Re: [Freeipa-devel] NTP in FreeIPA

On Thu, Nov 24, 2016 at 9:14 AM, Martin Basti <mba...@redhat.com> wrote: > > > On 24.11.2016 16:11, Gabe Alford wrote: > > On Thu, Nov 24, 2016 at 1:29 AM, Martin Basti <mba...@redhat.com> wrote: > >> >> >> On 24.11.2016 07:06, David Kupka wr

Re: [Freeipa-devel] NTP in FreeIPA

I would say that it is worth keeping in FreeIPA. I know myself and some customers use its functionality by having the clients sync to the IPA servers and have the servers sync to the NTP source. This way if the NTP source ever gets disrupted for long periods of time (which has happened in my

Re: [Freeipa-devel] [PATCH] 0008 Do not allow installation in FIPS mode

On Mon, Jun 27, 2016 at 12:38 AM, Florence Blanc-Renaud wrote: > Hi, > > this fix is a port of Bug 1131570 - Do not allow IdM server/replica/client > installation in a FIPS-140 mode > It prevents installation of FreeIPA if the host is fips-enabled. > >

Re: [Freeipa-devel] [PATCH] 0001 (update 2) provide more information for "ipa cert-revoke -h"

Patrice, Can you please send rebased version of this patch? Thanks, Gabe On Fri, May 6, 2016 at 6:45 AM, Martin Basti <mba...@redhat.com> wrote: > > > On 04.05.2016 14:30, Gabe Alford wrote: > > On Wed, May 4, 2016 at 1:35 AM, Patrice Duc-Jacquet < <patdu...@gmai

Re: [Freeipa-devel] [PATCH 0069] ipa-nis-manage enable: change service name from 'portmap' to 'rpcbind'

On Tue, May 10, 2016 at 6:47 AM, Martin Basti <mba...@redhat.com> wrote: > > > On 10.05.2016 14:42, Gabe Alford wrote: > > On Tue, May 10, 2016 at 6:26 AM, Martin Basti <mba...@redhat.com> wrote: > >> >> >> On 10.05.2016 14:13, Gabe Alford wrot

Re: [Freeipa-devel] [PATCH 0069] ipa-nis-manage enable: change service name from 'portmap' to 'rpcbind'

On Tue, May 10, 2016 at 6:26 AM, Martin Basti <mba...@redhat.com> wrote: > > > On 10.05.2016 14:13, Gabe Alford wrote: > > On Tue, May 10, 2016 at 2:00 AM, Martin Basti <mba...@redhat.com> wrote: > >> >> >> On 04.05.2016 15:14, Gabe Alford wrote:

Re: [Freeipa-devel] [PATCH 0069] ipa-nis-manage enable: change service name from 'portmap' to 'rpcbind'

On Tue, May 10, 2016 at 2:00 AM, Martin Basti <mba...@redhat.com> wrote: > > > On 04.05.2016 15:14, Gabe Alford wrote: > > On Tue, May 3, 2016 at 11:17 PM, Abhijeet Kasurde < <akasu...@redhat.com> > akasu...@redhat.com> wrote: > >> Hi Ga

Re: [Freeipa-devel] [PATCH 0068] Use ipareplica-ca-install.log instead of ipaserver-ca-install.log

Yeah. That makes sense. Let's fix it with the other logger tickets. Gabe On Tue, May 10, 2016 at 5:47 AM, Martin Basti <mba...@redhat.com> wrote: > > > On 03.05.2016 15:41, Gabe Alford wrote: > > Hello, > > Fix for https://fedorahosted.org/freeipa/ticket/5727. Per

Re: [Freeipa-devel] [PATCH 0069] ipa-nis-manage enable: change service name from 'portmap' to 'rpcbind'

t; exception is when a process returns a non-zero exit status. However when running 'ipa-nis-manage enable', an exception is never hit even if portmap is not installed, hence portmap always being enabled. So it seems that if the process is not installed, "CalledProcessError" doesn't catch

Re: [Freeipa-devel] [PATCH] 0001 (update 2) provide more information for "ipa cert-revoke -h"

On Wed, May 4, 2016 at 1:35 AM, Patrice Duc-Jacquet wrote: > Hi everyone > > this is a second update that take into account review feedback. > > In case the proposal fix is K what are the next step to commit this > change. I'm not sure to really understand the process. Thanks

[Freeipa-devel] [PATCH 0069] ipa-nis-manage enable: change service name from 'portmap' to 'rpcbind'

Hello, Fix for https://fedorahosted.org/freeipa/ticket/5857 Thanks, Gabe From 950da9c812a162569379bd9e530977960e9ab7ca Mon Sep 17 00:00:00 2001 From: Gabe Date: Tue, 3 May 2016 21:33:33 -0600 Subject: [PATCH] ipa-nis-manage enable: change service name from 'portmap' to

Re: [Freeipa-devel] [PATCH] 0001 provide more information for "ipa cert-revoke -h"

On Tue, May 3, 2016 at 9:35 AM, Patrice Duc-Jacquet < patrice.duc.jacq...@gmail.com> wrote: > On 05/03/2016 04:41 PM, Rob Crittenden wrote: > > Gabe Alford wrote: >> >>> Hello, >>> >>> Thank you for your patch as well. >>> >>&g

Re: [Freeipa-devel] [PATCH] 0001 provide more information for "ipa cert-revoke -h"

Hello, Thank you for your patch as well. >-doc=_('Reason for revoking the certificate (0-10)'), >+doc=_('Reason for revoking the certificate (0-10). See RFC 5280 (paragraph 5.3.1) for reason details'), Rather than just specifying the RFC with the paragraph to go look up,

