Re: [Freeipa-devel] [PATCH 559] Fix kadmin for new users

On 01/06/2016 08:42 AM, Martin Kosek wrote: On 01/06/2016 08:37 AM, Martin Babinsky wrote: On 11/25/2015 03:41 PM, Martin Kosek wrote: On 11/25/2015 03:32 PM, Simo Sorce wrote: On Wed, 2015-11-25 at 14:13 +0100, Tomas Babej wrote: On 11/25/2015 02:13 PM, Tomas Babej wrote: On 11/25/2015

[Freeipa-devel] [PATCH 155] ipa-kdb: get_authz_data_types() make sure entry can be NULL

Hi, this patch fixes and issue found by Simo when he called get_authz_data_types() with the second argument being NULL. This function determines which type of authorization data should be added to the Kerberos ticket. There are global default and it is possible to configure this per service as

Re: [Freeipa-devel] [PATCH 536] ipapython: remove default_encoding_utf8

On 2016-01-05 11:30, Tomas Babej wrote: > > > On 01/05/2016 08:54 AM, Jan Cholasta wrote: >> Hi, >> >> the attached patch replaces the default_encoding_utf8 binary module with >> 2 lines of equivalent Python code. >> >> Honza >> >> >> > > This looks fine to me, however, I wonder, why this

[Freeipa-devel] replica promotion testplan review

Hi! Could you guys take a look at http://www.freeipa.org/page/V4/Replica_Promotion/Test_plan once again to see if it lacks something important -- Oleg Fayans Quality Engineer FreeIPA team RedHat. -- Manage your subscription for the Freeipa-devel mailing list:

Re: [Freeipa-devel] [PATCH 027] Require Dogtag 10.2.6-13 to fix KRA uninstall

On 01/05/2016 01:49 PM, Lukas Slebodnik wrote: On (05/01/16 12:24), Christian Heimes wrote: The combination of a bug in Dogtag's sslget command and a new feature in mod_nss causes an incomplete uninstallation of KRA. The bug has been fixed in Dogtag 10.2.6-13. and it ins in fedora 23 stable

Re: [Freeipa-devel] [PATCH 0018] Fixed install_ca and install_kra failures at domain level 0

Any chance this patch can be merged this week? On 12/14/2015 02:08 PM, Oleg Fayans wrote: > Hi Martin, > > On 12/11/2015 05:58 PM, Martin Basti wrote: >> >> >> On 11.12.2015 17:28, Oleg Fayans wrote: >>> +myre = re.compile(".*Backed up to (?P.*?)\n.*") >> >> IMO this regexp is not good. >>

Re: [Freeipa-devel] [PATCH 155] ipa-kdb: get_authz_data_types() make sure entry can be NULL

On 6.1.2016 12:15, Sumit Bose wrote: > Hi, > > this patch fixes and issue found by Simo when he called > get_authz_data_types() with the second argument being NULL. > This function determines which type of authorization data should be > added to the Kerberos ticket. There are global default and

Re: [Freeipa-devel] [PATCH 0018] Fixed install_ca and install_kra failures at domain level 0

I cannot apply your patch on master branch, missing blobs, can you rebase please? On 06.01.2016 11:47, Oleg Fayans wrote: Any chance this patch can be merged this week? On 12/14/2015 02:08 PM, Oleg Fayans wrote: Hi Martin, On 12/11/2015 05:58 PM, Martin Basti wrote: On 11.12.2015 17:28,

[Freeipa-devel] [PATCHES] 0753-0759

Hello, Patches 0753-0757 fix remaining warnings from `pylint --py3k`, except "no-absolute-import" (which seems redundant to me) and the ones in contrib/RHEL4. As for contrib/RHEL4, I found a mail [0] from 2013 saying it hasn't been used for a long time and probably doesn't work. Since then it's

Re: [Freeipa-devel] certmonger everywhere

On 4.1.2016 19:57, Rob Crittenden wrote: Jan Cholasta wrote: On 16.12.2015 01:40, Fraser Tweedale wrote: I'm not proposing to change cert-request to a client side command - I'm proposing to change the way cert-request is handled *on the server*. This way we can keep all the configuration on

