Re: [Freeipa-devel] [PATCH 0066] ipactl: Do not start/stop/restart single service multiple times

On 26/08/15 17:49, Tomas Babej wrote: On 08/26/2015 03:16 PM, David Kupka wrote: https://fedorahosted.org/freeipa/ticket/5248 +def deduplicate(lst): +new_lst = [] +s = set(lst) +for i in lst: +if i in s: +s.remove(i) +new_lst.append(i) + +ret

Re: [Freeipa-devel] [PATCHES] changes in preparation of replica promotion work

On 25.8.2015 20:43, Simo Sorce wrote: On Wed, 2015-08-05 at 11:24 -0400, Simo Sorce wrote: On Wed, 2015-08-05 at 08:20 +0200, Jan Cholasta wrote: Hi, Dne 31.7.2015 v 12:46 Simo Sorce napsal(a): I've been carrying these patches in my tree for a while, I think it is time to put them in master a

[Freeipa-devel] [PATCHES 478-479] cert renewal: KRA agent certificate update

Hi, the attached patches fix . Honza -- Jan Cholasta From 5600a357d3dbed0524acd766a2ce19b20e58235e Mon Sep 17 00:00:00 2001 From: Jan Cholasta Date: Thu, 27 Aug 2015 07:23:39 +0200 Subject: [PATCH 1/2] cert renewal: Include KRA users in Dogtag LDAP

[Freeipa-devel] [PATCH] Updated no of legacy permission in ipatests

Hi All, This patch fixes bug - https://fedorahosted.org/freeipa/ticket/5264 Thanks, Abhijeet Kasurde From 4492ddd0e07c5c82e8fbe2d7ae88e5fb0bce5be0 Mon Sep 17 00:00:00 2001 From: Abhijeet Kasurde Date: Thu, 27 Aug 2015 10:31:35 +0530 Subject: [PATCH] Updated number of legacy permission in ipates

Re: [Freeipa-devel] [PATCH] 375 Added mechanism to copy vault secrets.

On 8/20/2015 2:08 AM, Endi Sukma Dewata wrote: On 8/19/2015 4:20 AM, Martin Basti wrote: On 08/16/2015 05:29 PM, Endi Sukma Dewata wrote: The vault-add and vault-archive commands have been modified to optionally retrieve a secret from a source vault, then re-archive the secret into the new/exis

Re: [Freeipa-devel] How to support Designate?

On 08/25/2015 09:08 AM, Petr Spacek wrote: On 8.7.2015 19:56, Rich Megginson wrote: On 07/08/2015 10:11 AM, Petr Spacek wrote: Assuming that Designate wants to own DNS and be Primary Master, it would be awesome if they could support standard DNS UPDATE protocol (RFC 2136) alongside their own JS

Re: [Freeipa-devel] [PATCH] First part of integration tests for Topology Plugin

On 08/26/2015 05:42 PM, Martin Basti wrote: On 08/26/2015 02:53 PM, Oleg Fayans wrote: Hi, No more short links :) On 08/26/2015 11:50 AM, Tomas Babej wrote: On 08/26/2015 11:44 AM, Oleg Fayans wrote: Hi Martin, On 08/20/2015 11:18 AM, Martin Basti wrote: On 08/20/2015 10:26 AM, Mar

Re: [Freeipa-devel] [PATCH 0066] ipactl: Do not start/stop/restart single service multiple times

On 08/26/2015 03:16 PM, David Kupka wrote: > https://fedorahosted.org/freeipa/ticket/5248 > > +def deduplicate(lst): +new_lst = [] +s = set(lst) +for i in lst: +if i in s: +s.remove(i) +new_lst.append(i) + +return new_lst + Imho, this method des

Re: [Freeipa-devel] [PATCH 0066] ipactl: Do not start/stop/restart single service multiple times

