[Freeipa-devel] [freeipa PR#463][comment] pylint_plugins: add forbidden import checker

2017-03-10 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/463 Title: #463: pylint_plugins: add forbidden import checker martbab commented: """ @MartinBasti any progress in reviewing this PR? """ See the full comment at https://github.com/freeipa/freeipa/pull/463#issuecomment-285605217 -- Manage your

[Freeipa-devel] [freeipa PR#414][comment] SPEC: Update SELinux file context of ipa-otpd

2017-03-10 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/414 Title: #414: SPEC: Update SELinux file context of ipa-otpd martbab commented: """ @lslebodn CI complains that your changes produce an invalid specfile. Can you please fix this. A better question, is there a demand to have this workaround in the

[Freeipa-devel] [freeipa PR#266][comment] ipapython: simplify Env object initialization

2017-03-10 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/266 Title: #266: ipapython: simplify Env object initialization martbab commented: """ @stlaz @HonzaCholasta any progress on this PR or should we mark it as postponed and return to it later? """ See the full comment at

[Freeipa-devel] [freeipa PR#353][+ack] [RFE] Pwdpolicy

2017-03-10 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/353 Title: #353: [RFE] Pwdpolicy Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#353][comment] [RFE] Pwdpolicy

2017-03-10 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/353 Title: #353: [RFE] Pwdpolicy martbab commented: """ test_kadmin and all other tests also passed. I do not see reason for not pushing. Sorry for the dealy in reviewing. """ See the full comment at

[Freeipa-devel] [freeipa PR#353][+pushed] [RFE] Pwdpolicy

2017-03-10 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/353 Title: #353: [RFE] Pwdpolicy Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#353][comment] [RFE] Pwdpolicy

2017-03-10 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/353 Title: #353: [RFE] Pwdpolicy martbab commented: """ master: * 9f13b330aaec468a018472dce5fc77131277de94 Add code to retrieve results from multiple bases * 2e5cc369fd8b9d780697a9a286429cc2ca0f448a Add support for searching policies in

[Freeipa-devel] [freeipa PR#353][comment] [RFE] Pwdpolicy

2017-03-10 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/353 Title: #353: [RFE] Pwdpolicy martbab commented: """ test_kadmin and all other tests also passed. I do not see reason for not pushing. Sorry for the dealy in reviewing. """ See the full comment at

[Freeipa-devel] [freeipa PR#463][comment] pylint_plugins: add forbidden import checker

2017-03-10 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/463 Title: #463: pylint_plugins: add forbidden import checker HonzaCholasta commented: """ @martbab, I haven't incorporated @MartinBasti's suggestions in yet. """ See the full comment at

[Freeipa-devel] [freeipa PR#353][closed] [RFE] Pwdpolicy

2017-03-10 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/353 Author: simo5 Title: #353: [RFE] Pwdpolicy Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/353/head:pr353 git checkout pr353 -- Manage your subscription for the

[Freeipa-devel] [freeipa PR#561][comment] ldap2: fix crash in development mode

2017-03-10 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/561 Title: #561: ldap2: fix crash in development mode martbab commented: """ Yes but please split it into a separate patch so that CI-related changes are tracked separately and do not pollute the changes in the code. """ See the full comment at

[Freeipa-devel] [RFC] Smartcard authentication with PKINIT and local authentication

2017-03-10 Thread Sumit Bose
Hi, with the recent addition of PKINIT support there is now a second method available to Smartcard authentication besides local authentication. I was about to add some sssd.conf option which can control the fallback to local authentication if PKINIT fails. Currently there is only a fallback to

[Freeipa-devel] [freeipa PR#266][+postponed] ipapython: simplify Env object initialization

2017-03-10 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/266 Title: #266: ipapython: simplify Env object initialization Label: +postponed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#414][comment] SPEC: Update SELinux file context of ipa-otpd

2017-03-10 Thread lslebodn
URL: https://github.com/freeipa/freeipa/pull/414 Title: #414: SPEC: Update SELinux file context of ipa-otpd lslebodn commented: """ On (10/03/17 00:28), Martin Babinsky wrote: >@lslebodn CI complains that your changes produce an invalid specfile. Can you >please fix this. A better question, is