Re: [Freeipa-devel] [PATCHES] 0753-0759

Petr Viktorin wrote: > Hello, > > Patches 0753-0757 fix remaining warnings from `pylint --py3k`, except > "no-absolute-import" (which seems redundant to me) and the ones in > contrib/RHEL4. > > As for contrib/RHEL4, I found a mail [0] from 2013 saying it hasn't been > used for a long time and

Re: [Freeipa-devel] certmonger everywhere

Jan Cholasta wrote: > On 4.1.2016 19:57, Rob Crittenden wrote: >> Jan Cholasta wrote: >>> On 16.12.2015 01:40, Fraser Tweedale wrote: >>> >>> I'm not proposing to change cert-request to a client side command - I'm >>> proposing to change the way cert-request is handled *on the server*. >>> This

Re: [Freeipa-devel] [PATCH 0072-0081] DNSSEC: fixes

On 22.12.2015 14:32, Petr Spacek wrote: On 21.12.2015 18:56, Martin Basti wrote: On 21.12.2015 15:45, Martin Basti wrote: On 21.12.2015 15:33, Petr Spacek wrote: Hello, this patch set fixes key rotation in DNSSEC. You can use attached template files for OpenDNSSEC config to shorten time

[Freeipa-devel] [PATCH 0398] Allow to use mixed case for sysrestore

https://fedorahosted.org/freeipa/ticket/5574 Patch attached. From cffa75803ba38587a4002107df76558a77120262 Mon Sep 17 00:00:00 2001 From: Martin Basti Date: Tue, 5 Jan 2016 17:58:49 +0100 Subject: [PATCH] Allow to used mixed case for sysrestore This commit allows to use

[Freeipa-devel] [PATCHES 0396-0397] DNSSEC CI: fix tests

Patches attached. From 87f8712e3ef6e4a601889625c1649e9fcbb7db75 Mon Sep 17 00:00:00 2001 From: Martin Basti Date: Tue, 5 Jan 2016 19:41:14 +0100 Subject: [PATCH] DNSSEC test: fix adding zones with --skip-overlap-check In DNSSEC tests the root zone has to be created, this

Re: [Freeipa-devel] [PATCH] 0048 Decode HTTP reason phrase as iso-8859-1

Hi, On 6.1.2016 05:26, Fraser Tweedale wrote: Happy new year, all. The attached patch fixes a unicode decode error triggered in some locales, which causes failure of installation (and probably other oprations, if locale is changed under an existing server).

Re: [Freeipa-devel] [PATCH 027] Require Dogtag 10.2.6-13 to fix KRA uninstall

On 6.1.2016 20:37, Martin Basti wrote: On 06.01.2016 11:21, Martin Babinsky wrote: On 01/05/2016 01:49 PM, Lukas Slebodnik wrote: On (05/01/16 12:24), Christian Heimes wrote: The combination of a bug in Dogtag's sslget command and a new feature in mod_nss causes an incomplete uninstallation

[Freeipa-devel] [PATCH 0399] Upgrade: fix upgrading of NIS Server configuration

https://fedorahosted.org/freeipa/ticket/5507 Patch attached. Is proposed workaround in ticket enough or should I also prepare a update that will fix missing maps? From 39e1124314a66578022f7d7810fd6252af96fd80 Mon Sep 17 00:00:00 2001 From: Martin Basti Date: Wed, 6 Jan 2016

[Freeipa-devel] [PATCH 0400] update_uniqueness plugin: fix possible referenced before assignment error

Variable 'update' might be undefined if a plugin configuration cannot be migrated to new format. Patch attached. From 3226a3a1753c7d53cc4d03bc4e98085fe18ba316 Mon Sep 17 00:00:00 2001 From: Martin Basti Date: Wed, 6 Jan 2016 20:26:09 +0100 Subject: [PATCH] update_uniqueness

Re: [Freeipa-devel] [PATCH 027] Require Dogtag 10.2.6-13 to fix KRA uninstall

On 06.01.2016 11:21, Martin Babinsky wrote: On 01/05/2016 01:49 PM, Lukas Slebodnik wrote: On (05/01/16 12:24), Christian Heimes wrote: The combination of a bug in Dogtag's sslget command and a new feature in mod_nss causes an incomplete uninstallation of KRA. The bug has been fixed in