Re: [Freeipa-devel] [PATCHES 0252-0253, 268] DNSSEC: allow to move DNSSEC key master to another IPA server

2015-06-30 Thread Martin Basti
On 29/06/15 15:16, Martin Basti wrote: On 25/06/15 13:46, Petr Spacek wrote: On 17.6.2015 13:37, Martin Basti wrote: On 17/06/15 13:26, Petr Spacek wrote: On 16.6.2015 15:40, Martin Basti wrote: On 05/06/15 12:54, Petr Spacek wrote: On 20.5.2015 18:00, Martin Basti wrote: This patch allows

Re: [Freeipa-devel] [PATCH 0016] clear start attr from segment after initialization

2015-06-30 Thread Ludwig Krispenz
On 06/26/2015 02:14 PM, thierry bordaz wrote: On 06/22/2015 11:35 AM, Ludwig Krispenz wrote: fix for ticket #5065, removing start - after online init copmpleted - additionally check after startup Hi Ludwig, The fix looks good to me. I have just a clarification regarding

Re: [Freeipa-devel] [PATCH 0038] increase NSS memcache timeout for IPA server

2015-06-30 Thread Martin Basti
On 27/05/15 13:40, Martin Babinsky wrote: On 05/27/2015 01:33 PM, Lukas Slebodnik wrote: On (27/05/15 13:25), Martin Babinsky wrote: https://fedorahosted.org/freeipa/ticket/4964 -- Martin^3 Babinsky From ef8481ee0267a720551832baae9398b435b3c6c5 Mon Sep 17 00:00:00 2001 From: Martin

Re: [Freeipa-devel] [PATCH 0016] clear start attr from segment after initialization

2015-06-30 Thread thierry bordaz
On 06/30/2015 09:19 AM, Ludwig Krispenz wrote: On 06/26/2015 02:14 PM, thierry bordaz wrote: On 06/22/2015 11:35 AM, Ludwig Krispenz wrote: fix for ticket #5065, removing start - after online init copmpleted - additionally check after startup Hi Ludwig, The fix looks good to me. I have

[Freeipa-devel] [PATCH 0046] DNSSEC: Store time date key metadata in UTC

2015-06-30 Thread Petr Spacek
Hello, DNSSEC: Store time date key metadata in UTC. OpenDNSSEC stores key metadata in local time zone but BIND needs timestamps in UTC. UTC will be stored in LDAP. https://fedorahosted.org/freeipa/ticket/4657 -- Petr^2 Spacek From 8a0ca3dbcfa2b98c21e487cfd7c9ca68c814adc2 Mon Sep 17 00:00:00

Re: [Freeipa-devel] [PATCH 0270] Sanitize CA replica install

2015-06-30 Thread Tomas Babej
On 06/30/2015 01:40 PM, Tomas Babej wrote: On 06/30/2015 01:25 PM, Martin Basti wrote: Check if cafile exists first, before using it. Patch attached. ACK Pushed to master: b2f0a018b6f2226106ec811cf01f9bcebb770126 -- Manage your subscription for the Freeipa-devel mailing list:

Re: [Freeipa-devel] Issues inizializing api

2015-06-30 Thread Alexander Bokovoy
- Original Message - Dne 30.6.2015 v 12:29 Simo Sorce napsal(a): On Tue, 2015-06-30 at 11:47 +0200, Jan Cholasta wrote: Dne 27.6.2015 v 00:21 Simo Sorce napsal(a): If I try to create a custom api with something like: myapi = create_api(mode=None) myapi.finalize() I get

Re: [Freeipa-devel] [PATCH 0051] Clear SSSD caches when uninstalling the client

2015-06-30 Thread Simo Sorce
On Tue, 2015-06-30 at 13:19 +0200, Tomas Babej wrote: On 06/30/2015 01:08 PM, Martin Basti wrote: On 30/06/15 13:00, Tomas Babej wrote: On 06/29/2015 03:50 PM, Martin Basti wrote: On 29/06/15 13:46, Jakub Hrozek wrote: On Fri, Jun 05, 2015 at 11:31:54AM -0600, Gabe Alford wrote:

Re: [Freeipa-devel] Issues inizializing api

2015-06-30 Thread Jan Cholasta
Dne 30.6.2015 v 12:29 Simo Sorce napsal(a): On Tue, 2015-06-30 at 11:47 +0200, Jan Cholasta wrote: Dne 27.6.2015 v 00:21 Simo Sorce napsal(a): If I try to create a custom api with something like: myapi = create_api(mode=None) myapi.finalize() I get back a stacktrace in the aci plugin. The

