On 10/27/2015 04:23 PM, Martin Babinsky wrote:
On 10/22/2015 01:06 PM, Petr Vobornik wrote:
On 10/16/2015 06:41 PM, Endi Sukma Dewata wrote:
On 10/15/2015 9:54 AM, Simo Sorce wrote:
3) ipa-ca-install fails with:
Traceback (most recent call last):
File
On 22.10.2015 13:30, Martin Babinsky wrote:
On 10/21/2015 09:27 PM, Simo Sorce wrote:
On 21/10/15 15:24, Simo Sorce wrote:
On 21/10/15 11:46, Martin Babinsky wrote:
On 10/20/2015 07:24 PM, Simo Sorce wrote:
On 20/10/15 06:32, Martin Babinsky wrote:
On 10/15/2015 08:14 PM, Simo Sorce
On 10/22/2015 01:30 PM, Martin Babinsky wrote:
On 10/21/2015 09:27 PM, Simo Sorce wrote:
snip
Thanks, ACK for patch 551-6.
I will continue the review of patch 552 when we'll have a dogtag build
with fix for https://fedorahosted.org/pki/ticket/1580 in copr repo.
Martin, could you try
On 10/16/2015 06:41 PM, Endi Sukma Dewata wrote:
On 10/15/2015 9:54 AM, Simo Sorce wrote:
3) ipa-ca-install fails with:
Traceback (most recent call last):
File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py",
line 445, in start_creation
run_step(full_msg, method)
On 10/22/2015 02:01 PM, Petr Vobornik wrote:
On 10/22/2015 01:30 PM, Martin Babinsky wrote:
On 10/21/2015 09:27 PM, Simo Sorce wrote:
snip
Thanks, ACK for patch 551-6.
I will continue the review of patch 552 when we'll have a dogtag build
with fix for
On 10/15/2015 08:14 PM, Simo Sorce wrote:
On 15/10/15 11:39, Martin Basti wrote:
Without this patch the ipa-ca-install is broken in current master.
Unexpected error - see /var/log/ipareplica-ca-install.log for details:
AttributeError: Values instance has no attribute 'promote'
Should be fixed
On 22.10.2015 17:51, Martin Babinsky wrote:
On 10/15/2015 08:14 PM, Simo Sorce wrote:
On 15/10/15 11:39, Martin Basti wrote:
Without this patch the ipa-ca-install is broken in current master.
Unexpected error - see /var/log/ipareplica-ca-install.log for details:
AttributeError: Values
On 22/10/15 11:54, Martin Basti wrote:
On 22.10.2015 17:51, Martin Babinsky wrote:
On 10/15/2015 08:14 PM, Simo Sorce wrote:
On 15/10/15 11:39, Martin Basti wrote:
Without this patch the ipa-ca-install is broken in current master.
Unexpected error - see /var/log/ipareplica-ca-install.log
On 10/20/2015 07:24 PM, Simo Sorce wrote:
On 20/10/15 06:32, Martin Babinsky wrote:
On 10/15/2015 08:14 PM, Simo Sorce wrote:
On 15/10/15 11:39, Martin Basti wrote:
Without this patch the ipa-ca-install is broken in current master.
Unexpected error - see /var/log/ipareplica-ca-install.log for
On 21/10/15 11:46, Martin Babinsky wrote:
On 10/20/2015 07:24 PM, Simo Sorce wrote:
On 20/10/15 06:32, Martin Babinsky wrote:
On 10/15/2015 08:14 PM, Simo Sorce wrote:
On 15/10/15 11:39, Martin Basti wrote:
Without this patch the ipa-ca-install is broken in current master.
Unexpected error -
On 21/10/15 15:24, Simo Sorce wrote:
On 21/10/15 11:46, Martin Babinsky wrote:
On 10/20/2015 07:24 PM, Simo Sorce wrote:
On 20/10/15 06:32, Martin Babinsky wrote:
On 10/15/2015 08:14 PM, Simo Sorce wrote:
On 15/10/15 11:39, Martin Basti wrote:
Without this patch the ipa-ca-install is broken
On 10/15/2015 08:14 PM, Simo Sorce wrote:
On 15/10/15 11:39, Martin Basti wrote:
Without this patch the ipa-ca-install is broken in current master.
