Re: [Freeipa-devel] [PATCH 0137] ipalib: Add DateTime parameter

2014-05-07 Thread Jan Cholasta
On 6.5.2014 19:55, Nathaniel McCallum wrote: I know it is a bit late on this, but for the OTP token import script, I have to have support for the full ISO 8601. My plan right now is to use python-dateutil for this. Using dateutil would simplify some of this code. Is there a reason we aren't

Re: [Freeipa-devel] [PATCH 0049] Add support for protected tokens

2014-05-07 Thread Jan Cholasta
Hi, On 6.5.2014 17:08, Nathaniel McCallum wrote: On Tue, 2014-05-06 at 09:49 -0400, Nathaniel McCallum wrote: On Mon, 2014-05-05 at 12:42 -0400, Nathaniel McCallum wrote: This also constitutes a rethinking of the token ACIs after the introduction of SELFDN support. Admins, as before, have

Re: [Freeipa-devel] [PATCH] 629 webui: otptoken-adder dialog - remove obsolete comment

2014-05-07 Thread Petr Vobornik
On 6.5.2014 14:22, Misnyovszki Adam wrote: On Tue, 06 May 2014 13:34:28 +0200 Petr Vobornik pvobo...@redhat.com wrote: No longer valid. HOTP tokens are also supported. ACK Pushed to master: c4d79eaf59a8bc50ca2e18d704b240e18d6d6e68 -- Petr Vobornik

Re: [Freeipa-devel] [PATCH 0049] Add support for protected tokens

2014-05-07 Thread Nathaniel McCallum
On Wed, 2014-05-07 at 11:42 +0200, Jan Cholasta wrote: Hi, On 6.5.2014 17:08, Nathaniel McCallum wrote: On Tue, 2014-05-06 at 09:49 -0400, Nathaniel McCallum wrote: On Mon, 2014-05-05 at 12:42 -0400, Nathaniel McCallum wrote: This also constitutes a rethinking of the token ACIs after the

[Freeipa-devel] [PATCH 0003] freeipa-ci: Remove freeipa packages before distro-sync in build

2014-05-07 Thread Tomas Babej
Hi, this fixes the problem on builders, which do distro-sync while having freeipa packages present from previous build run. This causes unnecessary downgrades., which may result into failures (as now with the smartproxy pushed). -- Tomas Babej Associate Software Engineer | Red Hat | Identity

Re: [Freeipa-devel] [PATCH] 18 webui otptoken test data added

2014-05-07 Thread Misnyovszki Adam
On Tue, 06 May 2014 10:29:32 +0200 Petr Vobornik pvobo...@redhat.com wrote: On 5.5.2014 16:39, Misnyovszki Adam wrote: On Wed, 30 Apr 2014 13:37:10 +0200 Petr Vobornik pvobo...@redhat.com wrote: On 29.4.2014 16:30, Misnyovszki Adam wrote: On Fri, 25 Apr 2014 17:16:48 +0200

Re: [Freeipa-devel] [PATCH] 22-23 webui tests extended by checking field disable property

2014-05-07 Thread Misnyovszki Adam
On Tue, 6 May 2014 17:58:09 +0200 Misnyovszki Adam amisn...@redhat.com wrote: Hi, first patch extends webui tests with a callback function, and an assert_disabled function, to check if a field is disabled under certain conditions. Second patch extends range tests with this checking

Re: [Freeipa-devel] [PATCH 0251-0256] Add support for NSEC3

2014-05-07 Thread Petr Spacek
On 29.4.2014 23:34, Petr Spacek wrote: This patch set adds support for NSEC3. See commit messages for details. Patch 253 was obsoleted by patches 244v2 and 246v2. You can download latest greatest version from dnssec branch on github: https://github.com/spacekpe/bind-dyndb-ldap/tree/dnssec

Re: [Freeipa-devel] [PATCH 0244-0245] Add basic support for inline-signingSeparate raw and secure zones in Zone Register

2014-05-07 Thread Petr Spacek
On 18.4.2014 17:10, Petr Spacek wrote: Hello, Add basic support for inline-signing. Inline-signing is enabled for zones with idnsSecInlineSigning attribute = TRUE. Limitations: - Signing configuration is hardcoded in create_zone() as magic constants - idnsSecInlineSigning attribute cannot be

Re: [Freeipa-devel] [PATCH 0246-0248] Follow query/transfer/update policies for secure zones

2014-05-07 Thread Petr Spacek
On 23.4.2014 18:14, Petr Spacek wrote: This patch set configures secure zones according to policies in LDAP. Patch 246 v2 fixes incorrect ATTR_NONNULLS usage which causes segfaults when compiled with -O0. Patch 246 v2 obsoletes patch 253. -- Petr^2 Spacek From

