Re: [Freeipa-devel] [PATCH] 0025 Respect UID and GID soft static allocation.

2014-11-03 Thread Martin Basti
On 03/11/14 10:28, David Kupka wrote: On 10/30/2014 10:42 AM, Martin Basti wrote: On 29/10/14 17:23, David Kupka wrote: On 10/29/2014 02:34 PM, David Kupka wrote: On 10/24/2014 03:05 PM, David Kupka wrote: On 10/24/2014 01:06 PM, David Kupka wrote: On 10/24/2014 10:43 AM, Martin Basti

Re: [Freeipa-devel] Question how memberof plugin works

2014-11-03 Thread Martin Basti
On 31/10/14 18:05, Ludwig Krispenz wrote: On 10/31/2014 05:31 PM, Petr Vobornik wrote: On 31.10.2014 16:54, Martin Basti wrote: Hello list, I ran upgrade (related steps listed in order): ipa-ldap-updater --upgrade - applying update files (including 55-pbacmemberof.update) - updating ACI

Re: [Freeipa-devel] [PATCH 0249-0250] Propagate DNS updates changes from LDAP to signed version of the zone

2014-11-03 Thread Petr Spacek
On 23.4.2014 18:16, Petr Spacek wrote: Hello, this patch set enables DNS updates to secure zones and also propagates changes made in LDAP to secure zones. NSEC3 doesn't work for some reason so don't waste time messing with NSEC3PARAM :-) This is delayed push notice:

Re: [Freeipa-devel] [PATCH 0246-0248] Follow query/transfer/update policies for secure zones

2014-11-03 Thread Petr Spacek
On 7.5.2014 15:22, Petr Spacek wrote: On 23.4.2014 18:14, Petr Spacek wrote: This patch set configures secure zones according to policies in LDAP. Patch 246 v2 fixes incorrect ATTR_NONNULLS usage which causes segfaults when compiled with -O0. Patch 246 v2 obsoletes patch 253. This is

Re: [Freeipa-devel] [PATCH 0273-0274] Bump NVR to 5.0Update README and NEWS: DNSSEC and changes in forwarding semantics

2014-11-03 Thread Petr Spacek
On 24.6.2014 17:06, Petr Spacek wrote: Hello, it's release time! Bump NVR to 5.0 and update README and NEWS to describe DNSSEC support and changes in forwarding semantics. This is delayed push notice: d093af67072e44ce65be04c7267c4dbaa6cadf08 c12f72dd3edf34c943a108f90c9fd0dac82a716b --

Re: [Freeipa-devel] [PATCH 0239-0243] Refactor ldap_parse_master_zoneentry()

2014-11-03 Thread Petr Spacek
On 3.6.2014 10:41, Petr Spacek wrote: On 6.5.2014 22:11, Lukas Slebodnik wrote: On (06/05/14 17:15), Petr Spacek wrote: On 6.5.2014 14:41, Tomas Hozza wrote: - Original Message - Hello, This patch set attempts to move ldap_parse_master_zoneentry() a little bit closer to sane code.

Re: [Freeipa-devel] [PATCH 0270-0271] Add TLSA and DLV RR types to LDAP schema

2014-11-03 Thread Petr Spacek
On 25.6.2014 14:29, Martin Basti wrote: On Tue, 2014-06-24 at 17:04 +0200, Petr Spacek wrote: Hello, Add TLSA and DLV RR types to LDAP schema. Those RR types will be handy for DNSSEC users. Patch 270 LGTM Patch 271 NACK: You have to add the 'TLSARecord' attribute to idnsRecord objectclass

Re: [Freeipa-devel] [PATCH 0261-0262] Support run-time changes in idnsSecInlineSigning attribute

2014-11-03 Thread Petr Spacek
On 17.6.2014 16:41, Tomas Hozza wrote: - Original Message - Hello, This patch set allows you to change DNSSEC zone configuration at run-time. -- Petr^2 Spacek Looks good. ACK. This is delayed push notice: 5cede8e6f666aeec48aa47ba18a143f2037216f8 -- Petr^2 Spacek

Re: [Freeipa-devel] [PATCH 0251-0256] Add support for NSEC3

2014-11-03 Thread Petr Spacek
On 21.5.2014 13:56, Tomas Hozza wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 05/21/2014 11:33 AM, Petr Spacek wrote: On 7.5.2014 15:27, Petr Spacek wrote: On 29.4.2014 23:34, Petr Spacek wrote: This patch set adds support for NSEC3. See commit messages for details. Patch 253 was

Re: [Freeipa-devel] [PATCH 0258] Fix run-time zone addition for secure zones

2014-11-03 Thread Petr Spacek
On 17.6.2014 10:36, Tomas Hozza wrote: - Original Message - Subject: Re: [Freeipa-devel] [PATCH 0258] Fix run-time zone addition for secure zones Date: Wed, 04 Jun 2014 17:34:29 +0200 From: Petr Spacekpspa...@redhat.com Organization: Red Hat To:freeipa-devel@redhat.com On 3.6.2014

Re: [Freeipa-devel] [PATCH 0263-0265] Support root master zone in LDAP Follow BIND semantics for forwarders

2014-11-03 Thread Petr Spacek
On 17.6.2014 16:41, Tomas Hozza wrote: - Original Message - Hello, This patch set contains necessary changes for supporting root master zone in LDAP. I had to remove one hack so now we follow BIND semantics for forwarders. Please see commit messages.

Re: [Freeipa-devel] [PATCH 0260] Add wrappers for isc_task_*exclusive()

2014-11-03 Thread Petr Spacek
On 17.6.2014 16:41, Tomas Hozza wrote: - Original Message - Hello, Add wrappers for isc_task_*exclusive(). This patch replaces scattered isc_task_* calls and associated locking to one place. It helps with debugging sometimes. -- Petr^2 Spacek Looks good. ACK. This is delayed

Re: [Freeipa-devel] [PATCH 0269] Silence GCC warning about uninitialized ldap_writeback

2014-11-03 Thread Petr Spacek
On 24.6.2014 17:53, Lukas Slebodnik wrote: On (24/06/14 16:46), Petr Spacek wrote: Hello, Silence GCC warning about uninitialized ldap_writeback. It seems like false positive, I can't imagine how ldap_writeback could be used without prior initialization. -- Petr^2 Spacek From

Re: [Freeipa-devel] [PATCH 0259] Fix run-time zone addition for invalid secure zones

2014-11-03 Thread Petr Spacek
On 17.6.2014 16:40, Tomas Hozza wrote: - Original Message - Hello, Fix run-time zone addition for invalid secure zones. It is important*not* to delete invalid zones to prevent ldap_parse_master_zoneentry() from entering infinite cycle. Zone addition in ldap_parse_master_zoneentry()

Re: [Freeipa-devel] [PATCH 0033] Remove trivial path constants

2014-11-03 Thread Petr Spacek
On 4.10.2014 01:58, Gabe Alford wrote: Thanks Petr. Updated patch attached. Petr^3, is it okay now? Petr^2 Spacek On Tue, Sep 30, 2014 at 10:59 AM, Petr Viktorin pvikt...@redhat.com wrote: On 09/30/2014 05:13 AM, Gabe Alford wrote: Updated patch to fix merge conflicts from recent

Re: [Freeipa-devel] [PATCH 0274] Add TLSARecord to idnsRecord object class

2014-11-03 Thread Petr Spacek
On 27.6.2014 09:34, Petr Spacek wrote: Hello, Add TLSARecord to idnsRecord object class. This is delayed push notice: 2d358ccbc323ea6d4339f22b16d419195054e017 -- Petr^2 Spacek ___ Freeipa-devel mailing list Freeipa-devel@redhat.com

Re: [Freeipa-devel] [PATCH 0257] Fix race condition during zone loading

2014-11-03 Thread Petr Spacek
On 17.6.2014 09:33, Tomas Hozza wrote: - Original Message - On 28.5.2014 13:26, Tomas Hozza wrote: On 05/27/2014 03:59 PM, Petr Spacek wrote: On 27.5.2014 15:54, Petr Spacek wrote: Fix race condition during zone loading. DNS zone has to be added to DNS view before

Re: [Freeipa-devel] [PATCH 0266] (aka 257.5) Fix zone reloading for in-line signed zones

2014-11-03 Thread Petr Spacek
On 17.6.2014 10:35, Tomas Hozza wrote: - Original Message - Hello, I forgot to send one patch between no. 257 and 258, so here it is:-) Fix zone reloading for in-line signed zones. A invalid secure zone (e.g. without NS records) is now automatically reloaded when data inside the zone

Re: [Freeipa-devel] [PATCHES 0114-0115, 0120-0121] DNS: allow to add root zone '.'

2014-11-03 Thread Petr Spacek
On 16.9.2014 10:36, Martin Kosek wrote: On 09/16/2014 10:30 AM, Martin Basti wrote: On 16/09/14 10:29, Petr Spacek wrote: On 16.9.2014 10:09, Martin Kosek wrote: On 09/16/2014 09:57 AM, Martin Basti wrote: On 16/09/14 09:32, Martin Basti wrote: On 15/09/14 20:31, Martin Kosek wrote: On

Re: [Freeipa-devel] [PATCH] Coverity fixes for slapi-nis

2014-11-03 Thread Petr Spacek
On 16.9.2013 09:58, Petr Spacek wrote: On 2.9.2013 15:58, Alexander Bokovoy wrote: Hi Nalin, attached please find two patches that fix minor Coverity issues. The first patch is for issue 11937 which is a false positive but caught up wrong use of the helper method -- the method

Re: [Freeipa-devel] [PATCH] 0025 Respect UID and GID soft static allocation.

2014-11-03 Thread Martin Basti
On 03/11/14 10:28, David Kupka wrote: On 10/30/2014 10:42 AM, Martin Basti wrote: On 29/10/14 17:23, David Kupka wrote: On 10/29/2014 02:34 PM, David Kupka wrote: On 10/24/2014 03:05 PM, David Kupka wrote: On 10/24/2014 01:06 PM, David Kupka wrote: On 10/24/2014 10:43 AM, Martin Basti

Re: [Freeipa-devel] [PATCH 0034] Missing requires on python-dns

2014-11-03 Thread Petr Spacek
On 8.10.2014 09:46, Petr Spacek wrote: Hello, this is going to be a little bit more interesting. RHEL/CentOS version of FreeIPA depends on python-dns = 1.11.1-2 but Fedora version should depend on = 1.12.0. RHEL contains Git snapshot which is newer than 1.11.1 but is still not complete

Re: [Freeipa-devel] [PATCH] 335 Fail if certmonger can't see new CA certificate in LDAP in ipa-cacert-manage

2014-11-03 Thread David Kupka
On 10/15/2014 04:43 PM, Jan Cholasta wrote: Hi, the attached patch fixes https://fedorahosted.org/freeipa/ticket/4629. It depends on my patches 333 and 334, which are also attached. (The original patch was posted at http://www.redhat.com/archives/freeipa-devel/2014-September/msg00454.html.)

Re: [Freeipa-devel] [PATCH] 355 Added vault access control.

2014-11-03 Thread Endi Sukma Dewata
On 10/28/2014 5:35 PM, Endi Sukma Dewata wrote: On 10/22/2014 3:04 PM, Endi Sukma Dewata wrote: New LDAP ACIs have been added to allow users to create their own private vault container, to allow owners to manage vaults and containers, and to allow members to use the vaults. New CLIs have been

Re: [Freeipa-devel] [PATCH] 356 Added command to retrieve vault transport certificate.

2014-11-03 Thread Endi Sukma Dewata
On 10/28/2014 6:26 PM, Endi Sukma Dewata wrote: On 10/23/2014 6:18 AM, Jan Cholasta wrote: Hi, Dne 22.10.2014 v 22:06 Endi Sukma Dewata napsal(a): A new command has been added to retrieve the vault transport certificate and optionally save it into a file. The vault archive and retrieve

[Freeipa-devel] [PATCH] 357 Added symmetric and asymmetric vaults.

2014-11-03 Thread Endi Sukma Dewata
The IPA vault has been modified to support symmetric and asymmetric vaults to allow client to pre-encrypt the data. Due to the status of the crypto library the actual encryption will be added separately later. New LDAP attribute types have been added to store vault type, salt and public key.