Re: [Freeipa-devel] [PATCH] Workaround for trac N 5348

2015-10-08 Thread Oleg Fayans
Hi Martin On 10/07/2015 04:30 PM, Martin Basti wrote: On 10/07/2015 04:13 PM, Oleg Fayans wrote: subj Workaround looks good, but I prefer not to push it in upstream tests, because it is not test failure. I agree, we should rather fix the original issue. But as a temporary solution, to

Re: [Freeipa-devel] [PATCH] Workaround for trac N 5348

2015-10-08 Thread Martin Basti
On 10/08/2015 09:13 AM, Oleg Fayans wrote: Hi Martin On 10/07/2015 04:30 PM, Martin Basti wrote: On 10/07/2015 04:13 PM, Oleg Fayans wrote: subj Workaround looks good, but I prefer not to push it in upstream tests, because it is not test failure. I agree, we should rather fix the

Re: [Freeipa-devel] [PATCH] Workaround for trac N 5348

2015-10-08 Thread Jan Pazdziora
On Thu, Oct 08, 2015 at 11:12:37AM +0200, Oleg Fayans wrote: > > > >When the ticket is addressed and these workarounds are no longer > >needed -- what is our process for finding these workarounds and > >reverting them, so that the tests test the real, expected behaviour? > > As per discussion

Re: [Freeipa-devel] [PATCH] Workaround for trac N 5348

2015-10-08 Thread Oleg Fayans
Done On 10/08/2015 10:37 AM, Martin Basti wrote: On 10/08/2015 09:13 AM, Oleg Fayans wrote: Hi Martin On 10/07/2015 04:30 PM, Martin Basti wrote: On 10/07/2015 04:13 PM, Oleg Fayans wrote: subj Workaround looks good, but I prefer not to push it in upstream tests, because it is not

Re: [Freeipa-devel] [PATCH] Workaround for trac N 5348

2015-10-08 Thread Oleg Fayans
Hi Jan, On 10/08/2015 10:44 AM, Jan Pazdziora wrote: On Wed, Oct 07, 2015 at 04:13:25PM +0200, Oleg Fayans wrote: subj -- Oleg Fayans Quality Engineer FreeIPA team RedHat. From 7ab1afe5e9a8f6b28be2d5b92423eccec61248a0 Mon Sep 17 00:00:00 2001 From: Oleg Fayans Date:

Re: [Freeipa-devel] [PATCHES 0069-0077] support for proper Kerberos principal canonicalization

2015-10-08 Thread David Kupka
On 07/10/15 17:32, thierry bordaz wrote: On 10/07/2015 05:29 PM, Simo Sorce wrote: On 07/10/15 11:06, thierry bordaz wrote: On 10/07/2015 03:10 PM, David Kupka wrote: On 06/10/15 17:52, Jakub Hrozek wrote: On Tue, Oct 06, 2015 at 08:32:29AM -0400, Simo Sorce wrote: On 06/10/15 08:04, David

Re: [Freeipa-devel] [PATCH] Workaround for trac N 5348

2015-10-08 Thread Jan Pazdziora
On Wed, Oct 07, 2015 at 04:13:25PM +0200, Oleg Fayans wrote: > subj > > -- > Oleg Fayans > Quality Engineer > FreeIPA team > RedHat. > From 7ab1afe5e9a8f6b28be2d5b92423eccec61248a0 Mon Sep 17 00:00:00 2001 > From: Oleg Fayans > Date: Wed, 7 Oct 2015 16:08:30 +0200 >

Re: [Freeipa-devel] [PATCHES 0069-0077] support for proper Kerberos principal canonicalization

2015-10-08 Thread thierry bordaz
On 10/08/2015 11:03 AM, David Kupka wrote: On 07/10/15 17:32, thierry bordaz wrote: On 10/07/2015 05:29 PM, Simo Sorce wrote: On 07/10/15 11:06, thierry bordaz wrote: On 10/07/2015 03:10 PM, David Kupka wrote: On 06/10/15 17:52, Jakub Hrozek wrote: On Tue, Oct 06, 2015 at 08:32:29AM -0400,

Re: [Freeipa-devel] [PATCH] Workaround for trac N 5348

2015-10-08 Thread Oleg Fayans
Hi, On 10/08/2015 11:18 AM, Jan Pazdziora wrote: On Thu, Oct 08, 2015 at 11:12:37AM +0200, Oleg Fayans wrote: When the ticket is addressed and these workarounds are no longer needed -- what is our process for finding these workarounds and reverting them, so that the tests test the real,

Re: [Freeipa-devel] [PATCH] Workaround for trac N 5348

2015-10-08 Thread Martin Basti
On 10/08/2015 11:18 AM, Jan Pazdziora wrote: On Thu, Oct 08, 2015 at 11:12:37AM +0200, Oleg Fayans wrote: When the ticket is addressed and these workarounds are no longer needed -- what is our process for finding these workarounds and reverting them, so that the tests test the real, expected

Re: [Freeipa-devel] [PATCH] Workaround for trac N 5348

2015-10-08 Thread Martin Basti
On 10/08/2015 02:41 PM, Martin Kosek wrote: On 10/08/2015 02:06 PM, Martin Basti wrote: On 10/08/2015 11:18 AM, Jan Pazdziora wrote: On Thu, Oct 08, 2015 at 11:12:37AM +0200, Oleg Fayans wrote: When the ticket is addressed and these workarounds are no longer needed -- what is our process

Re: [Freeipa-devel] [PATCH] Workaround for trac N 5348

2015-10-08 Thread Martin Kosek
On 10/08/2015 02:08 PM, Oleg Fayans wrote: > Hi, > > On 10/08/2015 11:18 AM, Jan Pazdziora wrote: >> On Thu, Oct 08, 2015 at 11:12:37AM +0200, Oleg Fayans wrote: When the ticket is addressed and these workarounds are no longer needed -- what is our process for finding these

Re: [Freeipa-devel] [PATCH] Workaround for trac N 5348

2015-10-08 Thread Martin Basti
On 10/08/2015 02:39 PM, Martin Kosek wrote: On 10/08/2015 02:08 PM, Oleg Fayans wrote: Hi, On 10/08/2015 11:18 AM, Jan Pazdziora wrote: On Thu, Oct 08, 2015 at 11:12:37AM +0200, Oleg Fayans wrote: When the ticket is addressed and these workarounds are no longer needed -- what is our

[Freeipa-devel] terminology: "main/primary/? DNS domain" for FreeIPA

2015-10-08 Thread Petr Spacek
Hello list, I'm in process of reviewing and fixing some of our docs and it seems that we do not have established term for The Domain user specified during ipa-server-install. Term "DNS domain" is not specific enough because FreeIPA can manage multiple DNS domains but only one of them contains

Re: [Freeipa-devel] [PATCH] Workaround for trac N 5348

2015-10-08 Thread Martin Kosek
On 10/08/2015 02:06 PM, Martin Basti wrote: > > > On 10/08/2015 11:18 AM, Jan Pazdziora wrote: >> On Thu, Oct 08, 2015 at 11:12:37AM +0200, Oleg Fayans wrote: When the ticket is addressed and these workarounds are no longer needed -- what is our process for finding these workarounds

Re: [Freeipa-devel] terminology: "main/primary/? DNS domain" for FreeIPA

2015-10-08 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 10/08/2015 09:34 AM, Petr Spacek wrote: > Hello list, > > I'm in process of reviewing and fixing some of our docs and it > seems that we do not have established term for The Domain user > specified during ipa-server-install. > > Term "DNS domain"

Re: [Freeipa-devel] [PATCHES] More Python 3 porting

2015-10-08 Thread Petr Viktorin
On 10/07/2015 10:27 AM, Jan Cholasta wrote: > On 6.10.2015 12:04, Petr Viktorin wrote: >> On 10/05/2015 07:56 AM, Jan Cholasta wrote: >>> On 2.10.2015 13:09, Petr Viktorin wrote: On 10/01/2015 03:15 PM, Jan Cholasta wrote: > Hi, > > On 1.10.2015 13:01, Martin Basti wrote: >>

[Freeipa-devel] Announcing FreeIPA 4.2.2

2015-10-08 Thread Petr Vobornik
The FreeIPA team would like to announce FreeIPA v4.2.2 security release! It can be downloaded from http://www.freeipa.org/page/Downloads. The builds are available for Fedora 23 and rawhide. Builds for Fedora 22 are available in

[Freeipa-devel] [PATCHES 0318 - 0320] installer: allow to modify dse.ldif during installation

2015-10-08 Thread Martin Basti
The attached patches fix following tickets: https://fedorahosted.org/freeipa/ticket/4949 https://fedorahosted.org/freeipa/ticket/4048 https://fedorahosted.org/freeipa/ticket/1930 With these patches, an administrator can specify LDIF file that contains modifications to be applied to

[Freeipa-devel] [PATCHES] More Python3 porting

2015-10-08 Thread Petr Viktorin
Hello, Here is another batch of Python 3 porting patches. -- Petr Viktorin From 53770dbbee76728517d7ae0b5ebce3446bb6692b Mon Sep 17 00:00:00 2001 From: Petr Viktorin Date: Fri, 18 Sep 2015 11:30:15 +0200 Subject: [PATCH] Do not compare types that are not comparable in

[Freeipa-devel] [PATCHES 0321 - 0322] CI: vault CI test

2015-10-08 Thread Martin Basti
Patches attached. Tests for https://fedorahosted.org/freeipa/ticket/5302 From 9c87a6c66a72fc5f1a35c39529c0e518b4736a18 Mon Sep 17 00:00:00 2001 From: Martin Basti Date: Tue, 6 Oct 2015 20:28:18 +0200 Subject: [PATCH 1/2] CI Test: add setup_kra options into install scripts

[Freeipa-devel] [PATCH 0078-0081] ipa-client-install autodiscovery code improvements

2015-10-08 Thread Martin Babinsky
These patches fix https://fedorahosted.org/freeipa/ticket/4305 Actually only the last patch does the work itself (suppress autodiscovery when installing client on master), but when I saw the state of autodiscovery code I have taken the liberty to clean it up a bit. Patch #78 has separate

Re: [Freeipa-devel] terminology: "main/primary/? DNS domain" for FreeIPA

2015-10-08 Thread Simo Sorce
On 08/10/15 09:34, Petr Spacek wrote: Hello list, I'm in process of reviewing and fixing some of our docs and it seems that we do not have established term for The Domain user specified during ipa-server-install. Term "DNS domain" is not specific enough because FreeIPA can manage multiple DNS