Re: [Freeipa-devel] [PATCH 0165] --zonemgr options must be unicode

2014-11-18 Thread Martin Basti
On 13/11/14 18:28, Martin Basti wrote: To allow IDNA zonemgr email, value must be unicode not ASCII Ticket: https://fedorahosted.org/freeipa/ticket/4724 Patch attached. Patch for ipa-4.0 added. -- Martin Basti From 033b2ab8b8d92e92a852eedbd7f7d4a5aea1e92b Mon Sep 17 00:00:00 2001 From:

[Freeipa-devel] [PATCH] 0673 Do not restore SELinux settings that were not backed up

2014-11-18 Thread Petr Viktorin
This fixes https://fedorahosted.org/freeipa/ticket/4678 -- PetrĀ³ From bdeb005e8660868dc3faa0b15d04cb4954aef3b6 Mon Sep 17 00:00:00 2001 From: Petr Viktorin pvikt...@redhat.com Date: Tue, 18 Nov 2014 10:40:31 +0100 Subject: [PATCH] Do not restore SELinux settings that were not backed up

Re: [Freeipa-devel] [PATCH 0078] Enable QR code display by default in otptoken-add

2014-11-18 Thread Martin Kosek
On 11/14/2014 08:29 PM, Simo Sorce wrote: On Fri, 14 Nov 2014 20:05:35 +0100 Petr Viktorin pvikt...@redhat.com wrote: On 11/14/2014 08:03 PM, Petr Viktorin wrote: On 11/14/2014 07:26 PM, Simo Sorce wrote: On Fri, 14 Nov 2014 14:08:24 +0100 Petr Viktorin pvikt...@redhat.com wrote: On

Re: [Freeipa-devel] [PATCH 0165] --zonemgr options must be unicode

2014-11-18 Thread David Kupka
On 11/18/2014 12:07 PM, Martin Basti wrote: On 13/11/14 18:28, Martin Basti wrote: To allow IDNA zonemgr email, value must be unicode not ASCII Ticket: https://fedorahosted.org/freeipa/ticket/4724 Patch attached. Patch for ipa-4.0 added. Thanks, works for me, ACK. -- David Kupka

Re: [Freeipa-devel] [PATCH 0078] Enable QR code display by default in otptoken-add

2014-11-18 Thread Simo Sorce
On Tue, 18 Nov 2014 12:27:28 +0100 Martin Kosek mko...@redhat.com wrote: On 11/14/2014 08:29 PM, Simo Sorce wrote: On Fri, 14 Nov 2014 20:05:35 +0100 Petr Viktorin pvikt...@redhat.com wrote: On 11/14/2014 08:03 PM, Petr Viktorin wrote: On 11/14/2014 07:26 PM, Simo Sorce wrote: On

Re: [Freeipa-devel] [PATCH 0161] Fix dyndb-ldap working dir permission

2014-11-18 Thread Jan Cholasta
Hi, Dne 13.11.2014 v 14:50 Martin Basti napsal(a): On 13/11/14 13:59, Jan Cholasta wrote: Dne 12.11.2014 v 13:33 Martin Basti napsal(a): On 11/11/14 16:58, Jan Cholasta wrote: Hi, Dne 11.11.2014 v 16:22 Martin Basti napsal(a): Using specfile to create file doesn't work if named user is not

[Freeipa-devel] [PATCH] 0674 Raise an error when a critical DS task fails

2014-11-18 Thread Petr Viktorin
Backup and restore depend on DS tasks succeeding, but they only waited for the task to end and didn't check the result. This patch adds a new helper, run_task, that runs a task, waits for it, and checks the result. Backup and restore are changed to use this helper. -- PetrĀ³ From

Re: [Freeipa-devel] [PATCHES] Fix getkeytab operation

2014-11-18 Thread Nathaniel McCallum
On Tue, 2014-11-18 at 00:01 -0500, Simo Sorce wrote: Hello team, Recently Alexander opened the following bug: https://fedorahosted.org/freeipa/ticket/4718 The problem with this code is that manual ASN.1 encoding is fragile and too prone to error, and I found various issues while

Re: [Freeipa-devel] [PATCH] Improve developers RPM builds

2014-11-18 Thread Nathaniel McCallum
On Mon, 2014-11-17 at 23:42 -0500, Simo Sorce wrote: This small patch will add a date component to the ipa version when building straight from git. This way successive builds will clearly install on top of a previous one even if alphabetically the git commit id has gone backwards. It also

Re: [Freeipa-devel] [PATCH 0161] Fix dyndb-ldap working dir permission

2014-11-18 Thread Martin Basti
On 18/11/14 15:01, Jan Cholasta wrote: Hi, Dne 13.11.2014 v 14:50 Martin Basti napsal(a): On 13/11/14 13:59, Jan Cholasta wrote: Dne 12.11.2014 v 13:33 Martin Basti napsal(a): On 11/11/14 16:58, Jan Cholasta wrote: Hi, Dne 11.11.2014 v 16:22 Martin Basti napsal(a): Using specfile to

