Re: [Freeipa-devel] [PATCH 0093] Enable service authentication indicator management

2016-05-30 Thread Nathaniel McCallum
On Mon, 2016-05-30 at 19:08 +0300, Alexander Bokovoy wrote: > On Mon, 30 May 2016, Petr Vobornik wrote: > > On 05/27/2016 06:00 PM, Nathaniel McCallum wrote: > > > Pavel, since we made the change here from a StrEnum to a Str, we > > > need > > > to update the UI patch accordingly. > > > > How

Re: [Freeipa-devel] [PATCH 0110] DNS: Warn if forwarding policy conflicts with automatic empty zone

2016-05-30 Thread Martin Basti
On 27.05.2016 14:13, Petr Spacek wrote: On 25.5.2016 12:30, Martin Basti wrote: On 04.05.2016 10:43, Petr Spacek wrote: Hello, DNS: Warn if forwarding policy conflicts with automatic empty zones Forwarding policy "first" or "none" may conflicts with some automatic empty zones. Queries for

Re: [Freeipa-devel] [PATCH 0123-132] DNS upgrade: change forwarding policy to "only" if private IPs are used

2016-05-30 Thread Martin Basti
On 30.05.2016 12:49, Petr Spacek wrote: On 29.5.2016 14:45, Martin Basti wrote: On 27.05.2016 14:12, Petr Spacek wrote: On 25.5.2016 12:50, Martin Basti wrote: On 20.05.2016 12:19, Petr Spacek wrote: On 11.5.2016 12:08, Martin Basti wrote: On 03.05.2016 14:59, Petr Spacek wrote: Hello,

[Freeipa-devel] [PATCH] 0004 Report missing certificate in external trust chain

2016-05-30 Thread Florence Blanc-Renaud
Hi all, this patch adds in the error message the missing certificate that caused i/pa-server-install --external-cert-file=.../ to fail. https://fedorahosted.org/freeipa/ticket/5792 -- Florence Blanc-Renaud Identity Management Team, Red Hat From 5500fa36a7e61d3d86ee4550029c09fef917ce95 Mon

[Freeipa-devel] [PATCH 0149-0152] Server Roles: user-facing part

2016-05-30 Thread Martin Babinsky
These patches implement the usable part of Server Roles design. There might be some discrepancies between the design and actual implementation, I was head first in hacking and was not very disciplined in keeping the design up to date. I will fix this ASAP.

Re: [Freeipa-devel] [PATCH 0146-0147] Server Roles: basic infrastructure

2016-05-30 Thread Martin Babinsky
On 05/27/2016 05:30 PM, Martin Babinsky wrote: On 05/19/2016 04:59 PM, Martin Babinsky wrote: Patch 0146 implements lower-lever infrastructure for querying server roles/attributes Patch 0147 are some basic tests slapped together for the `serverroles` backend to ensure that it works as

Re: [Freeipa-devel] [PATCH] 0002 Add the culprit line when a configuration file has an incorrect format

2016-05-30 Thread Florence Blanc-Renaud
Hi Martin, thanks for the review and the suggestion. Please find the updated patch attached. Flo. On 05/30/2016 11:00 AM, Martin Basti wrote: On 27.05.2016 11:35, Florence Blanc-Renaud wrote: Hi all, this patch adds information to the output of ipa-client-install when it fails due to

Re: [Freeipa-devel] [PATCH 0093] Enable service authentication indicator management

2016-05-30 Thread Alexander Bokovoy
On Mon, 30 May 2016, Petr Vobornik wrote: On 05/27/2016 06:00 PM, Nathaniel McCallum wrote: Pavel, since we made the change here from a StrEnum to a Str, we need to update the UI patch accordingly. How should admin know what to write there intuitively? Shouldn't Web UI or CLI advertise the

Re: [Freeipa-devel] [PATCH 0013] Updated ipa-server-install man page for domain-level attribute

2016-05-30 Thread Petr Vobornik
On 05/20/2016 01:56 PM, Petr Spacek wrote: > On 20.5.2016 13:21, Abhijeet Kasurde wrote: >> Hi All, ... > > Thanks but NACK. > > Domain level is not about one server. It defines that all servers in one IPA > topology behave in some particular way. > There is a proposal in triage:

Re: [Freeipa-devel] [PATCH 0093] Enable service authentication indicator management

