Re: [Freeipa-devel] [PATCH] 854 git ignore ipaplatform/__init__.py

2015-05-21 Thread Martin Babinsky
On 05/20/2015 03:57 PM, Petr Vobornik wrote: This file is generated in `make version-update` added in 9f049ca14403f3696d54d186e6b1b15181f055df Yay no more warnings about untracked file! ACK -- Martin^3 Babinsky -- Manage your subscription for the Freeipa-devel mailing list:

Re: [Freeipa-devel] [PATCH 428] client-install: Fix kinits with non-default Kerberos config file

2015-05-21 Thread Jan Cholasta
Dne 20.5.2015 v 17:54 Martin Babinsky napsal(a): On 05/20/2015 04:28 PM, Jan Cholasta wrote: Hi, the attached patch fixes a bug introduced in the fix for https://fedorahosted.org/freeipa/ticket/4808 (reopened). Honza Works for me, ACK. Thanks. Pushed to: master:

Re: [Freeipa-devel] [PATCH 0036] merge KRA installation machinery to a single module

2015-05-21 Thread Martin Babinsky
On 05/19/2015 08:23 PM, Martin Babinsky wrote: This patch is required for the installer ref@#$%ing work (https://fedorahosted.org/freeipa/ticket/4468). It required quite a bit of hacking to get it work as expected, but I hope that it's not so bad. Requires PATCH 0035 do not check for directory

Re: [Freeipa-devel] [PATCH 0251] Fix uniqueness: exclude compat tree from uid uniquness plugin

2015-05-21 Thread thierry bordaz
On 05/20/2015 03:03 PM, Martin Basti wrote: Enforcing uniqueness for uid attribute prevent to move users to delete users subtree. Patch attached. Hello Martin, The fix looks good. Don't we need to do the same in install/share/unique-attributes.ldif for fresh install ? thanks thierry --

Re: [Freeipa-devel] [PATCH 0251] Fix uniqueness: exclude compat tree from uid uniquness plugin

2015-05-21 Thread thierry bordaz
On 05/21/2015 11:06 AM, Martin Basti wrote: On 21/05/15 10:59, thierry bordaz wrote: On 05/21/2015 10:53 AM, Martin Basti wrote: On 21/05/15 10:14, thierry bordaz wrote: On 05/20/2015 03:03 PM, Martin Basti wrote: Enforcing uniqueness for uid attribute prevent to move users to delete users

Re: [Freeipa-devel] [PATCH 0251] Fix uniqueness: exclude compat tree from uid uniquness plugin

2015-05-21 Thread Martin Basti
On 21/05/15 10:59, thierry bordaz wrote: On 05/21/2015 10:53 AM, Martin Basti wrote: On 21/05/15 10:14, thierry bordaz wrote: On 05/20/2015 03:03 PM, Martin Basti wrote: Enforcing uniqueness for uid attribute prevent to move users to delete users subtree. Patch attached. Hello Martin,

Re: [Freeipa-devel] [PATCH 0251] Fix uniqueness: exclude compat tree from uid uniquness plugin

2015-05-21 Thread thierry bordaz
On 05/21/2015 10:53 AM, Martin Basti wrote: On 21/05/15 10:14, thierry bordaz wrote: On 05/20/2015 03:03 PM, Martin Basti wrote: Enforcing uniqueness for uid attribute prevent to move users to delete users subtree. Patch attached. Hello Martin, The fix looks good. Don't we need to do

Re: [Freeipa-devel] [PATCHES 0001-0011 v3] Profile management

2015-05-21 Thread Martin Basti
On 21/05/15 14:31, Martin Basti wrote: On 21/05/15 14:16, Martin Basti wrote: On 20/05/15 16:41, Fraser Tweedale wrote: Hi Honza, Martin et al, Latest patches attached. On top of previous patches (most review matters addressed**) patches 0008..0011 add support for profiles and user

Re: [Freeipa-devel] certprofiles -- problem with delete

2015-05-21 Thread Fraser Tweedale
On Thu, May 21, 2015 at 02:36:14PM +0200, Milan Kubik wrote: Hi Fraser and list, I ran into this when I was tinkering with the commands. The ipa certprofile plugin[s] does not take the backend result into the picture right now. When I tried to delete the *default profile*, the entry from