Re: [Freeipa-devel] [PATCH 0078] Enable QR code display by default in otptoken-add

2014-11-18 Thread Nathaniel McCallum
On Tue, 2014-11-18 at 07:45 -0500, Simo Sorce wrote: On Tue, 18 Nov 2014 12:27:28 +0100 Martin Kosek mko...@redhat.com wrote: On 11/14/2014 08:29 PM, Simo Sorce wrote: On Fri, 14 Nov 2014 20:05:35 +0100 Petr Viktorin pvikt...@redhat.com wrote: On 11/14/2014 08:03 PM, Petr

Re: [Freeipa-devel] [PATCH] 0674 Raise an error when a critical DS task fails

2014-11-18 Thread Petr Vobornik
On 18.11.2014 16:28, Petr Viktorin wrote: Backup and restore depend on DS tasks succeeding, but they only waited for the task to end and didn't check the result. This patch adds a new helper, run_task, that runs a task, waits for it, and checks the result. Backup and restore are changed to use

Re: [Freeipa-devel] [PATCH 0078] Enable QR code display by default in otptoken-add

2014-11-18 Thread Petr Vobornik
On 18.11.2014 17:27, Nathaniel McCallum wrote: On Tue, 2014-11-18 at 07:45 -0500, Simo Sorce wrote: On Tue, 18 Nov 2014 12:27:28 +0100 Martin Kosek mko...@redhat.com wrote: On 11/14/2014 08:29 PM, Simo Sorce wrote: On Fri, 14 Nov 2014 20:05:35 +0100 Petr Viktorin pvikt...@redhat.com wrote:

Re: [Freeipa-devel] [PATCHES] Fix getkeytab operation

2014-11-18 Thread Simo Sorce
On Tue, 18 Nov 2014 11:23:42 -0500 Nathaniel McCallum npmccal...@redhat.com wrote: On Tue, 2014-11-18 at 00:01 -0500, Simo Sorce wrote: Hello team, Recently Alexander opened the following bug: https://fedorahosted.org/freeipa/ticket/4718 The problem with this code is that manual

Re: [Freeipa-devel] [PATCH 0161] Fix dyndb-ldap working dir permission

2014-11-18 Thread Jan Cholasta
Dne 18.11.2014 v 16:53 Martin Basti napsal(a): On 18/11/14 15:01, Jan Cholasta wrote: Hi, Dne 13.11.2014 v 14:50 Martin Basti napsal(a): On 13/11/14 13:59, Jan Cholasta wrote: Dne 12.11.2014 v 13:33 Martin Basti napsal(a): On 11/11/14 16:58, Jan Cholasta wrote: Hi, Dne 11.11.2014 v 16:22

[Freeipa-devel] [PATCH] 373 Update Requires on pki-ca to 10.2.1-0.1

2014-11-18 Thread Jan Cholasta
Hi, the attached patch fixes https://fedorahosted.org/freeipa/ticket/4645. Honza -- Jan Cholasta From d022389ef15101fca108ec2be9b88b417f369dc3 Mon Sep 17 00:00:00 2001 From: Jan Cholasta jchol...@redhat.com Date: Tue, 18 Nov 2014 14:57:17 + Subject: [PATCH] Update Requires on pki-ca to

[Freeipa-devel] [PATCH 0165] Workaround: unable to get CA status during update

2014-11-18 Thread Martin Basti
Ticket: https://fedorahosted.org/freeipa/ticket/4676 Attached patches: * Version A: uses wget to get status of CA * Version B: write warning instead of raising exception (error is false positive, CA is running) I'm open to suggestions which approach is better Martin^2 -- Martin Basti From

Re: [Freeipa-devel] [PATCHES] Fix getkeytab operation

2014-11-18 Thread Nathaniel McCallum
On Tue, 2014-11-18 at 12:40 -0500, Simo Sorce wrote: On Tue, 18 Nov 2014 11:23:42 -0500 Nathaniel McCallum npmccal...@redhat.com wrote: On Tue, 2014-11-18 at 00:01 -0500, Simo Sorce wrote: Hello team, Recently Alexander opened the following bug:

Re: [Freeipa-devel] [PATCH 0074] Make token window sizes configurable

2014-11-18 Thread Petr Vobornik
On 13.11.2014 08:53, Martin Kosek wrote: On 11/13/2014 08:51 AM, Nathaniel McCallum wrote: On Thu, 2014-11-13 at 08:48 +0100, Martin Kosek wrote: On 11/12/2014 11:37 PM, Nathaniel McCallum wrote: On Mon, 2014-11-10 at 08:28 +0100, Martin Kosek wrote: On 11/07/2014 04:44 PM, Petr Vobornik

Re: [Freeipa-devel] [PATCHES] Fix getkeytab operation

2014-11-18 Thread Simo Sorce
On Tue, 18 Nov 2014 14:28:08 -0500 Nathaniel McCallum npmccal...@redhat.com wrote: On Tue, 2014-11-18 at 12:40 -0500, Simo Sorce wrote: On Tue, 18 Nov 2014 11:23:42 -0500 Nathaniel McCallum npmccal...@redhat.com wrote: On Tue, 2014-11-18 at 00:01 -0500, Simo Sorce wrote: Hello

