Re: [Freeipa-devel] [PATCH] 0454 Test fixes

2014-03-25 Thread Petr Viktorin
On 01/28/2014 03:35 PM, Petr Viktorin wrote: On 01/23/2014 01:54 PM, Petr Viktorin wrote: [...] Patch 454 changes the cert generation script for CA-less tests to use sequential serial numbers rather than random ones, to prevent collisions. This one is still useful though. Ping, could

[Freeipa-devel] [PATCH] extdom: do not return results from the wrong domain

2014-03-25 Thread Sumit Bose
Hi, since get{grg|pwu}id() cannot be restricted to a certain domain we have to filter results from other domains after the call based on the full-qualified name of the returned object. This patch should fix https://fedorahosted.org/freeipa/ticket/4264 . bye, Sumit From

[Freeipa-devel] FYI: [dane] Digest Algorithm Agility discussion

2014-03-25 Thread Petr Spacek
Hello list, I think that crypto-folks could be interested in discussion on dane-list: http://www.ietf.org/mail-archive/web/dane/current/msg06599.html As usual, there are two sides in this discussion and some input from an expert could help... Thank you for your time! -- Petr^2 Spacek

Re: [Freeipa-devel] [PATCH] 560 webui: rename domNode to dom_node

2014-03-25 Thread Petr Vobornik
On 20.3.2014 16:51, Misnyovszki Adam wrote: On Wed, 19 Mar 2014 16:02:12 +0100 Petr Vobornik pvobo...@redhat.com wrote: - unites domNode and dom_node usage to dom_node Nack, install/ui/test/details_tests.js:236 install/ui/test/details_tests.js:242 only finds element, because context(ie

Re: [Freeipa-devel] [PATCH] extdom: do not return results from the wrong domain

2014-03-25 Thread Tomas Babej
ACK, patch looks good code wise and resolves the issue. Tomas On 03/25/2014 11:47 AM, Sumit Bose wrote: Hi, since get{grg|pwu}id() cannot be restricted to a certain domain we have to filter results from other domains after the call based on the full-qualified name of the returned object.

Re: [Freeipa-devel] [PATCH] extdom: do not return results from the wrong domain

2014-03-25 Thread Petr Viktorin
On 03/25/2014 01:42 PM, Tomas Babej wrote: ACK, patch looks good code wise and resolves the issue. Pushed to: master: c885bc3e49b41490668ed8b62989d71ec1cadf34 ipa-3-3: 2ec7c50f3c475e5ffbf2f73968636c483c6503e7 Tomas On 03/25/2014 11:47 AM, Sumit Bose wrote: Hi, since get{grg|pwu}id()

Re: [Freeipa-devel] [PATCH] 464 Proxy PKI clone /ca/ee/ca/profileSubmit URI

2014-03-25 Thread Petr Viktorin
On 03/23/2014 10:35 PM, Alexander Bokovoy wrote: On Thu, 20 Mar 2014, Martin Kosek wrote: PKI change done in ticket https://fedorahosted.org/pki/ticket/816 requires the PKI Clone's SSL Server certificate to be issued by it's associated PKI master. Allow this call on IPA master.

Re: [Freeipa-devel] [PATCHES] 0473-0477+0497 Managed permission updater, part 1

2014-03-25 Thread Petr Viktorin
On 03/24/2014 03:43 PM, Martin Kosek wrote: On 03/14/2014 04:27 PM, Petr Viktorin wrote: On 03/13/2014 02:01 PM, Petr Viktorin wrote: On 03/07/2014 10:45 AM, Martin Kosek wrote: On 03/05/2014 01:48 PM, Petr Viktorin wrote: On 03/03/2014 04:10 PM, Petr Viktorin wrote: On 02/28/2014 02:47 PM,

Re: [Freeipa-devel] [PATCHES] 172-196 Refactor certificate renewal code

2014-03-25 Thread Petr Viktorin
On 03/25/2014 03:05 PM, Jan Cholasta wrote: On 21.3.2014 09:46, Petr Viktorin wrote: On 03/19/2014 02:33 PM, Jan Cholasta wrote: [...] Updated patches attached. Note that I changed the path for CSR export to /var/lib/ipa/ca.csr to make it more SELinux-friendly (not in the policy yet, see

Re: [Freeipa-devel] [PATCH][RFC] 7 automember rebuild nowait feature added

2014-03-25 Thread Misnyovszki Adam
On Mon, 24 Mar 2014 17:06:41 +0100 Martin Kosek mko...@redhat.com wrote: On 03/24/2014 11:42 AM, Misnyovszki Adam wrote: On Fri, 21 Mar 2014 13:06:21 +0100 Petr Viktorin pvikt...@redhat.com wrote: On 03/21/2014 12:58 PM, Martin Kosek wrote: On 03/21/2014 12:38 PM, Petr Viktorin wrote:

[Freeipa-devel] [PATCHES] 241-253 CA certificate renewal

2014-03-25 Thread Jan Cholasta
Hi, the attached patches implement automatic CA certificate renewal as well as the initial version of the CA certificate management tool. Requires my patches 172-196. In order to test, you must install current git version of certmonger (see https://fedorahosted.org/certmonger/ticket/26) and

Re: [Freeipa-devel] [PATCH] 560 webui: rename domNode to dom_node

2014-03-25 Thread Misnyovszki Adam
On Tue, 25 Mar 2014 12:49:24 +0100 Petr Vobornik pvobo...@redhat.com wrote: On 20.3.2014 16:51, Misnyovszki Adam wrote: On Wed, 19 Mar 2014 16:02:12 +0100 Petr Vobornik pvobo...@redhat.com wrote: - unites domNode and dom_node usage to dom_node Nack,

Re: [Freeipa-devel] [PATCHES] 172-196 Refactor certificate renewal code

2014-03-25 Thread Petr Viktorin
On 03/25/2014 04:12 PM, Jan Cholasta wrote: On 25.3.2014 16:07, Petr Viktorin wrote: On 03/25/2014 03:05 PM, Jan Cholasta wrote: On 21.3.2014 09:46, Petr Viktorin wrote: On 03/19/2014 02:33 PM, Jan Cholasta wrote: [...] Updated patches attached. Note that I changed the path for CSR export