[Freeipa-devel] [PATCH 0068] Use ipareplica-ca-install.log instead of ipaserver-ca-install.log

Hello, Fix for https://fedorahosted.org/freeipa/ticket/5727. Per comment #7, this removes ipaserver-ca-install.log and uses ipareplica-ca-install.log. Thanks, Gabe From 9f8cb593c1b207d96693879fbd8717a78421e157 Mon Sep 17 00:00:00 2001 From: Gabe Date: Tue, 3 May 2016

[Freeipa-devel] Possble FreeIPA Trac Malicious Link

Hey all, This is something we may need to watch for. I noticed that a possible malicious link was added to the FreeIPA Trac start page. You can view it here: https://fedorahosted.org/freeipa/wiki/WikiStart?action=diff=22. I changed it back to the original text before the change. I know that the

[Freeipa-devel] [PATCH 0067-0069] Various IPA log fixes

Hello, Attached patches fix the following tickets related to IPA log files: https://fedorahosted.org/freeipa/ticket/5724 https://fedorahosted.org/freeipa/ticket/5726 https://fedorahosted.org/freeipa/ticket/5727 Patch 0067 should be applied first, and patch 0069 applied last. Thanks, Gabe From

Re: [Freeipa-devel] [PATCH] 950 webui: remove moot error from webui build

Ack. Works as expected. Gabe On Wed, Jan 27, 2016 at 7:39 AM, Petr Vobornik wrote: > add module 'libs/d3' to a list of modules provided by third party libraries > > it is provided by d3 library in libs directory > > https://fedorahosted.org/freeipa/ticket/5641 > -- > Petr

Re: [Freeipa-devel] [PATCH 0409] Warn user when ipa *-find reach search limit

On Tue, Jan 26, 2016 at 6:56 AM, Martin Basti wrote: > > > On 26.01.2016 14:55, Petr Spacek wrote: > >> On 26.1.2016 14:02, Martin Basti wrote: >> >>> https://fedorahosted.org/freeipa/ticket/5634 >>> >>> Patch attached. >>> >> It works for me in API, CLI, and Web UI. The

Re: [Freeipa-devel] [PATCH 0409] Warn user when ipa *-find reach search limit

On Tue, Jan 26, 2016 at 7:33 AM, Martin Basti <mba...@redhat.com> wrote: > > > On 26.01.2016 15:17, Petr Spacek wrote: > >> On 26.1.2016 15:06, Martin Basti wrote: >> >>> >>> On 26.01.2016 15:00, Gabe Alford wrote: >>> >>>

Re: [Freeipa-devel] [PATCH] 942 webui: add examples to network address validator error message

LGTM. Gabe On Tue, Dec 22, 2015 at 6:06 AM, Petr Vobornik wrote: > https://fedorahosted.org/freeipa/ticket/5532 > -- > Petr Vobornik > > -- > Manage your subscription for the Freeipa-devel mailing list: > https://www.redhat.com/mailman/listinfo/freeipa-devel > Contribute

Re: [Freeipa-devel] [PATCH 0065] ipa-replica-install prints incorrect error message when replica is already installed

> > > On 09.12.2015 07:08, Jan Cholasta wrote: > >> LGTM >> >> On 8.12.2015 17:04, Gabe Alford wrote: >> >>> Updated patch attached. >>> >>> On Tue, Dec 8, 2015 at 8:27 AM, Martin Basti <mba...@redhat.com >>> <mailto:mba...@

Re: [Freeipa-devel] [PATCH 0065] ipa-replica-install prints incorrect error message when replica is already installed

sti wrote: > >> >> >> On 08.12.2015 16:14, Jan Cholasta wrote: >> >>> On 8.12.2015 16:09, Martin Basti wrote: >>> >>>> >>>> >>>> On 01.12.2015 14:57, Gabe Alford wrote: >>>> >>>>> Sorry guys, I forgot to add a

Re: [Freeipa-devel] [PATCH 0065] ipa-replica-install prints incorrect error message when replica is already installed

Updated patch attached. On Tue, Dec 8, 2015 at 8:27 AM, Martin Basti <mba...@redhat.com> wrote: > > > On 08.12.2015 16:26, Gabe Alford wrote: > > Just to confirm: > > if server is installed: > Let's stop here and not do anything else > > if domain level

Re: [Freeipa-devel] [PATCH 0065]

Bump for review. On Mon, Nov 30, 2015 at 7:31 PM, Gabe Alford <redhatri...@gmail.com> wrote: > Hello, > > Patch fix for the following tickets: > > https://fedorahosted.org/freeipa/ticket/5022 > https://fedorahosted.org/freeipa/ticket/5320 > > Thanks, > >

Re: [Freeipa-devel] [PATCH 0065]

Yup you are right. I meant to bump the other one. > It is on my TODO list. Awesome. On Mon, Dec 7, 2015 at 7:20 AM, Martin Basti <mba...@redhat.com> wrote: > > > On 07.12.2015 14:55, Gabe Alford wrote: > > Bump for review. > > On Mon, Nov 30, 2015 at 7:31 PM, Gabe

Re: [Freeipa-devel] [PATCH 0066] Migrate wget references to curl

My bad. Copy and paste error. Updated patch attached. Thanks, Gabe On Fri, Dec 4, 2015 at 12:17 PM, Martin Basti <mba...@redhat.com> wrote: > > > On 01.12.2015 15:00, Gabe Alford wrote: > > Hello, > > Fix for https://fedorahosted.org/freeipa/ticket/5458 > > Th

