[Freeipa-devel] [DRAFT] FreeIPA 4.2.4 release notes

Hello all, I prepared the release notes on FreeIPA.org wiki: http://www.freeipa.org/page/Releases/4.2.4 Updates or improvements to release notes page welcome. Particularly if you think some bug fixes/improvements deserves to be noted out as a highlight, please give a suggestion or edit the page

Re: [Freeipa-devel] [TEST][Patch-0027] Fixed test failure during in-tree session, ticket N 5736

Hi Martin On 03/16/2016 02:39 PM, Martin Basti wrote: > > > On 16.03.2016 10:59, Oleg Fayans wrote: >> With this patch applied integration tests pass and in-tree tests are >> gracefully skipped. >> >> @mkubik, It is not possible to put the decorator to util.py as per our >> discussion, because i

Re: [Freeipa-devel] [PATCH 0029] Move user/group constants for PKI and DS into ipaplatform

On 29.02.2016 16:02, David Kupka wrote: Hello Christian, sorry for letting this patch rot for so long. I've forget about it the minute Fraser replied. To compensate a little I've fixed pep8 error, rebased it and attaching two versions for master and for 4.3 branch. I haven't found any missing

Re: [Freeipa-devel] [PATCH 0440] Fix broken trust warnings

On 16.03.2016 13:45, Alexander Bokovoy wrote: On Wed, 16 Mar 2016, Martin Basti wrote: On 16.03.2016 13:32, Martin Basti wrote: On 16.03.2016 13:32, Alexander Bokovoy wrote: On Wed, 16 Mar 2016, Martin Basti wrote: On 15.03.2016 16:40, Martin Basti wrote: https://fedorahosted.org/fre

Re: [Freeipa-devel] [PATCH 0143-0144] different errors/warnings for different LDAP limit type exceeded

On 03/18/2016 10:43 AM, Milan Kubík wrote: On 03/18/2016 10:28 AM, Martin Babinsky wrote: These patches implement behavior agreed upon during discussion of https://fedorahosted.org/freeipa/ticket/5677 However I'm not sure if we want to push them into 4-3 branch (the ticket is triaged into 4.3.2

Re: [Freeipa-devel] [PATCH] 0005 webui: topology graph: canvas resizes itself according to the window size

On 03/11/2016 10:09 AM, Pavel Vomacka wrote: On 03/10/2016 06:08 PM, Petr Vobornik wrote: On 02/25/2016 03:50 PM, Pavel Vomacka wrote: On 02/17/2016 06:29 PM, Petr Vobornik wrote: On 02/15/2016 04:20 PM, Pavel Vomacka wrote: On 02/12/2016 01:52 PM, Pavel Vomacka wrote: On 02/11/2016

Re: [Freeipa-devel] server_del (re)implementation in domain level 1 topology management

On 03/17/2016 02:39 PM, Martin Babinsky wrote: Hi list, I would like to discuss the merge of `del_master_managed()` function from `ipa-replica-manage` command into the server_del API call that is a part of the managed replication topology design update[1] (see also the corresponding upstream tic

Re: [Freeipa-devel] [PATCH 0435] client: enable ChallengeResponseAuthentication in sshd_config

On 10.3.2016 19:04, Martin Basti wrote: https://fedorahosted.org/freeipa/ticket/5703 Patch attached. Works for me, ACK. Pushed to master: 04d4519ed545df6ca156cbccaab059cfc3338bf6 -- Jan Cholasta -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/l

Re: [Freeipa-devel] [PATCH] sudo: Fix a typo in the --help output of sudocmdgroup

On 11.03.2016 18:01, Jakub Hrozek wrote: Hi, attached is a trivial patch. ACK Pushed to master: c6371abeb353c9e82b4c27899f98cae2c3b7cf88 -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www

[Freeipa-devel] [PATCH 0142] spec: require python-cryptography newer than 0.9

https://fedorahosted.org/freeipa/ticket/5744 -- Martin^3 Babinsky From 4c79c77efc9b4bf1dc4ae1d371d5cb61ea15f1ce Mon Sep 17 00:00:00 2001 From: Martin Babinsky Date: Thu, 17 Mar 2016 18:23:22 +0100 Subject: [PATCH] spec: require python-cryptography newer than 0.9 When generating keys for custodi

