This adds a new dependency on python-lxml. It also requires that
python-nss be the current version (0.8). This is needed for the http
authentication work I did for Jason which was added in a recent
version of python-nss. This patch also fixes a deprecation warning
concerning nssinit() which is dependent on a newer version of

To the best of my knowledge both python-lxml and python-nss.0-8 are
currently available in the RHEL5 IPA compose, they are both
definately available in fedora F-11, F-12, rawhide.
From: John Dennis <>
Subject: [PATCH] Require current versions of python-nss & python-lxml         |    3 ++-
 ipapython/ |    2 +-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/ b/
index ce2c0a6..659a76a 100644
--- a/
+++ b/
@@ -173,7 +173,8 @@ Requires: python-kerberos >= 1.1-3
 Requires: authconfig
 Requires: gnupg
 Requires: pyOpenSSL
-Requires: python-nss
+Requires: python-nss >= 0.8
+Requires: python-lxml
 %description python
 IPA is an integrated solution to provide centrally managed Identity (machine,
diff --git a/ipapython/ b/ipapython/
index 05b45c1..2052843 100644
--- a/ipapython/
+++ b/ipapython/
@@ -95,7 +95,7 @@ class NSSConnection(httplib.HTTPConnection):
         if not dbdir:
             raise RuntimeError("dbdir is required")
-        ssl.nssinit(dbdir)
+        nss.nss_init(dbdir)

Freeipa-devel mailing list

Reply via email to