Re: [Freeipa-devel] Testing FreeIPA 4.3 for GA

2015-12-16 Thread Lukas Slebodnik
On (15/12/15 08:32), Lukas Slebodnik wrote:
>On (15/12/15 01:05), Petr Vobornik wrote:
>>Blocking patches for FreeIPA 4.3 were pushed, ipa-4-3 branch was created.
>>Master branch is ready for 4.4 development.
>>
>>A build is available for testing in my pvoborni/freeipa-4-3 COPR repo [1]
>>until the official 4.3 repo is created. The repo contains only this build.
>>The build is not pure upstream ipa-4-3 branch but rather a build which will
>>go to Fedora rawhide and official 4.3 copr repo - Fedora downstream spec with
>>the SELinux workaround applied [2][3].
>>
>>Known issues:
>>* https://fedorahosted.org/freeipa/ticket/5469 - requires fix in PKI
>>* https://bugzilla.redhat.com/show_bug.cgi?id=1289930 - SELinux Policy update
>>needed for connection check
>>
>>I have started drafting release page [4].
>>
>It looks like there is a bug in dnf, because it cannot install
>freeipa-tests package; which was renamed to python2-ipatests.
>
>[root@3a8359f9e1cd ~]# rpm -q freeipa-server
>freeipa-server-4.3.0-1.fc23.x86_64
>
>
>[root@3a8359f9e1cd ~]# dnf install -y --best freeipa-tests
>Last metadata expiration check performed 0:09:23 ago on Tue Dec 15 07:16:26
>2015.
>Error: package freeipa-tests-4.2.3-1.1.fc23.x86_64 requires freeipa-client =
>4.2.3-1.1.fc23, but none of the providers can be installed.
>package freeipa-tests-4.2.2-1.fc23.x86_64 requires freeipa-python =
>4.2.2-1.fc23, but none of the providers can be installed
>(try to add '--allowerasing' to command line to replace conflicting packages)
>
>
>[root@3a8359f9e1cd ~]# rpm -qp --provides
>./python2-ipatests-4.3.0-1.fc23.noarch.rpm
>freeipa-tests(x86-64) = 4.3.0-1.fc23
>ipa-tests(x86-64) = 4.3.0
>python-ipatests = 4.3.0-1.fc23
>python2-ipatests = 4.3.0-1.fc23
>
>
>FYI: It works with yum-deprecated.
>
dnf bug https://bugzilla.redhat.com/show_bug.cgi?id=1291850

LS

-- 
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code


Re: [Freeipa-devel] Testing FreeIPA 4.3 for GA

2015-12-15 Thread Aleš Mareček


- Original Message -
> From: "Milan Kubík" <mku...@redhat.com>
> To: "Petr Vobornik" <pvobo...@redhat.com>
> Cc: "freeipa-devel" <freeipa-devel@redhat.com>, "Ales Marecek" 
> <amare...@redhat.com>
> Sent: Tuesday, December 15, 2015 4:53:18 PM
> Subject: Re: [Freeipa-devel] Testing FreeIPA 4.3 for GA
> 
> On 12/15/2015 04:35 PM, Petr Vobornik wrote:
> > On 12/15/2015 01:05 AM, Petr Vobornik wrote:
> >> Blocking patches for FreeIPA 4.3 were pushed, ipa-4-3 branch was
> >> created. Master branch is ready for 4.4 development.
> >>
> >> A build is available for testing in my pvoborni/freeipa-4-3 COPR repo
> >> [1] until the official 4.3 repo is created. The repo contains only this
> >> build. The build is not pure upstream ipa-4-3 branch but rather a build
> >> which will go to Fedora rawhide and official 4.3 copr repo - Fedora
> >> downstream spec with the SELinux workaround applied [2][3].
> >>
> >> Known issues:
> >> * https://fedorahosted.org/freeipa/ticket/5469 - requires fix in PKI
> >> * https://bugzilla.redhat.com/show_bug.cgi?id=1289930 - SELinux Policy
> >> update needed for connection check
> >>
> >> I have started drafting release page [4].
> >>
> >> [1] https://copr.fedoraproject.org/coprs/pvoborni/freeipa-4-3/
> >> [2] https://fedorahosted.org/freeipa/ticket/5533
> >> [3]
> >> http://www.redhat.com/archives/freeipa-devel/2015-December/msg00234.html
> >> [4] http://www.freeipa.org/page/Releases/4.3.0
> >
> > Copr contains a rebuild with a patch for ticket:
> >   https://fedorahosted.org/freeipa/ticket/5551
> >
> > https://copr.fedoraproject.org/coprs/pvoborni/freeipa-4-3/build/147975/
> >
> > The build has exactly the same version as the one before. Ales, Milan,
> > do we want to differentiate that somehow?
> >
> The job uses fresh install of the rpms. The same version and build
> shouldn't be a problem.

