Re: [Freeipa-devel] [PATCH 0190] DNSSEC: add support for CKM_RSA_PKCS_OAEP mechanism

2015-03-06 Thread Tomas Babej
On 03/05/2015 02:45 PM, Petr Spacek wrote: On 26.2.2015 16:59, Martin Basti wrote: On 26/02/15 12:47, Petr Spacek wrote: On 11.2.2015 14:10, Martin Basti wrote: https://fedorahosted.org/freeipa/ticket/4657#comment:13 Patch attached. -- Martin Basti

Re: [Freeipa-devel] [PATCH 0194] Remove unused method to export secret key from ipapkcs11helper module

2015-03-06 Thread Tomas Babej
On 03/05/2015 02:45 PM, Petr Spacek wrote: On 25.2.2015 14:24, Martin Basti wrote: The method never been used, and never will be, because we do not want to export secrets. Ticket: https://fedorahosted.org/freeipa/ticket/4657 Patch attached (may require mbasti-0195, mbasti-0190) ACK, it

Re: [Freeipa-devel] UI plugins

2015-03-06 Thread Corey Kovacs
Sounds great. Just wanted to know if I was going to be reinventing my own wheel again. Thanks again. Corey On Mar 6, 2015 6:58 AM, Petr Vobornik pvobo...@redhat.com wrote: On 03/06/2015 02:31 PM, Corey Kovacs wrote: I almost forgot to ask. Since you don't point it out, I am assuming (yeah I

Re: [Freeipa-devel] [PATCHES 0015-0019] changes to the way host TGT is obtained using keytab

2015-03-06 Thread Petr Vobornik
On 03/06/2015 02:45 PM, Martin Babinsky wrote: On 03/06/2015 02:08 PM, Jan Cholasta wrote: Hi Martin, Dne 6.3.2015 v 13:05 Martin Babinsky napsal(a): This series of patches for the master/4.1 branch attempts to implement some of the Rob's and Petr Vobornik's ideas which originated from a

Re: [Freeipa-devel] [PATCHES] SPEC: Require python2 version of sssd bindings

2015-03-06 Thread Lukas Slebodnik
On (06/03/15 16:13), Alexander Bokovoy wrote: On Fri, 06 Mar 2015, Lukas Slebodnik wrote: On (05/03/15 16:20), Petr Vobornik wrote: On 03/05/2015 11:23 AM, Lukas Slebodnik wrote: On (05/03/15 08:54), Petr Vobornik wrote: On 02/27/2015 09:50 PM, Lukas Slebodnik wrote: ehlo, Please review attached

Re: [Freeipa-devel] [PATCHES] SPEC: Require python2 version of sssd bindings

2015-03-06 Thread Alexander Bokovoy
On Fri, 06 Mar 2015, Lukas Slebodnik wrote: On (06/03/15 16:13), Alexander Bokovoy wrote: On Fri, 06 Mar 2015, Lukas Slebodnik wrote: On (05/03/15 16:20), Petr Vobornik wrote: On 03/05/2015 11:23 AM, Lukas Slebodnik wrote: On (05/03/15 08:54), Petr Vobornik wrote: On 02/27/2015 09:50 PM,

Re: [Freeipa-devel] [PATCHES] SPEC: Require python2 version of sssd bindings

2015-03-06 Thread Lukas Slebodnik
On (05/03/15 16:20), Petr Vobornik wrote: On 03/05/2015 11:23 AM, Lukas Slebodnik wrote: On (05/03/15 08:54), Petr Vobornik wrote: On 02/27/2015 09:50 PM, Lukas Slebodnik wrote: ehlo, Please review attached patches and fix freeipa in fedora 22 ASAP. I think the most critical is 1st patch sh$

Re: [Freeipa-devel] [PATCHES] SPEC: Require python2 version of sssd bindings

2015-03-06 Thread Alexander Bokovoy
On Fri, 06 Mar 2015, Lukas Slebodnik wrote: On (05/03/15 16:20), Petr Vobornik wrote: On 03/05/2015 11:23 AM, Lukas Slebodnik wrote: On (05/03/15 08:54), Petr Vobornik wrote: On 02/27/2015 09:50 PM, Lukas Slebodnik wrote: ehlo, Please review attached patches and fix freeipa in fedora 22

[Freeipa-devel] New freeipa-devel footer

2015-03-06 Thread Martin Kosek
Hi list, Are you also annoyed by freeipa-devel footers and having to delete them with every reply? I was certainly annoyed, and after yesterday bump from other FreeIPA developer I finally updated the freeipa-devel configuration to follow freeipa-users example and set a better footer, with

[Freeipa-devel] [PATCHES 0015-0019] changes to the way host TGT is obtained using keytab

2015-03-06 Thread Martin Babinsky
This series of patches for the master/4.1 branch attempts to implement some of the Rob's and Petr Vobornik's ideas which originated from a discussion on this list regarding my original patch fixing https://fedorahosted.org/freeipa/ticket/4808. I suppose that these patches are just a first

Re: [Freeipa-devel] [PATCHES 0200-0202] DNS fixes related to unsupported records

2015-03-06 Thread Petr Spacek
On 4.3.2015 16:35, Martin Basti wrote: On 04/03/15 16:17, Martin Basti wrote: Ticket: https://fedorahosted.org/freeipa/ticket/4930 0200: 4.1, master Fixes traceback, which was raised if LDAP contained a record that was marked as unsupported. Now unsupported records are shown, if LDAP

Re: [Freeipa-devel] [PATCHES 0015-0019] changes to the way host TGT is obtained using keytab

2015-03-06 Thread Martin Babinsky
On 03/06/2015 02:08 PM, Jan Cholasta wrote: Hi Martin, Dne 6.3.2015 v 13:05 Martin Babinsky napsal(a): This series of patches for the master/4.1 branch attempts to implement some of the Rob's and Petr Vobornik's ideas which originated from a discussion on this list regarding my original patch

Re: [Freeipa-devel] [PATCHES 0015-0019] changes to the way host TGT is obtained using keytab

2015-03-06 Thread Petr Vobornik
On 03/06/2015 01:05 PM, Martin Babinsky wrote: This series of patches for the master/4.1 branch attempts to implement some of the Rob's and Petr Vobornik's ideas which originated from a discussion on this list regarding my original patch fixing https://fedorahosted.org/freeipa/ticket/4808. I

Re: [Freeipa-devel] New freeipa-devel footer

2015-03-06 Thread Petr Spacek
On 6.3.2015 12:01, Martin Kosek wrote: On 03/06/2015 11:55 AM, Jan Pazdziora wrote: On Fri, Mar 06, 2015 at 11:43:07AM +0100, Martin Kosek wrote: See the footer below. If you have any improvements proposals, just tell me. Given the information about the list actions is in the List-* header

Re: [Freeipa-devel] UI plugins

2015-03-06 Thread Corey Kovacs
I almost forgot to ask. Since you don't point it out, I am assuming (yeah I know) the plugin code methods have not changed from 3.3 to 4.1? That is to day I should be able to use the same techniques? Thanks again! Corey On Fri, Mar 6, 2015 at 3:51 AM, Petr Vobornik pvobo...@redhat.com wrote:

Re: [Freeipa-devel] [PATCHES 0015-0019] changes to the way host TGT is obtained using keytab

2015-03-06 Thread Jan Cholasta
Hi Martin, Dne 6.3.2015 v 13:05 Martin Babinsky napsal(a): This series of patches for the master/4.1 branch attempts to implement some of the Rob's and Petr Vobornik's ideas which originated from a discussion on this list regarding my original patch fixing

Re: [Freeipa-devel] New freeipa-devel footer

2015-03-06 Thread Martin Kosek
On 03/06/2015 01:42 PM, Petr Spacek wrote: On 6.3.2015 12:01, Martin Kosek wrote: On 03/06/2015 11:55 AM, Jan Pazdziora wrote: On Fri, Mar 06, 2015 at 11:43:07AM +0100, Martin Kosek wrote: See the footer below. If you have any improvements proposals, just tell me. Given the information

Re: [Freeipa-devel] IPA 4.2 server upgrade refactoring - summary

2015-03-06 Thread Martin Kosek
On 03/04/2015 07:04 PM, Martin Basti wrote: Summary extracted from thread [Freeipa-devel] IPA Server upgrade 4.2 design Design page: http://www.freeipa.org/page/V4/Server_Upgrade_Refactoring * ipa-server-upgrade will not allow to use DM password, only LDAPI will be used for upgrade * upgrade

Re: [Freeipa-devel] UI plugins

2015-03-06 Thread Petr Vobornik
On 03/06/2015 02:31 PM, Corey Kovacs wrote: I almost forgot to ask. Since you don't point it out, I am assuming (yeah I know) the plugin code methods have not changed from 3.3 to 4.1? That is to day I should be able to use the same techniques? Same techniques should be applicable, there were

[Freeipa-devel] [PATCHES 0204-0207] Server upgrade: Make LDAP data upgrade deterministic

2015-03-06 Thread Martin Basti
The patchset ensure, the upgrade order will respect ordering of entries in *.update files. Required for: https://fedorahosted.org/freeipa/ticket/4904 Patch 205 also fixes https://fedorahosted.org/freeipa/ticket/3560 Required patch mbasti-0203 Patches attached. -- Martin Basti From

[Freeipa-devel] [PATCH 0208] Respect --test option in upgrade plugins

2015-03-06 Thread Martin Basti
Upgrade plugins which modify LDAP data directly should not be executed in --test mode. This patch is a workaround, to ensure update with --test option will not modify any LDAP data. https://fedorahosted.org/freeipa/ticket/3448 Patch attached. -- Martin Basti From

[Freeipa-devel] [PATCH 0203] Remove unused PRE_SCHEMA upgrade

2015-03-06 Thread Martin Basti
This upgrade step is not used anymore. Required by: https://fedorahosted.org/freeipa/ticket/4904 Patch attached. -- Martin Basti From caf35d4ed7fd5309fc4a547cc0342a8295c263ef Mon Sep 17 00:00:00 2001 From: Martin Basti mba...@redhat.com Date: Wed, 25 Feb 2015 17:55:11 +0100 Subject: [PATCH

Re: [Freeipa-devel] New freeipa-devel footer

2015-03-06 Thread Jan Pazdziora
On Fri, Mar 06, 2015 at 11:43:07AM +0100, Martin Kosek wrote: See the footer below. If you have any improvements proposals, just tell me. Given the information about the list actions is in the List-* header of ever email, do you need the Manage your subscription for the Freeipa-devel mailing

Re: [Freeipa-devel] New freeipa-devel footer

2015-03-06 Thread Martin Kosek
On 03/06/2015 11:55 AM, Jan Pazdziora wrote: On Fri, Mar 06, 2015 at 11:43:07AM +0100, Martin Kosek wrote: See the footer below. If you have any improvements proposals, just tell me. Given the information about the list actions is in the List-* header of ever email, do you need the Manage

Re: [Freeipa-devel] [PATCH 0023-0025] p11helper improvements

2015-03-06 Thread Tomas Babej
On 03/05/2015 04:10 PM, Martin Basti wrote: On 05/03/15 15:37, Petr Spacek wrote: On 5.3.2015 14:50, Petr Spacek wrote: Hello, please review this patch set. It should be applied on top of your previous p11helper patch set. Thank you! Reviewer requested reworded version of the error

Re: [Freeipa-devel] UI plugins

2015-03-06 Thread Petr Vobornik
On 03/06/2015 03:54 AM, Corey Kovacs wrote: After reading the extending freeipa training document I was able successfully add us to meet attributes and add/modify them using the cli which was pretty cool. Now that I got the cli out of the way I want to add the fields to the ui. Because of the

Re: [Freeipa-devel] [PATCH 0195] Fix memory leaks in ipapkcs11helper module

2015-03-06 Thread Tomas Babej
On 03/05/2015 02:45 PM, Petr Spacek wrote: On 26.2.2015 17:01, Martin Basti wrote: On 26/02/15 13:06, Petr Spacek wrote: Hello Martin, thank you for patch! This NACK is only aesthetic :-) On 25.2.2015 14:21, Martin Basti wrote: if (!check_return_value(rv, import_wrapped_key: key

Re: [Freeipa-devel] [PATCHES 134-136] extdom: handle ERANGE return code for getXXYYY_r()

2015-03-06 Thread Alexander Bokovoy
On Thu, 05 Mar 2015, Sumit Bose wrote: On Thu, Mar 05, 2015 at 09:16:36AM +0100, Sumit Bose wrote: On Wed, Mar 04, 2015 at 06:14:53PM +0100, Sumit Bose wrote: On Wed, Mar 04, 2015 at 04:17:55PM +0200, Alexander Bokovoy wrote: On Mon, 02 Mar 2015, Sumit Bose wrote: diff --git

Re: [Freeipa-devel] [PATCH] 0003-3 User life cycle: new stageuser plugin with add verb

2015-03-06 Thread thierry bordaz
On 02/19/2015 04:19 PM, Martin Basti wrote: On 19/02/15 13:01, thierry bordaz wrote: On 02/04/2015 05:14 PM, Jan Cholasta wrote: Hi, Dne 4.2.2015 v 15:25 David Kupka napsal(a): On 02/03/2015 11:50 AM, thierry bordaz wrote: On 09/17/2014 12:32 PM, thierry bordaz wrote: On 09/01/2014 01:08

Re: [Freeipa-devel] [PATCH] Password vault

2015-03-06 Thread Jan Cholasta
Hi Endi, Dne 24.2.2015 v 04:09 Endi Sukma Dewata napsal(a): On 2/16/2015 2:50 AM, Endi Sukma Dewata wrote: Hi, Attached are the updated patches for the password vault, and some new ones (please disregard previous patch submissions). Please give them a try. Thanks. New patches attached