Re: [Freeipa-devel] [PATCH] 0009 webui: Show certificates in useful format

On 03/15/2016 01:23 PM, Pavel Vomacka wrote: Hello, patch for https://fedorahosted.org/freeipa/ticket/5311 is attached. -- Pavel^3 Vomacka Not tested, but can we avoid using s with "white-space: pre" and therefore use only IPA.cert.pem_cert_format(text). Also, it should be displayed in m

Re: [Freeipa-devel] [PATCH 0139] otptoken-add: improve the robustness of QR code printing to tty

On 03/16/2016 01:35 PM, Nathaniel McCallum wrote: On Wed, 2016-03-16 at 07:25 +0100, Jan Cholasta wrote: On 15.3.2016 22:22, Nathaniel McCallum wrote: On Tue, 2016-03-15 at 17:54 +0100, Martin Babinsky wrote: On 03/15/2016 03:36 PM, Martin Babinsky wrote: On 03/09/2016 07:06 AM, Jan Chola

[Freeipa-devel] [PATCH] 0018 DS deadlock when memberof scopes topology plugin updates

https://fedorahosted.org/freeipa/ticket/5637 >From 8da23a1249fe53c4c430869c2bd4646970680672 Mon Sep 17 00:00:00 2001 From: Thierry Bordaz Date: Thu, 17 Mar 2016 12:09:42 +0100 Subject: [PATCH] DS deadlock when memberof scopes topology plugin updates Topology plugin may merge (aka DEL) segments

Re: [Freeipa-devel] [PATCH 537] ipapython: port p11helper C code to Python

18.03.2016, 09:45, Jan Cholasta kirjoitti: > On 18.3.2016 05:16, Timo Aaltonen wrote: >> 07.01.2016, 10:50, Jan Cholasta kirjoitti: >>> Hi, >>> >>> the attached patch ports the _ipap11helper module to python-cffi. >>> >>> Combined with my patch 536 [1], this makes ipapython architecture >>> indepen

[Freeipa-devel] [DESIGN] Server Roles

Hi list, here is a link (http://www.freeipa.org/page/V4/Server_Roles) to WIP design document concerning the concept of Server Roles as a user-friendly abstraction of the services running on IPA masters. The main aim of this feature is to provide a higher level interface to query and manipula

Re: [Freeipa-devel] [PATCH 537] ipapython: port p11helper C code to Python

On 18.3.2016 05:16, Timo Aaltonen wrote: 07.01.2016, 10:50, Jan Cholasta kirjoitti: Hi, the attached patch ports the _ipap11helper module to python-cffi. Combined with my patch 536 [1], this makes ipapython architecture independent. don't know why it works for you, but ipa-ods-exporter and

Re: [Freeipa-devel] [PATCH 0426] spec: add missing requires to python*-ipalib package

On 3.3.2016 18:31, Martin Basti wrote: On 26.02.2016 07:25, Jan Cholasta wrote: Hi, On 25.2.2016 18:05, Martin Basti wrote: https://fedorahosted.org/freeipa/ticket/5680 Patch attached. NACK. For python 3, the ldap module is provided by python3-pyldap. Any reason for the random ordering?

Re: [Freeipa-devel] [PATCH 550] certdb: never use the -r option of certutil

Martin Basti wrote: On 15.03.2016 07:26, David Kupka wrote: On 14/03/16 09:29, Jan Cholasta wrote: Hi, the attached patch fixes and . Honza Hi, thanks for the patch. I haven't found any distorti

[Freeipa-devel] [PATCH] Added fix for notifying user about account expiration in Web UI

Hi All, Please review these patches. Fixes : https://fedorahosted.org/freeipa/ticket/5077 Thanks, Abhijeet Kasurde From 4b4b34902910cb5e99739292f7005a1584c131e5 Mon Sep 17 00:00:00 2001 From: Abhijeet Kasurde Date: Fri, 18 Mar 2016 18:20:22 +0530 Subject: [PATCH] Added fix for notifying user a

Re: [Freeipa-devel] [PATCH 016, 024, 025] First part of the replica promotion tests + testplan

