[Freeipa-devel] [PATH 0053] Inconsistency between ipasearchrecordslimit and --sizelimit

2015-07-29 Thread Gabe Alford
Hello, Fix for https://fedorahosted.org/freeipa/ticket/4023 Thanks, Gabe From cba4b0d90f65be7734a977cb84f96f378e1c91d0 Mon Sep 17 00:00:00 2001 From: Gabe redhatri...@gmail.com Date: Wed, 29 Jul 2015 09:04:32 -0600 Subject: [PATCH] Standardize minvalue for ipasearchrecordlimit and sizelimit

Re: [Freeipa-devel] [PATCH 0051] IPA server and replica installers can accept options from config file

2015-07-29 Thread Petr Vobornik
On 07/29/2015 05:13 PM, Martin Babinsky wrote: On 07/29/2015 01:25 PM, Jan Cholasta wrote: Dne 29.7.2015 v 12:20 Martin Babinsky napsal(a): Initial attempt to implement https://fedorahosted.org/freeipa/ticket/4517 Some points to discuss: 1.) name of the config entries: currently the option

Re: [Freeipa-devel] [PATCH 0294] ULC: fix stageuser-add --from-delete command

2015-07-29 Thread Martin Basti
On 28/07/15 13:22, David Kupka wrote: On 23/07/15 13:46, Martin Basti wrote: https://fedorahosted.org/freeipa/ticket/5145 Patch attached. This patch fixes only first part of problem -- the traceback. Removing promt for name and surname requires too big hacks in internal API, and I'm not sure

Re: [Freeipa-devel] [PATCH 016] Require Dogtag PKI = 10.2.6

2015-07-29 Thread Martin Basti
On 29/07/15 15:56, Martin Basti wrote: On 23/07/15 12:26, Christian Heimes wrote: Dogtag 10.2.6 comes with two fixes for cloning from 9.x to 10.x instances: https://fedorahosted.org/pki/ticket/1495 https://fedorahosted.org/pki/ticket/1488 https://fedorahosted.org/freeipa/ticket/5140

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-07-29 Thread Petr Viktorin
On 07/29/2015 11:56 AM, Christian Heimes wrote: On 2015-07-29 10:09, Michael Šimáček wrote: GSSAPI doesn't provide any method (that I'm aware of) to get default ccache name. In most cases this is not needed as we can simply not pass any name and it will use the default. The ldap plugin had to

Re: [Freeipa-devel] [PATCH 0051] IPA server and replica installers can accept options from config file

2015-07-29 Thread Martin Babinsky
On 07/29/2015 01:25 PM, Jan Cholasta wrote: Dne 29.7.2015 v 12:20 Martin Babinsky napsal(a): Initial attempt to implement https://fedorahosted.org/freeipa/ticket/4517 Some points to discuss: 1.) name of the config entries: currently the option names are derived from CLI options but have

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-07-29 Thread Robbie Harwood
Michael Šimáček msima...@redhat.com writes: GSSAPI doesn't provide any method (that I'm aware of) to get default ccache name. In most cases this is not needed as we can simply not pass any name and it will use the default. The ldap plugin had to be adjusted for this - the connect method now

Re: [Freeipa-devel] Wiki Access

2015-07-29 Thread Alexander Bokovoy
On Wed, 29 Jul 2015, Dan Mossor wrote: On 07/29/2015 03:10 PM, Rob Crittenden wrote: Dan Mossor wrote: Greetings FreeIPA devs. I just wanted to express my sincere thank you for all y'all do - FreeIPA is an awesome product that just keeps getting better and better. One area where y'all

[Freeipa-devel] Wiki Access

2015-07-29 Thread Dan Mossor
Greetings FreeIPA devs. I just wanted to express my sincere thank you for all y'all do - FreeIPA is an awesome product that just keeps getting better and better. One area where y'all desparately need help with, however, is in documentation. I recently had to rescue a co-worker from following

Re: [Freeipa-devel] Wiki Access

2015-07-29 Thread Rob Crittenden
Dan Mossor wrote: Greetings FreeIPA devs. I just wanted to express my sincere thank you for all y'all do - FreeIPA is an awesome product that just keeps getting better and better. One area where y'all desparately need help with, however, is in documentation. I recently had to rescue a co-worker

Re: [Freeipa-devel] Wiki Access

2015-07-29 Thread Dan Mossor
On 07/29/2015 03:10 PM, Rob Crittenden wrote: Dan Mossor wrote: Greetings FreeIPA devs. I just wanted to express my sincere thank you for all y'all do - FreeIPA is an awesome product that just keeps getting better and better. One area where y'all desparately need help with, however, is in

