[Freeipa-devel] [freeipa PR#396][synchronized] Explicitly remove support of SSLv2

2017-02-14 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/396 Author: stlaz Title: #396: Explicitly remove support of SSLv2 Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/396/head:pr396 git checkout pr396 From

[Freeipa-devel] [freeipa PR#314][comment] RFC: privilege separation for ipa framework code

2017-02-14 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/314 Title: #314: RFC: privilege separation for ipa framework code HonzaCholasta commented: """ I would personally go with: * Change session handling: 5959 * Generate tmpfiles config at install time: 5959 * Drop use of kinit_as_http from trust code:

[Freeipa-devel] [freeipa PR#215][+rejected] Add script to setup krb5 NFS exports

2017-02-14 Thread pvoborni
URL: https://github.com/freeipa/freeipa/pull/215 Title: #215: Add script to setup krb5 NFS exports Label: +rejected -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#215][comment] Add script to setup krb5 NFS exports

2017-02-14 Thread pvoborni
URL: https://github.com/freeipa/freeipa/pull/215 Title: #215: Add script to setup krb5 NFS exports pvoborni commented: """ Justin, pasting here re-phrased mail I wrote you on Dec 5. This is a tool which integrates external host with FreeIPA. It is written in a way that it can exist

[Freeipa-devel] [freeipa PR#398][comment] Support for Certificate Identity Mapping

2017-02-14 Thread flo-renaud
URL: https://github.com/freeipa/freeipa/pull/398 Title: #398: Support for Certificate Identity Mapping flo-renaud commented: """ Hi @HonzaCholasta PR updated with `ipa user-add-certmapdata` using positional arg for CERTMAPDATA """ See the full comment at

[Freeipa-devel] [freeipa PR#465][opened] Tests: search for disabled users

2017-02-14 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/465 Author: MartinBasti Title: #465: Tests: search for disabled users Action: opened PR body: """ Add tests for searching disabled/enabled users. XFAIL: newly created users has no 'nsaccountlock' attribute set and user-find doesn't return them

[Freeipa-devel] [freeipa PR#454][comment] Move AD trust installation code to a separate module

2017-02-14 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/454 Title: #454: Move AD trust installation code to a separate module MartinBasti commented: """ LGTM, I can test it tomorrow """ See the full comment at https://github.com/freeipa/freeipa/pull/454#issuecomment-279791253 -- Manage your

[Freeipa-devel] [freeipa PR#398][synchronized] Support for Certificate Identity Mapping

2017-02-14 Thread flo-renaud
URL: https://github.com/freeipa/freeipa/pull/398 Author: flo-renaud Title: #398: Support for Certificate Identity Mapping Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/398/head:pr398 git checkout pr398

[Freeipa-devel] [freeipa PR#459][synchronized] [WIP] Faster JSON encoder/decoder

2017-02-14 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/459 Author: tiran Title: #459: [WIP] Faster JSON encoder/decoder Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/459/head:pr459 git checkout pr459 From

[Freeipa-devel] [freeipa PR#403][comment] Add new ipa passwd-generate command

2017-02-14 Thread abbra
URL: https://github.com/freeipa/freeipa/pull/403 Title: #403: Add new ipa passwd-generate command abbra commented: """ Sorry for another delay too. We have discussed this proposal again and would like to have an ipa-advise implementation instead of IPA CLI command. There are multiple reasons

[Freeipa-devel] [freeipa PR#463][comment] pylint_plugins: add forbidden import checker

2017-02-14 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/463 Title: #463: pylint_plugins: add forbidden import checker HonzaCholasta commented: """ The format could be nicer though - suggestions are welcome. """ See the full comment at https://github.com/freeipa/freeipa/pull/463#issuecomment-279689307 --

[Freeipa-devel] [freeipa PR#364][comment] Client-only builds with --disable-server

2017-02-14 Thread lslebodn
URL: https://github.com/freeipa/freeipa/pull/364 Title: #364: Client-only builds with --disable-server lslebodn commented: """ On (14/02/17 02:29), Christian Heimes wrote: >I'm following a different design and development philosophy. In my experience >an iterative approach with small,

[Freeipa-devel] [freeipa PR#463][comment] pylint_plugins: add forbidden import checker

