Re: [Freeipa-devel] #5881 / bz1327092 ; fixing broken caIPAserviceCert profile

2016-05-12 Thread Martin Kosek
On 05/12/2016 12:56 AM, Fraser Tweedale wrote: > On Wed, May 11, 2016 at 04:36:34PM +0200, Jan Cholasta wrote: >> On 11.5.2016 15:04, Fraser Tweedale wrote: >>> On Wed, May 11, 2016 at 01:31:36PM +0200, Jan Cholasta wrote: ... 3) I would rather avoid adding new commands just to work around

Re: [Freeipa-devel] Provisioning throughput

2016-05-12 Thread Ludwig Krispenz
On 05/12/2016 03:45 PM, Ludwig Krispenz wrote: On 05/12/2016 02:16 PM, Petr Vobornik wrote: On 05/10/2016 05:50 PM, thierry bordaz wrote: On 05/05/2016 03:44 PM, Petr Vobornik wrote: On 05/04/2016 02:20 PM, thierry bordaz wrote: Hello, I have been doing some tests/measures using

Re: [Freeipa-devel] [DESIGN] Kerberos principal alias handling

2016-05-12 Thread Martin Babinsky
On 05/09/2016 08:26 AM, Alexander Bokovoy wrote: On Fri, 06 May 2016, Martin Babinsky wrote: On 05/05/2016 02:58 PM, Milan Kubík wrote: On 04/08/2016 05:10 PM, Martin Babinsky wrote: Hi list, I have put together a draft [1] outlining the effort to reimplement the handling of Kerberos

Re: [Freeipa-devel] [PATCH 0473-0476]DNS Locations: Prologue

2016-05-12 Thread Martin Basti
On 12.05.2016 11:01, Martin Basti wrote: On 11.05.2016 09:41, Martin Basti wrote: On 10.05.2016 18:56, Petr Spacek wrote: On 10.5.2016 15:38, Petr Spacek wrote: On 10.5.2016 15:26, Martin Basti wrote: On 10.05.2016 15:23, Petr Spacek wrote: On 10.5.2016 14:44, Martin Basti wrote: On

Re: [Freeipa-devel] [PATCH] 0011 webui: Offer OTP generation for host enrollment in the UI

2016-05-12 Thread Pavel Vomacka
On 05/11/2016 03:28 PM, Petr Vobornik wrote: On 03/31/2016 04:59 PM, Pavel Vomacka wrote: Hello, This patch adds option to add host dialog which allows to show generated OTP. The patch also changes the way of informing user about success of adding host but only when the 'Generate OTP' option

Re: [Freeipa-devel] [PATCH 0099] ipa-nis-manage: add status option

2016-05-12 Thread Petr Spacek
On 28.4.2016 17:15, Petr Spacek wrote: > On 28.4.2016 14:52, Abhijeet Kasurde wrote: >> Hi Petr, >> >> On 04/25/2016 08:28 PM, Petr Spacek wrote: >>> Hello, >>> >>> ipa-nis-manage: add status option >>> >>> https://bugzilla.redhat.com/show_bug.cgi?id=1329275 >>> >>> >>> >> Can you reword the error

Re: [Freeipa-devel] URI in HBAC - code

2016-05-12 Thread Lukáš Hellebrandt
On 04/27/2016 03:34 PM, Lukáš Hellebrandt wrote: > SSSD: https://github.com/lhellebr/sssd/commits/url_in_hbac > Apache module: https://github.com/lhellebr/mod_hbacauthz_pam > FreeIPA: http://pastebin.com/X6H9BTwk > > On 04/26/2016 03:56 PM, Petr Spacek wrote: >> On 26.4.2016 15:16, Jan Pazdziora

[Freeipa-devel] [PATCH 0477] upgrade: always start CA

2016-05-12 Thread Martin Basti
Patch attached. https://fedorahosted.org/freeipa/ticket/5868 From 9730518ea4b10806fb340008138a72be98b43748 Mon Sep 17 00:00:00 2001 From: Martin Basti Date: Thu, 12 May 2016 15:39:30 +0200 Subject: [PATCH] Upgrade: always start CA Some CA upgrade steps in upgrader requires

Re: [Freeipa-devel] Provisioning throughput

2016-05-12 Thread Ludwig Krispenz
On 05/12/2016 02:16 PM, Petr Vobornik wrote: On 05/10/2016 05:50 PM, thierry bordaz wrote: On 05/05/2016 03:44 PM, Petr Vobornik wrote: On 05/04/2016 02:20 PM, thierry bordaz wrote: Hello, I have been doing some tests/measures using

Re: [Freeipa-devel] [PATCH 0463] Performance: do not download password attributes in host/find-user command

2016-05-12 Thread Rob Crittenden
Martin Basti wrote: On 22.04.2016 13:21, David Kupka wrote: On 22/04/16 10:58, Martin Basti wrote: On 21.04.2016 09:17, Martin Basti wrote: On 20.04.2016 16:57, Martin Basti wrote: https://fedorahosted.org/freeipa/ticket/5281 Patch attached. selfNACK Updated patch attached.

Re: [Freeipa-devel] [PATCH 0471] ipactl: advertise option --ignore-service-failure

2016-05-12 Thread Stanislav Laznicka
ACK On 05/02/2016 05:27 PM, Martin Basti wrote: On 02.05.2016 17:19, Petr Vobornik wrote: On 05/02/2016 04:26 PM, Martin Basti wrote: https://fedorahosted.org/freeipa/ticket/5820 Patch attached. Copying the err message 3 times is not very nice. It should be in a constant otherwise we

Re: [Freeipa-devel] [PATCH 0470] remove unused code in SchemaCache

2016-05-12 Thread Stanislav Laznicka
ACK, I see no reason for the code to be present there. On 04/29/2016 04:33 PM, Martin Basti wrote: Patch attached. -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

Re: [Freeipa-devel] [PATCH] 0034: webui: Authentication indicators

2016-05-12 Thread Nathaniel McCallum
On Wed, 2016-05-11 at 13:08 +0200, Pavel Vomacka wrote: > Hi, > > the patch adds webui part for authentication indicators. > > Ticket: https://fedorahosted.org/freeipa/ticket/5872 The otp option displays as: OTP. The radius option displays as: Radius. However, both are acronyms. The

Re: [Freeipa-devel] [PATCH 0470] remove unused code in SchemaCache

2016-05-12 Thread Martin Basti
On 12.05.2016 09:17, Stanislav Laznicka wrote: ACK, I see no reason for the code to be present there. On 04/29/2016 04:33 PM, Martin Basti wrote: Patch attached. Pushed to master: 93332bcf4dd0189b7136db7fe4f900fc04171d20 -- Manage your subscription for the Freeipa-devel mailing list:

Re: [Freeipa-devel] [PATCH 0471] ipactl: advertise option --ignore-service-failure

2016-05-12 Thread Martin Basti
On 12.05.2016 10:04, Stanislav Laznicka wrote: ACK On 05/02/2016 05:27 PM, Martin Basti wrote: On 02.05.2016 17:19, Petr Vobornik wrote: On 05/02/2016 04:26 PM, Martin Basti wrote: https://fedorahosted.org/freeipa/ticket/5820 Patch attached. Copying the err message 3 times is not

Re: [Freeipa-devel] [PATCHES 0089-0093] Authentication Indicators

2016-05-12 Thread Nathaniel McCallum
On Fri, 2016-05-06 at 14:44 +0200, Sumit Bose wrote: > On Wed, May 04, 2016 at 05:33:55PM -0400, Nathaniel McCallum wrote: > > This series of patches implements authentication indicator > > insertion, > > evaluation and management in FreeIPA. Besides these patches, two > > other > > patches are

Re: [Freeipa-devel] [PATCH 0096] Batch command: avoid accessing potentially undefined context.principa

2016-05-12 Thread Jan Cholasta
On 10.5.2016 12:34, Petr Spacek wrote: On 4.5.2016 15:04, Jan Cholasta wrote: Hi, On 22.4.2016 13:28, Petr Spacek wrote: Hello, Batch command: avoid accessing potentially undefined context.principal This might happen when the command is called directly in Python, e.g. in installers and so

Re: [Freeipa-devel] [PATCH 0399-0402] Do not log warning about empty zones which are already disabled or unloaded & prepare 9.0 release

2016-05-12 Thread Tomas Hozza
On 05/09/2016 04:30 PM, Petr Spacek wrote: > On 9.5.2016 16:25, Petr Spacek wrote: > > Hello, > > > > following patch should cover most misleading warnings produced by new code > > handling empty zones. > > > > If it is okay I will release version 9.0 with it. > > > > Please review it ASAP. Thank

Re: [Freeipa-devel] [PATCH 0399-0402] Do not log warning about empty zones which are already disabled or unloaded & prepare 9.0 release

2016-05-12 Thread Petr Spacek
On 12.5.2016 13:27, Tomas Hozza wrote: > On 05/09/2016 04:30 PM, Petr Spacek wrote: >> On 9.5.2016 16:25, Petr Spacek wrote: >>> Hello, >>> >>> following patch should cover most misleading warnings produced by new code >>> handling empty zones. >>> >>> If it is okay I will release version 9.0 with

Re: [Freeipa-devel] Provisioning throughput

2016-05-12 Thread Petr Vobornik
On 05/10/2016 05:50 PM, thierry bordaz wrote: > > > On 05/05/2016 03:44 PM, Petr Vobornik wrote: >> On 05/04/2016 02:20 PM, thierry bordaz wrote: >>> Hello, >>> >>> I have been doing some tests/measures using >>> >>>