Re: [Freeipa-devel] [PATCH 0119] ipatests: Extend the order plugin to properly handle inheritance

2013-10-17 Thread Petr Viktorin
On 10/16/2013 04:35 PM, Tomas Babej wrote: On 10/16/2013 01:57 PM, Petr Viktorin wrote: On 10/14/2013 04:28 PM, Tomas Babej wrote: Hi, When trying to create a new ordered test case by inheriting from already defined test case, by overriding few of its methods, the execution order of the tests

Re: [Freeipa-devel] [PATCH] 431 Installer should always wait until CA starts up

2013-10-17 Thread Petr Viktorin
On 10/16/2013 10:12 AM, Martin Kosek wrote: Patch for ticket 3964 changed the installer so that it does not always wait for CA if the proxy is not configured. However, it was found out that it may freeze an installation when a step subsequent after CA restart call the CA and receives no reply.

Re: [Freeipa-devel] [PATCH][DOC] 432 Add direct bug reporting links to Feedback section

2013-10-17 Thread Martin Kosek
On 10/17/2013 07:25 AM, Petr Spacek wrote: On 17.10.2013 03:06, Simo Sorce wrote: On Wed, 2013-10-16 at 21:59 +0200, Petr Spacek wrote: On 16.10.2013 15:31, Martin Kosek wrote: This change should enable faster and easier filing of new bugs. Patch also simplifies the section for both redhat

Re: [Freeipa-devel] [PATCH] 431 Installer should always wait until CA starts up

2013-10-17 Thread Martin Kosek
On 10/17/2013 11:53 AM, Petr Viktorin wrote: On 10/16/2013 10:12 AM, Martin Kosek wrote: Patch for ticket 3964 changed the installer so that it does not always wait for CA if the proxy is not configured. However, it was found out that it may freeze an installation when a step subsequent after

Re: [Freeipa-devel] [PATCH] 0125 Trusts documentation update

2013-10-17 Thread Sumit Bose
On Wed, Oct 16, 2013 at 06:31:32PM +0300, Alexander Bokovoy wrote: Hi! Attached is first update to AD trusts documentation for FreeIPA user guide. I've fixed number of outdated statements and added some more material. More patches will follow to cover functionality up to FreeIPA 3.3.2.

[Freeipa-devel] [DOC] Image missing: sync-adpwdpolicy

2013-10-17 Thread Petr Spacek
Hello, today I noticed that publican cries about missing image: Image missing: tmp/en-US/xml/images/sync-adpwdpolicy.png I tried to compile documentation from our git repo: commit f2e089aac386855e302d2d4b1a36f7e6b43c0e50 Martin, could you find where the image got lost and add it back to the

Re: [Freeipa-devel] [PATCH] 0125 Trusts documentation update

2013-10-17 Thread Alexander Bokovoy
On Thu, 17 Oct 2013, Sumit Bose wrote: On Wed, Oct 16, 2013 at 06:31:32PM +0300, Alexander Bokovoy wrote: Hi! Attached is first update to AD trusts documentation for FreeIPA user guide. I've fixed number of outdated statements and added some more material. More patches will follow to cover

Re: [Freeipa-devel] [DOC] Image missing: sync-adpwdpolicy

2013-10-17 Thread Martin Kosek
On 10/17/2013 12:45 PM, Petr Spacek wrote: Hello, today I noticed that publican cries about missing image: Image missing: tmp/en-US/xml/images/sync-adpwdpolicy.png I tried to compile documentation from our git repo: commit f2e089aac386855e302d2d4b1a36f7e6b43c0e50 Martin, could you find

Re: [Freeipa-devel] [DOC] Image missing: sync-adpwdpolicy

2013-10-17 Thread Martin Basti
On Thu, 2013-10-17 at 12:45 +0200, Petr Spacek wrote: Hello, today I noticed that publican cries about missing image: Image missing: tmp/en-US/xml/images/sync-adpwdpolicy.png I tried to compile documentation from our git repo: commit f2e089aac386855e302d2d4b1a36f7e6b43c0e50 Martin,

Re: [Freeipa-devel] [DOC] Image missing: sync-adpwdpolicy

2013-10-17 Thread Martin Basti
On Thu, 2013-10-17 at 12:58 +0200, Martin Kosek wrote: On 10/17/2013 12:45 PM, Petr Spacek wrote: Hello, today I noticed that publican cries about missing image: Image missing: tmp/en-US/xml/images/sync-adpwdpolicy.png I tried to compile documentation from our git repo: commit

Re: [Freeipa-devel] [PATCH] 429 Administrative password change does not respect password policy