Re: [Freeipa-devel] [PATCH] 584 migration: fix import of wsgiref.util

2014-05-07 Thread Tomas Babej
On 04/01/2014 09:25 AM, Jan Pazdziora wrote: On Tue, Apr 01, 2014 at 08:47:25AM +0200, Petr Vobornik wrote: https://fedorahosted.org/freeipa/ticket/4293 -- Petr Vobornik From dc4eaf9d622b4eac9fb3d942b23083bfb903be9a Mon Sep 17 00:00:00 2001 From: Petr Vobornik pvobo...@redhat.com Date:

[Freeipa-devel] [PATCH] 630 rpcserver: login_password datetime fix in expiration check

2014-05-07 Thread Petr Vobornik
krbpasswordexpiration conversion to number of second since epoch failed because now we get datetime object instead of string. https://fedorahosted.org/freeipa/ticket/4339 -- Petr Vobornik From e0c7e6525e3bb30050aae9440e698d84b5b7d7b1 Mon Sep 17 00:00:00 2001 From: Petr Vobornik

Re: [Freeipa-devel] [PATCH 0137] ipalib: Add DateTime parameter

2014-05-07 Thread Dmitri Pal
On 05/07/2014 04:06 AM, Jan Cholasta wrote: On 6.5.2014 19:55, Nathaniel McCallum wrote: I know it is a bit late on this, but for the OTP token import script, I have to have support for the full ISO 8601. My plan right now is to use python-dateutil for this. Using dateutil would simplify some

Re: [Freeipa-devel] [PATCH 0049] Add support for protected tokens

2014-05-07 Thread Dmitri Pal
On 05/07/2014 09:05 AM, Nathaniel McCallum wrote: On Wed, 2014-05-07 at 11:42 +0200, Jan Cholasta wrote: Hi, On 6.5.2014 17:08, Nathaniel McCallum wrote: On Tue, 2014-05-06 at 09:49 -0400, Nathaniel McCallum wrote: On Mon, 2014-05-05 at 12:42 -0400, Nathaniel McCallum wrote: This also

Re: [Freeipa-devel] [PATCH 0048] Default the token owner to the person adding the token

2014-05-07 Thread Petr Vobornik
On 6.5.2014 17:07, Nathaniel McCallum wrote: On Tue, 2014-05-06 at 16:11 +0200, Jan Cholasta wrote: On 6.5.2014 15:16, Nathaniel McCallum wrote: On Tue, 2014-05-06 at 13:46 +0200, Jan Cholasta wrote: Hi, On 5.5.2014 18:40, Nathaniel McCallum wrote: Creating tokens for yourself is the most

Re: [Freeipa-devel] [PATCH] 630 rpcserver: login_password datetime fix in expiration check

2014-05-07 Thread Tomas Babej
On 05/07/2014 03:47 PM, Petr Vobornik wrote: krbpasswordexpiration conversion to number of second since epoch failed because now we get datetime object instead of string. https://fedorahosted.org/freeipa/ticket/4339 ___ Freeipa-devel mailing

Re: [Freeipa-devel] [PATCH 0048] Default the token owner to the person adding the token

2014-05-07 Thread Nathaniel McCallum
On Wed, 2014-05-07 at 15:54 +0200, Petr Vobornik wrote: On 6.5.2014 17:07, Nathaniel McCallum wrote: On Tue, 2014-05-06 at 16:11 +0200, Jan Cholasta wrote: On 6.5.2014 15:16, Nathaniel McCallum wrote: On Tue, 2014-05-06 at 13:46 +0200, Jan Cholasta wrote: Hi, On 5.5.2014 18:40,

Re: [Freeipa-devel] [PATCH] 630 rpcserver: login_password datetime fix in expiration check

2014-05-07 Thread Petr Vobornik
On 7.5.2014 16:01, Tomas Babej wrote: On 05/07/2014 03:47 PM, Petr Vobornik wrote: krbpasswordexpiration conversion to number of second since epoch failed because now we get datetime object instead of string. https://fedorahosted.org/freeipa/ticket/4339 NACK, I don't think this is the

Re: [Freeipa-devel] [PATCH] 584 migration: fix import of wsgiref.util

2014-05-07 Thread Petr Vobornik
On 7.5.2014 15:38, Tomas Babej wrote: On 04/01/2014 09:25 AM, Jan Pazdziora wrote: On Tue, Apr 01, 2014 at 08:47:25AM +0200, Petr Vobornik wrote: https://fedorahosted.org/freeipa/ticket/4293 -- Petr Vobornik From dc4eaf9d622b4eac9fb3d942b23083bfb903be9a Mon Sep 17 00:00:00 2001 From: Petr

Re: [Freeipa-devel] [PATCH] 630 rpcserver: login_password datetime fix in expiration check

2014-05-07 Thread Petr Vobornik
On 7.5.2014 16:30, Tomas Babej wrote: On 05/07/2014 04:26 PM, Petr Vobornik wrote: On 7.5.2014 16:01, Tomas Babej wrote: On 05/07/2014 03:47 PM, Petr Vobornik wrote: krbpasswordexpiration conversion to number of second since epoch failed because now we get datetime object instead of string.

Re: [Freeipa-devel] [PATCH] 18 webui otptoken test data added

2014-05-07 Thread Petr Vobornik
On 7.5.2014 15:16, Misnyovszki Adam wrote: On Tue, 06 May 2014 10:29:32 +0200 Petr Vobornik pvobo...@redhat.com wrote: On 5.5.2014 16:39, Misnyovszki Adam wrote: On Wed, 30 Apr 2014 13:37:10 +0200 Petr Vobornik pvobo...@redhat.com wrote: On 29.4.2014 16:30, Misnyovszki Adam wrote: On Fri,

Re: [Freeipa-devel] [PATCH 0049] Add support for protected tokens

2014-05-07 Thread Simo Sorce
On Wed, 2014-05-07 at 09:54 -0400, Dmitri Pal wrote: On 05/07/2014 09:05 AM, Nathaniel McCallum wrote: On Wed, 2014-05-07 at 11:42 +0200, Jan Cholasta wrote: Hi, On 6.5.2014 17:08, Nathaniel McCallum wrote: On Tue, 2014-05-06 at 09:49 -0400, Nathaniel McCallum wrote: On Mon,

Re: [Freeipa-devel] [PATCH] 630 rpcserver: login_password datetime fix in expiration check

2014-05-07 Thread Tomas Babej
On 05/07/2014 04:26 PM, Petr Vobornik wrote: On 7.5.2014 16:01, Tomas Babej wrote: On 05/07/2014 03:47 PM, Petr Vobornik wrote: krbpasswordexpiration conversion to number of second since epoch failed because now we get datetime object instead of string.

Re: [Freeipa-devel] [PATCH 0167] ipa-client-install: Configure sudo to use SSSD as data source

2014-05-07 Thread Tomas Babej
On 04/30/2014 02:44 PM, Jakub Hrozek wrote: On Wed, Apr 30, 2014 at 11:05:52AM +0200, Tomas Babej wrote: On 03/24/2014 03:27 PM, Jan Pazdziora wrote: On Mon, Mar 24, 2014 at 02:57:30PM +0100, Martin Kosek wrote: On 03/24/2014 02:47 PM, Jan Pazdziora wrote: On Mon, Mar 03, 2014 at 08:24:41PM

Re: [Freeipa-devel] [PATCH 0137] ipalib: Add DateTime parameter

2014-05-07 Thread Nathaniel McCallum
On Wed, 2014-05-07 at 09:50 -0400, Dmitri Pal wrote: On 05/07/2014 04:06 AM, Jan Cholasta wrote: On 6.5.2014 19:55, Nathaniel McCallum wrote: I know it is a bit late on this, but for the OTP token import script, I have to have support for the full ISO 8601. My plan right now is to use

Re: [Freeipa-devel] [PATCH 0167] ipa-client-install: Configure sudo to use SSSD as data source

2014-05-07 Thread Jakub Hrozek
On Wed, May 07, 2014 at 05:29:37PM +0200, Tomas Babej wrote: On 04/30/2014 02:44 PM, Jakub Hrozek wrote: On Wed, Apr 30, 2014 at 11:05:52AM +0200, Tomas Babej wrote: On 03/24/2014 03:27 PM, Jan Pazdziora wrote: On Mon, Mar 24, 2014 at 02:57:30PM +0100, Martin Kosek wrote: On 03/24/2014

Re: [Freeipa-devel] [PATCH 0137] ipalib: Add DateTime parameter

2014-05-07 Thread Dmitri Pal
On 05/07/2014 11:46 AM, Nathaniel McCallum wrote: On Wed, 2014-05-07 at 09:50 -0400, Dmitri Pal wrote: On 05/07/2014 04:06 AM, Jan Cholasta wrote: On 6.5.2014 19:55, Nathaniel McCallum wrote: I know it is a bit late on this, but for the OTP token import script, I have to have support for the

Re: [Freeipa-devel] [PATCH] 1107 smartproxy cleanup

2014-05-07 Thread Rob Crittenden
Rob Crittenden wrote: Remove some unused files, fix an import which means we don't need to import from ipaserver, fix up Requires so it should work better running on a different box than the IPA server. Found and fixed a couple more minor issues. rob From