Re: [Freeipa-devel] [PATCH] - Add DRM to IPA

2014-08-08 Thread Rob Crittenden
Ade Lee wrote: > Attached is a new patch. I believe I have addressed all the issues > raided by pviktori, edewata and rcrit. > > Please let me know if I missed something! > > Incidentally, to get all this to work, you should use the latest Dogtag > 10.2 build, which also contains a fix for pkide

[Freeipa-devel] [PATCH] 0003 User life cycle: new stageuser plugin with add verb

2014-08-08 Thread thierry bordaz
Hi, The attached patch is related to 'User Life Cycle' (https://fedorahosted.org/freeipa/ticket/3813) It creates a stageuser plugin with a first function stageuser-add. Stage user entries are provisioned under 'cn=staged users,cn=accounts,cn=provisioning,SUFFIX'. Thanks thierry From 778f64

[Freeipa-devel] [PATCH] 0002 User Life Cycle: Exclude subtree for ipaUniqueID generation

2014-08-08 Thread thierry bordaz
Hi, The attached patch is the second patch related to 'User Life Cycle' (https://fedorahosted.org/freeipa/ticket/3813) It allows to prevent IPA UUID DS plugin to generate ipaUniqueID for 'Stage' users (http://www.freeipa.org/page/V4/User_Life-Cycle_Management#IPA_UUID_plugin) Thanks thierr

Re: [Freeipa-devel] [PATCH] 315 Convert external CA chain to PKCS#7 before passing it to pkispawn

2014-08-08 Thread Jan Cholasta
Dne 8.8.2014 v 11:20 Martin Kosek napsal(a): On 08/08/2014 10:55 AM, Jan Cholasta wrote: Hi, the attached patch fixes . Honza Thanks! I did not test, just have couple questions/suggestions: 1) Are we testing that the certificate is in proper for

Re: [Freeipa-devel] [PATCH] 315 Convert external CA chain to PKCS#7 before passing it to pkispawn

2014-08-08 Thread Martin Kosek
On 08/08/2014 10:55 AM, Jan Cholasta wrote: > Hi, > > the attached patch fixes . > > Honza Thanks! I did not test, just have couple questions/suggestions: 1) Are we testing that the certificate is in proper format, e.g. is not PKCS7 already? We need

[Freeipa-devel] [PATCH] 315 Convert external CA chain to PKCS#7 before passing it to pkispawn

2014-08-08 Thread Jan Cholasta
Hi, the attached patch fixes . Honza -- Jan Cholasta >From d479d6f3a929c4dea6d87e2d27e5de943d4d26ee Mon Sep 17 00:00:00 2001 From: Jan Cholasta Date: Fri, 8 Aug 2014 10:15:26 +0200 Subject: [PATCH] Convert external CA chain to PKCS#7 before passing

[Freeipa-devel] [PATCH] 0001 User Life Cycle: create containers and scoping DS plugins

2014-08-08 Thread thierry bordaz
Hi, The attached patch is a first patch related to 'User Life Cycle' (https://fedorahosted.org/freeipa/ticket/3813) It creates 'Stage' and 'Delete' containers and configure DS plugin to scope only 'Active' container or exclude 'Stage'/'Delete' Thanks thierry From 61673280bcd96be638e1ceb86aa