Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 01/10/15 10:33, Oleg Fayans wrote: First glance on the packages built from today's tree reveal the following problems: 1. Having PTR sync enabled in global DNS configuration and installing client with --enable-dns-updates option, ipa master still does not create a PTR record for the client ma

[Freeipa-devel] [PATCH 0068] backup/restore CI TESTS: re-kinit after ipa-restore in some tests

This patch fixes failing DNS/DSSEC/KRA tests for backup and restore into already installed IPA master. It may require my PATCH 0065 to apply cleanly. Additionally, applying my PATCH 0066 (acked but not pushed as of writing this) should result in all backup/restore tests passing. -- Martin^3

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

First glance on the packages built from today's tree reveal the following problems: 1. Having PTR sync enabled in global DNS configuration and installing client with --enable-dns-updates option, ipa master still does not create a PTR record for the client machine. As a result, ipa-repolica-in

Re: [Freeipa-devel] [PATCH 0067] ipa-server-install: mark master_password Knob as deprecated

On 1.10.2015 15:43, Martin Babinsky wrote: On 10/01/2015 02:49 PM, Martin Babinsky wrote: Pave Picka found out that the fix for https://fedorahosted.org/freeipa/ticket/4516 was partially undone during 4.2 installer rectofaring efforts. This one-liner should fix it for good (or at least until we

Re: [Freeipa-devel] [PATCH 0067] ipa-server-install: mark master_password Knob as deprecated

On 10/01/2015 02:49 PM, Martin Babinsky wrote: Pave Picka found out that the fix for https://fedorahosted.org/freeipa/ticket/4516 was partially undone during 4.2 installer rectofaring efforts. This one-liner should fix it for good (or at least until we move the code around again). created a

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 01/10/15 07:42, Jan Cholasta wrote: Hi, I have just imported python-jwcrypto, custodia and pki-core-10.2.7 into mkosek/freeipa-master as well, to (hopefully) make things easier. Simo, custodia failed to build F22, any idea why? See

Re: [Freeipa-devel] [PATCHES] More Python 3 porting

Hi, On 1.10.2015 13:01, Martin Basti wrote: On 09/30/2015 10:25 AM, Petr Viktorin wrote: On 09/23/2015 04:46 PM, Petr Viktorin wrote: On 09/22/2015 02:59 PM, David Kupka wrote: On 18/09/15 17:00, Petr Viktorin wrote: Hello, Here are more patches that bring IPA closer to Python 3 compatibil

Re: [Freeipa-devel] [PATCHES 466-468, 0316] install: Add common base class for server and replica install

On 10/01/2015 12:55 PM, Jan Cholasta wrote: On 29.9.2015 15:15, Martin Basti wrote: On 09/29/2015 03:11 PM, Milan Kubík wrote: On 09/23/2015 05:01 PM, Martin Basti wrote: On 09/22/2015 12:10 PM, Jan Cholasta wrote: On 22.9.2015 10:29, Martin Babinsky wrote: On 09/16/2015 10:44 AM, Jan

[Freeipa-devel] [PATCH 0067] ipa-server-install: mark master_password Knob as deprecated

Pave Picka found out that the fix for https://fedorahosted.org/freeipa/ticket/4516 was partially undone during 4.2 installer rectofaring efforts. This one-liner should fix it for good (or at least until we move the code around again). -- Martin^3 Babinsky From 2513de2c84b1d28cc07ce3f45e1c3ce7e

Re: [Freeipa-devel] [PATCH] Proper fix for ticket 5306

On 10/01/2015 02:43 PM, Oleg Fayans wrote: Hi Martin, On 10/01/2015 11:18 AM, Martin Basti wrote: On 09/30/2015 01:24 PM, Martin Basti wrote: On 09/30/2015 12:19 PM, Oleg Fayans wrote: On 09/30/2015 11:46 AM, Petr Spacek wrote: On 29.9.2015 09:12, Oleg Fayans wrote: +def prepare_rev