2016-05-30 Thread Petr Vobornik
On 05/27/2016 06:00 PM, Nathaniel McCallum wrote: > Pavel, since we made the change here from a StrEnum to a Str, we need > to update the UI patch accordingly. How should admin know what to write there intuitively? Shouldn't Web UI or CLI advertise the indicators supported by IPA? E.g. CLI in

Re: [Freeipa-devel] [PATCHES] 0789-0796 Python 3 fixes for the server part

2016-05-30 Thread Martin Basti
On 20.05.2016 17:04, Petr Viktorin wrote: Hello, Here are some more Python3 patches. Most are pretty routine, but pay special attention to the first and last patch. With these patches, running the in-tree test suite gives me the same errors in Python 2 and Python 3, except: - test_install –

Re: [Freeipa-devel] [PATCH 0036] Increased mod_wsgi socket-timeout

2016-05-30 Thread Petr Spacek
On 28.5.2016 15:59, Martin Basti wrote: > > > On 27.05.2016 14:52, Stanislav Laznicka wrote: >> https://fedorahosted.org/freeipa/ticket/5833 >> >> >> > Is possible to remove timeout completely as it used to be before? > > Even if this timeout is exceeded, command continue in execution and it

Re: [Freeipa-devel] [PATCH 0033] Fix CA being presented as running even if it weren't

2016-05-30 Thread Jan Cholasta
On 30.5.2016 12:36, Martin Basti wrote: On 26.05.2016 19:31, Stanislav Laznicka wrote: Self NACK. I should not post patches when tired, sorry. Minor fix is attached. On 05/26/2016 07:21 PM, Stanislav Laznicka wrote: Hello, Please, see the attached patch. Fixes

Re: [Freeipa-devel] [PATCH 0123-132] DNS upgrade: change forwarding policy to "only" if private IPs are used

2016-05-30 Thread Petr Spacek
On 29.5.2016 14:45, Martin Basti wrote: > > > On 27.05.2016 14:12, Petr Spacek wrote: >> On 25.5.2016 12:50, Martin Basti wrote: >>> >>> On 20.05.2016 12:19, Petr Spacek wrote: On 11.5.2016 12:08, Martin Basti wrote: > On 03.05.2016 14:59, Petr Spacek wrote: >> Hello, >> >>

Re: [Freeipa-devel] [PATCH 0033] Fix CA being presented as running even if it weren't

2016-05-30 Thread Martin Basti
On 26.05.2016 19:31, Stanislav Laznicka wrote: Self NACK. I should not post patches when tired, sorry. Minor fix is attached. On 05/26/2016 07:21 PM, Stanislav Laznicka wrote: Hello, Please, see the attached patch. Fixes https://fedorahosted.org/freeipa/ticket/5898 Standa

Re: [Freeipa-devel] [PATCH] 0002 Add the culprit line when a configuration file has an incorrect format

2016-05-30 Thread Martin Basti
On 27.05.2016 11:35, Florence Blanc-Renaud wrote: Hi all, this patch adds information to the output of ipa-client-install when it fails due to invalid format in a configuration file: ipa-client-install failing with SyntaxError: Syntax Error: Unknown line format Fixes:

Re: [Freeipa-devel] [WIP] Thin client

2016-05-30 Thread Pavel Vomacka
On 05/30/2016 08:28 AM, Jan Cholasta wrote: On 28.5.2016 18:33, Pavel Vomacka wrote: On 05/27/2016 10:33 AM, Petr Spacek wrote: On 27.5.2016 09:26, Martin Basti wrote: On 27.05.2016 07:49, Jan Cholasta wrote: On 26.5.2016 18:43, Martin Basti wrote: On 26.05.2016 11:21, Martin Basti

Re: [Freeipa-devel] [WIP] Thin client

2016-05-30 Thread Jan Cholasta
On 28.5.2016 18:33, Pavel Vomacka wrote: On 05/27/2016 10:33 AM, Petr Spacek wrote: On 27.5.2016 09:26, Martin Basti wrote: On 27.05.2016 07:49, Jan Cholasta wrote: On 26.5.2016 18:43, Martin Basti wrote: On 26.05.2016 11:21, Martin Basti wrote: On 26.05.2016 07:15, Jan Cholasta wrote: