[Freeipa-devel] [PATCH] ntp sync order in ipa-client-install

2014-02-19 Thread Darth Vader
Hi, Changed when ntp sync's in ipa-client-install for the ticket below: https://fedorahosted.org/freeipa/ticket/3957 Thanks, Gabe freeipa-rga-0005-Fix-order-of-synchronizing-time-when-running-ipa-cli.patch Description: Binary data ___ Freeipa-devel

Re: [Freeipa-devel] OpenSSH with PKCS#11 for key storage

2014-02-19 Thread Dmitri Pal
On 02/19/2014 03:30 PM, Petr Spacek wrote: On 19.2.2014 21:13, Dmitri Pal wrote: On 02/19/2014 01:49 PM, Petr Spacek wrote: Hello list, I just came across this page: http://www.gooze.eu/howto/using-openssh-with-smartcards/using-ssh-authentication-agent-ssh-add-with-smartcards If I underst

Re: [Freeipa-devel] [PATCH]Add -f option to ipactl

2014-02-19 Thread Dmitri Pal
On 02/19/2014 03:13 PM, Petr Spacek wrote: On 19.2.2014 21:10, Dmitri Pal wrote: On 02/19/2014 11:58 AM, Adam Misnyovszki wrote: Hi, I reviewed this old patch: If an error occurs in the start up sequence in ipactl start/restart, all the services are stopped. Using the --force/-f option prevent

Re: [Freeipa-devel] [PATCHES] OTP Patches

2014-02-19 Thread Alexander Bokovoy
On Wed, 19 Feb 2014, Alexander Bokovoy wrote: On Mon, 17 Feb 2014, Alexander Bokovoy wrote: On Thu, 13 Feb 2014, Alexander Bokovoy wrote: On Wed, 12 Feb 2014, Nathaniel McCallum wrote: Through the review process, patches are getting shifted around, added, deleted, etc. So I'm now just going to

Re: [Freeipa-devel] [PATCHES] OTP Patches

2014-02-19 Thread Alexander Bokovoy
On Mon, 17 Feb 2014, Alexander Bokovoy wrote: On Thu, 13 Feb 2014, Alexander Bokovoy wrote: On Wed, 12 Feb 2014, Nathaniel McCallum wrote: Through the review process, patches are getting shifted around, added, deleted, etc. So I'm now just going to be posting all the patches as an ordered set.

Re: [Freeipa-devel] OpenSSH with PKCS#11 for key storage

2014-02-19 Thread Petr Spacek
On 19.2.2014 21:13, Dmitri Pal wrote: On 02/19/2014 01:49 PM, Petr Spacek wrote: Hello list, I just came across this page: http://www.gooze.eu/howto/using-openssh-with-smartcards/using-ssh-authentication-agent-ssh-add-with-smartcards If I understand correctly, it allows you to store & use you

Re: [Freeipa-devel] [PATCH]Add -f option to ipactl

2014-02-19 Thread Dmitri Pal
On 02/19/2014 11:58 AM, Adam Misnyovszki wrote: Hi, I reviewed this old patch: If an error occurs in the start up sequence in ipactl start/restart, all the services are stopped. Using the --force/-f option prevents stopping of services that have successfully started. https://fedorahosted.org/fr

Re: [Freeipa-devel] [PATCH]Add -f option to ipactl

2014-02-19 Thread Petr Spacek
On 19.2.2014 21:10, Dmitri Pal wrote: On 02/19/2014 11:58 AM, Adam Misnyovszki wrote: Hi, I reviewed this old patch: If an error occurs in the start up sequence in ipactl start/restart, all the services are stopped. Using the --force/-f option prevents stopping of services that have successfull

Re: [Freeipa-devel] OpenSSH with PKCS#11 for key storage

2014-02-19 Thread Dmitri Pal
On 02/19/2014 01:49 PM, Petr Spacek wrote: Hello list, I just came across this page: http://www.gooze.eu/howto/using-openssh-with-smartcards/using-ssh-authentication-agent-ssh-add-with-smartcards If I understand correctly, it allows you to store & use your personal SSH keys via PKCS#11 inte

[Freeipa-devel] OpenSSH with PKCS#11 for key storage

2014-02-19 Thread Petr Spacek
Hello list, I just came across this page: http://www.gooze.eu/howto/using-openssh-with-smartcards/using-ssh-authentication-agent-ssh-add-with-smartcards If I understand correctly, it allows you to store & use your personal SSH keys via PKCS#11 interface. It sounds like a killer feature to me!