[Freeipa-devel] [PATCH 0066] Migrate wget references to curl

Hello, Fix for https://fedorahosted.org/freeipa/ticket/5458 Thanks, Gabe From 490bb5aceb2c1ea3385c15bb85aea5c29c77f70b Mon Sep 17 00:00:00 2001 From: Gabe Date: Tue, 1 Dec 2015 06:45:59 -0700 Subject: [PATCH] Migrate wget references and usage to curl

[Freeipa-devel] [PATCH 0065] ipa-replica-install prints incorrect error message when replica is already installed

Sorry guys, I forgot to add a meaningful subject to this message. Ignore the previous thread start. -- Forwarded message -- From: Gabe Alford <redhatri...@gmail.com> Date: Mon, Nov 30, 2015 at 7:31 PM Subject: [PATCH 0065] To: freeipa-devel <freeipa-devel@redhat.com

[Freeipa-devel] [PATCH 0065]

Hello, Patch fix for the following tickets: https://fedorahosted.org/freeipa/ticket/5022 https://fedorahosted.org/freeipa/ticket/5320 Thanks, Gabe From 3e0a6c556a3402bbd0e15a6f113498aae27e2cf4 Mon Sep 17 00:00:00 2001 From: Gabe Date: Mon, 30 Nov 2015 18:42:14 -0700

Re: [Freeipa-devel] [PATCH 0015] mod_auth_gssapi: Remove ntlmssp support and restrict, mechanism to krb5

Bump for push. May need a rebase. On Wed, Jul 22, 2015 at 7:49 AM, Simo Sorce wrote: > - Original Message - > > From: "Christian Heimes" > > To: "freeipa-devel" > > Sent: Wednesday, July 22, 2015 9:32:59 AM > > Subject:

Re: [Freeipa-devel] [PATCH 0384] ipa-client-automount: Leverage IPAChangeConf to configure the idmapd

Ack. Gabe On Wed, Nov 11, 2015 at 7:22 AM, Tomas Babej wrote: > Hi, > > Simple regexp substitution caused that the domain directive fell under > an inapprorpiate section, if the domain directive was not present. Hence > the idmapd.conf file was not properly parsed. > > Use

[Freeipa-devel] [PATCH 0064] Check if IPA is configured before attempting a winsync migration

Hello, Fix for https://fedorahosted.org/freeipa/ticket/5470 Thanks, Gabe From 9e9b8813d069b3a65e16ef90a602bf35feade9c9 Mon Sep 17 00:00:00 2001 From: Gabe Date: Fri, 20 Nov 2015 07:54:30 -0700 Subject: [PATCH] Check if IPA is configured before attempting a winsync

Re: [Freeipa-devel] [PATCH 0064] Check if IPA is configured before attempting a winsync migration

Thanks. Updated patch attached. Gabe On Fri, Nov 20, 2015 at 10:36 AM, Martin Babinsky <mbabi...@redhat.com> wrote: > On 11/20/2015 04:02 PM, Gabe Alford wrote: > >> Hello, >> >> Fix for https://fedorahosted.org/freeipa/ticket/5470 >> >> Thanks, &g

Re: [Freeipa-devel] [PATCH 0063] ipa-replica-manage del continues when host does not exist in domain level 1

Yeah. That's better. Thanks, Martin. Ack. On Thu, Nov 12, 2015 at 6:02 AM, Martin Basti <mba...@redhat.com> wrote: > > > On 09.11.2015 14:37, Gabe Alford wrote: > > Hello, > > Fix for https://fedorahosted.org/freeipa/ticket/5424 > > thanks, > > Gabe &g

Re: [Freeipa-devel] [PATCH 0064-0065] ipa-dns-install offers IP addresses from resolv.conf as default forwarder

Does this also fix https://fedorahosted.org/freeipa/ticket/3926? On Tue, Nov 10, 2015 at 8:58 AM, Petr Spacek wrote: > Hello, > > Patch 64: > ipa-dns-install offer IP addresses from resolv.conf as default forwarders > > In non-interactive more option --auto-forwarders can be

Re: [Freeipa-devel] [PATCH 0343] Upgrade: enable custodia service during upgrade

Ack. Thanks, Gabe On Tue, Nov 3, 2015 at 11:18 AM, Martin Basti wrote: > https://fedorahosted.org/freeipa/ticket/5429 > > Patch attached. > > -- > Manage your subscription for the Freeipa-devel mailing list: > https://www.redhat.com/mailman/listinfo/freeipa-devel >

[Freeipa-devel] [PATCH 0063] ipa-replica-manage del continues when host does not exist in domain level 1

Hello, Fix for https://fedorahosted.org/freeipa/ticket/5424 thanks, Gabe From f2f0deee5ca743518d97efe4f01cc22c0672e87a Mon Sep 17 00:00:00 2001 From: Gabe Date: Sun, 8 Nov 2015 17:18:17 -0700 Subject: [PATCH] ipa-replica-manage del continues when host does not exist in

[Freeipa-devel] [PATCH 0062] custodia: ipa-upgrade failed on replica

Hello, Fix for https://fedorahosted.org/freeipa/ticket/5374. I could reproduce it as the Custodia update file was missing from the updates Makefile which in turn was not being packaged into the rpms. Thanks, Gabe From 871822779696ece33f36e6940ecc96fc090b7ea2 Mon Sep 17 00:00:00 2001 From: Gabe

