[Freeipa-devel] [freeipa PR#2142][closed] [testing_master] Nightly PR

2018-07-13 Thread freeipa-pr-ci via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/2142 Author: freeipa-pr-ci Title: #2142: [testing_master] Nightly PR Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2142/head:pr2142 git checkout pr2142

[Freeipa-devel] [freeipa PR#2155][opened] [testing_master] Nightly PR

2018-07-13 Thread freeipa-pr-ci via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/2155 Author: freeipa-pr-ci Title: #2155: [testing_master] Nightly PR Action: opened PR body: """ None """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2155/head:pr2155 git

[Freeipa-devel] Re: Proposal for new password syntax checking in FreeIPA

2018-07-13 Thread Mark Reynolds via FreeIPA-devel
Okay, sorry I was a in rush this morning (and distracted), and I obviously misunderstood your initial proposal.   I thought you wanted me to do something completely different :-/  So this is actually very easy, like you said :-)  Let me think about this, and I'll come up with a new design. 

[Freeipa-devel] [freeipa PR#2154][opened] [Backport][ipa-4-6] Teach pylint how our api works

2018-07-13 Thread tiran via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/2154 Author: tiran Title: #2154: [Backport][ipa-4-6] Teach pylint how our api works Action: opened PR body: """ This PR was opened automatically because PR #2152 was pushed to master and backport to ipa-4-6 is required. """ To pull the PR as Git

[Freeipa-devel] [freeipa PR#2152][closed] Teach pylint how our api works

2018-07-13 Thread tiran via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/2152 Author: tiran Title: #2152: Teach pylint how our api works Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2152/head:pr2152 git checkout pr2152

[Freeipa-devel] [freeipa PR#2153][opened] Fedora 29: No longer build python2-ipaserver

2018-07-13 Thread tiran via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/2153 Author: tiran Title: #2153: Fedora 29: No longer build python2-ipaserver Action: opened PR body: """ Some Python 2 dependencies such as python2-pki are no longer available on Fedora 29. The pki package is a required dependency of

[Freeipa-devel] Re: Proposal for new password syntax checking in FreeIPA

2018-07-13 Thread Simo Sorce via FreeIPA-devel
Just to show how contacting a socket can be easy I spent 15 minutes learning about python's cracklib binding and writing an example listener to be run at each invocation on a scoket (using stind/stdout here, could audit on stderr):

[Freeipa-devel] Re: Proposal for new password syntax checking in FreeIPA

2018-07-13 Thread Mark Reynolds via FreeIPA-devel
On 07/13/2018 07:54 AM, Simo Sorce wrote: On Fri, 2018-07-13 at 07:46 -0400, Mark Reynolds wrote: Hi Simo, Yes this would be a long term goal, but we need to do something now, and we have a customer pushing for us to do this feature set "today". Development on this is basically done already.

[Freeipa-devel] Re: Proposal for new password syntax checking in FreeIPA

2018-07-13 Thread Mark Reynolds via FreeIPA-devel
On 07/13/2018 07:54 AM, Mark Reynolds wrote: On 07/13/2018 07:42 AM, Simo Sorce via FreeIPA-devel wrote: On Thu, 2018-07-12 at 15:08 -0400, Mark Reynolds via FreeIPA-devel wrote: New Attributes to add to objectclass "krbPwdPolicy":   krbPwdPalindrome: on   krbPwdMaxSequence: 4

[Freeipa-devel] Re: Proposal for new password syntax checking in FreeIPA

2018-07-13 Thread Mark Reynolds via FreeIPA-devel
On 07/13/2018 07:42 AM, Simo Sorce via FreeIPA-devel wrote: On Thu, 2018-07-12 at 15:08 -0400, Mark Reynolds via FreeIPA-devel wrote: New Attributes to add to objectclass "krbPwdPolicy": krbPwdPalindrome: on krbPwdMaxSequence: 4 krbPwdMaxSeqSets: 2 krbPwdMaxCharClass:

[Freeipa-devel] Re: Proposal for new password syntax checking in FreeIPA

2018-07-13 Thread Simo Sorce via FreeIPA-devel
On Fri, 2018-07-13 at 07:46 -0400, Mark Reynolds wrote: > Hi Simo, > > Yes this would be a long term goal, but we need to do something now, > and > we have a customer pushing for us to do this feature set "today". > Development on this is basically done already. It just needs to be > ported

[Freeipa-devel] Re: Proposal for new password syntax checking in FreeIPA

2018-07-13 Thread Mark Reynolds via FreeIPA-devel
Hi Simo, Yes this would be a long term goal, but we need to do something now, and we have a customer pushing for us to do this feature set "today".  Development on this is basically done already.  It just needs to be ported to FreeIPA.  But I will leave it up to guys on how you want to

[Freeipa-devel] Re: Proposal for new password syntax checking in FreeIPA

2018-07-13 Thread Simo Sorce via FreeIPA-devel
On Thu, 2018-07-12 at 15:08 -0400, Mark Reynolds via FreeIPA-devel wrote: > New Attributes to add to objectclass "krbPwdPolicy": > > krbPwdPalindrome: on > krbPwdMaxSequence: 4 > krbPwdMaxSeqSets: 2 > krbPwdMaxCharClass: 3 > krbPwdMinDigits: 1 > krbPwdMinAlphas: 1 >

[Freeipa-devel] Re: Proposal for new password syntax checking in FreeIPA

2018-07-13 Thread Simo Sorce via FreeIPA-devel
Hi Mark, FWIW I do not think we should do this *in* FreeIPA or the 389ds password plugin. I think we should provide a mechanism to invoke an external service to check for password quality and defer to it any enhancement. There are just too many different requests coming in, each with their

[Freeipa-devel] [freeipa PR#2146][closed] [Backport][ipa-4-5] Handle races in replica config

2018-07-13 Thread tiran via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/2146 Author: tiran Title: #2146: [Backport][ipa-4-5] Handle races in replica config Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2146/head:pr2146 git checkout

[Freeipa-devel] [freeipa PR#2145][closed] [Backport][ipa-4-6] Handle races in replica config

2018-07-13 Thread tiran via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/2145 Author: tiran Title: #2145: [Backport][ipa-4-6] Handle races in replica config Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2145/head:pr2145 git checkout

[Freeipa-devel] [freeipa PR#2152][opened] Teach pylint how our api works

2018-07-13 Thread tiran via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/2152 Author: tiran Title: #2152: Teach pylint how our api works Action: opened PR body: """ pylint 2.0 is more strict and complains about several aspects of ipalib.api. It turns out that AstroidBuilder.string_build() can be used to easily teach

[Freeipa-devel] [freeipa PR#2151][opened] Fix translation of "unauthorized" and "ssbrowser" WebUI pages

2018-07-13 Thread stanislavlevin via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/2151 Author: stanislavlevin Title: #2151: Fix translation of "unauthorized" and "ssbrowser" WebUI pages Action: opened PR body: """ This is a simple fix for https://pagure.io/freeipa/issue/7640. But it depends on PR #2072 . """ To pull the PR as

[Freeipa-devel] [freeipa PR#2148][closed] [Backport][ipa-4-6] Add tab completion and history to ipa console

2018-07-13 Thread tiran via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/2148 Author: tiran Title: #2148: [Backport][ipa-4-6] Add tab completion and history to ipa console Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2148/head:pr2148