Re: [Freeipa-devel] rename topology suffixes

2015-11-26 Thread Jan Cholasta
On 26.11.2015 17:15, Petr Vobornik wrote: New topology management gives names to managed suffixes: ipaca: o=ipaca realm: dc=example,dc=com We already had several offline discussions to change the names because they could be better. It would be difficult to change them after release of 4.3.

Re: [Freeipa-devel] [PATCH 0069] ipa-replica-install support caless install with promotion.

2015-11-26 Thread David Kupka
On 26/11/15 15:22, David Kupka wrote: On 26/11/15 15:13, David Kupka wrote: On 26/11/15 15:01, David Kupka wrote: https://fedorahosted.org/freeipa/ticket/5441 Replaced accidentally inserted tabs. Fixed indentation I screwed up when replacing tabs :-/ Hello everyone! I did not

Re: [Freeipa-devel] [PATCH] First part of the replica promotion tests + testplan

2015-11-26 Thread Oleg Fayans
Hi Martin, I agree to all your points but one. please, see my comment below On 11/25/2015 07:42 PM, Martin Basti wrote: Hi, 0) Note Please be aware of https://fedorahosted.org/freeipa/ticket/5469 during KRA testing 1) Please do not use MIN and MAX_DOMAIN_LEVEL constants, this may change over

Re: [Freeipa-devel] [PATCH 0100] replica promotion: modify default.conf even if DS configuration fails

2015-11-26 Thread Martin Babinsky
On 11/20/2015 10:46 AM, Martin Babinsky wrote: On 11/20/2015 10:19 AM, Martin Babinsky wrote: Fixes https://fedorahosted.org/freeipa/ticket/5417 Sorry forgot to add the patch. Attaching new version of patch rebased for current master and bumping for review. -- Martin^3 Babinsky From

[Freeipa-devel] [PATCH 0105] fix a typo in replica DS creation code

2015-11-26 Thread Martin Babinsky
My OCD self cringes every time I see "retriving DS Certificate" so I here's a patch that fixes this. -- Martin^3 Babinsky From 1c1e0165016b88fc91e57ba4ec6bb1b3099a049f Mon Sep 17 00:00:00 2001 From: Martin Babinsky Date: Thu, 26 Nov 2015 10:52:45 +0100 Subject: [PATCH]

Re: [Freeipa-devel] [PATCH 0105] fix a typo in replica DS creation code

2015-11-26 Thread Martin Basti
On 26.11.2015 11:01, Martin Babinsky wrote: My OCD self cringes every time I see "retriving DS Certificate" so I here's a patch that fixes this. A C K Pushed to master: b543c9a1374dabbbcfecec87c59f9995911f1cfd -- Manage your subscription for the Freeipa-devel mailing list:

Re: [Freeipa-devel] [pytest-multihost-devel][PATCH] Functions for handling various file and directory operations

2015-11-26 Thread Petr Viktorin
On 11/26/2015 07:42 AM, Abhijeet Kasurde wrote: > Hi Petr, > > On 11/25/2015 08:27 PM, Petr Viktorin wrote: >> On 11/25/2015 10:08 AM, Abhijeet Kasurde wrote: >>> Hi All, >>> >>> Please find the patch for pytest-multihost-plugin. >>> >>> Fixes :

Re: [Freeipa-devel] [PATCH] 0749 Package ipapython, ipalib, ipaplatform, ipatests for Python 3

2015-11-26 Thread Jan Cholasta
Hi, On 6.11.2015 13:07, Petr Viktorin wrote: Hello, The Python 3 port is not 100% done, but I think the time has come to start packaging the py3 bits. This will make it easier to plug into CI. The existing Python 2 packages should not change, except I've added "freeipa-common" with files that

Re: [Freeipa-devel] [PATCH 0384] ipa-client-automount: Leverage IPAChangeConf to configure the idmapd

2015-11-26 Thread Tomas Babej
On 11/25/2015 04:33 PM, Gabe Alford wrote: > Ack. > > Gabe > > On Wed, Nov 11, 2015 at 7:22 AM, Tomas Babej > wrote: > > Hi, > > Simple regexp substitution caused that the domain directive fell under > an inapprorpiate section, if

Re: [Freeipa-devel] [PATCH 0385] replicainstall: Add possiblity to install client in one

2015-11-26 Thread Jan Cholasta
On 25.11.2015 09:01, Jan Cholasta wrote: On 24.11.2015 15:56, Tomas Babej wrote: On 11/23/2015 04:43 PM, Jan Cholasta wrote: Hi, On 23.11.2015 12:50, Tomas Babej wrote: Hi, this patch implements the single command replica promotion for #5310. Tomas

[Freeipa-devel] default / unexpressed / implicit values in LDAP and elsewhere

2015-11-26 Thread Petr Spacek
Hello, The Problem === During work on DNSSEC patches for FreeIPA it repeatedly happened that I had to hard-code default values for optional LDAP attributes to various places. A constant in code is a nice thing, but it does not help to CLI/WebUI/API users because they do not see the

Re: [Freeipa-devel] [IPAQE][REVIEW-REQUEST][TEST PLAN] Replica promotion

2015-11-26 Thread Petr Vobornik
On 11/23/2015 06:51 PM, Oleg Fayans wrote: Hi all, Here is a draft of the Replica Promotion test plan http://www.freeipa.org/page/V4/Replica_Promotion/Test_plan == Test case: Unprivileged users are not allowed to enroll and promote clients == User credentials are passed there through -p

Re: [Freeipa-devel] default / unexpressed / implicit values in LDAP and elsewhere

2015-11-26 Thread Jan Cholasta
Hi, On 26.11.2015 14:17, Petr Spacek wrote: Hello, The Problem === During work on DNSSEC patches for FreeIPA it repeatedly happened that I had to hard-code default values for optional LDAP attributes to various places. A constant in code is a nice thing, but it does not help to

Re: [Freeipa-devel] [PATCH 0355-0356] Prevent using replica file with ipa-ca-install and domain

2015-11-26 Thread Martin Basti
On 24.11.2015 16:48, Jan Cholasta wrote: On 24.11.2015 10:21, Martin Basti wrote: https://fedorahosted.org/freeipa/ticket/5455 Patches attached. +def run(self): +self._run() Wouldn't it be better to rename _run() to run() instead? Updated patches attached. From

[Freeipa-devel] [PATCH 0069] ipa-replica-install support caless install with promotion.

2015-11-26 Thread David Kupka
https://fedorahosted.org/freeipa/ticket/5441 -- David Kupka From bae8482da29c97becbd1d5de58aed91c3e5f05d9 Mon Sep 17 00:00:00 2001 From: David Kupka Date: Thu, 26 Nov 2015 09:01:27 +0100 Subject: [PATCH] ipa-replica-install support caless install with promotion.

Re: [Freeipa-devel] [PATCH 0100] replica promotion: modify default.conf even if DS configuration fails

2015-11-26 Thread Petr Vobornik
On 11/26/2015 10:56 AM, Martin Babinsky wrote: On 11/20/2015 10:46 AM, Martin Babinsky wrote: On 11/20/2015 10:19 AM, Martin Babinsky wrote: Fixes https://fedorahosted.org/freeipa/ticket/5417 Sorry forgot to add the patch. Attaching new version of patch rebased for current master and

Re: [Freeipa-devel] default / unexpressed / implicit values in LDAP and elsewhere

2015-11-26 Thread Petr Spacek
On 26.11.2015 14:58, Jan Cholasta wrote: > Hi, > > On 26.11.2015 14:17, Petr Spacek wrote: >> Hello, >> >> The Problem >> === >> During work on DNSSEC patches for FreeIPA it repeatedly happened that I had >> to >> hard-code default values for optional LDAP attributes to various places.

Re: [Freeipa-devel] [PATCH 0069] ipa-replica-install support caless install with promotion.

2015-11-26 Thread David Kupka
On 26/11/15 15:01, David Kupka wrote: https://fedorahosted.org/freeipa/ticket/5441 Replaced accidentally inserted tabs. -- David Kupka From bae8482da29c97becbd1d5de58aed91c3e5f05d9 Mon Sep 17 00:00:00 2001 From: David Kupka Date: Thu, 26 Nov 2015 09:01:27 +0100 Subject:

Re: [Freeipa-devel] [PATCH 0069] ipa-replica-install support caless install with promotion.

2015-11-26 Thread David Kupka
On 26/11/15 15:13, David Kupka wrote: On 26/11/15 15:01, David Kupka wrote: https://fedorahosted.org/freeipa/ticket/5441 Replaced accidentally inserted tabs. Fixed indentation I screwed up when replacing tabs :-/ -- David Kupka From 7716a6797b547ba01d189c1772a5896c7683 Mon Sep 17

Re: [Freeipa-devel] [PATCH 0015] mod_auth_gssapi: Remove ntlmssp support and restrict, mechanism to krb5

2015-11-26 Thread Martin Basti
On 25.11.2015 16:36, Gabe Alford wrote: Bump for push. May need a rebase. Thank you, rebased. Pushed to master: b6c893aae63b6b77871c775d062a5c7e1c470ad9 On Wed, Jul 22, 2015 at 7:49 AM, Simo Sorce > wrote: - Original Message -

[Freeipa-devel] rename topology suffixes

2015-11-26 Thread Petr Vobornik
New topology management gives names to managed suffixes: ipaca: o=ipaca realm: dc=example,dc=com We already had several offline discussions to change the names because they could be better. It would be difficult to change them after release of 4.3. New proposals: ca for o=ipaca domain for

Re: [Freeipa-devel] rename topology suffixes

2015-11-26 Thread Martin Kosek
On 11/27/2015 07:05 AM, Jan Cholasta wrote: On 26.11.2015 17:15, Petr Vobornik wrote: New topology management gives names to managed suffixes: ipaca: o=ipaca realm: dc=example,dc=com We already had several offline discussions to change the names because they could be better. It would be