[Freeipa-devel] Re: replica installation without CA

2018-02-19 Thread Amit via FreeIPA-devel
Now I am getting this Error: # ipa-replica-install --dirsrv-cert-file /root/rootCA.crt --dirsrv-cert-file /root/dirsrv.crt --dirsrv-cert-file /root/dirsrv.key --dirsrv-pin amit --http-cert-file /root/rootCA.crt --http-cert-file /root/http.crt --http-cert-file /root/http.key --http-pin amit --no-pk

[Freeipa-devel] [freeipa PR#1602][opened] [Backport][ipa-4-6] Remove special characters in host_add random OTP generation

2018-02-19 Thread rcritten via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/1602 Author: rcritten Title: #1602: [Backport][ipa-4-6] Remove special characters in host_add random OTP generation Action: opened PR body: """ This PR was opened automatically because PR #1505 was pushed to master and backport to ipa-4-6 is requi

[Freeipa-devel] [freeipa PR#1505][closed] Remove special characters in host_add random OTP generation

2018-02-19 Thread rcritten via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/1505 Author: johnclarson Title: #1505: Remove special characters in host_add random OTP generation Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1505/head:pr1505 git

[Freeipa-devel] [freeipa PR#1600][closed] [Backport][ipa-4-6] fastcheck: do not test context in pycodestyle

2018-02-19 Thread Tiboris via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/1600 Author: Tiboris Title: #1600: [Backport][ipa-4-6] fastcheck: do not test context in pycodestyle Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1600/head:pr1600 g

[Freeipa-devel] [freeipa PR#1601][opened] [Backport][ipa-4-6] ACI: grant access to admins group instead of admin user

2018-02-19 Thread Tiboris via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/1601 Author: Tiboris Title: #1601: [Backport][ipa-4-6] ACI: grant access to admins group instead of admin user Action: opened PR body: """ This PR was opened automatically because PR #1426 was pushed to master and backport to ipa-4-6 is required.

[Freeipa-devel] [freeipa PR#1426][closed] ACI: grant access to admins group instead of admin user

2018-02-19 Thread Tiboris via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/1426 Author: flo-renaud Title: #1426: ACI: grant access to admins group instead of admin user Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1426/head:pr1426 git chec

[Freeipa-devel] [freeipa PR#1600][opened] [Backport][ipa-4-6] fastcheck: do not test context in pycodestyle

2018-02-19 Thread Tiboris via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/1600 Author: Tiboris Title: #1600: [Backport][ipa-4-6] fastcheck: do not test context in pycodestyle Action: opened PR body: """ `git diff` shows also context lines by default. When passed to pycodestyle it can produce errors unrelated to changed li

[Freeipa-devel] [freeipa PR#1598][closed] fastcheck: do not test context in pycodestyle

2018-02-19 Thread Tiboris via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/1598 Author: pvoborni Title: #1598: fastcheck: do not test context in pycodestyle Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1598/head:pr1598 git checkout pr1598

[Freeipa-devel] [freeipa PR#1599][closed] Fix FileStore.backup_file() not to backup same file

2018-02-19 Thread stlaz via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/1599 Author: stlaz Title: #1599: Fix FileStore.backup_file() not to backup same file Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1599/head:pr1599 git checkout pr15

[Freeipa-devel] Re: replica installation without CA

2018-02-19 Thread Florence Blanc-Renaud via FreeIPA-devel
On 02/19/2018 11:28 AM, Amit via FreeIPA-devel wrote: Thanks Flo for response. When I am using --pkinit-cert-file to provide rootca cert and key. Still not able to install replica. # ipa-replica-install --pkinit-cert-file /root/rootCA.crt --pkinit-cert-file /root/rootCA.key --pkinit-pin amit --

[Freeipa-devel] Re: replica installation without CA

2018-02-19 Thread Amit via FreeIPA-devel
Thanks Flo for response. When I am using --pkinit-cert-file to provide rootca cert and key. Still not able to install replica. # ipa-replica-install --pkinit-cert-file /root/rootCA.crt --pkinit-cert-file /root/rootCA.key --pkinit-pin amit --dirsrv-cert-file /root/dirsrv.crt --dirsrv-cert-file /ro

[Freeipa-devel] Re: replica installation without CA

2018-02-19 Thread Florence Blanc-Renaud via FreeIPA-devel
On 02/19/2018 08:28 AM, Amit via FreeIPA-devel wrote: Hello, In installed IPA Server successfully with following command: # ipa-server-install --ca-cert-file /root/ca-hierarchy/rootCA.crt --dirsrv-cert-file /root/ca-hierarchy/dirsrv.crt --dirsrv-cert-file /root/ca-hierarchy/dirsrv.key

[Freeipa-devel] Re: authconfig replacement design

2018-02-19 Thread Pavel Březina via FreeIPA-devel
On 02/14/2018 09:15 AM, Alexander Koksharov via FreeIPA-devel wrote: Hello, Please take a look on a design page here: https://www.freeipa.org/page/V4/Authselect_migration I would like to You will also need to write krb5.conf and ldap.conf. You can see the following man page or compat tool for

[Freeipa-devel] Re: authconfig replacement design

2018-02-19 Thread Pavel Březina via FreeIPA-devel
On 02/16/2018 07:34 PM, Florence Blanc-Renaud via FreeIPA-devel wrote: On 02/14/2018 09:15 AM, Alexander Koksharov via FreeIPA-devel wrote: Hello, Please take a look on a design page here: https://www.freeipa.org/page/V4/Authselect_migration I would like to ​ ​ hear you critics and suggessions.

[Freeipa-devel] Re: authconfig replacement design

2018-02-19 Thread Pavel Březina via FreeIPA-devel
On 02/15/2018 05:15 PM, Jakub Hrozek via FreeIPA-devel wrote: On Thu, Feb 15, 2018 at 11:10:16AM -0500, Rob Crittenden via FreeIPA-devel wrote: Petr Vobornik via FreeIPA-devel wrote: On Thu, Feb 15, 2018 at 4:47 PM, Jakub Hrozek via FreeIPA-devel wrote: On Thu, Feb 15, 2018 at 08:57:55AM -05

[Freeipa-devel] Re: authconfig replacement design

2018-02-19 Thread Pavel Březina via FreeIPA-devel
On 02/16/2018 12:12 PM, Petr Vobornik via FreeIPA-devel wrote: On Fri, Feb 16, 2018 at 11:25 AM, Alexander Bokovoy via FreeIPA-devel wrote: On pe, 16 helmi 2018, Alexander Koksharov via FreeIPA-devel wrote: Would it be good to implement the change like this: if authconfig is available then

[Freeipa-devel] [freeipa PR#1599][opened] Fix FileStore.backup_file() not to backup same file

2018-02-19 Thread stlaz via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/1599 Author: stlaz Title: #1599: Fix FileStore.backup_file() not to backup same file Action: opened PR body: """ FileStore.backup_file() docstring claimed not to store a copy of the same file but the behavior of the method did not match this descrip