[Freeipa-devel] Karma Requests for pki-core-10.3.5-4

*The following updated candidate builds of pki-core 10.3.5 on Fedora 24, 25, and 26 (rawhide) consist of the following: * * *Fedora 24* o *pki-core-10.3.5-4.fc24 * * *Fedora 25* o *pki-core-10.3.5-4.fc25

[Freeipa-devel] [freeipa PR#38] Removed incorrect check for returncode (+rejected)

ofayans's pull request #38: "Removed incorrect check for returncode" label *rejected* has been added See the full pull-request at https://github.com/freeipa/freeipa/pull/38 -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel

[Freeipa-devel] [freeipa PR#38] Removed incorrect check for returncode (comment)

mbasti-rh commented on a pull request """ IPA code should be fixed not tests """ See the full comment at https://github.com/freeipa/freeipa/pull/38#issuecomment-243463585 -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] [DESIGN][UPDATE] Time-Based HBAC Policies

On Tue, 2016-08-30 at 08:47 +0200, Standa Laznicka wrote: > On 08/26/2016 05:37 PM, Simo Sorce wrote: > > On Fri, 2016-08-26 at 11:26 -0400, Simo Sorce wrote: > >> On Fri, 2016-08-26 at 18:09 +0300, Alexander Bokovoy wrote: > >>> On Fri, 26 Aug 2016, Simo Sorce wrote: > On Fri, 2016-08-26 at

[Freeipa-devel] Release 4.4.1 planning

Hi, we have a plan to release FreeIPA 4.4.1 on Wednesday, Aug 31st. I started preparing a release page: http://www.freeipa.org/page/Releases/4.4.1 It has staggering 140+ closed tickets already. Please help me with filling in enhancements and bug fixes sections. -- / Alexander Bokovoy --

Re: [Freeipa-devel] [PATCH] 0220 move /bin/ipa to freeipa-client

On 30.8.2016 14:09, Martin Basti wrote: On 30.08.2016 09:27, Jan Cholasta wrote: On 25.8.2016 13:09, Alexander Bokovoy wrote: On Thu, 25 Aug 2016, Jan Cholasta wrote: Hi, On 25.8.2016 11:27, Alexander Bokovoy wrote: Hi, attached patch moves ipa CLI to freeipa-client and obsoletes

[Freeipa-devel] [freeipa PR#38] Removed incorrect check for returncode (closed)

ofayans's pull request #38: "Removed incorrect check for returncode" was closed See the full pull-request at https://github.com/freeipa/freeipa/pull/38 ... or pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/38/head:pr38 git checkout

Re: [Freeipa-devel] [PATCH] 0220 move /bin/ipa to freeipa-client

On 30.08.2016 09:27, Jan Cholasta wrote: On 25.8.2016 13:09, Alexander Bokovoy wrote: On Thu, 25 Aug 2016, Jan Cholasta wrote: Hi, On 25.8.2016 11:27, Alexander Bokovoy wrote: Hi, attached patch moves ipa CLI to freeipa-client and obsoletes freeipa-admintools The Obsoletes (both) should

Re: [Freeipa-devel] [Test][Patch-0049, 0050] Certs in ID overrides test

On 22.08.2016 13:18, Oleg Fayans wrote: ping for review On 08/02/2016 01:11 PM, Oleg Fayans wrote: Hi Martin, I did! Thank you! On 08/02/2016 12:31 PM, Martin Basti wrote: On 01.08.2016 22:46, Oleg Fayans wrote: The test was redesigned so that it actually tests against an AD user.

Re: [Freeipa-devel] [PATCH] 0024 memory leak in ipapwd plugin

On 11.08.2016 16:39, Alexander Bokovoy wrote: On Thu, 11 Aug 2016, thierry bordaz wrote: +/* rc should always be 0 (else slapi_sdn_new_dn_byref should have sigsev) + * but if we end in rc==LDAP_OPERATIONS_ERROR be sure to stop here + * because ret is not significant

[Freeipa-devel] [freeipa PR#24] [master, ipa-4-3] Raise error when running ipa-adtrust-install with empty netbios--name (comment)

mbasti-rh commented on a pull request """ Fixed upstream master: https://fedorahosted.org/freeipa/changeset/2c7b7b3acc0a7131ea14cc43acb571150b585171 ipa-4-3: https://fedorahosted.org/freeipa/changeset/6064b122f995ca5e8f9bfcc72a8565d1280f8876 """ See the full comment at

