Re: [Freeipa-devel] OOO 2015-03-31-2015-04-01

2015-03-31 Thread Tomas Babej
Sorry about the noise. On 03/31/2015 07:23 AM, Tomas Babej wrote: Hours already accumulated this month. Tomas -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

Re: [Freeipa-devel] Use sessions for mod_auth_gssapi ?

2015-03-31 Thread Martin Kosek
On 03/31/2015 08:04 AM, Jan Cholasta wrote: Dne 30.3.2015 v 22:09 Adam Young napsal(a): On 03/30/2015 11:52 AM, Simo Sorce wrote: Since we now merged in a change from mod_auth_kerb to mod_auth_gssapi I was wondering if we want to press further and emable by default the use of native

Re: [Freeipa-devel] Use sessions for mod_auth_gssapi ?

2015-03-31 Thread Jan Cholasta
Dne 30.3.2015 v 22:09 Adam Young napsal(a): On 03/30/2015 11:52 AM, Simo Sorce wrote: Since we now merged in a change from mod_auth_kerb to mod_auth_gssapi I was wondering if we want to press further and emable by default the use of native mod_auth_gssapi sessions ? The old mod_auth_kerb

[Freeipa-devel] [PATCH 0025] proper client host setup/teardown in forced client reenrollment integration test suite

2015-03-31 Thread Martin Babinsky
During the investigation of https://fedorahosted.org/freeipa/ticket/4614 I discovered a bug (?) in forced client reenrollment integration test. During test scenario, master and replica are setup correctly at the beginning of the test, but the client is never setup resulting in a couple of

[Freeipa-devel] [PATCH] 809 speed up convert_attribute_members

2015-03-31 Thread Petr Vobornik
A workaround to avoid usage of slow LDAPEntry._sync_attr #4946. I originally wanted to avoid DN processing as well but we can't do that because of DNs which are encoded - e.g. contains '+' or ','. Therefore patch 811 - faster DN implementation is very useful. Also patch 809 is useful to avoid

[Freeipa-devel] [PATCH] 810 speed up indirect member processing

2015-03-31 Thread Petr Vobornik
the old implementation tried to get all entries which are member of group. That means also user. User can't have any members therefore this costly processing was unnecessary. New implementation reduces the search only to entries which can have entries. Also page size was removed to avoid

Re: [Freeipa-devel] [PATCH 0025] proper client host setup/teardown in forced client reenrollment integration test suite

2015-03-31 Thread Petr Viktorin
On 03/31/2015 10:42 AM, Martin Babinsky wrote: During the investigation of https://fedorahosted.org/freeipa/ticket/4614 I discovered a bug (?) in forced client reenrollment integration test. During test scenario, master and replica are setup correctly at the beginning of the test, but the

[Freeipa-devel] [PATCH] 811 performance: faster DN implementation

2015-03-31 Thread Petr Vobornik
The only different thing is a lack of utf-8 encoded str support(as input). I don't know how much important the support is. maybe it could be attached to ticket https://fedorahosted.org/freeipa/ticket/4947 - DN code was optimized to be faster if DNs are created from string. This is the

[Freeipa-devel] [QE] Test categorization into tiers and acceptance testing - tagging proposals

2015-03-31 Thread Martin Koci
Hi all, I'd like to open discussion on test categorization into tiers and acceptance testing, respectively test tagging which should help us to accomplish following goals: 1) Acceptance test - other FreeIPA partner projects (389/DS/PKI) should be able to have an Acceptance test that would run

[Freeipa-devel] [PATCH 0082] Update python-yubico dependency version

2015-03-31 Thread Nathaniel McCallum
This change enables support for all current YubiKey hardware.From 54f74bebe5149d3be4e2772cb0199dda30fb0088 Mon Sep 17 00:00:00 2001 From: Nathaniel McCallum npmccal...@redhat.com Date: Tue, 31 Mar 2015 10:17:18 -0400 Subject: [PATCH] Update python-yubico dependency version This change enables

[Freeipa-devel] [PATCH] webui: use no_members option in entity select search

2015-03-31 Thread Petr Vobornik
Obtaining member information for entity selects is not needed and it causes unwanted performance hit, especially with larger groups. This patch removes it. https://fedorahosted.org/freeipa/ticket/4948 -- Petr Vobornik From f4cc39c016749fd73f0cc8bc67aa170ee248507a Mon Sep 17 00:00:00 2001 From:

Re: [Freeipa-devel] Use sessions for mod_auth_gssapi ?

2015-03-31 Thread Nathaniel McCallum
On Mon, 2015-03-30 at 11:52 -0400, Simo Sorce wrote: Since we now merged in a change from mod_auth_kerb to mod_auth_gssapi I was wondering if we want to press further and emable by default the use of native mod_auth_gssapi sessions ? The old mod_auth_kerb didn't have this feature so, in

Re: [Freeipa-devel] [PATCH 0025] proper client host setup/teardown in forced client reenrollment integration test suite

2015-03-31 Thread Martin Babinsky
On 03/31/2015 12:06 PM, Petr Viktorin wrote: On 03/31/2015 10:42 AM, Martin Babinsky wrote: During the investigation of https://fedorahosted.org/freeipa/ticket/4614 I discovered a bug (?) in forced client reenrollment integration test. During test scenario, master and replica are setup

[Freeipa-devel] [PATCH] 786 webui: unable to select single value in CB by enter key

2015-03-31 Thread Petr Vobornik
This little fellow was hiding in a cupboard (patchset 784-786 was abandoned). Fix: If editable combobox has one value, the value is selected and changed by hand, it can't be re-selected by enter key. -- Petr Vobornik From 210ee41d957c9efb818b721ef40ffc4d469cf15a Mon Sep 17 00:00:00 2001 From:

Re: [Freeipa-devel] [PATCH] 786 webui: unable to select single value in CB by enter key

2015-03-31 Thread Martin Babinsky
On 03/31/2015 04:19 PM, Petr Vobornik wrote: This little fellow was hiding in a cupboard (patchset 784-786 was abandoned). Fix: If editable combobox has one value, the value is selected and changed by hand, it can't be re-selected by enter key. Works as expected, ACK. -- Martin^3 Babinsky

Re: [Freeipa-devel] Use sessions for mod_auth_gssapi ?

2015-03-31 Thread Anthony Messina
On Monday, March 30, 2015 11:52:07 AM Simo Sorce wrote: Since we now merged in a change from mod_auth_kerb to mod_auth_gssapi I was wondering if we want to press further and emable by default the use of native mod_auth_gssapi sessions ? The old mod_auth_kerb didn't have this feature so, in