Re: [Freeipa-devel] [PATCH 0079] Catch USBError during YubiKey location

2014-11-10 Thread Martin Kosek
On 11/10/2014 08:31 AM, Alexander Bokovoy wrote: On Mon, 10 Nov 2014, Jan Cholasta wrote: Hi, Dne 7.11.2014 v 16:51 Nathaniel McCallum napsal(a): https://fedorahosted.org/freeipa/ticket/4693 Is it good enough to just say No YubiKey found? Would it make sense to log the original message,

Re: [Freeipa-devel] [PATCH 0021] Fix minimal version of BIND for Fedora 20 and 21

2014-11-10 Thread Martin Kosek
On 11/07/2014 05:14 PM, Petr Vobornik wrote: On 7.11.2014 16:57, Nathaniel McCallum wrote: On Fri, 2014-11-07 at 16:55 +0100, Petr Spacek wrote: Hello, Fix minimal version of BIND for Fedora 20 and 21. We should build new mkosek/freeipa COPR package ASAP to solve conflicts on upgrade.

Re: [Freeipa-devel] FreeIPA 4.1 release preparations

2014-11-10 Thread Lukas Slebodnik
On (09/11/14 10:09), Martin Kosek wrote: On 11/08/2014 02:43 PM, Lukas Slebodnik wrote: On (20/10/14 16:08), Martin Kosek wrote: On 10/20/2014 04:00 PM, Jan Pazdziora wrote: On Mon, Oct 20, 2014 at 03:58:27PM +0200, Petr Vobornik wrote: The plan is to release 4.1 and then 4.0.4. Besides usual

Re: [Freeipa-devel] FreeIPA 4.1 release preparations

2014-11-10 Thread Martin Kosek
On 11/10/2014 10:09 AM, Lukas Slebodnik wrote: On (09/11/14 10:09), Martin Kosek wrote: On 11/08/2014 02:43 PM, Lukas Slebodnik wrote: On (20/10/14 16:08), Martin Kosek wrote: On 10/20/2014 04:00 PM, Jan Pazdziora wrote: On Mon, Oct 20, 2014 at 03:58:27PM +0200, Petr Vobornik wrote: The

[Freeipa-devel] FreeIPA Copr repo plan

2014-11-10 Thread Martin Kosek
Hi guys, Some time ago we started managing FreeIPA Copr repos (mkosek/freeipa) with a target to have the latest greatest FreeIPA available for older arches (read - RHEL/CentOS) and to allow people using older stable Fedoras (read - Fedora 20) try FreeIPA 4.0+ releases which brought in several

Re: [Freeipa-devel] [PATCH] 0027 Produce better error in group-add command.

2014-11-10 Thread David Kupka
On 11/10/2014 08:20 AM, Jan Cholasta wrote: Hi, Dne 7.11.2014 v 15:26 David Kupka napsal(a): https://fedorahosted.org/freeipa/ticket/4611 I think you should use MutuallyExclusiveError. Honza Thanks, that's the error class I was searching for. Unfortunately, I didn't know this one so I

Re: [Freeipa-devel] FreeIPA Copr repo plan

2014-11-10 Thread Jakub Hrozek
On Mon, Nov 10, 2014 at 12:07:46PM +0100, Martin Kosek wrote: Hi guys, Some time ago we started managing FreeIPA Copr repos (mkosek/freeipa) with a target to have the latest greatest FreeIPA available for older arches (read - RHEL/CentOS) and to allow people using older stable Fedoras (read

Re: [Freeipa-devel] FreeIPA Copr repo plan

2014-11-10 Thread John Dennis
On 11/10/2014 06:07 AM, Martin Kosek wrote: c) Daily repos Should we deprecate old John's repos (http://www.freeipa.org/page/Downloads#Bleeding_Edge) which is difficult to maintain and replace them with Copr ones? I.e. to have common repo (e.g. mkosek/freeipa-daily) built for the supported

Re: [Freeipa-devel] FreeIPA Copr repo plan

2014-11-10 Thread Lukas Slebodnik
On (10/11/14 07:53), John Dennis wrote: On 11/10/2014 06:07 AM, Martin Kosek wrote: c) Daily repos Should we deprecate old John's repos (http://www.freeipa.org/page/Downloads#Bleeding_Edge) which is difficult to maintain and replace them with Copr ones? I.e. to have common repo (e.g.

Re: [Freeipa-devel] FreeIPA Copr repo plan

2014-11-10 Thread John Dennis
It *is not* possible to merge one COPR repo into another. It is possible to add another yum repo into build dependencies in COPR but it usually mean you will need to enable 2nd repo for installation of freeipa as well. The script I wrote to manage the IPA repo entire purpose is to pull

[Freeipa-devel] [PATCH] 0671 ipa-restore: Don't crash if AD trust is not installed

2014-11-10 Thread Petr Viktorin
This is a fix for: https://fedorahosted.org/freeipa/ticket/4668 -- PetrĀ³ ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] FreeIPA Copr repo plan

2014-11-10 Thread Jakub Hrozek
On Mon, Nov 10, 2014 at 02:04:34PM +0100, Lukas Slebodnik wrote: It *is not* possible to merge one COPR repo into another. It is possible to add another yum repo into build dependencies in COPR Ah, right. Adding the build dependencies allows you to add another SRPM, to be built though.. but

[Freeipa-devel] [PATCH 0160] Fix objectclass violation during upgrade

2014-11-10 Thread Martin Basti
Ticket: https://fedorahosted.org/freeipa/ticket/4680 Entry dn: cn=adtrust agents,cn=sysaccounts,cn=etc,$SUFFIX must be updated before dn: cn=ADTrust Agents,cn=privileges,cn=pbac,$SUFFIX Patch attached Martin^2 From 0d2e383e080943be82b7edfd9396caef699ab8ee Mon Sep 17 00:00:00 2001 From: Martin

Re: [Freeipa-devel] FreeIPA Copr repo plan

2014-11-10 Thread Simo Sorce
On Mon, 10 Nov 2014 12:07:46 +0100 Martin Kosek mko...@redhat.com wrote: 3) Scalability of the approach Some dependencies are more difficult to maintain than the others. Especially the PKI ones often required custom Java packaging (resteasy-base) or a complicated dependency chain (the latest

Re: [Freeipa-devel] FreeIPA Copr repo plan

2014-11-10 Thread Martin Kosek
On 11/10/2014 01:49 PM, Jakub Hrozek wrote: On Mon, Nov 10, 2014 at 12:07:46PM +0100, Martin Kosek wrote: Hi guys, Some time ago we started managing FreeIPA Copr repos (mkosek/freeipa) with a target to have the latest greatest FreeIPA available for older arches (read - RHEL/CentOS) and to

Re: [Freeipa-devel] FreeIPA Copr repo plan

2014-11-10 Thread Martin Kosek
On 11/10/2014 04:22 PM, Simo Sorce wrote: On Mon, 10 Nov 2014 12:07:46 +0100 Martin Kosek mko...@redhat.com wrote: 3) Scalability of the approach Some dependencies are more difficult to maintain than the others. Especially the PKI ones often required custom Java packaging (resteasy-base)

Re: [Freeipa-devel] FreeIPA Copr repo plan

2014-11-10 Thread thierry bordaz
On 11/10/2014 04:26 PM, Martin Kosek wrote: On 11/10/2014 01:49 PM, Jakub Hrozek wrote: On Mon, Nov 10, 2014 at 12:07:46PM +0100, Martin Kosek wrote: Hi guys, Some time ago we started managing FreeIPA Copr repos (mkosek/freeipa) with a target to have the latest greatest FreeIPA available for

[Freeipa-devel] [PATCH] 365 Fix CA certificate backup and restore

2014-11-10 Thread Jan Cholasta
Hi, the attached patch fixes https://fedorahosted.org/freeipa/ticket/4711. Honza -- Jan Cholasta From 5c00f80cce0e0952252df4f7ec3922d71e8f2cc9 Mon Sep 17 00:00:00 2001 From: Jan Cholasta jchol...@redhat.com Date: Mon, 10 Nov 2014 16:24:22 + Subject: [PATCH] Fix CA certificate backup and

[Freeipa-devel] [PATCHES] 366-372 Additional Coverity fixes

2014-11-10 Thread Jan Cholasta
Hi, the attached patches provide additional fixes for https://fedorahosted.org/freeipa/ticket/4651. I'm not 100% sure if the fixes for ipa-sam and ipa-kdb are correct, please check them carefully. Honza -- Jan Cholasta From a195644143042a0161de81472646f41f503ffe48 Mon Sep 17 00:00:00 2001