[Freeipa-devel] [freeipa PR#24] [master, ipa-4-3] Raise error when running ipa-adtrust-install with empty netbios--name (closed)

mirielka's pull request #24: "[master, ipa-4-3] Raise error when running ipa-adtrust-install with empty netbios--name" was closed See the full pull-request at https://github.com/freeipa/freeipa/pull/24 ... or pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa

[Freeipa-devel] [freeipa PR#24] [master, ipa-4-3] Raise error when running ipa-adtrust-install with empty netbios--name (+pushed)

mirielka's pull request #24: "[master, ipa-4-3] Raise error when running ipa-adtrust-install with empty netbios--name" label *pushed* has been added See the full pull-request at https://github.com/freeipa/freeipa/pull/24 -- Manage your subscription for the Freeipa-devel mailing list:

[Freeipa-devel] [freeipa PR#24] [master, ipa-4-3] Raise error when running ipa-adtrust-install with empty netbios--name (+ack)

mirielka's pull request #24: "[master, ipa-4-3] Raise error when running ipa-adtrust-install with empty netbios--name" label *ack* has been added See the full pull-request at https://github.com/freeipa/freeipa/pull/24 -- Manage your subscription for the Freeipa-devel mailing list:

[Freeipa-devel] [freeipa PR#24] [master, ipa-4-3] Raise error when running ipa-adtrust-install with empty netbios--name (comment)

tomaskrizek commented on a pull request """ Works as described. """ See the full comment at https://github.com/freeipa/freeipa/pull/24#issuecomment-243408470 -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to

Re: [Freeipa-devel] [Test][patch-0061] Fixed error in teardown method of replica_promotion tests

On 24.08.2016 16:26, Oleg Fayans wrote: ACK Pushed to master: 5812af84a4a12528e969f14017e9675160b3faef -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#38] Removed incorrect check for returncode (comment)

ofayans commented on a pull request """ Done. """ See the full comment at https://github.com/freeipa/freeipa/pull/38#issuecomment-243407459 -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#38] Removed incorrect check for returncode (synchronize)

ofayans's pull request #38: "Removed incorrect check for returncode" was synchronize See the full pull-request at https://github.com/freeipa/freeipa/pull/38 ... or pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/38/head:pr38 git

[Freeipa-devel] [freeipa PR#38] Removed incorrect check for returncode (synchronize)

ofayans's pull request #38: "Removed incorrect check for returncode" was synchronize See the full pull-request at https://github.com/freeipa/freeipa/pull/38 ... or pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/38/head:pr38 git

[Freeipa-devel] [freeipa PR#39] Tests: Add missing attributes to test_xmlrpc/test_trust tests (opened)

mirielka's pull request #39: "Tests: Add missing attributes to test_xmlrpc/test_trust tests" was opened PR body: """ Several tests in test_xmlrpc/test_trust_plugin.py fail because some attributes are not expected. Fixing the tests so that the extra attributes are recognized.

[Freeipa-devel] [freeipa PR#20] cert: include CA name in cert command output (+pushed)

jcholast's pull request #20: "cert: include CA name in cert command output" label *pushed* has been added See the full pull-request at https://github.com/freeipa/freeipa/pull/20 -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel

[Freeipa-devel] [freeipa PR#20] cert: include CA name in cert command output (closed)

jcholast's pull request #20: "cert: include CA name in cert command output" was closed See the full pull-request at https://github.com/freeipa/freeipa/pull/20 ... or pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/20/head:pr20 git

[Freeipa-devel] [freeipa PR#20] cert: include CA name in cert command output (comment)

mbasti-rh commented on a pull request """ Fixed upstream master: https://fedorahosted.org/freeipa/changeset/117274ff047eb4148fd2624ae800f45e50a7e2cd """ See the full comment at https://github.com/freeipa/freeipa/pull/20#issuecomment-243401428 -- Manage your subscription for the Freeipa-devel

[Freeipa-devel] [freeipa PR#38] Removed incorrect check for returncode (comment)

apophys commented on a pull request """ Can you please rewrite the commit message in second commit to something meaningful? """ See the full comment at https://github.com/freeipa/freeipa/pull/38#issuecomment-243400759 -- Manage your subscription for the Freeipa-devel mailing list:

[Freeipa-devel] [freeipa PR#20] cert: include CA name in cert command output (synchronize)

jcholast's pull request #20: "cert: include CA name in cert command output" was synchronize See the full pull-request at https://github.com/freeipa/freeipa/pull/20 ... or pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/20/head:pr20

