[Freeipa-devel] [freeipa PR#370][comment] [EXPERIMENT] ci: send build log to paste.fedoraproject.org

2017-01-04 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/370 Title: #370: [EXPERIMENT] ci: send build log to paste.fedoraproject.org stlaz commented: """ Um, sorry, but I fail to see the real upside here, perhaps I am missing something. If I see here on github that a build of my PR failed, and I really

[Freeipa-devel] [freeipa PR#367][comment] Remove nsslib from IPA

2017-01-04 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/367 Title: #367: Remove nsslib from IPA stlaz commented: """ @rcritten I spoke to the NSS people who assured me it's the intended behavior. But thanks for the remainder, I will open a Bugzilla for that as well, I was considering it before

Re: [Freeipa-devel] CI: exporting test runner output

2017-01-04 Thread Martin Babinsky
On 01/05/2017 08:06 AM, Fraser Tweedale wrote: Hi all, Although it has been discussed before and met with some skepticism, here is a POC that exporting test runner output to, e.g. a pastebin, does work: - experimental commit: https://github.com/freeipa/freeipa/pull/370 - example paste:

[Freeipa-devel] [freeipa PR#370][comment] [EXPERIMENT] ci: send build log to paste.fedoraproject.org

2017-01-04 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/370 Title: #370: [EXPERIMENT] ci: send build log to paste.fedoraproject.org stlaz commented: """ Um, sorry, but I fail to see the real upside here, perhaps I am missing something. If I see here on github that a build of my PR failed, and I really

[Freeipa-devel] CI: exporting test runner output

2017-01-04 Thread Fraser Tweedale
Hi all, Although it has been discussed before and met with some skepticism, here is a POC that exporting test runner output to, e.g. a pastebin, does work: - experimental commit: https://github.com/freeipa/freeipa/pull/370 - example paste: https://paste.fedoraproject.org/520085/ (it is gzipped

[Freeipa-devel] [freeipa PR#370][synchronized] [EXPERIMENT] ci: send build log to paste.fedoraproject.org

2017-01-04 Thread frasertweedale
URL: https://github.com/freeipa/freeipa/pull/370 Author: frasertweedale Title: #370: [EXPERIMENT] ci: send build log to paste.fedoraproject.org Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa

[Freeipa-devel] [freeipa PR#370][comment] [EXPERIMENT] ci: send build log to paste.fedoraproject.org

2017-01-04 Thread frasertweedale
URL: https://github.com/freeipa/freeipa/pull/370 Title: #370: [EXPERIMENT] ci: send build log to paste.fedoraproject.org frasertweedale commented: """ OK, so we can ship a paste off but paste.fedoraproject.org does not like the file size (~1.8M). In this case the HTTP response is 200 OK and

[Freeipa-devel] [freeipa PR#370][synchronized] [EXPERIMENT] ci: send build log to paste.fedoraproject.org

2017-01-04 Thread frasertweedale
URL: https://github.com/freeipa/freeipa/pull/370 Author: frasertweedale Title: #370: [EXPERIMENT] ci: send build log to paste.fedoraproject.org Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa

[Freeipa-devel] [freeipa PR#370][synchronized] [EXPERIMENT] ci: send build log to paste.fedoraproject.org

2017-01-04 Thread frasertweedale
URL: https://github.com/freeipa/freeipa/pull/370 Author: frasertweedale Title: #370: [EXPERIMENT] ci: send build log to paste.fedoraproject.org Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa

[Freeipa-devel] [freeipa PR#370][synchronized] [EXPERIMENT] ci: send build log to paste.fedoraproject.org

2017-01-04 Thread frasertweedale
URL: https://github.com/freeipa/freeipa/pull/370 Author: frasertweedale Title: #370: [EXPERIMENT] ci: send build log to paste.fedoraproject.org Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa

[Freeipa-devel] [freeipa PR#370][opened] [EXPERIMENT] ci: send build log to paste.fedoraproject.org

2017-01-04 Thread frasertweedale
URL: https://github.com/freeipa/freeipa/pull/370 Author: frasertweedale Title: #370: [EXPERIMENT] ci: send build log to paste.fedoraproject.org Action: opened PR body: """ This commit is just to see if we can ship our build logs off travis to a pastebin. If we can, we can refine the approach