Re: [Freeipa-devel] [PATCHES 0042-45] new commands for adding/removing certificates from entries

2015-06-30 Thread Martin Babinsky
On 06/30/2015 01:11 PM, Martin Babinsky wrote: On 06/30/2015 12:04 PM, Jan Cholasta wrote: Dne 29.6.2015 v 10:36 Martin Babinsky napsal(a): On 06/23/2015 01:49 PM, Martin Babinsky wrote: This patchset implements new API commands for manipulating user/host/service userCertificate attribute

[Freeipa-devel] [PATCH 0017] dirsrv crash on segment add if suffix does not exist

2015-06-30 Thread Ludwig Krispenz
added verification for issue reported in ticket 5088 and sanity checks requested in review for patch 0014 From 03e55b155bfe517c9be35c9c6c3bd44401716442 Mon Sep 17 00:00:00 2001 From: Ludwig Krispenz lkris...@redhat.com Date: Tue, 30 Jun 2015 11:05:32 +0200 Subject: [PATCH] improve processing of

Re: [Freeipa-devel] Issues inizializing api

2015-06-30 Thread Simo Sorce
On Tue, 2015-06-30 at 11:47 +0200, Jan Cholasta wrote: Dne 27.6.2015 v 00:21 Simo Sorce napsal(a): If I try to create a custom api with something like: myapi = create_api(mode=None) myapi.finalize() I get back a stacktrace in the aci plugin. The aci plugin assumes the general 'api'

Re: [Freeipa-devel] [PATCHES 448-460] Allow multiple API instances (take 2)

2015-06-30 Thread Martin Babinsky
On 06/24/2015 05:21 PM, Jan Cholasta wrote: Hi, the attached patches fix https://fedorahosted.org/freeipa/ticket/3090 and https://fedorahosted.org/freeipa/ticket/5073. Honza Hi Honza, everything seems to work except `ipa-replica-prepare` which raises the following exception:

[Freeipa-devel] my remaining 4.2 tickets

2015-06-30 Thread Fraser Tweedale
Hi Martin, #4559 [RFE] Support lightweight sub-CAs Remaining work is not huge but may be more than can be done this week even with Christian's help; the largest remaning concern being Custodia. As per discussion in team meeting, I'm going to liaise with Simo and determine a

Re: [Freeipa-devel] [PATCH 0051] Clear SSSD caches when uninstalling the client

2015-06-30 Thread Martin Basti
On 30/06/15 14:47, Simo Sorce wrote: On Tue, 2015-06-30 at 13:19 +0200, Tomas Babej wrote: On 06/30/2015 01:08 PM, Martin Basti wrote: On 30/06/15 13:00, Tomas Babej wrote: On 06/29/2015 03:50 PM, Martin Basti wrote: On 29/06/15 13:46, Jakub Hrozek wrote: On Fri, Jun 05, 2015 at 11:31:54AM

Re: [Freeipa-devel] [PATCH 0016] clear start attr from segment after initialization

2015-06-30 Thread Ludwig Krispenz
new patch with comments attached On 06/30/2015 10:43 AM, thierry bordaz wrote: On 06/30/2015 09:19 AM, Ludwig Krispenz wrote: On 06/26/2015 02:14 PM, thierry bordaz wrote: On 06/22/2015 11:35 AM, Ludwig Krispenz wrote: fix for ticket #5065, removing start - after online init copmpleted -

Re: [Freeipa-devel] my remaining 4.2 tickets

2015-06-30 Thread Martin Kosek
On 06/30/2015 03:03 PM, Fraser Tweedale wrote: Hi Martin, #4559 [RFE] Support lightweight sub-CAs Remaining work is not huge but may be more than can be done this week even with Christian's help; the largest remaning concern being Custodia. As per discussion in team

Re: [Freeipa-devel] [PATCHES 0252-0253, 268] DNSSEC: allow to move DNSSEC key master to another IPA server

2015-06-30 Thread Martin Basti
On 30/06/15 10:25, Martin Basti wrote: On 29/06/15 15:16, Martin Basti wrote: On 25/06/15 13:46, Petr Spacek wrote: On 17.6.2015 13:37, Martin Basti wrote: On 17/06/15 13:26, Petr Spacek wrote: On 16.6.2015 15:40, Martin Basti wrote: On 05/06/15 12:54, Petr Spacek wrote: On 20.5.2015

Re: [Freeipa-devel] [PATCHES 306-316] Automated migration tool from Winsync

2015-06-30 Thread Jan Cholasta
Dne 30.6.2015 v 17:55 Tomas Babej napsal(a): On 06/16/2015 01:01 PM, Jan Cholasta wrote: Also please rename the class to MigrateWinsync, for consistency. Naming is consistent, the tool is called ipa-winsync-migrate, class is called WinsyncMigrate. This is consistent with other IPA tools.