Re: [Freeipa-devel] certprofiles -- problem with delete

2015-05-21 Thread Martin Kosek
On 05/21/2015 03:10 PM, Fraser Tweedale wrote: On Thu, May 21, 2015 at 02:36:14PM +0200, Milan Kubik wrote: Hi Fraser and list, I ran into this when I was tinkering with the commands. The ipa certprofile plugin[s] does not take the backend result into the picture right now. When I tried to

[Freeipa-devel] [PATCH 0255] Server Upgrade: Fix: executed schema upgrade

2015-05-21 Thread Martin Basti
Accidentaly , schema upgrade hasn't beed executed by ipa-server-upgrade. https://fedorahosted.org/freeipa/ticket/4904 Patch attached. -- Martin Basti From d6b1107aa9f952bf61dbdbaabdbab822d0dc69b5 Mon Sep 17 00:00:00 2001 From: Martin Basti mba...@redhat.com Date: Thu, 21 May 2015 14:40:22

[Freeipa-devel] [PATCH 0254] Server Upgrade: Wait until DS is ready after restart

2015-05-21 Thread Martin Basti
This patch should fix following traceback. 2015-05-20T03:50:41Z ERROR Upgrade failed with cannot connect to 'ldapi://%2fvar%2frun%2fslapd-IPA-LOCAL.socket': 2015-05-20T03:50:41Z DEBUG Traceback (most recent call last): File

Re: [Freeipa-devel] [PATCHES 0001-0011 v3] Profile management

2015-05-21 Thread Martin Basti
On 20/05/15 16:41, Fraser Tweedale wrote: Hi Honza, Martin et al, Latest patches attached. On top of previous patches (most review matters addressed**) patches 0008..0011 add support for profiles and user certificates to `ipa cert-request'. ** those that were not are being tracked at [1];

[Freeipa-devel] certprofiles -- problem with delete

2015-05-21 Thread Milan Kubik
Hi Fraser and list, I ran into this when I was tinkering with the commands. The ipa certprofile plugin[s] does not take the backend result into the picture right now. When I tried to delete the *default profile*, the entry from ipa suffix got deleted. However the command failed and the profile

Re: [Freeipa-devel] [PATCH 0254] Server Upgrade: Wait until DS is ready after restart

2015-05-21 Thread Fraser Tweedale
On Thu, May 21, 2015 at 01:38:43PM +0200, Martin Basti wrote: This patch should fix following traceback. 2015-05-20T03:50:41Z ERROR Upgrade failed with cannot connect to 'ldapi://%2fvar%2frun%2fslapd-IPA-LOCAL.socket': 2015-05-20T03:50:41Z DEBUG Traceback (most recent call last): File

Re: [Freeipa-devel] [PATCHES 0001-0011 v3] Profile management

2015-05-21 Thread Martin Basti
On 21/05/15 14:16, Martin Basti wrote: On 20/05/15 16:41, Fraser Tweedale wrote: Hi Honza, Martin et al, Latest patches attached. On top of previous patches (most review matters addressed**) patches 0008..0011 add support for profiles and user certificates to `ipa cert-request'. ** those

Re: [Freeipa-devel] [PATCH] manage replication topology in the shared tree

2015-05-21 Thread thierry bordaz
On 05/20/2015 05:40 PM, Ludwig Krispenz wrote: please find new versions of patches 0003 and 0005 for the topology plugin. the ds plugin patch includes - changes to match domain level patch - remove trailing white spaces - use proper oids for topology schema the install patch - has the

[Freeipa-devel] [PATCH 0372-0375] Fix doc/schema to be compatible with OpenLDAP

2015-05-21 Thread Petr Spacek
Hello, I need to use the schema with OpenLDAP server and apparently OpenLDAP can't handle the original line ordering. Pushed to master: 2a65d0b2962bbeec4f769e9724d0d22879e24193 Turn doc/schema into a valid LDIF file. e86c94b63e62fefef96fbec6377bf43a0e246d84 Add COSINE schema attributes to

[Freeipa-devel] [PATCH 0376] Add schema for unknown record types

2015-05-21 Thread Petr Spacek
Hello, Add schema for unknown record types. This patch complements my previous patch 367. The change was pushed to https://github.com/pspacek/bind-dyndb-ldap/tree/unknown_record_types , too. -- Petr^2 Spacek From 4880ac7743c1dad0133754a9bc87dbbd28b89591 Mon Sep 17 00:00:00 2001 From: Petr

Re: [Freeipa-devel] proposal: new API command to list IPA servers

2015-05-21 Thread Rob Crittenden
Petr Vobornik wrote: Hi all, proposal is to create following two commands: ipa server-find ipa server-show FQDN These commands will display a list of IPA servers stored in cn=masters,cn=ipa,cn=etc,$SUFFIX No mod and add commands atm. They could be added when needed. Installed service

Re: [Freeipa-devel] [PATCH 0255] Server Upgrade: Fix: executed schema upgrade

2015-05-21 Thread Fraser Tweedale
On Thu, May 21, 2015 at 02:49:03PM +0200, Martin Basti wrote: Accidentaly , schema upgrade hasn't beed executed by ipa-server-upgrade. https://fedorahosted.org/freeipa/ticket/4904 Patch attached. -- Martin Basti ACK; the schema changes once again are applied during upgrade. Thanks,

Re: [Freeipa-devel] [PATCHES 0001-0011 v3] Profile management

2015-05-21 Thread Fraser Tweedale
On Thu, May 21, 2015 at 02:46:20PM +0200, Martin Basti wrote: On 21/05/15 14:31, Martin Basti wrote: On 21/05/15 14:16, Martin Basti wrote: On 20/05/15 16:41, Fraser Tweedale wrote: Hi Honza, Martin et al, Latest patches attached. On top of previous patches (most review matters

Re: [Freeipa-devel] certprofiles -- problem with delete

2015-05-21 Thread Fraser Tweedale
On Thu, May 21, 2015 at 03:20:30PM +0200, Martin Kosek wrote: On 05/21/2015 03:10 PM, Fraser Tweedale wrote: On Thu, May 21, 2015 at 02:36:14PM +0200, Milan Kubik wrote: Hi Fraser and list, I ran into this when I was tinkering with the commands. The ipa certprofile plugin[s] does not

Re: [Freeipa-devel] [PATCH 0368-0371] Support LDAP MODRDN for ordinary DNS records

2015-05-21 Thread Matus Honek
Hello, patches seem to work all right. Thus ACK. Matúš Honěk - Original Message - From: Petr Spacek pspa...@redhat.com To: tho...@redhat.com, Matus Honek mho...@redhat.com Cc: freeipa-devel@redhat.com Sent: Wednesday, May 20, 2015 9:06:47 AM Subject: [PATCH 0368-0371] Support LDAP

[Freeipa-devel] proposal: new API command to list IPA servers

2015-05-21 Thread Petr Vobornik
Hi all, proposal is to create following two commands: ipa server-find ipa server-show FQDN These commands will display a list of IPA servers stored in cn=masters,cn=ipa,cn=etc,$SUFFIX No mod and add commands atm. They could be added when needed. Installed service won't be shown as

Re: [Freeipa-devel] [PATCH 0325] Add Domain Level feature

2015-05-21 Thread Jan Cholasta
Dne 21.5.2015 v 18:18 Tomas Babej napsal(a): On 05/19/2015 04:07 PM, Tomas Babej wrote: On 05/19/2015 03:59 PM, Martin Kosek wrote: On 05/19/2015 03:56 PM, Tomas Babej wrote: On 05/19/2015 03:51 PM, Martin Kosek wrote: On 05/19/2015 03:49 PM, Ludwig Krispenz wrote: On 05/19/2015 03:36

Re: [Freeipa-devel] [PATCHES 0001-0011 v3] Profile management

2015-05-21 Thread Martin Basti
On 20/05/15 16:41, Fraser Tweedale wrote: Hi Honza, Martin et al, Latest patches attached. On top of previous patches (most review matters addressed**) patches 0008..0011 add support for profiles and user certificates to `ipa cert-request'. ** those that were not are being tracked at [1];

Re: [Freeipa-devel] [PATCH 0325] Add Domain Level feature

2015-05-21 Thread Tomas Babej
On 05/19/2015 04:07 PM, Tomas Babej wrote: On 05/19/2015 03:59 PM, Martin Kosek wrote: On 05/19/2015 03:56 PM, Tomas Babej wrote: On 05/19/2015 03:51 PM, Martin Kosek wrote: On 05/19/2015 03:49 PM, Ludwig Krispenz wrote: On 05/19/2015 03:36 PM, Martin Kosek wrote: On 05/19/2015 03:22