2017-02-14 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/463 Title: #463: pylint_plugins: add forbidden import checker MartinBasti commented: """ In this case: ``` ipaclient/:ipaclient.install:ipalib.install:ipaplatform:ipaserver, ipaclient/install/:ipaserver, ``` `ipaclient/install` allows all

[Freeipa-devel] [freeipa PR#459][comment] [WIP] Faster JSON encoder/decoder

2017-02-14 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/459 Title: #459: [WIP] Faster JSON encoder/decoder MartinBasti commented: """ LGTM """ See the full comment at https://github.com/freeipa/freeipa/pull/459#issuecomment-279688053 -- Manage your subscription for the Freeipa-devel mailing list:

[Freeipa-devel] [freeipa PR#463][comment] pylint_plugins: add forbidden import checker

2017-02-14 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/463 Title: #463: pylint_plugins: add forbidden import checker MartinBasti commented: """ Awesome then """ See the full comment at https://github.com/freeipa/freeipa/pull/463#issuecomment-279689037 -- Manage your subscription for the Freeipa-devel

[Freeipa-devel] [freeipa PR#459][synchronized] [WIP] Faster JSON encoder/decoder

2017-02-14 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/459 Author: tiran Title: #459: [WIP] Faster JSON encoder/decoder Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/459/head:pr459 git checkout pr459 From

[Freeipa-devel] [freeipa PR#314][comment] RFC: privilege separation for ipa framework code

2017-02-14 Thread simo5
URL: https://github.com/freeipa/freeipa/pull/314 Title: #314: RFC: privilege separation for ipa framework code simo5 commented: """ We actually record the principal, change the patch to destroy session_cookie in create_connection if the principal is different. """ See the full comment at

[Freeipa-devel] [freeipa PR#314][comment] RFC: privilege separation for ipa framework code

2017-02-14 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/314 Title: #314: RFC: privilege separation for ipa framework code HonzaCholasta commented: """ @simo5, I don't agree, the changes in `ipalib/rpc.py` are a pre-requisite for the changes in `ipatests/util.py`, but that doesn't mean they should be in

[Freeipa-devel] [freeipa PR#446][reopened] No NSS database passwords in ipa-client-install

2017-02-14 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/446 Author: stlaz Title: #446: No NSS database passwords in ipa-client-install Action: reopened To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/446/head:pr446 git checkout pr446 --

[Freeipa-devel] [freeipa PR#464][opened] :arrow_up: Bump required python-cryptography version

2017-02-14 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/464 Author: stlaz Title: #464: :arrow_up: Bump required python-cryptography version Action: opened PR body: """ Since we started using `Certificate.serial_number` instead of `.serial` from python-cryptography

[Freeipa-devel] [freeipa PR#464][edited] :arrow_up: Bump required python-cryptography version

2017-02-14 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/464 Author: stlaz Title: #464: :arrow_up: Bump required python-cryptography version Action: edited Changed field: title Original value: """ :arrow_up: Bump required python-cryptography version """ -- Manage your subscription for the

[Freeipa-devel] [freeipa PR#463][comment] pylint_plugins: add forbidden import checker

2017-02-14 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/463 Title: #463: pylint_plugins: add forbidden import checker MartinBasti commented: """ Ok, this will not work if ipaclient/submodule allows to import any module, but seems OK for me now, can be improved when needed """ See the full comment at

[Freeipa-devel] [freeipa PR#463][comment] pylint_plugins: add forbidden import checker

2017-02-14 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/463 Title: #463: pylint_plugins: add forbidden import checker HonzaCholasta commented: """ I don't know what you mean, could you give me an example? """ See the full comment at https://github.com/freeipa/freeipa/pull/463#issuecomment-279678738 --

[Freeipa-devel] [freeipa PR#463][comment] pylint_plugins: add forbidden import checker

2017-02-14 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/463 Title: #463: pylint_plugins: add forbidden import checker HonzaCholasta commented: """ You can, using: ``` ipaclient/install/ ``` """ See the full comment at https://github.com/freeipa/freeipa/pull/463#issuecomment-279688754 -- Manage your

[Freeipa-devel] [freeipa PR#398][comment] Support for Certificate Identity Mapping

