Re: [Freeipa-devel] [PATCH][DOC] 432 Add direct bug reporting links to Feedback section

2014-02-14 Thread Petr Spacek
On 13.2.2014 22:39, Petr Spacek wrote: On 13.2.2014 14:33, Martin Kosek wrote: On 11/08/2013 10:18 AM, Martin Kosek wrote: On 10/17/2013 12:04 PM, Martin Kosek wrote: On 10/17/2013 07:25 AM, Petr Spacek wrote: On 17.10.2013 03:06, Simo Sorce wrote: On Wed, 2013-10-16 at 21:59 +0200, Petr

Re: [Freeipa-devel] [PATCH][DOC] 432 Add direct bug reporting links to Feedback section

2014-02-14 Thread Martin Kosek
On 02/14/2014 09:25 AM, Petr Spacek wrote: On 13.2.2014 22:39, Petr Spacek wrote: On 13.2.2014 14:33, Martin Kosek wrote: On 11/08/2013 10:18 AM, Martin Kosek wrote: On 10/17/2013 12:04 PM, Martin Kosek wrote: On 10/17/2013 07:25 AM, Petr Spacek wrote: On 17.10.2013 03:06, Simo Sorce wrote:

Re: [Freeipa-devel] [PATCH] 1106 IPA REST smart proxy

2014-02-14 Thread Martin Kosek
On 02/14/2014 12:07 AM, Rob Crittenden wrote: Martin Kosek wrote: On 01/28/2014 09:35 PM, Rob Crittenden wrote: Petr Viktorin wrote: On 01/23/2014 02:17 PM, Petr Viktorin wrote: ... The URL endpoint /ipa/rest suggests that if we implement a complete REST API for IPA it would live here. Is

Re: [Freeipa-devel] [PATCH][DOC] 432 Add direct bug reporting links to Feedback section

2014-02-14 Thread Petr Viktorin
On 02/14/2014 09:30 AM, Martin Kosek wrote: On 02/14/2014 09:25 AM, Petr Spacek wrote: On 13.2.2014 22:39, Petr Spacek wrote: On 13.2.2014 14:33, Martin Kosek wrote: On 11/08/2013 10:18 AM, Martin Kosek wrote: On 10/17/2013 12:04 PM, Martin Kosek wrote: On 10/17/2013 07:25 AM, Petr Spacek

Re: [Freeipa-devel] [PATCH][DOC] 432 Add direct bug reporting links to Feedback section

2014-02-14 Thread Martin Kosek
On 02/14/2014 09:45 AM, Petr Viktorin wrote: On 02/14/2014 09:30 AM, Martin Kosek wrote: On 02/14/2014 09:25 AM, Petr Spacek wrote: On 13.2.2014 22:39, Petr Spacek wrote: On 13.2.2014 14:33, Martin Kosek wrote: On 11/08/2013 10:18 AM, Martin Kosek wrote: On 10/17/2013 12:04 PM, Martin Kosek

Re: [Freeipa-devel] DNSSEC design page

2014-02-14 Thread Jan Cholasta
Hi, On 13.2.2014 18:36, Petr Spacek wrote: Hello list, I would like to point you to design pages for DNSSEC feature: Zone signing: https://fedorahosted.org/bind-dyndb-ldap/wiki/BIND9/Design/DNSSEC Automatic key rotation:

Re: [Freeipa-devel] [PATCH] 1106 IPA REST smart proxy

2014-02-14 Thread Petr Viktorin
On 02/14/2014 12:07 AM, Rob Crittenden wrote: Martin Kosek wrote: On 01/28/2014 09:35 PM, Rob Crittenden wrote: Petr Viktorin wrote: On 01/23/2014 02:17 PM, Petr Viktorin wrote: ... The URL endpoint /ipa/rest suggests that if we implement a complete REST API for IPA it would live here. Is