[Freeipa-devel] [freeipa PR#359][comment] dogtag: search past the first 100 certificates

2017-01-04 Thread frasertweedale
URL: https://github.com/freeipa/freeipa/pull/359 Title: #359: dogtag: search past the first 100 certificates frasertweedale commented: """ @stlaz as I see it, the `_ldap_search` can potentially search all objects of a particular type (user/service/host), which have `(userCertificate=*)`. The

[Freeipa-devel] ypcat passwd lists disabled accounts

2017-01-04 Thread Carroll, Bob
Should ypcat be filtering out the disabled accounts? Bob Carroll Sr. Analyst/Technical Unix Services/ConocoPhillips/Information Technology Phone: +1 281 293-1438 Mobile: +1 918 841-1131 Submit a ServiceNow

[Freeipa-devel] [freeipa PR#314][comment] RFC: privilege separation for ipa framework code

2017-01-04 Thread simo5
URL: https://github.com/freeipa/freeipa/pull/314 Title: #314: RFC: privilege separation for ipa framework code simo5 commented: """ Rebased on master and fixed a couple minor lint issues """ See the full comment at https://github.com/freeipa/freeipa/pull/314#issuecomment-270394337 -- Manage

[Freeipa-devel] [freeipa PR#366][synchronized] Use pytest conftest.py

2017-01-04 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/366 Author: tiran Title: #366: Use pytest conftest.py Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/366/head:pr366 git checkout pr366 From

[Freeipa-devel] [freeipa PR#367][comment] Remove nsslib from IPA

2017-01-04 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/367 Title: #367: Remove nsslib from IPA stlaz commented: """ @rcritten I spoke to the NSS people who assured me it's the intended behavior. But thanks for the remainder, I will open a Bugzilla for that as well, I was considering it before

[Freeipa-devel] [freeipa PR#367][comment] Remove nsslib from IPA

2017-01-04 Thread rcritten
URL: https://github.com/freeipa/freeipa/pull/367 Title: #367: Remove nsslib from IPA rcritten commented: """ Did you open a bug against NSS or python-nss regarding the PIN requirement? """ See the full comment at https://github.com/freeipa/freeipa/pull/367#issuecomment-270382386 -- Manage

[Freeipa-devel] [freeipa PR#366][synchronized] Use pytest conftest.py

2017-01-04 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/366 Author: tiran Title: #366: Use pytest conftest.py Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/366/head:pr366 git checkout pr366 From

[Freeipa-devel] [freeipa PR#369][opened] Catch ValueError raised by pytest.config.getoption()

2017-01-04 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/369 Author: tiran Title: #369: Catch ValueError raised by pytest.config.getoption() Action: opened PR body: """ pytest.config.getoption() can raise ValueError for unknown options, too. I ran into the issue while I was working on PR #366 """ To

[Freeipa-devel] [freeipa PR#294][synchronized] client, platform: Use paths.SSH* instead of get_config_dir().

2017-01-04 Thread tjaalton
URL: https://github.com/freeipa/freeipa/pull/294 Author: tjaalton Title: #294: client, platform: Use paths.SSH* instead of get_config_dir(). Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/294/head:pr294

[Freeipa-devel] [freeipa PR#352][comment] Clarify meaning of --domain and --realm in installers

2017-01-04 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/352 Title: #352: Clarify meaning of --domain and --realm in installers stlaz commented: """ The fixes to raised issues are fixed in https://github.com/freeipa/freeipa/issues/362 """ See the full comment at

[Freeipa-devel] [freeipa PR#352][+rejected] Clarify meaning of --domain and --realm in installers

2017-01-04 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/352 Title: #352: Clarify meaning of --domain and --realm in installers Label: +rejected -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#352][closed] Clarify meaning of --domain and --realm in installers

2017-01-04 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/352 Author: pspacek Title: #352: Clarify meaning of --domain and --realm in installers Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/352/head:pr352 git checkout

[Freeipa-devel] [freeipa PR#334][comment] Py3: Fix ToASCII method

2017-01-04 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/334 Title: #334: Py3: Fix ToASCII method tiran commented: """ I have kicked Travis. Let's see if the test is passing now. """ See the full comment at https://github.com/freeipa/freeipa/pull/334#issuecomment-270351974 -- Manage your subscription

[Freeipa-devel] [freeipa PR#368][opened] WebUI: fix incorrect behavior of ESC button on combobox

2017-01-04 Thread pvomacka
URL: https://github.com/freeipa/freeipa/pull/368 Author: pvomacka Title: #368: WebUI: fix incorrect behavior of ESC button on combobox Action: opened PR body: """ When combobox is opened then ESC key should close it. There was a bug that ESC key closed also the dialog. It was caused by

[Freeipa-devel] [freeipa PR#361][comment] This PR implements a number of improvements for our Travis CI:

2017-01-04 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/361 Title: #361: This PR implements a number of improvements for our Travis CI: stlaz commented: """ @martbab My naive solution is to do something like ```bash LINE=`grep -n -m 1 $CI_TRAVIS_LOG -e "=== FAILURES ===" | cut -d: -f1` LINES=`wc -l

[Freeipa-devel] [freeipa PR#367][comment] Remove nsslib from IPA

2017-01-04 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/367 Title: #367: Remove nsslib from IPA stlaz commented: """ You're right, I should probably write some design. The current implementation does not check CRL or OSCP, so we're "fine" with this change. There is a plan on doing CRL check in

[Freeipa-devel] [freeipa PR#361][comment] This PR implements a number of improvements for our Travis CI:

2017-01-04 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/361 Title: #361: This PR implements a number of improvements for our Travis CI: martbab commented: """ @stlaz thanks for an idea, that will actually make the log output much more useful. I will try to think about it. """ See the full comment at

[Freeipa-devel] [freeipa PR#367][comment] Remove nsslib from IPA

2017-01-04 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/367 Title: #367: Remove nsslib from IPA tiran commented: """ * Ticket 5695 is about ```FreeIPA on FIPS enabled systems```. Moving from NSS to OpenSSL is a big change and should be tracked by its own ticket. * Are customers fine with the fact that

[Freeipa-devel] [freeipa PR#367][comment] Remove nsslib from IPA

2017-01-04 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/367 Title: #367: Remove nsslib from IPA tiran commented: """ * Ticket 5695 looks wrong, it's about ```FreeIPA on FIPS enabled systems```. * Are customers fine with the fact that FreeIPA clients will no longer very CRLs? OpenSSL does not

[Freeipa-devel] [freeipa PR#367][synchronized] Remove nsslib from IPA

2017-01-04 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/367 Author: stlaz Title: #367: Remove nsslib from IPA Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/367/head:pr367 git checkout pr367 From

[Freeipa-devel] [freeipa PR#361][comment] This PR implements a number of improvements for our Travis CI:

2017-01-04 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/361 Title: #361: This PR implements a number of improvements for our Travis CI: stlaz commented: """ I assume the licence headers did not break the automember tests so this could be pushed. Just a brief question: would it be reasonable to get the

[Freeipa-devel] [freeipa PR#359][comment] dogtag: search past the first 100 certificates

2017-01-04 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/359 Title: #359: dogtag: search past the first 100 certificates stlaz commented: """ @frasertweedale if `_ldap_search` is performed with correct filters, `sizelimit=0` is not the correct solution at least for CLI which should either follow the

[Freeipa-devel] [freeipa PR#367][edited] Remove nsslib from IPA

2017-01-04 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/367 Author: stlaz Title: #367: Remove nsslib from IPA Action: edited Changed field: body Original value: """ This batch of patches removes NSSConnection along with the whole ipapython.nsslib from IPA and replaces it with more standard

[Freeipa-devel] [freeipa PR#367][opened] Remove nsslib from IPA

2017-01-04 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/367 Author: stlaz Title: #367: Remove nsslib from IPA Action: opened PR body: """ This batch of patches removes NSSConnection along with the whole ipapython.nsslib from IPA and replaces it with more standard httplib.HTTPSConnection.