[Freeipa-devel] [PATCH]Add -f option to ipactl

2014-02-19 Thread Adam Misnyovszki
Hi, I reviewed this old patch: If an error occurs in the start up sequence in ipactl start/restart, all the services are stopped. Using the --force/-f option prevents stopping of services that have successfully started.

Re: [Freeipa-devel] [PATCH 0015] Add wait_for_dns option to default.conf

2014-02-19 Thread Martin Basti
On Wed, 2014-02-19 at 17:10 +0100, Petr Spacek wrote: > On 19.2.2014 15:11, Petr Spacek wrote: > > On 18.2.2014 17:34, Nathaniel McCallum wrote: > >> On Tue, 2014-02-18 at 17:06 +0100, Petr Viktorin wrote: > >>> On 02/18/2014 04:45 PM, Petr Spacek wrote: > Hello, > > Add wait_for_dns

Re: [Freeipa-devel] [PATCH] ipactl can not restart ipa services if current status is stopped

2014-02-19 Thread Martin Kosek
On 02/19/2014 04:43 PM, Adam Misnyovszki wrote: > Hi, > > fixed by starting the directory server in the beginning of restarting if it > is not currently running to enable fetching running services, although former > restart script didn't check that. Also added a check, that if the directory > s

Re: [Freeipa-devel] [PATCHES] 0464-0466 Multivalued targetfilter

2014-02-19 Thread Martin Kosek
On 02/19/2014 10:44 AM, Petr Viktorin wrote: > On 02/18/2014 08:02 PM, Petr Viktorin wrote: >> On 02/18/2014 09:42 AM, Martin Kosek wrote: >>> On 02/13/2014 01:12 PM, Petr Viktorin wrote: Hello, These patches fix https://fedorahosted.org/freeipa/ticket/4074 Design: http://www.fr

Re: [Freeipa-devel] [PATCH 0015] Add wait_for_dns option to default.conf

2014-02-19 Thread Petr Spacek
On 19.2.2014 15:11, Petr Spacek wrote: On 18.2.2014 17:34, Nathaniel McCallum wrote: On Tue, 2014-02-18 at 17:06 +0100, Petr Viktorin wrote: On 02/18/2014 04:45 PM, Petr Spacek wrote: Hello, Add wait_for_dns option to default.conf. This option makes record changes in DNS tree synchronous. IP

Re: [Freeipa-devel] [PATCH 0153] ipatests: Fix incorrect order of operations when restoring

2014-02-19 Thread Jan Pazdziora
On Wed, Feb 19, 2014 at 04:37:05PM +0100, Tomas Babej wrote: > Hi, > > When restoring files from backup, we do use an incorrect order of > operations - we first restore SELinux context and then copy the > files from backup, when we need to do the exact opposite. > > https://fedorahosted.org/freei

[Freeipa-devel] [PATCH] ipactl can not restart ipa services if current status is stopped

2014-02-19 Thread Adam Misnyovszki
Hi, fixed by starting the directory server in the beginning of restarting if it is not currently running to enable fetching running services, although former restart script didn't check that. Also added a check, that if the directory server started at the beginning, there is no need to restart

[Freeipa-devel] [PATCH 0153] ipatests: Fix incorrect order of operations when restoring

2014-02-19 Thread Tomas Babej
Hi, When restoring files from backup, we do use an incorrect order of operations - we first restore SELinux context and then copy the files from backup, when we need to do the exact opposite. https://fedorahosted.org/freeipa/ticket/4133 >From 3c1da9e7265bfb303cd4b9751c5b32b04d502431 Mon Sep 17 0

Re: [Freeipa-devel] [PATCH] 0468 permission-mod: Do not copy member attributes to new entry

2014-02-19 Thread Jan Cholasta
On 19.2.2014 14:45, Petr Viktorin wrote: Hello, This fixes https://fedorahosted.org/freeipa/ticket/4178 Thanks, ACK. -- Jan Cholasta ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] [PATCH 0015] Add wait_for_dns option to default.conf