Re: [Freeipa-devel] DNSSEC design page

2014-02-14 Thread Petr Spacek
On 14.2.2014 11:03, Jan Cholasta wrote: On 13.2.2014 18:36, Petr Spacek wrote: Hello list, I would like to point you to design pages for DNSSEC feature: Zone signing: https://fedorahosted.org/bind-dyndb-ldap/wiki/BIND9/Design/DNSSEC Automatic key rotation:

Re: [Freeipa-devel] DNSSEC design page

2014-02-14 Thread Jan Cholasta
On 14.2.2014 12:08, Petr Spacek wrote: On 14.2.2014 11:03, Jan Cholasta wrote: On 13.2.2014 18:36, Petr Spacek wrote: Hello list, I would like to point you to design pages for DNSSEC feature: Zone signing: https://fedorahosted.org/bind-dyndb-ldap/wiki/BIND9/Design/DNSSEC Automatic key

Re: [Freeipa-devel] DNSSEC design page

2014-02-14 Thread Petr Spacek
On 14.2.2014 12:27, Jan Cholasta wrote: On 14.2.2014 12:08, Petr Spacek wrote: On 14.2.2014 11:03, Jan Cholasta wrote: On 13.2.2014 18:36, Petr Spacek wrote: Hello list, I would like to point you to design pages for DNSSEC feature: Zone signing:

Re: [Freeipa-devel] [PATCHES] OTP Patches

2014-02-14 Thread Alexander Bokovoy
On Wed, 12 Feb 2014, Nathaniel McCallum wrote: Through the review process, patches are getting shifted around, added, deleted, etc. So I'm now just going to be posting all the patches as an ordered set. The set attached is ordered according to my preferred merge order. It also places easy to

Re: [Freeipa-devel] [PATCHES] OTP Patches

2014-02-14 Thread Alexander Bokovoy
On Wed, 12 Feb 2014, Nathaniel McCallum wrote: Through the review process, patches are getting shifted around, added, deleted, etc. So I'm now just going to be posting all the patches as an ordered set. The set attached is ordered according to my preferred merge order. It also places easy to

Re: [Freeipa-devel] [PATCHES] OTP Patches

2014-02-14 Thread Alexander Bokovoy
On Wed, 12 Feb 2014, Nathaniel McCallum wrote: Through the review process, patches are getting shifted around, added, deleted, etc. So I'm now just going to be posting all the patches as an ordered set. The set attached is ordered according to my preferred merge order. It also places easy to

[Freeipa-devel] GSS-Proxy - TPM - PKCS#11 (silly idea)

2014-02-14 Thread Petr Spacek
Hello, I have got an silly idea to use TPM (Trusted Platform Module) as backend for Keytab storage (via GSS-Proxy). GSS-Proxy prevents application from accessing key material, right? So GSS-Proxy could theoretically store keys in TPM and application wouldn't notice any difference, right?

[Freeipa-devel] [PATCH 0012] tests: Move zone enable/disable tests to end of test_dns_plugin.p

2014-02-14 Thread Petr Spacek
Hello, This patch prevents the test suite from hitting limitations in bind-dyndb-ldap 4.0. It should go to 3.4 (master branch, right?). -- Petr^2 Spacek From 39da51eedef455b4d3f436acb0d85de1024debfb Mon Sep 17 00:00:00 2001 From: Petr Spacek pspa...@redhat.com Date: Fri, 14 Feb 2014 15:06:42

Re: [Freeipa-devel] [PATCH 0012] tests: Move zone enable/disable tests to end of test_dns_plugin.p

2014-02-14 Thread Petr Viktorin
On 02/14/2014 03:10 PM, Petr Spacek wrote: Hello, This patch prevents the test suite from hitting limitations in bind-dyndb-ldap 4.0. It should go to 3.4 (master branch, right?). Tests still pass, but the commit message is not very informative. Could you explain/link to what kind of

Re: [Freeipa-devel] [PATCH 0012] tests: Move zone enable/disable tests to end of test_dns_plugin.p

2014-02-14 Thread Petr Spacek
On 14.2.2014 15:29, Petr Viktorin wrote: On 02/14/2014 03:10 PM, Petr Spacek wrote: Hello, This patch prevents the test suite from hitting limitations in bind-dyndb-ldap 4.0. It should go to 3.4 (master branch, right?). Tests still pass, but the commit message is not very informative.

Re: [Freeipa-devel] [PATCHES] OTP Patches

2014-02-14 Thread Petr Viktorin
On 02/14/2014 12:39 PM, Alexander Bokovoy wrote: On Wed, 12 Feb 2014, Nathaniel McCallum wrote: Through the review process, patches are getting shifted around, added, deleted, etc. So I'm now just going to be posting all the patches as an ordered set. The set attached is ordered according to my

Re: [Freeipa-devel] [PATCHES] OTP Patches

2014-02-14 Thread Petr Viktorin
On 02/14/2014 12:37 PM, Alexander Bokovoy wrote: On Wed, 12 Feb 2014, Nathaniel McCallum wrote: Through the review process, patches are getting shifted around, added, deleted, etc. So I'm now just going to be posting all the patches as an ordered set. The set attached is ordered according to my

Re: [Freeipa-devel] [PATCHES] OTP Patches

2014-02-14 Thread Petr Viktorin
On 02/14/2014 01:13 PM, Alexander Bokovoy wrote: On Wed, 12 Feb 2014, Nathaniel McCallum wrote: Through the review process, patches are getting shifted around, added, deleted, etc. So I'm now just going to be posting all the patches as an ordered set. The set attached is ordered according to my

Re: [Freeipa-devel] [PATCH 0012] tests: Move zone enable/disable tests to end of test_dns_plugin.p

2014-02-14 Thread Petr Viktorin
On 02/14/2014 03:52 PM, Petr Spacek wrote: On 14.2.2014 15:29, Petr Viktorin wrote: On 02/14/2014 03:10 PM, Petr Spacek wrote: Hello, This patch prevents the test suite from hitting limitations in bind-dyndb-ldap 4.0. It should go to 3.4 (master branch, right?). Tests still pass, but the

Re: [Freeipa-devel] [PATCH] 1106 IPA REST smart proxy

2014-02-14 Thread Dmitri Pal
On 02/14/2014 03:43 AM, Martin Kosek wrote: On 02/14/2014 12:07 AM, Rob Crittenden wrote: Martin Kosek wrote: On 01/28/2014 09:35 PM, Rob Crittenden wrote: Petr Viktorin wrote: On 01/23/2014 02:17 PM, Petr Viktorin wrote: ... The URL endpoint /ipa/rest suggests that if we implement a

Re: [Freeipa-devel] DNSSEC design page

2014-02-14 Thread Dmitri Pal
On 02/14/2014 06:37 AM, Petr Spacek wrote: On 14.2.2014 12:27, Jan Cholasta wrote: On 14.2.2014 12:08, Petr Spacek wrote: On 14.2.2014 11:03, Jan Cholasta wrote: On 13.2.2014 18:36, Petr Spacek wrote: Hello list, I would like to point you to design pages for DNSSEC feature: Zone signing:

Re: [Freeipa-devel] [PATCH] 1106 IPA REST smart proxy

2014-02-14 Thread Rob Crittenden
Dmitri Pal wrote: On 02/14/2014 03:43 AM, Martin Kosek wrote: On 02/14/2014 12:07 AM, Rob Crittenden wrote: Martin Kosek wrote: On 01/28/2014 09:35 PM, Rob Crittenden wrote: Petr Viktorin wrote: On 01/23/2014 02:17 PM, Petr Viktorin wrote: ... The URL endpoint /ipa/rest suggests that if

Re: [Freeipa-devel] [PATCH] 1106 IPA REST smart proxy

2014-02-14 Thread Dmitri Pal
On 02/14/2014 03:09 PM, Rob Crittenden wrote: Dmitri Pal wrote: On 02/14/2014 03:43 AM, Martin Kosek wrote: On 02/14/2014 12:07 AM, Rob Crittenden wrote: Martin Kosek wrote: On 01/28/2014 09:35 PM, Rob Crittenden wrote: Petr Viktorin wrote: On 01/23/2014 02:17 PM, Petr Viktorin wrote: ...

Re: [Freeipa-devel] [PATCH] 1106 IPA REST smart proxy

2014-02-14 Thread Rob Crittenden
Dmitri Pal wrote: On 02/14/2014 03:09 PM, Rob Crittenden wrote: Dmitri Pal wrote: On 02/14/2014 03:43 AM, Martin Kosek wrote: On 02/14/2014 12:07 AM, Rob Crittenden wrote: Martin Kosek wrote: On 01/28/2014 09:35 PM, Rob Crittenden wrote: Petr Viktorin wrote: On 01/23/2014 02:17 PM, Petr

Re: [Freeipa-devel] [PATCH] 1106 IPA REST smart proxy

2014-02-14 Thread Dmitri Pal
On 02/14/2014 04:52 PM, Rob Crittenden wrote: Dmitri Pal wrote: On 02/14/2014 03:09 PM, Rob Crittenden wrote: Dmitri Pal wrote: On 02/14/2014 03:43 AM, Martin Kosek wrote: On 02/14/2014 12:07 AM, Rob Crittenden wrote: Martin Kosek wrote: On 01/28/2014 09:35 PM, Rob Crittenden wrote: Petr

Re: [Freeipa-devel] [PATCH] 1106 IPA REST smart proxy

2014-02-14 Thread Rob Crittenden
Dmitri Pal wrote: On 02/14/2014 04:52 PM, Rob Crittenden wrote: Dmitri Pal wrote: On 02/14/2014 03:09 PM, Rob Crittenden wrote: Dmitri Pal wrote: On 02/14/2014 03:43 AM, Martin Kosek wrote: On 02/14/2014 12:07 AM, Rob Crittenden wrote: Martin Kosek wrote: On 01/28/2014 09:35 PM, Rob

Re: [Freeipa-devel] [PATCH] 1106 IPA REST smart proxy

2014-02-14 Thread Dmitri Pal
On 02/14/2014 05:07 PM, Rob Crittenden wrote: Dmitri Pal wrote: On 02/14/2014 04:52 PM, Rob Crittenden wrote: Dmitri Pal wrote: On 02/14/2014 03:09 PM, Rob Crittenden wrote: Dmitri Pal wrote: On 02/14/2014 03:43 AM, Martin Kosek wrote: On 02/14/2014 12:07 AM, Rob Crittenden wrote: Martin

Re: [Freeipa-devel] [PATCH] 1106 IPA REST smart proxy

2014-02-14 Thread Rob Crittenden
Petr Viktorin wrote: On 02/14/2014 12:07 AM, Rob Crittenden wrote: Martin Kosek wrote: On 01/28/2014 09:35 PM, Rob Crittenden wrote: Petr Viktorin wrote: On 01/23/2014 02:17 PM, Petr Viktorin wrote: ... The URL endpoint /ipa/rest suggests that if we implement a complete REST API for IPA it

Re: [Freeipa-devel] [PATCH] 1106 IPA REST smart proxy

2014-02-14 Thread Nathan Kinder
On 02/14/2014 02:26 PM, Dmitri Pal wrote: On 02/14/2014 05:07 PM, Rob Crittenden wrote: Dmitri Pal wrote: On 02/14/2014 04:52 PM, Rob Crittenden wrote: Dmitri Pal wrote: On 02/14/2014 03:09 PM, Rob Crittenden wrote: Dmitri Pal wrote: On 02/14/2014 03:43 AM, Martin Kosek wrote: On