Re: [Freeipa-devel] certmonger everywhere

On Tue, 2015-12-15 at 16:23 +0100, Martin Kosek wrote: > On 12/15/2015 08:54 AM, Jan Cholasta wrote: > > Hi, > > > > recently I and David discussed the direction of installers with regard to > > requesting certificates. Currently there are four (!) different ways of > > requesting certificates in

Re: [Freeipa-devel] Testing FreeIPA 4.3 for GA

- Original Message - > From: "Milan Kubík" > To: "Petr Vobornik" > Cc: "freeipa-devel" , "Ales Marecek" > > Sent: Tuesday, December 15, 2015 4:53:18 PM > Subject: Re: [Freeipa-devel] Testing

[Freeipa-devel] Retro Changelog for bind-dyndb-ldap

Hi, in ticket https://fedorahosted.org/freeipa/ticket/5538 Ludwig has suggested to exclude Dogtag's o=ipaca tree from the changelog. Sometimes vault-archive fails because of a failed write to the Retro Changelog. The RetroCL was enabled in https://fedorahosted.org/freeipa/ticket/3967 for the

Re: [Freeipa-devel] Testing FreeIPA 4.3 for GA

On 12/15/2015 05:04 PM, Aleš Mareček wrote: - Original Message - From: "Milan Kubík" To: "Petr Vobornik" Cc: "freeipa-devel" , "Ales Marecek" Sent: Tuesday, December 15, 2015 4:53:18 PM Subject:

Re: [Freeipa-devel] [PATCH 0365] Remove unused KRA code from ipa-server-install

On Tue, 15 Dec 2015, David Kupka wrote: On 14/12/15 16:54, Alexander Bokovoy wrote: On Mon, 14 Dec 2015, David Kupka wrote: On 14/12/15 15:05, Alexander Bokovoy wrote: On Mon, 14 Dec 2015, David Kupka wrote: On 30/11/15 16:31, Martin Basti wrote: First instance of KRA should be installed

Re: [Freeipa-devel] certmonger everywhere

On 15.12.2015 08:54, Jan Cholasta wrote: > Hi, > > recently I and David discussed the direction of installers with regard to > requesting certificates. Currently there are four (!) different ways of > requesting certificates in the installer [1][2][3][4]. We would like to reduce > it to one. > >

Re: [Freeipa-devel] [PATCH 016 - 017] First part of the replica promotion tests + testplan

Hi Martin, The updated patches are attached. Patch 0017 includes all changes from patch 0018, so, if you approve this one, there would be no need to continue with the review of 0018. This one contains all changes related to you remarks from 0018 review. Please see my explanation on the

Re: [Freeipa-devel] [PATCH 0365] Remove unused KRA code from ipa-server-install

On Tue, 15 Dec 2015, Jan Cholasta wrote: On 14.12.2015 16:54, Alexander Bokovoy wrote: On Mon, 14 Dec 2015, David Kupka wrote: On 14/12/15 15:05, Alexander Bokovoy wrote: On Mon, 14 Dec 2015, David Kupka wrote: On 30/11/15 16:31, Martin Basti wrote: First instance of KRA should be installed

Re: [Freeipa-devel] certmonger everywhere

On 15.12.2015 08:54, Jan Cholasta wrote: Hi, recently I and David discussed the direction of installers with regard to requesting certificates. Currently there are four (!) different ways of requesting certificates in the installer [1][2][3][4]. We would like to reduce it to one. Since

[Freeipa-devel] [TESTS][PATCH 0007] Multiple managers per user

Hi, I updated the (stage)user tests to reflect the multiple managers per user feature. Corresponding ticket: https://fedorahosted.org/freeipa/ticket/5344 Lenka From 03b4673debf019562d00d0c0f4cfcf3f295fa612 Mon Sep 17 00:00:00 2001 From: Lenka Doudova Date: Mon, 14 Dec

Re: [Freeipa-devel] [PATCH 0117] ipa-client-install: create a temporary directory for ccache files

