[PATCH] Minor AD dyndns fixes

[Jakub Hrozek]

Hi,

the attached small patches fix smallish issues reported by users after
1.10beta1 was released. The biggest change is enabling the updates by
default in the AD provider. They were disabled by default (I guess to
have the same settings in both IPA and AD providers), but in AD it makes
sense to enable the update by default.

[PATCH 1/3] Fix a typo in sssd-ad man page
s/IPA/AD/

[PATCH 2/3] Enable the AD dynamic DNS updates by default
https://fedorahosted.org/sssd/ticket/1915

[PATCH 3/3] man: Clarify that AD dyndns updates are secured using GSS-TSIG
https://fedorahosted.org/sssd/ticket/1910

[Stephen Gallagher]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 05/11/2013 03:08 PM, Jakub Hrozek wrote:
> Hi,
>
> the attached small patches fix smallish issues reported by users 
> after 1.10beta1 was released. The biggest change is enabling the 
> updates by default in the AD provider. They were disabled by 
> default (I guess to have the same settings in both IPA and AD 
> providers), but in AD it makes sense to enable the update by 
> default.
>
> [PATCH 1/3] Fix a typo in sssd-ad man page s/IPA/AD/
>
> [PATCH 2/3] Enable the AD dynamic DNS updates by default 
> https://fedorahosted.org/sssd/ticket/1915
>
> [PATCH 3/3] man: Clarify that AD dyndns updates are secured using 
> GSS-TSIG https://fedorahosted.org/sssd/ticket/1910

Ack to all three. Additionally, can you add a patch to make a similar
comment about GSS-TSIG in the IPA provider? It would be useful to let
users know that it's a secure operation.
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.13 (GNU/Linux)
> Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
>
> iEYEARECAAYFAlGQ1uwACgkQeiVVYja6o6O4oQCcDgToCOIK0P+8tnqNnAMpeYgE
> vyQAnRuJv8PgoUoCN2rp9ZfwqQ3IQNcZ
> =GAPT
> -----END PGP SIGNATURE-----

[Jakub Hrozek]

On Mon, May 13, 2013 at 08:05:00AM -0400, Stephen Gallagher wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On 05/11/2013 03:08 PM, Jakub Hrozek wrote:
> > Hi,
> >
> > the attached small patches fix smallish issues reported by users 
> > after 1.10beta1 was released. The biggest change is enabling the 
> > updates by default in the AD provider. They were disabled by 
> > default (I guess to have the same settings in both IPA and AD 
> > providers), but in AD it makes sense to enable the update by 
> > default.
> >
> > [PATCH 1/3] Fix a typo in sssd-ad man page s/IPA/AD/
> >
> > [PATCH 2/3] Enable the AD dynamic DNS updates by default 
> > https://fedorahosted.org/sssd/ticket/1915
> >
> > [PATCH 3/3] man: Clarify that AD dyndns updates are secured using 
> > GSS-TSIG https://fedorahosted.org/sssd/ticket/1910
>
> Ack to all three.

Pushed to master.
> Additionally, can you add a patch to make a similar
> comment about GSS-TSIG in the IPA provider? It would be useful to let
> users know that it's a secure operation.

Sure, a new patch is attached.

[Stephen Gallagher]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 05/13/2013 11:00 AM, Jakub Hrozek wrote:
> On Mon, May 13, 2013 at 08:05:00AM -0400, Stephen Gallagher wrote:
> > -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
> >
> > On 05/11/2013 03:08 PM, Jakub Hrozek wrote:
> > > Hi,
> > >
> > > the attached small patches fix smallish issues reported by
> > > users after 1.10beta1 was released. The biggest change is
> > > enabling the updates by default in the AD provider. They were
> > > disabled by default (I guess to have the same settings in both
> > > IPA and AD providers), but in AD it makes sense to enable the
> > > update by default.
> > >
> > > [PATCH 1/3] Fix a typo in sssd-ad man page s/IPA/AD/
> > >
> > > [PATCH 2/3] Enable the AD dynamic DNS updates by default 
> > > https://fedorahosted.org/sssd/ticket/1915
> > >
> > > [PATCH 3/3] man: Clarify that AD dyndns updates are secured
> > > using GSS-TSIG https://fedorahosted.org/sssd/ticket/1910
> >
> > Ack to all three.
>
> Pushed to master.
> > Additionally, can you add a patch to make a similar comment about
> > GSS-TSIG in the IPA provider? It would be useful to let users
> > know that it's a secure operation.
>
> Sure, a new patch is attached.

Ack
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.13 (GNU/Linux)
> Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
>
> iEYEARECAAYFAlGRAGMACgkQeiVVYja6o6OG8ACgmxmJqYXbsy/n9u6BCDQXF3K8
> z5YAnjD4xv0Db/dSsVayjOtK2tt4Atfy
> =k++e
> -----END PGP SIGNATURE-----

[Jakub Hrozek]

On Mon, May 13, 2013 at 11:01:55AM -0400, Stephen Gallagher wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On 05/13/2013 11:00 AM, Jakub Hrozek wrote:
> > On Mon, May 13, 2013 at 08:05:00AM -0400, Stephen Gallagher wrote:
> > > -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
> > >
> > > On 05/11/2013 03:08 PM, Jakub Hrozek wrote:
> > > > Hi,
> > > >
> > > > the attached small patches fix smallish issues reported by
> > > > users after 1.10beta1 was released. The biggest change is
> > > > enabling the updates by default in the AD provider. They were
> > > > disabled by default (I guess to have the same settings in both
> > > > IPA and AD providers), but in AD it makes sense to enable the
> > > > update by default.
> > > >
> > > > [PATCH 1/3] Fix a typo in sssd-ad man page s/IPA/AD/
> > > >
> > > > [PATCH 2/3] Enable the AD dynamic DNS updates by default 
> > > > https://fedorahosted.org/sssd/ticket/1915
> > > >
> > > > [PATCH 3/3] man: Clarify that AD dyndns updates are secured
> > > > using GSS-TSIG https://fedorahosted.org/sssd/ticket/1910
> > >
> > > Ack to all three.
> >
> > Pushed to master.
> > > Additionally, can you add a patch to make a similar comment about
> > > GSS-TSIG in the IPA provider? It would be useful to let users
> > > know that it's a secure operation.
> >
> > Sure, a new patch is attached.
>
> Ack

Pushed to master.