Re: [Freeipa-devel] [PATCH 0069] Adds 389DS plugin to enforce UUID token IDs

2014-09-23 Thread thierry bordaz
On 09/22/2014 09:28 PM, Simo Sorce wrote: On Mon, 22 Sep 2014 21:21:04 +0200 Martin Kosek mko...@redhat.com wrote: On 09/22/2014 04:55 PM, Simo Sorce wrote: On Mon, 22 Sep 2014 10:02:01 -0400 Nathaniel McCallum npmccal...@redhat.com wrote: On Mon, 2014-09-22 at 09:50 -0400, Simo Sorce

Re: [Freeipa-devel] [PATCHES 247-259] ID views - management part

2014-09-23 Thread Petr Viktorin
On 09/16/2014 01:21 PM, Tomas Babej wrote: Petr, thanks for the review, your input is, as always, much to the point. My responses are inline. Also, I'm attaching a new patchset, rebased on master, please, have a look at that. Most of the patches have at least minor changes, since I rebased

Re: [Freeipa-devel] [PATCH 0298-0302] Implement handling of inactive master zones

2014-09-23 Thread Petr Spacek
On 22.9.2014 15:10, Tomas Hozza wrote: On 09/19/2014 03:46 PM, Petr Spacek wrote: Hello, This patch set fixes https://fedorahosted.org/bind-dyndb-ldap/ticket/127 https://bugzilla.redhat.com/show_bug.cgi?id=1138317 Please review it ASAP, it targets IPA 4.1/Fedora 21. Tomas and Martin, please

[Freeipa-devel] [PATCH 0303-0305] Preparation for 6.0 release

2014-09-23 Thread Petr Spacek
Hello, Pushed to master: Bump NVR to 6.0. aeba2eacd5bc85cd4b2872e87a6db5f6d680c266 Update NEWS for upcoming 6.0 release. 92164653b0b8a44d19dea547ddb4917069398e82 Update idnsZoneActive description in README. 8863b85b509984259052d47cbaadf2e7b84a881b -- Petr^2 Spacek From

Re: [Freeipa-devel] [PATCH] 314 Allow specifying key algorithm of the IPA CA cert in ipa-server-install

2014-09-23 Thread Jan Cholasta
Dne 6.8.2014 v 18:17 Jan Cholasta napsal(a): Dne 6.8.2014 v 14:43 Rob Crittenden napsal(a): Jan Cholasta wrote: Hi, the attached patch fixes https://fedorahosted.org/freeipa/ticket/4447. +cert_group.add_option(--ca-key-algorithm, dest=ca_key_algorithm, + help=Key

Re: [Freeipa-devel] [PATCHES] 0264-0267 backup, restore: Don't overwrite /etc/{passwd, group}

2014-09-23 Thread Tomas Babej
On 08/26/2014 01:16 PM, Petr Viktorin wrote: On 07/30/2014 04:26 PM, Petr Viktorin wrote: On 07/29/2014 06:03 PM, Petr Viktorin wrote: On 07/29/2014 05:02 PM, Petr Viktorin wrote: Hello, The first patch here consolidates our system user creation code a bit. The second patch fixes an

Re: [Freeipa-devel] [PATCHES] 0631-0632 Integration tests for backup restore

2014-09-23 Thread Tomas Babej
On 08/06/2014 04:52 PM, Petr Viktorin wrote: On 08/06/2014 04:36 PM, Petr Viktorin wrote: Hello, These patches add integration tests for backup restore. They depend on my earlier backup/restore patches, 0624-0627. I'm also attaching a patch for the job definitions at

Re: [Freeipa-devel] [PATCHES] 0264-0267 backup, restore: Don't overwrite /etc/{passwd, group}

2014-09-23 Thread Petr Viktorin
On 09/23/2014 12:10 PM, Tomas Babej wrote: On 08/26/2014 01:16 PM, Petr Viktorin wrote: On 07/30/2014 04:26 PM, Petr Viktorin wrote: On 07/29/2014 06:03 PM, Petr Viktorin wrote: On 07/29/2014 05:02 PM, Petr Viktorin wrote: Hello, The first patch here consolidates our system user creation

Re: [Freeipa-devel] [PATCH] 0009 Detect and configure all usable IP addresses.

2014-09-23 Thread David Kupka
On 09/18/2014 06:34 PM, Martin Basti wrote: ... 1) +if options.unattended: +for ip in ip_addresses: +if search_reverse_zones and find_reverse_zone(str(ip)): +# reverse zone is already in LDAP +continue +

[Freeipa-devel] Announcing bind-dyndb-ldap version 6.0

2014-09-23 Thread Petr Spacek
The FreeIPA team is proud to announce bind-dyndb-ldap version 6.0. It can be downloaded from https://fedorahosted.org/released/bind-dyndb-ldap/ The new version has also been built for Fedora 21+ and and is on its way to updates-testing:

Re: [Freeipa-devel] [PATCH] 323 Fix certmonger code causing the ca_renewal_master update plugin to fail

2014-09-23 Thread David Kupka
On 09/17/2014 03:57 PM, Jan Cholasta wrote: Hi, the attached patch fixes https://fedorahosted.org/freeipa/ticket/4547. Honza Works for me, thanks for patch. ACK. -- David Kupka ___ Freeipa-devel mailing list Freeipa-devel@redhat.com

Re: [Freeipa-devel] [PATCH] 0105 FIX: LDAP_updater

2014-09-23 Thread Martin Basti
On 22/09/14 14:04, Petr Viktorin wrote: On 09/01/2014 04:31 PM, Martin Basti wrote: On 24/07/14 09:06, Martin Basti wrote: On 23/07/14 15:17, Martin Basti wrote: This patch fixes ordering problem of schema updates Martin should it be in IPA 4.0.x ? It requires rebased ldap_python (will be in

[Freeipa-devel] [PATCH] JSON client: Log pretty-printed request and response with -vvv or above

2014-09-23 Thread Petr Viktorin
https://fedorahosted.org/freeipa/ticket/4233 $ ipa -vvv user-show admin ipa: INFO: trying https://vm-073.idm.lab.eng.brq.redhat.com/ipa/json ipa: INFO: Forwarding 'user_show' to json server 'https://vm-073.idm.lab.eng.brq.redhat.com/ipa/json' ipa: INFO: Request: { id: 0, method:

Re: [Freeipa-devel] [PATCH] JSON client: Log pretty-printed request and response with -vv or above

2014-09-23 Thread Petr Viktorin
On 09/23/2014 03:13 PM, Petr Viktorin wrote: https://fedorahosted.org/freeipa/ticket/4233 After talking to Rob, I've changed what the -v means a bit more: A single -v just turns on INFO logging, as before: $ ipa -v ping ipa: INFO: trying https://vm-073.idm.lab.eng.brq.redhat.com/ipa/json

Re: [Freeipa-devel] [PATCH] 323 Fix certmonger code causing the ca_renewal_master update plugin to fail

2014-09-23 Thread Petr Viktorin
On 09/23/2014 02:34 PM, David Kupka wrote: On 09/17/2014 03:57 PM, Jan Cholasta wrote: Hi, the attached patch fixes https://fedorahosted.org/freeipa/ticket/4547. Honza Works for me, thanks for patch. ACK. Pushed to: master: f680a63158d172042c91537a1cb7f6f53766e2ad ipa-4-1:

[Freeipa-devel] [PATCH 130] extdom: add support for new version

2014-09-23 Thread Sumit Bose
Hi, this patch should fix https://fedorahosted.org/freeipa/ticket/4031 and with the corresponding SSSD part it would be possible to get the full list of group memberships with the id command even for user who didn't log in before. bye, Sumit From 23ff38cdea85995b211e73f474bcb4b0d7fb8039 Mon Sep

Re: [Freeipa-devel] Krb service delegation rules in CLI

2014-09-23 Thread Martin Kosek
On 09/22/2014 09:48 PM, Alexander Bokovoy wrote: On Mon, 22 Sep 2014, Martin Basti wrote: Hello, Related ticket: https://fedorahosted.org/freeipa/ticket/3644 1) API The ipaKrb5DelegationACL objectclass requires targets which are stored in extra objectclass. A) we allow users to create

Re: [Freeipa-devel] [PATCHES 0114-0115] DNS: allow to add root zone '.'

2014-09-23 Thread Petr Vobornik
On 25.8.2014 14:52, Martin Basti wrote: Patches attached. Ticket: https://fedorahosted.org/freeipa/ticket/4149 There is a bug in bind-dyndb-ldap (or worse in dirsrv), which cause the named service is stopped after deleting zone. Bug ticket: https://fedorahosted.org/bind-dyndb-ldap/ticket/138

Re: [Freeipa-devel] [PATCH] 0645 ipa-replica-prepare: Wait for the DNS entry to be resolvable

2014-09-23 Thread Petr Spacek
On 22.9.2014 14:09, Petr Viktorin wrote: On 09/22/2014 01:48 PM, Petr Spacek wrote: On 22.9.2014 10:38, Martin Kosek wrote: On 09/22/2014 10:31 AM, Petr Spacek wrote: On 22.9.2014 10:14, Martin Kosek wrote: On 09/19/2014 07:29 PM, Petr Viktorin wrote:

Re: [Freeipa-devel] [PATCH 0126 - 0127] DNS: remove --class option

2014-09-23 Thread Petr Spacek
On 22.9.2014 19:21, Martin Basti wrote: On 22/09/14 13:17, Petr Vobornik wrote: On 19.9.2014 16:15, Martin Basti wrote: Ticket: https://fedorahosted.org/freeipa/ticket/3414 Patch attached. Patch 126: 1. I think that just DeprecatedParam('dnsclass?'), should be enough. Also 2. You

Re: [Freeipa-devel] [PATCH 0126 - 0127] DNS: remove --class option

2014-09-23 Thread Martin Basti
On 23/09/14 18:35, Petr Spacek wrote: On 22.9.2014 19:21, Martin Basti wrote: On 22/09/14 13:17, Petr Vobornik wrote: On 19.9.2014 16:15, Martin Basti wrote: Ticket: https://fedorahosted.org/freeipa/ticket/3414 Patch attached. Patch 126: 1. I think that just

Re: [Freeipa-devel] [PATCH] 0009 Detect and configure all usable IP addresses.

2014-09-23 Thread Martin Basti
On 23/09/14 13:23, David Kupka wrote: On 09/18/2014 06:34 PM, Martin Basti wrote: ... 1) +if options.unattended: +for ip in ip_addresses: +if search_reverse_zones and find_reverse_zone(str(ip)): +# reverse zone is already in LDAP +

Re: [Freeipa-devel] [PATCHES] 319-321 Build and packaging fixes

2014-09-23 Thread Petr Vobornik
On 17.9.2014 13:58, Jan Cholasta wrote: Dne 17.9.2014 v 13:07 Alexander Bokovoy napsal(a): On Wed, 17 Sep 2014, Martin Kosek wrote: On 09/17/2014 12:31 PM, Jan Cholasta wrote: +Conflicts: %{alt_name}-server-trust-ad +Obsoletes: %{alt_name}-server-trust-ad %{version}-%{release} Just one

Re: [Freeipa-devel] [PATCHES] 319, 324-335 CA management and renewal fixes

2014-09-23 Thread Rob Crittenden
Jan Cholasta wrote: Hi, the attached patches fix various bugs and shortcomings in the CA management and renewal code. Related tickets: https://fedorahosted.org/freeipa/ticket/4416, https://fedorahosted.org/freeipa/ticket/4460. (Patch 319 was originally posted at

[Freeipa-devel] Continuous Integration dependency tree testing

2014-09-23 Thread Petr Spacek
Hello, The recent problem with Tomcat forced me to think how we can detect that some other package broke IPA before it hit users. After all, it seems pretty easy. 0) Get a VM for testing purposes (preferably with minimal set of IPA dependencies). The VM has to be reverted to snapshot after

Re: [Freeipa-devel] Krb service delegation rules in CLI

2014-09-23 Thread Alexander Bokovoy
On Tue, 23 Sep 2014, Martin Kosek wrote: On 09/22/2014 09:48 PM, Alexander Bokovoy wrote: On Mon, 22 Sep 2014, Martin Basti wrote: Hello, Related ticket: https://fedorahosted.org/freeipa/ticket/3644 1) API The ipaKrb5DelegationACL objectclass requires targets which are stored in extra

Re: [Freeipa-devel] Krb service delegation rules in CLI

2014-09-23 Thread Simo Sorce
On Tue, 23 Sep 2014 17:18:38 +0200 Martin Kosek mko...@redhat.com wrote: On 09/22/2014 09:48 PM, Alexander Bokovoy wrote: On Mon, 22 Sep 2014, Martin Basti wrote: Hello, Related ticket: https://fedorahosted.org/freeipa/ticket/3644 1) API The ipaKrb5DelegationACL objectclass

Re: [Freeipa-devel] [PATCH] 755 webui-ci: case-insensitive record check

2014-09-23 Thread Endi Sukma Dewata
On 9/22/2014 9:49 AM, Petr Vobornik wrote: [PATCH] webui-ci: case-insensitive record check Indirect association are no longer lower cased, which caused a issue in CI. Is the use of |= operator intentional? I don't see the has variable defined anywhere else in this method. has |=

Re: [Freeipa-devel] [PATCH] 756 webui: fix regression in association facet preop

2014-09-23 Thread Endi Sukma Dewata
On 9/22/2014 9:50 AM, Petr Vobornik wrote: Association facet specs use 'add_method' instead of 'add_command' origin: https://fedorahosted.org/freeipa/ticket/4507 ACK. -- Endi S. Dewata ___ Freeipa-devel mailing list Freeipa-devel@redhat.com