Unexpected error - see /var/log/ipareplica-ca-install.log for details:
AttributeError: Values instance has no attribute 'promote'
Should be fixed
On 20/10/15 06:32, Martin Babinsky wrote:
On 10/15/2015 08:14 PM, Simo Sorce wrote:
On 15/10/15 11:39, Martin Basti wrote:
Without this patch the ipa-ca-install is broken in current master.
Unexpected error - see /var/log/ipareplica-ca-install.log for details:
AttributeError: Values instance
On 20/10/15 06:32, Martin Babinsky wrote:
On 10/15/2015 08:14 PM, Simo Sorce wrote:
On 15/10/15 11:39, Martin Basti wrote:
Without this patch the ipa-ca-install is broken in current master.
Unexpected error - see /var/log/ipareplica-ca-install.log for details:
AttributeError: Values instance
On 10/15/2015 9:54 AM, Simo Sorce wrote:
3) ipa-ca-install fails with:
Traceback (most recent call last):
File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py",
line 445, in start_creation
run_step(full_msg, method)
File
On 15.10.2015 12:00, Petr Vobornik wrote:
On 10/15/2015 10:45 AM, Jan Cholasta wrote:
On 23.9.2015 19:47, Simo Sorce wrote:
On Wed, 2015-09-23 at 08:35 +0200, Jan Cholasta wrote:
What I mean is that installing a replica using an already existing
replica file should be prevented at level 1 as
Commenting only on the 2 remaining patches that need to be committed,
inline.
On 15/10/15 04:45, Jan Cholasta wrote:
On 23.9.2015 19:47, Simo Sorce wrote:
"Allow ipa-ca-install to use the new promotion code":
1) The --replica option was not removed:
Will do, thanks for spotting.
On
On 15.10.2015 14:29, Jan Cholasta wrote:
On 15.10.2015 12:00, Petr Vobornik wrote:
On 10/15/2015 10:45 AM, Jan Cholasta wrote:
On 23.9.2015 19:47, Simo Sorce wrote:
On Wed, 2015-09-23 at 08:35 +0200, Jan Cholasta wrote:
What I mean is that installing a replica using an already existing
On 15.10.2015 14:29, Jan Cholasta wrote:
On 15.10.2015 12:00, Petr Vobornik wrote:
On 10/15/2015 10:45 AM, Jan Cholasta wrote:
On 23.9.2015 19:47, Simo Sorce wrote:
On Wed, 2015-09-23 at 08:35 +0200, Jan Cholasta wrote:
What I mean is that installing a replica using an already existing
On 15/10/15 11:39, Martin Basti wrote:
Without this patch the ipa-ca-install is broken in current master.
Unexpected error - see /var/log/ipareplica-ca-install.log for details:
AttributeError: Values instance has no attribute 'promote'
Should be fixed with the attached patches.
--
Simo Sorce
On 1.10.2015 15:22, Simo Sorce wrote:
On 01/10/15 07:42, Jan Cholasta wrote:
Hi,
I have just imported python-jwcrypto, custodia and pki-core-10.2.7 into
mkosek/freeipa-master as well, to (hopefully) make things easier.
Simo, custodia failed to build F22, any idea why? See
On 13/10/15 03:40, Jan Cholasta wrote:
On 1.10.2015 15:22, Simo Sorce wrote:
On 01/10/15 07:42, Jan Cholasta wrote:
Hi,
I have just imported python-jwcrypto, custodia and pki-core-10.2.7 into
mkosek/freeipa-master as well, to (hopefully) make things easier.
Simo, custodia failed to build
On 10/5/2015 9:33 AM, Endi Sukma Dewata wrote:
On 10/5/2015 8:47 AM, Simo Sorce wrote:
2. The second attempt after re-enrolling client resulted in the error of
CA installation:
This is due to the known bug with authentication in Dogtag. Endy fixed
it upstream.
