Re: [Freeipa-devel] [PATCH] 0257 Add initial CA-less installation tests

2013-08-26 Thread Jan Cholasta
On 22.8.2013 09:46, Petr Viktorin wrote: On 08/16/2013 07:13 PM, Petr Viktorin wrote: On 07/30/2013 05:47 PM, Petr Viktorin wrote: Hello, This patch implements the first batch of integration tests for CA-less intallation. Tests from http://www.freeipa.org/page/V3/CA-less_install up to IPA

Re: [Freeipa-devel] FreeIPA server package group

2013-08-26 Thread Petr Vobornik
On 08/26/2013 09:54 AM, Tomas Babej wrote: Hi, I cooked up a patch for comps that adds a FreeIPA package group. Please chime in if you're OK with package selection / description. For illustration, see the attached image. FreeIPA will be added as an add-on in an installer under the

[Freeipa-devel] [PATCH] EXTDOM: Do not overwrite domain_name for INP_SID

2013-08-26 Thread Jakub Hrozek
Hi, I found the problem when testing Sumit's PAC responder SSSD patches. It seems that the domain name is always overwritten with input SID. I think using the domain we parse out from output of getnamebysid can be safely used, but I'm not all that familiar with the extdom plugin.. From

Re: [Freeipa-devel] FreeIPA server package group

2013-08-26 Thread Tomas Babej
On Mon 26 Aug 2013 10:12:09 AM CEST, Petr Vobornik wrote: On 08/26/2013 09:54 AM, Tomas Babej wrote: Hi, I cooked up a patch for comps that adds a FreeIPA package group. Please chime in if you're OK with package selection / description. For illustration, see the attached image. FreeIPA will

Re: [Freeipa-devel] [PATCH 0092] Remove redundant shebangs

2013-08-26 Thread Petr Viktorin
On 08/23/2013 07:23 PM, Nathaniel McCallum wrote: On Thu, 2013-08-22 at 17:52 +0200, Tomas Babej wrote: Hi, Remove redundant shebangs from files that are not used as scripts. https://fedorahosted.org/freeipa/ticket/3853 ACK Pushed to master, ipa-3-3. master:

Re: [Freeipa-devel] [PATCH] 447 Show human-readable error name in error dialog title

2013-08-26 Thread Petr Viktorin
On 08/23/2013 07:25 PM, Nathaniel McCallum wrote: On Thu, 2013-08-22 at 16:15 +0200, Petr Vobornik wrote: Fixes RPC server's JSON encoding of exception's name. It allows to show the name in Web UI's error dialog title. ACK Pushed to master: 34342b9a972a3a454b979dc64d0a510c5af24894 --

Re: [Freeipa-devel] [PATCH 0091] Perform dirsrv tuning at platform level

2013-08-26 Thread Petr Viktorin
On 08/23/2013 07:50 PM, Nathaniel McCallum wrote: On Thu, 2013-08-22 at 17:23 +0200, Tomas Babej wrote: On 08/20/2013 06:40 PM, Nathaniel McCallum wrote: On Mon, 2013-08-19 at 14:48 +0200, Tomas Babej wrote: Hi, When configuring the 389 Directory Server instance, we tune it so that number of

Re: [Freeipa-devel] [PATCH 0083] Make CS.cfg edits with CA instance stopped

2013-08-26 Thread Petr Viktorin
On 08/23/2013 02:23 PM, Tomas Babej wrote: On 08/05/2013 05:43 PM, Martin Kosek wrote: On 08/02/2013 03:32 PM, Tomas Babej wrote: Hi, This patch makes sure that all edits to CS.cfg configuration file are performed while pki-tomcatd service is stopped. Introduces a new contextmanager

[Freeipa-devel] [DOC] Chapter 2 Installation

2013-08-26 Thread Martin Basti
Hello, this patch fix some setup outputs and remove outdated section about updating freeIPA version 2 -- Martin Basti From d0781341370cfa9e434fdff4cc0fe19eaf44eee0 Mon Sep 17 00:00:00 2001 From: Martin Basti mba...@redhat.com Date: Mon, 26 Aug 2013 15:28:42 +0200 Subject: [PATCH] Chapter 2 -

[Freeipa-devel] [DOC] 0002 Chapter 3 Installing clients

2013-08-26 Thread Martin Basti
Hello, this patch fix some setup outputs, add tips and order of command in examples -- Martin Basti From 503ea1244427d902cd8547a11ecbe06b751702e4 Mon Sep 17 00:00:00 2001 From: Martin Basti mba...@redhat.com Date: Mon, 26 Aug 2013 17:00:34 +0200 Subject: [PATCH 2/2] Chapter 3 - installing

[Freeipa-devel] FreeIPA and Dogtag support for User Certificates in OpenStack Keystone

2013-08-26 Thread Adam Young
Keystone needs signing certificates for Signing PKI tokens. In addition, CERN has a developed an approach that allows user to authenticate to Keystone via X509 for batch jobs. This requires Client Certs. Both of these use cases are easily supported by Dogtag, but not exposed via FreeIPA