Re: [Freeipa-devel] python-kdcproxy 0.3

2015-06-25 Thread Christian Heimes
On 2015-06-25 06:04, Martin Kosek wrote: We need to make sure it is at least in https://copr.fedoraproject.org/coprs/mkosek/freeipa-4.2/builds/ https://copr.fedoraproject.org/coprs/mkosek/freeipa-master/builds/ I started the COPR builds based on the F22 SRPMs. Thanks Martin! You can

Re: [Freeipa-devel] [RFC] Self-service Password Reset

2015-06-25 Thread Simo Sorce
On Thu, 2015-06-25 at 15:19 -0400, Drew Erny wrote: On 06/25/2015 03:13 PM, Drew Erny wrote: On 06/25/2015 03:07 PM, Simo Sorce wrote: On Thu, 2015-06-25 at 14:40 -0400, Drew Erny wrote: Hi, All, FreeIPA's most requested feature just got a proposal. Check it out at

Re: [Freeipa-devel] Topology: Central node removal in star topology

2015-06-25 Thread Simo Sorce
On Thu, 2015-06-25 at 09:53 +0200, Petr Vobornik wrote: On 06/25/2015 08:52 AM, Ludwig Krispenz wrote: On 06/24/2015 09:01 PM, Simo Sorce wrote: On Wed, 2015-06-24 at 11:25 +0200, Ludwig Krispenz wrote: Oleg, the topology plugin relies on existing connection between servers which

Re: [Freeipa-devel] [PATCHES 0252-0253] DNSSEC: allow to move DNSSEC key master to another IPA server

2015-06-25 Thread Petr Spacek
On 17.6.2015 13:37, Martin Basti wrote: On 17/06/15 13:26, Petr Spacek wrote: On 16.6.2015 15:40, Martin Basti wrote: On 05/06/15 12:54, Petr Spacek wrote: On 20.5.2015 18:00, Martin Basti wrote: This patch allows to disable DNSSEC key master on IPA server, or replace current DNSSEC key

Re: [Freeipa-devel] [RFC] Self-service Password Reset

2015-06-25 Thread Alexander Bokovoy
On Thu, 25 Jun 2015, Simo Sorce wrote: On Thu, 2015-06-25 at 15:19 -0400, Drew Erny wrote: On 06/25/2015 03:13 PM, Drew Erny wrote: On 06/25/2015 03:07 PM, Simo Sorce wrote: On Thu, 2015-06-25 at 14:40 -0400, Drew Erny wrote: Hi, All, FreeIPA's most requested feature just got a

Re: [Freeipa-devel] [RFC] Self-service Password Reset

2015-06-25 Thread Simo Sorce
On Thu, 2015-06-25 at 23:43 +0300, Alexander Bokovoy wrote: On Thu, 25 Jun 2015, Simo Sorce wrote: On Thu, 2015-06-25 at 15:19 -0400, Drew Erny wrote: On 06/25/2015 03:13 PM, Drew Erny wrote: On 06/25/2015 03:07 PM, Simo Sorce wrote: On Thu, 2015-06-25 at 14:40 -0400, Drew Erny

Re: [Freeipa-devel] [PATCH] Password vault

2015-06-25 Thread Endi Sukma Dewata
On 6/25/2015 12:35 AM, Jan Cholasta wrote: I think it would be better to use a new attribute type which inherits from ipaPublicKey (ipaVaultPublicKey?) rather than ipaPublicKey directly for assymetric vault public keys, so that assymetric public key and escrow public key are on the same level

Re: [Freeipa-devel] IPA Python API

2015-06-25 Thread Drew Erny
If I add the lines if not api.Backend.rpcclient.isconnected(): api.Backend.rpcclient.connect() before I call the api, the code works. Problem (pretty much) solved. On 06/23/2015 04:36 PM, Drew Erny wrote: Resurrecting this thread, because the problem is getting me again. If I go through

Re: [Freeipa-devel] [RFC] Self-service Password Reset

2015-06-25 Thread Drew Erny
On 06/25/2015 03:07 PM, Simo Sorce wrote: On Thu, 2015-06-25 at 14:40 -0400, Drew Erny wrote: Hi, All, FreeIPA's most requested feature just got a proposal. Check it out at http://www.freeipa.org/page/V4/Self_Service_Password_Reset I eagerly await your explanations of why this is a

Re: [Freeipa-devel] [RFC] Self-service Password Reset

2015-06-25 Thread Simo Sorce
On Thu, 2015-06-25 at 14:40 -0400, Drew Erny wrote: Hi, All, FreeIPA's most requested feature just got a proposal. Check it out at http://www.freeipa.org/page/V4/Self_Service_Password_Reset I eagerly await your explanations of why this is a terrible idea. Well clearly it is a security

Re: [Freeipa-devel] [RFC] Self-service Password Reset

2015-06-25 Thread Drew Erny
On 06/25/2015 03:13 PM, Drew Erny wrote: On 06/25/2015 03:07 PM, Simo Sorce wrote: On Thu, 2015-06-25 at 14:40 -0400, Drew Erny wrote: Hi, All, FreeIPA's most requested feature just got a proposal. Check it out at http://www.freeipa.org/page/V4/Self_Service_Password_Reset I eagerly

[Freeipa-devel] [RFC] Self-service Password Reset

2015-06-25 Thread Drew Erny
Hi, All, FreeIPA's most requested feature just got a proposal. Check it out at http://www.freeipa.org/page/V4/Self_Service_Password_Reset I eagerly await your explanations of why this is a terrible idea. Thanks, Drew Erny -- Manage your subscription for the Freeipa-devel mailing list:

Re: [Freeipa-devel] Topology: Central node removal in star topology

2015-06-25 Thread Petr Spacek
On 25.6.2015 09:53, Petr Vobornik wrote: On 06/25/2015 08:52 AM, Ludwig Krispenz wrote: On 06/24/2015 09:01 PM, Simo Sorce wrote: On Wed, 2015-06-24 at 11:25 +0200, Ludwig Krispenz wrote: Oleg, the topology plugin relies on existing connection between servers which remain in a topolgy. If

Re: [Freeipa-devel] Topology: Central node removal in star topology

2015-06-25 Thread Ludwig Krispenz
On 06/24/2015 09:01 PM, Simo Sorce wrote: On Wed, 2015-06-24 at 11:25 +0200, Ludwig Krispenz wrote: Oleg, the topology plugin relies on existing connection between servers which remain in a topolgy. If you remove a central node in your topology you are asking for trouble. With Petr's patch it

Re: [Freeipa-devel] Topology: Central node removal in star topology

2015-06-25 Thread Petr Vobornik
On 06/25/2015 08:52 AM, Ludwig Krispenz wrote: On 06/24/2015 09:01 PM, Simo Sorce wrote: On Wed, 2015-06-24 at 11:25 +0200, Ludwig Krispenz wrote: Oleg, the topology plugin relies on existing connection between servers which remain in a topolgy. If you remove a central node in your topology

Re: [Freeipa-devel] [PATCH] 0020..0022 pki-related upgrade fixes

2015-06-25 Thread Martin Basti
On 19/06/15 09:28, Fraser Tweedale wrote: The attached patches fix upgrade issues when pki is also updated from pre 10.2.4. pki dependency is bumped to 10.2.5 - the official builds should be done Friday (US time) but it is available from my copr[1]. If someone wants to add to official freeipa