Re: [Freeipa-devel] [PATCH] 0005 User life cycle: del/mod/find/show stageuser commands

2015-05-04 Thread Jan Cholasta
Hi, Dne 28.4.2015 v 16:40 thierry bordaz napsal(a): On 04/28/2015 10:40 AM, David Kupka wrote: On 04/28/2015 10:28 AM, thierry bordaz wrote: On 04/28/2015 10:23 AM, David Kupka wrote: On 04/16/2015 01:00 PM, thierry bordaz wrote: Hello, Here is the next patch for User life cycle that in

Re: [Freeipa-devel] User Certificates in 4.2 - design and questions

2015-05-04 Thread Martin Kosek
On 05/04/2015 09:23 PM, Simo Sorce wrote: > On Mon, 2015-05-04 at 16:41 +0200, Martin Kosek wrote: >> On 05/04/2015 03:01 PM, Fraser Tweedale wrote: >>> On Mon, May 04, 2015 at 10:50:15AM +0200, Martin Kosek wrote: Hello, Please let me promote the design for one of the major FreeIPA

Re: [Freeipa-devel] [PATCHES 0001-0005] Profile management commands

2015-05-04 Thread Fraser Tweedale
On Mon, May 04, 2015 at 06:35:45PM +0200, Martin Basti wrote: > On 04/05/15 15:36, Fraser Tweedale wrote: > >Hello, > > > >Please review the first cut of the 'certprofile' command and other > >changes associated with the Certificate Profiles feature[1]. > > > >Custom profiles can't be used yet beca

Re: [Freeipa-devel] User Certificates in 4.2 - design and questions

2015-05-04 Thread Simo Sorce
On Mon, 2015-05-04 at 16:41 +0200, Martin Kosek wrote: > On 05/04/2015 03:01 PM, Fraser Tweedale wrote: > > On Mon, May 04, 2015 at 10:50:15AM +0200, Martin Kosek wrote: > >> Hello, > >> > >> Please let me promote the design for one of the major FreeIPA 4.2 > >> features, the > >> (user) certifica

Re: [Freeipa-devel] [PATCHES 0001-0005] Profile management commands

2015-05-04 Thread Martin Basti
On 04/05/15 15:36, Fraser Tweedale wrote: Hello, Please review the first cut of the 'certprofile' command and other changes associated with the Certificate Profiles feature[1]. Custom profiles can't be used yet because 'cert-request' has not been updated, but you can manage the profiles (find,

Re: [Freeipa-devel] User Certificates in 4.2 - design and questions

2015-05-04 Thread Martin Kosek
On 05/04/2015 03:01 PM, Fraser Tweedale wrote: > On Mon, May 04, 2015 at 10:50:15AM +0200, Martin Kosek wrote: >> Hello, >> >> Please let me promote the design for one of the major FreeIPA 4.2 features, >> the >> (user) certificates and Smart Card integration: >> >> http://www.freeipa.org/page/V4/

[Freeipa-devel] [PATCHES 0001-0005] Profile management commands

2015-05-04 Thread Fraser Tweedale
Hello, Please review the first cut of the 'certprofile' command and other changes associated with the Certificate Profiles feature[1]. Custom profiles can't be used yet because 'cert-request' has not been updated, but you can manage the profiles (find, show, import, modify, delete). There's a bi

Re: [Freeipa-devel] [PATCHES 0235-0237] Use global DS write lock during upgrade

2015-05-04 Thread Martin Babinsky
On 05/04/2015 11:57 AM, Martin Basti wrote: On 28/04/15 14:45, Martin Basti wrote: https://fedorahosted.org/freeipa/ticket/4925 I had to use ldif parser to edit DSE file instead (patch 236) and due to cyclic import caused by upgrade instace and dsintance I had to move realm_to_serverid from dsi

Re: [Freeipa-devel] User Certificates in 4.2 - design and questions

2015-05-04 Thread Fraser Tweedale
On Mon, May 04, 2015 at 10:50:15AM +0200, Martin Kosek wrote: > Hello, > > Please let me promote the design for one of the major FreeIPA 4.2 features, > the > (user) certificates and Smart Card integration: > > http://www.freeipa.org/page/V4/User_Certificates > > The design went through couple

Re: [Freeipa-devel] [PATCHES 0227-0229] Server upgrade: introduce ipa-server-upgrade command

2015-05-04 Thread Jan Cholasta
Dne 29.4.2015 v 15:27 Martin Basti napsal(a): On 29/04/15 13:22, Martin Kosek wrote: On 04/29/2015 12:59 PM, Martin Kosek wrote: On 04/29/2015 12:50 PM, Martin Basti wrote: On 29/04/15 12:39, Martin Kosek wrote: On 04/29/2015 12:15 PM, Martin Basti wrote: On 29/04/15 08:52, Jan Cholasta wrot

Re: [Freeipa-devel] [PATCHES 0235-0237] Use global DS write lock during upgrade

2015-05-04 Thread Martin Basti
On 28/04/15 14:45, Martin Basti wrote: https://fedorahosted.org/freeipa/ticket/4925 I had to use ldif parser to edit DSE file instead (patch 236) and due to cyclic import caused by upgrade instace and dsintance I had to move realm_to_serverid from dsinstance to installutils. Patches attached

[Freeipa-devel] User Certificates in 4.2 - design and questions

2015-05-04 Thread Martin Kosek
Hello, Please let me promote the design for one of the major FreeIPA 4.2 features, the (user) certificates and Smart Card integration: http://www.freeipa.org/page/V4/User_Certificates The design went through couple interim discussions between developers outside of this list, so there should not

Re: [Freeipa-devel] [PATCH 0031] provide a dedicated ccache file to httpd

2015-05-04 Thread Martin Babinsky
On 04/30/2015 08:23 AM, Alexander Bokovoy wrote: On Thu, 30 Apr 2015, Jan Cholasta wrote: Hi, Dne 29.4.2015 v 19:42 Martin Babinsky napsal(a): The attached patch is a merge of PATCHES 0031-0032 incorporating Simo's and Martin's suggestions (see e.g. https://www.redhat.com/archives/freeipa-deve