Re: [Freeipa-devel] [PATCH 0399] Upgrade: fix upgrading of NIS Server configuration

2016-01-11 Thread Martin Basti
On 11.01.2016 08:34, Alexander Bokovoy wrote: On Fri, 08 Jan 2016, Martin Basti wrote: On 08.01.2016 16:22, Martin Basti wrote: On 08.01.2016 16:19, Petr Vobornik wrote: On 01/08/2016 02:54 PM, Alexander Bokovoy wrote: On Wed, 06 Jan 2016, Martin Basti wrote:

Re: [Freeipa-devel] [patch 0029, 0030] fixes for install tasks in integration tests

2016-01-11 Thread Milan Kubík
On 01/07/2016 09:36 AM, Milan Kubík wrote: 0029: Add 10.in-addr.arpa. zone to ipa 0030: If the IP addresses in the topology are resolvable, do not add them to master. Hi. I'm dropping 0029 for now. 0030 gets an update. -- Milan Kubik From df95013b33fa1954cc92425fb7e6ea8dc6ac7e15 Mon Sep

Re: [Freeipa-devel] [PATCH 0120] prevent crash of CA-less server upgrade due to absent certmonger

2016-01-11 Thread Jan Cholasta
On 7.1.2016 09:31, Martin Babinsky wrote: On 01/05/2016 03:49 PM, Martin Babinsky wrote: fixes https://fedorahosted.org/freeipa/ticket/5519 Bump for review. Works for me, ACK. Pushed to: master: bef0f4c5c38e7ff6415e8f8c96dc306ef7f0ce56 ipa-4-2: f55a228f5ddab45fdea884eee93eac9890cf093d

Re: [Freeipa-devel] certmonger everywhere

2016-01-11 Thread Jan Cholasta
On 6.1.2016 15:56, Rob Crittenden wrote: Jan Cholasta wrote: On 4.1.2016 19:57, Rob Crittenden wrote: I guess this would work but I think you'd have quite a difficult time returning usable error messages to a user (and they are pretty bad now in cert-request). I don't see why, error messages

Re: [Freeipa-devel] [patch 0028] ipatests: Fix configuration problems in dns tests

2016-01-11 Thread Martin Basti
On 11.01.2016 12:01, Milan Kubík wrote: On 01/07/2016 10:37 AM, Martin Basti wrote: On 07.01.2016 10:23, Milan Kubík wrote: On 01/07/2016 09:31 AM, Oleg Fayans wrote: Hi Milan, As we are eventialy going to move to python3, I would make the code python3-compatible: 1. from __future__

Re: [Freeipa-devel] [PATCHES] 0752-0757, 0759 Enable pylint --py3k

2016-01-11 Thread Martin Basti
On 08.01.2016 12:45, Petr Viktorin wrote: On 01/06/2016 03:28 PM, Petr Viktorin wrote: Hello, Patches 0753-0757 fix remaining warnings from `pylint --py3k`, except "no-absolute-import" (which seems redundant to me) and the ones in contrib/RHEL4. The last patch adds py3k lint check to

Re: [Freeipa-devel] [patch 0028] ipatests: Fix configuration problems in dns tests

2016-01-11 Thread Martin Basti
On 11.01.2016 12:38, Martin Basti wrote: On 11.01.2016 12:01, Milan Kubík wrote: On 01/07/2016 10:37 AM, Martin Basti wrote: On 07.01.2016 10:23, Milan Kubík wrote: On 01/07/2016 09:31 AM, Oleg Fayans wrote: Hi Milan, As we are eventialy going to move to python3, I would make the code

Re: [Freeipa-devel] [PATCH 0122-0123] reimplementation of package version comparison code

2016-01-11 Thread Martin Babinsky
On 01/11/2016 07:47 AM, Jan Cholasta wrote: On 8.1.2016 18:30, Lukas Slebodnik wrote: On (08/01/16 17:56), Martin Babinsky wrote: On 01/08/2016 05:23 PM, Lukas Slebodnik wrote: On (08/01/16 16:59), Martin Babinsky wrote: Patch 0122 reimplements version checking and fixes

[Freeipa-devel] FreeIPA github mirror/repo (Fwd: [SSSD] The mirror at https://github.com/SSSD/sssd is now automatically updated)

