Re: [Freeipa-devel] [PATCH] First part of integration tests for Topology Plugin

2015-08-20 Thread Martin Basti
On 08/20/2015 10:26 AM, Martin Basti wrote: On 08/19/2015 04:17 PM, Martin Basti wrote: I got this: https://paste.fedoraproject.org/256746/43999380/ FYI replica install failure. (I will retest it, but I'm pretty sure that it was clean VM, test for some reason install client first)

Re: [Freeipa-devel] [PATCH 0297] ULC: add user-stage command

2015-08-20 Thread thierry bordaz
On 08/20/2015 05:21 PM, Martin Basti wrote: On 08/20/2015 11:27 AM, Jan Cholasta wrote: On 19.8.2015 10:57, Jan Cholasta wrote: On 19.8.2015 10:47, thierry bordaz wrote: On 08/19/2015 10:34 AM, Jan Cholasta wrote: On 19.8.2015 09:39, thierry bordaz wrote: Hi, It worked like a charm. I

[Freeipa-devel] ipa-replica-prepare requests reverse zone on RHEL

2015-08-20 Thread Oleg Fayans
Hi all, I am trying to run integration tests for dnssec in RHEL-7.2 The tests keep failing at the step of preparing the replica. I figured out, the ipa-replica-prepare with the standard parameters requests reverse zone info (does not do it in fedora) which causes the test to fail. Does

Re: [Freeipa-devel] [PATCH 0060] raise an error when trying to preserve an already preserved user

2015-08-20 Thread thierry bordaz
On 08/19/2015 06:28 PM, Martin Babinsky wrote: On 08/19/2015 02:54 PM, Martin Babinsky wrote: this patch prevents https://fedorahosted.org/freeipa/ticket/5234 from happening. Actually, we (myself, mbasti, jcholast) found out that `user-del --preserve` could use some more usability

Re: [Freeipa-devel] ipa-replica-prepare requests reverse zone on RHEL

2015-08-20 Thread Martin Basti
On 08/20/2015 11:42 AM, Oleg Fayans wrote: Hi Martin On 08/20/2015 11:33 AM, Martin Basti wrote: On 08/20/2015 10:18 AM, Oleg Fayans wrote: Hi all, I am trying to run integration tests for dnssec in RHEL-7.2 The tests keep failing at the step of preparing the replica. I figured out, the

Re: [Freeipa-devel] [PATCH] 375 Added mechanism to copy vault secrets.

2015-08-20 Thread Endi Sukma Dewata
On 8/19/2015 4:20 AM, Martin Basti wrote: On 08/16/2015 05:29 PM, Endi Sukma Dewata wrote: The vault-add and vault-archive commands have been modified to optionally retrieve a secret from a source vault, then re-archive the secret into the new/existing target vault.

Re: [Freeipa-devel] ipa-replica-prepare requests reverse zone on RHEL

2015-08-20 Thread Martin Basti
On 08/20/2015 11:52 AM, Martin Basti wrote: On 08/20/2015 11:42 AM, Oleg Fayans wrote: Hi Martin On 08/20/2015 11:33 AM, Martin Basti wrote: On 08/20/2015 10:18 AM, Oleg Fayans wrote: Hi all, I am trying to run integration tests for dnssec in RHEL-7.2 The tests keep failing at the

Re: [Freeipa-devel] [PATCH 0060] raise an error when trying to preserve an already preserved user

2015-08-20 Thread thierry bordaz
On 08/19/2015 06:28 PM, Martin Babinsky wrote: On 08/19/2015 02:54 PM, Martin Babinsky wrote: this patch prevents https://fedorahosted.org/freeipa/ticket/5234 from happening. Actually, we (myself, mbasti, jcholast) found out that `user-del --preserve` could use some more usability

Re: [Freeipa-devel] [PATCH 0060] raise an error when trying to preserve an already preserved user

2015-08-20 Thread thierry bordaz
On 08/20/2015 11:05 AM, thierry bordaz wrote: On 08/19/2015 06:28 PM, Martin Babinsky wrote: On 08/19/2015 02:54 PM, Martin Babinsky wrote: this patch prevents https://fedorahosted.org/freeipa/ticket/5234 from happening. Actually, we (myself, mbasti, jcholast) found out that `user-del

Re: [Freeipa-devel] [PATCH] 371 Added support for changing vault encryption.

2015-08-20 Thread Endi Sukma Dewata
On 8/19/2015 4:58 AM, Martin Basti wrote: On 08/13/2015 07:11 PM, Endi Sukma Dewata wrote: On 8/13/2015 8:06 AM, Martin Basti wrote: The vault-mod command has been modified to support changing vault encryption attributes (i.e. type, password, public/private keys) in addition to normal

Re: [Freeipa-devel] ipa-replica-prepare requests reverse zone on RHEL

2015-08-20 Thread Oleg Fayans
Hi Martin On 08/20/2015 11:33 AM, Martin Basti wrote: On 08/20/2015 10:18 AM, Oleg Fayans wrote: Hi all, I am trying to run integration tests for dnssec in RHEL-7.2 The tests keep failing at the step of preparing the replica. I figured out, the ipa-replica-prepare with the standard

Re: [Freeipa-devel] [PATCH 0297] ULC: add user-stage command

2015-08-20 Thread Jan Cholasta
On 19.8.2015 10:57, Jan Cholasta wrote: On 19.8.2015 10:47, thierry bordaz wrote: On 08/19/2015 10:34 AM, Jan Cholasta wrote: On 19.8.2015 09:39, thierry bordaz wrote: Hi, It worked like a charm. I had a problem to commit it because of the VERSION stuff that changed. Except that (changing

[Freeipa-devel] [PATCH 0003] Added PyYAML as a dependency for ipa-tests, fixed a replica preparation in RHEL

2015-08-20 Thread Oleg Fayans
Fixed two failures of integration tests under RHEL: 1. PyYAML, needed for integration tests is not installed as a dependency 2. ipa-replica-prepare requests a reverse zone info under RHEL. -- Oleg Fayans Quality Engineer FreeIPA team RedHat. From 335ccc8a63b457e479b7f4e21fe4131e788c455d Mon Sep

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-08-20 Thread Michael Šimáček
On 2015-08-19 11:26, Alexander Bokovoy wrote: On Tue, 18 Aug 2015, Michael Šimáček wrote: On 2015-08-17 21:10, Robbie Harwood wrote: Michael Šimáček msima...@redhat.com writes: Attaching new revision of the patch. Changes from the previous: - ldap2's connect now chooses the bind type same

Re: [Freeipa-devel] ipa-replica-prepare requests reverse zone on RHEL

2015-08-20 Thread Oleg Fayans
Hi Martin, I guess, I know where is the problem. During replica-install the replica tries to resolve it's own ip to a hostname to check whether the dns is configured correctly. And fails, since we specified --no-reverse during the replica preparation on master. This looks like a bug to me.

Re: [Freeipa-devel] ipa-replica-prepare requests reverse zone on RHEL

2015-08-20 Thread Oleg Fayans
On 08/20/2015 12:01 PM, Martin Basti wrote: On 08/20/2015 11:52 AM, Martin Basti wrote: On 08/20/2015 11:42 AM, Oleg Fayans wrote: Hi Martin On 08/20/2015 11:33 AM, Martin Basti wrote: On 08/20/2015 10:18 AM, Oleg Fayans wrote: Hi all, I am trying to run integration tests for

Re: [Freeipa-devel] Regression in client-install [master]

2015-08-20 Thread Michael Šimáček
On 2015-08-18 14:56, Simo Sorce wrote: On Tue, 2015-08-18 at 10:11 +0200, Michael Šimáček wrote: On 2015-08-18 08:55, Tomas Babej wrote: On 08/18/2015 03:25 AM, Simo Sorce wrote: I see a regression in the client install now that the python-kerberos - python-gssapi patches have landed.

Re: [Freeipa-devel] [PATCH 0003] Added PyYAML as a dependency for ipa-tests, fixed a replica preparation in RHEL

2015-08-20 Thread Martin Babinsky
On 08/20/2015 11:48 AM, Oleg Fayans wrote: Fixed two failures of integration tests under RHEL: 1. PyYAML, needed for integration tests is not installed as a dependency 2. ipa-replica-prepare requests a reverse zone info under RHEL. Hi Oleg, it is a good practice to fix unrelated issues in

Re: [Freeipa-devel] [PATCH 0060] raise an error when trying to preserve an already preserved user

2015-08-20 Thread Martin Babinsky
On 08/20/2015 11:41 AM, thierry bordaz wrote: On 08/19/2015 06:28 PM, Martin Babinsky wrote: On 08/19/2015 02:54 PM, Martin Babinsky wrote: this patch prevents https://fedorahosted.org/freeipa/ticket/5234 from happening. Actually, we (myself, mbasti, jcholast) found out that `user-del

Re: [Freeipa-devel] ipa-replica-prepare requests reverse zone on RHEL

2015-08-20 Thread Martin Basti
It could be, please file a bug. On 08/20/2015 12:51 PM, Oleg Fayans wrote: Hi Martin, I guess, I know where is the problem. During replica-install the replica tries to resolve it's own ip to a hostname to check whether the dns is configured correctly. And fails, since we specified

Re: [Freeipa-devel] [PATCH 0060] raise an error when trying to preserve an already preserved user

2015-08-20 Thread Martin Babinsky
On 08/20/2015 12:11 PM, Martin Babinsky wrote: On 08/20/2015 11:41 AM, thierry bordaz wrote: On 08/19/2015 06:28 PM, Martin Babinsky wrote: On 08/19/2015 02:54 PM, Martin Babinsky wrote: this patch prevents https://fedorahosted.org/freeipa/ticket/5234 from happening. Actually, we (myself,

[Freeipa-devel] [PATCH] 0196 trusts: format Kerberos principal properly when fetching trust topology

2015-08-20 Thread Alexander Bokovoy
Hi, one more fix for the problem with trusts that Scott Poore found when verifying fixes to bug https://bugzilla.redhat.com/show_bug.cgi?id=1250190 Details are in the commit message. -- / Alexander Bokovoy From da76899a44af925223816d6e6b03336b457d8e2c Mon Sep 17 00:00:00 2001 From: Alexander

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-08-20 Thread Robbie Harwood
Michael Šimáček msima...@redhat.com writes: On 2015-08-20 12:32, Michael Šimáček wrote: Michael Šimáček msima...@redhat.com writes: Attaching new revision of the patch. Changes from the previous: - ldap2's connect now chooses the bind type same way as in ipaldap - get_default_realm usages

Re: [Freeipa-devel] ipa-replica-prepare requests reverse zone on RHEL

2015-08-20 Thread Oleg Fayans
Done. https://fedorahosted.org/freeipa/ticket/5240 The initial question however is still unsolved: why does ipa-replica-prepare behaves differently on fedora and rhel? I thought, rhel host had more than one reverse zone, but it's not the case. On 08/20/2015 01:43 PM, Martin Basti wrote: It

Re: [Freeipa-devel] ipa-replica-prepare requests reverse zone on RHEL

2015-08-20 Thread Simo Sorce
On Thu, 2015-08-20 at 15:11 +0200, Petr Vobornik wrote: On 08/20/2015 02:46 PM, Martin Basti wrote: On 08/20/2015 02:40 PM, Oleg Fayans wrote: Done. https://fedorahosted.org/freeipa/ticket/5240 The initial question however is still unsolved: why does ipa-replica-prepare behaves

Re: [Freeipa-devel] [Freeipa-users] Dns SOA MNAME not resolving from LDAP data

2015-08-20 Thread Martin Basti
On 08/20/2015 02:35 PM, David Dejaeghere wrote: Aha, Correct. But i never set this. This option seems to be set by default. I verified this issue on multiple installs. It seems they all have this option set by default? Can i safely change named.conf without fearing my modifications will

Re: [Freeipa-devel] ipa-replica-prepare requests reverse zone on RHEL

2015-08-20 Thread Petr Vobornik
On 08/20/2015 02:46 PM, Martin Basti wrote: On 08/20/2015 02:40 PM, Oleg Fayans wrote: Done. https://fedorahosted.org/freeipa/ticket/5240 The initial question however is still unsolved: why does ipa-replica-prepare behaves differently on fedora and rhel? I thought, rhel host had more than

Re: [Freeipa-devel] ipa-replica-prepare requests reverse zone on RHEL

2015-08-20 Thread Oleg Fayans
On 08/20/2015 03:11 PM, Petr Vobornik wrote: On 08/20/2015 02:46 PM, Martin Basti wrote: On 08/20/2015 02:40 PM, Oleg Fayans wrote: Done. https://fedorahosted.org/freeipa/ticket/5240 The initial question however is still unsolved: why does ipa-replica-prepare behaves differently on fedora

Re: [Freeipa-devel] ipa-replica-prepare requests reverse zone on RHEL

2015-08-20 Thread Petr Vobornik
On 08/20/2015 03:19 PM, Simo Sorce wrote: On Thu, 2015-08-20 at 15:11 +0200, Petr Vobornik wrote: On 08/20/2015 02:46 PM, Martin Basti wrote: On 08/20/2015 02:40 PM, Oleg Fayans wrote: Done. https://fedorahosted.org/freeipa/ticket/5240 The initial question however is still unsolved: why

Re: [Freeipa-devel] [PATCH 0002] TEST: Stageuser plugin

2015-08-20 Thread Martin Basti
On 08/14/2015 06:32 PM, Lenka Doudova wrote: Yes, that is correct - it's malfunctioning behavior of the plugin - command 'stageuser-add --from-delete', which is discussed in another thread. I left this test case for so long as it's not fixed/changed. If the command remains and is fixed, the

Re: [Freeipa-devel] ipa-replica-prepare requests reverse zone on RHEL

2015-08-20 Thread Martin Basti
On 08/20/2015 02:40 PM, Oleg Fayans wrote: Done. https://fedorahosted.org/freeipa/ticket/5240 The initial question however is still unsolved: why does ipa-replica-prepare behaves differently on fedora and rhel? I thought, rhel host had more than one reverse zone, but it's not the case. Can

Re: [Freeipa-devel] ipa-replica-prepare requests reverse zone on RHEL

2015-08-20 Thread Oleg Fayans
On 08/20/2015 03:19 PM, Simo Sorce wrote: On Thu, 2015-08-20 at 15:11 +0200, Petr Vobornik wrote: On 08/20/2015 02:46 PM, Martin Basti wrote: On 08/20/2015 02:40 PM, Oleg Fayans wrote: Done. https://fedorahosted.org/freeipa/ticket/5240 The initial question however is still unsolved: why

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-08-20 Thread Simo Sorce
On Thu, 2015-08-20 at 14:42 -0400, Robbie Harwood wrote: Michael Šimáček msima...@redhat.com writes: On 2015-08-20 12:32, Michael Šimáček wrote: Michael Šimáček msima...@redhat.com writes: Attaching new revision of the patch. Changes from the previous: - ldap2's connect now chooses

Re: [Freeipa-devel] [patch 0011] Temporary workaround for [patch 0010] Python list comprehension leak breaking the test execution

2015-08-20 Thread Martin Basti
On 08/17/2015 09:53 AM, Milan Kubík wrote: On 08/11/2015 03:23 PM, Milan Kubík wrote: On 08/11/2015 09:53 AM, Jan Cholasta wrote: On 11.8.2015 09:46, Milan Kubík wrote: On 08/11/2015 09:08 AM, Jan Cholasta wrote: On 11.8.2015 09:00, Milan Kubík wrote: On 08/10/2015 06:22 PM, Milan Kubík

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-08-20 Thread Michael Šimáček
On 2015-08-20 12:32, Michael Šimáček wrote: On 2015-08-19 11:26, Alexander Bokovoy wrote: On Tue, 18 Aug 2015, Michael Šimáček wrote: On 2015-08-17 21:10, Robbie Harwood wrote: Michael Šimáček msima...@redhat.com writes: Attaching new revision of the patch. Changes from the previous: -

Re: [Freeipa-devel] [PATCH 0297] ULC: add user-stage command

2015-08-20 Thread Martin Basti
On 08/20/2015 11:27 AM, Jan Cholasta wrote: On 19.8.2015 10:57, Jan Cholasta wrote: On 19.8.2015 10:47, thierry bordaz wrote: On 08/19/2015 10:34 AM, Jan Cholasta wrote: On 19.8.2015 09:39, thierry bordaz wrote: Hi, It worked like a charm. I had a problem to commit it because of the

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-08-20 Thread Robbie Harwood
Simo Sorce s...@redhat.com writes: On Thu, 2015-08-20 at 14:42 -0400, Robbie Harwood wrote: Michael Šimáček msima...@redhat.com writes: On 2015-08-20 12:32, Michael Šimáček wrote: Michael Šimáček msima...@redhat.com writes: Attaching new revision of the patch. Changes from the previous:

Re: [Freeipa-devel] ipa-replica-prepare requests reverse zone on RHEL

2015-08-20 Thread Martin Basti
On 08/20/2015 10:18 AM, Oleg Fayans wrote: Hi all, I am trying to run integration tests for dnssec in RHEL-7.2 The tests keep failing at the step of preparing the replica. I figured out, the ipa-replica-prepare with the standard parameters requests reverse zone info (does not do it in

Re: [Freeipa-devel] [PATCH 0297] ULC: add user-stage command

2015-08-20 Thread thierry bordaz
On 08/20/2015 05:21 PM, Martin Basti wrote: On 08/20/2015 11:27 AM, Jan Cholasta wrote: On 19.8.2015 10:57, Jan Cholasta wrote: On 19.8.2015 10:47, thierry bordaz wrote: On 08/19/2015 10:34 AM, Jan Cholasta wrote: On 19.8.2015 09:39, thierry bordaz wrote: Hi, It worked like a charm. I