On 17.03.2016 20:37, Lukas Slebodnik wrote: On (17/03/16 16:00), Oleg Fayans wrote: Hi Lukas, On 03/17/2016 11:28 AM, Lukas Slebodnik wrote: On (10/03/16 23:09), Oleg Fayans wrote: Hi Martin, On 03/08/2016 08:18 PM, Martin Basti wrote: On 08.03.2016 18:24, Martin Basti wrote: On 08.0

Re: [Freeipa-devel] server_del (re)implementation in domain level 1 topology management

On 03/17/2016 02:55 PM, Petr Vobornik wrote: On 03/17/2016 02:39 PM, Martin Babinsky wrote: Hi list, I would like to discuss the merge of `del_master_managed()` function from `ipa-replica-manage` command into the server_del API call that is a part of the managed replication topology design upda

Re: [Freeipa-devel] [PATCH 0441] Configure httpd service from installer

On 03/17/2016 05:36 PM, Martin Basti wrote: https://fedorahosted.org/freeipa/ticket/5681 Patch attached. Hi Martin, Nitpick attack: Please fix the commit message: "File httpd.service was created by RPM, what causes that httpd service may", should be "..., which causes" Otherwise the code

Re: [Freeipa-devel] [PATCH 0024] ipa-replica-manage: added --suffix option for certain commands

On 03/16/2016 10:22 AM, Jan Cholasta wrote: On 16.3.2016 08:33, Stanislav Laznicka wrote: On 03/15/2016 12:47 PM, Petr Vobornik wrote: On 03/15/2016 07:25 AM, Jan Cholasta wrote: On 14.3.2016 17:18, Petr Vobornik wrote: On 03/14/2016 04:55 PM, Jan Cholasta wrote: On 14.3.2016 16:26, Petr Vob

Re: [Freeipa-devel] [PATCH 0012-0013] Improve ipaplatform.constants

On 18.03.2016 11:30, Timo Aaltonen wrote: Fix some hardcoded uid/gid strings to help with porting. Please note this is part of: https://fedorahosted.org/freeipa/ticket/5343 and ticket should be added to commits before push -- Manage your subscription for the Freeipa-devel mailing list:

Re: [Freeipa-devel] [PATCH 0137] spec: add conflict with bind-chroot to freeipa-server-dns

On 11.3.2016 09:32, Martin Babinsky wrote: On 03/11/2016 07:24 AM, Jan Cholasta wrote: On 9.3.2016 11:14, Martin Babinsky wrote: On 03/07/2016 04:28 PM, Martin Kosek wrote: On 03/07/2016 03:17 PM, Petr Spacek wrote: On 7.3.2016 13:27, Jan Cholasta wrote: Hi, On 7.3.2016 12:47, Martin Babins

[Freeipa-devel] user-* commands performance issues

Hello all, I would like to discuss the way how we should improve the speed of user-find commands (and other commands too if possible): 0) Do not do extra search for ipasshpubkey. This is clear, patch posted for review. https://fedorahosted.org/freeipa/ticket/3376 commands: user, stageuser,

Re: [Freeipa-devel] [PATCH 0440] Fix broken trust warnings

On 16.03.2016 13:32, Martin Basti wrote: On 16.03.2016 13:32, Alexander Bokovoy wrote: On Wed, 16 Mar 2016, Martin Basti wrote: On 15.03.2016 16:40, Martin Basti wrote: https://fedorahosted.org/freeipa/ticket/5737 Patch attached. Sekf NACK, fix should be just oneliner, I found out t

Re: [Freeipa-devel] [DESIGN] Server Roles

On 03/18/2016 10:21 AM, Martin Kosek wrote: On 03/17/2016 06:16 PM, Martin Babinsky wrote: Hi list, here is a link (http://www.freeipa.org/page/V4/Server_Roles) to WIP design document concerning the concept of Server Roles as a user-friendly abstraction of the services running on IPA masters.

