Re: [Freeipa-devel] New freeipa-tools repo

2015-07-30 Thread Martin Kosek
On 07/30/2015 01:51 PM, Alexander Bokovoy wrote: On Thu, 30 Jul 2015, Martin Kosek wrote: Hello all, Right now, the people pushing patches to FreeIPA use Petr's great ipatool that is part of Petr's (CCed) ipa-tools repo forked from my old ipa-tools repository. Recently, we have found that

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-07-30 Thread Michael Šimáček
On 2015-07-29 11:56, Christian Heimes wrote: On 2015-07-29 10:09, Michael Šimáček wrote: GSSAPI doesn't provide any method (that I'm aware of) to get default ccache name. In most cases this is not needed as we can simply not pass any name and it will use the default. The ldap plugin had to be

Re: [Freeipa-devel] [PATH 0053] Inconsistency between ipasearchrecordslimit and --sizelimit

2015-07-30 Thread Gabe Alford
On Thu, Jul 30, 2015 at 1:32 AM, Jan Cholasta jchol...@redhat.com wrote: Dne 30.7.2015 v 09:23 Jan Cholasta napsal(a): Hi, Dne 29.7.2015 v 17:23 Gabe Alford napsal(a): Hello, Fix for https://fedorahosted.org/freeipa/ticket/4023 Actually, 0 means unlimited for size limit, see

Re: [Freeipa-devel] ipa-server-install completely broken in upstream

2015-07-30 Thread Oleg Fayans
Hi Alexander, On 07/30/2015 02:23 PM, Alexander Bokovoy wrote: On Thu, 30 Jul 2015, Oleg Fayans wrote: Hi all, Any attempts to install ipa server from today's upstream code result in ipa-server-install silently exiting without doing anything. Here is how it looks like:

[Freeipa-devel] [PATCH 021] Validate vault's file parameters

2015-07-30 Thread Christian Heimes
The patch fixes the issue described in #5155 as well as a couple of more potential issues. The vault plugin didn't catch IOError on multiple occasions. A user can pass file names for password, public and private key files to the vault plugin. The plugin attempts to read from these files. If any

[Freeipa-devel] CLI parameter: TextFile, BinaryFile and mutually exclusive group

2015-07-30 Thread Christian Heimes
Hello, While I was working on the ticket https://fedorahosted.org/freeipa/ticket/5155, I noticed a couple of additional places that may raise an IOError. Instead of a File() paramaeter, the vault plugin uses Str() paramater in combination with open() to read files. For passwords I can mostly

[Freeipa-devel] ipa-server-install completely broken in upstream

2015-07-30 Thread Oleg Fayans
Hi all, Any attempts to install ipa server from today's upstream code result in ipa-server-install silently exiting without doing anything. Here is how it looks like: root@f22master:/home/ofayans]$ rpm -q freeipa-server freeipa-server-4.2.90.201507300929GIT4e18a62-0.fc22.x86_64

Re: [Freeipa-devel] ipa-server-install completely broken in upstream

2015-07-30 Thread Oleg Fayans
Somehow the problem disappeared after vm restart. Don't know what it was On 07/30/2015 02:18 PM, Oleg Fayans wrote: Hi all, Any attempts to install ipa server from today's upstream code result in ipa-server-install silently exiting without doing anything. Here is how it looks like:

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-07-30 Thread Michael Šimáček
On 2015-07-29 19:20, Robbie Harwood wrote: Michael Šimáček msima...@redhat.com writes: GSSAPI doesn't provide any method (that I'm aware of) to get default ccache name. In most cases this is not needed as we can simply not pass any name and it will use the default. The ldap plugin had to be

Re: [Freeipa-devel] ipa-server-install completely broken in upstream

2015-07-30 Thread Martin Basti
On 30/07/15 14:18, Oleg Fayans wrote: Hi all, Any attempts to install ipa server from today's upstream code result in ipa-server-install silently exiting without doing anything. Here is how it looks like: root@f22master:/home/ofayans]$ rpm -q freeipa-server

Re: [Freeipa-devel] ipa-server-install completely broken in upstream

2015-07-30 Thread Oleg Fayans
On 07/30/2015 02:39 PM, Alexander Bokovoy wrote: On Thu, 30 Jul 2015, Oleg Fayans wrote: Hi Alexander, On 07/30/2015 02:23 PM, Alexander Bokovoy wrote: On Thu, 30 Jul 2015, Oleg Fayans wrote: Hi all, Any attempts to install ipa server from today's upstream code result in

Re: [Freeipa-devel] [PATCH 0058] dns: do not add (forward)zone if it is already resolvable.

2015-07-30 Thread Martin Basti
On 29/07/15 16:12, David Kupka wrote: https://fedorahosted.org/freeipa/ticket/5087 NACK You forgot to update API.txt file -- Martin Basti -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-07-30 Thread Christian Heimes
On 2015-07-30 15:06, Michael Šimáček wrote: I didn't use ctypes, because it was advised against on this list: https://www.redhat.com/archives/freeipa-devel/2012-February/msg00268.html For the tests it's probably fine, but so is using klist. It would actually help a lot with getting the default

Re: [Freeipa-devel] [PATCH 0291, 0292] Limit max age of replication changelog

2015-07-30 Thread Martin Basti
On 22/07/15 17:03, Martin Basti wrote: On 20/07/15 19:04, Mark Reynolds wrote: On 07/20/2015 12:50 PM, Martin Basti wrote: On 20/07/15 17:48, Petr Vobornik wrote: On 07/20/2015 05:24 PM, Rob Crittenden wrote: Martin Basti wrote: https://fedorahosted.org/freeipa/ticket/5086 Patch

Re: [Freeipa-devel] [PATCH 0291, 0292] Limit max age of replication changelog

2015-07-30 Thread Ludwig Krispenz
On 07/30/2015 03:14 PM, Martin Basti wrote: On 22/07/15 17:03, Martin Basti wrote: On 20/07/15 19:04, Mark Reynolds wrote: On 07/20/2015 12:50 PM, Martin Basti wrote: On 20/07/15 17:48, Petr Vobornik wrote: On 07/20/2015 05:24 PM, Rob Crittenden wrote: Martin Basti wrote:

Re: [Freeipa-devel] [PATCH 0002] TEST: Stageuser plugin

2015-07-30 Thread Martin Basti
On 30/07/15 16:09, Martin Basti wrote: On 29/07/15 16:10, Martin Basti wrote: On 29/07/15 15:29, Lenka Doudova wrote: Hi, thanks a lot for the comments, will work on it tomorrow. Lenka Dne 29.7.2015 v 15:27 Martin Basti napsal(a): On 27/07/15 16:47, Lenka Doudova wrote: Hi, I'm attaching

[Freeipa-devel] New freeipa-tools repo

2015-07-30 Thread Martin Kosek
Hello all, Right now, the people pushing patches to FreeIPA use Petr's great ipatool that is part of Petr's (CCed) ipa-tools repo forked from my old ipa-tools repository. Recently, we have found that ipatool needs update due to 4.2 being released, so I think this is a great moment to make this

Re: [Freeipa-devel] ipa-server-install completely broken in upstream

2015-07-30 Thread Alexander Bokovoy
On Thu, 30 Jul 2015, Oleg Fayans wrote: Hi all, Any attempts to install ipa server from today's upstream code result in ipa-server-install silently exiting without doing anything. Here is how it looks like: root@f22master:/home/ofayans]$ rpm -q freeipa-server

Re: [Freeipa-devel] CLI parameter: TextFile, BinaryFile and mutually exclusive group

2015-07-30 Thread Christian Heimes
On 2015-07-30 14:37, Jan Cholasta wrote: Hi, Dne 30.7.2015 v 14:07 Christian Heimes napsal(a): Hello, While I was working on the ticket https://fedorahosted.org/freeipa/ticket/5155, I noticed a couple of additional places that may raise an IOError. Instead of a File() paramaeter, the

Re: [Freeipa-devel] ipa-server-install completely broken in upstream

2015-07-30 Thread Oleg Fayans
Hi Martin, On 07/30/2015 02:31 PM, Martin Basti wrote: On 30/07/15 14:18, Oleg Fayans wrote: Hi all, Any attempts to install ipa server from today's upstream code result in ipa-server-install silently exiting without doing anything. Here is how it looks like:

Re: [Freeipa-devel] [patch 0007] tests: Allow Tracker.dn be an instance of Fuzzy

2015-07-30 Thread Lenka Doudova
ACK, just configure your email client not to prepend '' to the patch. Lenka Dne 27.7.2015 v 12:32 Milan Kubík napsal(a): Hi, the patch changes the check on the Tracker.dn setter, allowing to use an instance of ipatests.util.Fuzzy to ease writing Trackers for plugins like CA ACL, which use

[Freeipa-devel] [PATCH] Modernize number literals

2015-07-30 Thread Petr Viktorin
Hello, This patch switches to Python3-compatible syntax for integer literals. -- Petr Viktorin From f367469cda3280d42a56f5ae21ca64237b977ba3 Mon Sep 17 00:00:00 2001 From: Petr Viktorin pvikt...@redhat.com Date: Wed, 15 Jul 2015 16:38:06 +0200 Subject: [PATCH] Modernize number literals Use

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-07-30 Thread Robbie Harwood
Michael Šimáček msima...@redhat.com writes: On 2015-07-29 19:20, Robbie Harwood wrote: Michael Šimáček msima...@redhat.com writes: -# The keytab may have stale key material (from older trust-add run) -if not os.path.isfile(oneway_ccache_name): -oneway_ccache =

[Freeipa-devel] programmer documentation

2015-07-30 Thread Milan Kubík
Hi all, I'm curious, is there some documentation of the IPA internals? During my playing with plugins, I was quite amazed and frustrated at the code, not entirely (or remotely) understanding what happens after the call to a command starts and before I get the result. The main problem I have is

Re: [Freeipa-devel] [PATCH 0051] IPA server and replica installers can accept options from config file

2015-07-30 Thread Jan Cholasta
Dne 29.7.2015 v 17:43 Petr Vobornik napsal(a): On 07/29/2015 05:13 PM, Martin Babinsky wrote: On 07/29/2015 01:25 PM, Jan Cholasta wrote: Dne 29.7.2015 v 12:20 Martin Babinsky napsal(a): Initial attempt to implement https://fedorahosted.org/freeipa/ticket/4517 Some points to discuss: 1.)

Re: [Freeipa-devel] [PATH 0053] Inconsistency between ipasearchrecordslimit and --sizelimit

2015-07-30 Thread Jan Cholasta
Hi, Dne 29.7.2015 v 17:23 Gabe Alford napsal(a): Hello, Fix for https://fedorahosted.org/freeipa/ticket/4023 Actually, 0 means unlimited for size limit, see http://www.python-ldap.org/doc/html/ldap.html#ldap.LDAPObject.search_ext_s. Honza -- Jan Cholasta -- Manage your subscription for

Re: [Freeipa-devel] Move 4.1.5 tickets to 4.2.1

2015-07-30 Thread Martin Kosek
On 07/28/2015 05:21 PM, Martin Kosek wrote: With FreeIPA 4.2.0 released, I think we can move all the 4.1.5 tickets to FreeIPA 4.2.1 bucket and the fixes be based on that release. I would only do exception if some of the fixes are critical for platforms that did not adopt FreeIPA 4.2.0 yet

Re: [Freeipa-devel] [PATH 0053] Inconsistency between ipasearchrecordslimit and --sizelimit

2015-07-30 Thread Jan Cholasta
Dne 30.7.2015 v 09:23 Jan Cholasta napsal(a): Hi, Dne 29.7.2015 v 17:23 Gabe Alford napsal(a): Hello, Fix for https://fedorahosted.org/freeipa/ticket/4023 Actually, 0 means unlimited for size limit, see http://www.python-ldap.org/doc/html/ldap.html#ldap.LDAPObject.search_ext_s. After

Re: [Freeipa-devel] programmer documentation

2015-07-30 Thread Alexander Bokovoy
On Thu, 30 Jul 2015, Milan Kubík wrote: Hi all, I'm curious, is there some documentation of the IPA internals? During my playing with plugins, I was quite amazed and frustrated at the code, not entirely (or remotely) understanding what happens after the call to a command starts and before I

Re: [Freeipa-devel] programmer documentation

2015-07-30 Thread Milan Kubík
On 07/30/2015 05:42 PM, Alexander Bokovoy wrote: On Thu, 30 Jul 2015, Milan Kubík wrote: Hi all, I'm curious, is there some documentation of the IPA internals? During my playing with plugins, I was quite amazed and frustrated at the code, not entirely (or remotely) understanding what happens

Re: [Freeipa-devel] [PATCH 017] certprofile-import: do not require profileId in profile data

2015-07-30 Thread Christian Heimes
On 2015-07-24 12:41, Martin Basti wrote: On 24/07/15 05:15, Fraser Tweedale wrote: diff --git a/ipalib/plugins/certprofile.py b/ipalib/plugins/certprofile.py index 5550ed942521dbab2e783fba1570520268f9b378..fe8934690fe09499f0bacb6610d9815a2b4367a4 100644 --- a/ipalib/plugins/certprofile.py