[Freeipa-devel] [PATCH 0087] execute user-del pre-callback also during user preservation

2015-10-16 Thread Martin Babinsky
fixes tickets: https://fedorahosted.org/freeipa/ticket/5362 https://fedorahosted.org/freeipa/ticket/5372 Upon discussion with Simo we decided that OTP tokens should be orphaned/deleted also during the user preservation. -- Martin^3 Babinsky From 635754c3773b1db5550fe19ad6f0a84e84d36459 Mon Se

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

2015-10-16 Thread Endi Sukma Dewata
On 10/15/2015 9:54 AM, Simo Sorce wrote: 3) ipa-ca-install fails with: Traceback (most recent call last): File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 445, in start_creation run_step(full_msg, method) File "/usr/lib/python2.7/site-packages/ipaserver/insta

[Freeipa-devel] [PATCH 0328] DNSSEC CI: Wait until DS records are replicated

2015-10-16 Thread Martin Basti
Drill command sometimes fail on replica due to long replication time, this patch adding check that waits until record is replicated. Patch attached. From bce95f9d16fd3a920ca50952be75022d89682699 Mon Sep 17 00:00:00 2001 From: Martin Basti Date: Fri, 16 Oct 2015 14:09:37 +0200 Subject: [PATCH] D

Re: [Freeipa-devel] [PATCH 0012-0019] CA ACL tracker and functional test

2015-10-16 Thread Milan Kubík
On 09/30/2015 02:47 PM, Martin Basti wrote: On 09/24/2015 02:49 PM, Milan Kubík wrote: Hi all, an update for CA ACL tests! I, with help from M. Babinsky, managed to find a way how to change the identity during acceptance cest run, which allows to test CA ACLs (and perhaps ot

[Freeipa-devel] [PATCH 0327] KRA: fix check if CA is installed on replica

2015-10-16 Thread Martin Basti
https://fedorahosted.org/freeipa/ticket/5345 Patch attached. From 5538700dba81cbc4bc64485f7790dfc72148b4f8 Mon Sep 17 00:00:00 2001 From: Martin Basti Date: Thu, 15 Oct 2015 16:43:59 +0200 Subject: [PATCH] KRA: fix check that CA is installed https://fedorahosted.org/freeipa/ticket/5345 --- ipa

Re: [Freeipa-devel] [PATCHES 0318 - 0320, 0323] installer: allow to modify dse.ldif during installation

2015-10-16 Thread Jan Cholasta
On 16.10.2015 10:31, Martin Basti wrote: On 16.10.2015 10:05, Martin Babinsky wrote: On 10/16/2015 08:47 AM, Jan Cholasta wrote: On 16.10.2015 08:42, Martin Kosek wrote: On 10/16/2015 06:00 AM, Jan Cholasta wrote: On 15.10.2015 19:47, Martin Basti wrote: On 15.10.2015 18:47, Martin Basti

Re: [Freeipa-devel] [PATCH 0083] perform an unlimited search for reverse zones when adding DNS records

2015-10-16 Thread Martin Babinsky
On 10/14/2015 04:05 PM, Petr Spacek wrote: On 14.10.2015 14:13, Martin Babinsky wrote: On 10/13/2015 04:00 PM, Petr Spacek wrote: On 13.10.2015 13:37, Martin Babinsky wrote: On 10/13/2015 09:36 AM, Petr Spacek wrote: On 12.10.2015 16:35, Martin Babinsky wrote: https://fedorahosted.org/freeip

Re: [Freeipa-devel] [PATCHES 0318 - 0320, 0323] installer: allow to modify dse.ldif during installation

2015-10-16 Thread Martin Basti
On 16.10.2015 10:05, Martin Babinsky wrote: On 10/16/2015 08:47 AM, Jan Cholasta wrote: On 16.10.2015 08:42, Martin Kosek wrote: On 10/16/2015 06:00 AM, Jan Cholasta wrote: On 15.10.2015 19:47, Martin Basti wrote: On 15.10.2015 18:47, Martin Basti wrote: On 15.10.2015 18:36, Martin Bab

Re: [Freeipa-devel] [PATCH] 0001 cert-show: Remove check if hostname != CN

2015-10-16 Thread Petr Spacek
On 15.10.2015 17:28, Jan Orel wrote: > diff --git a/ipalib/plugins/cert.py b/ipalib/plugins/cert.py > index e459320..55f9484 100644 > --- a/ipalib/plugins/cert.py > +++ b/ipalib/plugins/cert.py > @@ -625,9 +625,12 @@ class cert_show(VirtualCommand): > result['md5_fingerprint'] = > unicode

Re: [Freeipa-devel] [PATCHES 0318 - 0320, 0323] installer: allow to modify dse.ldif during installation

2015-10-16 Thread Martin Babinsky
On 10/16/2015 08:47 AM, Jan Cholasta wrote: On 16.10.2015 08:42, Martin Kosek wrote: On 10/16/2015 06:00 AM, Jan Cholasta wrote: On 15.10.2015 19:47, Martin Basti wrote: On 15.10.2015 18:47, Martin Basti wrote: On 15.10.2015 18:36, Martin Babinsky wrote: On 10/15/2015 04:50 PM, Martin Ba