittenden
freeipa-server-selinux was getting installed before freeipa-server which caused some SELinux contexts to not be set properly. The existing Requires we had used to fix things, perhaps a change in rpm caused this to break, who knows. I'm not even sure when this stopped working. I added an extr

Re: [Freeipa-devel] [PATCH] 45 Check that install hostname matches the server hostname

2011-09-15 Thread Rob Crittenden
Alexander Bokovoy wrote: On Mon, 12 Sep 2011, Jan Cholasta wrote: We can't dictate which interface matches the hostname. At most we can warn about this, but not fail to install. rob Changed to print a warning message instead of raising an error. ACK. pushed to master and ipa-2-1

Re: [Freeipa-devel] Structured DNS record API proposal

2011-09-15 Thread Adam Young
On 09/14/2011 12:18 PM, Martin Kosek wrote: Attached in the txt file. If you have any comments or suggestions to this proposal, please let me know. https://fedorahosted.org/freeipa/ticket/1766 ___ Freeipa-devel mailing list Freeipa-devel@redhat.com h

Re: [Freeipa-devel] [PATCH] 25 Create Tool for Enabling Disabling Managed Entry

2011-09-15 Thread JR Aquino
On Sep 15, 2011, at 1:47 AM, Martin Kosek wrote: > On Thu, 2011-09-15 at 00:47 +, JR Aquino wrote: >> On Jul 22, 2011, at 7:05 AM, Martin Kosek wrote: > >>> 5) I was thinking if there is a better solution to enabling/disabling of >>> the plugin. Likes setting something like "managedEntryEnabl

Re: [Freeipa-devel] [PATCH] 270 Fixed posix group checkbox.

2011-09-15 Thread Petr Vobornik
On 09/15/2011 02:06 AM, Endi Sukma Dewata wrote: In the adder dialog for groups the checkbox has been modified to use the correct field name "nonposix" and be checked by default. Note: This is a temporary fix to minimize the changes due to release schedule. Eventually the field label will be cha

Re: [Freeipa-devel] [PATCH] 25 Create Tool for Enabling Disabling Managed Entry

2011-09-15 Thread Martin Kosek
On Thu, 2011-09-15 at 09:01 -0400, Rob Crittenden wrote: > Martin Kosek wrote: > > On Thu, 2011-09-15 at 00:47 +, JR Aquino wrote: > > > > I think the cleanest solution would be to use ldap.make_filter and > > ldap.combine_filters functions to play with these filter. You can > > inspire yoursel

Re: [Freeipa-devel] [PATCH] 25 Create Tool for Enabling Disabling Managed Entry

2011-09-15 Thread Rob Crittenden
Martin Kosek wrote: On Thu, 2011-09-15 at 00:47 +, JR Aquino wrote: On Jul 22, 2011, at 7:05 AM, Martin Kosek wrote: 5) I was thinking if there is a better solution to enabling/disabling of the plugin. Likes setting something like "managedEntryEnabled" attribute to on/off as we do with co

Re: [Freeipa-devel] [PATCH] 874 suppress managed netgroups as indirect members of hosts

2011-09-15 Thread Rob Crittenden
Martin Kosek wrote: On Wed, 2011-09-14 at 16:39 -0400, Rob Crittenden wrote: Suppress managed netgroups as indirect members of hosts. This enhances a previous patch that I did for hostgroups. rob This works fine. I just one suggestion for the code - the function suppress_netgroup_memberof() f

Re: [Freeipa-devel] [PATCH] 25 Create Tool for Enabling Disabling Managed Entry

2011-09-15 Thread Martin Kosek
On Thu, 2011-09-15 at 00:47 +, JR Aquino wrote: > On Jul 22, 2011, at 7:05 AM, Martin Kosek wrote: > > 5) I was thinking if there is a better solution to enabling/disabling of > > the plugin. Likes setting something like "managedEntryEnabled" attribute > > to on/off as we do with compat plugin

Re: [Freeipa-devel] Structured DNS record API proposal

2011-09-15 Thread Adam Tkac
On 09/14/2011 06:18 PM, Martin Kosek wrote: Attached in the txt file. If you have any comments or suggestions to this proposal, please let me know. https://fedorahosted.org/freeipa/ticket/1766 Your proposal seems fine for me. However I would recommend not to expose routines for managing DNSSE

Re: [Freeipa-devel] [PATCH] 874 suppress managed netgroups as indirect members of hosts

2011-09-15 Thread Martin Kosek
On Wed, 2011-09-14 at 16:39 -0400, Rob Crittenden wrote: > Suppress managed netgroups as indirect members of hosts. This enhances a > previous patch that I did for hostgroups. > > rob This works fine. I just one suggestion for the code - the function suppress_netgroup_memberof() function was alr