2017-02-14 Thread flo-renaud
URL: https://github.com/freeipa/freeipa/pull/398 Title: #398: Support for Certificate Identity Mapping flo-renaud commented: """ Hi @HonzaCholasta, PR updated with most of your comments, except the suggestion to use default_from. Please see my answer inline for this one. """ See the full

[Freeipa-devel] [freeipa PR#314][comment] RFC: privilege separation for ipa framework code

2017-02-14 Thread simo5
URL: https://github.com/freeipa/freeipa/pull/314 Title: #314: RFC: privilege separation for ipa framework code simo5 commented: """ The changes in ipalib/rpc.py are connected to the changes in ipatest/util.py, it makes no sense to keep them separate as in eahc patch I add respecively to

[Freeipa-devel] [freeipa PR#464][comment] Bump required python-cryptography version

2017-02-14 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/464 Title: #464: Bump required python-cryptography version HonzaCholasta commented: """ NACK, you didn't update the comments. """ See the full comment at https://github.com/freeipa/freeipa/pull/464#issuecomment-279698054 -- Manage your

[Freeipa-devel] [freeipa PR#446][closed] No NSS database passwords in ipa-client-install

2017-02-14 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/446 Author: stlaz Title: #446: No NSS database passwords in ipa-client-install Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/446/head:pr446 git checkout pr446 --

[Freeipa-devel] [freeipa PR#463][comment] pylint_plugins: add forbidden import checker

2017-02-14 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/463 Title: #463: pylint_plugins: add forbidden import checker MartinBasti commented: """ > Can you turn module matching into a regular expression? We need bit more > advanced checks, e.g. ipalib should not import from ipaplatform except for >

[Freeipa-devel] [bind-dyndb-ldap PR#9][+ack] Remove duplicate const declaration specifier

2017-02-14 Thread tomaskrizek
URL: https://github.com/freeipa/bind-dyndb-ldap/pull/9 Title: #9: Remove duplicate const declaration specifier Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#462][+rejected] [WIP] pylint: add custom check for forbidden imports

2017-02-14 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/462 Title: #462: [WIP] pylint: add custom check for forbidden imports Label: +rejected -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#463][synchronized] pylint_plugins: add forbidden import checker

2017-02-14 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/463 Author: HonzaCholasta Title: #463: pylint_plugins: add forbidden import checker Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/463/head:pr463 git checkout

[Freeipa-devel] [freeipa PR#314][comment] RFC: privilege separation for ipa framework code

2017-02-14 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/314 Title: #314: RFC: privilege separation for ipa framework code HonzaCholasta commented: """ @simo5, I don't think this is the correct approach. Rather than deleting `context.session_cookie` in `RPCClient.destroy_connection()` when requested, it

[Freeipa-devel] [freeipa PR#410][+ack] ipa-kdb: support KDB DAL version 6.1

2017-02-14 Thread simo5
URL: https://github.com/freeipa/freeipa/pull/410 Title: #410: ipa-kdb: support KDB DAL version 6.1 Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#463][opened] pylint_plugins: add forbidden import checker

2017-02-14 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/463 Author: HonzaCholasta Title: #463: pylint_plugins: add forbidden import checker Action: opened PR body: """ Add new pylint AST checker plugin which implements a check for imports forbidden in IPA. Which imports are forbidden is configurable in

[Freeipa-devel] [freeipa PR#364][comment] Client-only builds with --disable-server

2017-02-14 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/364 Title: #364: Client-only builds with --disable-server tiran commented: """ I'm following a different design and development philosophy. In my experience an iterative approach with small, incremental improvements is often better and faster than

[Freeipa-devel] [freeipa PR#463][comment] pylint_plugins: add forbidden import checker

2017-02-14 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/463 Title: #463: pylint_plugins: add forbidden import checker HonzaCholasta commented: """ @MartinBasti, this issue is already solved in the PR without using regular expressions. See `pylintrc` for example. """ See the full comment at

[Freeipa-devel] [freeipa PR#314][comment] RFC: privilege separation for ipa framework code

2017-02-14 Thread simo5
URL: https://github.com/freeipa/freeipa/pull/314 Title: #314: RFC: privilege separation for ipa framework code simo5 commented: """ Ok split the last stuff in 3 commits. I remove the use of private ccache for a few reasons: 1. touches environment variables. 2. will unconditionally remove a

[Freeipa-devel] [freeipa PR#314][comment] RFC: privilege separation for ipa framework code

2017-02-14 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/314 Title: #314: RFC: privilege separation for ipa framework code HonzaCholasta commented: """ @simo5, most of the commits do not have a ticket link, is this intentional? """ See the full comment at

[Freeipa-devel] [freeipa PR#464][synchronized] Bump required python-cryptography version

2017-02-14 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/464 Author: stlaz Title: #464: Bump required python-cryptography version Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/464/head:pr464 git checkout pr464 From

[Freeipa-devel] [freeipa PR#314][comment] RFC: privilege separation for ipa framework code

2017-02-14 Thread simo5
URL: https://github.com/freeipa/freeipa/pull/314 Title: #314: RFC: privilege separation for ipa framework code simo5 commented: """ For some commits I was sure what ticket to use, for some I was not, so I elected not to put a specific ticket in there. If you have a good idea of what ticket

[Freeipa-devel] [freeipa PR#398][comment] Support for Certificate Identity Mapping

2017-02-14 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/398 Title: #398: Support for Certificate Identity Mapping HonzaCholasta commented: """ @flo-renaud, nevermind the `default_from` suggestion, I was wrong - if e.g. both `--certmapdata` and `--certificate` are specified, we want to use both, not

[Freeipa-devel] [freeipa PR#446][comment] No NSS database passwords in ipa-client-install

2017-02-14 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/446 Title: #446: No NSS database passwords in ipa-client-install stlaz commented: """ NSSDatabase now defaults its `.password_file` to `.sec_dir + 'passwd.txt'`. It's necessary to create a pwdfile.txt in system-wide cert store so that actions like

[Freeipa-devel] [freeipa PR#446][synchronized] No NSS database passwords in ipa-client-install

2017-02-14 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/446 Author: stlaz Title: #446: No NSS database passwords in ipa-client-install Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/446/head:pr446 git checkout pr446

[Freeipa-devel] [freeipa PR#446][comment] No NSS database passwords in ipa-client-install

2017-02-14 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/446 Title: #446: No NSS database passwords in ipa-client-install stlaz commented: """ NSSDatabase now defaults its `.password_file` to `.sec_dir + 'passwd.txt'`. It's necessary to create a pwdfile.txt in Dogtag cert store so that actions like CA

[Freeipa-devel] [freeipa PR#379][comment] Packaging: Add placeholder and IPA commands packages

2017-02-14 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/379 Title: #379: Packaging: Add placeholder and IPA commands packages tiran commented: """ I don't mind to maintain my own copy of ipacommands with ```ipa-getkeytab``` until we agree on a permanent solution. """ See the full comment at

[Freeipa-devel] [freeipa PR#444][comment] Allow nsaccountlock to be searched in user-find commands

2017-02-14 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/444 Title: #444: Allow nsaccountlock to be searched in user-find commands MartinBasti commented: """ @pvomacka IMO this may deserve webUI part too """ See the full comment at https://github.com/freeipa/freeipa/pull/444#issuecomment-279752074 --

[Freeipa-devel] [freeipa PR#444][+ack] Allow nsaccountlock to be searched in user-find commands

2017-02-14 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/444 Title: #444: Allow nsaccountlock to be searched in user-find commands Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#444][comment] Allow nsaccountlock to be searched in user-find commands

2017-02-14 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/444 Title: #444: Allow nsaccountlock to be searched in user-find commands MartinBasti commented: """ Or we can modify search filter on server to cover this case, but it won't be nice """ See the full comment at

[Freeipa-devel] [freeipa PR#464][comment] Bump required python-cryptography version

2017-02-14 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/464 Title: #464: Bump required python-cryptography version HonzaCholasta commented: """ Fixed upstream master: https://fedorahosted.org/freeipa/changeset/5b56952a547277fab4c68da02f213d40f931a4ca """ See the full comment at

[Freeipa-devel] [freeipa PR#464][closed] Bump required python-cryptography version

2017-02-14 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/464 Author: stlaz Title: #464: Bump required python-cryptography version Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/464/head:pr464 git checkout pr464 -- Manage

