[Freeipa-devel] [freeipa PR#625][closed] [RFC] remote plugins: add option to force compat plugins

2017-07-10 Thread HonzaCholasta via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/625 Author: HonzaCholasta Title: #625: [RFC] remote plugins: add option to force compat plugins Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/625/head:pr625 git

[Freeipa-devel] [freeipa PR#910][opened] ipatests: do not finalize api when IPA is not configured

2017-07-10 Thread tomaskrizek via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/910 Author: tomaskrizek Title: #910: ipatests: do not finalize api when IPA is not configured Action: opened PR body: """ Pytest can be executed from a machine that doesn't have IPA configured. In this case, api can't be finalized because values

[Freeipa-devel] [freeipa PR#909][opened] IPAOptionParser: fix dict comprehension

2017-07-10 Thread MartinBasti via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/909 Author: MartinBasti Title: #909: IPAOptionParser: fix dict comprehension Action: opened PR body: """ The statement can be simplified and be more resources friendly """ To pull the PR as Git branch: git remote add ghfreeipa

[Freeipa-devel] Re: [DESIGN] Certificate profile update mechanism

2017-07-10 Thread Fraser Tweedale via FreeIPA-devel
On Mon, Jul 10, 2017 at 12:44:40PM +0200, Tomas Krizek wrote: > On 07/10/2017 12:16 PM, Simo Sorce via FreeIPA-devel wrote: > > Hi Fraser, > > I think you put on a reasonable proposal, however If I had to design > > this right now and had the freedom to change dogtag and the rest of > > freeipa to

[Freeipa-devel] Re: [DESIGN] Certificate profile update mechanism

2017-07-10 Thread Simo Sorce via FreeIPA-devel
On Mon, 2017-07-10 at 12:44 +0200, Tomas Krizek wrote: > On 07/10/2017 12:16 PM, Simo Sorce via FreeIPA-devel wrote: > > Hi Fraser, > > I think you put on a reasonable proposal, however If I had to > > design > > this right now and had the freedom to change dogtag and the rest of > > freeipa to

[Freeipa-devel] Re: [DESIGN] Certificate profile update mechanism

2017-07-10 Thread Simo Sorce via FreeIPA-devel
Hi Fraser, I think you put on a reasonable proposal, however If I had to design this right now and had the freedom to change dogtag and the rest of freeipa to cope I would do the following: - Change the LDAP profile storage to have versioned subtrees for "system" profiles, and have a "custom"