[Freeipa-devel] [PATCH] 304 Allow localhost in zone ACIs

Petr Vobornik pvoborni at redhat.com
Tue Sep 11 15:15:32 UTC 2012


On 09/10/2012 09:12 PM, Endi Sukma Dewata wrote:
> On 9/6/2012 7:00 AM, Martin Kosek wrote:
>> On 09/06/2012 01:35 PM, Petr Vobornik wrote:
>>> On 09/06/2012 11:51 AM, Martin Kosek wrote:
>>>> Loopback address, "localhost" and "localnets" ACIs are no longer
>>>> an issue for bind-dyndb-ldap. Allow them in our validators.
>>>>
>>>
>>> Martin's patch works and looks good - ACK.
>>>
>>>
>>> Attaching patch for Web UI part.
>>
>> Web UI validator works fine too, ACK.
>>
>> Pushed both patches to master, ipa-3-0.
>>
>> Martin
>
> Looks like there's a problem in DNS zone details page. The
> idnssoaserial's maxvalue is an empty string so the validation fails even
> if you are just opening an existing DNS zone. So either the server
> should not return maxvalue or the UI should check for possible empty
> string.
>
I fixed the problem on both sides in patches 212, 213.

212 is fixing Web UI to be able to work with empty strings.
213 is fixing python part: serialization of long
-- 
Petr Vobornik




More information about the Freeipa-devel mailing list