[Freeipa-devel] [PATCH] 885 topology: make cn of new segment consistent with topology plugin

2015-06-30 Thread Petr Vobornik
SSIA -- Petr Vobornik From b6d9c653907ea2e6a68885780bce88cc61efee15 Mon Sep 17 00:00:00 2001 From: Petr Vobornik pvobo...@redhat.com Date: Tue, 30 Jun 2015 13:11:17 +0200 Subject: [PATCH] topology: make cn of new segment consistent with topology plugin --- ipalib/plugins/topology.py | 2 +- 1

Re: [Freeipa-devel] [PATCH 0050] Fix client ca.crt to match the server's cert

2015-06-30 Thread Martin Basti
On 16/06/15 16:58, Gabe Alford wrote: I know you guys are busy. Bump for review. Thanks, Gabe On Tue, May 26, 2015 at 8:16 AM, Gabe Alford redhatri...@gmail.com mailto:redhatri...@gmail.com wrote: Hello, Fix for https://fedorahosted.org/freeipa/ticket/3809 Thanks, Gabe

Re: [Freeipa-devel] [PATCH 0017] dirsrv crash on segment add if suffix does not exist

2015-06-30 Thread Ludwig Krispenz
new patch attached On 06/30/2015 03:37 PM, thierry bordaz wrote: On 06/30/2015 12:07 PM, Ludwig Krispenz wrote: added verification for issue reported in ticket 5088 and sanity checks requested in review for patch 0014 Hello, The fix looks good except those sanity settings: * In

Re: [Freeipa-devel] [PATCH 0051] Clear SSSD caches when uninstalling the client

2015-06-30 Thread Martin Basti
On 30/06/15 16:10, Martin Basti wrote: On 30/06/15 15:18, Martin Basti wrote: On 30/06/15 14:47, Simo Sorce wrote: On Tue, 2015-06-30 at 13:19 +0200, Tomas Babej wrote: On 06/30/2015 01:08 PM, Martin Basti wrote: On 30/06/15 13:00, Tomas Babej wrote: On 06/29/2015 03:50 PM, Martin Basti

Re: [Freeipa-devel] [PATCHES 306-316] Automated migration tool from Winsync

2015-06-30 Thread Tomas Babej
On 06/16/2015 01:01 PM, Jan Cholasta wrote: Dne 16.6.2015 v 10:14 Martin Babinsky napsal(a): On 05/06/2015 10:12 AM, Tomas Babej wrote: On 05/05/2015 02:02 PM, Tomas Babej wrote: On 04/29/2015 12:28 PM, Tomas Babej wrote: On 03/11/2015 04:20 PM, Jan Cholasta wrote: Hi, Dne

Re: [Freeipa-devel] [PATCH 0051] Clear SSSD caches when uninstalling the client

2015-06-30 Thread Martin Basti
On 30/06/15 15:18, Martin Basti wrote: On 30/06/15 14:47, Simo Sorce wrote: On Tue, 2015-06-30 at 13:19 +0200, Tomas Babej wrote: On 06/30/2015 01:08 PM, Martin Basti wrote: On 30/06/15 13:00, Tomas Babej wrote: On 06/29/2015 03:50 PM, Martin Basti wrote: On 29/06/15 13:46, Jakub Hrozek

[Freeipa-devel] [PATCH] 882 ipa-replica-manage del: relax segment deletement check if, topology is disconnected

2015-06-30 Thread Petr Vobornik
Comment from segment deletion check which describes the patch: Relax check if topology was or is disconnected. Disconnected topology can contain segments with already deleted servers. Check only if segments of servers, which can contact this server, and the deleted server were removed. This code

