[Freeipa-devel] [PATCH] 0008 Do not allow installation in FIPS mode

2016-06-26 Thread Florence Blanc-Renaud
Hi, this fix is a port of Bug 1131570 - Do not allow IdM server/replica/client installation in a FIPS-140 mode It prevents installation of FreeIPA if the host is fips-enabled. https://fedorahosted.org/freeipa/ticket/5761 >From afecbb3d228cf1d6cee59da53bf7a803f030d0b1 Mon Sep 17 00:00:00 2001 F

[Freeipa-devel] [PATCH 0544] ipa-rmkeytab, ipa-join: dont fail if gettext cannot be initialized

2016-06-26 Thread Martin Basti
https://fedorahosted.org/freeipa/ticket/5973 Patch attached. From 37e296f12ed10edb12a3c34f62c0397e37fa3bda Mon Sep 17 00:00:00 2001 From: Martin Basti Date: Fri, 24 Jun 2016 17:34:02 +0200 Subject: [PATCH] ipa-rmkeytab, ipa-join: don't fail if init of gettext failed If locale setting was incor

[Freeipa-devel] [PATCH] 0078 Fix IssuerDN presence check in cert search result

2016-06-26 Thread Fraser Tweedale
Attached patch fixes a problem with check for IssuerDN in Dogtag cert search results (found by Coverity; thanks to mbasti for brining to my attention). Cheers, Fraser From 6865c3fd0a2be19f247b0dabafc3688587af1b97 Mon Sep 17 00:00:00 2001 From: Fraser Tweedale Date: Mon, 27 Jun 2016 16:26:24 +1000

[Freeipa-devel] DNS Locations: fix an issue found by coverity

2016-06-26 Thread Martin Basti
Shame, shame, shame on me. I forgot how to python when I was writing that originally. Patch attached. https://fedorahosted.org/freeipa/ticket/2008 From fc0ba11ce71c5585874745764dbdcda4fa615e8c Mon Sep 17 00:00:00 2001 From: Martin Basti Date: Mon, 27 Jun 2016 08:23:59 +0200 Subject: [PATCH]

Re: [Freeipa-devel] [PATCH 0165] IPA API: Do not force setting krbCanonicalName on newly created entries

2016-06-26 Thread Martin Babinsky
On 06/24/2016 04:07 PM, Martin Babinsky wrote: This patch reverts commits 705f66f7490c64de1adc129221b31927616c485 and 06d945a04607dc36e25af78688b4295420489fb9 responsible for https://fedorahosted.org/freeipa/ticket/5996 This should unblock replica promotion. self-NACK, disregard this patch, i

Re: [Freeipa-devel] [patch 0038-0040] Sub CA test patches

2016-06-26 Thread Fraser Tweedale
On Fri, Jun 24, 2016 at 12:08:24PM +0200, Milan Kubík wrote: > On 06/24/2016 03:42 AM, Fraser Tweedale wrote: > > On Tue, Jun 21, 2016 at 05:01:35PM +0200, Milan Kubík wrote: > > > Hi Fraser and list, > > > > > > I have made changes to the test plan on the wiki [1] according to the > > > informati