[Freeipa-devel] [freeipa PR#464][+pushed] Bump required python-cryptography version

2017-02-14 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/464 Title: #464: Bump required python-cryptography version Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#444][comment] Allow nsaccountlock to be searched in user-find commands

2017-02-14 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/444 Title: #444: Allow nsaccountlock to be searched in user-find commands MartinBasti commented: """ Fixed upstream master: https://fedorahosted.org/freeipa/changeset/a930ec824da0337109d646ab3acb495dc1b6ba63 """ See the full comment at

[Freeipa-devel] [freeipa PR#444][closed] Allow nsaccountlock to be searched in user-find commands

2017-02-14 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/444 Author: redhatrises Title: #444: Allow nsaccountlock to be searched in user-find commands Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/444/head:pr444 git

[Freeipa-devel] [freeipa PR#397][comment] Improve wheel building and provide ipaserver wheel for local testing

2017-02-14 Thread pvoborni
URL: https://github.com/freeipa/freeipa/pull/397 Title: #397: Improve wheel building and provide ipaserver wheel for local testing pvoborni commented: """ @tiran I have very vague idea how this is helpful. You have mentioned it during post-devconf "API meeting". But I no longer remember it

[Freeipa-devel] [freeipa PR#455][comment] Backup /root/kracert.p12

2017-02-14 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/455 Title: #455: Backup /root/kracert.p12 MartinBasti commented: """ Fixed upstream master: https://fedorahosted.org/freeipa/changeset/11ef2cacbf2ebb67f80a0cf4a3e7b39da700188b """ See the full comment at

[Freeipa-devel] [freeipa PR#455][+pushed] Backup /root/kracert.p12

2017-02-14 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/455 Title: #455: Backup /root/kracert.p12 Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#423][comment] dns-update-system-records: add support for nsupdate output format

2017-02-14 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/423 Title: #423: dns-update-system-records: add support for nsupdate output format tomaskrizek commented: """ Please update the ticket in trac/JIRA to mentiond the command does not support stdout. LGTM otherwise. """ See the full comment at

[Freeipa-devel] [freeipa PR#423][+ack] dns-update-system-records: add support for nsupdate output format

2017-02-14 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/423 Title: #423: dns-update-system-records: add support for nsupdate output format Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#398][synchronized] Support for Certificate Identity Mapping

2017-02-14 Thread flo-renaud
URL: https://github.com/freeipa/freeipa/pull/398 Author: flo-renaud Title: #398: Support for Certificate Identity Mapping Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/398/head:pr398 git checkout pr398

[Freeipa-devel] [freeipa PR#446][comment] No NSS database passwords in ipa-client-install

2017-02-14 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/446 Title: #446: No NSS database passwords in ipa-client-install stlaz commented: """ NSSDatabase now defaults its `.password_file` to `.sec_dir + 'passwd.txt'`. It's necessary to create a pwdfile.txt in Dogtag cert store so that actions like CA

[Freeipa-devel] [freeipa PR#444][+pushed] Allow nsaccountlock to be searched in user-find commands

2017-02-14 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/444 Title: #444: Allow nsaccountlock to be searched in user-find commands Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#379][comment] Packaging: Add placeholder and IPA commands packages

2017-02-14 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/379 Title: #379: Packaging: Add placeholder and IPA commands packages MartinBasti commented: """ We need placeholder package for sure, this PR should be splitted into 2, but I'm still not endorsed to have ipa-getkeytab installable by pip """ See

[Freeipa-devel] [freeipa PR#464][+ack] Bump required python-cryptography version

2017-02-14 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/464 Title: #464: Bump required python-cryptography version Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#379][comment] Packaging: Add placeholder and IPA commands packages

2017-02-14 Thread pvoborni
URL: https://github.com/freeipa/freeipa/pull/379 Title: #379: Packaging: Add placeholder and IPA commands packages pvoborni commented: """ If there is reason it can be maintained in IPA, but what is the reason? """ See the full comment at

[Freeipa-devel] [freeipa PR#455][closed] Backup /root/kracert.p12

2017-02-14 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/455 Author: tiran Title: #455: Backup /root/kracert.p12 Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/455/head:pr455 git checkout pr455 -- Manage your subscription

[Freeipa-devel] [freeipa PR#379][comment] Packaging: Add placeholder and IPA commands packages

