<feed xmlns='http://www.w3.org/2005/Atom'>
<title>freeipa.git/install/share, branch navigation</title>
<subtitle>Unnamed repository; edit this file 'description' to name the repository.</subtitle>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/edewata/public_git/freeipa.git/'/>
<entry>
<title>Wait for memberof task and DS to start before proceeding in installation.</title>
<updated>2011-04-22T09:43:50+00:00</updated>
<author>
<name>Rob Crittenden</name>
<email>rcritten@redhat.com</email>
</author>
<published>2011-04-21T20:43:10+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/edewata/public_git/freeipa.git/commit/?id=46a341142079d1722647d24d06155346fc1c8442'/>
<id>46a341142079d1722647d24d06155346fc1c8442</id>
<content type='text'>
This was causing a replica DS instance to crash if the task was not
completed when we attempted a shutdown to do a restart.

In replication.py we were restarting the DS instance without waiting
for the ports to become available.

It is unlikely that the dn of the memberof task will change but just in
case I noted it in the two places it is referenced.

ticket 1188
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This was causing a replica DS instance to crash if the task was not
completed when we attempted a shutdown to do a restart.

In replication.py we were restarting the DS instance without waiting
for the ports to become available.

It is unlikely that the dn of the memberof task will change but just in
case I noted it in the two places it is referenced.

ticket 1188
</pre>
</div>
</content>
</entry>
<entry>
<title>The default groups we create should have ipaUniqueId set</title>
<updated>2011-04-15T11:02:17+00:00</updated>
<author>
<name>Rob Crittenden</name>
<email>rcritten@redhat.com</email>
</author>
<published>2011-04-14T18:37:45+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/edewata/public_git/freeipa.git/commit/?id=fe67680da5c3d7799884bdbd4d900070394dc5d0'/>
<id>fe67680da5c3d7799884bdbd4d900070394dc5d0</id>
<content type='text'>
This adds a new directive to ipa-ldap-updater: addifnew. This will add
a new attribute only if it doesn't exist in the current entry. We can't
compare values because the value we are adding is automatically generated.

ticket 1177
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This adds a new directive to ipa-ldap-updater: addifnew. This will add
a new attribute only if it doesn't exist in the current entry. We can't
compare values because the value we are adding is automatically generated.

ticket 1177
</pre>
</div>
</content>
</entry>
<entry>
<title>Fix ORDERING in some attributetypes and remove other unnecessary elements.</title>
<updated>2011-04-06T01:46:32+00:00</updated>
<author>
<name>Rob Crittenden</name>
<email>rcritten@redhat.com</email>
</author>
<published>2011-04-05T20:28:59+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/edewata/public_git/freeipa.git/commit/?id=b9a2c11d6f6be6e7e599a48c70e798b720222b35'/>
<id>b9a2c11d6f6be6e7e599a48c70e798b720222b35</id>
<content type='text'>
Looking at the schema in 60basev2.ldif there were many attributes that did
not have an ORDERING matching rule specified correctly. There were also a
number of attributeTypes that should have been just SUP
distinguishedName that had a combination of SUP, SYNTAX, ORDERING, etc.

This requires 389-ds-base-1.2.8.0-1+

ticket 1153
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Looking at the schema in 60basev2.ldif there were many attributes that did
not have an ORDERING matching rule specified correctly. There were also a
number of attributeTypes that should have been just SUP
distinguishedName that had a combination of SUP, SYNTAX, ORDERING, etc.

This requires 389-ds-base-1.2.8.0-1+

ticket 1153
</pre>
</div>
</content>
</entry>
<entry>
<title>Store list of non-master replicas in DIT and provide way to list them</title>
<updated>2011-03-02T14:46:46+00:00</updated>
<author>
<name>Simo Sorce</name>
<email>ssorce@redhat.com</email>
</author>
<published>2011-02-28T22:35:44+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/edewata/public_git/freeipa.git/commit/?id=54b26270186422607ef52b9b408326744b2d86d1'/>
<id>54b26270186422607ef52b9b408326744b2d86d1</id>
<content type='text'>
Fixes: https://fedorahosted.org/freeipa/ticket/1007
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Fixes: https://fedorahosted.org/freeipa/ticket/1007
</pre>
</div>
</content>
</entry>
<entry>
<title>Use Sudo rather than SUDO as a label.</title>
<updated>2011-03-01T21:48:35+00:00</updated>
<author>
<name>Rob Crittenden</name>
<email>rcritten@redhat.com</email>
</author>
<published>2011-02-28T16:44:27+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/edewata/public_git/freeipa.git/commit/?id=07ba40f33ea4434f11bd3919ad591d3d6acccf6c'/>
<id>07ba40f33ea4434f11bd3919ad591d3d6acccf6c</id>
<content type='text'>
ticket 1005
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
ticket 1005
</pre>
</div>
</content>
</entry>
<entry>
<title>Fix replica setup using replication admin kerberos credentials</title>
<updated>2011-03-01T16:02:55+00:00</updated>
<author>
<name>Simo Sorce</name>
<email>ssorce@redhat.com</email>
</author>
<published>2011-02-25T23:23:10+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/edewata/public_git/freeipa.git/commit/?id=b6ca0f210c093805f15177761b13070c6c246b34'/>
<id>b6ca0f210c093805f15177761b13070c6c246b34</id>
<content type='text'>
Fixes: https://fedorahosted.org/freeipa/ticket/1022
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Fixes: https://fedorahosted.org/freeipa/ticket/1022
</pre>
</div>
</content>
</entry>
<entry>
<title>Create default disabled sudo bind user</title>
<updated>2011-02-23T20:32:24+00:00</updated>
<author>
<name>Jr Aquino</name>
<email>jr.aquino@citrix.com</email>
</author>
<published>2011-02-23T19:37:07+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/edewata/public_git/freeipa.git/commit/?id=1770750b8adad6d9f2d98c0c9debc54d61f341cf'/>
<id>1770750b8adad6d9f2d98c0c9debc54d61f341cf</id>
<content type='text'>
Read access is denied to the sudo container for unauthenticated users.
This shared user can be used to provide authenticated access to the
sudo information.

