Re: [Freeipa-devel] Fwd: [freeipa] update to Java/8

2014-09-11 Thread Martin Kosek
My point was - we do not need Java for IPA package build (or do we?), we need rhino. Shouldn't then java be a dependency of rhino instead of freeipa package? On 09/09/2014 01:52 PM, Petr Vobornik wrote: On 5.9.2014 12:35, Martin Kosek wrote: Petr, why do we require java-1.7.0-openjdk in

Re: [Freeipa-devel] [PATCH] 746-747 append domain into network.negotiate-auth.trusted-uris

2014-09-11 Thread Petr Vobornik
On 10.9.2014 19:33, Endi Sukma Dewata wrote: On 9/10/2014 9:59 AM, Petr Vobornik wrote: On 4.9.2014 21:26, Endi Sukma Dewata wrote: On 8/29/2014 11:00 AM, Petr Vobornik wrote: [PATCH] 746 webui: append network.negotiate-auth.trusted-uris https://fedorahosted.org/freeipa/ticket/4478 Some

[Freeipa-devel] [PATCH 0291-0294] Fix locking to prevent crashes and deadlocks

2014-09-11 Thread Petr Spacek
Hello, I was fighting with random crashes for couple of days ... and discovered that run_exclusive_enter()/isc_task_beginexclusive() usage was completely incorrect and didn't actually lock anything. This series of patches reworks internal locking (and related event system) to work around

Re: [Freeipa-devel] [PATCH 0063] Update qrcode support for newer python-qrcode

2014-09-11 Thread Petr Viktorin
On 09/10/2014 11:50 PM, Nathaniel McCallum wrote: On Wed, 2014-09-10 at 17:41 -0400, Nathaniel McCallum wrote: This substantially reduces the FreeIPA dependencies and allows QR codes to fit in a standard terminal. https://fedorahosted.org/freeipa/ticket/4430 A note about this patch: Quick

Re: [Freeipa-devel] [PATCH 0063] Update qrcode support for newer python-qrcode

2014-09-11 Thread Petr Vobornik
On 10.9.2014 23:50, Nathaniel McCallum wrote: On Wed, 2014-09-10 at 17:41 -0400, Nathaniel McCallum wrote: This substantially reduces the FreeIPA dependencies and allows QR codes to fit in a standard terminal. https://fedorahosted.org/freeipa/ticket/4430 A note about this patch: Quick

Re: [Freeipa-devel] [PATCH] 0014 Fix typo causing ipa-upgradeconfig to fail

2014-09-11 Thread Martin Kosek
On 09/10/2014 03:18 PM, Jan Cholasta wrote: Dne 10.9.2014 v 13:15 David Kupka napsal(a): https://fedorahosted.org/freeipa/ticket/4529 ACK. Pushed to master, ipa-4-1, ipa-4-0. Martin ___ Freeipa-devel mailing list Freeipa-devel@redhat.com

[Freeipa-devel] FreeIPA 4.0.3?

2014-09-11 Thread Martin Kosek
Hi team, It seems we have pretty serious bug in our FreeIPA 4.0.2 release, breaking upgrade from older releases: https://fedorahosted.org/freeipa/ticket/4529 We also have packaging fix requested by Fedora Server roles group: https://fedorahosted.org/freeipa/ticket/4430 It seems just these 2

Re: [Freeipa-devel] FreeIPA 4.0.3?

2014-09-11 Thread Petr Viktorin
On 09/11/2014 01:37 PM, Martin Kosek wrote: Hi team, It seems we have pretty serious bug in our FreeIPA 4.0.2 release, breaking upgrade from older releases: https://fedorahosted.org/freeipa/ticket/4529 We also have packaging fix requested by Fedora Server roles group:

Re: [Freeipa-devel] FreeIPA 4.0.3?

2014-09-11 Thread Nathaniel McCallum
On Thu, 2014-09-11 at 15:46 +0200, Petr Viktorin wrote: On 09/11/2014 01:37 PM, Martin Kosek wrote: Hi team, It seems we have pretty serious bug in our FreeIPA 4.0.2 release, breaking upgrade from older releases: https://fedorahosted.org/freeipa/ticket/4529 We also have packaging

Re: [Freeipa-devel] [PATCH 0291-0294] Fix locking to prevent crashes and deadlocks

2014-09-11 Thread Martin Basti
On 11/09/14 11:59, Petr Spacek wrote: Hello, I was fighting with random crashes for couple of days ... and discovered that run_exclusive_enter()/isc_task_beginexclusive() usage was completely incorrect and didn't actually lock anything. This series of patches reworks internal locking (and

Re: [Freeipa-devel] FreeIPA 4.0.3?

