Re: [Freeipa-devel] DNSSEC support design considerations

2013-05-23 Thread Petr Spacek
On 22.5.2013 21:58, Simo Sorce wrote: On Wed, 2013-05-22 at 17:01 +0200, Petr Spacek wrote: Wow, it is pretty slow. Yeah this is what I expected, crypto is not really fast. [...] The simplest way how to mitigate problem with slow start-up is: 1) Store signed version of the zone on the

Re: [Freeipa-devel] DNSSEC support design considerations

2013-05-23 Thread Simo Sorce
On Thu, 2013-05-23 at 14:35 +0200, Petr Spacek wrote: It looks that we agree on nearly all points (I apologize if overlooked something). I will prepare a design document for transition to RBTDB and then another design document for DNSSEC implementation. ACK Simo. -- Simo Sorce * Red

[Freeipa-devel] CLDAP Netlogon fixes

2013-05-23 Thread Simo Sorce
CLDAP fixes for: https://fedorahosted.org/freeipa/ticket/3639 Should be pretty straightforward. (pending testing) Alexander, please check they work for your 2012 setup too. Simo. -- Simo Sorce * Red Hat, Inc * New York From 1b46d2eba3314dc1cc9ea65bebf5aaa4ba738290 Mon Sep 17 00:00:00 2001

[Freeipa-devel] [PATCH 0059] Make testcert automagically when needed by unit test

2013-05-23 Thread Tomas Babej
Hi, With this patch, there's no need to run make-testcert separately before running make-test. Unit test framework will check whether service.crt file exists, and if not, will generate one if needed. New location of service.crt file is in ~/.ipa directory. Part of

Re: [Freeipa-devel] CLDAP Netlogon fixes

2013-05-23 Thread Simo Sorce
On Thu, 2013-05-23 at 10:42 -0400, Simo Sorce wrote: CLDAP fixes for: https://fedorahosted.org/freeipa/ticket/3639 Should be pretty straightforward. (pending testing) Alexander, please check they work for your 2012 setup too. Alexander found a couple of typos and then the patches didn't

Re: [Freeipa-devel] CLDAP Netlogon fixes

2013-05-23 Thread Alexander Bokovoy
On Thu, 23 May 2013, Simo Sorce wrote: On Thu, 2013-05-23 at 10:42 -0400, Simo Sorce wrote: CLDAP fixes for: https://fedorahosted.org/freeipa/ticket/3639 Should be pretty straightforward. (pending testing) Alexander, please check they work for your 2012 setup too. Alexander found a couple

Re: [Freeipa-devel] CLDAP Netlogon fixes

2013-05-23 Thread Simo Sorce
On Thu, 2013-05-23 at 21:02 +0300, Alexander Bokovoy wrote: On Thu, 23 May 2013, Simo Sorce wrote: On Thu, 2013-05-23 at 10:42 -0400, Simo Sorce wrote: CLDAP fixes for: https://fedorahosted.org/freeipa/ticket/3639 Should be pretty straightforward. (pending testing) Alexander,