Re: [Freeipa-devel] [PATCH] Proper fix for ticket 5306

Hi Martin, On 10/01/2015 11:18 AM, Martin Basti wrote: On 09/30/2015 01:24 PM, Martin Basti wrote: On 09/30/2015 12:19 PM, Oleg Fayans wrote: On 09/30/2015 11:46 AM, Petr Spacek wrote: On 29.9.2015 09:12, Oleg Fayans wrote: +def prepare_reverse_zone(host, ip): +zone = get_reverse_z

Re: [Freeipa-devel] [PATCH 0066] fix for regression in ipa-restore

On 10/01/2015 02:18 PM, Martin Kosek wrote: On 09/29/2015 03:27 PM, David Kupka wrote: On 25/09/15 18:13, Martin Babinsky wrote: fixes https://fedorahosted.org/freeipa/ticket/5328 Fixes the issue for me, ACK. Just checking - what is the impact here, will ipa-restore still work on a clean

Re: [Freeipa-devel] [PATCH 0066] fix for regression in ipa-restore

On 01/10/15 14:18, Martin Kosek wrote: On 09/29/2015 03:27 PM, David Kupka wrote: On 25/09/15 18:13, Martin Babinsky wrote: fixes https://fedorahosted.org/freeipa/ticket/5328 Fixes the issue for me, ACK. Just checking - what is the impact here, will ipa-restore still work on a clean mach

Re: [Freeipa-devel] [PATCH 0066] fix for regression in ipa-restore

On 09/29/2015 03:27 PM, David Kupka wrote: > On 25/09/15 18:13, Martin Babinsky wrote: >> fixes https://fedorahosted.org/freeipa/ticket/5328 >> >> >> > Fixes the issue for me, ACK. > Just checking - what is the impact here, will ipa-restore still work on a clean machine without FreeIPA installed,

Re: [Freeipa-devel] [patch 0020] ipatests: configure Network Manager not to manage resolv.conf

On 10/01/2015 12:39 PM, Alexander Bokovoy wrote: On Thu, 01 Oct 2015, Milan Kubík wrote: On 10/01/2015 11:23 AM, Martin Basti wrote: On 10/01/2015 10:18 AM, Milan Kubík wrote: On 10/01/2015 10:06 AM, Milan Kubík wrote: Fixes https://fedorahosted.org/freeipa/ticket/5331 Patch attached. P

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

Hi, I have just imported python-jwcrypto, custodia and pki-core-10.2.7 into mkosek/freeipa-master as well, to (hopefully) make things easier. Simo, custodia failed to build F22, any idea why? See

Re: [Freeipa-devel] [PATCHES] More Python 3 porting

On 09/30/2015 10:25 AM, Petr Viktorin wrote: On 09/23/2015 04:46 PM, Petr Viktorin wrote: On 09/22/2015 02:59 PM, David Kupka wrote: On 18/09/15 17:00, Petr Viktorin wrote: Hello, Here are more patches that bring IPA closer to Python 3 compatibility. Hi Petr, thanks for another batch of

Re: [Freeipa-devel] [PATCHES 466-468, 0316] install: Add common base class for server and replica install

On 29.9.2015 15:15, Martin Basti wrote: On 09/29/2015 03:11 PM, Milan Kubík wrote: On 09/23/2015 05:01 PM, Martin Basti wrote: On 09/22/2015 12:10 PM, Jan Cholasta wrote: On 22.9.2015 10:29, Martin Babinsky wrote: On 09/16/2015 10:44 AM, Jan Cholasta wrote: On 16.9.2015 08:11, Jan Cholas

Re: [Freeipa-devel] [patch 0020] ipatests: configure Network Manager not to manage resolv.conf

On Thu, 01 Oct 2015, Milan Kubík wrote: On 10/01/2015 11:23 AM, Martin Basti wrote: On 10/01/2015 10:18 AM, Milan Kubík wrote: On 10/01/2015 10:06 AM, Milan Kubík wrote: Fixes https://fedorahosted.org/freeipa/ticket/5331 Patch attached. Patch for ipa-4-2 branch. Milan NACK http://fp

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

Hi Ludwig, Thank you! vakwetu/dogtag_10.2.7_test_builds was the bit that was missing On 10/01/2015 12:29 PM, Ludwig Krispenz wrote: On 10/01/2015 12:06 PM, Oleg Fayans wrote: Hi Simo, I was able to build the packages based on your git repo. However, my attempt to install the resulting bits f

Re: [Freeipa-devel] [patch 0020] ipatests: configure Network Manager not to manage resolv.conf

On 10/01/2015 11:23 AM, Martin Basti wrote: On 10/01/2015 10:18 AM, Milan Kubík wrote: On 10/01/2015 10:06 AM, Milan Kubík wrote: Fixes https://fedorahosted.org/freeipa/ticket/5331 Patch attached. Patch for ipa-4-2 branch. Milan NACK http://fpaste.org/273499/43691381/ I disagree. Fr

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 10/01/2015 12:06 PM, Oleg Fayans wrote: Hi Simo, I was able to build the packages based on your git repo. However, my attempt to install the resulting bits failed due to lack of dependencies: pki-ca >= 10.2.7 is needed by freeipa-server-4.2.90.201510010815GITb726fa9-0.fc22.x86_64 pki-kra

Re: [Freeipa-devel] [patch 0020] ipatests: configure Network Manager not to manage resolv.conf

On 10/01/2015 11:23 AM, Martin Basti wrote: On 10/01/2015 10:18 AM, Milan Kubík wrote: On 10/01/2015 10:06 AM, Milan Kubík wrote: Fixes https://fedorahosted.org/freeipa/ticket/5331 Patch attached. Patch for ipa-4-2 branch. Milan NACK http://fpaste.org/273499/43691381/ I did inves

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

Hi Simo, I was able to build the packages based on your git repo. However, my attempt to install the resulting bits failed due to lack of dependencies: pki-ca >= 10.2.7 is needed by freeipa-server-4.2.90.201510010815GITb726fa9-0.fc22.x86_64 pki-kra >= 10.2.7 is needed by freeipa-server-4.2.9

Re: [Freeipa-devel] [patch 0020] ipatests: configure Network Manager not to manage resolv.conf

On 10/01/2015 10:18 AM, Milan Kubík wrote: On 10/01/2015 10:06 AM, Milan Kubík wrote: Fixes https://fedorahosted.org/freeipa/ticket/5331 Patch attached. Patch for ipa-4-2 branch. Milan NACK http://fpaste.org/273499/43691381/ -- Manage your subscription for the Freeipa-devel mailing l

Re: [Freeipa-devel] [PATCH] Proper fix for ticket 5306

On 09/30/2015 01:24 PM, Martin Basti wrote: On 09/30/2015 12:19 PM, Oleg Fayans wrote: On 09/30/2015 11:46 AM, Petr Spacek wrote: On 29.9.2015 09:12, Oleg Fayans wrote: +def prepare_reverse_zone(host, ip): +zone = get_reverse_zone_default(ip) +host.run_command(["ipa", +

Re: [Freeipa-devel] [patch 0020] ipatests: configure Network Manager not to manage resolv.conf

On 10/01/2015 10:06 AM, Milan Kubík wrote: Fixes https://fedorahosted.org/freeipa/ticket/5331 Patch attached. Patch for ipa-4-2 branch. Milan From 5d19b29474b577688910a60fbc5efdf38ff6c455 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Milan=20Kub=C3=ADk?= Date: Fri, 25 Sep 2015 21:09:24 +0200 Sub

[Freeipa-devel] [patch 0020] ipatests: configure Network Manager not to manage resolv.conf

Fixes https://fedorahosted.org/freeipa/ticket/5331 Patch attached. From 4200b386058489f8ad73ee2d2f7eed582dea70b5 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Milan=20Kub=C3=ADk?= Date: Fri, 25 Sep 2015 21:09:24 +0200 Subject: [PATCH] ipatests: configure Network Manager not to manage resolv.conf For