2014-09-11 Thread Martin Kosek
On 09/11/2014 03:47 PM, Nathaniel McCallum wrote: On Thu, 2014-09-11 at 15:46 +0200, Petr Viktorin wrote: On 09/11/2014 01:37 PM, Martin Kosek wrote: Hi team, It seems we have pretty serious bug in our FreeIPA 4.0.2 release, breaking upgrade from older releases:

Re: [Freeipa-devel] FreeIPA 4.0.3?

2014-09-11 Thread Ludwig Krispenz
On 09/11/2014 04:04 PM, Martin Kosek wrote: On 09/11/2014 03:47 PM, Nathaniel McCallum wrote: On Thu, 2014-09-11 at 15:46 +0200, Petr Viktorin wrote: On 09/11/2014 01:37 PM, Martin Kosek wrote: Hi team, It seems we have pretty serious bug in our FreeIPA 4.0.2 release, breaking upgrade from

Re: [Freeipa-devel] FreeIPA 4.0.3?

2014-09-11 Thread Nathaniel McCallum
On Thu, 2014-09-11 at 16:09 +0200, Ludwig Krispenz wrote: On 09/11/2014 04:04 PM, Martin Kosek wrote: On 09/11/2014 03:47 PM, Nathaniel McCallum wrote: On Thu, 2014-09-11 at 15:46 +0200, Petr Viktorin wrote: On 09/11/2014 01:37 PM, Martin Kosek wrote: Hi team, It seems we have pretty

Re: [Freeipa-devel] FreeIPA 4.0.3?

2014-09-11 Thread Ludwig Krispenz
On 09/11/2014 04:17 PM, Nathaniel McCallum wrote: On Thu, 2014-09-11 at 16:09 +0200, Ludwig Krispenz wrote: On 09/11/2014 04:04 PM, Martin Kosek wrote: On 09/11/2014 03:47 PM, Nathaniel McCallum wrote: On Thu, 2014-09-11 at 15:46 +0200, Petr Viktorin wrote: On 09/11/2014 01:37 PM, Martin

Re: [Freeipa-devel] FreeIPA 4.0.3?

2014-09-11 Thread Nathaniel McCallum
On Thu, 2014-09-11 at 16:21 +0200, Ludwig Krispenz wrote: On 09/11/2014 04:17 PM, Nathaniel McCallum wrote: On Thu, 2014-09-11 at 16:09 +0200, Ludwig Krispenz wrote: On 09/11/2014 04:04 PM, Martin Kosek wrote: On 09/11/2014 03:47 PM, Nathaniel McCallum wrote: On Thu, 2014-09-11 at 15:46

Re: [Freeipa-devel] FreeIPA 4.0.3?

2014-09-11 Thread Ludwig Krispenz
On 09/11/2014 04:22 PM, Nathaniel McCallum wrote: On Thu, 2014-09-11 at 16:21 +0200, Ludwig Krispenz wrote: On 09/11/2014 04:17 PM, Nathaniel McCallum wrote: On Thu, 2014-09-11 at 16:09 +0200, Ludwig Krispenz wrote: On 09/11/2014 04:04 PM, Martin Kosek wrote: On 09/11/2014 03:47 PM,

Re: [Freeipa-devel] FreeIPA 4.0.3?

2014-09-11 Thread Nathaniel McCallum
On Thu, 2014-09-11 at 16:09 +0200, Ludwig Krispenz wrote: On 09/11/2014 04:04 PM, Martin Kosek wrote: On 09/11/2014 03:47 PM, Nathaniel McCallum wrote: On Thu, 2014-09-11 at 15:46 +0200, Petr Viktorin wrote: On 09/11/2014 01:37 PM, Martin Kosek wrote: Hi team, It seems we have pretty

Re: [Freeipa-devel] FreeIPA 4.0.3?

2014-09-11 Thread Martin Kosek
On 09/11/2014 04:22 PM, Nathaniel McCallum wrote: On Thu, 2014-09-11 at 16:21 +0200, Ludwig Krispenz wrote: On 09/11/2014 04:17 PM, Nathaniel McCallum wrote: On Thu, 2014-09-11 at 16:09 +0200, Ludwig Krispenz wrote: On 09/11/2014 04:04 PM, Martin Kosek wrote: On 09/11/2014 03:47 PM, Nathaniel

Re: [Freeipa-devel] FreeIPA 4.0.3?

2014-09-11 Thread Nathaniel McCallum
On Thu, 2014-09-11 at 16:25 +0200, Ludwig Krispenz wrote: On 09/11/2014 04:22 PM, Nathaniel McCallum wrote: On Thu, 2014-09-11 at 16:21 +0200, Ludwig Krispenz wrote: On 09/11/2014 04:17 PM, Nathaniel McCallum wrote: On Thu, 2014-09-11 at 16:09 +0200, Ludwig Krispenz wrote: On 09/11/2014

Re: [Freeipa-devel] FreeIPA 4.0.3?

2014-09-11 Thread Petr Viktorin
On 09/11/2014 04:26 PM, Martin Kosek wrote: On 09/11/2014 04:22 PM, Nathaniel McCallum wrote: On Thu, 2014-09-11 at 16:21 +0200, Ludwig Krispenz wrote: On 09/11/2014 04:17 PM, Nathaniel McCallum wrote: On Thu, 2014-09-11 at 16:09 +0200, Ludwig Krispenz wrote: On 09/11/2014 04:04 PM, Martin

Re: [Freeipa-devel] FreeIPA 4.0.3?

2014-09-11 Thread Nathaniel McCallum
On Thu, 2014-09-11 at 16:31 +0200, Petr Viktorin wrote: On 09/11/2014 04:26 PM, Martin Kosek wrote: On 09/11/2014 04:22 PM, Nathaniel McCallum wrote: On Thu, 2014-09-11 at 16:21 +0200, Ludwig Krispenz wrote: On 09/11/2014 04:17 PM, Nathaniel McCallum wrote: On Thu, 2014-09-11 at 16:09

Re: [Freeipa-devel] FreeIPA 4.0.3?

2014-09-11 Thread Petr Viktorin
On 09/11/2014 04:38 PM, Ludwig Krispenz wrote: On 09/11/2014 04:31 PM, Petr Viktorin wrote: On 09/11/2014 04:26 PM, Martin Kosek wrote: ... Also, we will need to add the F21 389-ds-base build to FreeIPA Copr: http://copr.fedoraproject.org/coprs/mkosek/freeipa/ so that F20 users can upgrade

Re: [Freeipa-devel] FreeIPA 4.0.3?

2014-09-11 Thread Nathaniel McCallum
On Thu, 2014-09-11 at 16:39 +0200, Petr Viktorin wrote: On 09/11/2014 04:38 PM, Ludwig Krispenz wrote: On 09/11/2014 04:31 PM, Petr Viktorin wrote: On 09/11/2014 04:26 PM, Martin Kosek wrote: ... Also, we will need to add the F21 389-ds-base build to FreeIPA Copr:

Re: [Freeipa-devel] FreeIPA 4.0.3?

2014-09-11 Thread Martin Kosek
On 09/11/2014 04:43 PM, Nathaniel McCallum wrote: On Thu, 2014-09-11 at 16:39 +0200, Petr Viktorin wrote: On 09/11/2014 04:38 PM, Ludwig Krispenz wrote: On 09/11/2014 04:31 PM, Petr Viktorin wrote: On 09/11/2014 04:26 PM, Martin Kosek wrote: ... Also, we will need to add the F21 389-ds-base

Re: [Freeipa-devel] FreeIPA 4.0.3?

2014-09-11 Thread Petr Viktorin
On 09/11/2014 04:43 PM, Nathaniel McCallum wrote: On Thu, 2014-09-11 at 16:39 +0200, Petr Viktorin wrote: On 09/11/2014 04:38 PM, Ludwig Krispenz wrote: On 09/11/2014 04:31 PM, Petr Viktorin wrote: On 09/11/2014 04:26 PM, Martin Kosek wrote: ... Also, we will need to add the F21

Re: [Freeipa-devel] FreeIPA 4.0.3?