Re: [Freeipa-devel] [PATCH 0061] Remove 50-lockout-policy.update file

Can do Alexander. Here is the updated patch. Gabe On Fri, Oct 30, 2015 at 12:56 AM, Alexander Bokovoy <aboko...@redhat.com> wrote: > On Thu, 29 Oct 2015, Gabe Alford wrote: > >> Hello, >> >> Fix for https://fedorahosted.org/freeipa/ticket/5418 >> > AC

Re: [Freeipa-devel] [PATCH 0060] Incomplete ports for IPA AD Trust

spa...@redhat.com> wrote: > On 30.10.2015 11:10, Alexander Bokovoy wrote: > > On Fri, 30 Oct 2015, Petr Spacek wrote: > >> On 30.10.2015 07:54, Alexander Bokovoy wrote: > >>> On Thu, 29 Oct 2015, Gabe Alford wrote: > >>>> Hello, > >>&g

Re: [Freeipa-devel] [PATCH 0058] interactive installer does not ignore leading/trailing whitespace

My bad Martin^2. Here is an updated patch. Gabe On Thu, Oct 29, 2015 at 7:14 AM, Martin Basti <mba...@redhat.com> wrote: > > > On 28.10.2015 02:35, Gabe Alford wrote: > > Hello, > > Fix for https://fedorahosted.org/freeipa/ticket/5355 > > Thanks, > > Gab

[Freeipa-devel] [PATCH 0059] Add Firefox options to ipa-client-install man page

Hello, Fix for https://fedorahosted.org/freeipa/ticket/5375 Thanks, Gabe From 4e0dba6b17f78aa7dd631780cbfe7c4bfa9edea4 Mon Sep 17 00:00:00 2001 From: Gabe Date: Wed, 28 Oct 2015 17:39:40 -0600 Subject: [PATCH] Add Firefox options to ipa-client-install man page - Update

[Freeipa-devel] [PATCH 0060] Incomplete ports for IPA AD Trust

Hello, Fix for https://fedorahosted.org/freeipa/ticket/5414 Thanks, Gabe From 515582d66252521a3cbf6a6a48f33745bd788c86 Mon Sep 17 00:00:00 2001 From: Gabe Date: Thu, 29 Oct 2015 20:28:27 -0600 Subject: [PATCH] Incomplete ports for IPA AD Trust

[Freeipa-devel] [PATCH 0061] Remove 50-lockout-policy.update file

Hello, Fix for https://fedorahosted.org/freeipa/ticket/5418 Thanks, Gabe From 7a9086162717bc414a1d65ea71a2d65729f6fa7e Mon Sep 17 00:00:00 2001 From: Gabe Date: Thu, 29 Oct 2015 20:30:35 -0600 Subject: [PATCH] Remove 50-lockout-policy.update file

[Freeipa-devel] [PATCH 0058] interactive installer does not ignore leading/trailing whitespace

Hello, Fix for https://fedorahosted.org/freeipa/ticket/5355 Thanks, Gabe From 02434fc8467bbc81313d4bda0cf0e9644c151f00 Mon Sep 17 00:00:00 2001 From: Gabe Date: Tue, 27 Oct 2015 19:17:43 -0600 Subject: [PATCH] interactive installer does not ignore leading/trailing

Re: [Freeipa-devel] [PATCH 0057] Warn in no installation found when running ipa-server-install --uninstall

Thanks Martin^2. Updated patched attached. On Wed, Oct 21, 2015 at 2:46 AM, Martin Basti <mba...@redhat.com> wrote: > > > On 20.10.2015 05:17, Gabe Alford wrote: > > Bump for re-review. > > > Hello, > > thank your for your patch, the patch LGTM, but please use

Re: [Freeipa-devel] [PATCH 0057] Warn in no installation found when running ipa-server-install --uninstall

Bump for re-review. On Tue, Oct 13, 2015 at 7:15 AM, Gabe Alford <redhatri...@gmail.com> wrote: > No worries Petr. All a part of the review process. > > I have attached an updated patch that prints only a warning message. > > thanks, > > Gabe > > On Tue, Oct

Re: [Freeipa-devel] [PATCH 0057] Warn in no installation found when running ipa-server-install --uninstall

is > > actually moving us back. > > > > The proper fix would be to *remove* the check from install (as opposed to > > adding it to uninstall), but this requires the install code to be > idempotent, > > and we're not there yet. > > > > I'm OK with making

Re: [Freeipa-devel] [PATCH 0056] Enable nsaccountlock in user.py cli

Thanks Martin, What about adding no_create and no_update flags? Gabe On Tue, Oct 13, 2015 at 9:54 AM, Martin Basti <mba...@redhat.com> wrote: > > > On 09.10.2015 19:17, Gabe Alford wrote: > > Hello, > > This patch enables nsaccountlock in user.py cli. It is very h

Re: [Freeipa-devel] [PATCH 0056] Enable nsaccountlock in user.py cli

Updated patch attached. On Tue, Oct 13, 2015 at 10:59 AM, Martin Basti <mba...@redhat.com> wrote: > > > On 13.10.2015 18:53, Gabe Alford wrote: > > Thanks Martin, > > What about adding no_create and no_update flags? > > Gabe > > Yes, that may work, als

[Freeipa-devel] [PATCH 0058] Remove bind configuration detected question

Hello, Fix for https://fedorahosted.org/freeipa/ticket/5351 Thanks, Gabe From 509ea0b496fd3d2361df58b23ce6ec8fb0ac9b64 Mon Sep 17 00:00:00 2001 From: Gabe Date: Fri, 9 Oct 2015 11:02:06 -0600 Subject: [PATCH] Remove bind configuration detected question

