[Freeipa-devel] [PATCH 0062] custodia: ipa-upgrade failed on replica

2015-11-04 Thread Gabe Alford
Hello, Fix for https://fedorahosted.org/freeipa/ticket/5374. I could reproduce it as the Custodia update file was missing from the updates Makefile which in turn was not being packaged into the rpms. Thanks, Gabe From 871822779696ece33f36e6940ecc96fc090b7ea2 Mon Sep 17 00:00:00 2001 From: Gabe

Re: [Freeipa-devel] [PATCH] SPEC: Drop sssd from BuildRequires

2015-11-04 Thread Lukas Slebodnik
On (05/11/15 09:24), Alexander Bokovoy wrote: >On Thu, 05 Nov 2015, Lukas Slebodnik wrote: >>On (04/11/15 18:12), Alexander Bokovoy wrote: >>>On Tue, 03 Nov 2015, Lukas Slebodnik wrote: >From c466be0e769a80fe204fc70675b8fa0ea3efb7b2 Mon Sep 17 00:00:00 2001 From: Lukas Slebodnik

Re: [Freeipa-devel] [PATCH] SPEC: Drop sssd from BuildRequires

2015-11-04 Thread Alexander Bokovoy
On Thu, 05 Nov 2015, Lukas Slebodnik wrote: On (04/11/15 18:12), Alexander Bokovoy wrote: On Tue, 03 Nov 2015, Lukas Slebodnik wrote: From c466be0e769a80fe204fc70675b8fa0ea3efb7b2 Mon Sep 17 00:00:00 2001 From: Lukas Slebodnik Date: Mon, 2 Nov 2015 19:52:57 +

Re: [Freeipa-devel] [PATCH] SPEC: Drop sssd from BuildRequires

2015-11-04 Thread Lukas Slebodnik
On (04/11/15 18:12), Alexander Bokovoy wrote: >On Tue, 03 Nov 2015, Lukas Slebodnik wrote: >>>From c466be0e769a80fe204fc70675b8fa0ea3efb7b2 Mon Sep 17 00:00:00 2001 >>From: Lukas Slebodnik >>Date: Mon, 2 Nov 2015 19:52:57 + >>Subject: [PATCH] SPEC: Drop sssd from

Re: [Freeipa-devel] [PATCH] ca-less tests updated - POC

2015-11-04 Thread Oleg Fayans
Hi Jan, Could you take a look at these, whenever you are free? On 10/30/2015 02:57 PM, Oleg Fayans wrote: Hi, The following patches contain updates to ca-less integration tests. It's still a proof of concept: 2 tests still fail seemingly due to the change in target system logic (marked as

[Freeipa-devel] [PATCH] Normalize manager name in user-add

2015-11-04 Thread Abhijeet Kasurde
Hi All, Please find the patch for https://fedorahosted.org/freeipa/ticket/5387 Thanks, Abhijeet Kasurde From 4be9fef17e6b31ad2b3ebb496d4a60887ca97b5c Mon Sep 17 00:00:00 2001 From: Abhijeet Kasurde Date: Thu, 5 Nov 2015 12:22:59 +0530 Subject: [PATCH] Added fix to

[Freeipa-devel] [Update]Time-Based Account Policies

2015-11-04 Thread Stanislav Laznicka
Hi, The fixed patches to Martin^2's and Jakub's reviews are almost ready, there are just a few things left. Martin B. mentioned in his review that '~' might not be the best delimiter for range values in the HBAC time policies language as it is not commonly used for that purpose. I started

Re: [Freeipa-devel] [Update]Time-Based Account Policies

2015-11-04 Thread Martin Basti
On 04.11.2015 13:46, Stanislav Laznicka wrote: Hi, The fixed patches to Martin^2's and Jakub's reviews are almost ready, there are just a few things left. Martin B. mentioned in his review that '~' might not be the best delimiter for range values in the HBAC time policies language as it is

[Freeipa-devel] [PATCH 0344] Use absolute domain name in detection of A/AAAA records

2015-11-04 Thread Martin Basti
Patch attached. https://fedorahosted.org/freeipa/ticket/5421 From 5e1ff605e30e0b72bf43d90cd72397ba08e68bd3 Mon Sep 17 00:00:00 2001 From: Martin Basti Date: Wed, 4 Nov 2015 16:09:21 +0100 Subject: [PATCH] Use absolute domain in detection of A/ records Python dns

Re: [Freeipa-devel] [PATCH 0006-0010] Low hanging fruit for #5343 -- platform abstractions

2015-11-04 Thread Tomas Babej
On 11/04/2015 12:58 PM, Tomas Babej wrote: > On 10/21/2015 06:05 PM, Timo Aaltonen wrote: >> On 07.10.2015 17:26, Martin Basti wrote: >>> thanks comments inline >> >> Hey, >> >> I hope these versions address the issues in the first batch.. >> > > Hi Timo, > > this patchset works fine, thanks.

Re: [Freeipa-devel] [PATCH 0006-0010] Low hanging fruit for #5343 -- platform abstractions

2015-11-04 Thread Tomas Babej
On 10/21/2015 06:05 PM, Timo Aaltonen wrote: > On 07.10.2015 17:26, Martin Basti wrote: >> thanks comments inline > > Hey, > > I hope these versions address the issues in the first batch.. > Hi Timo, this patchset works fine, thanks. Seems you generated it in a non-standard way, it could not

Re: [Freeipa-devel] [PATCH 0093] perform connectivity checks for all topology suffixes during node deletion

2015-11-04 Thread Martin Babinsky
On 10/30/2015 05:06 PM, Martin Babinsky wrote: On 10/30/2015 03:38 PM, Petr Vobornik wrote: On 10/30/2015 03:26 PM, Martin Babinsky wrote: patch for https://fedorahosted.org/freeipa/ticket/5309 The ticket itself is about connectivity checks in topology suffixes, but there is a code

Re: [Freeipa-devel] [PATCH] SPEC: Drop sssd from BuildRequires

2015-11-04 Thread Alexander Bokovoy
On Tue, 03 Nov 2015, Lukas Slebodnik wrote: From c466be0e769a80fe204fc70675b8fa0ea3efb7b2 Mon Sep 17 00:00:00 2001 From: Lukas Slebodnik Date: Mon, 2 Nov 2015 19:52:57 + Subject: [PATCH] SPEC: Drop sssd from BuildRequires Packaging of sssd was changed and more

Re: [Freeipa-devel] [PATCH 0093] perform connectivity checks for all topology suffixes during node deletion

2015-11-04 Thread Petr Vobornik
On 11/04/2015 01:30 PM, Martin Babinsky wrote: On 10/30/2015 05:06 PM, Martin Babinsky wrote: On 10/30/2015 03:38 PM, Petr Vobornik wrote: On 10/30/2015 03:26 PM, Martin Babinsky wrote: patch for https://fedorahosted.org/freeipa/ticket/5309 The ticket itself is about connectivity checks in

[Freeipa-devel] misleading error message?

2015-11-04 Thread Oleg Fayans
Hi all, Is there a way to switch back to the old (based on ipa-replica-prepare) replica installation workflow having domain level=1? The following error message suggests that it is possible: $ ipa-replica-install --setup-ca --setup-dns --forwarder=10.38.5.26 -P testuser Password for

Re: [Freeipa-devel] misleading error message?

2015-11-04 Thread Martin Basti
On 04.11.2015 11:25, Oleg Fayans wrote: Hi all, Is there a way to switch back to the old (based on ipa-replica-prepare) replica installation workflow having domain level=1? The following error message suggests that it is possible: $ ipa-replica-install --setup-ca --setup-dns

Re: [Freeipa-devel] [PATCH 0082] remove Kerberos authenticators after service uninstall

2015-11-04 Thread Martin Babinsky
On 10/22/2015 05:32 PM, Petr Spacek wrote: On 21.10.2015 17:55, Martin Babinsky wrote: On 10/13/2015 09:17 AM, Petr Spacek wrote: On 12.10.2015 13:38, Martin Babinsky wrote: each service possessing Kerberos keytab wiil now remove it and destroy any associated credentials cache during its