[Freeipa-devel] [PATCH] 884 topologysegment: hide direction and enable options

2015-06-30 Thread Petr Vobornik
These options should not be touched by users yet. https://fedorahosted.org/freeipa/ticket/5061 -- Petr Vobornik From 8754e4f874f0f0f50cd8df1c486b384a8fd704fd Mon Sep 17 00:00:00 2001 From: Petr Vobornik pvobo...@redhat.com Date: Tue, 30 Jun 2015 10:38:12 +0200 Subject: [PATCH] topologysegment:

Re: [Freeipa-devel] [PATCH 0051] Clear SSSD caches when uninstalling the client

2015-06-30 Thread Simo Sorce
On Tue, 2015-06-30 at 16:10 +0200, Martin Basti wrote: On 30/06/15 15:18, Martin Basti wrote: On 30/06/15 14:47, Simo Sorce wrote: On Tue, 2015-06-30 at 13:19 +0200, Tomas Babej wrote: On 06/30/2015 01:08 PM, Martin Basti wrote: On 30/06/15 13:00, Tomas Babej wrote: On 06/29/2015 03:50

Re: [Freeipa-devel] [PATCH] 0020..0022 pki-related upgrade fixes

2015-06-30 Thread Fraser Tweedale
On Mon, Jun 29, 2015 at 05:56:11PM +0200, Martin Basti wrote: On 29/06/15 16:03, Fraser Tweedale wrote: On Thu, Jun 25, 2015 at 11:23:01AM +0200, Martin Basti wrote: On 19/06/15 09:28, Fraser Tweedale wrote: The attached patches fix upgrade issues when pki is also updated from pre 10.2.4.

Re: [Freeipa-devel] [PATCH 0050] Fix client ca.crt to match the server's cert

2015-06-30 Thread Gabe Alford
On Tue, Jun 30, 2015 at 8:51 AM, Martin Basti mba...@redhat.com wrote: On 16/06/15 16:58, Gabe Alford wrote: I know you guys are busy. Bump for review. Thanks, Gabe On Tue, May 26, 2015 at 8:16 AM, Gabe Alford redhatri...@gmail.com wrote: Hello, Fix for

[Freeipa-devel] [PATCH] 886-890 webui: API browser

2015-06-30 Thread Petr Vobornik
First part of API Browser - displaying the metadata in more consumable way. Second part, how to use it in different languages will be written as wiki pages first. The browser could be later enhanced with more infos and tooltips. Patch 886 extends backend to send more metadata. Patch

Re: [Freeipa-devel] [PATCHES 0252-0253, 268] DNSSEC: allow to move DNSSEC key master to another IPA server

2015-06-30 Thread Petr Spacek
On 30.6.2015 16:04, Martin Basti wrote: On 30/06/15 10:25, Martin Basti wrote: On 29/06/15 15:16, Martin Basti wrote: On 25/06/15 13:46, Petr Spacek wrote: On 17.6.2015 13:37, Martin Basti wrote: On 17/06/15 13:26, Petr Spacek wrote: On 16.6.2015 15:40, Martin Basti wrote: On 05/06/15

Re: [Freeipa-devel] Issues inizializing api

2015-06-30 Thread Jan Cholasta
Dne 27.6.2015 v 00:21 Simo Sorce napsal(a): If I try to create a custom api with something like: myapi = create_api(mode=None) myapi.finalize() I get back a stacktrace in the aci plugin. The aci plugin assumes the general 'api' has been already inizialized and dereferences directly

Re: [Freeipa-devel] [PATCHES 0042-45] new commands for adding/removing certificates from entries

2015-06-30 Thread Jan Cholasta
Dne 29.6.2015 v 10:36 Martin Babinsky napsal(a): On 06/23/2015 01:49 PM, Martin Babinsky wrote: This patchset implements new API commands for manipulating user/host/service userCertificate attribute alongside some underlying plumbing. PATCH 0045 is a small test suite that I slapped together

Re: [Freeipa-devel] [PATCH 0016] clear start attr from segment after initialization

2015-06-30 Thread thierry bordaz
On 06/30/2015 12:05 PM, Ludwig Krispenz wrote: new patch with comments attached On 06/30/2015 10:43 AM, thierry bordaz wrote: On 06/30/2015 09:19 AM, Ludwig Krispenz wrote: On 06/26/2015 02:14 PM, thierry bordaz wrote: On 06/22/2015 11:35 AM, Ludwig Krispenz wrote: fix for ticket #5065,

Re: [Freeipa-devel] [PATCH 0016] clear start attr from segment after initialization