[Freeipa-devel] [freeipa PR#414][+rejected] SPEC: Update SELinux file context of ipa-otpd

2017-03-10 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/414 Title: #414: SPEC: Update SELinux file context of ipa-otpd Label: +rejected -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#568][opened] cert: include certificate chain in cert command output

2017-03-10 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/568 Author: HonzaCholasta Title: #568: cert: include certificate chain in cert command output Action: opened PR body: """ **cert: add output file option to cert-request** The certificate returned by cert-request can now be saved to a file in the

Re: [Freeipa-devel] Samba 4.6.0-2.fc26 is available for trust tests

2017-03-10 Thread Petr Vobornik
On 03/10/2017 08:32 AM, Alexander Bokovoy wrote: Hi, I've submitted Samba 4.6.0-2 to FC26 and rawhide. This build contains fixes that allow FreeIPA implement trust functionality under gssproxy privilege separation. You need gssproxy 0.7.0 or later. Please test and add karma to

[Freeipa-devel] [freeipa PR#414][comment] SPEC: Update SELinux file context of ipa-otpd

2017-03-10 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/414 Title: #414: SPEC: Update SELinux file context of ipa-otpd martbab commented: """ I agree with closing this, we will need more substantial policy update """ See the full comment at

[Freeipa-devel] [freeipa PR#566][synchronized] webui: do not warn about CAs if there is only one master

2017-03-10 Thread pvoborni
URL: https://github.com/freeipa/freeipa/pull/566 Author: pvoborni Title: #566: webui: do not warn about CAs if there is only one master Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/566/head:pr566 git

[Freeipa-devel] [freeipa PR#561][synchronized] ldap2: fix crash in development mode

2017-03-10 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/561 Author: HonzaCholasta Title: #561: ldap2: fix crash in development mode Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/561/head:pr561 git checkout pr561

[Freeipa-devel] [freeipa PR#561][comment] ldap2: fix crash in development mode

2017-03-10 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/561 Title: #561: ldap2: fix crash in development mode HonzaCholasta commented: """ Turns out unsetting mode in default.conf is not good enough, one has to explicitly set it to "development" to enable development mode, because "production" is the

Re: [Freeipa-devel] [RFC] Smartcard authentication with PKINIT and local authentication

2017-03-10 Thread Alexander Bokovoy
On pe, 10 maalis 2017, Sumit Bose wrote: Hi, with the recent addition of PKINIT support there is now a second method available to Smartcard authentication besides local authentication. I was about to add some sssd.conf option which can control the fallback to local authentication if PKINIT

Re: [Freeipa-devel] [RFC] Smartcard authentication with PKINIT and local authentication

2017-03-10 Thread Sumit Bose
On Fri, Mar 10, 2017 at 11:58:25AM +0200, Alexander Bokovoy wrote: > On pe, 10 maalis 2017, Sumit Bose wrote: > > Hi, > > > > with the recent addition of PKINIT support there is now a second method > > available to Smartcard authentication besides local authentication. > > > > I was about to add

[Freeipa-devel] [freeipa PR#561][synchronized] ldap2: fix crash in development mode

2017-03-10 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/561 Author: HonzaCholasta Title: #561: ldap2: fix crash in development mode Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/561/head:pr561 git checkout pr561

[Freeipa-devel] bind-dyndb-ldap git migration issue [resolved]

2017-03-10 Thread Tomas Krizek
Hi all, if you noticed some odd notification about new commits to old bind-dyndb-ldap branches, please ignore them. Today, I managed to accidentally remove all old branches in bind-dyndb-ldap repo. When I pushed some new code to master, the automatic syncing pagure -> github script deleted all

[Freeipa-devel] [freeipa PR#511][comment] Bump required version of gssproxy to 0.7.0

2017-03-10 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/511 Title: #511: Bump required version of gssproxy to 0.7.0 MartinBasti commented: """ master: * c37254e1b124c95d6ea874f6513979ca165fb31d Bump required version of gssproxy to 0.7.0 """ See the full comment at

