Re: [Freeipa-devel] [PATCH 0069] ipa-nis-manage enable: change service name from 'portmap' to 'rpcbind'

2016-05-03 Thread Abhijeet Kasurde
Hi Gabe, I am wondering, how are we handling "CalledProcessError" exception ? On 05/04/2016 09:17 AM, Gabe Alford wrote: Hello, Fix for https://fedorahosted.org/freeipa/ticket/5857 Thanks, Gabe Thanks, Abhijeet Kasurde -- Manage your subscription for the Freeipa-devel mailing list:

Re: [Freeipa-devel] [PATCH] 0053..0054 Configure lightweight CA key replication

2016-05-03 Thread Fraser Tweedale
On Tue, May 03, 2016 at 05:05:58PM +1000, Fraser Tweedale wrote: > On Tue, Apr 26, 2016 at 10:02:45AM +0200, Jan Cholasta wrote: > > On 21.4.2016 05:30, Fraser Tweedale wrote: > > >On Thu, Apr 14, 2016 at 04:39:37PM +1000, Fraser Tweedale wrote: > > >>Hi all, > > >> > > >>The attached patches

[Freeipa-devel] [PATCH 0069] ipa-nis-manage enable: change service name from 'portmap' to 'rpcbind'

2016-05-03 Thread Gabe Alford
Hello, Fix for https://fedorahosted.org/freeipa/ticket/5857 Thanks, Gabe From 950da9c812a162569379bd9e530977960e9ab7ca Mon Sep 17 00:00:00 2001 From: Gabe Date: Tue, 3 May 2016 21:33:33 -0600 Subject: [PATCH] ipa-nis-manage enable: change service name from 'portmap' to

Re: [Freeipa-devel] [PATCH] 0001 provide more information for "ipa cert-revoke -h"

2016-05-03 Thread Gabe Alford
On Tue, May 3, 2016 at 9:35 AM, Patrice Duc-Jacquet < patrice.duc.jacq...@gmail.com> wrote: > On 05/03/2016 04:41 PM, Rob Crittenden wrote: > > Gabe Alford wrote: >> >>> Hello, >>> >>> Thank you for your patch as well. >>> >>> >-doc=_('Reason for revoking the certificate (0-10)'),

[Freeipa-devel] #5836 [RFE] Allow profile to specify default CA

2016-05-03 Thread Fraser Tweedale
Continuing the discussion for #5836[1] as requested from triage session. [1] https://fedorahosted.org/freeipa/ticket/5836 IMO it is not important for FreeIPA 4.4. It is nice to have but I doubt it will make it. Honza suggested it should be the other way around, i.e. CA specifies default

Re: [Freeipa-devel] Improving bug reporting

2016-05-03 Thread Robbie Harwood
Lukas Slebodnik writes: > On (03/05/16 12:29), Robbie Harwood wrote: >>David Kupka writes: >> >>> --8<- trac-ticket-template-proposal --->8-- >>> Related SW versions: >>> On server: >>> {{{ >>> $ rpm -q freeipa-server pki-base

Re: [Freeipa-devel] Improving bug reporting

2016-05-03 Thread Lukas Slebodnik
On (03/05/16 12:29), Robbie Harwood wrote: >David Kupka writes: > >> --8<- trac-ticket-template-proposal --->8-- >> Related SW versions: >> On server: >> {{{ >> $ rpm -q freeipa-server pki-base 389-ds-base bind samba krb5-server >> certmonger >> }}}

Re: [Freeipa-devel] External trust to AD

2016-05-03 Thread Alexander Bokovoy
On Tue, 03 May 2016, Simo Sorce wrote: On Wed, 2016-03-02 at 21:11 +0200, Alexander Bokovoy wrote: On Wed, 02 Mar 2016, Petr Vobornik wrote: >On 03/02/2016 11:13 AM, Alexander Bokovoy wrote: >>Hi, >> >>http://www.freeipa.org/page/V4/External_trust_to_AD documents a design >>for external trust

Re: [Freeipa-devel] External trust to AD

2016-05-03 Thread Simo Sorce
On Wed, 2016-03-02 at 21:11 +0200, Alexander Bokovoy wrote: > On Wed, 02 Mar 2016, Petr Vobornik wrote: > >On 03/02/2016 11:13 AM, Alexander Bokovoy wrote: > >>Hi, > >> > >>http://www.freeipa.org/page/V4/External_trust_to_AD documents a design > >>for external trust to AD feature. > >> > >>The