Endy,
do you know when the bug
On Mon, Oct 05, 2015 at 09:47:14AM -0400, Simo Sorce wrote:
> On 05/10/15 09:42, Oleg Fayans wrote:
> >1. At one point ipa-replica-install on a configured client has thrown
> >the following error:
> >
> >Configuring ipa-custodia
> > [1/5]: Generating ipa-custodia config file
> > [2/5]:
On Tue, Oct 06, 2015 at 12:26:14PM -0400, Simo Sorce wrote:
>
> Was custodia running ?
> Can you check its log file ?
/etc/ipa/custodia/custodia.conf suggests
auditlog = /var/log/ipa-custodia.audit.log
but that file does not exist at all. So either it was not running,
or it failed to
On 06/10/15 11:06, Jan Pazdziora wrote:
On Mon, Oct 05, 2015 at 09:47:14AM -0400, Simo Sorce wrote:
On 05/10/15 09:42, Oleg Fayans wrote:
1. At one point ipa-replica-install on a configured client has thrown
the following error:
Configuring ipa-custodia
[1/5]: Generating ipa-custodia
On Thu, Oct 01, 2015 at 04:33:28PM +0200, Oleg Fayans wrote:
>
> 1.
> Having PTR sync enabled in global DNS configuration and installing client
> with --enable-dns-updates option, ipa master still does not create a PTR
> record for the client machine. As a result, ipa-repolica-install throws the
On 10/5/2015 8:47 AM, Simo Sorce wrote:
2. The second attempt after re-enrolling client resulted in the error of
CA installation:
Starting replication, please wait until this has completed.
Update in progress, 7 seconds elapsed
Update succeeded
[4/24]: creating installation admin user
On 05/10/15 09:42, Oleg Fayans wrote:
Hi Jan, Simo
On 10/05/2015 02:15 PM, Jan Pazdziora wrote:
On Thu, Oct 01, 2015 at 04:33:28PM +0200, Oleg Fayans wrote:
1.
Having PTR sync enabled in global DNS configuration and installing
client
with --enable-dns-updates option, ipa master still does
Hi Jan, Simo
On 10/05/2015 02:15 PM, Jan Pazdziora wrote:
On Thu, Oct 01, 2015 at 04:33:28PM +0200, Oleg Fayans wrote:
1.
Having PTR sync enabled in global DNS configuration and installing client
with --enable-dns-updates option, ipa master still does not create a PTR
record for the client
Hi Ludwig,
Thank you! vakwetu/dogtag_10.2.7_test_builds was the bit that was missing
On 10/01/2015 12:29 PM, Ludwig Krispenz wrote:
On 10/01/2015 12:06 PM, Oleg Fayans wrote:
Hi Simo,
I was able to build the packages based on your git repo. However, my
attempt to install the resulting bits
Hi Simo,
I was able to build the packages based on your git repo. However, my
attempt to install the resulting bits failed due to lack of dependencies:
pki-ca >= 10.2.7 is needed by
freeipa-server-4.2.90.201510010815GITb726fa9-0.fc22.x86_64
pki-kra >= 10.2.7 is needed by
On 10/01/2015 12:06 PM, Oleg Fayans wrote:
Hi Simo,
I was able to build the packages based on your git repo. However, my
attempt to install the resulting bits failed due to lack of dependencies:
pki-ca >= 10.2.7 is needed by
freeipa-server-4.2.90.201510010815GITb726fa9-0.fc22.x86_64
On 01/10/15 07:42, Jan Cholasta wrote:
Hi,
I have just imported python-jwcrypto, custodia and pki-core-10.2.7 into
mkosek/freeipa-master as well, to (hopefully) make things easier.
Simo, custodia failed to build F22, any idea why? See
First glance on the packages built from today's tree reveal the
following problems:
1.