2014-09-11 Thread thierry bordaz
On 09/11/2014 04:46 PM, Martin Kosek wrote: On 09/11/2014 04:43 PM, Nathaniel McCallum wrote: On Thu, 2014-09-11 at 16:39 +0200, Petr Viktorin wrote: On 09/11/2014 04:38 PM, Ludwig Krispenz wrote: On 09/11/2014 04:31 PM, Petr Viktorin wrote: On 09/11/2014 04:26 PM, Martin Kosek wrote: ...

Re: [Freeipa-devel] FreeIPA 4.0.3?

2014-09-11 Thread Nathaniel McCallum
On Thu, 2014-09-11 at 10:43 -0400, Nathaniel McCallum wrote: On Thu, 2014-09-11 at 16:39 +0200, Petr Viktorin wrote: On 09/11/2014 04:38 PM, Ludwig Krispenz wrote: On 09/11/2014 04:31 PM, Petr Viktorin wrote: On 09/11/2014 04:26 PM, Martin Kosek wrote: ... Also, we will need to

Re: [Freeipa-devel] FreeIPA 4.0.3?

2014-09-11 Thread Nathaniel McCallum
On Thu, 2014-09-11 at 16:48 +0200, Petr Viktorin wrote: On 09/11/2014 04:43 PM, Nathaniel McCallum wrote: On Thu, 2014-09-11 at 16:39 +0200, Petr Viktorin wrote: On 09/11/2014 04:38 PM, Ludwig Krispenz wrote: On 09/11/2014 04:31 PM, Petr Viktorin wrote: On 09/11/2014 04:26 PM, Martin

[Freeipa-devel] #4534: SSSD deref processing fail when entryusn can be read and objectclass doesn't

2014-09-11 Thread Martin Kosek
Hello, We have another important issue to resolve. Current FreeIPA 4.0.2 ACI settings cause older SSSD clients to fail as they get returned an LDAP deref call results without objectclass attribute and just with entryusn attribute. Details in https://fedorahosted.org/freeipa/ticket/4534. While I

Re: [Freeipa-devel] #4534: SSSD deref processing fail when entryusn can be read and objectclass doesn't

2014-09-11 Thread Ludwig Krispenz
On 09/11/2014 05:03 PM, Martin Kosek wrote: Hello, We have another important issue to resolve. Current FreeIPA 4.0.2 ACI settings cause older SSSD clients to fail as they get returned an LDAP deref call results without objectclass attribute and just with entryusn attribute. Details in

Re: [Freeipa-devel] #4534: SSSD deref processing fail when entryusn can be read and objectclass doesn't

2014-09-11 Thread Simo Sorce
On Thu, 2014-09-11 at 17:03 +0200, Martin Kosek wrote: Hello, We have another important issue to resolve. Current FreeIPA 4.0.2 ACI settings cause older SSSD clients to fail as they get returned an LDAP deref call results without objectclass attribute and just with entryusn attribute.

Re: [Freeipa-devel] [PATCH] 720-729 OTP usability improvements

2014-09-11 Thread Petr Vobornik
On 10.9.2014 19:01, Endi Sukma Dewata wrote: On 9/9/2014 10:48 AM, Petr Vobornik wrote: [PATCH] 727 webui: hide empty fields and sections Will the counter field strictly have a value with HOTP only and clock offset interval fields strictly have value with TOTP only? Do these fields contain

Re: [Freeipa-devel] [PATCH] 741 webui: add link to OTP token app

2014-09-11 Thread Nathaniel McCallum
On Thu, 2014-09-11 at 18:10 +0200, Petr Vobornik wrote: On 5.8.2014 22:22, Nathaniel McCallum wrote: On Aug 5, 2014, at 11:11 AM, Petr Vobornik pvobo...@redhat.com wrote: - display info message which points user to FreeOTP project page - the link or the text can be easily changed by a

Re: [Freeipa-devel] #4534: SSSD deref processing fail when entryusn can be read and objectclass doesn't

2014-09-11 Thread Sumit Bose
On Thu, Sep 11, 2014 at 05:23:34PM +0200, Ludwig Krispenz wrote: On 09/11/2014 05:03 PM, Martin Kosek wrote: Hello, We have another important issue to resolve. Current FreeIPA 4.0.2 ACI settings cause older SSSD clients to fail as they get returned an LDAP deref call results without

Re: [Freeipa-devel] #4534: SSSD deref processing fail when entryusn can be read and objectclass doesn't

2014-09-11 Thread Simo Sorce
On Thu, 2014-09-11 at 18:19 +0200, Sumit Bose wrote: On Thu, Sep 11, 2014 at 05:23:34PM +0200, Ludwig Krispenz wrote: On 09/11/2014 05:03 PM, Martin Kosek wrote: Hello, We have another important issue to resolve. Current FreeIPA 4.0.2 ACI settings cause older SSSD clients to fail

Re: [Freeipa-devel] [PATCH 0291-0294] Fix locking to prevent crashes and deadlocks

2014-09-11 Thread Martin Basti
On 11/09/14 15:57, Martin Basti wrote: On 11/09/14 11:59, Petr Spacek wrote: Hello, I was fighting with random crashes for couple of days ... and discovered that run_exclusive_enter()/isc_task_beginexclusive() usage was completely incorrect and didn't actually lock anything. This series of

Re: [Freeipa-devel] #4534: SSSD deref processing fail when entryusn can be read and objectclass doesn't

2014-09-11 Thread Martin Kosek
On 09/11/2014 05:37 PM, Simo Sorce wrote: On Thu, 2014-09-11 at 17:03 +0200, Martin Kosek wrote: Hello, We have another important issue to resolve. Current FreeIPA 4.0.2 ACI settings cause older SSSD clients to fail as they get returned an LDAP deref call results without objectclass attribute

Re: [Freeipa-devel] #4534: SSSD deref processing fail when entryusn can be read and objectclass doesn't

2014-09-11 Thread Simo Sorce
On Thu, 2014-09-11 at 20:28 +0200, Martin Kosek wrote: On 09/11/2014 05:37 PM, Simo Sorce wrote: On Thu, 2014-09-11 at 17:03 +0200, Martin Kosek wrote: Hello, We have another important issue to resolve. Current FreeIPA 4.0.2 ACI settings cause older SSSD clients to fail as they get

Re: [Freeipa-devel] [PATCH 0291-0294] Fix locking to prevent crashes and deadlocks

2014-09-11 Thread Petr Spacek
On 11.9.2014 18:34, Martin Basti wrote: On 11/09/14 15:57, Martin Basti wrote: On 11/09/14 11:59, Petr Spacek wrote: Hello, I was fighting with random crashes for couple of days ... and discovered that run_exclusive_enter()/isc_task_beginexclusive() usage was completely incorrect and didn't

Re: [Freeipa-devel] #4534: SSSD deref processing fail when entryusn can be read and objectclass doesn't

2014-09-11 Thread Martin Kosek
On 09/11/2014 08:49 PM, Simo Sorce wrote: On Thu, 2014-09-11 at 20:28 +0200, Martin Kosek wrote: On 09/11/2014 05:37 PM, Simo Sorce wrote: On Thu, 2014-09-11 at 17:03 +0200, Martin Kosek wrote: Hello, We have another important issue to resolve. Current FreeIPA 4.0.2 ACI settings cause older

Re: [Freeipa-devel] FreeIPA 4.0.3?

2014-09-11 Thread Nathaniel McCallum
On Thu, 2014-09-11 at 16:48 +0200, Petr Viktorin wrote: On 09/11/2014 04:43 PM, Nathaniel McCallum wrote: On Thu, 2014-09-11 at 16:39 +0200, Petr Viktorin wrote: On 09/11/2014 04:38 PM, Ludwig Krispenz wrote: On 09/11/2014 04:31 PM, Petr Viktorin wrote: On 09/11/2014 04:26 PM, Martin

Re: [Freeipa-devel] #4534: SSSD deref processing fail when entryusn can be read and objectclass doesn't

2014-09-11 Thread Lukas Slebodnik
On (11/09/14 22:24), Martin Kosek wrote: On 09/11/2014 08:49 PM, Simo Sorce wrote: On Thu, 2014-09-11 at 20:28 +0200, Martin Kosek wrote: On 09/11/2014 05:37 PM, Simo Sorce wrote: On Thu, 2014-09-11 at 17:03 +0200, Martin Kosek wrote: Hello, We have another important issue to resolve. Current