[Freeipa-devel] [PATCH 0057] Warn in no installation found when running ipa-server-install --uninstall

Hello, Fix for https://fedorahosted.org/freeipa/ticket/5341 Thanks, Gabe From 0400bf88987b56d1d3b7a0e665bec525fa81ed02 Mon Sep 17 00:00:00 2001 From: Gabe Date: Fri, 9 Oct 2015 10:48:17 -0600 Subject: [PATCH] Warn if no installation found when running ipa-server-install

[Freeipa-devel] [PATCH 0056] Enable nsaccountlock in user.py cli

Hello, This patch enables nsaccountlock in user.py cli. It is very handy to be able to search and find users with disabled/enabled accounts, etc. That said, I couldn't find why it was no_option in the first place, so I am not 100% sure if it breaks something or the reasoning behind no_option.

Re: [Freeipa-devel] [PATCH 0055] dnssec options missing in ipa-dns-install man page

Odd and done. Updated patch attached. Gabe On Wed, Sep 23, 2015 at 5:20 AM, Martin Basti <mba...@redhat.com> wrote: > > > On 09/22/2015 03:32 PM, Gabe Alford wrote: > >> create mode 100644 >> install/tools/man/freeipa-rga-0055-dnssec-options-missing-in-ipa-dns-ins

Re: [Freeipa-devel] [PATCH 0055] dnssec options missing in ipa-dns-install man page

Thanks. Updated patch attached. On Wed, Sep 23, 2015 at 7:14 AM, Martin Basti <mba...@redhat.com> wrote: > > > On 09/23/2015 03:12 PM, Gabe Alford wrote: > > Odd and done. Updated patch attached. > > Gabe > > On Wed, Sep 23, 2015 at 5:20 AM, Marti

Re: [Freeipa-devel] [PATCH 0055] dnssec options missing in ipa-dns-install man page

Thanks! Added and attached updated patch. Gabe On Tue, Sep 22, 2015 at 1:17 AM, Martin Basti <mba...@redhat.com> wrote: > > > On 09/21/2015 05:37 PM, Gabe Alford wrote: > > Hello, > > Fix for https://fedorahosted.org/freeipa/ticket/5300 > > Thanks, > &g

Re: [Freeipa-devel] [PATH 0053] Inconsistency between ipasearchrecordslimit and --sizelimit

Sorry. I had fixed another mistake and had not read your comment carefully. Updated patch attached. Gabe On Wed, Sep 16, 2015 at 12:23 AM, Jan Cholasta <jchol...@redhat.com> wrote: > On 15.9.2015 14:42, Gabe Alford wrote: > >> Yup. You are right. It was a mistake. Upda

[Freeipa-devel] [PATCH 0054] Update FreeIPA package description

Hello, Fix for https://fedorahosted.org/freeipa/ticket/5284 Thanks, Gabe From 4f46a069b799f2613dd3b7ae42bb64b998bc2c40 Mon Sep 17 00:00:00 2001 From: Gabe Date: Mon, 21 Sep 2015 07:56:36 -0600 Subject: [PATCH] Update FreeIPA package description

[Freeipa-devel] [PATCH 0055] dnssec options missing in ipa-dns-install man page

Hello, Fix for https://fedorahosted.org/freeipa/ticket/5300 Thanks, Gabe From e13330dfdff13101aa625e1651289304bd4d73bf Mon Sep 17 00:00:00 2001 From: Gabe Date: Mon, 21 Sep 2015 09:30:31 -0600 Subject: [PATCH] dnssec options missing in ipa-dns-install man page

Re: [Freeipa-devel] [PATH 0053] Inconsistency between ipasearchrecordslimit and --sizelimit

Yup. You are right. It was a mistake. Updated patch attached. On Tue, Sep 15, 2015 at 12:46 AM, Jan Cholasta <jchol...@redhat.com> wrote: > On 14.9.2015 14:58, Gabe Alford wrote: > >> Sounds good to me. Updated patch attached. >> >> On Mon, Sep 14, 2015

Re: [Freeipa-devel] [PATH 0053] Inconsistency between ipasearchrecordslimit and --sizelimit

ult" would be confusing, as you pointed out. You might say "0 > or -1 > > is unlimited" if you think it's clearer. > > my +1 to "0 or -1 is unlimited" variant > > Petr^2 Spacek > > > > On 10.9.2015 18:39, Gabe Alford wrote: > >> Oo

Re: [Freeipa-devel] [PATH 0053] Inconsistency between ipasearchrecordslimit and --sizelimit

Makes sense. I also changed the doc string to reflect -1 as well. Updated patch attached. Thanks, Gabe On Thu, Sep 10, 2015 at 1:41 AM, Jan Cholasta <jchol...@redhat.com> wrote: > On 4.9.2015 14:43, Gabe Alford wrote: > >> Bump for review. >> >> On Wed, Aug 12

Re: [Freeipa-devel] [PATH 0053] Inconsistency between ipasearchrecordslimit and --sizelimit

e can say "<= 0 is unlimited"? > > On 10.9.2015 16:08, Gabe Alford wrote: > >> Makes sense. I also changed the doc string to reflect -1 as well. >> Updated patch attached. >> >> Thanks, >> >> Gabe >> >> On Thu, Sep 10, 2015 at 1:41 AM,