Re: [Freeipa-devel] Improving bug reporting

2016-05-03 Thread Petr Vobornik
On 05/03/2016 01:45 PM, David Kupka wrote: > Hello everyone! > > I often miss proper reproducer and other important info in trac tickets. > Asking for the missing info or guessing and trying is as ineffective as > it sounds and costs us a lot of time and effort. I believe we can > improve that. >

Re: [Freeipa-devel] Improving bug reporting

2016-05-03 Thread Robbie Harwood
David Kupka writes: > --8<- trac-ticket-template-proposal --->8-- > Related SW versions: > On server: > {{{ > $ rpm -q freeipa-server pki-base 389-ds-base bind samba krb5-server > certmonger > }}} > On client: > {{{ > $ rpm -q freeipa-client

Re: [Freeipa-devel] [REVIEW] Intial stab towards Authentication Indicators

2016-05-03 Thread Petr Vobornik
On 05/03/2016 06:11 PM, Nathaniel McCallum wrote: > On Mon, 2016-05-02 at 18:27 +0200, Petr Vobornik wrote: >> Hi Matt, Nathaniel and Simo, >> >> I'd like to kindly check the status of this effort therefore >> resurrecting this thread. >> >> First, Is the design up to date? Are there still aspects

Re: [Freeipa-devel] Another batch of Python 3 patches

2016-05-03 Thread Petr Viktorin
On 05/03/2016 04:31 PM, Martin Basti wrote: > > > On 03.05.2016 15:52, Petr Viktorin wrote: >> On 05/03/2016 03:02 PM, Petr Spacek wrote: >>> On 2.5.2016 18:02, Martin Basti wrote: On 29.04.2016 19:46, Petr Viktorin wrote: > Hello, > These patches concentrate on tests, and code

Re: [Freeipa-devel] [REVIEW] Intial stab towards Authentication Indicators

2016-05-03 Thread Nathaniel McCallum
On Mon, 2016-05-02 at 18:27 +0200, Petr Vobornik wrote: > Hi Matt, Nathaniel and Simo, > > I'd like to kindly check the status of this effort therefore > resurrecting this thread. > > First, Is the design up to date? Are there still aspects which need > to > be figured out? I do not believe

Re: [Freeipa-devel] [PATCH] Updated ipa command man page

2016-05-03 Thread Martin Basti
On 03.05.2016 15:21, Petr Spacek wrote: On 2.5.2016 09:41, Petr Spacek wrote: On 29.4.2016 12:57, Abhijeet Kasurde wrote: Hi All, Please review this patch. LGTM Okay, so I applied it! ACK ;-) trac ticket (#5871) added to commit message Pushed to: master:

Re: [Freeipa-devel] [PATCH] 0001 provide more information for "ipa cert-revoke -h"

2016-05-03 Thread Patrice Duc-Jacquet
On 05/03/2016 04:41 PM, Rob Crittenden wrote: Gabe Alford wrote: Hello, Thank you for your patch as well. >-doc=_('Reason for revoking the certificate (0-10)'), >+doc=_('Reason for revoking the certificate (0-10). See RFC 5280 (paragraph 5.3.1) for reason details'),

Re: [Freeipa-devel] [TESTS][PATCH 0012] Provide cleanup for host certificate

2016-05-03 Thread Martin Basti
On 03.05.2016 14:26, Lenka Doudova wrote: On 05/03/2016 02:08 PM, Lenka Doudova wrote: On 05/03/2016 12:15 PM, Martin Basti wrote: On 03.05.2016 11:18, Lenka Doudova wrote: On 05/03/2016 10:33 AM, Martin Basti wrote: Hello I'm quite confused what is happening in that code, can you

Re: [Freeipa-devel] [PATCH] 0001 provide more information for "ipa cert-revoke -h"

2016-05-03 Thread Rob Crittenden
Gabe Alford wrote: Hello, Thank you for your patch as well. >-doc=_('Reason for revoking the certificate (0-10)'), >+doc=_('Reason for revoking the certificate (0-10). See RFC 5280 (paragraph 5.3.1) for reason details'), Rather than just specifying the RFC with the

Re: [Freeipa-devel] Another batch of Python 3 patches

2016-05-03 Thread Martin Basti
On 03.05.2016 15:52, Petr Viktorin wrote: On 05/03/2016 03:02 PM, Petr Spacek wrote: On 2.5.2016 18:02, Martin Basti wrote: On 29.04.2016 19:46, Petr Viktorin wrote: Hello, These patches concentrate on tests, and code that was added/changed since I last looked at the FreeIPA project. With