2016-01-11 Thread Martin Kosek
FIY, I suspect FreeIPA will want follow the same approach for https://github.com/freeipa/freeipa (to be created) :-) Martin Forwarded Message Subject: [SSSD] The mirror at https://github.com/SSSD/sssd is now automatically updated Date: Mon, 11 Jan 2016 11:33:06 +0100 From:

Re: [Freeipa-devel] [PATCH 0122-0123] reimplementation of package version comparison code

2016-01-11 Thread Jan Cholasta
On 11.1.2016 13:14, Martin Babinsky wrote: On 01/11/2016 07:47 AM, Jan Cholasta wrote: On 8.1.2016 18:30, Lukas Slebodnik wrote: On (08/01/16 17:56), Martin Babinsky wrote: On 01/08/2016 05:23 PM, Lukas Slebodnik wrote: On (08/01/16 16:59), Martin Babinsky wrote: Patch 0122 reimplements

Re: [Freeipa-devel] [PATCH 0122-0123] reimplementation of package version comparison code

2016-01-11 Thread Martin Babinsky
On 01/11/2016 02:01 PM, Jan Cholasta wrote: On 11.1.2016 13:14, Martin Babinsky wrote: On 01/11/2016 07:47 AM, Jan Cholasta wrote: On 8.1.2016 18:30, Lukas Slebodnik wrote: On (08/01/16 17:56), Martin Babinsky wrote: On 01/08/2016 05:23 PM, Lukas Slebodnik wrote: On (08/01/16 16:59), Martin

Re: [Freeipa-devel] import rpm causes failure during IPA caless install

2016-01-11 Thread John Dennis
On 01/11/2016 01:50 AM, Alexander Bokovoy wrote: On Mon, 11 Jan 2016, Jan Cholasta wrote: On 8.1.2016 14:28, Alexander Bokovoy wrote: On Fri, 08 Jan 2016, Jan Cholasta wrote: I would be surprised if NSS was used in this particular function. I will try it No NSS here:

Re: [Freeipa-devel] [PATCH 0124] ipa-csreplica-manage: remove extraneous ldap2 connection

2016-01-11 Thread Martin Kosek
On 01/08/2016 06:31 PM, Martin Babinsky wrote: > On 01/08/2016 06:17 PM, Martin Basti wrote: >> >> >> On 08.01.2016 17:18, Martin Babinsky wrote: >>> fixes ipa-csreplica-manage del blowing up due >>> >>> https://fedorahosted.org/freeipa/ticket/5583 >>> >>> for master and ipa-4-3 only. >>> >> Give

Re: [Freeipa-devel] [TESTS][PATCH 0007] Multiple managers per user

2016-01-11 Thread Lenka Doudova
Hi, everyone having time to take a look at this? It's been hanging for a few weeks. Thanks, Lenka On 12/15/2015 12:42 PM, Lenka Doudova wrote: Hi, I updated the (stage)user tests to reflect the multiple managers per user feature. Corresponding ticket:

Re: [Freeipa-devel] FreeIPA github mirror/repo (Fwd: [SSSD] The mirror at https://github.com/SSSD/sssd is now automatically updated)

2016-01-11 Thread Petr Viktorin
On 01/11/2016 01:11 PM, Martin Kosek wrote: > FIY, I suspect FreeIPA will want follow the same approach for > > https://github.com/freeipa/freeipa > > (to be created) :-) > > Martin Let me know when you're ready to start setting this up. I can transfer https://github.com/encukou/freeipa there

Re: [Freeipa-devel] [PATCH 0118] fix Py3 incompatible exception instantiation in replica install code

2016-01-11 Thread Martin Babinsky
On 01/08/2016 06:26 PM, Tomas Babej wrote: On 01/07/2016 05:56 PM, Martin Babinsky wrote: On 01/04/2016 09:02 AM, Martin Babinsky wrote: I have created ticket to patch and added it to commit message: https://fedorahosted.org/freeipa/ticket/5585 ACK for these changes, however, there

Re: [Freeipa-devel] [TESTS][PATCH 0007] Multiple managers per user

2016-01-11 Thread Martin Basti
On 11.01.2016 12:47, Lenka Doudova wrote: Hi, everyone having time to take a look at this? It's been hanging for a few weeks. Thanks, Lenka On 12/15/2015 12:42 PM, Lenka Doudova wrote: Hi, I updated the (stage)user tests to reflect the multiple managers per user feature. Corresponding