+1, I don't see any issue to use the "same" (not-yet-released) version.

> 
> --
> Milan Kubik
> 
> 

-- 
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

Re: [Freeipa-devel] Testing FreeIPA 4.3 for GA

2015-12-15 Thread Milan Kubík

On 12/15/2015 05:04 PM, Aleš Mareček wrote:


- Original Message -

From: "Milan Kubík" <mku...@redhat.com>
To: "Petr Vobornik" <pvobo...@redhat.com>
Cc: "freeipa-devel" <freeipa-devel@redhat.com>, "Ales Marecek" 
<amare...@redhat.com>
Sent: Tuesday, December 15, 2015 4:53:18 PM
Subject: Re: [Freeipa-devel] Testing FreeIPA 4.3 for GA

On 12/15/2015 04:35 PM, Petr Vobornik wrote:

On 12/15/2015 01:05 AM, Petr Vobornik wrote:

Blocking patches for FreeIPA 4.3 were pushed, ipa-4-3 branch was
created. Master branch is ready for 4.4 development.

A build is available for testing in my pvoborni/freeipa-4-3 COPR repo
[1] until the official 4.3 repo is created. The repo contains only this
build. The build is not pure upstream ipa-4-3 branch but rather a build
which will go to Fedora rawhide and official 4.3 copr repo - Fedora
downstream spec with the SELinux workaround applied [2][3].

Known issues:
* https://fedorahosted.org/freeipa/ticket/5469 - requires fix in PKI
* https://bugzilla.redhat.com/show_bug.cgi?id=1289930 - SELinux Policy
update needed for connection check

I have started drafting release page [4].

[1] https://copr.fedoraproject.org/coprs/pvoborni/freeipa-4-3/
[2] https://fedorahosted.org/freeipa/ticket/5533
[3]
http://www.redhat.com/archives/freeipa-devel/2015-December/msg00234.html
[4] http://www.freeipa.org/page/Releases/4.3.0

Copr contains a rebuild with a patch for ticket:
   https://fedorahosted.org/freeipa/ticket/5551

https://copr.fedoraproject.org/coprs/pvoborni/freeipa-4-3/build/147975/

The build has exactly the same version as the one before. Ales, Milan,
do we want to differentiate that somehow?


The job uses fresh install of the rpms. The same version and build
shouldn't be a problem.

+1, I don't see any issue to use the "same" (not-yet-released) version.


--
Milan Kubik


On a second thought, increasing the build number may be useful. I just 
ran into the cyclic import issue again. Until I looked into the rpm I 
wasn't sure if I got the newer packages.


--
Milan Kubik

--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

Re: [Freeipa-devel] Testing FreeIPA 4.3 for GA

2015-12-15 Thread Milan Kubík

On 12/15/2015 04:35 PM, Petr Vobornik wrote:

On 12/15/2015 01:05 AM, Petr Vobornik wrote:

Blocking patches for FreeIPA 4.3 were pushed, ipa-4-3 branch was
created. Master branch is ready for 4.4 development.

A build is available for testing in my pvoborni/freeipa-4-3 COPR repo
[1] until the official 4.3 repo is created. The repo contains only this
build. The build is not pure upstream ipa-4-3 branch but rather a build
which will go to Fedora rawhide and official 4.3 copr repo - Fedora
downstream spec with the SELinux workaround applied [2][3].

Known issues:
* https://fedorahosted.org/freeipa/ticket/5469 - requires fix in PKI
* https://bugzilla.redhat.com/show_bug.cgi?id=1289930 - SELinux Policy
update needed for connection check

I have started drafting release page [4].