Re: [Freeipa-devel] [PATCH 0439] Do not do extra search for ipasshpubkey

On 03/15/2016 01:48 PM, Martin Basti wrote: https://fedorahosted.org/freeipa/ticket/3376 Patch attached. ACK but fix the 'behavioar' typo in the commit message before pushing. -- Martin^3 Babinsky -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman

Re: [Freeipa-devel] [PATCH] 0018 DS deadlock when memberof scopes topology plugin updates

On 18.03.2016 13:28, Martin Basti wrote: On 17.03.2016 19:07, thierry bordaz wrote: https://fedorahosted.org/freeipa/ticket/5637 Pushed to: ipa-4-3: 17873d19b804c78a2d1ff78e37ea2da35acac942 master: e1bbd90360b98910540b7390b312b6405d0da102 ACK :) -- Manage your subscription for the

[Freeipa-devel] Converting plugin output

Hi, I'd like to use FreeIPA's RPC interface from Ansible directly. But the output of plugins is rather unfriendly and unpythonic: >>> print(api.Command.dnsconfig_show()) {u'result': {u'dn': u'cn=dns,dc=ipa,dc=example', u'idnsallowsyncptr': (u'FALSE',)}, u'value': None, u'summary': None} Please n

Re: [Freeipa-devel] server_del (re)implementation in domain level 1 topology management

On 03/17/2016 04:15 PM, Petr Vobornik wrote: On 03/17/2016 04:10 PM, Martin Babinsky wrote: On 03/17/2016 03:37 PM, Petr Vobornik wrote: On 03/17/2016 03:17 PM, Martin Babinsky wrote: On 03/17/2016 02:55 PM, Petr Vobornik wrote: On 03/17/2016 02:39 PM, Martin Babinsky wrote: Hi list, I woul

Re: [Freeipa-devel] [PATCH] 955 sessions: use unique mod_auth_gssapi ccaches

On 03/10/2016 03:25 PM, Simo Sorce wrote: On Thu, 2016-03-10 at 15:03 +0100, Petr Vobornik wrote: Attaching also mod_auth_gssapi patch. If the approach is good, then I'd send it as a push request to upstream git repo. Copr build of mod_auth_gssapi with the patch: https://copr.fedorainfracloud.o

Re: [Freeipa-devel] server_del (re)implementation in domain level 1 topology management

On 03/17/2016 03:17 PM, Martin Babinsky wrote: On 03/17/2016 02:55 PM, Petr Vobornik wrote: On 03/17/2016 02:39 PM, Martin Babinsky wrote: Hi list, I would like to discuss the merge of `del_master_managed()` function from `ipa-replica-manage` command into the server_del API call that is a part

Re: [Freeipa-devel] [PATCH] Added fix for notifying user about account expiration in Web UI

On 03/18/2016 02:21 PM, Abhijeet Kasurde wrote: Hi All, Please review these patches. Fixes : https://fedorahosted.org/freeipa/ticket/5077 Thanks, Abhijeet Kasurde 'invalid' is a default and right now is meant for invalid password(not correct, see below). So by reading the patch, it will br

Re: [Freeipa-devel] [DESIGN] Server Roles

On 03/18/2016 10:59 AM, Martin Kosek wrote: On 03/18/2016 10:47 AM, Martin Babinsky wrote: On 03/18/2016 10:21 AM, Martin Kosek wrote: On 03/17/2016 06:16 PM, Martin Babinsky wrote: Hi list, here is a link (http://www.freeipa.org/page/V4/Server_Roles) to WIP design document concerning the con

Re: [Freeipa-devel] [DESIGN] Server Roles

On Fri, 2016-03-18 at 14:44 +0100, Petr Vobornik wrote: > On 03/18/2016 10:59 AM, Martin Kosek wrote: > > On 03/18/2016 10:47 AM, Martin Babinsky wrote: > >> On 03/18/2016 10:21 AM, Martin Kosek wrote: > >>> On 03/17/2016 06:16 PM, Martin Babinsky wrote: > Hi list, > > here is a link

Re: [Freeipa-devel] [PATCH 0440] Fix broken trust warnings

On 16.03.2016 13:32, Alexander Bokovoy wrote: On Wed, 16 Mar 2016, Martin Basti wrote: On 15.03.2016 16:40, Martin Basti wrote: https://fedorahosted.org/freeipa/ticket/5737 Patch attached. Sekf NACK, fix should be just oneliner, I found out that domain are stored hierarchically so ext

Re: [Freeipa-devel] [PATCH 016, 024, 025] First part of the replica promotion tests + testplan

Hi Lukas, On 03/17/2016 11:28 AM, Lukas Slebodnik wrote: > On (10/03/16 23:09), Oleg Fayans wrote: >> Hi Martin, >> >> >> >> On 03/08/2016 08:18 PM, Martin Basti wrote: >>> >>> >>> On 08.03.2016 18:24, Martin Basti wrote: On 08.03.2016 12:38, Oleg Fayans wrote: > The patches wer