https://fedorahosted.org/freeipa/ticket/998
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Read access is denied to the sudo container for unauthenticated users.
This shared user can be used to provide authenticated access to the
sudo information.

https://fedorahosted.org/freeipa/ticket/998
</pre>
</div>
</content>
</entry>
<entry>
<title>Entitlements ACIs not visible to Permission plugin</title>
<updated>2011-02-22T15:04:19+00:00</updated>
<author>
<name>Martin Kosek</name>
<email>mkosek@redhat.com</email>
</author>
<published>2011-02-22T14:25:43+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/edewata/public_git/freeipa.git/commit/?id=744eb8ea740d9f63a1757cb4d83f63ee4096dea0'/>
<id>744eb8ea740d9f63a1757cb4d83f63ee4096dea0</id>
<content type='text'>
This patch fixes Entitlements privileges and ACIs. There were
missing descriptions or the ACIs could not be processed by
Permissino plugin because of missing prefix.

https://fedorahosted.org/freeipa/ticket/997
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This patch fixes Entitlements privileges and ACIs. There were
missing descriptions or the ACIs could not be processed by
Permissino plugin because of missing prefix.

https://fedorahosted.org/freeipa/ticket/997
</pre>
</div>
</content>
</entry>
<entry>
<title>Add default roles and permissions for HBAC, SUDO and pw policy</title>
<updated>2011-02-22T15:02:24+00:00</updated>
<author>
<name>Rob Crittenden</name>
<email>rcritten@redhat.com</email>
</author>
<published>2011-02-22T14:21:14+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/edewata/public_git/freeipa.git/commit/?id=ac68ea3c6c633206a01db5a0b74b994ab0c29093'/>
<id>ac68ea3c6c633206a01db5a0b74b994ab0c29093</id>
<content type='text'>
Created some default roles as examples. In doing so I realized that
we were completely missing default rules for HBAC, SUDO and password
policy so I added those as well.

I ran into a problem when the updater has a default record and an add
at the same time, it should handle it better now.

ticket 585
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Created some default roles as examples. In doing so I realized that
we were completely missing default rules for HBAC, SUDO and password
policy so I added those as well.

I ran into a problem when the updater has a default record and an add
at the same time, it should handle it better now.

ticket 585
</pre>
</div>
</content>
</entry>
<entry>
<title>Browser configuration support for Firefox 4</title>
<updated>2011-02-17T17:12:23+00:00</updated>
<author>
<name>Martin Kosek</name>
<email>mkosek@redhat.com</email>
</author>
<published>2011-02-17T16:51:03+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/edewata/public_git/freeipa.git/commit/?id=dbc268d96419b2f56b82f518496f3597c4afbc07'/>
<id>dbc268d96419b2f56b82f518496f3597c4afbc07</id>
<content type='text'>
Support of navigator.preferences that is used to access browser
configuration was dropped in Firefox 4. This disables automatic
configuration of user preferences in this browser that is needed
to use Kerberos single sign-on.

This patch detectes a lack of this interface and tries to
configure the browser using new Services module introduced in
Gecko 2 (used in Firefox 4, SeaMonkey 2.1).

https://fedorahosted.org/freeipa/ticket/975
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Support of navigator.preferences that is used to access browser
configuration was dropped in Firefox 4. This disables automatic
configuration of user preferences in this browser that is needed
to use Kerberos single sign-on.

This patch detectes a lack of this interface and tries to
configure the browser using new Services module introduced in
Gecko 2 (used in Firefox 4, SeaMonkey 2.1).

https://fedorahosted.org/freeipa/ticket/975
</pre>
</div>
</content>
</entry>
</feed>