[Freeipa-devel] [freeipa PR#511][closed] Bump required version of gssproxy to 0.7.0

2017-03-10 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/511 Author: dkupka Title: #511: Bump required version of gssproxy to 0.7.0 Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/511/head:pr511 git checkout pr511 --

[Freeipa-devel] [freeipa PR#511][+pushed] Bump required version of gssproxy to 0.7.0

2017-03-10 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/511 Title: #511: Bump required version of gssproxy to 0.7.0 Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#570][opened] ipaserver/dcerpc.py: use arcfour_encrypt from samba

2017-03-10 Thread abbra
URL: https://github.com/freeipa/freeipa/pull/570 Author: abbra Title: #570: ipaserver/dcerpc.py: use arcfour_encrypt from samba Action: opened PR body: """ Samba Python bindings provide samba.arcfour_encrypt(key, data). Instead of implementing own wrapper, use Samba's. In future Samba

[Freeipa-devel] [freeipa PR#569][synchronized] Remove copy-schema-to-ca.py from master branch

2017-03-10 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/569 Author: MartinBasti Title: #569: Remove copy-schema-to-ca.py from master branch Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/569/head:pr569 git checkout

[Freeipa-devel] [freeipa PR#117][comment] Make ipa-replica-install run in interactive mode

2017-03-10 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/117 Title: #117: Make ipa-replica-install run in interactive mode stlaz commented: """ I have a WIP patch but since sometimes it's not clear which credentials are used, I am marking this as postponed so that we can wait until the client module can

[Freeipa-devel] [freeipa PR#117][+postponed] Make ipa-replica-install run in interactive mode

2017-03-10 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/117 Title: #117: Make ipa-replica-install run in interactive mode Label: +postponed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#569][synchronized] Remove copy-schema-to-ca.py from master branch

2017-03-10 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/569 Author: MartinBasti Title: #569: Remove copy-schema-to-ca.py from master branch Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/569/head:pr569 git checkout

[Freeipa-devel] [freeipa PR#529][synchronized] installer: update time estimates

2017-03-10 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/529 Author: tomaskrizek Title: #529: installer: update time estimates Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/529/head:pr529 git checkout pr529 From

[Freeipa-devel] [freeipa PR#569][edited] Remove copy-schema-to-ca.py from master branch

2017-03-10 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/569 Author: MartinBasti Title: #569: Remove copy-schema-to-ca.py from master branch Action: edited Changed field: body Original value: """ This script is used only for IPA <3.3, so it must be compatible with ipa-3-3 branch, so it should be placed

[Freeipa-devel] [freeipa PR#511][comment] Bump required version of gssproxy to 0.7.0

2017-03-10 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/511 Title: #511: Bump required version of gssproxy to 0.7.0 stlaz commented: """ Meh, I'll be damned to eternity then  """ See the full comment at https://github.com/freeipa/freeipa/pull/511#issuecomment-285665738 -- Manage your subscription for

[Freeipa-devel] [freeipa PR#569][synchronized] Remove copy-schema-to-ca.py from master branch

2017-03-10 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/569 Author: MartinBasti Title: #569: Remove copy-schema-to-ca.py from master branch Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/569/head:pr569 git checkout

[Freeipa-devel] [freeipa PR#543][comment] Add options to allow ticket caching

2017-03-10 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/543 Title: #543: Add options to allow ticket caching MartinBasti commented: """ Bump """ See the full comment at https://github.com/freeipa/freeipa/pull/543#issuecomment-285692796 -- Manage your subscription for the Freeipa-devel mailing list:

[Freeipa-devel] [freeipa PR#571][opened] pylint: bump dependency to version >= 1.6

2017-03-10 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/571 Author: MartinBasti Title: #571: pylint: bump dependency to version >= 1.6 Action: opened PR body: """ Older pylint versions produces false positive errors """ To pull the PR as Git branch: git remote add ghfreeipa

[Freeipa-devel] [freeipa PR#569][synchronized] Remove copy-schema-to-ca.py from master branch

