[Freeipa-devel] Karma Requests for pki-core-10.3.5-11

*The following updated candidate builds of pki-core 10.3.5 were generated:* * *Fedora 24* o *pki-core-10.3.5-11.fc24 * * *Fedora 25* o *pki-core-10.3.5-11.fc25

[Freeipa-devel] [freeipa PR#416][comment] replica install: relax domain level check for promotion

URL: https://github.com/freeipa/freeipa/pull/416 Title: #416: replica install: relax domain level check for promotion frasertweedale commented: """ @HonzaCholasta @MartinBasti PR updated. I extracted the specific (== 0) and (>= 1) checks to the relevant call sites. Also separated DL

[Freeipa-devel] [freeipa PR#415][comment] ca-del: require CA to already be disabled

URL: https://github.com/freeipa/freeipa/pull/415 Title: #415: ca-del: require CA to already be disabled frasertweedale commented: """ @apophys done; PR updated. """ See the full comment at https://github.com/freeipa/freeipa/pull/415#issuecomment-276571411 -- Manage your subscription for the

[Freeipa-devel] [freeipa PR#415][synchronized] ca-del: require CA to already be disabled

URL: https://github.com/freeipa/freeipa/pull/415 Author: frasertweedale Title: #415: ca-del: require CA to already be disabled Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/415/head:pr415 git checkout

[Freeipa-devel] [freeipa PR#416][synchronized] replica install: relax domain level check for promotion

URL: https://github.com/freeipa/freeipa/pull/416 Author: frasertweedale Title: #416: replica install: relax domain level check for promotion Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/416/head:pr416

[Freeipa-devel] [freeipa PR#416][comment] replica install: relax domain level check for promotion

URL: https://github.com/freeipa/freeipa/pull/416 Title: #416: replica install: relax domain level check for promotion frasertweedale commented: """ So, what do we want the behaviour of `check_domain_level` to be? I just want to make a small change so that replica install does not break if DL

[Freeipa-devel] [freeipa PR#429][synchronized] [py3] ipactl restart: log httplib failues as debug

URL: https://github.com/freeipa/freeipa/pull/429 Author: MartinBasti Title: #429: [py3] ipactl restart: log httplib failues as debug Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/429/head:pr429 git

[Freeipa-devel] [freeipa PR#425][+ack] ipa-kra-install must create directory if it does not exist

URL: https://github.com/freeipa/freeipa/pull/425 Title: #425: ipa-kra-install must create directory if it does not exist Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#427][synchronized] [Py3] WSGI part 2

URL: https://github.com/freeipa/freeipa/pull/427 Author: MartinBasti Title: #427: [Py3] WSGI part 2 Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/427/head:pr427 git checkout pr427 From

[Freeipa-devel] [freeipa PR#429][opened] [py3] ipactl restart: log httplib failues as debug

URL: https://github.com/freeipa/freeipa/pull/429 Author: MartinBasti Title: #429: [py3] ipactl restart: log httplib failues as debug Action: opened PR body: """ With python3 there are several excerptions ConnectionRefusedError raised before ipactl is able to connect to dogtag after restart.

[Freeipa-devel] [freeipa PR#427][synchronized] [Py3] WSGI part 2

URL: https://github.com/freeipa/freeipa/pull/427 Author: MartinBasti Title: #427: [Py3] WSGI part 2 Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/427/head:pr427 git checkout pr427 From

[Freeipa-devel] [freeipa PR#417][closed] private_ccache: yield ccache name

URL: https://github.com/freeipa/freeipa/pull/417 Author: frasertweedale Title: #417: private_ccache: yield ccache name Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/417/head:pr417 git checkout pr417 -- Manage

[Freeipa-devel] [freeipa PR#417][comment] private_ccache: yield ccache name

URL: https://github.com/freeipa/freeipa/pull/417 Title: #417: private_ccache: yield ccache name MartinBasti commented: """ Fixed upstream master: https://fedorahosted.org/freeipa/changeset/caca181d3b73c045abd72e464a195c6b61c251c7 """ See the full comment at

[Freeipa-devel] [freeipa PR#417][+pushed] private_ccache: yield ccache name

URL: https://github.com/freeipa/freeipa/pull/417 Title: #417: private_ccache: yield ccache name Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#427][opened] [Py3] WSGI part 2

URL: https://github.com/freeipa/freeipa/pull/427 Author: MartinBasti Title: #427: [Py3] WSGI part 2 Action: opened PR body: """ with this PR: * server can be installed with python3-mod_wsgi * any xmlrpc test can be executed to find a new py3 issues (still a lot of them there) """ To pull

[Freeipa-devel] [freeipa PR#393][comment] [Py3] allow to run wsgi - part1

URL: https://github.com/freeipa/freeipa/pull/393 Title: #393: [Py3] allow to run wsgi - part1 MartinBasti commented: """ Fixed upstream master: https://fedorahosted.org/freeipa/changeset/a9fec1de1aa2b3c0f4c4ec6eff25ff2e75c774b0

