[Freeipa-devel] [PATCHES 0001-0007] Profile management

2015-05-15 Thread Fraser Tweedale
Please find attached latest patches including new patches: - 0006 enable LDAP-based profiles in Dogtag on upgrade - 0007 import included profiles during install or upgrade There is one TODO in the patches where some more code is needed on Dogtag side, and another TODO (not in patches) to migrate

Re: [Freeipa-devel] [PATCH 0325] Add Domain Level feature

2015-05-15 Thread Ludwig Krispenz
On 05/14/2015 11:48 AM, Jan Cholasta wrote: Hi, Dne 14.5.2015 v 11:00 Tomas Babej napsal(a): Hi, this patch implements the domain level feature. https://fedorahosted.org/freeipa/ticket/5018 Tomas 1) +# Create entry proclaiming Domain Level support of this master +# This will update the

[Freeipa-devel] [PATCH] 830 webui: fix empty table border in Firefox

2015-05-15 Thread Petr Vobornik
Firefox suffers from: https://bugzilla.mozilla.org/show_bug.cgi?id=409254 This is a workaround to fix it. -- Petr Vobornik From 8743615886ed3f10dddbf78bc0152f3b7fbdafa2 Mon Sep 17 00:00:00 2001 From: Petr Vobornik pvobo...@redhat.com Date: Thu, 7 May 2015 10:23:11 +0200 Subject: [PATCH] webui:

[Freeipa-devel] [PATCH 0364] Remove unused files rdlist.c and rdlist.h

2015-05-15 Thread Petr Spacek
Hello, Remove unused files rdlist.c and rdlist.h. I noticed this cruft while preparing the previous patchset. This patch is independent and applicable directly to master branch. -- Petr^2 Spacek From 274f5ea92866c50c77c59f6dabc64c3bdf162ace Mon Sep 17 00:00:00 2001 From: Petr Spacek

Re: [Freeipa-devel] [PATCH 0325] Add Domain Level feature

2015-05-15 Thread Ludwig Krispenz
On 05/15/2015 09:22 AM, Ludwig Krispenz wrote: On 05/14/2015 11:48 AM, Jan Cholasta wrote: Hi, Dne 14.5.2015 v 11:00 Tomas Babej napsal(a): Hi, this patch implements the domain level feature. https://fedorahosted.org/freeipa/ticket/5018 Tomas 1) +# Create entry proclaiming Domain

[Freeipa-devel] [PATCH] 831 webui: better error reporting

2015-05-15 Thread Petr Vobornik
Helps in development and debugging. - ActionDropdownWidget - report error if required action is missing - report build errors to console -- Petr Vobornik From 02464015d151d859ef79c9e87d65684d78e6261e Mon Sep 17 00:00:00 2001 From: Petr Vobornik pvobo...@redhat.com Date: Wed, 22 Apr 2015 13:17:25

[Freeipa-devel] [PATCH 0339-0363] Implement meta-database

2015-05-15 Thread Petr Spacek
Hello, this patch set adds meta-database which is one of prerequisites for other work. These changes should not be user-visible. You might compile the plugin with CFLAGS=-DMETADB_DEBUG and check contect of /tmp/metadb.db after BIND shutdown. Please see

Re: [Freeipa-devel] [PATCH] 822 webui: topology plugin

2015-05-15 Thread Petr Vobornik
On 04/21/2015 04:09 PM, Petr Vobornik wrote: First iteration of Topology plugin Web UI. It reflects current state of topology plugin python part which is implemented in [PATCH] manage replication topology in the shared tree and my wip patch. I expect that the server API part will change a bit

Re: [Freeipa-devel] [PATCH 0246] Don't use proxy to check CA status during install/upgrade

2015-05-15 Thread Jan Cholasta
Hi, Dne 13.5.2015 v 13:46 Martin Basti napsal(a): https://fedorahosted.org/freeipa/ticket/4994 Patch attached. Thanks, ACK. Pushed to master: 3c86b0ef3e684d45301ae2c2452932ea4f279f08 Honza -- Jan Cholasta -- Manage your subscription for the Freeipa-devel mailing list:

Re: [Freeipa-devel] [PATCH] 832-850 Stage Users Web UI and its prerequisites

2015-05-15 Thread Petr Vobornik
On 05/15/2015 10:59 AM, Petr Vobornik wrote: Stage User Web UI is actually just the last four patches(847-850). I expect that patch 848 - deleter dialog needs some adjustments (was discussed offline). The rest are prerequisites, namely: - update of patternfly - update navigation code to

Re: [Freeipa-devel] [PATCH 0248] DNSSEC: Fix: Do not recreate kasp.db if already exists

2015-05-15 Thread Petr Spacek
On 14.5.2015 17:09, Martin Basti wrote: https://fedorahosted.org/freeipa/ticket/4657 Patch attached. ACK for this change but it generally it would be nice if function __setup_dnssec had some meaningful name, e.g. __setup_opendnssec_db. -- Petr^2 Spacek -- Manage your subscription for the

Re: [Freeipa-devel] [PATCH 0249] DNSSEC: update kasp configuration template: increase key size lifetime

2015-05-15 Thread Petr Spacek
On 14.5.2015 17:23, Martin Basti wrote: https://fedorahosted.org/freeipa/ticket/4657 Looking at 3072 bit key size, I think we can prolong KSK key rotation period to 2 years. It should be okay according to http://dx.doi.org/10.6028/NIST.SP.800-81-2 section 11.2. Modified patch is attached.

Re: [Freeipa-devel] Wiki: automatic bookkeeping of Design documents

2015-05-15 Thread Martin Kosek
On 05/06/2015 08:47 AM, Martin Kosek wrote: Hello all, Knowing the sorrow and unmaintained state of the pages collecting links to our designs [1][2], I think we need to execute the second half of my evil plan for Design Document management. We have the Feature design box (see top right corner,

Re: [Freeipa-devel] [PATCHES 0001-0007] Profile management

2015-05-15 Thread Martin Basti
On 15/05/15 10:24, Fraser Tweedale wrote: Please find attached latest patches including new patches: - 0006 enable LDAP-based profiles in Dogtag on upgrade - 0007 import included profiles during install or upgrade There is one TODO in the patches where some more code is needed on Dogtag side,

Re: [Freeipa-devel] [PATCH 0249] DNSSEC: update kasp configuration template: increase key size lifetime

2015-05-15 Thread Martin Basti
On 15/05/15 13:12, Petr Spacek wrote: On 14.5.2015 17:23, Martin Basti wrote: https://fedorahosted.org/freeipa/ticket/4657 Looking at 3072 bit key size, I think we can prolong KSK key rotation period to 2 years. It should be okay according to http://dx.doi.org/10.6028/NIST.SP.800-81-2 section

Re: [Freeipa-devel] [PATCH 0322-0337] Fix mysterious failures in PTR record synchronization

2015-05-15 Thread Tomas Hozza
On 05/05/2015 05:24 PM, Petr Spacek wrote: Hello, Attached patch set is the best fix for https://fedorahosted.org/bind-dyndb-ldap/ticket/155 I was able to write. This patch set should fix vast majority of race conditions. Unfortunately it cannot be 100 % reliable without support for LDAP

Re: [Freeipa-devel] [PATCH] 832-850 Stage Users Web UI and its prerequisites

2015-05-15 Thread David Kupka
On 05/15/2015 12:34 PM, Petr Vobornik wrote: On 05/15/2015 10:59 AM, Petr Vobornik wrote: Stage User Web UI is actually just the last four patches(847-850). I expect that patch 848 - deleter dialog needs some adjustments (was discussed offline). The rest are prerequisites, namely: - update of

Re: [Freeipa-devel] [PATCHES 0233-0234] DNSSEC: forwarders validation

2015-05-15 Thread Petr Spacek
On 7.5.2015 18:12, Martin Basti wrote: On 07/05/15 12:19, Petr Spacek wrote: On 7.5.2015 08:59, David Kupka wrote: On 05/06/2015 03:20 PM, Martin Basti wrote: On 05/05/15 15:00, Martin Basti wrote: On 30/04/15 15:37, David Kupka wrote: On 04/24/2015 02:56 PM, Martin Basti wrote: Patches

[Freeipa-devel] [PATCHES 0033-0034] fix recent bugs introduced by letting httpd use file-based ccache

2015-05-15 Thread Martin Babinsky
These two patches fix two issues reported by David Kupka in most recent freeipa-master builds, which are caused by my previous patch 0031 provide a dedicated ccache file to httpd. Patch 0033 moves `clientcaches` and `krbcache` directories under a common `ipa/` subdir in Apache runtime dir

Re: [Freeipa-devel] [PATCH 0338] Add includes to zone.c to improve compatibility with BIND 9.9.4

2015-05-15 Thread Petr Spacek
On 15.5.2015 15:50, Tomas Hozza wrote: On 05/07/2015 02:55 PM, Petr Spacek wrote: Hello, This is minor improvement for patch set related to ticket #155. Add includes to zone.c to improve compatibility with BIND 9.9.4. Hi. I tested and reviewed the patch from

Re: [Freeipa-devel] [PATCH 0247] Modularization of the DNS subsytem installer

2015-05-15 Thread Martin Basti
On 14/05/15 15:16, Martin Basti wrote: Required for new installers. Patch attached. Updated patch attached. -- Martin Basti From 71d1762e51603d756b605c28622a5a58c9c351e8 Mon Sep 17 00:00:00 2001 From: Martin Basti mba...@redhat.com Date: Wed, 13 May 2015 18:49:25 +0200 Subject: [PATCH]

Re: [Freeipa-devel] [PATCH] 801-806 webui-ci: otptoken tests

2015-05-15 Thread Milan Kubik
On 05/12/2015 01:57 PM, Petr Vobornik wrote: On 05/11/2015 01:25 PM, Milan Kubik wrote: On 05/07/2015 01:38 PM, Petr Vobornik wrote: On 02/19/2015 03:51 PM, Petr Vobornik wrote: https://fedorahosted.org/freeipa/ticket/4307 For ipa-4-1 apply: - patch 800 (different thread) - patches 801-806

[Freeipa-devel] [PATCH 426] baseldap: Fix possible crash in LDAPObject.handle_duplicate_entry

2015-05-15 Thread Jan Cholasta
Hi, the attached patch fixes a bug I have discovered while reviewing the vault patches. Pushed to master under the one-liner rule: dc668b1b6a75472ea79a6af4dbcd8c6a2c5a0384 Honza -- Jan Cholasta From ac96930015e735588e3830ed88948ddcc0b48633 Mon Sep 17 00:00:00 2001 From: Jan Cholasta

Re: [Freeipa-devel] [PATCH] 0005 User life cycle: del/mod/find/show stageuser commands

2015-05-15 Thread David Kupka
Hello Thierry, thanks for the patch set. Overall functionality of ULC feature looks good to me and is definitely alpha ready. I found following issues but don't insist on fixing it right now: 1) When stageuser-activate fails due to already existent active/deleted user. DN is show instead of

Re: [Freeipa-devel] [PATCH 0322-0337] Fix mysterious failures in PTR record synchronization

2015-05-15 Thread Petr Spacek
On 15.5.2015 15:48, Tomas Hozza wrote: On 05/05/2015 05:24 PM, Petr Spacek wrote: Hello, Attached patch set is the best fix for https://fedorahosted.org/bind-dyndb-ldap/ticket/155 I was able to write. This patch set should fix vast majority of race conditions. Unfortunately it cannot be

Re: [Freeipa-devel] [PATCHES 0033-0034] fix recent bugs introduced by letting httpd use file-based ccache

2015-05-15 Thread Jan Cholasta
Dne 15.5.2015 v 16:16 Martin Babinsky napsal(a): These two patches fix two issues reported by David Kupka in most recent freeipa-master builds, which are caused by my previous patch 0031 provide a dedicated ccache file to httpd. Patch 0033 moves `clientcaches` and `krbcache` directories under a

Re: [Freeipa-devel] [PATCHES 0033-0034] fix recent bugs introduced by letting httpd use file-based ccache

2015-05-15 Thread Martin Babinsky
On 05/15/2015 04:25 PM, Jan Cholasta wrote: Dne 15.5.2015 v 16:16 Martin Babinsky napsal(a): These two patches fix two issues reported by David Kupka in most recent freeipa-master builds, which are caused by my previous patch 0031 provide a dedicated ccache file to httpd. Patch 0033 moves