[Freeipa-devel] [freeipa PR#20] cert: include CA name in cert command output (+ack)

jcholast's pull request #20: "cert: include CA name in cert command output" label *ack* has been added See the full pull-request at https://github.com/freeipa/freeipa/pull/20 -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel

[Freeipa-devel] [freeipa PR#37] cert: add missing param values to cert-find output (+pushed)

jcholast's pull request #37: "cert: add missing param values to cert-find output" label *pushed* has been added See the full pull-request at https://github.com/freeipa/freeipa/pull/37 -- Manage your subscription for the Freeipa-devel mailing list:

[Freeipa-devel] [freeipa PR#37] cert: add missing param values to cert-find output (comment)

mbasti-rh commented on a pull request """ Fixed upstream master: https://fedorahosted.org/freeipa/changeset/22d5f579bbd8bb452cf1bf620294ab6ade6e7c47 """ See the full comment at https://github.com/freeipa/freeipa/pull/37#issuecomment-243392998 -- Manage your subscription for the Freeipa-devel

Re: [Freeipa-devel] [DESIGN][UPDATE] Time-Based HBAC Policies

On 30.08.2016 11:51, Standa Laznicka wrote: On 08/30/2016 09:34 AM, Standa Laznicka wrote: On 08/30/2016 09:23 AM, Alexander Bokovoy wrote: On Tue, 30 Aug 2016, Jan Cholasta wrote: On 30.8.2016 08:47, Standa Laznicka wrote: On 08/26/2016 05:37 PM, Simo Sorce wrote: On Fri, 2016-08-26 at

[Freeipa-devel] [freeipa PR#38] Removed incorrect check for returncode (synchronize)

ofayans's pull request #38: "Removed incorrect check for returncode" was synchronize See the full pull-request at https://github.com/freeipa/freeipa/pull/38 ... or pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/38/head:pr38 git

Re: [Freeipa-devel] [DESIGN][UPDATE] Time-Based HBAC Policies

On 08/30/2016 09:34 AM, Standa Laznicka wrote: On 08/30/2016 09:23 AM, Alexander Bokovoy wrote: On Tue, 30 Aug 2016, Jan Cholasta wrote: On 30.8.2016 08:47, Standa Laznicka wrote: On 08/26/2016 05:37 PM, Simo Sorce wrote: On Fri, 2016-08-26 at 11:26 -0400, Simo Sorce wrote: On Fri,

[Freeipa-devel] [freeipa PR#38] Removed incorrect check for returncode (opened)

ofayans's pull request #38: "Removed incorrect check for returncode" was opened PR body: """ The server installation in most cases returns response code 0 no matter what happens except for really severe errors. In this case when we try to uninstall the middle replica of a line topology, it fails,

Re: [Freeipa-devel] [Test][patch-0061] Fixed error in teardown method of replica_promotion tests

Bump for review. Other tests depend on this fix too, like replication_layouts_domainlevel_1 On 08/24/2016 04:26 PM, Oleg Fayans wrote: -- Oleg Fayans Quality Engineer FreeIPA team RedHat. -- Manage your subscription for the Freeipa-devel mailing list:

[Freeipa-devel] [freeipa PR#30] Print to debug output answer from CA (comment)

mbasti-rh commented on a pull request """ Fixed upstream master: https://fedorahosted.org/freeipa/changeset/5251cf5d14ffc178ead6e0af053d391f5b7a6782 """ See the full comment at https://github.com/freeipa/freeipa/pull/30#issuecomment-243375582 -- Manage your subscription for the Freeipa-devel

[Freeipa-devel] [freeipa PR#30] Print to debug output answer from CA (closed)

mbasti-rh's pull request #30: "Print to debug output answer from CA" was closed See the full pull-request at https://github.com/freeipa/freeipa/pull/30 ... or pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/30/head:pr30 git checkout

[Freeipa-devel] [freeipa PR#30] Print to debug output answer from CA (+pushed)

mbasti-rh's pull request #30: "Print to debug output answer from CA" label *pushed* has been added See the full pull-request at https://github.com/freeipa/freeipa/pull/30 -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] [PATCH] 0102..0105 Better handling for cert-request to disabled CA

On 08/26/2016 04:19 AM, Fraser Tweedale wrote: The attached patches add better handling of cert-request failure due to target CA being disabled (#6260). To do this, rather than go and do extra work in Dogtag that we would depend on, instead I bite the bullet and refactor ra.request_certificate