[1] https://copr.fedoraproject.org/coprs/pvoborni/freeipa-4-3/
[2] https://fedorahosted.org/freeipa/ticket/5533
[3]
http://www.redhat.com/archives/freeipa-devel/2015-December/msg00234.html
[4] http://www.freeipa.org/page/Releases/4.3.0


Copr contains a rebuild with a patch for ticket:
  https://fedorahosted.org/freeipa/ticket/5551

https://copr.fedoraproject.org/coprs/pvoborni/freeipa-4-3/build/147975/

The build has exactly the same version as the one before. Ales, Milan, 
do we want to differentiate that somehow?


The job uses fresh install of the rpms. The same version and build 
shouldn't be a problem.


--
Milan Kubik

--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code


Re: [Freeipa-devel] Testing FreeIPA 4.3 for GA

2015-12-15 Thread Petr Vobornik

On 12/15/2015 01:05 AM, Petr Vobornik wrote:

Blocking patches for FreeIPA 4.3 were pushed, ipa-4-3 branch was
created. Master branch is ready for 4.4 development.

A build is available for testing in my pvoborni/freeipa-4-3 COPR repo
[1] until the official 4.3 repo is created. The repo contains only this
build. The build is not pure upstream ipa-4-3 branch but rather a build
which will go to Fedora rawhide and official 4.3 copr repo - Fedora
downstream spec with the SELinux workaround applied [2][3].

Known issues:
* https://fedorahosted.org/freeipa/ticket/5469 - requires fix in PKI
* https://bugzilla.redhat.com/show_bug.cgi?id=1289930 - SELinux Policy
update needed for connection check

I have started drafting release page [4].

[1] https://copr.fedoraproject.org/coprs/pvoborni/freeipa-4-3/
[2] https://fedorahosted.org/freeipa/ticket/5533
[3]
http://www.redhat.com/archives/freeipa-devel/2015-December/msg00234.html
[4] http://www.freeipa.org/page/Releases/4.3.0


Copr contains a rebuild with a patch for ticket:
  https://fedorahosted.org/freeipa/ticket/5551

https://copr.fedoraproject.org/coprs/pvoborni/freeipa-4-3/build/147975/

The build has exactly the same version as the one before. Ales, Milan, 
do we want to differentiate that somehow?


--
Petr Vobornik

--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code


[Freeipa-devel] Testing FreeIPA 4.3 for GA

2015-12-14 Thread Petr Vobornik
Blocking patches for FreeIPA 4.3 were pushed, ipa-4-3 branch was 
created. Master branch is ready for 4.4 development.


A build is available for testing in my pvoborni/freeipa-4-3 COPR repo 
[1] until the official 4.3 repo is created. The repo contains only this 
build. The build is not pure upstream ipa-4-3 branch but rather a build 
which will go to Fedora rawhide and official 4.3 copr repo - Fedora 
downstream spec with the SELinux workaround applied [2][3].


Known issues:
* https://fedorahosted.org/freeipa/ticket/5469 - requires fix in PKI
* https://bugzilla.redhat.com/show_bug.cgi?id=1289930 - SELinux Policy 
update needed for connection check


I have started drafting release page [4].

[1] https://copr.fedoraproject.org/coprs/pvoborni/freeipa-4-3/
[2] https://fedorahosted.org/freeipa/ticket/5533
[3] http://www.redhat.com/archives/freeipa-devel/2015-December/msg00234.html
[4] http://www.freeipa.org/page/Releases/4.3.0
--
Petr Vobornik

--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code


Re: [Freeipa-devel] Testing FreeIPA 4.3 for GA

2015-12-14 Thread Jan Cholasta

On 15.12.2015 07:24, Lukas Slebodnik wrote:

On (15/12/15 01:05), Petr Vobornik wrote:

Blocking patches for FreeIPA 4.3 were pushed, ipa-4-3 branch was created.
Master branch is ready for 4.4 development.

A build is available for testing in my pvoborni/freeipa-4-3 COPR repo [1]
until the official 4.3 repo is created. The repo contains only this build.
The build is not pure upstream ipa-4-3 branch but rather a build which will
go to Fedora rawhide and official 4.3 copr repo - Fedora downstream spec with
the SELinux workaround applied [2][3].