[Freeipa-devel] [freeipa PR#393][+pushed] [Py3] allow to run wsgi - part1

URL: https://github.com/freeipa/freeipa/pull/393 Title: #393: [Py3] allow to run wsgi - part1 Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#393][closed] [Py3] allow to run wsgi - part1

URL: https://github.com/freeipa/freeipa/pull/393 Author: MartinBasti Title: #393: [Py3] allow to run wsgi - part1 Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/393/head:pr393 git checkout pr393 -- Manage your

[Freeipa-devel] [freeipa PR#426][opened] DNSSEC: forwarders validation improvement

URL: https://github.com/freeipa/freeipa/pull/426 Author: MartinBasti Title: #426: DNSSEC: forwarders validation improvement Action: opened PR body: """ Some DNS servers behaves oddly and instead sending result without RRSIG records don't reply at all when DNSSEC flag is enabled (timeout).

[Freeipa-devel] [freeipa PR#425][opened] ipa-kra-install must create directory if it does not exist

URL: https://github.com/freeipa/freeipa/pull/425 Author: flo-renaud Title: #425: ipa-kra-install must create directory if it does not exist Action: opened PR body: """ ipa-kra-install creates an admin cert file in /root/.dogtag/pki-tomcat/ca_admin.cert but does not check that the parent

[Freeipa-devel] [freeipa PR#393][+ack] [Py3] allow to run wsgi - part1

URL: https://github.com/freeipa/freeipa/pull/393 Title: #393: [Py3] allow to run wsgi - part1 Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#413][comment] Complete stageuser API

URL: https://github.com/freeipa/freeipa/pull/413 Title: #413: Complete stageuser API MartinBasti commented: """ LGTM except first commit that shouldn't be here and `ipalib.x509: Handle missing SAN gracefully` has no ticket in commit message """ See the full comment at

[Freeipa-devel] [freeipa PR#415][comment] ca-del: require CA to already be disabled

URL: https://github.com/freeipa/freeipa/pull/415 Title: #415: ca-del: require CA to already be disabled apophys commented: """ Could you please extend the tests with the invalid order of the commands on a ca entry? """ See the full comment at

[Freeipa-devel] [bind-dyndb-ldap PR#8][+ack] Log when pointers are different

URL: https://github.com/freeipa/bind-dyndb-ldap/pull/8 Title: #8: Log when pointers are different Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [bind-dyndb-ldap PR#8][closed] Log when pointers are different

URL: https://github.com/freeipa/bind-dyndb-ldap/pull/8 Author: pemensik Title: #8: Log when pointers are different Action: closed To pull the PR as Git branch: git remote add ghbind-dyndb-ldap https://github.com/freeipa/bind-dyndb-ldap git fetch ghbind-dyndb-ldap pull/8/head:pr8 git checkout

[Freeipa-devel] [bind-dyndb-ldap PR#8][comment] Log when pointers are different

URL: https://github.com/freeipa/bind-dyndb-ldap/pull/8 Title: #8: Log when pointers are different tomaskrizek commented: """ Thanks, this should help with the future debugging efforts. Fixed upstream:

[Freeipa-devel] [bind-dyndb-ldap PR#8][+pushed] Log when pointers are different

URL: https://github.com/freeipa/bind-dyndb-ldap/pull/8 Title: #8: Log when pointers are different Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#416][-ack] replica install: relax domain level check for promotion

URL: https://github.com/freeipa/freeipa/pull/416 Title: #416: replica install: relax domain level check for promotion Label: -ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#416][comment] replica install: relax domain level check for promotion

URL: https://github.com/freeipa/freeipa/pull/416 Title: #416: replica install: relax domain level check for promotion MartinBasti commented: """ IMO the whole `check_domain_level` is somehow broken, AFAIK the main purpose of it is to print correct error message related to replica file option,

[Freeipa-devel] [freeipa PR#314][comment] RFC: privilege separation for ipa framework code

URL: https://github.com/freeipa/freeipa/pull/314 Title: #314: RFC: privilege separation for ipa framework code martbab commented: """ I have disabled updates-testing in the CI because of multitude of unrelated breakages (recent openldap-client vs. nss breakage comes to mind), but we may take

[Freeipa-devel] [freeipa PR#314][comment] RFC: privilege separation for ipa framework code

URL: https://github.com/freeipa/freeipa/pull/314 Title: #314: RFC: privilege separation for ipa framework code simo5 commented: """ The correct packages are now in updates-testing in Fedora 25, pick from there. """ See the full comment at

[Freeipa-devel] [freeipa PR#416][comment] replica install: relax domain level check for promotion

URL: https://github.com/freeipa/freeipa/pull/416 Title: #416: replica install: relax domain level check for promotion HonzaCholasta commented: """ I see. The point is, `check_domain_level()` is supposed to check whether replica promotion is possible or not in the current domain level, so it's

[Freeipa-devel] [freeipa PR#417][+ack] private_ccache: yield ccache name

URL: https://github.com/freeipa/freeipa/pull/417 Title: #417: private_ccache: yield ccache name Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#416][comment] replica install: relax domain level check for promotion

URL: https://github.com/freeipa/freeipa/pull/416 Title: #416: replica install: relax domain level check for promotion MartinBasti commented: """ expected is for domain level 0, because there are different expectations about replica file, it must exactly match domain level 0, you cannot have

[Freeipa-devel] [freeipa PR#402][comment] [master] wait_for_entry improvements

URL: https://github.com/freeipa/freeipa/pull/402 Title: #402: [master] wait_for_entry improvements dkupka commented: """ Fixed upstream master: https://fedorahosted.org/freeipa/changeset/38fd8b356d66553d21a3e64374fdc39427a05baf

[Freeipa-devel] [freeipa PR#402][closed] [master] wait_for_entry improvements

URL: https://github.com/freeipa/freeipa/pull/402 Author: MartinBasti Title: #402: [master] wait_for_entry improvements Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/402/head:pr402 git checkout pr402 -- Manage

[Freeipa-devel] [freeipa PR#402][+pushed] [master] wait_for_entry improvements

URL: https://github.com/freeipa/freeipa/pull/402 Title: #402: [master] wait_for_entry improvements Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#423][synchronized] dns-update-system-records: add support for nsupdate output format

URL: https://github.com/freeipa/freeipa/pull/423 Author: MartinBasti Title: #423: dns-update-system-records: add support for nsupdate output format Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa

[Freeipa-devel] [freeipa PR#421][comment] Update warning message for replica install

URL: https://github.com/freeipa/freeipa/pull/421 Title: #421: Update warning message for replica install Akasurde commented: """ @MartinBasti I am OK for changing the warning message. I will wait for other to comment. """ See the full comment at

[Freeipa-devel] [freeipa PR#421][comment] Update warning message for replica install

URL: https://github.com/freeipa/freeipa/pull/421 Title: #421: Update warning message for replica install MartinBasti commented: """ Hello, I'd not omit the fact, that insufficient privilege error can be be caused by user credentials as well, I also wouldn't mention that hostgroup must exists

[Freeipa-devel] [freeipa PR#337][+pushed] Client-side CSR autogeneration (take 2)

URL: https://github.com/freeipa/freeipa/pull/337 Title: #337: Client-side CSR autogeneration (take 2) Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#337][closed] Client-side CSR autogeneration (take 2)

URL: https://github.com/freeipa/freeipa/pull/337 Author: LiptonB Title: #337: Client-side CSR autogeneration (take 2) Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/337/head:pr337 git checkout pr337 -- Manage

[Freeipa-devel] [freeipa PR#337][comment] Client-side CSR autogeneration (take 2)

URL: https://github.com/freeipa/freeipa/pull/337 Title: #337: Client-side CSR autogeneration (take 2) HonzaCholasta commented: """ Fixed upstream master: https://fedorahosted.org/freeipa/changeset/10ef5947860f5098182b1f95c08c1158e2da15f9

[Freeipa-devel] [freeipa PR#416][comment] replica install: relax domain level check for promotion

URL: https://github.com/freeipa/freeipa/pull/416 Title: #416: replica install: relax domain level check for promotion HonzaCholasta commented: """ Excuse me, but what is the point of checking for an exact domain level? Shouldn't `check_domain_level()` rather always check for a minimum domain

[Freeipa-devel] [freeipa PR#402][+ack] [master] wait_for_entry improvements

URL: https://github.com/freeipa/freeipa/pull/402 Title: #402: [master] wait_for_entry improvements Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#423][synchronized] dns-update-system-records: add support for nsupdate output format

URL: https://github.com/freeipa/freeipa/pull/423 Author: MartinBasti Title: #423: dns-update-system-records: add support for nsupdate output format Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa

[Freeipa-devel] [freeipa PR#416][+ack] replica install: relax domain level check for promotion

URL: https://github.com/freeipa/freeipa/pull/416 Title: #416: replica install: relax domain level check for promotion Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#422][+ack] Fix reference before assignment

URL: https://github.com/freeipa/freeipa/pull/422 Title: #422: Fix reference before assignment Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#424][opened] Tests: fix wait_for_replication task

URL: https://github.com/freeipa/freeipa/pull/424 Author: MartinBasti Title: #424: Tests: fix wait_for_replication task Action: opened PR body: """ DS changed a format of replication status attribute. Now it is with prefix "Error (x)" where x is the error code. Both formats were kept to allow

[Freeipa-devel] [freeipa PR#423][opened] dns-update-system-records: add support for nsupdate output format

URL: https://github.com/freeipa/freeipa/pull/423 Author: MartinBasti Title: #423: dns-update-system-records: add support for nsupdate output format Action: opened PR body: """ Option --out does the trick """ To pull the PR as Git branch: git remote add ghfreeipa