Re: [Freeipa-devel] [PATCH 0088] Don't error when find_base() fails if a base is not required

2016-01-11 Thread Nathaniel McCallum
On Mon, 2016-01-11 at 17:45 +0100, Martin Basti wrote: > > > On 14.12.2015 16:22, Nathaniel McCallum wrote: > > We always have to call find_base() in order to force libldap to > > open > > the socket. However, if no base is actually required then there is > > no reason to error out if

Re: [Freeipa-devel] [PATCH 0122-0123] reimplementation of package version comparison code

2016-01-11 Thread Jan Cholasta
On 11.1.2016 16:29, Martin Babinsky wrote: On 01/11/2016 02:27 PM, Martin Babinsky wrote: On 01/11/2016 02:01 PM, Jan Cholasta wrote: On 11.1.2016 13:14, Martin Babinsky wrote: On 01/11/2016 07:47 AM, Jan Cholasta wrote: On 8.1.2016 18:30, Lukas Slebodnik wrote: On (08/01/16 17:56), Martin

Re: [Freeipa-devel] [PATCH 0122-0123] reimplementation of package version comparison code

2016-01-11 Thread Martin Babinsky
On 01/11/2016 02:27 PM, Martin Babinsky wrote: On 01/11/2016 02:01 PM, Jan Cholasta wrote: On 11.1.2016 13:14, Martin Babinsky wrote: On 01/11/2016 07:47 AM, Jan Cholasta wrote: On 8.1.2016 18:30, Lukas Slebodnik wrote: On (08/01/16 17:56), Martin Babinsky wrote: On 01/08/2016 05:23 PM,

Re: [Freeipa-devel] [PATCH 0088] Don't error when find_base() fails if a base is not required

2016-01-11 Thread Martin Basti
On 14.12.2015 16:22, Nathaniel McCallum wrote: We always have to call find_base() in order to force libldap to open the socket. However, if no base is actually required then there is no reason to error out if find_base() fails. This condition can arise when anonymous binds are disabled.

Re: [Freeipa-devel] [PATCH] Remove des3/arcfour from default enctypes

2016-01-11 Thread Martin Basti
On 23.11.2015 19:49, Simo Sorce wrote: Note, this does not touch the trust code because apparently we use only arcfour there. CCing Alexander to give me a comment about that, probably worth opening a ticket specific to trusts. Otherwise addresses #4740 Simo. Patch works for me, if

Re: [Freeipa-devel] Fix ipa-replica-prepare after DNS check patches

2016-01-11 Thread Martin Basti
On 08.01.2016 12:55, David Kupka wrote: https://fedorahosted.org/freeipa/ticket/5563 ACK Pushed to: master: bc6543efae9bb1bf7c5e792e30b1ea396607f57e ipa-4-3: 5e2abd332b1292504dcdcd41972db888eff7296c -- Manage your subscription for the Freeipa-devel mailing list:

Re: [Freeipa-devel] [PATCH 0124] ipa-csreplica-manage: remove extraneous ldap2 connection

2016-01-11 Thread Martin Basti
On 11.01.2016 12:34, Martin Kosek wrote: On 01/08/2016 06:31 PM, Martin Babinsky wrote: On 01/08/2016 06:17 PM, Martin Basti wrote: On 08.01.2016 17:18, Martin Babinsky wrote: fixes ipa-csreplica-manage del blowing up due https://fedorahosted.org/freeipa/ticket/5583 for master and

Re: [Freeipa-devel] [PATCH 0122-0123] reimplementation of package version comparison code

2016-01-11 Thread Martin Basti
On 11.01.2016 17:58, Jan Cholasta wrote: On 11.1.2016 16:29, Martin Babinsky wrote: On 01/11/2016 02:27 PM, Martin Babinsky wrote: On 01/11/2016 02:01 PM, Jan Cholasta wrote: On 11.1.2016 13:14, Martin Babinsky wrote: On 01/11/2016 07:47 AM, Jan Cholasta wrote: On 8.1.2016 18:30, Lukas