<html> <head> <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type"> </head> <body bgcolor="#FFFFFF" text="#000000"> <div class="moz-cite-prefix">On 06/06/2013 04:04 PM, Tomas Babej wrote: </div> <blockquote cite="mid:51B09703.9080801@redhat.com" type="cite"> <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type"> <div class="moz-cite-prefix">On 05/31/2013 07:35 PM, Ana Krivokapic wrote: </div> <blockquote cite="mid:51A8DF79.9070700@redhat.com" type="cite"> <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type"> <div class="moz-cite-prefix">On 05/28/2013 04:49 PM, Ana Krivokapic wrote: </div> <blockquote cite="mid:51A4C406.5000206@redhat.com" type="cite"> <pre wrap="">Hello, This patch addresses <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://fedorahosted.org/freeipa/ticket/3634">https://fedorahosted.org/freeipa/ticket/3634</a> </pre> <fieldset class="mimeAttachmentHeader"></fieldset> <pre wrap="">_______________________________________________ Freeipa-devel mailing list <a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:Freeipa-devel@redhat.com">Freeipa-devel@redhat.com</a> <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/freeipa-devel">https://www.redhat.com/mailman/listinfo/freeipa-devel</a></pre> </blockquote> This updated patch applies on top of tbabej's patches 0053-0055. As suggested by Tomáš (<a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://www.redhat.com/archives/freeipa-devel/2013-May/msg00352.html">https://www.redhat.com/archives/freeipa-devel/2013-May/msg00352.html</a>), I refactored support of "mock" LDAP objects to tests/util, and modified test_range_plugin and test_cli to use it. <pre class="moz-signature" cols="80">-- Regards, Ana Krivokapic Associate Software Engineer FreeIPA team Red Hat Inc.</pre> <fieldset class="mimeAttachmentHeader"></fieldset> <pre wrap="">_______________________________________________ Freeipa-devel mailing list <a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:Freeipa-devel@redhat.com">Freeipa-devel@redhat.com</a> <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/freeipa-devel">https://www.redhat.com/mailman/listinfo/freeipa-devel</a></pre> </blockquote> I looked thoroughly at the issue here.. The ticket is a little bit confusing about that, but you need to require primary/secondary rid base for the range after ipa-adtrust-install has been run. Currently, the way your patch works, the bases are required only if at least one trust exists. [root@vm-002 labtool]# ipa-adtrust-install The log file for this installation can be found in /var/log/ipaserver-install.log [snip] Setup complete [snip] [root@vm-002 labtool]# ipa idrange-add local First Posix ID of the range: 10 Number of IDs in the range: 20 ---------------------- Added ID range "local" ---------------------- Range name: local First Posix ID of the range: 10 Number of IDs in the range: 20 Range type: local domain range After adding the trust, everything works ok: [root@vm-002 labtool]# ipa trust-find --------------- 1 trust matched --------------- Realm name: test Domain NetBIOS name: TEST Domain Security Identifier: S-1-5-21-259319770-2312917334-591429603 Trust type: Active Directory domain [root@vm-002 labtool]# ipa idrange-add local First Posix ID of the range: 10 Number of IDs in the range: 10 First RID of the corresponding RID range: 10 First RID of the secondary RID range: 20 ---------------------- Added ID range "local" ---------------------- Range name: local First Posix ID of the range: 10 Number of IDs in the range: 10 First RID of the corresponding RID range: 10 First RID of the secondary RID range: 20 Range type: local domain range We should require for primary/secondary rid base after ipa-adtrust-install has been run even if no trust is established. Tomas </blockquote> This patch introduces a new command which can be used to determine if ipa-adtrust-install has been run on the system. Tests have been amended accordingly. This patch applies on top of tbabej's patches 70 & 71. <pre class="moz-signature" cols="80">-- Regards, Ana Krivokapic Associate Software Engineer FreeIPA team Red Hat Inc.</pre> </body> </html>