Re: [Freeipa-devel] [PATH 0053] Inconsistency between ipasearchrecordslimit and --sizelimit

Bump for review. On Wed, Aug 12, 2015 at 9:32 AM, Gabe Alford <redhatri...@gmail.com> wrote: > On Tue, Aug 11, 2015 at 1:34 AM, Jan Cholasta <jchol...@redhat.com> wrote: > >> On 6.8.2015 21:43, Gabe Alford wrote: >> >>> Hello, >>> >&g

Re: [Freeipa-devel] [PATCH 0052] Add Chromium configuration note under Chrome section in ssbrowser

Bump for review On Wed, Jul 29, 2015 at 7:49 AM, Gabe Alford <redhatri...@gmail.com> wrote: > Hello, > > As Chromium and Chrome are configured similarly but are configured in > different /etc directories, this patch adds a note to the Chrome section in > ssbrowser.html sta

Re: [Freeipa-devel] [PATH 0053] Inconsistency between ipasearchrecordslimit and --sizelimit

Alford napsal(a): Updated patch attached. Thanks, Gabe On Thu, Jul 30, 2015 at 7:15 AM, Gabe Alford redhatri...@gmail.com mailto:redhatri...@gmail.com wrote: On Thu, Jul 30, 2015 at 1:32 AM, Jan Cholasta jchol...@redhat.com mailto:jchol...@redhat.com wrote: Dne

Re: [Freeipa-devel] [PATH 0053] Inconsistency between ipasearchrecordslimit and --sizelimit

Updated patch attached. Thanks, Gabe On Thu, Jul 30, 2015 at 7:15 AM, Gabe Alford redhatri...@gmail.com wrote: On Thu, Jul 30, 2015 at 1:32 AM, Jan Cholasta jchol...@redhat.com wrote: Dne 30.7.2015 v 09:23 Jan Cholasta napsal(a): Hi, Dne 29.7.2015 v 17:23 Gabe Alford napsal(a): Hello

Re: [Freeipa-devel] [PATH 0053] Inconsistency between ipasearchrecordslimit and --sizelimit

On Thu, Jul 30, 2015 at 1:32 AM, Jan Cholasta jchol...@redhat.com wrote: Dne 30.7.2015 v 09:23 Jan Cholasta napsal(a): Hi, Dne 29.7.2015 v 17:23 Gabe Alford napsal(a): Hello, Fix for https://fedorahosted.org/freeipa/ticket/4023 Actually, 0 means unlimited for size limit, see http

[Freeipa-devel] [PATH 0053] Inconsistency between ipasearchrecordslimit and --sizelimit

Hello, Fix for https://fedorahosted.org/freeipa/ticket/4023 Thanks, Gabe From cba4b0d90f65be7734a977cb84f96f378e1c91d0 Mon Sep 17 00:00:00 2001 From: Gabe redhatri...@gmail.com Date: Wed, 29 Jul 2015 09:04:32 -0600 Subject: [PATCH] Standardize minvalue for ipasearchrecordlimit and sizelimit

[Freeipa-devel] [PATCH 0052] Add Chromium configuration note under Chrome section in ssbrowser

Hello, As Chromium and Chrome are configured similarly but are configured in different /etc directories, this patch adds a note to the Chrome section in ssbrowser.html stating that. Thanks, Gabe From a7fb316d3cc273531947768e6b93c656a6bad1bb Mon Sep 17 00:00:00 2001 From: Gabe

Re: [Freeipa-devel] [PATCH] Port from python-kerberos library to python-gssapi

Hello, Would you mind formatting your patch following the format described at http://www.freeipa.org/page/Contribute/Patch_Format and attach the patch to this thread? Please attach your patch to the corresponding trac ticket as well. thanks, Gabe On Tue, Jul 21, 2015 at 7:26 AM, Michael

Re: [Freeipa-devel] Finishing the Community Portal

On Wed, Jul 15, 2015 at 2:32 PM, Nathaniel McCallum npmccal...@redhat.com wrote: I definitely see both models finding use. +1 - Original Message - Yeah, user creation requires manual intervention; an admin has to move the user from staging to the main user tree. It could be

Re: [Freeipa-devel] [PATCH 0050] Fix client ca.crt to match the server's cert

, Martin Basti wrote: On 30/06/15 17:31, Gabe Alford wrote: On Tue, Jun 30, 2015 at 8:51 AM, Martin Basti mba...@redhat.com wrote: On 16/06/15 16:58, Gabe Alford wrote: I know you guys are busy. Bump for review. Thanks, Gabe On Tue, May 26, 2015 at 8:16 AM, Gabe Alford redhatri

Re: [Freeipa-devel] [PATCH 0050] Fix client ca.crt to match the server's cert

On Tue, Jun 30, 2015 at 8:51 AM, Martin Basti mba...@redhat.com wrote: On 16/06/15 16:58, Gabe Alford wrote: I know you guys are busy. Bump for review. Thanks, Gabe On Tue, May 26, 2015 at 8:16 AM, Gabe Alford redhatri...@gmail.com wrote: Hello, Fix for https

Re: [Freeipa-devel] [PATCH 0050] Fix client ca.crt to match the server's cert

I know you guys are busy. Bump for review. Thanks, Gabe On Tue, May 26, 2015 at 8:16 AM, Gabe Alford redhatri...@gmail.com wrote: Hello, Fix for https://fedorahosted.org/freeipa/ticket/3809 Thanks, Gabe -- Manage your subscription for the Freeipa-devel mailing list: https