Re: [Freeipa-devel] [PATCHES] Fix getkeytab operation

2014-11-18 Thread Nathaniel McCallum
On Tue, 2014-11-18 at 14:45 -0500, Simo Sorce wrote: On Tue, 18 Nov 2014 14:28:08 -0500 Nathaniel McCallum npmccal...@redhat.com wrote: On Tue, 2014-11-18 at 12:40 -0500, Simo Sorce wrote: On Tue, 18 Nov 2014 11:23:42 -0500 Nathaniel McCallum npmccal...@redhat.com wrote: On

Re: [Freeipa-devel] [PATCH] Improve developers RPM builds

2014-11-18 Thread Simo Sorce
On Tue, 18 Nov 2014 11:25:19 -0500 Nathaniel McCallum npmccal...@redhat.com wrote: On Mon, 2014-11-17 at 23:42 -0500, Simo Sorce wrote: This small patch will add a date component to the ipa version when building straight from git. This way successive builds will clearly install on top

Re: [Freeipa-devel] [PATCH] Improve developers RPM builds

2014-11-18 Thread Martin Kosek
On 11/18/2014 09:25 PM, Simo Sorce wrote: On Tue, 18 Nov 2014 11:25:19 -0500 Nathaniel McCallum npmccal...@redhat.com wrote: On Mon, 2014-11-17 at 23:42 -0500, Simo Sorce wrote: This small patch will add a date component to the ipa version when building straight from git. This way successive

Re: [Freeipa-devel] [PATCH 0165] Workaround: unable to get CA status during update

2014-11-18 Thread Martin Kosek
On 11/18/2014 08:20 PM, Martin Basti wrote: Ticket: https://fedorahosted.org/freeipa/ticket/4676 Attached patches: * Version A: uses wget to get status of CA * Version B: write warning instead of raising exception (error is false positive, CA is running) I'm open to suggestions which approach

Re: [Freeipa-devel] [PATCH] 373 Update Requires on pki-ca to 10.2.1-0.1

2014-11-18 Thread Nathaniel McCallum
On Tue, 2014-11-18 at 19:56 +0100, Jan Cholasta wrote: Hi, the attached patch fixes https://fedorahosted.org/freeipa/ticket/4645. ACK ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] [PATCHES] Fix getkeytab operation

2014-11-18 Thread Nathaniel McCallum
On Tue, 2014-11-18 at 17:58 -0500, Simo Sorce wrote: On Tue, 18 Nov 2014 15:01:15 -0500 Nathaniel McCallum npmccal...@redhat.com wrote: As I see it, we're setting out a new precedent. All new ASN.1 code will take this route (which is, indeed, better). So while it is small now, it won't

Re: [Freeipa-devel] [PATCH] Improve developers RPM builds

2014-11-18 Thread Simo Sorce
On Tue, 18 Nov 2014 21:46:00 +0100 Martin Kosek mko...@redhat.com wrote: On 11/18/2014 09:25 PM, Simo Sorce wrote: On Tue, 18 Nov 2014 11:25:19 -0500 Nathaniel McCallum npmccal...@redhat.com wrote: On Mon, 2014-11-17 at 23:42 -0500, Simo Sorce wrote: This small patch will add a date

Re: [Freeipa-devel] [PATCHES] Fix getkeytab operation

2014-11-18 Thread Simo Sorce
On Tue, 18 Nov 2014 18:00:49 -0500 Nathaniel McCallum npmccal...@redhat.com wrote: On Tue, 2014-11-18 at 17:58 -0500, Simo Sorce wrote: On Tue, 18 Nov 2014 15:01:15 -0500 Nathaniel McCallum npmccal...@redhat.com wrote: As I see it, we're setting out a new precedent. All new ASN.1 code

Re: [Freeipa-devel] [PATCHES] Fix getkeytab operation

2014-11-18 Thread Nathaniel McCallum
On Tue, 2014-11-18 at 20:39 -0500, Simo Sorce wrote: On Tue, 18 Nov 2014 18:00:49 -0500 Nathaniel McCallum npmccal...@redhat.com wrote: On Tue, 2014-11-18 at 17:58 -0500, Simo Sorce wrote: On Tue, 18 Nov 2014 15:01:15 -0500 Nathaniel McCallum npmccal...@redhat.com wrote: As I

[Freeipa-devel] [PATCH] 374 Fix wrong expiration date on renewed IPA CA certificates

2014-11-18 Thread Jan Cholasta
Hi, the attached patch fixes https://fedorahosted.org/freeipa/ticket/4717. Honza -- Jan Cholasta From 871217e002b8a2ee4f58c42977ac680a5305de1a Mon Sep 17 00:00:00 2001 From: Jan Cholasta jchol...@redhat.com Date: Tue, 18 Nov 2014 14:01:59 + Subject: [PATCH] Fix wrong expiration date on