2015-06-30 Thread Tomas Babej
On 06/30/2015 12:45 PM, thierry bordaz wrote: On 06/30/2015 12:05 PM, Ludwig Krispenz wrote: new patch with comments attached On 06/30/2015 10:43 AM, thierry bordaz wrote: On 06/30/2015 09:19 AM, Ludwig Krispenz wrote: On 06/26/2015 02:14 PM, thierry bordaz wrote: On 06/22/2015 11:35 AM,

Re: [Freeipa-devel] [PATCH 0038] increase NSS memcache timeout for IPA server

2015-06-30 Thread Tomas Babej
On 06/30/2015 09:47 AM, Martin Basti wrote: On 27/05/15 13:40, Martin Babinsky wrote: On 05/27/2015 01:33 PM, Lukas Slebodnik wrote: On (27/05/15 13:25), Martin Babinsky wrote: https://fedorahosted.org/freeipa/ticket/4964 -- Martin^3 Babinsky From

Re: [Freeipa-devel] [PATCH 0051] Clear SSSD caches when uninstalling the client

2015-06-30 Thread Tomas Babej
On 06/29/2015 03:50 PM, Martin Basti wrote: On 29/06/15 13:46, Jakub Hrozek wrote: On Fri, Jun 05, 2015 at 11:31:54AM -0600, Gabe Alford wrote: Thanks. Updated patch attached. On Fri, Jun 5, 2015 at 9:53 AM, Jakub Hrozek jhro...@redhat.com wrote: On Fri, Jun 05, 2015 at 09:46:05AM -0600,

Re: [Freeipa-devel] [PATCH 0051] Clear SSSD caches when uninstalling the client

2015-06-30 Thread Martin Basti
On 30/06/15 13:00, Tomas Babej wrote: On 06/29/2015 03:50 PM, Martin Basti wrote: On 29/06/15 13:46, Jakub Hrozek wrote: On Fri, Jun 05, 2015 at 11:31:54AM -0600, Gabe Alford wrote: Thanks. Updated patch attached. On Fri, Jun 5, 2015 at 9:53 AM, Jakub Hrozek jhro...@redhat.com wrote: On

Re: [Freeipa-devel] [PATCHES 0042-45] new commands for adding/removing certificates from entries

2015-06-30 Thread Martin Babinsky
On 06/30/2015 12:04 PM, Jan Cholasta wrote: Dne 29.6.2015 v 10:36 Martin Babinsky napsal(a): On 06/23/2015 01:49 PM, Martin Babinsky wrote: This patchset implements new API commands for manipulating user/host/service userCertificate attribute alongside some underlying plumbing. PATCH 0045 is

Re: [Freeipa-devel] [PATCH 0051] Clear SSSD caches when uninstalling the client

2015-06-30 Thread Tomas Babej
On 06/30/2015 01:08 PM, Martin Basti wrote: On 30/06/15 13:00, Tomas Babej wrote: On 06/29/2015 03:50 PM, Martin Basti wrote: On 29/06/15 13:46, Jakub Hrozek wrote: On Fri, Jun 05, 2015 at 11:31:54AM -0600, Gabe Alford wrote: Thanks. Updated patch attached. On Fri, Jun 5, 2015 at 9:53

[Freeipa-devel] [PATCH 0270] Sanitize CA replica install

2015-06-30 Thread Martin Basti
Check if cafile exists first, before using it. Patch attached. -- Martin Basti From 155b8d6ebe452ddd69cf94a2fb38d5420a9a3c11 Mon Sep 17 00:00:00 2001 From: Martin Basti mba...@redhat.com Date: Tue, 30 Jun 2015 12:16:56 +0200 Subject: [PATCH] Sanitize CA replica install Check if cafile exist

Re: [Freeipa-devel] [PATCH] 1114 don't rely on positional arguments in pykerberos calls

2015-06-30 Thread Tomas Babej
On 06/26/2015 05:56 PM, Rob Crittenden wrote: I'm working on rebasing python-kerberos (PyKerberos) in rawhide and when upstream accepted our patch which added the ability to pass in flags to authGSSClientInit() they changed the ordering such that the IPA call will fail as it relies on

Re: [Freeipa-devel] [PATCH 0270] Sanitize CA replica install

2015-06-30 Thread Tomas Babej
On 06/30/2015 01:25 PM, Martin Basti wrote: Check if cafile exists first, before using it. Patch attached. ACK -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: