URL: https://github.com/freeipa/freeipa/pull/347
Title: #347: Improvements in {get|set}_directive functions
Label: +ack
--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA:
URL: https://github.com/freeipa/freeipa/pull/347
Title: #347: Improvements in {get|set}_directive functions
tomaskrizek commented:
"""
I wasn't able to find any more issues with the quoting of certificate names.
The directive quoting seems to work properly now.
"""
See the full comment at
URL: https://github.com/freeipa/freeipa/pull/407
Title: #407: New lite-server implementation
pvoborni commented:
"""
Maybe the lite-server approach is great and other people would appreciate that.
I shouldn't be the one to judge it.
What about demonstrating it to the rest of the team and
URL: https://github.com/freeipa/freeipa/pull/337
Title: #337: Client-side CSR autogeneration (take 2)
HonzaCholasta commented:
"""
@LiptonB, I think certificate profiles and CSR generation profiles / templates
*should* be associated, but not by sharing the same logical `certprofile`
object,
URL: https://github.com/freeipa/freeipa/pull/196
Title: #196: ipatests: unresolvable nested netgroups
Label: +rejected
--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA:
URL: https://github.com/freeipa/freeipa/pull/410
Title: #410: ipa-kdb: support KDB DAL version 6.1
sumit-bose commented:
"""
Are there any plans how to handle 6.0? Should configure at least show a warning
if KRB5_KDB_DAL_MAJOR_VERSION == 6 but no free e_data callback was found?
Should the
URL: https://github.com/freeipa/freeipa/pull/411
Title: #411: Remove deprecated ipa-upgradeconfig command
Label: +pushed
--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA:
URL: https://github.com/freeipa/freeipa/pull/411
Title: #411: Remove deprecated ipa-upgradeconfig command
Label: +ack
--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA:
URL: https://github.com/freeipa/freeipa/pull/406
Title: #406: _resolve_records: fix assert, nameserver_ip can be none
Label: +ack
--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA:
URL: https://github.com/freeipa/freeipa/pull/411
Title: #411: Remove deprecated ipa-upgradeconfig command
Akasurde commented:
"""
@martbab Thanks for review.
"""
See the full comment at
https://github.com/freeipa/freeipa/pull/411#issuecomment-274746405
--
Manage your subscription for the
URL: https://github.com/freeipa/freeipa/pull/370
Title: #370: ci: send build log to paste.fedoraproject.org
martbab commented:
"""
LGTM, it would be nice if you could temporarily sneak in some breaking commit
so that we can see how the paste looks like.
"""
See the full comment at
URL: https://github.com/freeipa/freeipa/pull/353
Title: #353: [RFE] Pwdpolicy
martbab commented:
"""
LGTM, but the PR needs some more love since it breaks CI.
"""
See the full comment at
https://github.com/freeipa/freeipa/pull/353#issuecomment-274750406
--
Manage your subscription for the
URL: https://github.com/freeipa/freeipa/pull/407
Title: #407: New lite-server implementation
martbab commented:
"""
@rcritten AFAIK most of us develop plugins locally, then build RPMs which we
sync to a VM, install IPA server and use ipa-run-tests to test the new plugin.
I personally used
URL: https://github.com/freeipa/freeipa/pull/196
Title: #196: ipatests: unresolvable nested netgroups
apophys commented:
"""
Yes.
"""
See the full comment at
https://github.com/freeipa/freeipa/pull/196#issuecomment-274738684
--
Manage your subscription for the Freeipa-devel mailing list:
URL: https://github.com/freeipa/freeipa/pull/406
Author: MartinBasti
Title: #406: _resolve_records: fix assert, nameserver_ip can be none
Action: closed
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/406/head:pr406
git
URL: https://github.com/freeipa/freeipa/pull/406
Title: #406: _resolve_records: fix assert, nameserver_ip can be none
martbab commented:
"""
Fixed upstream
master:
https://fedorahosted.org/freeipa/changeset/ccea23138ba6e9b54c08d472341ddbd64ffc45df
"""
See the full comment at
URL: https://github.com/freeipa/freeipa/pull/406
Title: #406: _resolve_records: fix assert, nameserver_ip can be none
Label: +pushed
--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA:
URL: https://github.com/freeipa/freeipa/pull/196
Author: apophys
Title: #196: ipatests: unresolvable nested netgroups
Action: closed
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/196/head:pr196
git checkout pr196
--
Manage
URL: https://github.com/freeipa/freeipa/pull/314
Title: #314: RFC: privilege separation for ipa framework code
HonzaCholasta commented:
"""
@simo5, replica install still fails for me in the same way as before.
"""
See the full comment at
URL: https://github.com/freeipa/freeipa/pull/411
Title: #411: Remove deprecated ipa-upgradeconfig command
martbab commented:
"""
Fixed upstream
master:
https://fedorahosted.org/freeipa/changeset/c56e02b3c5257edbfd3709848ca7eda07e271e38
"""
See the full comment at
URL: https://github.com/freeipa/freeipa/pull/411
Author: Akasurde
Title: #411: Remove deprecated ipa-upgradeconfig command
Action: closed
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/411/head:pr411
git checkout pr411
--
URL: https://github.com/freeipa/freeipa/pull/410
Title: #410: ipa-kdb: support KDB DAL version 6.1
frozencemetery commented:
"""
There was talk of exporting a minor dal version but I think upstream explicitly
doesn't want it.
freeipa.spec.in should be modified if I understand correctly;
URL: https://github.com/freeipa/freeipa/pull/408
Title: #408: ipaldap: properly escape raw binary values in LDAP filters
MartinBasti commented:
"""
Fixed upstream
master:
https://fedorahosted.org/freeipa/changeset/84a9611cb885f04c72cd657c3a3e7bc4aff39d93
"""
See the full comment at
URL: https://github.com/freeipa/freeipa/pull/408
Author: HonzaCholasta
Title: #408: ipaldap: properly escape raw binary values in LDAP filters
Action: closed
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/408/head:pr408
git
URL: https://github.com/freeipa/freeipa/pull/408
Title: #408: ipaldap: properly escape raw binary values in LDAP filters
Label: +ack
--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA:
URL: https://github.com/freeipa/freeipa/pull/382
Author: MartinBasti
Title: #382: [Py3] ipa-server-install fixes (working NTP, DS, CA install steps)
Action: synchronized
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa
URL: https://github.com/freeipa/freeipa/pull/410
Title: #410: ipa-kdb: support KDB DAL version 6.1
abbra commented:
"""
Thanks for the suggestions. I've updated the configure check to explicitly warn
when both .free_principal and .free_principal_e_data are missing. DAL version 5
had
URL: https://github.com/freeipa/freeipa/pull/336
Author: MartinBasti
Title: #336: [py3] pki: add missing depedency pki-base[-python3]
Action: synchronized
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/336/head:pr336
git
URL: https://github.com/freeipa/freeipa/pull/410
Author: abbra
Title: #410: ipa-kdb: support KDB DAL version 6.1
Action: synchronized
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/410/head:pr410
git checkout pr410
From
URL: https://github.com/freeipa/freeipa/pull/412
Author: flo-renaud
Title: #412: Define template version in certmap.conf
Action: opened
PR body:
"""
A previous commit (ffb9a09a0d63f7edae2b647b5c1d503d1d4d7a6e) removed the
definition of VERSION 2 in certmap.conf.template.
ipa-server-upgrade
URL: https://github.com/freeipa/freeipa/pull/408
Title: #408: ipaldap: properly escape raw binary values in LDAP filters
Label: +pushed
--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA:
URL: https://github.com/freeipa/freeipa/pull/408
Title: #408: ipaldap: properly escape raw binary values in LDAP filters
MartinBasti commented:
"""
Works for me.
"""
See the full comment at
https://github.com/freeipa/freeipa/pull/408#issuecomment-274770016
--
Manage your subscription for the
URL: https://github.com/freeipa/freeipa/pull/359
Title: #359: dogtag: search past the first 100 certificates
Label: +ack
--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA:
URL: https://github.com/freeipa/freeipa/pull/359
Title: #359: dogtag: search past the first 100 certificates
tomaskrizek commented:
"""
We examined the WebUI side and it behaves as expected - the size limit is
respected when viewing certificates.
"""
See the full comment at
URL: https://github.com/freeipa/freeipa/pull/401
Title: #401: [4.4] Wait until http principal entry is replicated to replica
stlaz commented:
"""
Seems to work in the problematic ca-less environment, ACK.
"""
See the full comment at
URL: https://github.com/freeipa/freeipa/pull/401
Title: #401: [4.4] Wait until http principal entry is replicated to replica
Label: +ack
--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA:
URL: https://github.com/freeipa/freeipa/pull/382
Title: #382: [Py3] ipa-server-install fixes (working NTP, DS, CA install steps)
Label: +ack
--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA:
URL: https://github.com/freeipa/freeipa/pull/382
Author: MartinBasti
Title: #382: [Py3] ipa-server-install fixes (working NTP, DS, CA install steps)
Action: closed
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/382/head:pr382
URL: https://github.com/freeipa/freeipa/pull/393
Title: #393: [Py3] allow to run wsgi - part1
MartinBasti commented:
"""
Rebased, ready to be reviewed
"""
See the full comment at
https://github.com/freeipa/freeipa/pull/393#issuecomment-274790391
--
Manage your subscription for the
URL: https://github.com/freeipa/freeipa/pull/393
Author: MartinBasti
Title: #393: [Py3] allow to run wsgi - part1
Action: synchronized
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/393/head:pr393
git checkout pr393
From
URL: https://github.com/freeipa/freeipa/pull/393
Author: MartinBasti
Title: #393: [Py3] allow to run wsgi - part1
Action: synchronized
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/393/head:pr393
git checkout pr393
From
URL: https://github.com/freeipa/freeipa/pull/382
Title: #382: [Py3] ipa-server-install fixes (working NTP, DS, CA install steps)
Label: +pushed
--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA:
URL: https://github.com/freeipa/freeipa/pull/382
Title: #382: [Py3] ipa-server-install fixes (working NTP, DS, CA install steps)
MartinBasti commented:
"""
Fixed upstream
master:
https://fedorahosted.org/freeipa/changeset/23239bccc18f2fdc10431134a1c6a777f450704e
URL: https://github.com/freeipa/freeipa/pull/359
Title: #359: dogtag: search past the first 100 certificates
HonzaCholasta commented:
"""
Fixed upstream
master:
https://fedorahosted.org/freeipa/changeset/d84edc43e55c2f7c30614a4a5268aeb58e33a087
URL: https://github.com/freeipa/freeipa/pull/359
Title: #359: dogtag: search past the first 100 certificates
Label: +pushed
--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA:
URL: https://github.com/freeipa/freeipa/pull/370
Title: #370: ci: send build log to paste.fedoraproject.org
frasertweedale commented:
"""
@martbab the paste looks like gobbledygook; it's gzipped.
We will see it in action soon enough :)
"""
See the full comment at
URL: https://github.com/freeipa/freeipa/pull/10
Author: LiptonB
Title: #10: Client-side CSR autogeneration
Action: closed
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/10/head:pr10
git checkout pr10
--
Manage your
URL: https://github.com/freeipa/freeipa/pull/314
Title: #314: RFC: privilege separation for ipa framework code
simo5 commented:
"""
Ok, with this latest push I can install servers and replicas both with CA and
CA-less.
I cannot reproduce the failure @HonzaCholasta sees, so from my side I am
URL: https://github.com/freeipa/freeipa/pull/395
Title: #395: Configure PKI ajp redirection to use "localhost" instead of "::1"
Label: -ack
--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA:
URL: https://github.com/freeipa/freeipa/pull/407
Title: #407: New lite-server implementation
tiran commented:
"""
I put some effort into the dev server because I find it very useful during
development. The werkzeug WSGI adds some useful features, e.g. auto-reloader
and through-the-web
URL: https://github.com/freeipa/freeipa/pull/410
Title: #410: ipa-kdb: support KDB DAL version 6.1
simo5 commented:
"""
Doesn't kdb.h also export a MINOR version to test against ?
"""
See the full comment at
https://github.com/freeipa/freeipa/pull/410#issuecomment-274823821
--
Manage your
URL: https://github.com/freeipa/freeipa/pull/410
Title: #410: ipa-kdb: support KDB DAL version 6.1
abbra commented:
"""
@simo5 spec dependencies are separate from the code -- the spec will not help
on Debian, for example.
We need both the spec dependencies and the proper checks in the code.
URL: https://github.com/freeipa/freeipa/pull/410
Title: #410: ipa-kdb: support KDB DAL version 6.1
simo5 commented:
"""
I checked and can't find it ... facepalm
"""
See the full comment at
https://github.com/freeipa/freeipa/pull/410#issuecomment-274826331
--
Manage your subscription for the
URL: https://github.com/freeipa/freeipa/pull/407
Title: #407: New lite-server implementation
pvoborni commented:
"""
When I was still developing server-side then I used lsyncd to rsync files from
my local laptop working git repo to their location on vm in a lab.
So the process for me was
URL: https://github.com/freeipa/freeipa/pull/410
Title: #410: ipa-kdb: support KDB DAL version 6.1
abbra commented:
"""
No, no minor DAL version. That's why I had to resort to structure member checks
in autoconf.
"""
See the full comment at
URL: https://github.com/freeipa/freeipa/pull/407
Title: #407: New lite-server implementation
rcritten commented:
"""
Right, and IMHO that development process is inefficient and prone to error.
Rather than copying bits around and doing full installs over and over you can
run the server in-tree
URL: https://github.com/freeipa/freeipa/pull/410
Title: #410: ipa-kdb: support KDB DAL version 6.1
simo5 commented:
"""
Also I know you can use ifdefs to avoid copy large parts of the
structure initialization but I would prefer 3 separate full inits based only on
ifdefs on the DAL version
URL: https://github.com/freeipa/freeipa/pull/410
Title: #410: ipa-kdb: support KDB DAL version 6.1
simo5 commented:
"""
abbra, we should also change how spec deps work
I asked @rharwood to add a provides that is the dal version number
we should stop having a dep on the krb5 major version number
URL: https://github.com/freeipa/freeipa/pull/399
Author: dkupka
Title: #399: Certificate mapping test
Action: synchronized
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/399/head:pr399
git checkout pr399
From
URL: https://github.com/freeipa/freeipa/pull/399
Author: dkupka
Title: #399: Certificate mapping test
Action: synchronized
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/399/head:pr399
git checkout pr399
From
URL: https://github.com/freeipa/freeipa/pull/395
Title: #395: Configure PKI ajp redirection to use "localhost" instead of "::1"
stlaz commented:
"""
Removed the ACK label since this is not yet reviewed.
"""
See the full comment at
URL: https://github.com/freeipa/freeipa/pull/337
Title: #337: Client-side CSR autogeneration (take 2)
LiptonB commented:
"""
@HonzaCholasta, I think we're on the same page, then. I removed the dogtag
profile and the validation from the `profile_id` parameter, and rebased the PR
against
URL: https://github.com/freeipa/freeipa/pull/337
Author: LiptonB
Title: #337: Client-side CSR autogeneration (take 2)
Action: synchronized
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/337/head:pr337
git checkout pr337
From
63 matches
Mail list logo