Having PTR sync enabled in global DNS configuration and installing
client with --enable-dns-updates option, ipa master still does not
create a PTR record for the client machine. As a result,
On 01/10/15 10:33, Oleg Fayans wrote:
First glance on the packages built from today's tree reveal the
following problems:
1.
Having PTR sync enabled in global DNS configuration and installing
client with --enable-dns-updates option, ipa master still does not
create a PTR record for the client
On 24.9.2015 15:10, Simo Sorce wrote:
On 24/09/15 04:43, Martin Basti wrote:
On 09/24/2015 02:25 AM, Martin Basti wrote:
On 09/22/2015 10:45 AM, Jan Cholasta wrote:
Hi,
On 9.9.2015 20:25, Simo Sorce wrote:
On Wed, 2015-08-26 at 17:27 -0400, Simo Sorce wrote:
This patchset implements
On 30/09/15 08:32, Jan Cholasta wrote:
On 24.9.2015 15:10, Simo Sorce wrote:
On 24/09/15 04:43, Martin Basti wrote:
On 09/24/2015 02:25 AM, Martin Basti wrote:
On 09/22/2015 10:45 AM, Jan Cholasta wrote:
Hi,
On 9.9.2015 20:25, Simo Sorce wrote:
On Wed, 2015-08-26 at 17:27 -0400, Simo
On 30.9.2015 15:15, Simo Sorce wrote:
On 30/09/15 08:32, Jan Cholasta wrote:
On 24.9.2015 15:10, Simo Sorce wrote:
On 24/09/15 04:43, Martin Basti wrote:
On 09/24/2015 02:25 AM, Martin Basti wrote:
On 09/22/2015 10:45 AM, Jan Cholasta wrote:
Hi,
On 9.9.2015 20:25, Simo Sorce wrote:
On
On Tue, Sep 29, 2015 at 03:31:23PM -0400, Simo Sorce wrote:
> On 29/09/15 14:56, Oleg Fayans wrote:
> >
> >
> >On 09/29/2015 06:47 PM, Simo Sorce wrote:
> >>On 29/09/15 11:50, Oleg Fayans wrote:
> >>>Hi Simo,
> >>>
> >>>It seems to have resolved the initial issue, but now the build fails due
>
On Thu, Sep 24, 2015 at 09:10:30AM -0400, Simo Sorce wrote:
>
> I think the problem is that the patch was pushed prematurely.
> The option should become unused once the other patches in this patchset are
> applied, that is why that patch was not on top of the list but rather down
> close to the
On 29/09/15 09:28, Jan Pazdziora wrote:
On Thu, Sep 24, 2015 at 09:10:30AM -0400, Simo Sorce wrote:
I think the problem is that the patch was pushed prematurely.
The option should become unused once the other patches in this patchset are
applied, that is why that patch was not on top of the
On 29/09/15 10:39, Oleg Fayans wrote:
Hi Simo,
Is this [1] the correct link to the repo containing all latest
replica-promotion patches? I tried to build the packages from this code
and the build failed due to libpdb not having make_pdb_method [2]
I was able to successfully build from the clean
Hi Simo,
Is this [1] the correct link to the repo containing all latest
replica-promotion patches? I tried to build the packages from this code
and the build failed due to libpdb not having make_pdb_method [2]
I was able to successfully build from the clean upstream tree on the
same machine.
Hi Simo,
It seems to have resolved the initial issue, but now the build fails due
to lint complaints: https://paste.fedoraproject.org/272714/54174014/
On 09/29/2015 04:54 PM, Simo Sorce wrote:
On 29/09/15 10:39, Oleg Fayans wrote:
Hi Simo,
Is this [1] the correct link to the repo
On 29/09/15 11:50, Oleg Fayans wrote:
Hi Simo,
It seems to have resolved the initial issue, but now the build fails due
to lint complaints: https://paste.fedoraproject.org/272714/54174014/
These happens if you do not have custodia installed.
I guess I should make it also a BuildRequires ?