Known issues:
* https://fedorahosted.org/freeipa/ticket/5469 - requires fix in PKI
* https://bugzilla.redhat.com/show_bug.cgi?id=1289930 - SELinux Policy update
needed for connection check


I would suggest to do small change in packaging.

sh$ rpm -qp --requires ./freeipa-client-4.3.0-1.fc23.x86_64.rpm | grep pam
pam_krb5

pam_krb5 is not used by default. I will suggest to use weak dependencies here
If you do not want to remove it completely.
http://rpm.org/wiki/PackagerDocs/Dependencies#Weakdependencies


I would rather remove it completely, along with nss_ldap and 
pam-nss-ldapd support.


--
Jan Cholasta

--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code


Re: [Freeipa-devel] Testing FreeIPA 4.3 for GA

2015-12-14 Thread Lukas Slebodnik
On (15/12/15 01:05), Petr Vobornik wrote:
>Blocking patches for FreeIPA 4.3 were pushed, ipa-4-3 branch was created.
>Master branch is ready for 4.4 development.
>
>A build is available for testing in my pvoborni/freeipa-4-3 COPR repo [1]
>until the official 4.3 repo is created. The repo contains only this build.
>The build is not pure upstream ipa-4-3 branch but rather a build which will
>go to Fedora rawhide and official 4.3 copr repo - Fedora downstream spec with
>the SELinux workaround applied [2][3].
>
>Known issues:
>* https://fedorahosted.org/freeipa/ticket/5469 - requires fix in PKI
>* https://bugzilla.redhat.com/show_bug.cgi?id=1289930 - SELinux Policy update
>needed for connection check
>
I would suggest to do small change in packaging.

sh$ rpm -qp --requires ./freeipa-client-4.3.0-1.fc23.x86_64.rpm | grep pam
pam_krb5

pam_krb5 is not used by default. I will suggest to use weak dependencies here
If you do not want to remove it completely.
http://rpm.org/wiki/PackagerDocs/Dependencies#Weakdependencies


LS

-- 
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code


Re: [Freeipa-devel] Testing FreeIPA 4.3 for GA

2015-12-14 Thread Lukas Slebodnik
On (15/12/15 01:05), Petr Vobornik wrote:
>Blocking patches for FreeIPA 4.3 were pushed, ipa-4-3 branch was created.
>Master branch is ready for 4.4 development.
>
>A build is available for testing in my pvoborni/freeipa-4-3 COPR repo [1]
>until the official 4.3 repo is created. The repo contains only this build.
>The build is not pure upstream ipa-4-3 branch but rather a build which will
>go to Fedora rawhide and official 4.3 copr repo - Fedora downstream spec with
>the SELinux workaround applied [2][3].
>
>Known issues:
>* https://fedorahosted.org/freeipa/ticket/5469 - requires fix in PKI
>* https://bugzilla.redhat.com/show_bug.cgi?id=1289930 - SELinux Policy update
>needed for connection check
>
>I have started drafting release page [4].
>
It looks like there is a bug in dnf, because it cannot install
freeipa-tests package; which was renamed to python2-ipatests.

[root@3a8359f9e1cd ~]# rpm -q freeipa-server
freeipa-server-4.3.0-1.fc23.x86_64


[root@3a8359f9e1cd ~]# dnf install -y --best freeipa-tests
Last metadata expiration check performed 0:09:23 ago on Tue Dec 15 07:16:26
2015.
Error: package freeipa-tests-4.2.3-1.1.fc23.x86_64 requires freeipa-client =
4.2.3-1.1.fc23, but none of the providers can be installed.
package freeipa-tests-4.2.2-1.fc23.x86_64 requires freeipa-python =
4.2.2-1.fc23, but none of the providers can be installed
(try to add '--allowerasing' to command line to replace conflicting packages)


[root@3a8359f9e1cd ~]# rpm -qp --provides
./python2-ipatests-4.3.0-1.fc23.noarch.rpm
freeipa-tests(x86-64) = 4.3.0-1.fc23
ipa-tests(x86-64) = 4.3.0
python-ipatests = 4.3.0-1.fc23
python2-ipatests = 4.3.0-1.fc23


FYI: It works with yum-deprecated.

LS

-- 
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code