2013-10-17 Thread Petr Viktorin
On 10/10/2013 06:07 PM, Martin Kosek wrote: When Directory Manager or a PassSync agent is changing a password, it is not being expired, but standard expiration time should apply. However, default expiration time was always applied (90 days) even though administrator may have a custom policy for

[Freeipa-devel] [PATCH] 197 Track DS certificate with certmonger on replicas

2013-10-17 Thread Jan Cholasta
Hi, the attached patch fixes https://fedorahosted.org/freeipa/ticket/3975. Honza -- Jan Cholasta From e032ea6c7c348c02247c571694eba49b876bbdd0 Mon Sep 17 00:00:00 2001 From: Jan Cholasta jchol...@redhat.com Date: Thu, 17 Oct 2013 12:52:07 + Subject: [PATCH] Track DS certificate with

Re: [Freeipa-devel] [PATCH] 197 Track DS certificate with certmonger on replicas

2013-10-17 Thread Rob Crittenden
Jan Cholasta wrote: Hi, the attached patch fixes https://fedorahosted.org/freeipa/ticket/3975. Just thinking out loud here, haven't tried it... What about creating a replica on a non-CA host, I think it wouldn't be tracked. Can you use the value or existence of api.env.ra_plugin instead?

Re: [Freeipa-devel] [PATCH] 197 Track DS certificate with certmonger on replicas

2013-10-17 Thread Jan Cholasta
On 17.10.2013 15:40, Rob Crittenden wrote: Jan Cholasta wrote: Hi, the attached patch fixes https://fedorahosted.org/freeipa/ticket/3975. Just thinking out loud here, haven't tried it... What about creating a replica on a non-CA host, I think it wouldn't be tracked. AFAIU cacert.p12 is

[Freeipa-devel] [DOC][PATCH 0004] Remove obsolete options related to DNS

2013-10-17 Thread Petr Spacek
Hello, this patch removes obsolete options related to DNS. It applies on top of Martin^2's patch no. 11. -- Petr^2 Spacek From ac6c33e24d9e9bade7291d10dc6109566d260d4b Mon Sep 17 00:00:00 2001 From: Petr Spacek pspa...@redhat.com Date: Thu, 17 Oct 2013 14:49:51 +0200 Subject: [PATCH] Remove

Re: [Freeipa-devel] [PATCH] 0119 Switch client to JSON-RPC

2013-10-17 Thread Jan Cholasta
Hi, On 7.10.2013 18:16, Petr Viktorin wrote: On 08/12/2013 10:17 AM, Petr Viktorin wrote: On 08/02/2013 11:13 AM, Petr Viktorin wrote: On 05/10/2013 04:54 PM, Petr Viktorin wrote: On 04/01/2013 11:37 PM, Rob Crittenden wrote: Petr Viktorin wrote: On 01/15/2013 12:36 PM, Petr Viktorin

Re: [Freeipa-devel] [PATCHES] 172-196 Refactor certificate renewal code

2013-10-17 Thread Petr Viktorin
On 10/17/2013 02:21 PM, Jan Cholasta wrote: Hi, this patchset contains refactoring of the certificate renewal code, which will be the base for CA certificate renewal. The biggest change is a new certmonger CA helper dogtag-ipa-ca-renew-agent, which replaces dogtag-ipa-retrieve-agent-submit as

Re: [Freeipa-devel] [PATCHES] 172-196 Refactor certificate renewal code

2013-10-17 Thread Jan Cholasta
On 17.10.2013 18:01, Petr Viktorin wrote: On 10/17/2013 02:21 PM, Jan Cholasta wrote: Hi, this patchset contains refactoring of the certificate renewal code, which will be the base for CA certificate renewal. The biggest change is a new certmonger CA helper dogtag-ipa-ca-renew-agent, which

[Freeipa-devel] [PATCH] 0075 Add ipa-advise plugins for nss-pam-ldapd legacy clients

2013-10-17 Thread Ana Krivokapic
Hello, This patch adds ipa-advise plugins for configuring legacy clients using nss-pam-ldapd. https://fedorahosted.org/freeipa/ticket/3672 -- Regards, Ana Krivokapic Associate Software Engineer FreeIPA team Red Hat Inc. From faa1247c6fd954aadcf7f4ea47a20e106e672bab Mon Sep 17 00:00:00 2001

Re: [Freeipa-devel] [PATCH] 0075 Add ipa-advise plugins for nss-pam-ldapd legacy clients

2013-10-17 Thread Alexander Bokovoy
On Thu, 17 Oct 2013, Ana Krivokapic wrote: Hello, This patch adds ipa-advise plugins for configuring legacy clients using nss-pam-ldapd. https://fedorahosted.org/freeipa/ticket/3672 Thanks. Looks good. I have one comment below +class config_freebsd_nss_pam_ldapd(config_base_legacy_client):