Re: [Freeipa-devel] [DESIGN] Server Roles

On 03/18/2016 10:47 AM, Martin Babinsky wrote: > On 03/18/2016 10:21 AM, Martin Kosek wrote: >> On 03/17/2016 06:16 PM, Martin Babinsky wrote: >>> Hi list, >>> >>> here is a link (http://www.freeipa.org/page/V4/Server_Roles) to WIP design >>> document concerning the concept of Server Roles as a use

Re: [Freeipa-devel] [PATCH 0139] otptoken-add: improve the robustness of QR code printing to tty

On Wed, 2016-03-16 at 07:25 +0100, Jan Cholasta wrote: > On 15.3.2016 22:22, Nathaniel McCallum wrote: > > > > On Tue, 2016-03-15 at 17:54 +0100, Martin Babinsky wrote: > > > > > > On 03/15/2016 03:36 PM, Martin Babinsky wrote: > > > > > > > > > > > > On 03/09/2016 07:06 AM, Jan Cholasta wrote:

Re: [Freeipa-devel] [PATCH 537] ipapython: port p11helper C code to Python

07.01.2016, 10:50, Jan Cholasta kirjoitti: > Hi, > > the attached patch ports the _ipap11helper module to python-cffi. > > Combined with my patch 536 [1], this makes ipapython architecture > independent. don't know why it works for you, but ipa-ods-exporter and ipa-dnskeysync-replica both still

[Freeipa-devel] [PATCH 0143-0144] different errors/warnings for different LDAP limit type exceeded

These patches implement behavior agreed upon during discussion of https://fedorahosted.org/freeipa/ticket/5677 However I'm not sure if we want to push them into 4-3 branch (the ticket is triaged into 4.3.2 milestone) since they modify the framework behavior quite a bit. If there is no need t

Re: [Freeipa-devel] [PATCH 0143-0144] different errors/warnings for different LDAP limit type exceeded

Martin Babinsky wrote: These patches implement behavior agreed upon during discussion of https://fedorahosted.org/freeipa/ticket/5677 However I'm not sure if we want to push them into 4-3 branch (the ticket is triaged into 4.3.2 milestone) since they modify the framework behavior quite a bit. I

Re: [Freeipa-devel] [PATCH 0440] Fix broken trust warnings

On Wed, 16 Mar 2016, Martin Basti wrote: On 16.03.2016 13:32, Martin Basti wrote: On 16.03.2016 13:32, Alexander Bokovoy wrote: On Wed, 16 Mar 2016, Martin Basti wrote: On 15.03.2016 16:40, Martin Basti wrote: https://fedorahosted.org/freeipa/ticket/5737 Patch attached. Sekf NACK,

[Freeipa-devel] server_del (re)implementation in domain level 1 topology management

Hi list, I would like to discuss the merge of `del_master_managed()` function from `ipa-replica-manage` command into the server_del API call that is a part of the managed replication topology design update[1] (see also the corresponding upstream ticket [2]). Before I head down into coding I

Re: [Freeipa-devel] [PATCH 0141] ipa-replica-manage: print traceback on unexpected error when in verbose mode

On 15.03.2016 16:03, Martin Babinsky wrote: On 03/14/2016 06:26 PM, Martin Basti wrote: On 10.03.2016 15:59, Martin Babinsky wrote: https://fedorahosted.org/freeipa/ticket/5380 NACK 1) Maybe we should print traceback in verbose mode for RuntimeError as well. 2) IMO would be better t

Re: [Freeipa-devel] [PATCH 0434] log: add timestamp to filename of logs

On 14.03.2016 14:15, Jan Cholasta wrote: On 14.3.2016 13:56, Rob Crittenden wrote: Jan Cholasta wrote: On 11.3.2016 15:56, Gabe Alford wrote: On Fri, Mar 11, 2016 at 7:35 AM, Petr Vobornik mailto:pvobo...@redhat.com>> wrote: On 03/11/2016 03:00 PM, Rob Crittenden wrote: Marti

Re: [Freeipa-devel] perl Net::FreeIPA

On Thu, 17 Mar 2016, Stijn De Weirdt wrote: hi all, i have been working on FreeIPA perl bindings, i've made them available on https://github.com/stdweird/p5-net-freeipa (and thanks to Alexander Bokovoy for the very useful remarks and hints). comments/issues/PRs welcome Thanks, Stijn. As I sa

Re: [Freeipa-devel] [TEST][Patch-0027] Fixed test failure during in-tree session, ticket N 5736

On 16.03.2016 14:59, Oleg Fayans wrote: Hi Martin On 03/16/2016 02:39 PM, Martin Basti wrote: On 16.03.2016 10:59, Oleg Fayans wrote: With this patch applied integration tests pass and in-tree tests are gracefully skipped. @mkubik, It is not possible to put the decorator to util.py as per

Re: [Freeipa-devel] [PATCH 0440] Fix broken trust warnings

On Wed, 16 Mar 2016, Martin Basti wrote: On 15.03.2016 16:40, Martin Basti wrote: https://fedorahosted.org/freeipa/ticket/5737 Patch attached. Sekf NACK, fix should be just oneliner, I found out that domain are stored hierarchically so extra finding of parents zone is needed. you meant

[Freeipa-devel] perl Net::FreeIPA

hi all, i have been working on FreeIPA perl bindings, i've made them available on https://github.com/stdweird/p5-net-freeipa (and thanks to Alexander Bokovoy for the very useful remarks and hints). comments/issues/PRs welcome stijn -- Manage your subscription for the Freeipa-devel mailing lis

Re: [Freeipa-devel] [PATCH] 955 sessions: use unique mod_auth_gssapi ccaches

- Original Message - > From: "Petr Vobornik" > To: "Simo Sorce" > Cc: "freeipa-devel" > Sent: Wednesday, March 16, 2016 12:16:02 PM > Subject: Re: [PATCH] 955 sessions: use unique mod_auth_gssapi ccaches > > On 03/10/2016 03:25 PM, Simo Sorce wrote: > > On Thu, 2016-03-10 at 15:03 +0100

[Freeipa-devel] [PATCH 0441] Configure httpd service from installer

https://fedorahosted.org/freeipa/ticket/5681 Patch attached. From 9cce757cbdb19e71d314339cd2b822792dde3210 Mon Sep 17 00:00:00 2001 From: Martin Basti Date: Wed, 16 Mar 2016 09:04:42 +0100 Subject: [PATCH] Configure httpd service from installer instead of directly from RPM File httpd.service w

[Freeipa-devel] [PATCH 0012-0013] Improve ipaplatform.constants

Fix some hardcoded uid/gid strings to help with porting. -- t From aa2d433b3dbadd94a2ed84909335f54fea91ce2c Mon Sep 17 00:00:00 2001 From: Timo Aaltonen Date: Fri, 18 Mar 2016 12:22:33 +0200 Subject: [PATCH 1/2] ipaplatform: Move remaining user/group constants to ipaplatform.constants. Use ip

Re: [Freeipa-devel] server_del (re)implementation in domain level 1 topology management

On 03/17/2016 04:10 PM, Martin Babinsky wrote: On 03/17/2016 03:37 PM, Petr Vobornik wrote: On 03/17/2016 03:17 PM, Martin Babinsky wrote: On 03/17/2016 02:55 PM, Petr Vobornik wrote: On 03/17/2016 02:39 PM, Martin Babinsky wrote: Hi list, I would like to discuss the merge of `del_master_man

Re: [Freeipa-devel] [DESIGN] Server Roles

On 03/18/2016 02:44 PM, Petr Vobornik wrote: On 03/18/2016 10:59 AM, Martin Kosek wrote: On 03/18/2016 10:47 AM, Martin Babinsky wrote: On 03/18/2016 10:21 AM, Martin Kosek wrote: On 03/17/2016 06:16 PM, Martin Babinsky wrote: Hi list, here is a link (http://www.freeipa.org/page/V4/Server_Ro

Re: [Freeipa-devel] [TEST][Patch-0027] Fixed test failure during in-tree session, ticket N 5736

On 16.03.2016 10:59, Oleg Fayans wrote: With this patch applied integration tests pass and in-tree tests are gracefully skipped. @mkubik, It is not possible to put the decorator to util.py as per our discussion, because it uses tasks, so tasks must be imported. But tasks already import util, w