On 08/26/2015 03:16 PM, David Kupka wrote: https://fedorahosted.org/freeipa/ticket/5248 ACK Pushed to: master: 59cc54b6dce29e32e81bfaad25ff13794092d782 ipa-4-2: 21cdcbd9a6b6a82d39d40b91a64d4d9b4d7e4e7d -- Petr Vobornik -- Manage your subscription for the Freeipa-devel mailing list: https://

Re: [Freeipa-devel] [PATCH] First part of integration tests for Topology Plugin

On 08/26/2015 02:53 PM, Oleg Fayans wrote: Hi, No more short links :) On 08/26/2015 11:50 AM, Tomas Babej wrote: On 08/26/2015 11:44 AM, Oleg Fayans wrote: Hi Martin, On 08/20/2015 11:18 AM, Martin Basti wrote: On 08/20/2015 10:26 AM, Martin Basti wrote: On 08/19/2015 04:17 PM, Mar

[Freeipa-devel] [PATCH] 0004 Fix user tracker to reflect new user-del message

Fix for user tracker in ipatests/test_xmlrpc/test_user_plugin.py so that it reflects recently changed message of user-del command. Lenka From 226ea47939160ef3a164a1e8f979f52f10a7d83e Mon Sep 17 00:00:00 2001 From: Lenka Doudova Date: Wed, 26 Aug 2015 16:16:43 +0200 Subject: [PATCH] Fix user tra

Re: [Freeipa-devel] [PATCH 0065] vault: Limit size of data stored in vault

On 08/26/2015 03:56 PM, David Kupka wrote: On 26/08/15 15:45, Petr Vobornik wrote: On 08/26/2015 02:13 PM, David Kupka wrote: https://fedorahosted.org/freeipa/ticket/5231 Attaching updated patch. With changes discussed offline. Changes works for me, ACK. (with the changes it is also ACK

Re: [Freeipa-devel] [PATCH 0065] vault: Limit size of data stored in vault

On 26/08/15 15:45, Petr Vobornik wrote: On 08/26/2015 02:13 PM, David Kupka wrote: https://fedorahosted.org/freeipa/ticket/5231 Attaching updated patch. With changes discussed offline. Changes works for me, ACK. Not related to the patch: This patch limits the size to 1MB instead of prop

Re: [Freeipa-devel] [PATCH 0065] vault: Limit size of data stored in vault

On 08/26/2015 02:13 PM, David Kupka wrote: https://fedorahosted.org/freeipa/ticket/5231 Attaching updated patch. With changes discussed offline. Not related to the patch: This patch limits the size to 1MB instead of proposed 10MB. Testing showed that even 10MB raises a MemoryError in archiv

Re: [Freeipa-devel] import krbV error

On 08/26/2015 03:29 PM, Martin Basti wrote: I got following error during rpm install. 2015-08-26T13:25:40Z ERROR IPA server upgrade failed: Inspect /var/log/ipaupgrade.log and run command ipa-server-upgrade manually. 2015-08-26T13:25:40Z DEBUG File "/usr/lib/python2.7/site-packages/ipapyth

Re: [Freeipa-devel] import krbV error

On 26.8.2015 15:29, Martin Basti wrote: I got following error during rpm install. 2015-08-26T13:25:40Z ERROR IPA server upgrade failed: Inspect /var/log/ipaupgrade.log and run command ipa-server-upgrade manually. 2015-08-26T13:25:40Z DEBUG File "/usr/lib/python2.7/site-packages/ipapython/admin

[Freeipa-devel] import krbV error

I got following error during rpm install. 2015-08-26T13:25:40Z ERROR IPA server upgrade failed: Inspect /var/log/ipaupgrade.log and run command ipa-server-upgrade manually. 2015-08-26T13:25:40Z DEBUG File "/usr/lib/python2.7/site-packages/ipapython/admintool.py", line 171, in execute re