Re: [Freeipa-devel] [PATCH] 0001 provide more information for "ipa cert-revoke -h"

2016-05-03 Thread Gabe Alford
Hello, Thank you for your patch as well. >-doc=_('Reason for revoking the certificate (0-10)'), >+doc=_('Reason for revoking the certificate (0-10). See RFC 5280 (paragraph 5.3.1) for reason details'), Rather than just specifying the RFC with the paragraph to go look up,

Re: [Freeipa-devel] [PATCH] 0001 provide more information for "ipa cert-revoke -h"

2016-05-03 Thread Martin Basti
On 03.05.2016 16:01, Patrice Duc-Jacquet wrote: Hi everyone this is my first patch. So I may have done thhings nor in a proper way. Please let me know if something is wrong in the proceess I followed. With regards Pat Hello, thank you for your patch. Please remove changes in .po and

[Freeipa-devel] [PATCH] 0001 provide more information for "ipa cert-revoke -h"

2016-05-03 Thread Patrice Duc-Jacquet
Hi everyone this is my first patch. So I may have done thhings nor in a proper way. Please let me know if something is wrong in the proceess I followed. With regards Pat >From bb06bd55c9f68af1a3aa01b671757abfbb45c822 Mon Sep 17 00:00:00 2001 From: Patrice Duc-Jacquet

Re: [Freeipa-devel] Improving bug reporting

2016-05-03 Thread Abhijeet Kasurde
On 05/03/2016 07:05 PM, Jakub Hrozek wrote: On Tue, May 03, 2016 at 01:45:39PM +0200, David Kupka wrote: Hello everyone! I often miss proper reproducer and other important info in trac tickets. Asking for the missing info or guessing and trying is as ineffective as it sounds and costs us a

Re: [Freeipa-devel] Another batch of Python 3 patches

2016-05-03 Thread Petr Viktorin
On 05/03/2016 03:02 PM, Petr Spacek wrote: > On 2.5.2016 18:02, Martin Basti wrote: >> >> >> On 29.04.2016 19:46, Petr Viktorin wrote: >>> Hello, >>> These patches concentrate on tests, and code that was added/changed >>> since I last looked at the FreeIPA project. >>> >>> With these patches, I'm

[Freeipa-devel] [PATCH 0068] Use ipareplica-ca-install.log instead of ipaserver-ca-install.log

2016-05-03 Thread Gabe Alford
Hello, Fix for https://fedorahosted.org/freeipa/ticket/5727. Per comment #7, this removes ipaserver-ca-install.log and uses ipareplica-ca-install.log. Thanks, Gabe From 9f8cb593c1b207d96693879fbd8717a78421e157 Mon Sep 17 00:00:00 2001 From: Gabe Date: Tue, 3 May 2016

Re: [Freeipa-devel] Improving bug reporting

2016-05-03 Thread Jakub Hrozek
On Tue, May 03, 2016 at 01:45:39PM +0200, David Kupka wrote: > Hello everyone! > > I often miss proper reproducer and other important info in trac tickets. > Asking for the missing info or guessing and trying is as ineffective as it > sounds and costs us a lot of time and effort. I believe we can

Re: [Freeipa-devel] [PATCH] Updated ipa command man page

2016-05-03 Thread Petr Spacek
On 2.5.2016 09:41, Petr Spacek wrote: > On 29.4.2016 12:57, Abhijeet Kasurde wrote: >> Hi All, >> >> Please review this patch. > > LGTM Okay, so I applied it! ACK ;-) -- Petr^2 Spacek -- Manage your subscription for the Freeipa-devel mailing list:

Re: [Freeipa-devel] [PATCH] Fix added to ipa-compat-manage command line help

2016-05-03 Thread Petr Spacek
On 2.5.2016 12:43, Abhijeet Kasurde wrote: > Hi All, > > Please review this patch. ACK -- Petr^2 Spacek -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

Re: [Freeipa-devel] [PATCH 0097-0098] Makefile: replace perl with sed

2016-05-03 Thread Petr Spacek
On 25.4.2016 10:12, Lukas Slebodnik wrote: > On (25/04/16 09:59), Jan Cholasta wrote: >> On 25.4.2016 09:34, Petr Spacek wrote: >>> On 25.4.2016 09:29, Lukas Slebodnik wrote: On (25/04/16 07:23), Jan Cholasta wrote: > Hi, > > On 22.4.2016 13:29, Petr Spacek wrote: >> Hello,

Re: [Freeipa-devel] Another batch of Python 3 patches

2016-05-03 Thread Petr Spacek
On 2.5.2016 18:02, Martin Basti wrote: > > > On 29.04.2016 19:46, Petr Viktorin wrote: >> Hello, >> These patches concentrate on tests, and code that was added/changed >> since I last looked at the FreeIPA project. >> >> With these patches, I'm back to getting the same errors under py2 and >>

Re: [Freeipa-devel] [PATCH] 0770 Switch /usr/bin/ipa to Python 3

2016-05-03 Thread Petr Spacek
On 29.4.2016 19:49, Petr Viktorin wrote: > On 04/12/2016 12:52 PM, Petr Spacek wrote: >> On 19.2.2016 13:50, Petr Viktorin wrote: >>> Is it time yet? >>> >>> This patch switches /usr/bin/ipa to Python 3 for >>> - the in-tree ./ipa command >>> - RPMs, when built with_python3 >> >> NACK, the change

[Freeipa-devel] [PATCH 0104-0109] DNS upgrade: change forwarding policy to "only" if private IPs are used

2016-05-03 Thread Petr Spacek
Hello, DNS upgrade: change forwarding policy to "only" if private IPs are used. https://fedorahosted.org/freeipa/ticket/5710 This is the upgrade part. I will add one more patch to print a warning in dnsforwardzone* commands to avoid surprises. Please do not close the ticket yet. -- Petr^2

[Freeipa-devel] [PATCH 0103] DNS installer: accept --auto-forwarders option in unattended mode

2016-05-03 Thread Petr Spacek
Hello, DNS installer: accept --auto-forwarders option in unattended mode https://fedorahosted.org/freeipa/ticket/5869 -- Petr^2 Spacek From f1ad3a19f250d88502f47e3b5541388e14ab5f08 Mon Sep 17 00:00:00 2001 From: Petr Spacek Date: Tue, 3 May 2016 14:12:44 +0200 Subject:

Re: [Freeipa-devel] [TESTS][PATCH 0012] Provide cleanup for host certificate

2016-05-03 Thread Lenka Doudova
On 05/03/2016 12:15 PM, Martin Basti wrote: On 03.05.2016 11:18, Lenka Doudova wrote: On 05/03/2016 10:33 AM, Martin Basti wrote: Hello I'm quite confused what is happening in that code, can you explain it more to me? I see duplicated code there. Sorry, that was just an unnecessary

Re: [Freeipa-devel] Improving bug reporting

2016-05-03 Thread Martin Basti
On 03.05.2016 13:45, David Kupka wrote: Hello everyone! I often miss proper reproducer and other important info in trac tickets. Asking for the missing info or guessing and trying is as ineffective as it sounds and costs us a lot of time and effort. I believe we can improve that. We have

[Freeipa-devel] Improving bug reporting

2016-05-03 Thread David Kupka
Hello everyone! I often miss proper reproducer and other important info in trac tickets. Asking for the missing info or guessing and trying is as ineffective as it sounds and costs us a lot of time and effort. I believe we can improve that. We have guidelines for reporting a bug [1] but it

Re: [Freeipa-devel] [TESTS][PATCH 0012] Provide cleanup for host certificate

2016-05-03 Thread Martin Basti
On 03.05.2016 11:18, Lenka Doudova wrote: On 05/03/2016 10:33 AM, Martin Basti wrote: Hello I'm quite confused what is happening in that code, can you explain it more to me? I see duplicated code there. Sorry, that was just an unnecessary leftover. Fixed patch attached. The code is

[Freeipa-devel] [TESTS][PATCH 0012] Provide cleanup for host certificate

2016-05-03 Thread Lenka Doudova
Hi, attached patch provides solution for https://fedorahosted.org/freeipa/ticket/5839 by removing all certificates added to local host during tests. Lenka From 031adf1f50308b70e87c93a7a853f04eae593bf0 Mon Sep 17 00:00:00 2001 From: Lenka Doudova Date: Mon, 2 May 2016

Re: [Freeipa-devel] [PATCH] 0053..0054 Configure lightweight CA key replication

2016-05-03 Thread Fraser Tweedale
On Tue, Apr 26, 2016 at 10:02:45AM +0200, Jan Cholasta wrote: > On 21.4.2016 05:30, Fraser Tweedale wrote: > >On Thu, Apr 14, 2016 at 04:39:37PM +1000, Fraser Tweedale wrote: > >>Hi all, > >> > >>The attached patches configure lightweight CA key replication on IPA > >>CAs, on upgrade and