On 12/15/2015 08:03 AM, Martin Babinsky wrote: > On 12/15/2015 07:19 AM, Jan Cholasta wrote: >> On 14.12.2015 18:51, Tomas Babej wrote: >>> >>> >>> On 12/14/2015 05:31 PM, Martin Babinsky wrote: fixes https://fedorahosted.org/freeipa/ticket/5528 >>> >>> Works as expected, code-wise looks

Re: [Freeipa-devel] [PATCH 0117] ipa-client-install: create a temporary directory for ccache files

On 12/14/2015 06:51 PM, Tomas Babej wrote: > > > On 12/14/2015 05:31 PM, Martin Babinsky wrote: >> fixes https://fedorahosted.org/freeipa/ticket/5528 > > Works as expected, code-wise looks good. > > Thanks for looking into this, ACK! > > Pushed to master:

Re: [Freeipa-devel] [PATCH 0117] ipa-client-install: create a temporary directory for ccache files

On 12/15/2015 12:39 PM, Martin Kosek wrote: > On 12/14/2015 06:51 PM, Tomas Babej wrote: >> >> >> On 12/14/2015 05:31 PM, Martin Babinsky wrote: >>> fixes https://fedorahosted.org/freeipa/ticket/5528 >> >> Works as expected, code-wise looks good. >> >> Thanks for looking into this, ACK! >> >>

Re: [Freeipa-devel] [PATCH 016 - 017] First part of the replica promotion tests + testplan

On 12/15/2015 10:29 AM, Oleg Fayans wrote: Hi Martin, The updated patches are attached. Patch 0017 includes all changes from patch 0018, so, if you approve this one, there would be no need to continue with the review of 0018. This one contains all changes related to you remarks from 0018

Re: [Freeipa-devel] [PATCH 0117] ipa-client-install: create a temporary directory for ccache files

On 15.12.2015 12:41, Martin Kosek wrote: On 12/15/2015 08:03 AM, Martin Babinsky wrote: On 12/15/2015 07:19 AM, Jan Cholasta wrote: On 14.12.2015 18:51, Tomas Babej wrote: On 12/14/2015 05:31 PM, Martin Babinsky wrote: fixes https://fedorahosted.org/freeipa/ticket/5528 Works as expected,

Re: [Freeipa-devel] certmonger everywhere

On Tue, Dec 15, 2015 at 04:23:33PM +0100, Martin Kosek wrote: > On 12/15/2015 08:54 AM, Jan Cholasta wrote: > > Hi, > > > > recently I and David discussed the direction of installers with regard to > > requesting certificates. Currently there are four (!) different ways of > > requesting

Re: [Freeipa-devel] Testing FreeIPA 4.3 for GA

On 12/15/2015 04:35 PM, Petr Vobornik wrote: On 12/15/2015 01:05 AM, Petr Vobornik wrote: Blocking patches for FreeIPA 4.3 were pushed, ipa-4-3 branch was created. Master branch is ready for 4.4 development. A build is available for testing in my pvoborni/freeipa-4-3 COPR repo [1] until the

[Freeipa-devel] [PATCH 0001] ipa-server-certinstall should not tell certmonger to track 3rd party certificates

>From 13c564e106300f19ba59531ebdf3ba90b7b8ef35 Mon Sep 17 00:00:00 2001 From: Thorsten Scherf Date: Tue, 15 Dec 2015 14:17:26 +0100 Subject: [PATCH] ipa-server-certinstall should not tell certmonger to track 3rd party certs There is no point in tracking a 3rd party cert,

[Freeipa-devel] [PATCH 535] ipautil: remove unused import causing cyclic import in tests

Hi, the attached patch fixes . Pushed to under the one-liner rule: master: c265e8736e51d5b4fede94a414d83b3e0ada2853 ipa-4-3: 2b28704f926d24e1562b481880b111d12d2020f2 Honza -- Jan Cholasta From 5bc2cf27e6dc38b71e6dae61efd3ba67f4973ed2 Mon Sep 17

Re: [Freeipa-devel] [PATCH] 0751 spec: Split out python-ipap11helper and, python-default_encoding_utf8

On 12/14/2015 08:18 AM, Jan Cholasta wrote: > On 4.12.2015 14:29, Jan Cholasta wrote: >> Hi, >> >> On 3.12.2015 17:32, Petr Viktorin wrote: >>> Hello, >>> This specfile patch makes python-ipalib noarch, by splitting out the >>> arch-dependent stuff. >> >> I'm not sure if this should be done at

Re: [Freeipa-devel] [PATCH] 0751 spec: Split out python-ipap11helper and, python-default_encoding_utf8

On 15.12.2015 15:53, Petr Viktorin wrote: On 12/14/2015 08:18 AM, Jan Cholasta wrote: On 4.12.2015 14:29, Jan Cholasta wrote: Hi, On 3.12.2015 17:32, Petr Viktorin wrote: Hello, This specfile patch makes python-ipalib noarch, by splitting out the arch-dependent stuff. I'm not sure if this

Re: [Freeipa-devel] certmonger everywhere

On 12/16/2015 08:09 AM, Jan Cholasta wrote: On 16.12.2015 01:40, Fraser Tweedale wrote: On Tue, Dec 15, 2015 at 04:23:33PM +0100, Martin Kosek wrote: On 12/15/2015 08:54 AM, Jan Cholasta wrote: Hi, recently I and David discussed the direction of installers with regard to requesting

Re: [Freeipa-devel] [PATCH 0365] Remove unused KRA code from ipa-server-install

On 15/12/15 16:20, Martin Kosek wrote: On 12/15/2015 07:42 AM, Jan Cholasta wrote: On 14.12.2015 16:54, Alexander Bokovoy wrote: On Mon, 14 Dec 2015, David Kupka wrote: ... We can always have both. With the new installer framework it is trivial to fold installers like this without code

Re: [Freeipa-devel] [PATCH 0365] Remove unused KRA code from ipa-server-install

On 12/15/2015 07:42 AM, Jan Cholasta wrote: > On 14.12.2015 16:54, Alexander Bokovoy wrote: >> On Mon, 14 Dec 2015, David Kupka wrote: ... > We can always have both. With the new installer framework it is trivial to > fold > installers like this without code duplication. It is still work in

Re: [Freeipa-devel] certmonger everywhere

On 12/15/2015 08:54 AM, Jan Cholasta wrote: > Hi, > > recently I and David discussed the direction of installers with regard to > requesting certificates. Currently there are four (!) different ways of > requesting certificates in the installer [1][2][3][4]. We would like to reduce > it to one. >

Re: [Freeipa-devel] Testing FreeIPA 4.3 for GA

On 12/15/2015 01:05 AM, Petr Vobornik wrote: Blocking patches for FreeIPA 4.3 were pushed, ipa-4-3 branch was created. Master branch is ready for 4.4 development. A build is available for testing in my pvoborni/freeipa-4-3 COPR repo [1] until the official 4.3 repo is created. The repo contains

Re: [Freeipa-devel] certmonger everywhere

On 16.12.2015 01:40, Fraser Tweedale wrote: On Tue, Dec 15, 2015 at 04:23:33PM +0100, Martin Kosek wrote: On 12/15/2015 08:54 AM, Jan Cholasta wrote: Hi, recently I and David discussed the direction of installers with regard to requesting certificates. Currently there are four (!) different

Re: [Freeipa-devel] certmonger everywhere

On 15.12.2015 18:22, Simo Sorce wrote: On Tue, 2015-12-15 at 16:23 +0100, Martin Kosek wrote: On 12/15/2015 08:54 AM, Jan Cholasta wrote: Hi, recently I and David discussed the direction of installers with regard to requesting certificates. Currently there are four (!) different ways of

Re: [Freeipa-devel] limiting SyncRepl's scope

On 15.12.2015 19:10, Christian Heimes wrote: > Hi, > > in ticket https://fedorahosted.org/freeipa/ticket/5538 Ludwig has > suggested to exclude Dogtag's o=ipaca tree from the changelog. Sometimes > vault-archive fails because of a failed write to the Retro Changelog. > The RetroCL was enabled in