[Freeipa-devel] [freeipa PR#812][+ack] Refactoring cert-find to use API call directly instead of using

2017-06-01 Thread frasertweedale via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/812 Title: #812: Refactoring cert-find to use API call directly instead of using Label: +ack ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to

[Freeipa-devel] [freeipa PR#843][opened] [WIP] Fixing test_installation.py tests

2017-06-01 Thread felipevolpone via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/843 Author: felipevolpone Title: #843: [WIP] Fixing test_installation.py tests Action: opened PR body: """ I've been working on the test_installation.py suite and figure out how to solve some of them. The TestInstallWithCA1 have 9 tests failing;

[Freeipa-devel] [freeipa PR#837][synchronized] ca-add: fix permission issue

2017-06-01 Thread frasertweedale via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/837 Author: frasertweedale Title: #837: ca-add: fix permission issue Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/837/head:pr837 git checkout pr837 From

[Freeipa-devel] [freeipa PR#837][comment] ca-add: fix permission issue

2017-06-01 Thread frasertweedale via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/837 Title: #837: ca-add: fix permission issue frasertweedale commented: """ On Thu, Jun 01, 2017 at 06:55:59AM -0700, Rob Crittenden wrote: > Ok cool. I shouldn't have been so terse in my previous comment, what I should > have added was "does it

[Freeipa-devel] [freeipa PR#842][edited] Changed ownership of ldiffile to DS_USER

2017-06-01 Thread tscherf via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/842 Author: tscherf Title: #842: Changed ownership of ldiffile to DS_USER Action: edited Changed field: body Original value: """ Changes the ownership of the modified ldiffile created by ipa-restore to dirsrv. """

[Freeipa-devel] [freeipa PR#842][opened] Changed ownership of ldiffile to DS_USER

2017-06-01 Thread tscherf via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/842 Author: tscherf Title: #842: Changed ownership of ldiffile to DS_USER Action: opened PR body: """ Changes the ownership of the modified ldiffile created by ipa-restore to dirsrv. """ To pull the PR as Git branch: git remote add ghfreeipa

[Freeipa-devel] [freeipa PR#823][comment] ipa-kdb: reload certificate mapping rules periodically

2017-06-01 Thread sumit-bose via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/823 Title: #823: ipa-kdb: reload certificate mapping rules periodically sumit-bose commented: """ @dkupka, the reload only happens during processing the PKINIT request if the rules are older than 5 minutes. It is not a timed event which runs all the

[Freeipa-devel] [freeipa PR#823][comment] ipa-kdb: reload certificate mapping rules periodically

2017-06-01 Thread dkupka via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/823 Title: #823: ipa-kdb: reload certificate mapping rules periodically dkupka commented: """ @sumit-bose You're right but then there's ~6 hours gap where no reload happened. I would expect that there would be one attempt to reload every 5 minutes.

[Freeipa-devel] [freeipa PR#837][comment] ca-add: fix permission issue

2017-06-01 Thread rcritten via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/837 Title: #837: ca-add: fix permission issue rcritten commented: """ Ok cool. I shouldn't have been so terse in my previous comment, what I should have added was "does it make sense to include a pointer to the bug as a hint so workaround can be

[Freeipa-devel] [freeipa PR#823][comment] ipa-kdb: reload certificate mapping rules periodically

2017-06-01 Thread sumit-bose via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/823 Title: #823: ipa-kdb: reload certificate mapping rules periodically sumit-bose commented: """ @dkupka, ah, this is a side effect of having multiple workers (3907-3912). The IPA context is not share between the workers so each will load the

[Freeipa-devel] [freeipa PR#823][comment] ipa-kdb: reload certificate mapping rules periodically

2017-06-01 Thread dkupka via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/823 Title: #823: ipa-kdb: reload certificate mapping rules periodically dkupka commented: """ @sumit-bose Yes, I added rule that should allow the user to kinit with certificate. I tried and it worked. Then I modified the rule so it no longer

[Freeipa-devel] [freeipa PR#840][opened] Add Role 'Client Administrator'

2017-06-01 Thread Tiboris via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/840 Author: Tiboris Title: #840: Add Role 'Client Administrator' Action: opened PR body: """ User with the 'Client Administrator' role assigned to is able to enroll host against a FreeIPA server as a client using the ipa-client-install command.

[Freeipa-devel] [freeipa PR#837][comment] ca-add: fix permission issue

2017-06-01 Thread frasertweedale via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/837 Title: #837: ca-add: fix permission issue frasertweedale commented: """ @rcritten yes: https://pagure.io/389-ds-base/issue/49278 """ See the full comment at https://github.com/freeipa/freeipa/pull/837#issuecomment-305474305

[Freeipa-devel] [freeipa PR#837][comment] ca-add: fix permission issue

2017-06-01 Thread rcritten via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/837 Title: #837: ca-add: fix permission issue rcritten commented: """ Is there a bug filed on the GER issue? """ See the full comment at https://github.com/freeipa/freeipa/pull/837#issuecomment-305473444

[Freeipa-devel] [freeipa PR#818][comment] Avoid possible endless recursion in RPC call from client

2017-06-01 Thread flo-renaud via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/818 Title: #818: Avoid possible endless recursion in RPC call from client flo-renaud commented: """ Hi @stlaz Thank you, the patch looks good to me. """ See the full comment at https://github.com/freeipa/freeipa/pull/818#issuecomment-305470664

[Freeipa-devel] [freeipa PR#818][+ack] Avoid possible endless recursion in RPC call from client

2017-06-01 Thread flo-renaud via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/818 Title: #818: Avoid possible endless recursion in RPC call from client Label: +ack ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to

[Freeipa-devel] [freeipa PR#818][synchronized] Avoid possible endless recursion in RPC call from client

2017-06-01 Thread stlaz via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/818 Author: stlaz Title: #818: Avoid possible endless recursion in RPC call from client Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/818/head:pr818 git

[Freeipa-devel] [freeipa PR#837][synchronized] ca-add: fix permission issue

2017-06-01 Thread frasertweedale via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/837 Author: frasertweedale Title: #837: ca-add: fix permission issue Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/837/head:pr837 git checkout pr837 From

[Freeipa-devel] [freeipa PR#838][opened] Explicitly ask for py2 dependencies in py2 packages

2017-06-01 Thread MartinBasti via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/838 Author: MartinBasti Title: #838: Explicitly ask for py2 dependencies in py2 packages Action: opened PR body: """ In future default package names can start to pointing to py3 instead of py2. We have to explicitly ask for python2-* and python3-*

[Freeipa-devel] [freeipa PR#818][synchronized] Avoid possible endless recursion in RPC call from client

2017-06-01 Thread stlaz via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/818 Author: stlaz Title: #818: Avoid possible endless recursion in RPC call from client Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/818/head:pr818 git

[Freeipa-devel] [freeipa PR#803][comment] ipatests: add systemd journal collection for multihost tests

2017-06-01 Thread tomaskrizek via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/803 Title: #803: ipatests: add systemd journal collection for multihost tests tomaskrizek commented: """ @MartinBasti Done. """ See the full comment at https://github.com/freeipa/freeipa/pull/803#issuecomment-305421773

[Freeipa-devel] [freeipa PR#803][synchronized] ipatests: add systemd journal collection for multihost tests

2017-06-01 Thread tomaskrizek via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/803 Author: tomaskrizek Title: #803: ipatests: add systemd journal collection for multihost tests Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/803/head:pr803

[Freeipa-devel] [freeipa PR#827][comment] pylint: explicitly depends on python2-pylint

2017-06-01 Thread MartinBasti via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/827 Title: #827: pylint: explicitly depends on python2-pylint MartinBasti commented: """ master: * be1415b6cc8f5dadc1ac3766305a33f370fdf9bb pylint: explicitly depends on python2-pylint """ See the full comment at

[Freeipa-devel] [freeipa PR#827][closed] pylint: explicitly depends on python2-pylint

2017-06-01 Thread MartinBasti via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/827 Author: MartinBasti Title: #827: pylint: explicitly depends on python2-pylint Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/827/head:pr827 git checkout pr827

[Freeipa-devel] [freeipa PR#827][+pushed] pylint: explicitly depends on python2-pylint

2017-06-01 Thread MartinBasti via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/827 Title: #827: pylint: explicitly depends on python2-pylint Label: +pushed ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to

[Freeipa-devel] [freeipa PR#827][+ack] pylint: explicitly depends on python2-pylint

2017-06-01 Thread stlaz via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/827 Title: #827: pylint: explicitly depends on python2-pylint Label: +ack ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to

[Freeipa-devel] [freeipa PR#834][closed] [4.4] NSSNickname enclosed in single quotes causes ipa-server-certinstall failure

2017-06-01 Thread MartinBasti via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/834 Author: tomaskrizek Title: #834: [4.4] NSSNickname enclosed in single quotes causes ipa-server-certinstall failure Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa

[Freeipa-devel] [freeipa PR#834][comment] [4.4] NSSNickname enclosed in single quotes causes ipa-server-certinstall failure

2017-06-01 Thread MartinBasti via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/834 Title: #834: [4.4] NSSNickname enclosed in single quotes causes ipa-server-certinstall failure MartinBasti commented: """ ipa-4-4: * e4363c5c26982f9126e7df16ba7a1a060cdb8721 Fix the installutils.set_directive docstring *

[Freeipa-devel] [freeipa PR#834][+pushed] [4.4] NSSNickname enclosed in single quotes causes ipa-server-certinstall failure

2017-06-01 Thread MartinBasti via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/834 Title: #834: [4.4] NSSNickname enclosed in single quotes causes ipa-server-certinstall failure Label: +pushed ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send

[Freeipa-devel] [freeipa PR#818][comment] Avoid possible endless recursion in RPC call from client

2017-06-01 Thread stlaz via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/818 Title: #818: Avoid possible endless recursion in RPC call from client stlaz commented: """ Thanks for the good catch, @flo-renaud. While the recursion in the `forward()` method was quite easy to fix, it was not so in the `create_connection()`. I

[Freeipa-devel] [freeipa PR#818][synchronized] Avoid possible endless recursion in RPC call from client

2017-06-01 Thread stlaz via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/818 Author: stlaz Title: #818: Avoid possible endless recursion in RPC call from client Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/818/head:pr818 git

[Freeipa-devel] [freeipa PR#824][+pushed] ca-add: validate Subject DN name attributes

2017-06-01 Thread MartinBasti via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/824 Title: #824: ca-add: validate Subject DN name attributes Label: +pushed ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to

[Freeipa-devel] [freeipa PR#824][comment] ca-add: validate Subject DN name attributes

2017-06-01 Thread MartinBasti via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/824 Title: #824: ca-add: validate Subject DN name attributes MartinBasti commented: """ master: * 5f0e13ce9c3d1ead02de61a148de973fc6787b96 ca-add: validate Subject DN name attributes """ See the full comment at

[Freeipa-devel] [freeipa PR#824][closed] ca-add: validate Subject DN name attributes

2017-06-01 Thread MartinBasti via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/824 Author: frasertweedale Title: #824: ca-add: validate Subject DN name attributes Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/824/head:pr824 git checkout pr824

[Freeipa-devel] [freeipa PR#818][synchronized] Avoid possible endless recursion in RPC call from client

2017-06-01 Thread stlaz via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/818 Author: stlaz Title: #818: Avoid possible endless recursion in RPC call from client Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/818/head:pr818 git

[Freeipa-devel] [freeipa PR#460][closed] ipa-server-install, ipa-server-upgrade fixes

2017-06-01 Thread MartinBasti via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/460 Author: MartinBasti Title: #460: ipa-server-install, ipa-server-upgrade fixes Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/460/head:pr460 git checkout pr460

[Freeipa-devel] [freeipa PR#460][comment] ipa-server-install, ipa-server-upgrade fixes

2017-06-01 Thread MartinBasti via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/460 Title: #460: ipa-server-install, ipa-server-upgrade fixes MartinBasti commented: """ master: * 2e63ec42d0f879f2d129c4f81f88a1712ce86b8c py3: use ConfigParser instead of SafeConfigParser * 6e7071d6add24e8923d705d35a362761f356d56d py3:

[Freeipa-devel] [freeipa PR#824][+ack] ca-add: validate Subject DN name attributes

2017-06-01 Thread stlaz via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/824 Title: #824: ca-add: validate Subject DN name attributes Label: +ack ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to