2017-03-10 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/569 Author: MartinBasti Title: #569: Remove copy-schema-to-ca.py from master branch Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/569/head:pr569 git checkout

[Freeipa-devel] [freeipa PR#511][+ack] Bump required version of gssproxy to 0.7.0

2017-03-10 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/511 Title: #511: Bump required version of gssproxy to 0.7.0 Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#569][synchronized] Remove copy-schema-to-ca.py from master branch

2017-03-10 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/569 Author: MartinBasti Title: #569: Remove copy-schema-to-ca.py from master branch Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/569/head:pr569 git checkout

[Freeipa-devel] [freeipa PR#529][comment] installer: update time estimates

2017-03-10 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/529 Title: #529: installer: update time estimates MartinBasti commented: """ master: * 09c6b7578046fed0824fc0f0d9040be69c0f0eb6 installer: update time estimates """ See the full comment at

[Freeipa-devel] [freeipa PR#529][+pushed] installer: update time estimates

2017-03-10 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/529 Title: #529: installer: update time estimates Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#529][closed] installer: update time estimates

2017-03-10 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/529 Author: tomaskrizek Title: #529: installer: update time estimates Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/529/head:pr529 git checkout pr529 -- Manage

[Freeipa-devel] [freeipa PR#529][+ack] installer: update time estimates

2017-03-10 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/529 Title: #529: installer: update time estimates Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#517][comment] [WIP] Use Custodia 0.3 features

2017-03-10 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/517 Title: #517: [WIP] Use Custodia 0.3 features MartinBasti commented: """ ipa-server-install failed ``` Mar 10 17:48:54 vm-058-129.abc.idm.lab.eng.brq.redhat.com systemd[1]: Stopping IPA Custodia Service... Mar 10 17:48:54

[Freeipa-devel] Announcing bind-dyndb-ldap 11.1

2017-03-10 Thread Tomas Krizek
The FreeIPA team is proud to announce bind-dyndb-ldap version 11.1. It can be downloaded fromhttps://releases.pagure.org/bind-dyndb-ldap/ The new version has also been built for Fedora 26+: https://bodhi.fedoraproject.org/updates/FEDORA-2017-56aa9caed6 Latest news: 11.1 [1] Prevent crash

[Freeipa-devel] [freeipa PR#561][synchronized] ldap2: fix crash in development mode

2017-03-10 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/561 Author: HonzaCholasta Title: #561: ldap2: fix crash in development mode Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/561/head:pr561 git checkout pr561

[Freeipa-devel] [freeipa PR#463][+ack] pylint_plugins: add forbidden import checker

2017-03-10 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/463 Title: #463: pylint_plugins: add forbidden import checker Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#463][+pushed] pylint_plugins: add forbidden import checker

2017-03-10 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/463 Title: #463: pylint_plugins: add forbidden import checker Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#463][closed] pylint_plugins: add forbidden import checker

2017-03-10 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/463 Author: HonzaCholasta Title: #463: pylint_plugins: add forbidden import checker Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/463/head:pr463 git checkout pr463

[Freeipa-devel] [freeipa PR#463][comment] pylint_plugins: add forbidden import checker

2017-03-10 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/463 Title: #463: pylint_plugins: add forbidden import checker MartinBasti commented: """ master: * 5d489ac5604ca959cfe439c0594b8739073f3cea pylint_plugins: add forbidden import checker """ See the full comment at

Re: [Freeipa-devel] [RFC] Smartcard authentication with PKINIT and local authentication

2017-03-10 Thread Sumit Bose
On Fri, Mar 10, 2017 at 01:39:27PM +0200, Alexander Bokovoy wrote: > On pe, 10 maalis 2017, Sumit Bose wrote: > > On Fri, Mar 10, 2017 at 11:58:25AM +0200, Alexander Bokovoy wrote: > > > On pe, 10 maalis 2017, Sumit Bose wrote: > > > > Hi, > > > > > > > > with the recent addition of PKINIT support

[Freeipa-devel] [freeipa PR#511][comment] Bump required version of gssproxy to 0.7.0

2017-03-10 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/511 Title: #511: Bump required version of gssproxy to 0.7.0 stlaz commented: """ Is this in RHEL already? If not, it will break upstream-downstreamish tests  """ See the full comment at

Re: [Freeipa-devel] [RFC] Smartcard authentication with PKINIT and local authentication

2017-03-10 Thread Alexander Bokovoy
On pe, 10 maalis 2017, Sumit Bose wrote: On Fri, Mar 10, 2017 at 01:39:27PM +0200, Alexander Bokovoy wrote: On pe, 10 maalis 2017, Sumit Bose wrote: > On Fri, Mar 10, 2017 at 11:58:25AM +0200, Alexander Bokovoy wrote: > > On pe, 10 maalis 2017, Sumit Bose wrote: > > > Hi, > > > > > > with the

[Freeipa-devel] [freeipa PR#511][comment] Bump required version of gssproxy to 0.7.0

2017-03-10 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/511 Title: #511: Bump required version of gssproxy to 0.7.0 MartinBasti commented: """ We need to have our upstream-upstream tests green first, then we can care about upstream-downstream """ See the full comment at

[Freeipa-devel] [freeipa PR#511][comment] Bump required version of gssproxy to 0.7.0

2017-03-10 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/511 Title: #511: Bump required version of gssproxy to 0.7.0 MartinBasti commented: """ and gssproxy 0.7 is not in RHEL yet """ See the full comment at https://github.com/freeipa/freeipa/pull/511#issuecomment-285656814 -- Manage your subscription

[Freeipa-devel] [freeipa PR#569][opened] Remove copy-schema-to-ca.py from master branch

2017-03-10 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/569 Author: MartinBasti Title: #569: Remove copy-schema-to-ca.py from master branch Action: opened PR body: """ This script is used only for IPA <3.3, so it must be compatible with ipa-3-3 branch, so it should be placed there

[Freeipa-devel] [freeipa PR#567][synchronized] Configure KDC to use certs after they are deployed

2017-03-10 Thread simo5
URL: https://github.com/freeipa/freeipa/pull/567 Author: simo5 Title: #567: Configure KDC to use certs after they are deployed Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/567/head:pr567 git checkout

[Freeipa-devel] [freeipa PR#567][comment] Configure KDC to use certs after they are deployed

2017-03-10 Thread simo5
URL: https://github.com/freeipa/freeipa/pull/567 Title: #567: Configure KDC to use certs after they are deployed simo5 commented: """ Should have addressed all concerns in this push """ See the full comment at https://github.com/freeipa/freeipa/pull/567#issuecomment-285660566 -- Manage your

[Freeipa-devel] [freeipa PR#566][+ack] webui: do not warn about CAs if there is only one master

2017-03-10 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/566 Title: #566: webui: do not warn about CAs if there is only one master Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#463][synchronized] pylint_plugins: add forbidden import checker

2017-03-10 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/463 Author: HonzaCholasta Title: #463: pylint_plugins: add forbidden import checker Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/463/head:pr463 git checkout

[Freeipa-devel] [freeipa PR#463][comment] pylint_plugins: add forbidden import checker

2017-03-10 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/463 Title: #463: pylint_plugins: add forbidden import checker HonzaCholasta commented: """ I have now incorporated the suggestions. """ See the full comment at https://github.com/freeipa/freeipa/pull/463#issuecomment-285646604 -- Manage your

[Freeipa-devel] [freeipa PR#511][synchronized] Bump required version of gssproxy to 0.6.2

2017-03-10 Thread dkupka
URL: https://github.com/freeipa/freeipa/pull/511 Author: dkupka Title: #511: Bump required version of gssproxy to 0.6.2 Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/511/head:pr511 git checkout pr511

[Freeipa-devel] [freeipa PR#511][synchronized] Bump required version of gssproxy to 0.6.2

2017-03-10 Thread dkupka
URL: https://github.com/freeipa/freeipa/pull/511 Author: dkupka Title: #511: Bump required version of gssproxy to 0.6.2 Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/511/head:pr511 git checkout pr511

[Freeipa-devel] [freeipa PR#546][closed] Store session cookie in a ccache option

2017-03-10 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/546 Author: simo5 Title: #546: Store session cookie in a ccache option Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/546/head:pr546 git checkout pr546 -- Manage

[Freeipa-devel] [freeipa PR#546][+pushed] Store session cookie in a ccache option

2017-03-10 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/546 Title: #546: Store session cookie in a ccache option Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#546][comment] Store session cookie in a ccache option

2017-03-10 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/546 Title: #546: Store session cookie in a ccache option MartinBasti commented: """ master: * 7cab95955539b5f9596dcda5886ea3d9755fb193 Store session cookie in a ccache option """ See the full comment at

[Freeipa-devel] [freeipa PR#566][+pushed] webui: do not warn about CAs if there is only one master

2017-03-10 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/566 Title: #566: webui: do not warn about CAs if there is only one master Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#566][comment] webui: do not warn about CAs if there is only one master

2017-03-10 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/566 Title: #566: webui: do not warn about CAs if there is only one master MartinBasti commented: """ master: * 6027a8111fa9ed7a058fb222f4f96b12039deb8b webui: do not warn about CAs if there is only one master """ See the full comment at

[Freeipa-devel] [freeipa PR#566][closed] webui: do not warn about CAs if there is only one master

2017-03-10 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/566 Author: pvoborni Title: #566: webui: do not warn about CAs if there is only one master Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/566/head:pr566 git checkout

[Freeipa-devel] [freeipa PR#553][synchronized] Add check for removing last KRA server

2017-03-10 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/553 Author: stlaz Title: #553: Add check for removing last KRA server Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/553/head:pr553 git checkout pr553 From

[Freeipa-devel] [freeipa PR#565][comment] permissions: add permissions for reading and modifying external group members

2017-03-10 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/565 Title: #565: permissions: add permissions for reading and modifying external group members MartinBasti commented: """ LGTM """ See the full comment at https://github.com/freeipa/freeipa/pull/565#issuecomment-285646883 -- Manage your

[Freeipa-devel] [freeipa PR#553][synchronized] Add check for removing last KRA server

2017-03-10 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/553 Author: stlaz Title: #553: Add check for removing last KRA server Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/553/head:pr553 git checkout pr553 From

[Freeipa-devel] [freeipa PR#553][comment] Add check for removing last KRA server

2017-03-10 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/553 Title: #553: Add check for removing last KRA server stlaz commented: """ Reworked how the beg for a service replication worked. """ See the full comment at https://github.com/freeipa/freeipa/pull/553#issuecomment-285647389 -- Manage your

[Freeipa-devel] [freeipa PR#511][edited] Bump required version of gssproxy to 0.7.0

2017-03-10 Thread dkupka
URL: https://github.com/freeipa/freeipa/pull/511 Author: dkupka Title: #511: Bump required version of gssproxy to 0.7.0 Action: edited Changed field: title Original value: """ Bump required version of gssproxy to 0.6.2 """ -- Manage your subscription for the Freeipa-devel mailing list:

Re: [Freeipa-devel] [RFC] Smartcard authentication with PKINIT and local authentication

2017-03-10 Thread Alexander Bokovoy
On pe, 10 maalis 2017, Sumit Bose wrote: On Fri, Mar 10, 2017 at 11:58:25AM +0200, Alexander Bokovoy wrote: On pe, 10 maalis 2017, Sumit Bose wrote: > Hi, > > with the recent addition of PKINIT support there is now a second method > available to Smartcard authentication besides local

[Freeipa-devel] [freeipa PR#511][comment] Bump required version of gssproxy to 0.7.0

2017-03-10 Thread dkupka
URL: https://github.com/freeipa/freeipa/pull/511 Title: #511: Bump required version of gssproxy to 0.7.0 dkupka commented: """ @simo5 We already require mod_auth_gssapi >= 1.5.0 https://github.com/freeipa/freeipa/blob/master/freeipa.spec.in#L255 """ See the full comment at