[Freeipa-devel] [PATCH 0066] ipactl: Do not start/stop/restart single service multiple times

https://fedorahosted.org/freeipa/ticket/5248 -- David Kupka From 349e8ada21526cb704d9d876a151aaa2764970f8 Mon Sep 17 00:00:00 2001 From: David Kupka Date: Wed, 26 Aug 2015 15:10:16 +0200 Subject: [PATCH] ipactl: Do not start/stop/restart single service multiple times In case multiple services a

Re: [Freeipa-devel] [PATCH] First part of integration tests for Topology Plugin

Hi, No more short links :) On 08/26/2015 11:50 AM, Tomas Babej wrote: On 08/26/2015 11:44 AM, Oleg Fayans wrote: Hi Martin, On 08/20/2015 11:18 AM, Martin Basti wrote: On 08/20/2015 10:26 AM, Martin Basti wrote: On 08/19/2015 04:17 PM, Martin Basti wrote: I got this: https://paste.f

Re: [Freeipa-devel] kra an ca instance installation

On Wed, 2015-08-26 at 09:06 +0200, Jan Cholasta wrote: > On 25.8.2015 17:50, Simo Sorce wrote: > > On Tue, 2015-08-25 at 16:22 +0200, Jan Cholasta wrote: > >> On 25.8.2015 16:09, Simo Sorce wrote: > >>> On Tue, 2015-08-25 at 15:52 +0200, Jan Cholasta wrote: > On 25.8.2015 15:37, Simo Sorce wro

[Freeipa-devel] [PATCH 0065] vault: Limit size of data stored in vault

https://fedorahosted.org/freeipa/ticket/5231 -- David Kupka From f86f4f89d1083c1474d8c470ae3b0f85ed1eb6bb Mon Sep 17 00:00:00 2001 From: David Kupka Date: Wed, 26 Aug 2015 14:11:21 +0200 Subject: [PATCH] vault: Limit size of data stored in vault https://fedorahosted.org/freeipa/ticket/5231 ---

Re: [Freeipa-devel] [PATCH] 919 vault: fix vault tests after default type change

On 08/26/2015 01:24 PM, Petr Vobornik wrote: vault test should no longer hang on interactive prompt. Doesn't fix other issues in vault tests. https://fedorahosted.org/freeipa/ticket/5251 ACK Pushed to: master: 9b0a01930bcefda1f37d7de147fed0856c28296f ipa-4-2: 91de475fd9d4499c05052e74bd2918

Re: [Freeipa-devel] [PATCH] 0040 certprofile: prevent rename (modrdn)

On 08/25/2015 04:19 PM, Simo Sorce wrote: On Tue, 2015-08-25 at 21:49 +1000, Fraser Tweedale wrote: On Tue, Aug 25, 2015 at 01:39:42PM +0300, Alexander Bokovoy wrote: On Tue, 25 Aug 2015, Petr Vobornik wrote: On 08/25/2015 07:37 AM, Alexander Bokovoy wrote: On Tue, 25 Aug 2015, Fraser Tweedal

Re: [Freeipa-devel] [PATCH] 376 Removed clear text passwords from KRA install log.

On 08/22/2015 08:17 AM, Alexander Bokovoy wrote: On Fri, 21 Aug 2015, Endi Sukma Dewata wrote: The ipa-kra-install tool has been modified to use password files instead of clear text passwords when invoking pki tool such that the passwords are no longer visible in ipaserver-kra-install.log. http

Re: [Freeipa-devel] [PATCH] 916 vault: add vault container commands

On 08/25/2015 08:04 PM, Petr Vobornik wrote: adds commands: * vaultcontainer-show [--service |--user ] * vaultcontainer-add-owner [--service |--user ] [--users ] [--groups ] [--services ] * vaultcontainer-remove-owner [--service |--user ] [--users ] [--groups ] [--ser

[Freeipa-devel] [PATCH] 919 vault: fix vault tests after default type change

vault test should no longer hang on interactive prompt. Doesn't fix other issues in vault tests. https://fedorahosted.org/freeipa/ticket/5251 -- Petr Vobornik From f288a9bd33a72a86a50bbe4a990b0a2e30d1599f Mon Sep 17 00:00:00 2001 From: Petr Vobornik Date: Wed, 26 Aug 2015 13:03:22 +0200 Subject

Re: [Freeipa-devel] [PATCH] 914 webui: add option to establish bidirectional trust

On 08/26/2015 11:28 AM, Tomas Babej wrote: On 08/25/2015 05:19 PM, Petr Vobornik wrote: https://fedorahosted.org/freeipa/ticket/5259 ACK. Pushed to: master: d7b096486e05defc1de2cc3c9f5582061b8e4060 ipa-4-2: b1f1dcaab3c2b4799ef12a417a9998d7556496af -- Manage your subscription for the Fre

Re: [Freeipa-devel] [PATCH] 913 fix missing information in object metadata

On 08/25/2015 04:54 PM, Petr Vobornik wrote: Missing 'required' values in takes_params causes Web UI to treat required fields as optional. Regression caused by ba0a1c6b33e2519a48754602413c8379fb1f0ff1 https://fedorahosted.org/freeipa/ticket/5258 ACK Pushed to: master: d01f18d4417e3073f319

Re: [Freeipa-devel] [PATCH 0301] Fix: Remove leftover krbV reference

On 26.8.2015 12:13, Martin Basti wrote: On 08/26/2015 11:19 AM, Michael Šimáček wrote: On 2015-08-26 10:43, Jan Cholasta wrote: On 26.8.2015 10:37, Martin Basti wrote: Master branch is broken, this patch fixes it. Patch attached. This is not a pylint error, but an actual bug. Yes, co

Re: [Freeipa-devel] [PATCH 0051] IPA server and replica installers can accept options from config file

On 26.8.2015 12:00, Petr Spacek wrote: On 26.8.2015 11:48, Jan Cholasta wrote: On 26.8.2015 10:51, Petr Spacek wrote: On 30.7.2015 08:55, Jan Cholasta wrote: Dne 29.7.2015 v 17:43 Petr Vobornik napsal(a): On 07/29/2015 05:13 PM, Martin Babinsky wrote: On 07/29/2015 01:25 PM, Jan Cholasta wro

Re: [Freeipa-devel] [PATCH 0301] Fix: Remove leftover krbV reference

On 08/26/2015 11:19 AM, Michael Šimáček wrote: On 2015-08-26 10:43, Jan Cholasta wrote: On 26.8.2015 10:37, Martin Basti wrote: Master branch is broken, this patch fixes it. Patch attached. This is not a pylint error, but an actual bug. Yes, commit e46d9236d19f714b67fdf2865f19146c3016

Re: [Freeipa-devel] [PATCH 0051] IPA server and replica installers can accept options from config file

On 26.8.2015 11:48, Jan Cholasta wrote: > On 26.8.2015 10:51, Petr Spacek wrote: >> On 30.7.2015 08:55, Jan Cholasta wrote: >>> Dne 29.7.2015 v 17:43 Petr Vobornik napsal(a): On 07/29/2015 05:13 PM, Martin Babinsky wrote: > On 07/29/2015 01:25 PM, Jan Cholasta wrote: >> Dne 29.7.2015 v

Re: [Freeipa-devel] [PATCH 0006] Fixed installation failures

Hi Martin, On 08/26/2015 09:58 AM, Martin Basti wrote: On 08/25/2015 06:41 PM, Oleg Fayans wrote: Hi Martin, On 08/24/2015 04:35 PM, Martin Basti wrote: On 08/24/2015 12:55 PM, Oleg Fayans wrote: Hi all. The current issue [1] effectively blocks testing of 4.2 branch. Here is (one of the

Re: [Freeipa-devel] [PATCH] First part of integration tests for Topology Plugin

On 08/26/2015 11:44 AM, Oleg Fayans wrote: > Hi Martin, > > On 08/20/2015 11:18 AM, Martin Basti wrote: >> >> >> On 08/20/2015 10:26 AM, Martin Basti wrote: >>> >>> >>> On 08/19/2015 04:17 PM, Martin Basti wrote: I got this: https://paste.fedoraproject.org/256746/43999380/ >>> FYI

Re: [Freeipa-devel] [PATCH 0051] IPA server and replica installers can accept options from config file

On 26.8.2015 10:51, Petr Spacek wrote: On 30.7.2015 08:55, Jan Cholasta wrote: Dne 29.7.2015 v 17:43 Petr Vobornik napsal(a): On 07/29/2015 05:13 PM, Martin Babinsky wrote: On 07/29/2015 01:25 PM, Jan Cholasta wrote: Dne 29.7.2015 v 12:20 Martin Babinsky napsal(a): Initial attempt to impleme

Re: [Freeipa-devel] [PATCH] First part of integration tests for Topology Plugin

Hi Martin, On 08/20/2015 11:18 AM, Martin Basti wrote: On 08/20/2015 10:26 AM, Martin Basti wrote: On 08/19/2015 04:17 PM, Martin Basti wrote: I got this: https://paste.fedoraproject.org/256746/43999380/ FYI replica install failure. (I will retest it, but I'm pretty sure that it was clea

Re: [Freeipa-devel] [PATCH] 914 webui: add option to establish bidirectional trust

On 08/25/2015 05:19 PM, Petr Vobornik wrote: > https://fedorahosted.org/freeipa/ticket/5259 > > ACK. -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

Re: [Freeipa-devel] [PATCH 0301] Fix lint error related to python3 migration

On 2015-08-26 10:43, Jan Cholasta wrote: On 26.8.2015 10:37, Martin Basti wrote: Master branch is broken, this patch fixes it. Patch attached. This is not a pylint error, but an actual bug. Yes, commit e46d9236d19f714b67fdf2865f19146c3016f46d (yesterday evening) added another reference

Re: [Freeipa-devel] [PATCH 477] spec file: Add Requires(pre) on selinux-policy

On Wed, 26 Aug 2015, Jan Pazdziora wrote: On Tue, Aug 25, 2015 at 03:50:04PM +0300, Alexander Bokovoy wrote: On Tue, 25 Aug 2015, Jan Cholasta wrote: > On 25.8.2015 14:23, Alexander Bokovoy wrote: > > On Tue, 25 Aug 2015, Jan Cholasta wrote: > > > +Requires(pre): selinux-policy >= %{selinux_poli

Re: [Freeipa-devel] [PATCH] 915 vault: change default vault type to symmetric

On 08/25/2015 07:21 PM, Petr Vobornik wrote: On 08/25/2015 06:29 PM, Petr Vobornik wrote: https://fedorahosted.org/freeipa/ticket/5251 Attaching new rebased version with help text amended. ACK Pushed to: master: 19dd2ed758210e859a5b0085de558cf13ba09104 ipa-4-2: e247babc1ad211f7c939029c

Re: [Freeipa-devel] [PATCH 0051] IPA server and replica installers can accept options from config file

On 30.7.2015 08:55, Jan Cholasta wrote: > Dne 29.7.2015 v 17:43 Petr Vobornik napsal(a): >> On 07/29/2015 05:13 PM, Martin Babinsky wrote: >>> On 07/29/2015 01:25 PM, Jan Cholasta wrote: Dne 29.7.2015 v 12:20 Martin Babinsky napsal(a): > Initial attempt to implement > https://fedorahos

Re: [Freeipa-devel] [PATCH 0301] Fix lint error related to python3 migration

On 08/26/2015 10:43 AM, Jan Cholasta wrote: On 26.8.2015 10:37, Martin Basti wrote: Master branch is broken, this patch fixes it. Patch attached. This is not a pylint error, but an actual bug. Sorry, I used wrong words, because It was detected by pylint. -- Manage your subscription for t