[Freeipa-devel] [PATCH] 0029 Work around python-nss bug on unrecognised OIDs

2015-07-29 Thread Fraser Tweedale
The attached patch works around a bug in python-nss triggered by unrecognised PKCS#10 request extensions. It is needed for https://fedorahosted.org/freeipa/ticket/4752 but can be reverted once the python-nss bug is fixed. Thanks, Fraser From b1846bd1130bb403334cdef0aaf994b45c66d4d7 Mon Sep 17

Re: [Freeipa-devel] [PATCH] 0028 add --out option to user-show

2015-07-29 Thread Fraser Tweedale
On Thu, Jul 30, 2015 at 10:19:19AM +1000, Fraser Tweedale wrote: On Wed, Jul 29, 2015 at 03:48:47PM +0200, Jan Cholasta wrote: Dne 29.7.2015 v 15:46 Martin Basti napsal(a): On 29/07/15 15:41, Martin Basti wrote: On 25/07/15 03:40, Fraser Tweedale wrote: On Fri, Jul 24, 2015 at 05:53:56PM

[Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-07-29 Thread Michael Šimáček
Hi, this is the first attempt to port FreeIPA from deprecated python3-incompatible python-krbV library to python-gssapi. The patch depends on python-kerberos-python-gssapi patch [1] to apply cleanly, but the overlap is small, so I think it can be at least partially reviewed without it.

Re: [Freeipa-devel] [PATCH 0286, 0290] Sysrestore: copy files instead of moving them to avoid SELinux issues

2015-07-29 Thread David Kupka
On 17/07/15 16:33, Martin Basti wrote: On 17/07/15 13:57, Petr Vobornik wrote: On 07/17/2015 01:46 PM, Petr Vobornik wrote: On 07/17/2015 01:44 PM, Alexander Bokovoy wrote: On Fri, 17 Jul 2015, Martin Basti wrote: From b05f4a2e17ae00e5c20e5eb7bd046472f100e0ad Mon Sep 17 00:00:00 2001 From:

[Freeipa-devel] [PATCH 0051] IPA server and replica installers can accept options from config file

2015-07-29 Thread Martin Babinsky
Initial attempt to implement https://fedorahosted.org/freeipa/ticket/4517 Some points to discuss: 1.) name of the config entries: currently the option names are derived from CLI options but have underscores in them instead of dashes. Maybe keeping the CLI option names also for config entries

Re: [Freeipa-devel] [PATCH 0051] IPA server and replica installers can accept options from config file

2015-07-29 Thread Petr Vobornik
On 07/29/2015 12:37 PM, Alexander Bokovoy wrote: On Wed, 29 Jul 2015, Martin Babinsky wrote: Initial attempt to implement https://fedorahosted.org/freeipa/ticket/4517 Some points to discuss: 1.) name of the config entries: currently the option names are derived from CLI options but have

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-07-29 Thread Christian Heimes
On 2015-07-29 10:09, Michael Šimáček wrote: GSSAPI doesn't provide any method (that I'm aware of) to get default ccache name. In most cases this is not needed as we can simply not pass any name and it will use the default. The ldap plugin had to be adjusted for this - the connect method now

Re: [Freeipa-devel] [PATCH] 906 webui: fix regressions failed auth messages

2015-07-29 Thread Martin Basti
On 28/07/15 14:05, Petr Vobornik wrote: 1. after logout, krb auth no longer shows session expired but correct Authentication with Kerberos failed. 2. The password or username you entered is incorrect. is showed on failed forms-based auth. https://fedorahosted.org/freeipa/ticket/5163 Works

Re: [Freeipa-devel] [PATCH 0051] IPA server and replica installers can accept options from config file

2015-07-29 Thread Jan Cholasta
Dne 29.7.2015 v 12:50 Petr Vobornik napsal(a): On 07/29/2015 12:37 PM, Alexander Bokovoy wrote: On Wed, 29 Jul 2015, Martin Babinsky wrote: 2.) Config sections: there is currently only one valid section named '[global]' in accordance with the format of 'default.conf'. Should we have separate

Re: [Freeipa-devel] [PATCH 0051] IPA server and replica installers can accept options from config file

2015-07-29 Thread Jan Cholasta
Dne 29.7.2015 v 12:20 Martin Babinsky napsal(a): Initial attempt to implement https://fedorahosted.org/freeipa/ticket/4517 Some points to discuss: 1.) name of the config entries: currently the option names are derived from CLI options but have underscores in them instead of dashes. Maybe

Re: [Freeipa-devel] [PATCH 0051] IPA server and replica installers can accept options from config file

2015-07-29 Thread Alexander Bokovoy
On Wed, 29 Jul 2015, Martin Babinsky wrote: Initial attempt to implement https://fedorahosted.org/freeipa/ticket/4517 Some points to discuss: 1.) name of the config entries: currently the option names are derived from CLI options but have underscores in them instead of dashes. Maybe keeping

Re: [Freeipa-devel] [PATCH 0002] TEST: Stageuser plugin

2015-07-29 Thread Lenka Doudova
Hi, thanks a lot for the comments, will work on it tomorrow. Lenka Dne 29.7.2015 v 15:27 Martin Basti napsal(a): On 27/07/15 16:47, Lenka Doudova wrote: Hi, I'm attaching a patch with automated tests for stageuser plugin (https://fedorahosted.org/freeipa/ticket/3813). The user plugin test

Re: [Freeipa-devel] [PATCH] 0028 add --out option to user-show

2015-07-29 Thread Martin Basti
On 25/07/15 03:40, Fraser Tweedale wrote: On Fri, Jul 24, 2015 at 05:53:56PM +0200, Tomas Babej wrote: On 07/24/2015 05:34 PM, Martin Basti wrote: On 24/07/15 16:52, Tomas Babej wrote: On 07/24/2015 03:40 PM, Fraser Tweedale wrote: The attached patch adds --out option to user-show for

Re: [Freeipa-devel] [PATCH 0002] TEST: Stageuser plugin

2015-07-29 Thread Martin Basti
On 27/07/15 16:47, Lenka Doudova wrote: Hi, I'm attaching a patch with automated tests for stageuser plugin (https://fedorahosted.org/freeipa/ticket/3813). The user plugin test is affected as well (one class was added). The tests seem a bit of a mess even to myself, but what with the way

Re: [Freeipa-devel] [PATCH 0286, 0290] Sysrestore: copy files instead of moving them to avoid SELinux issues

2015-07-29 Thread Martin Basti
On 29/07/15 09:02, David Kupka wrote: On 17/07/15 16:33, Martin Basti wrote: On 17/07/15 13:57, Petr Vobornik wrote: On 07/17/2015 01:46 PM, Petr Vobornik wrote: On 07/17/2015 01:44 PM, Alexander Bokovoy wrote: On Fri, 17 Jul 2015, Martin Basti wrote: From

Re: [Freeipa-devel] [PATCH 0050] ACI plugin: correctly parse bind rules enclosed in parentheses

2015-07-29 Thread Martin Basti
On 28/07/15 14:11, Martin Basti wrote: On 28/07/15 13:33, Martin Babinsky wrote: On 07/27/2015 05:10 PM, Martin Basti wrote: On 23/07/15 16:06, Martin Babinsky wrote: This is a quick fix for https://fedorahosted.org/freeipa/ticket/5037 NACK I do not like your change in first regexp too

Re: [Freeipa-devel] [PATCH 016] Require Dogtag PKI = 10.2.6

2015-07-29 Thread Martin Basti
On 23/07/15 12:26, Christian Heimes wrote: Dogtag 10.2.6 comes with two fixes for cloning from 9.x to 10.x instances: https://fedorahosted.org/pki/ticket/1495 https://fedorahosted.org/pki/ticket/1488 https://fedorahosted.org/freeipa/ticket/5140

Re: [Freeipa-devel] [PATCH 0002] TEST: Stageuser plugin

2015-07-29 Thread Martin Basti
On 29/07/15 15:29, Lenka Doudova wrote: Hi, thanks a lot for the comments, will work on it tomorrow. Lenka Dne 29.7.2015 v 15:27 Martin Basti napsal(a): On 27/07/15 16:47, Lenka Doudova wrote: Hi, I'm attaching a patch with automated tests for stageuser plugin

[Freeipa-devel] [PATCH 0052] Add Chromium configuration note under Chrome section in ssbrowser

2015-07-29 Thread Gabe Alford
Hello, As Chromium and Chrome are configured similarly but are configured in different /etc directories, this patch adds a note to the Chrome section in ssbrowser.html stating that. Thanks, Gabe From a7fb316d3cc273531947768e6b93c656a6bad1bb Mon Sep 17 00:00:00 2001 From: Gabe

Re: [Freeipa-devel] [PATCH] 0028 add --out option to user-show

2015-07-29 Thread Martin Basti
On 29/07/15 15:41, Martin Basti wrote: On 25/07/15 03:40, Fraser Tweedale wrote: On Fri, Jul 24, 2015 at 05:53:56PM +0200, Tomas Babej wrote: On 07/24/2015 05:34 PM, Martin Basti wrote: On 24/07/15 16:52, Tomas Babej wrote: On 07/24/2015 03:40 PM, Fraser Tweedale wrote: The attached patch