[Freeipa-devel] [freeipa PR#25] Added install check before executing ipa-* command (comment)

pspacek commented on a pull request """ All this is consequence of nonsensical defaults in ipalib.constants module. I would say that this needs to be fixed in a systematic way and not by scattering ifs around. IMHO we need to drop nonsensical defaults form ipalib.constants module and handle

Re: [Freeipa-devel] [PATCH 0159] Tests: fix test_forward_zones in test_xmlrpc/test_dns_plugin

On 16.08.2016 13:55, Martin Basti wrote: On 16.08.2016 13:30, Martin Basti wrote: On 12.08.2016 20:00, Petr Spacek wrote: Hello, this is the last patch necessary to get all test_xmlrpc/test_dns_plugin tests to pass! (I hope :-) Tests: fix test_forward_zones in

[Freeipa-devel] [freeipa PR#36] Fix tests for forward zones (comment)

mbasti-rh commented on a pull request """ master: eabe248957f75a1dd3b8d3d330740d929f9e42d9 Only one patch was pushed, there was error found in tooling """ See the full comment at https://github.com/freeipa/freeipa/pull/36#issuecomment-243374067 -- Manage your subscription for the

[Freeipa-devel] [freeipa PR#36] Fix tests for forward zones (closed)

pspacek's pull request #36: "Fix tests for forward zones" was closed See the full pull-request at https://github.com/freeipa/freeipa/pull/36 ... or pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/36/head:pr36 git checkout pr36 --

[Freeipa-devel] [freeipa PR#36] Fix tests for forward zones (+pushed)

pspacek's pull request #36: "Fix tests for forward zones" label *pushed* has been added See the full pull-request at https://github.com/freeipa/freeipa/pull/36 -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to

[Freeipa-devel] [freeipa PR#36] Fix tests for forward zones (comment)

mbasti-rh commented on a pull request """ Fixed upstream master: https://fedorahosted.org/freeipa/changeset/8f1ba05c26921fb787c3eb1bb846a13e06e424ff """ See the full comment at https://github.com/freeipa/freeipa/pull/36#issuecomment-243372212 -- Manage your subscription for the Freeipa-devel

[Freeipa-devel] [freeipa PR#32] Test for caacl-add-service (+pushed)

gkaihorodova's pull request #32: "Test for caacl-add-service" label *pushed* has been added See the full pull-request at https://github.com/freeipa/freeipa/pull/32 -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to

[Freeipa-devel] [freeipa PR#32] Test for caacl-add-service (comment)

mbasti-rh commented on a pull request """ Fixed upstream master: https://fedorahosted.org/freeipa/changeset/572bb55da4aedaae0cf529ab343484db06d89731 """ See the full comment at https://github.com/freeipa/freeipa/pull/32#issuecomment-243371317 -- Manage your subscription for the Freeipa-devel

[Freeipa-devel] [freeipa PR#32] Test for caacl-add-service (closed)

gkaihorodova's pull request #32: "Test for caacl-add-service" was closed See the full pull-request at https://github.com/freeipa/freeipa/pull/32 ... or pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/32/head:pr32 git checkout pr32 --

Re: [Freeipa-devel] [PATCH] 0106 Make host/service cert revocation aware of lightweight CAs

Hi, On 26.8.2016 07:42, Fraser Tweedale wrote: On Fri, Aug 26, 2016 at 03:37:17PM +1000, Fraser Tweedale wrote: Hi all, Attached patch fixes https://fedorahosted.org/freeipa/ticket/6221. It depends on Honza's PR #20 https://github.com/freeipa/freeipa/pull/20. Thanks, Fraser It does help to

[Freeipa-devel] [freeipa PR#36] Fix tests for forward zones (+ack)

pspacek's pull request #36: "Fix tests for forward zones" label *ack* has been added See the full pull-request at https://github.com/freeipa/freeipa/pull/36 -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to

[Freeipa-devel] [freeipa PR#32] Test for caacl-add-service (comment)

tomaskrizek commented on a pull request """ Works as expected. """ See the full comment at https://github.com/freeipa/freeipa/pull/32#issuecomment-243369652 -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to

[Freeipa-devel] [freeipa PR#32] Test for caacl-add-service (+ack)

gkaihorodova's pull request #32: "Test for caacl-add-service" label *ack* has been added See the full pull-request at https://github.com/freeipa/freeipa/pull/32 -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to

[Freeipa-devel] [freeipa PR#33] Update translations (closed)

mbasti-rh's pull request #33: "Update translations" was closed See the full pull-request at https://github.com/freeipa/freeipa/pull/33 ... or pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/33/head:pr33 git checkout pr33 -- Manage

[Freeipa-devel] [freeipa PR#30] Print to debug output answer from CA (comment)

ofayans commented on a pull request """ QA ACK. It rocks: the debug output really helps identify the cause of CA-related errors. See for example [this issue](https://fedorahosted.org/freeipa/ticket/6274) """ See the full comment at

[Freeipa-devel] [freeipa PR#33] Update translations (+ack)

mbasti-rh's pull request #33: "Update translations" label *ack* has been added See the full pull-request at https://github.com/freeipa/freeipa/pull/33 -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#25] Added install check before executing ipa-* command (comment)

jcholast commented on a pull request """ @tomaskrizek: none of them except `ipa trust-find` fail with "cannot connect to 'http://localhost:/ipa/json'", so I would say only `ipa trust-find` needs to be fixed. """ See the full comment at

Re: [Freeipa-devel] [PATCH] 0101 Add ca-disable and ca-enable commands

On 08/30/2016 10:09 AM, Jan Cholasta wrote: Hi, On 30.8.2016 09:56, Martin Babinsky wrote: On 08/25/2016 10:25 AM, Fraser Tweedale wrote: Hi team, The attached patch fixes https://fedorahosted.org/freeipa/ticket/6257. The behaviour of cert-request when the CA is disabled is not very nice

Re: [Freeipa-devel] [PATCH] 0101 Add ca-disable and ca-enable commands

Hi, On 30.8.2016 09:56, Martin Babinsky wrote: On 08/25/2016 10:25 AM, Fraser Tweedale wrote: Hi team, The attached patch fixes https://fedorahosted.org/freeipa/ticket/6257. The behaviour of cert-request when the CA is disabled is not very nice (it reports a server error from Dogtag). The

Re: [Freeipa-devel] [PATCH] 0101 Add ca-disable and ca-enable commands

On 08/25/2016 10:25 AM, Fraser Tweedale wrote: Hi team, The attached patch fixes https://fedorahosted.org/freeipa/ticket/6257. The behaviour of cert-request when the CA is disabled is not very nice (it reports a server error from Dogtag). The Dogtag REST interface gives much better errors so

[Freeipa-devel] [freeipa PR#34] dns: prompt for missing record parts in CLI (comment)

mbasti-rh commented on a pull request """ Can we move DNS record classes to ipalib/dnsrecords.py and use it in both client and server? IMO for server side code it should work just fine, not sure about client. """ See the full comment at

Re: [Freeipa-devel] [DESIGN][UPDATE] Time-Based HBAC Policies

On 08/30/2016 09:23 AM, Alexander Bokovoy wrote: On Tue, 30 Aug 2016, Jan Cholasta wrote: On 30.8.2016 08:47, Standa Laznicka wrote: On 08/26/2016 05:37 PM, Simo Sorce wrote: On Fri, 2016-08-26 at 11:26 -0400, Simo Sorce wrote: On Fri, 2016-08-26 at 18:09 +0300, Alexander Bokovoy wrote: On

Re: [Freeipa-devel] [PATCH] 0220 move /bin/ipa to freeipa-client

On 25.8.2016 13:09, Alexander Bokovoy wrote: On Thu, 25 Aug 2016, Jan Cholasta wrote: Hi, On 25.8.2016 11:27, Alexander Bokovoy wrote: Hi, attached patch moves ipa CLI to freeipa-client and obsoletes freeipa-admintools The Obsoletes (both) should be on version < 4.4.1 rather than

Re: [Freeipa-devel] [DESIGN][UPDATE] Time-Based HBAC Policies

On Tue, 30 Aug 2016, Jan Cholasta wrote: On 30.8.2016 08:47, Standa Laznicka wrote: On 08/26/2016 05:37 PM, Simo Sorce wrote: On Fri, 2016-08-26 at 11:26 -0400, Simo Sorce wrote: On Fri, 2016-08-26 at 18:09 +0300, Alexander Bokovoy wrote: On Fri, 26 Aug 2016, Simo Sorce wrote: On Fri,

[Freeipa-devel] [freeipa PR#25] Added install check before executing ipa-* command (comment)

tomaskrizek commented on a pull request """ The following commands still fail with incorrect error message: - `ipa trust-find` - `ipa-compat-manage` - `ipa-csreplica-manage list` - `ipa-join` - `ipa-ldap-updater` - `ipa-replica-install` - `ipa-restore` Details: ``` [root@master

Re: [Freeipa-devel] [DESIGN][UPDATE] Time-Based HBAC Policies

On 30.8.2016 08:47, Standa Laznicka wrote: On 08/26/2016 05:37 PM, Simo Sorce wrote: On Fri, 2016-08-26 at 11:26 -0400, Simo Sorce wrote: On Fri, 2016-08-26 at 18:09 +0300, Alexander Bokovoy wrote: On Fri, 26 Aug 2016, Simo Sorce wrote: On Fri, 2016-08-26 at 12:39 +0200, Martin Basti wrote:

Re: [Freeipa-devel] [DESIGN][UPDATE] Time-Based HBAC Policies

On 08/26/2016 05:37 PM, Simo Sorce wrote: On Fri, 2016-08-26 at 11:26 -0400, Simo Sorce wrote: On Fri, 2016-08-26 at 18:09 +0300, Alexander Bokovoy wrote: On Fri, 26 Aug 2016, Simo Sorce wrote: On Fri, 2016-08-26 at 12:39 +0200, Martin Basti wrote: I miss "why" part of "To be able to handle

Re: [Freeipa-devel] [PATCH] 0095 cert-request: allow directoryName in SAN extension

On 29.8.2016 07:57, Fraser Tweedale wrote: On Fri, Aug 26, 2016 at 10:41:37AM +0200, Jan Cholasta wrote: Hi, On 22.7.2016 07:18, Fraser Tweedale wrote: While I was poking around SAN-processing code, I decided to implement a small enhancement: allowing the subject principal's DN to appear in

[Freeipa-devel] [freeipa PR#37] cert: add missing param values to cert-find output (comment)

abbra commented on a pull request """ LGTM. """ See the full comment at https://github.com/freeipa/freeipa/pull/37#issuecomment-243346328 -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#37] cert: add missing param values to cert-find output (+ack)

jcholast's pull request #37: "cert: add missing param values to cert-find output" label *ack* has been added See the full pull-request at https://github.com/freeipa/freeipa/pull/37 -- Manage your subscription for the Freeipa-devel mailing list:

[Freeipa-devel] [freeipa PR#37] cert: add missing param values to cert-find output (opened)

jcholast's pull request #37: "cert: add missing param values to cert-find output" was opened PR body: """ Add back `serial_number_hex` and `revoked` param values to cert-find output accidentally removed in commit c718ef058847bb39e78236e8af0ad69ac961bbcf.

[Freeipa-devel] [freeipa PR#3] User add fix #6199 (comment)

jcholast commented on a pull request """ Fixed upstream master: https://fedorahosted.org/freeipa/changeset/5c50b265e6b5a0d06f213b5eb581c96e3392aeea """ See the full comment at https://github.com/freeipa/freeipa/pull/3#issuecomment-243344321 -- Manage your subscription for the Freeipa-devel

[Freeipa-devel] [freeipa PR#3] User add fix #6199 (closed)

mbasti-rh's pull request #3: "User add fix #6199" was closed See the full pull-request at https://github.com/freeipa/freeipa/pull/3 ... or pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3/head:pr3 git checkout pr3 -- Manage your

[Freeipa-devel] [freeipa PR#3] User add fix #6199 (+ack)

mbasti-rh's pull request #3: "User add fix #6199" label *ack* has been added See the full pull-request at https://github.com/freeipa/freeipa/pull/3 -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#29] Enable LDAPS in replica promotion (comment)

jcholast commented on a pull request """ Fixed upstream master: https://fedorahosted.org/freeipa/changeset/89de60c5d8ba64d619101a7498b8c4469b6e50ae """ See the full comment at https://github.com/freeipa/freeipa/pull/29#issuecomment-243343065 -- Manage your subscription for the Freeipa-devel

[Freeipa-devel] [freeipa PR#29] Enable LDAPS in replica promotion (+pushed)

tomaskrizek's pull request #29: "Enable LDAPS in replica promotion" label *pushed* has been added See the full pull-request at https://github.com/freeipa/freeipa/pull/29 -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel

[Freeipa-devel] [freeipa PR#29] Enable LDAPS in replica promotion (+ack)

tomaskrizek's pull request #29: "Enable LDAPS in replica promotion" label *ack* has been added See the full pull-request at https://github.com/freeipa/freeipa/pull/29 -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute