[Freeipa-devel] [freeipa PR#812][comment] [WIP] Refactoring cert-find to use API call directly instead of using

2017-05-30 Thread HonzaCholasta via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/812 Title: #812: [WIP] Refactoring cert-find to use API call directly instead of using HonzaCholasta commented: """ @felipevolpone, that is a bad idea. Calling the API instead of doing a direct LDAP search would degrade performace (currently

[Freeipa-devel] [freeipa PR#814][comment] Add new permission to grant 'add' on cas container

2017-05-30 Thread frasertweedale via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/814 Title: #814: Add new permission to grant 'add' on cas container frasertweedale commented: """ This problem is actually caused by a bug in a preliminary permission check during `ca_add.pre_callback`, not an ACI issue. I am looking into it, but

[Freeipa-devel] [freeipa PR#814][+rejected] Add new permission to grant 'add' on cas container

2017-05-30 Thread frasertweedale via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/814 Title: #814: Add new permission to grant 'add' on cas container Label: +rejected ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to

[Freeipa-devel] [freeipa PR#824][comment] ca-add: validate Subject DN name attributes

2017-05-30 Thread frasertweedale via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/824 Title: #824: ca-add: validate Subject DN name attributes frasertweedale commented: """ @felipevolpone I did think about that. I agree it would be nice but IMO it adds unnecessary implementation complexity, for handling a probably-rare user

[Freeipa-devel] [freeipa PR#824][comment] ca-add: validate Subject DN name attributes

2017-05-30 Thread frasertweedale via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/824 Title: #824: ca-add: validate Subject DN name attributes frasertweedale commented: """ @felipevolpone I did think about that. I agree it would be nice but IMO it adds unnecessary implementation complexity, for handling a probably-rare user

[Freeipa-devel] [freeipa PR#812][comment] [WIP] Refactoring cert-find to use API call directly instead of using

2017-05-30 Thread felipevolpone via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/812 Title: #812: [WIP] Refactoring cert-find to use API call directly instead of using felipevolpone commented: """ @HonzaCholasta thanks for the help, but the idea isn't avoid calling the ldap directly, and instead of that call the APIs? If we

[Freeipa-devel] [freeipa PR#832][+ack] Add remote_plugins subdirectories to RPM

2017-05-30 Thread pvomacka via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/832 Title: #832: Add remote_plugins subdirectories to RPM Label: +ack ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to

[Freeipa-devel] [freeipa PR#833][opened] Fixes traceback in log and corrects console output

2017-05-30 Thread Tiboris via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/833 Author: Tiboris Title: #833: Fixes traceback in log and corrects console output Action: opened PR body: """ There was traceback in error_log, when running trustdomain-find command for trusted child domain and it results into ERROR. Correct

[Freeipa-devel] [freeipa PR#832][synchronized] Add remote_plugins subdirectories to RPM

2017-05-30 Thread MartinBasti via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/832 Author: MartinBasti Title: #832: Add remote_plugins subdirectories to RPM Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/832/head:pr832 git checkout pr832

[Freeipa-devel] [freeipa PR#832][opened] Add remote_plugins subdirectories to RPM

2017-05-30 Thread MartinBasti via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/832 Author: MartinBasti Title: #832: Add remote_plugins subdirectories to RPM Action: opened PR body: """ Subdirectories of remote plugins were forgotten in previous fix d22ac59828cc4339d509804ddb3e2e1da9cfaa20 .

[Freeipa-devel] [freeipa PR#827][synchronized] pylint: explicitly depends on python2-pylint

2017-05-30 Thread MartinBasti via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/827 Author: MartinBasti Title: #827: pylint: explicitly depends on python2-pylint Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/827/head:pr827 git checkout

[Freeipa-devel] [freeipa PR#831][edited] [4.4] custodia dep: require explictly python2 version

2017-05-30 Thread MartinBasti via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/831 Author: MartinBasti Title: #831: [4.4] custodia dep: require explictly python2 version Action: edited Changed field: title Original value: """ custodia dep: require explictly python2 version """ ___

[Freeipa-devel] [freeipa PR#831][opened] custodia dep: require explictly python2 version

2017-05-30 Thread MartinBasti via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/831 Author: MartinBasti Title: #831: custodia dep: require explictly python2 version Action: opened PR body: """ python-custodia matches python3-custodia, but for py2 installations we need python2-custodia explicitly

[Freeipa-devel] [freeipa PR#830][opened] custodia dep: require explictly python2 version

2017-05-30 Thread MartinBasti via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/830 Author: MartinBasti Title: #830: custodia dep: require explictly python2 version Action: opened PR body: """ python-custodia matches python3-custodia, but for py2 installations we need python2-custodia explicitly

[Freeipa-devel] [freeipa PR#829][opened] client.py: Replace hardcoded 'admin' with options.principal

2017-05-30 Thread Tiboris via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/829 Author: Tiboris Title: #829: client.py: Replace hardcoded 'admin' with options.principal Action: opened PR body: """ Fixes: https://pagure.io/freeipa/issue/5406 """ To pull the PR as Git branch: git remote add ghfreeipa

[Freeipa-devel] FreeIPA HashiCorp Atlas

2017-05-30 Thread Tomas Krizek via FreeIPA-devel
Hi team, I've created a HashiCorp Atlas account [1] for our official vagrant boxes. In the near future, I'll be publishing vagrant boxes for the PR CI there. Currently, there's no plan to publish any other boxes. Please let me know if you need the access credentials. [1] -

[Freeipa-devel] FreeIPA Trello

2017-05-30 Thread Tomas Krizek via FreeIPA-devel
Hi team, I've started tracking the PR CI effort in Trello [1]. I also created a FreeIPA group [2]. Please let me know if you want to join the group to track your development efforts there. BTW, it's possible to create either team-visible or public boards in Trello. [1] -

[Freeipa-devel] [freeipa PR#814][synchronized] Add new permission to grant 'add' on cas container

2017-05-30 Thread Tiboris via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/814 Author: Tiboris Title: #814: Add new permission to grant 'add' on cas container Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/814/head:pr814 git checkout

[Freeipa-devel] [freeipa PR#814][synchronized] Add new permission to grant 'add' on cas container

2017-05-30 Thread Tiboris via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/814 Author: Tiboris Title: #814: Add new permission to grant 'add' on cas container Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/814/head:pr814 git checkout

[Freeipa-devel] [freeipa PR#460][comment] ipa-server-install, ipa-server-upgrade fixes

2017-05-30 Thread stlaz via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/460 Title: #460: ipa-server-install, ipa-server-upgrade fixes stlaz commented: """ The failing check does not have anything in common with this PR. ACK. """ See the full comment at https://github.com/freeipa/freeipa/pull/460#issuecomment-304849437

[Freeipa-devel] [freeipa PR#460][-ack] ipa-server-install, ipa-server-upgrade fixes

2017-05-30 Thread MartinBasti via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/460 Title: #460: ipa-server-install, ipa-server-upgrade fixes Label: -ack ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to

[Freeipa-devel] [freeipa PR#820][closed] Amend some regressions in backup/restore tests

2017-05-30 Thread MartinBasti via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/820 Author: martbab Title: #820: Amend some regressions in backup/restore tests Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/820/head:pr820 git checkout pr820

[Freeipa-devel] [freeipa PR#820][+pushed] Amend some regressions in backup/restore tests

2017-05-30 Thread MartinBasti via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/820 Title: #820: Amend some regressions in backup/restore tests Label: +pushed ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to

[Freeipa-devel] [freeipa PR#820][comment] Amend some regressions in backup/restore tests

2017-05-30 Thread MartinBasti via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/820 Title: #820: Amend some regressions in backup/restore tests MartinBasti commented: """ master: * 2624cf2e4cc4b4b560fe64688ee55160f9d8fb80 test_backup_restore: do not fail on missing KrbLastSuccessfulAuth *

[Freeipa-devel] [freeipa PR#460][comment] ipa-server-install, ipa-server-upgrade fixes

2017-05-30 Thread stlaz via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/460 Title: #460: ipa-server-install, ipa-server-upgrade fixes stlaz commented: """ The failing check does not have anything in common with this PR. ACK. """ See the full comment at https://github.com/freeipa/freeipa/pull/460#issuecomment-304849437

[Freeipa-devel] [freeipa PR#801][+pushed] httpinstance: wait until the service entry is replicated

2017-05-30 Thread martbab via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/801 Title: #801: httpinstance: wait until the service entry is replicated Label: +pushed ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to

[Freeipa-devel] [freeipa PR#801][closed] httpinstance: wait until the service entry is replicated

2017-05-30 Thread martbab via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/801 Author: HonzaCholasta Title: #801: httpinstance: wait until the service entry is replicated Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/801/head:pr801 git

[Freeipa-devel] [freeipa PR#801][+ack] httpinstance: wait until the service entry is replicated

2017-05-30 Thread martbab via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/801 Title: #801: httpinstance: wait until the service entry is replicated Label: +ack ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to

[Freeipa-devel] [freeipa PR#813][comment] Add Subject Key Identifier to CA cert validity check

2017-05-30 Thread MartinBasti via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/813 Title: #813: Add Subject Key Identifier to CA cert validity check MartinBasti commented: """ master: * bc6d4995144505c45a62320c71f503b54f68a962 Add Subject Key Identifier to CA cert validity check """ See the full comment at

[Freeipa-devel] [freeipa PR#810][comment] user.py: replace user_mod with ldap.update_entry()

2017-05-30 Thread MartinBasti via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/810 Title: #810: user.py: replace user_mod with ldap.update_entry() MartinBasti commented: """ master: * d73ec06cb3c8042f90d1520485aa9b0f2e7c8fbe user.py: replace user_mod with ldap.update_entry() ipa-4-5: *

[Freeipa-devel] [freeipa PR#810][+pushed] user.py: replace user_mod with ldap.update_entry()

2017-05-30 Thread MartinBasti via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/810 Title: #810: user.py: replace user_mod with ldap.update_entry() Label: +pushed ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to

[Freeipa-devel] [freeipa PR#822][comment] Fix index definition for ipaAnchorUUID

2017-05-30 Thread MartinBasti via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/822 Title: #822: Fix index definition for ipaAnchorUUID MartinBasti commented: """ master: * 49ce395b90ea64eda3f9362b05936a3e4d43234a Fix index definition for ipaAnchorUUID ipa-4-5: * 8410823e1811ac9e004cc79556334abd429d480d Fix index definition

[Freeipa-devel] [freeipa PR#822][closed] Fix index definition for ipaAnchorUUID

2017-05-30 Thread MartinBasti via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/822 Author: abbra Title: #822: Fix index definition for ipaAnchorUUID Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/822/head:pr822 git checkout pr822

[Freeipa-devel] [freeipa PR#822][+pushed] Fix index definition for ipaAnchorUUID

2017-05-30 Thread MartinBasti via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/822 Title: #822: Fix index definition for ipaAnchorUUID Label: +pushed ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to

[Freeipa-devel] [freeipa PR#828][closed] Silence pytest.yield_fixture deprecation warning

2017-05-30 Thread MartinBasti via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/828 Author: tiran Title: #828: Silence pytest.yield_fixture deprecation warning Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/828/head:pr828 git checkout pr828

[Freeipa-devel] [freeipa PR#828][+pushed] Silence pytest.yield_fixture deprecation warning

2017-05-30 Thread MartinBasti via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/828 Title: #828: Silence pytest.yield_fixture deprecation warning Label: +pushed ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to

[Freeipa-devel] [freeipa PR#828][comment] Silence pytest.yield_fixture deprecation warning

2017-05-30 Thread MartinBasti via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/828 Title: #828: Silence pytest.yield_fixture deprecation warning MartinBasti commented: """ master: * af140b0bc15cf4c27c63cc88bc6eec792f29422a Silence pytest.yield_fixture deprecation warning * 090eadbe4e4d0ab9fe387c1966b51cdf28ed9b17 Reimplement

[Freeipa-devel] [freeipa PR#827][-postponed] pylint: explicitly depends on python2-pylint

2017-05-30 Thread MartinBasti via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/827 Title: #827: pylint: explicitly depends on python2-pylint Label: -postponed ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to

[Freeipa-devel] [freeipa PR#828][+ack] Silence pytest.yield_fixture deprecation warning

2017-05-30 Thread MartinBasti via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/828 Title: #828: Silence pytest.yield_fixture deprecation warning Label: +ack ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to

[Freeipa-devel] [freeipa PR#820][+ack] Amend some regressions in backup/restore tests

2017-05-30 Thread MartinBasti via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/820 Title: #820: Amend some regressions in backup/restore tests Label: +ack ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to

[Freeipa-devel] [freeipa PR#818][comment] Avoid possible endless recursion in RPC call from client

2017-05-30 Thread flo-renaud via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/818 Title: #818: Avoid possible endless recursion in RPC call from client flo-renaud commented: """ Hi @stlaz, thank you for the patch. The fix will avoid recursion in forward(), but I think that the same type of recursion could happen in

[Freeipa-devel] [freeipa PR#797][comment] ipa-replica-conncheck: handle ssh not installed

2017-05-30 Thread martbab via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/797 Title: #797: ipa-replica-conncheck: handle ssh not installed martbab commented: """ ipa-4-5: * bacccb70a2e91efa22ee19aec9cca75bac94bd95 ipa-replica-conncheck: handle ssh not installed master: * f960450820c13284b52b4c5f420f0f1191a45619

[Freeipa-devel] [freeipa PR#797][+pushed] ipa-replica-conncheck: handle ssh not installed

2017-05-30 Thread martbab via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/797 Title: #797: ipa-replica-conncheck: handle ssh not installed Label: +pushed ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to

[Freeipa-devel] [freeipa PR#797][closed] ipa-replica-conncheck: handle ssh not installed

2017-05-30 Thread martbab via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/797 Author: flo-renaud Title: #797: ipa-replica-conncheck: handle ssh not installed Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/797/head:pr797 git checkout pr797

[Freeipa-devel] [freeipa PR#460][closed] ipa-server-install, ipa-server-upgrade fixes

2017-05-30 Thread stlaz via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/460 Author: MartinBasti Title: #460: ipa-server-install, ipa-server-upgrade fixes Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/460/head:pr460 git checkout pr460

[Freeipa-devel] [freeipa PR#828][synchronized] Silence pytest.yield_fixture deprecation warning

2017-05-30 Thread tiran via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/828 Author: tiran Title: #828: Silence pytest.yield_fixture deprecation warning Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/828/head:pr828 git checkout

[Freeipa-devel] [freeipa PR#821][synchronized] fix incorrect suffix handling in topology checks

2017-05-30 Thread martbab via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/821 Author: martbab Title: #821: fix incorrect suffix handling in topology checks Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/821/head:pr821 git checkout

[Freeipa-devel] [freeipa PR#827][comment] pylint: explicitly depends on python2-pylint

2017-05-30 Thread MartinBasti via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/827 Title: #827: pylint: explicitly depends on python2-pylint MartinBasti commented: """ @tiran OK, given that pylint is broken on F26 """ See the full comment at https://github.com/freeipa/freeipa/pull/827#issuecomment-304812803

[Freeipa-devel] [freeipa PR#828][comment] Silence pytest.yield_fixture deprecation warning

2017-05-30 Thread tiran via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/828 Title: #828: Silence pytest.yield_fixture deprecation warning tiran commented: """ yield fixtures and yield tests are two different beasts. I have pushed another commit to replace yield tests with parametrized tests. """ See the full comment at

[Freeipa-devel] [freeipa PR#828][synchronized] Silence pytest.yield_fixture deprecation warning

2017-05-30 Thread tiran via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/828 Author: tiran Title: #828: Silence pytest.yield_fixture deprecation warning Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/828/head:pr828 git checkout

[Freeipa-devel] [freeipa PR#827][comment] pylint: explicitly depends on python2-pylint

2017-05-30 Thread tiran via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/827 Title: #827: pylint: explicitly depends on python2-pylint tiran commented: """ @MartinBasti I'm still developing on F25 because I'm reluctant to upgrade my working machine to F26 until F26 has been released and stabilized. Can we compromise and

[Freeipa-devel] [freeipa PR#827][comment] pylint: explicitly depends on python2-pylint

2017-05-30 Thread MartinBasti via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/827 Title: #827: pylint: explicitly depends on python2-pylint MartinBasti commented: """ @tiran yes it is possible, but given that F27 is a target platform for FreeIPA 4.6 and more package changes will be required, I'd drop F25 and continue with

[Freeipa-devel] [freeipa PR#827][comment] pylint: explicitly depends on python2-pylint

2017-05-30 Thread tiran via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/827 Title: #827: pylint: explicitly depends on python2-pylint tiran commented: """ ``` %if 0%{?fedora} >= 26 BuildRequires: python2-pylint %else BuildRequires: python-pylint >= 1.6 %endif ``` """ See the full comment at

[Freeipa-devel] [freeipa PR#827][comment] pylint: explicitly depends on python2-pylint

2017-05-30 Thread tiran via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/827 Title: #827: pylint: explicitly depends on python2-pylint tiran commented: """ ``` %if 0%{?fedora} >= 26 BuildRequires: python2-pylint %else BuildRequires: python-pylint >= 1.6 %endif ``` """ See the full comment at