2017-02-14 Thread pvoborni
URL: https://github.com/freeipa/freeipa/pull/379 Title: #379: Packaging: Add placeholder and IPA commands packages pvoborni commented: """ I thought that I understand why this PR is needed bud in fact I don't. Ticket #6484 is closed. Why is it attached to it? How will the pypi packaging

[Freeipa-devel] [freeipa PR#23][+postponed] Time-Based HBAC Policies

2017-02-14 Thread pvoborni
URL: https://github.com/freeipa/freeipa/pull/23 Title: #23: Time-Based HBAC Policies Label: +postponed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#444][comment] Allow nsaccountlock to be searched in user-find commands

2017-02-14 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/444 Title: #444: Allow nsaccountlock to be searched in user-find commands MartinBasti commented: """ I found "not-sure-if" bug, nsaccountlock is not always specified (admin has it and any user after user-enable, that's why I didn't catch it during

[Freeipa-devel] [freeipa PR#446][synchronized] No NSS database passwords in ipa-client-install

2017-02-14 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/446 Author: stlaz Title: #446: No NSS database passwords in ipa-client-install Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/446/head:pr446 git checkout pr446

[Freeipa-devel] [bind-dyndb-ldap PR#9][+pushed] Remove duplicate const declaration specifier

2017-02-14 Thread tomaskrizek
URL: https://github.com/freeipa/bind-dyndb-ldap/pull/9 Title: #9: Remove duplicate const declaration specifier Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [bind-dyndb-ldap PR#9][closed] Remove duplicate const declaration specifier

2017-02-14 Thread tomaskrizek
URL: https://github.com/freeipa/bind-dyndb-ldap/pull/9 Author: tomaskrizek Title: #9: Remove duplicate const declaration specifier Action: closed To pull the PR as Git branch: git remote add ghbind-dyndb-ldap https://github.com/freeipa/bind-dyndb-ldap git fetch ghbind-dyndb-ldap

[Freeipa-devel] [bind-dyndb-ldap PR#9][comment] Remove duplicate const declaration specifier

2017-02-14 Thread tomaskrizek
URL: https://github.com/freeipa/bind-dyndb-ldap/pull/9 Title: #9: Remove duplicate const declaration specifier tomaskrizek commented: """ Fixed upstream. master - f76ca3b3a4c2c030071dd23c706d8cc06e1fa2a9 """ See the full comment at

[Freeipa-devel] [bind-dyndb-ldap PR#9][comment] Remove duplicate const declaration specifier

2017-02-14 Thread tomaskrizek
URL: https://github.com/freeipa/bind-dyndb-ldap/pull/9 Title: #9: Remove duplicate const declaration specifier tomaskrizek commented: """ @pemensik Thanks for review! """ See the full comment at https://github.com/freeipa/bind-dyndb-ldap/pull/9#issuecomment-279650948 -- Manage your

[Freeipa-devel] [freeipa PR#394][comment] Add fix for ipa plugins command

2017-02-14 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/394 Title: #394: Add fix for ipa plugins command MartinBasti commented: """ That test actually doesn't test output of command, IMO it should be xmlrpc_test. But it can be done later, shouldn't block this PR """ See the full comment at

[Freeipa-devel] [freeipa PR#394][comment] Add fix for ipa plugins command

2017-02-14 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/394 Title: #394: Add fix for ipa plugins command MartinBasti commented: """ That test actually doesn't test output of command, IMO it should be xmlrpc_test. But it can be done later, shouldn't block this PR """ See the full comment at

[Freeipa-devel] [freeipa PR#215][closed] Add script to setup krb5 NFS exports

2017-02-14 Thread pvoborni
URL: https://github.com/freeipa/freeipa/pull/215 Author: jumitche Title: #215: Add script to setup krb5 NFS exports Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/215/head:pr215 git checkout pr215 -- Manage

[Freeipa-devel] [freeipa PR#314][comment] RFC: privilege separation for ipa framework code

2017-02-14 Thread simo5
URL: https://github.com/freeipa/freeipa/pull/314 Title: #314: RFC: privilege separation for ipa framework code simo5 commented: """ Done """ See the full comment at https://github.com/freeipa/freeipa/pull/314#issuecomment-279859272 -- Manage your subscription for the Freeipa-devel mailing

[Freeipa-devel] [freeipa PR#396][comment] Explicitly remove support of SSLv2

2017-02-14 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/396 Title: #396: Explicitly remove support of SSLv2 HonzaCholasta commented: """ LGTM. """ See the full comment at https://github.com/freeipa/freeipa/pull/396#issuecomment-279935166 -- Manage your subscription for the Freeipa-devel mailing list:

[Freeipa-devel] [freeipa PR#314][comment] RFC: privilege separation for ipa framework code

2017-02-14 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/314 Title: #314: RFC: privilege separation for ipa framework code HonzaCholasta commented: """ Fixed upstream master: https://fedorahosted.org/freeipa/changeset/c894ebefc5c4c4c7ea340d6ddc4cd3c081917e4a

[Freeipa-devel] [freeipa PR#314][closed] RFC: privilege separation for ipa framework code

2017-02-14 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/314 Author: simo5 Title: #314: RFC: privilege separation for ipa framework code Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/314/head:pr314 git checkout pr314 --

[Freeipa-devel] [freeipa PR#314][+pushed] RFC: privilege separation for ipa framework code

2017-02-14 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/314 Title: #314: RFC: privilege separation for ipa framework code Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#314][+ack] RFC: privilege separation for ipa framework code

2017-02-14 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/314 Title: #314: RFC: privilege separation for ipa framework code Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#314][comment] RFC: privilege separation for ipa framework code

2017-02-14 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/314 Title: #314: RFC: privilege separation for ipa framework code HonzaCholasta commented: """ Thank you. """ See the full comment at https://github.com/freeipa/freeipa/pull/314#issuecomment-279925390 -- Manage your subscription for the

[Freeipa-devel] [freeipa PR#450][comment] Add FIPS-token password of HTTPD NSS database

2017-02-14 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/450 Title: #450: Add FIPS-token password of HTTPD NSS database HonzaCholasta commented: """ LGTM. I guess we don't have to bother with upgrade, given that you can turn on FIPS post-install, right? """ See the full comment at

[Freeipa-devel] [freeipa PR#399][synchronized] Certificate mapping test

2017-02-14 Thread dkupka
URL: https://github.com/freeipa/freeipa/pull/399 Author: dkupka Title: #399: Certificate mapping test Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/399/head:pr399 git checkout pr399 From

[Freeipa-devel] [freeipa PR#461][+pushed] Bump required version of bind-dyndb-ldap to 11.0-2

2017-02-14 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/461 Title: #461: Bump required version of bind-dyndb-ldap to 11.0-2 Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#461][closed] Bump required version of bind-dyndb-ldap to 11.0-2

2017-02-14 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/461 Author: tomaskrizek Title: #461: Bump required version of bind-dyndb-ldap to 11.0-2 Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/461/head:pr461 git checkout

[Freeipa-devel] [freeipa PR#461][comment] Bump required version of bind-dyndb-ldap to 11.0-2

2017-02-14 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/461 Title: #461: Bump required version of bind-dyndb-ldap to 11.0-2 MartinBasti commented: """ Fixed upstream master: https://fedorahosted.org/freeipa/changeset/6cb7bca68486a5ae4be6f93c1acacb7b9890ba9a """ See the full comment at

[Freeipa-devel] [freeipa PR#446][synchronized] No NSS database passwords in ipa-client-install

2017-02-14 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/446 Author: stlaz Title: #446: No NSS database passwords in ipa-client-install Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/446/head:pr446 git checkout pr446

[Freeipa-devel] [freeipa PR#314][comment] RFC: privilege separation for ipa framework code

2017-02-14 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/314 Title: #314: RFC: privilege separation for ipa framework code HonzaCholasta commented: """ @simo5, is there an umbrella ticket? 5959 perhaps? """ See the full comment at https://github.com/freeipa/freeipa/pull/314#issuecomment-279716045 --

[Freeipa-devel] [freeipa PR#461][+ack] Bump required version of bind-dyndb-ldap to 11.0-2

2017-02-14 Thread pvomacka
URL: https://github.com/freeipa/freeipa/pull/461 Title: #461: Bump required version of bind-dyndb-ldap to 11.0-2 Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: