Re: [Freeipa-devel] Releasing testing tools as standalone projects

2014-11-04 Thread Petr Spacek
On 3.11.2014 16:47, Rob Crittenden wrote: Petr Viktorin wrote: Hello! There's been some interest in releasing pieces of FreeIPA's testing infrastructure so it can be reused in other projects. I will soon take the pytest-beakerlib plugin (currently in my patch 0672), and making a stand-alone

Re: [Freeipa-devel] Releasing testing tools as standalone projects

2014-11-04 Thread Petr Viktorin
On 11/03/2014 04:47 PM, Rob Crittenden wrote: Petr Viktorin wrote: Hello! There's been some interest in releasing pieces of FreeIPA's testing infrastructure so it can be reused in other projects. I will soon take the pytest-beakerlib plugin (currently in my patch 0672), and making a

[Freeipa-devel] User life-cycle management as additional plugin

2014-11-04 Thread Petr Spacek
Hello, I wonder if user life-cycle extensions [1] can be in form of separate FreeIPA plugin for FreeIPA framework. Reasoning behind this is that different organizations will have different requirements (including no life-cycle management). I don't think that one-size-fits-all so from my

Re: [Freeipa-devel] User life-cycle management as additional plugin

2014-11-04 Thread Jan Cholasta
Hi, Dne 4.11.2014 v 10:46 Petr Spacek napsal(a): Hello, I wonder if user life-cycle extensions [1] can be in form of separate FreeIPA plugin for FreeIPA framework. Reasoning behind this is that different organizations will have different requirements (including no life-cycle management). I

Re: [Freeipa-devel] Releasing testing tools as standalone projects

2014-11-04 Thread Rich Megginson
On 11/04/2014 10:30 AM, Petr Viktorin wrote: On 11/03/2014 04:47 PM, Rob Crittenden wrote: Petr Viktorin wrote: Hello! There's been some interest in releasing pieces of FreeIPA's testing infrastructure so it can be reused in other projects. I will soon take the pytest-beakerlib plugin

Re: [Freeipa-devel] Releasing testing tools as standalone projects

2014-11-04 Thread Petr Viktorin
On 11/04/2014 11:50 AM, Rich Megginson wrote: On 11/04/2014 10:30 AM, Petr Viktorin wrote: On 11/03/2014 04:47 PM, Rob Crittenden wrote: [...] Or both? (Would we want to officially mirror the project to Github from FH?) I'd be in favor of fedorahosted because you get a tracker and wiki as

Re: [Freeipa-devel] Releasing testing tools as standalone projects

2014-11-04 Thread Rich Megginson
On 11/04/2014 12:00 PM, Petr Viktorin wrote: On 11/04/2014 11:50 AM, Rich Megginson wrote: On 11/04/2014 10:30 AM, Petr Viktorin wrote: On 11/03/2014 04:47 PM, Rob Crittenden wrote: [...] Or both? (Would we want to officially mirror the project to Github from FH?) I'd be in favor of

[Freeipa-devel] [PATCH 0155] Fix CI test

2014-11-04 Thread Martin Basti
patch attached -- Martin Basti From c867877b0b8c23ae132491710f748028a07e6311 Mon Sep 17 00:00:00 2001 From: Martin Basti mba...@redhat.com Date: Tue, 4 Nov 2014 12:29:32 +0100 Subject: [PATCH] Fix CI tests: install_adtrust IPA uses both named and named-pkcs11 service. If named is masked use

[Freeipa-devel] [PATCH] 0026 Stop dirsrv last in ipactl stop.

2014-11-04 Thread David Kupka
https://fedorahosted.org/freeipa/ticket/4632 -- David Kupka From 79a716af3a82e7cb419376c727fd655af070904e Mon Sep 17 00:00:00 2001 From: David Kupka dku...@redhat.com Date: Tue, 4 Nov 2014 03:22:59 -0500 Subject: [PATCH] Stop dirsrv last in ipactl stop. Other services may depend on directory

Re: [Freeipa-devel] [PATCH 0033] Remove trivial path constants

2014-11-04 Thread Petr Viktorin
On 11/03/2014 01:54 PM, Petr Spacek wrote: On 4.10.2014 01:58, Gabe Alford wrote: Thanks Petr. Updated patch attached. Petr^3, is it okay now? Oh my, this patch fell through the cracks during the release frenzy. Apologies! ACK, pushed to master: 7eca640ffa3e661140843d91dc4a846d3355a242

Re: [Freeipa-devel] [PATCH] 773-777 ranges: prohibit setting --rid-base with ipa-trust-ad-posix type

2014-11-04 Thread Petr Vobornik
On 10/15/2014 02:20 PM, Petr Vobornik wrote: ticket: https://fedorahosted.org/freeipa/ticket/4221 updated version of patch 773 attached. Fixes issue in interactive_prompt_callback. Not related to this ticket: - should we show interactive prompt for domain name when user specifies

Re: [Freeipa-devel] Releasing testing tools as standalone projects

2014-11-04 Thread Simo Sorce
On Mon, 03 Nov 2014 16:07:20 +0100 Petr Viktorin pvikt...@redhat.com wrote: Hello! There's been some interest in releasing pieces of FreeIPA's testing infrastructure so it can be reused in other projects. I will soon take the pytest-beakerlib plugin (currently in my patch 0672), and

[Freeipa-devel] [PATCH] 782 webui: use domain name instead of domain SID in idrange adder dialog

2014-11-04 Thread Petr Vobornik
It's more user friendly. Almost nobody remembers SIDs. https://fedorahosted.org/freeipa/ticket/4661 depends on patch 777 -- Petr Vobornik From a5c3b903dbfa3a11dd122de3f8a9e36d562b34c2 Mon Sep 17 00:00:00 2001 From: Petr Vobornik pvobo...@redhat.com Date: Tue, 4 Nov 2014 13:38:12 +0100 Subject:

[Freeipa-devel] [PATCH] 783 webui: normalize idview tab labels

2014-11-04 Thread Petr Vobornik
ID View tab labels are no longer redundant. https://fedorahosted.org/freeipa/ticket/4650 -- Petr Vobornik From 97d3d854c4d7bae84b12c277ffe071892fb99235 Mon Sep 17 00:00:00 2001 From: Petr Vobornik pvobo...@redhat.com Date: Tue, 4 Nov 2014 15:49:34 +0100 Subject: [PATCH] webui: normalize idview

Re: [Freeipa-devel] User life-cycle management as additional plugin

2014-11-04 Thread thierry bordaz
On 11/04/2014 10:58 AM, Jan Cholasta wrote: Hi, Dne 4.11.2014 v 10:46 Petr Spacek napsal(a): Hello, I wonder if user life-cycle extensions [1] can be in form of separate FreeIPA plugin for FreeIPA framework. Reasoning behind this is that different organizations will have different

Re: [Freeipa-devel] [PATCH 0155] Fix CI test

2014-11-04 Thread Petr Viktorin
On 11/04/2014 12:33 PM, Martin Basti wrote: patch attached Thanks! ACK, pushed to: master: e7edac30a10c0da40d7cfd625e19bd4237b9e1f6 ipa-4-1: 49a73e1d6b710d777d4cc3a3ac358491c3e0e85a -- PetrĀ³ ___ Freeipa-devel mailing list Freeipa-devel@redhat.com

Re: [Freeipa-devel] [PATCH 0156] Fix upgrade: create new connection after restarting DS

2014-11-04 Thread Martin Basti
On 04/11/14 16:08, Martin Basti wrote: Ticket: https://fedorahosted.org/freeipa/ticket/4670 Patch attached I forgot to mention, this is an ancient bug, IMO the fix should go to all branches. -- Martin Basti ___ Freeipa-devel mailing list

Re: [Freeipa-devel] [PATCH 0074] Make token window sizes configurable

2014-11-04 Thread Nathaniel McCallum
On Wed, 2014-10-29 at 09:34 -0400, Nathaniel McCallum wrote: On Wed, 2014-10-29 at 12:21 +0100, Petr Viktorin wrote: On 10/29/2014 10:37 AM, Martin Kosek wrote: On 10/28/2014 09:59 PM, Nathaniel McCallum wrote: On Thu, 2014-10-23 at 18:07 -0400, Nathaniel McCallum wrote: This patch

Re: [Freeipa-devel] [PATCH] 005 Deadlock in schema compat plugin (between automember_update_membership task and dse update)

2014-11-04 Thread Martin Basti
On 30/10/14 14:47, thierry bordaz wrote: https://fedorahosted.org/freeipa/ticket/4635 I can't reproduce the deadlock, so ACK -- Martin Basti ___ Freeipa-devel mailing list Freeipa-devel@redhat.com

Re: [Freeipa-devel] [PATCH] 353 Added initial vault implementation.

2014-11-04 Thread Petr Viktorin
On 11/04/2014 07:27 AM, Endi Sukma Dewata wrote: On 10/28/2014 5:34 PM, Endi Sukma Dewata wrote: The NSSConnection class has to be modified not to shutdown existing database because some of the vault clients (e.g. vault-archive and vault-retrieve) also use a database to encrypt/decrypt the

Re: [Freeipa-devel] [PATCH] 353 Added initial vault implementation.

2014-11-04 Thread Endi Sukma Dewata
Thanks for the review. I have some questions below. I'll post a new patch after the issues are addressed. On 11/4/2014 11:36 AM, Petr Viktorin wrote: The new schema can go to 60basev3.ldif, no need for a new file. Fixed. Also removed nsContainer as suggested by Simo.

Re: [Freeipa-devel] [PATCH] 357 Added symmetric and asymmetric vaults.

2014-11-04 Thread Jan Cholasta
Hi, Dne 4.11.2014 v 17:54 Endi Sukma Dewata napsal(a): Hi, In this patch I'm adding ipaVaultSalt and ipaVaultPublicKey attribute types to store salt and public key for vault. Are there existing attribute types that I can use instead? I see there's an ipaPublicKey, should I use that and maybe