Re: [Freeipa-devel] [PATCH 0051] Clear SSSD caches when uninstalling the client

How should ​ https://www.redhat.com/archives/freeipa-users/2015-June/msg00116.html be handled where the user cleared out the db cache? On Fri, Jun 5, 2015 at 9:08 AM, Jakub Hrozek jhro...@redhat.com wrote: On Fri, Jun 05, 2015 at 05:03:08PM +0200, Martin Basti wrote: On 05/06/15 16:13, Gabe

Re: [Freeipa-devel] [PATCH 0051] Clear SSSD caches when uninstalling the client

Thanks. Updated patch attached. On Fri, Jun 5, 2015 at 9:53 AM, Jakub Hrozek jhro...@redhat.com wrote: On Fri, Jun 05, 2015 at 09:46:05AM -0600, Gabe Alford wrote: How should ​ https://www.redhat.com/archives/freeipa-users/2015-June/msg00116.html be handled where the user cleared out

[Freeipa-devel] [PATCH 0050] Fix client ca.crt to match the server's cert

Hello, Fix for https://fedorahosted.org/freeipa/ticket/3809 Thanks, Gabe From b6a852f82e9335ac04fb5d9b96f31013fb2a3bdb Mon Sep 17 00:00:00 2001 From: Gabe redhatri...@gmail.com Date: Tue, 26 May 2015 08:06:12 -0600 Subject: [PATCH] Fix client ca.crt to match the server's cert

[Freeipa-devel] [PATCH 0048] fix ipa help command output errors

Hello, This should fix https://fedorahosted.org/freeipa/ticket/3584, and as requested in the ticket, this should also fix https://fedorahosted.org/freeipa/ticket/2284 Thanks, Gabe From 3d4e7b60287f30e70455facb0035fa30df913c34 Mon Sep 17 00:00:00 2001 From: Gabe redhatri...@gmail.com Date: Fri,

Re: [Freeipa-devel] [PATCH 0048] fix ipa help command output errors

On Fri, May 22, 2015 at 9:01 AM, Martin Basti mba...@redhat.com wrote: On 22/05/15 16:08, Gabe Alford wrote: Hello, This should fix https://fedorahosted.org/freeipa/ticket/3584, and as requested in the ticket, this should also fix https://fedorahosted.org/freeipa/ticket/2284 Thanks

Re: [Freeipa-devel] [PATCH 0047] Unsaved changes dialog inconsistent

Thanks Petr. I thought I had grepped all that out. Guess I didn't do it from the top of the tree. Updated patch attached. On Tue, May 5, 2015 at 5:15 AM, Petr Vobornik pvobo...@redhat.com wrote: On 04/30/2015 07:43 PM, Gabe Alford wrote: Thanks Kyle and Petr. Update patch attached

Re: [Freeipa-devel] [PATCH 0047] Unsaved changes dialog inconsistent

Thanks Kyle and Petr. Update patch attached. On Wed, Apr 29, 2015 at 7:59 AM, Kyle Baker kyba...@redhat.com wrote: - Original Message - On 04/27/2015 03:03 PM, Gabe Alford wrote: Hello, Fix for https://fedorahosted.org/freeipa/ticket/4926 Thanks, Gabe

[Freeipa-devel] [PATCH 0046] Remove unneeded --ip-address option in ipa-adtrust-install

Hello, Fix for https://fedorahosted.org/freeipa/ticket/4575 Thanks, Gabe From 6c9ac52a18df8bbce33db09c16494159258ff104 Mon Sep 17 00:00:00 2001 From: Gabe redhatri...@gmail.com Date: Wed, 15 Apr 2015 09:18:58 -0600 Subject: [PATCH] Remove unneeded ip-address option in ipa-adtrust-install

[Freeipa-devel] [PATCH 0047] Unsaved changes dialog inconsistent

Hello, Fix for https://fedorahosted.org/freeipa/ticket/4926 Thanks, Gabe From 053f7dd53e9d1acd6dec4688ab515f138d832ef4 Mon Sep 17 00:00:00 2001 From: Gabe redhatri...@gmail.com Date: Mon, 27 Apr 2015 06:49:25 -0600 Subject: [PATCH] Unsaved changes dialog internally inconsistent - Change Update

Re: [Freeipa-devel] [PATCH 0082] Update python-yubico dependency version

Ack. Thanks, Gabe On Wed, Apr 22, 2015 at 1:45 PM, Nathaniel McCallum npmccal...@redhat.com wrote: On Tue, 2015-03-31 at 10:25 -0400, Nathaniel McCallum wrote: This change enables support for all current YubiKey hardware. Can someone please review this patch? Nathaniel -- Manage your

Re: [Freeipa-devel] [PATCH 001] Remove recommendation from ipa-adtrust-install

Ack from me. Thanks, Gabe On Fri, Apr 10, 2015 at 7:35 AM, Thorsten Scherf tsch...@redhat.com wrote: -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

Re: [Freeipa-devel] [PATCH 0045] Add message for skipping NTP configuration during client install

Stupid me. I realized that chronyd was running which messed up my testing and such (sorry about that). New patch attached that implements 'else' On Tue, Apr 7, 2015 at 2:32 AM, Martin Basti mba...@redhat.com wrote: On 02/04/15 17:47, Gabe Alford wrote: On Thu, Apr 2, 2015 at 8:59 AM, Martin

Re: [Freeipa-devel] [PATCH 0045] Add message for skipping NTP configuration during client install

On Thu, Apr 2, 2015 at 8:59 AM, Martin Basti mba...@redhat.com wrote: On 30/03/15 15:25, Gabe Alford wrote: Hello, With the merging of ticket 4842 https://fedorahosted.org/freeipa/ticket/4842, I believe that half of ticket 3092 https://fedorahosted.org/freeipa/ticket/3092 has been done

[Freeipa-devel] [PATCH 0045] Add message for skipping NTP configuration during client install

Hello, With the merging of ticket 4842 https://fedorahosted.org/freeipa/ticket/4842, I believe that half of ticket 3092 https://fedorahosted.org/freeipa/ticket/3092 has been done. This patch just adds a message that says that NTP configuration was skipped which I believe should finish 3092

Re: [Freeipa-devel] [PATCH 0044] Man pages: ipa-replica-prepare can only be created on first master

On Thu, Mar 12, 2015 at 8:26 AM, Martin Kosek mko...@redhat.com wrote: On 03/12/2015 02:37 PM, Gabe Alford wrote: Hello, Fix for https://fedorahosted.org/freeipa/ticket/4944. Since there seems to be plenty of time, I added it to the freeipa-4-1 branch. Thanks Gabe! I would still

Re: [Freeipa-devel] [PATCH 0044] Man pages: ipa-replica-prepare can only be created on first master

Limitations is fine with me. Updated patch attached. On Fri, Mar 13, 2015 at 7:17 AM, Martin Kosek mko...@redhat.com wrote: On 03/13/2015 02:13 PM, Gabe Alford wrote: On Thu, Mar 12, 2015 at 8:26 AM, Martin Kosek mko...@redhat.com mailto:mko...@redhat.com wrote: On 03/12/2015 02:37 PM

[Freeipa-devel] [PATCH 0044] Man pages: ipa-replica-prepare can only be created on first master

Hello, Fix for https://fedorahosted.org/freeipa/ticket/4944. Since there seems to be plenty of time, I added it to the freeipa-4-1 branch. Thanks, Gabe From 0887f4f4595e62ce4d24f1b031418e47da7586fb Mon Sep 17 00:00:00 2001 From: Gabe redhatri...@gmail.com Date: Thu, 12 Mar 2015 07:26:34 -0600

Re: [Freeipa-devel] Time-based account policies

On Tue, Mar 10, 2015 at 9:51 AM, Stanislav Láznička s...@seznam.cz wrote: On 03/10/2015 04:06 PM, Jakub Hrozek wrote: On Tue, Mar 10, 2015 at 03:47:10PM +0100, Martin Kosek wrote: This is where importing iCal is helpful because it allows you to outsource the task of creating such event to

Re: [Freeipa-devel] [PATCH 0039] Add test case for unsupported arg for ipa-advise

the same level of conciseness than with the separate test classes. Good luck! HTH, Tomas On 02/25/2015 03:52 PM, Gabe Alford wrote: No worries about the delay. Thanks for taking the time! Updated patch attached. Thanks, Gabe On Tue, Feb 24, 2015 at 11:03 AM, Tomas Babej tba

Re: [Freeipa-devel] [PATCH 0039] Add test case for unsupported arg for ipa-advise

No worries about the delay. Thanks for taking the time! Updated patch attached. Thanks, Gabe On Tue, Feb 24, 2015 at 11:03 AM, Tomas Babej tba...@redhat.com wrote: Hi Gabe, sorry for the delay. Here comes the review! 1.) All the tests fail, since the IPA master is not installed at all:

[Freeipa-devel] [PATCH 0042] ipa-replica-prepare should document ipv6 options

Hello, Fix for https://fedorahosted.org/freeipa/ticket/4877. I just took what was in the ticket. Thanks, Gabe freeipa-rga-0042-ipa-replica-prepare-should-document-ipv6-options.patch Description: Binary data ___ Freeipa-devel mailing list

Re: [Freeipa-devel] [PATCH 0039] Add test case for unsupported arg for ipa-advise

Hello, I was wondering if I could get a review of this patch. Thanks, Gabe On Thursday, January 29, 2015, Gabe Alford redhatri...@gmail.com wrote: Hello, Here is a patch for https://fedorahosted.org/freeipa/ticket/4029 I added test cases for valid and invalid advice

Re: [Freeipa-devel] [PATCH 0041] permission-add does not prompt for ipapermright option in interactive mode

: your name+email is missing in commit message, is it on purpose? And time wasn't correct in previous patch. On 11/02/15 15:06, Gabe Alford wrote: Good point. I personally was not aware of all that the API can do. Thanks Martin^2! Updated patch attached. On Tue, Feb 10, 2015 at 11:42 AM

Re: [Freeipa-devel] [PATCH 0041] permission-add does not prompt for ipapermright option in interactive mode

Good point. I personally was not aware of all that the API can do. Thanks Martin^2! Updated patch attached. On Tue, Feb 10, 2015 at 11:42 AM, Martin Basti mba...@redhat.com wrote: On 29/01/15 17:10, Gabe Alford wrote: Hello, Fix for https://fedorahosted.org/freeipa/ticket/4872 Thanks

[Freeipa-devel] [PATCH 0042] Typos in ipa-rmkeytab

Hello, Fix for https://fedorahosted.org/freeipa/ticket/4890 Thanks, Gabe From 6c760974951325419414ef4d474293c1af089004 Mon Sep 17 00:00:00 2001 From: Gabe redhatri...@gmail.com Date: Mon, 9 Feb 2015 20:44:31 -0700 Subject: [PATCH] Typos in ipa-rmkeytab options help and man page

  1   2   >