2014-02-19 Thread Petr Spacek
On 18.2.2014 17:34, Nathaniel McCallum wrote: On Tue, 2014-02-18 at 17:06 +0100, Petr Viktorin wrote: On 02/18/2014 04:45 PM, Petr Spacek wrote: Hello, Add wait_for_dns option to default.conf. This option makes record changes in DNS tree synchronous. IPA calls will wait until new data are vis

[Freeipa-devel] [PATCH] 0468 permission-mod: Do not copy member attributes to new entry

2014-02-19 Thread Petr Viktorin
Hello, This fixes https://fedorahosted.org/freeipa/ticket/4178 -- PetrĀ³ From 85222e02ce57224ea661c990c69efecbf7907a74 Mon Sep 17 00:00:00 2001 From: Petr Viktorin Date: Wed, 19 Feb 2014 14:18:58 +0100 Subject: [PATCH] permission-mod: Do not copy member attributes to new entry Fixes: https://fed

Re: [Freeipa-devel] [PATCH 0025] Add support to ipa-kdb for keyless principals

2014-02-19 Thread Simo Sorce
On Wed, 2014-02-19 at 15:24 +0200, Alexander Bokovoy wrote: > On Wed, 19 Feb 2014, Simo Sorce wrote: > >On Tue, 2013-11-12 at 10:59 -0500, Nathaniel McCallum wrote: > >> diff --git a/util/ipa_krb5.c b/util/ipa_krb5.c > >> index > >> 934fd27d80cdd846f4de631b2dd587b0ad0f325c..cc84f9920a7b105c926c

Re: [Freeipa-devel] [PATCH 0025] Add support to ipa-kdb for keyless principals

2014-02-19 Thread Simo Sorce
On Wed, 2014-02-19 at 08:19 -0500, Simo Sorce wrote: > On Tue, 2013-11-12 at 10:59 -0500, Nathaniel McCallum wrote: > > diff --git a/util/ipa_krb5.c b/util/ipa_krb5.c > > index > > 934fd27d80cdd846f4de631b2dd587b0ad0f325c..cc84f9920a7b105c926cb765b435c0fbdfac > > 100644 > > --- a/util/ipa_krb5

Re: [Freeipa-devel] [PATCH 0025] Add support to ipa-kdb for keyless principals

2014-02-19 Thread Alexander Bokovoy
On Wed, 19 Feb 2014, Simo Sorce wrote: On Tue, 2013-11-12 at 10:59 -0500, Nathaniel McCallum wrote: diff --git a/util/ipa_krb5.c b/util/ipa_krb5.c index 934fd27d80cdd846f4de631b2dd587b0ad0f325c..cc84f9920a7b105c926cb765b435c0fbdfac 100644 --- a/util/ipa_krb5.c +++ b/util/ipa_krb5.c @@ -296,

Re: [Freeipa-devel] [PATCH 0025] Add support to ipa-kdb for keyless principals

2014-02-19 Thread Simo Sorce
On Tue, 2013-11-12 at 10:59 -0500, Nathaniel McCallum wrote: > diff --git a/util/ipa_krb5.c b/util/ipa_krb5.c > index > 934fd27d80cdd846f4de631b2dd587b0ad0f325c..cc84f9920a7b105c926cb765b435c0fbdfac > 100644 > --- a/util/ipa_krb5.c > +++ b/util/ipa_krb5.c > @@ -296,6 +296,9 @@ void ipa_krb5_fr

Re: [Freeipa-devel] [PATCH 0025] Add support to ipa-kdb for keyless principals

2014-02-19 Thread Petr Viktorin
On 02/18/2014 09:02 PM, Alexander Bokovoy wrote: On Tue, 12 Nov 2013, Nathaniel McCallum wrote: https://fedorahosted.org/freeipa/ticket/3779 ACK Pushed to master: b769d1c18678b5eede7505dec7938f6836070044 -- PetrĀ³ ___ Freeipa-devel mailing list F

Re: [Freeipa-devel] [PATCH] Permission MOD command fix

2014-02-19 Thread Jan Cholasta
On 18.2.2014 21:03, Martin Kosek wrote: On 02/18/2014 06:52 PM, Petr Viktorin wrote: On 02/18/2014 06:46 PM, Jan Cholasta wrote: Hi, On 18.2.2014 18:40, Nathaniel McCallum wrote: On Tue, 2014-02-18 at 12:31 -0500, Adam Misnyovszki wrote: Hi, this patch fixes permission-mod command returning