Re: [Freeipa-devel] [PATCH 0301] Fix lint error related to python3 migration

On 26.8.2015 10:37, Martin Basti wrote: Master branch is broken, this patch fixes it. Patch attached. This is not a pylint error, but an actual bug. -- Jan Cholasta -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribut

[Freeipa-devel] [PATCH 0301] Fix lint error related to python3 migration

Master branch is broken, this patch fixes it. Patch attached. From ab510bec2eb53b6edaff61bc37fcd8a9aea7648f Mon Sep 17 00:00:00 2001 From: Martin Basti Date: Wed, 26 Aug 2015 10:34:25 +0200 Subject: [PATCH] Fix lint error cause by python3 migration --- ipalib/plugins/vault.py | 2 +- 1 file ch

Re: [Freeipa-devel] [PATCH 477] spec file: Add Requires(pre) on selinux-policy

On Tue, Aug 25, 2015 at 02:18:29PM +0200, Jan Cholasta wrote: > Hi, > > the attached patch fixes . > > Honza > > -- > Jan Cholasta > From 216be8de30747f80f490d4e91a7cca4af3e767d6 Mon Sep 17 00:00:00 2001 > From: Jan Cholasta > Date: Tue, 25 Aug 20

Re: [Freeipa-devel] [PATCH 477] spec file: Add Requires(pre) on selinux-policy

On Tue, Aug 25, 2015 at 03:50:04PM +0300, Alexander Bokovoy wrote: > On Tue, 25 Aug 2015, Jan Cholasta wrote: > > On 25.8.2015 14:23, Alexander Bokovoy wrote: > > > On Tue, 25 Aug 2015, Jan Cholasta wrote: > > > > +Requires(pre): selinux-policy >= %{selinux_policy_version} > > > > Requires: selinu

Re: [Freeipa-devel] [PATCHES] 0696-0710 More modernization

On 25.8.2015 15:05, Petr Viktorin wrote: On 08/25/2015 12:39 PM, Christian Heimes wrote: On 2015-08-24 17:31, Petr Viktorin wrote: 0701.2-Use-Python3-compatible-dict-method-names NACK Why are you replacing iteritems() with items() instead of using six.iteritems()? It looks cleaner, and it wil

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

On 25.8.2015 21:00, Simo Sorce wrote: On Tue, 2015-08-25 at 20:45 +0200, Michael Šimáček wrote: On 2015-08-25 18:43, Robbie Harwood wrote: Jan Cholasta writes: On 25.8.2015 12:46, Michael Šimáček wrote: On 2015-08-25 12:38, Alexander Bokovoy wrote: On Tue, 25 Aug 2015, Michael Šimáček wro

Re: [Freeipa-devel] [PATCH 477] spec file: Add Requires(pre) on selinux-policy

On Tue, Aug 25, 2015 at 10:22:42PM +0300, Alexander Bokovoy wrote: > > The flow above is not correct. Each scriptlet of the package is executed > when package is installed. In particular, there is no period of waiting > until end of whole transaction to start executing %posttrans scriptlet of > a s

Re: [Freeipa-devel] dnssec tests fail due to KeyError at is_record_signed method

On 08/25/2015 08:59 PM, Oleg Fayans wrote: Hi Martin, As I was running the dnssec integration tests, I noticed that 4 out of 5 tests fail with the assumption of the dns zone being signed. Here is the stdout of the tests: http://pastebin.test.redhat.com/307944 The failure occurs in the is_r

Re: [Freeipa-devel] kra an ca instance installation

On 25.8.2015 17:50, Simo Sorce wrote: On Tue, 2015-08-25 at 16:22 +0200, Jan Cholasta wrote: On 25.8.2015 16:09, Simo Sorce wrote: On Tue, 2015-08-25 at 15:52 +0200, Jan Cholasta wrote: On 25.8.2015 15:37, Simo Sorce wrote: On Tue, 2015-08-25 at 11:34 +0200, Jan Cholasta wrote: On 25.8.2015