On 09/29/2015 06:47 PM, Simo Sorce wrote:
On 29/09/15 11:50, Oleg Fayans wrote:
Hi Simo,
It seems to have resolved the initial issue, but now the build fails due
to lint complaints: https://paste.fedoraproject.org/272714/54174014/
These happens if you do not have custodia installed.
I
On 29/09/15 14:56, Oleg Fayans wrote:
On 09/29/2015 06:47 PM, Simo Sorce wrote:
On 29/09/15 11:50, Oleg Fayans wrote:
Hi Simo,
It seems to have resolved the initial issue, but now the build fails due
to lint complaints: https://paste.fedoraproject.org/272714/54174014/
These happens if you
On 09/24/2015 02:25 AM, Martin Basti wrote:
On 09/22/2015 10:45 AM, Jan Cholasta wrote:
Hi,
On 9.9.2015 20:25, Simo Sorce wrote:
On Wed, 2015-08-26 at 17:27 -0400, Simo Sorce wrote:
This patchset implements https://fedorahosted.org/freeipa/ticket/2888
and introduces a number of required
On 24/09/15 04:43, Martin Basti wrote:
On 09/24/2015 02:25 AM, Martin Basti wrote:
On 09/22/2015 10:45 AM, Jan Cholasta wrote:
Hi,
On 9.9.2015 20:25, Simo Sorce wrote:
On Wed, 2015-08-26 at 17:27 -0400, Simo Sorce wrote:
This patchset implements
On Wed, 2015-09-23 at 08:35 +0200, Jan Cholasta wrote:
> What I mean is that installing a replica using an already existing
> replica file should be prevented at level 1 as well:
>
> root@ipa1# ipa-server-install --domain-level=0
> root@ipa1# ipa-replica-prepare ipa2.example.com
> root@ipa1# ipa
On 23.9.2015 02:47, Simo Sorce wrote:
On Tue, 2015-09-22 at 10:57 -0400, Simo Sorce wrote:
On Tue, 2015-09-22 at 10:45 +0200, Jan Cholasta wrote:
Hi,
On 9.9.2015 20:25, Simo Sorce wrote:
On Wed, 2015-08-26 at 17:27 -0400, Simo Sorce wrote:
This patchset implements
On 09/22/2015 10:45 AM, Jan Cholasta wrote:
Hi,
On 9.9.2015 20:25, Simo Sorce wrote:
On Wed, 2015-08-26 at 17:27 -0400, Simo Sorce wrote:
This patchset implements https://fedorahosted.org/freeipa/ticket/2888
and introduces a number of required changes and dependencies to
achieve
this
On 22.9.2015 17:23, Simo Sorce wrote:
On Tue, 2015-09-22 at 10:45 +0200, Jan Cholasta wrote:
4) pylint fails with:
daemons/ipa-custodia/ipakeys/kem.py:156: [E1002(super-on-old-class),
IPAKEMKeys.__init__] Use of super on an old style class)
daemons/ipa-custodia/ipakeys/kem.py:178:
On Tue, 2015-09-22 at 10:45 +0200, Jan Cholasta wrote:
> Hi,
>
> On 9.9.2015 20:25, Simo Sorce wrote:
> > On Wed, 2015-08-26 at 17:27 -0400, Simo Sorce wrote:
> >> This patchset implements https://fedorahosted.org/freeipa/ticket/2888
> >> and introduces a number of required changes and
On Tue, 2015-09-22 at 10:45 +0200, Jan Cholasta wrote:
> 4) pylint fails with:
>
> daemons/ipa-custodia/ipakeys/kem.py:156: [E1002(super-on-old-class),
> IPAKEMKeys.__init__] Use of super on an old style class)
> daemons/ipa-custodia/ipakeys/kem.py:178: [E1101(no-member),
>
On Wed, 2015-08-26 at 17:27 -0400, Simo Sorce wrote:
> This patchset implements https://fedorahosted.org/freeipa/ticket/2888
> and introduces a number of required changes and dependencies to achieve
> this goal.
> This work requires the custodia project to securely transfer keys
> between ipa
On 09/02/2015 10:37 PM, Simo Sorce wrote:
On Wed, 2015-09-02 at 15:22 -0400, Simo Sorce wrote:
On Mon, 2015-08-31 at 14:45 +0200, Tomas Babej wrote:
On 08/26/2015 11:27 PM, Simo Sorce wrote:
This patchset implements https://fedorahosted.org/freeipa/ticket/2888
and introduces a number of
I've encountered this today too. Filed a ticket about it:
https://fedorahosted.org/freeipa/ticket/5283
On 09/03/2015 10:57 AM, Martin Basti wrote:
On 09/02/2015 10:37 PM, Simo Sorce wrote:
On Wed, 2015-09-02 at 15:22 -0400, Simo Sorce wrote:
On Mon, 2015-08-31 at 14:45 +0200, Tomas Babej
On 09/03/2015 02:57 PM, Simo Sorce wrote:
On Thu, 2015-09-03 at 10:57 +0200, Martin Basti wrote:
On 09/02/2015 10:37 PM, Simo Sorce wrote:
On Wed, 2015-09-02 at 15:22 -0400, Simo Sorce wrote:
On Mon, 2015-08-31 at 14:45 +0200, Tomas Babej wrote:
On 08/26/2015 11:27 PM, Simo Sorce wrote:
On Thu, 2015-09-03 at 15:21 +0200, Martin Basti wrote:
>
> On 09/03/2015 02:57 PM, Simo Sorce wrote:
> > On Thu, 2015-09-03 at 10:57 +0200, Martin Basti wrote:
> >> On 09/02/2015 10:37 PM, Simo Sorce wrote:
> >>> On Wed, 2015-09-02 at 15:22 -0400, Simo Sorce wrote:
> On Mon, 2015-08-31 at
On Thu, 2015-09-03 at 10:57 +0200, Martin Basti wrote:
>
> On 09/02/2015 10:37 PM, Simo Sorce wrote:
> > On Wed, 2015-09-02 at 15:22 -0400, Simo Sorce wrote:
> >> On Mon, 2015-08-31 at 14:45 +0200, Tomas Babej wrote:
> >>> On 08/26/2015 11:27 PM, Simo Sorce wrote:
> This patchset implements
On Wed, 2015-09-02 at 15:22 -0400, Simo Sorce wrote:
> On Mon, 2015-08-31 at 14:45 +0200, Tomas Babej wrote:
> >
> > On 08/26/2015 11:27 PM, Simo Sorce wrote:
> > > This patchset implements https://fedorahosted.org/freeipa/ticket/2888
> > > and introduces a number of required changes and
On Mon, 2015-08-31 at 14:45 +0200, Tomas Babej wrote:
>
> On 08/26/2015 11:27 PM, Simo Sorce wrote:
> > This patchset implements https://fedorahosted.org/freeipa/ticket/2888
> > and introduces a number of required changes and dependencies to achieve
> > this goal.
> > This work requires the
On 08/26/2015 11:27 PM, Simo Sorce wrote:
> This patchset implements https://fedorahosted.org/freeipa/ticket/2888
> and introduces a number of required changes and dependencies to achieve
> this goal.
> This work requires the custodia project to securely transfer keys
> between ipa servers.
>
On Mon, 2015-08-31 at 14:45 +0200, Tomas Babej wrote:
>
> On 08/26/2015 11:27 PM, Simo Sorce wrote:
> > This patchset implements https://fedorahosted.org/freeipa/ticket/2888
> > and introduces a number of required changes and dependencies to achieve
> > this goal.
> > This work requires the
On 08/31/2015 02:56 PM, Simo Sorce wrote:
> On Mon, 2015-08-31 at 14:45 +0200, Tomas Babej wrote:
>>
>> On 08/26/2015 11:27 PM, Simo Sorce wrote:
>>> This patchset implements https://fedorahosted.org/freeipa/ticket/2888
>>> and introduces a number of required changes and dependencies to achieve
67 matches
Mail list logo
