[Freeipa-devel] [freeipa PR#756][comment] Added plugins directory to paclient subpackages

URL: https://github.com/freeipa/freeipa/pull/756 Title: #756: Added plugins directory to paclient subpackages abbra commented: """ Note that we want this fix in 4.4 branch as well -- it affects F25. """ See the full comment at https://github.com/freeipa/freeipa/pull/756#issuecomment-299089291

[Freeipa-devel] [freeipa PR#736][synchronized] Fixing the cert-request command comparing whole email address case-sensitively.

URL: https://github.com/freeipa/freeipa/pull/736 Author: felipevolpone Title: #736: Fixing the cert-request command comparing whole email address case-sensitively. Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch

[Freeipa-devel] [freeipa PR#736][synchronized] Fixing the cert-request command comparing whole email address case-sensitively.

URL: https://github.com/freeipa/freeipa/pull/736 Author: felipevolpone Title: #736: Fixing the cert-request command comparing whole email address case-sensitively. Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch

[Freeipa-devel] [freeipa PR#761][opened] Fixing adding authenticator indicators to host

URL: https://github.com/freeipa/freeipa/pull/761 Author: felipevolpone Title: #761: Fixing adding authenticator indicators to host Action: opened PR body: """ The check for krbprincipalaux in the entries is now made case-insensitively. https://pagure.io/freeipa/issue/6911

Re: [Freeipa-devel] Automated Fedora update testing

On Wed, 2017-05-03 at 09:26 +0200, Petr Vobornik wrote: > > Is there a way now to check current state of current Fedoras > automatically using a script - e.g. avoid parsing mailing list or going > through runs in OpenQA? The script that generates the mails is called check-compose:

[Freeipa-devel] [freeipa PR#755][closed] Use proper SELinux context with http.keytab

URL: https://github.com/freeipa/freeipa/pull/755 Author: MartinBasti Title: #755: Use proper SELinux context with http.keytab Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/755/head:pr755 git checkout pr755 --

[Freeipa-devel] [freeipa PR#756][+pushed] Added plugins directory to paclient subpackages

URL: https://github.com/freeipa/freeipa/pull/756 Title: #756: Added plugins directory to paclient subpackages Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#755][+pushed] Use proper SELinux context with http.keytab

URL: https://github.com/freeipa/freeipa/pull/755 Title: #755: Use proper SELinux context with http.keytab Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#755][comment] Use proper SELinux context with http.keytab

URL: https://github.com/freeipa/freeipa/pull/755 Title: #755: Use proper SELinux context with http.keytab martbab commented: """ master: * 7f4c2fbd975d09c01e6898a4eb70d7dfea1171b4 Use proper SELinux context with http.keytab ipa-4-5: * bda733db9ede3307595963a8c086e1b700c41e25 Use proper

[Freeipa-devel] [freeipa PR#756][closed] Added plugins directory to paclient subpackages

URL: https://github.com/freeipa/freeipa/pull/756 Author: olivergs Title: #756: Added plugins directory to paclient subpackages Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/756/head:pr756 git checkout pr756 --

[Freeipa-devel] [freeipa PR#756][comment] Added plugins directory to paclient subpackages

URL: https://github.com/freeipa/freeipa/pull/756 Title: #756: Added plugins directory to paclient subpackages MartinBasti commented: """ master: * 548014f03eeababfd1b49e4bc9ac608633cb9b98 Added plugins directory to paclient subpackages """ See the full comment at

[Freeipa-devel] [freeipa PR#756][comment] Added plugins directory to paclient subpackages

URL: https://github.com/freeipa/freeipa/pull/756 Title: #756: Added plugins directory to paclient subpackages MartinBasti commented: """ Thank you! Just for the record, you could use `git push --force` and keep the original PR opened :-) """ See the full comment at

[Freeipa-devel] [freeipa PR#756][+ack] Added plugins directory to paclient subpackages

URL: https://github.com/freeipa/freeipa/pull/756 Title: #756: Added plugins directory to paclient subpackages Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#755][+ack] Use proper SELinux context with http.keytab

URL: https://github.com/freeipa/freeipa/pull/755 Title: #755: Use proper SELinux context with http.keytab Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#755][synchronized] Use proper SELinux context with http.keytab

URL: https://github.com/freeipa/freeipa/pull/755 Author: MartinBasti Title: #755: Use proper SELinux context with http.keytab Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/755/head:pr755 git checkout

[Freeipa-devel] [freeipa PR#760][opened] Run ipa-custodia under Python 2

URL: https://github.com/freeipa/freeipa/pull/760 Author: tiran Title: #760: Run ipa-custodia under Python 2 Action: opened PR body: """ Closes: https://pagure.io/freeipa/issue/6926 Signed-off-by: Christian Heimes """ To pull the PR as Git branch: git remote add ghfreeipa

[Freeipa-devel] [freeipa PR#679][closed] Make sure remote hosts have our keys

URL: https://github.com/freeipa/freeipa/pull/679 Author: simo5 Title: #679: Make sure remote hosts have our keys Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/679/head:pr679 git checkout pr679 -- Manage your

[Freeipa-devel] [freeipa PR#679][+pushed] Make sure remote hosts have our keys

URL: https://github.com/freeipa/freeipa/pull/679 Title: #679: Make sure remote hosts have our keys Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#753][synchronized] Check CA status: add HTTP timeout

URL: https://github.com/freeipa/freeipa/pull/753 Author: MartinBasti Title: #753: Check CA status: add HTTP timeout Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/753/head:pr753 git checkout pr753 From

[Freeipa-devel] [freeipa PR#679][comment] Make sure remote hosts have our keys

URL: https://github.com/freeipa/freeipa/pull/679 Title: #679: Make sure remote hosts have our keys tomaskrizek commented: """ ipa-4-5: * 5f8d1119fe38807e86930af50d3680e28efe68eb Make sure remote hosts have our keys master: * 1f9f84a66d6cf9391b91ee4a13ac0f1119212578 Make sure remote hosts

[Freeipa-devel] [freeipa PR#759][closed] kra install: update installation failure message

URL: https://github.com/freeipa/freeipa/pull/759 Author: tomaskrizek Title: #759: kra install: update installation failure message Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/759/head:pr759 git checkout

[Freeipa-devel] [freeipa PR#759][+pushed] kra install: update installation failure message

URL: https://github.com/freeipa/freeipa/pull/759 Title: #759: kra install: update installation failure message Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#759][comment] kra install: update installation failure message

URL: https://github.com/freeipa/freeipa/pull/759 Title: #759: kra install: update installation failure message tomaskrizek commented: """ ipa-4-5: * a4410b41f8dc58b81f02ccc42483dcfe63ddede9 kra install: update installation failure message master: * 0fa6c4d96ef2a55f853eedf3fb89433863e29ddf

[Freeipa-devel] [freeipa PR#754][+pushed] ipa-server-install with external CA: fix pkinit cert issuance

URL: https://github.com/freeipa/freeipa/pull/754 Title: #754: ipa-server-install with external CA: fix pkinit cert issuance Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#754][closed] ipa-server-install with external CA: fix pkinit cert issuance

URL: https://github.com/freeipa/freeipa/pull/754 Author: flo-renaud Title: #754: ipa-server-install with external CA: fix pkinit cert issuance Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/754/head:pr754 git

[Freeipa-devel] [freeipa PR#754][comment] ipa-server-install with external CA: fix pkinit cert issuance

URL: https://github.com/freeipa/freeipa/pull/754 Title: #754: ipa-server-install with external CA: fix pkinit cert issuance tomaskrizek commented: """ ipa-4-5: * 8107125e177ac9f378d149d7b0fa1d3774c9be3a ipa-server-install with external CA: fix pkinit cert issuance master: *

[Freeipa-devel] [freeipa PR#679][+ack] Make sure remote hosts have our keys

URL: https://github.com/freeipa/freeipa/pull/679 Title: #679: Make sure remote hosts have our keys Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#679][comment] Make sure remote hosts have our keys

URL: https://github.com/freeipa/freeipa/pull/679 Title: #679: Make sure remote hosts have our keys stlaz commented: """ Removing the ACK to retest on 4.4.4 with Fedora custodia version. """ See the full comment at https://github.com/freeipa/freeipa/pull/679#issuecomment-298916263 -- Manage

[Freeipa-devel] [freeipa PR#679][-ack] Make sure remote hosts have our keys

URL: https://github.com/freeipa/freeipa/pull/679 Title: #679: Make sure remote hosts have our keys Label: -ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#679][+ack] Make sure remote hosts have our keys

URL: https://github.com/freeipa/freeipa/pull/679 Title: #679: Make sure remote hosts have our keys Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#757][synchronized] ca, kra install: validate DM password

URL: https://github.com/freeipa/freeipa/pull/757 Author: tomaskrizek Title: #757: ca, kra install: validate DM password Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/757/head:pr757 git checkout pr757

[Freeipa-devel] [freeipa PR#679][comment] Make sure remote hosts have our keys

URL: https://github.com/freeipa/freeipa/pull/679 Title: #679: Make sure remote hosts have our keys stlaz commented: """ Will do, ACKing this in the meantime. """ See the full comment at https://github.com/freeipa/freeipa/pull/679#issuecomment-298913680 -- Manage your subscription for the

[Freeipa-devel] [freeipa PR#759][+ack] kra install: update installation failure message

URL: https://github.com/freeipa/freeipa/pull/759 Title: #759: kra install: update installation failure message Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#759][opened] kra install: update installation failure message

URL: https://github.com/freeipa/freeipa/pull/759 Author: tomaskrizek Title: #759: kra install: update installation failure message Action: opened PR body: """ When installation fails, do not advise the user to use the obsoleted --uninstall option. Signed-off-by: Tomas Krizek

[Freeipa-devel] [freeipa PR#758][opened] install: fix CA-less PKINIT

URL: https://github.com/freeipa/freeipa/pull/758 Author: HonzaCholasta Title: #758: install: fix CA-less PKINIT Action: opened PR body: """ **certdb: add named trust flag constants** Add named constants for common trust flag combinations. Use the named constants instead of trust flags

[Freeipa-devel] [freeipa PR#755][synchronized] Use proper SELinux context with http.keytab

URL: https://github.com/freeipa/freeipa/pull/755 Author: MartinBasti Title: #755: Use proper SELinux context with http.keytab Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/755/head:pr755 git checkout

[Freeipa-devel] [freeipa PR#679][comment] Make sure remote hosts have our keys

URL: https://github.com/freeipa/freeipa/pull/679 Title: #679: Make sure remote hosts have our keys simo5 commented: """ We need to find why it breaks though, but yeah I think we can go forward with this patch of others agree. Can you open a separate bug for the failure you got ? """ See the

[Freeipa-devel] [freeipa PR#757][opened] ca, kra install: validate DM password

URL: https://github.com/freeipa/freeipa/pull/757 Author: tomaskrizek Title: #757: ca, kra install: validate DM password Action: opened PR body: """ Prevent CA and KRA installation from proceeding if provided DM password is invalid to avoid broken installations with no possibility to

[Freeipa-devel] [freeipa PR#679][comment] Make sure remote hosts have our keys

URL: https://github.com/freeipa/freeipa/pull/679 Title: #679: Make sure remote hosts have our keys stlaz commented: """ It seems that replica install fails even without this patch so it's OK to go with it? """ See the full comment at

[Freeipa-devel] [freeipa PR#749][comment] Added plugins directory to python2-ipaclient subpackage

URL: https://github.com/freeipa/freeipa/pull/749 Title: #749: Added plugins directory to python2-ipaclient subpackage olivergs commented: """ Created new PR #756 """ See the full comment at https://github.com/freeipa/freeipa/pull/749#issuecomment-298892370 -- Manage your subscription for the

[Freeipa-devel] [freeipa PR#756][comment] Added plugins directory to paclient subpackages

URL: https://github.com/freeipa/freeipa/pull/756 Title: #756: Added plugins directory to paclient subpackages olivergs commented: """ Continuation of PR #749 """ See the full comment at https://github.com/freeipa/freeipa/pull/756#issuecomment-298892402 -- Manage your subscription for the

[Freeipa-devel] [freeipa PR#756][opened] Added plugins directory to paclient subpackages

URL: https://github.com/freeipa/freeipa/pull/756 Author: olivergs Title: #756: Added plugins directory to paclient subpackages Action: opened PR body: """ """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/756/head:pr756

[Freeipa-devel] [freeipa PR#749][closed] Added plugins directory to python2-ipaclient subpackage

URL: https://github.com/freeipa/freeipa/pull/749 Author: olivergs Title: #749: Added plugins directory to python2-ipaclient subpackage Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/749/head:pr749 git checkout

[Freeipa-devel] [freeipa PR#679][comment] Make sure remote hosts have our keys

URL: https://github.com/freeipa/freeipa/pull/679 Title: #679: Make sure remote hosts have our keys stlaz commented: """ Not sure, I will try that. """ See the full comment at https://github.com/freeipa/freeipa/pull/679#issuecomment-298890816 -- Manage your subscription for the Freeipa-devel

[Freeipa-devel] [freeipa PR#749][comment] Added plugins directory to python2-ipaclient subpackage

URL: https://github.com/freeipa/freeipa/pull/749 Title: #749: Added plugins directory to python2-ipaclient subpackage MartinBasti commented: """ Thanks, could you please merge into one patch? """ See the full comment at https://github.com/freeipa/freeipa/pull/749#issuecomment-298890770 --

[Freeipa-devel] [freeipa PR#755][opened] Use proper SELinux context with http.keytab

URL: https://github.com/freeipa/freeipa/pull/755 Author: MartinBasti Title: #755: Use proper SELinux context with http.keytab Action: opened PR body: """ During upgrade keytab is moved to a new location using "move" operation. This commit replaces move operation with "copy" and "remove" that

[Freeipa-devel] [freeipa PR#679][comment] Make sure remote hosts have our keys

URL: https://github.com/freeipa/freeipa/pull/679 Title: #679: Make sure remote hosts have our keys simo5 commented: """ I meant my setup was unclean. I will try to reproduce here. Does master w/o this patch work properly against 4.4.4 ? """ See the full comment at

[Freeipa-devel] [freeipa PR#679][comment] Make sure remote hosts have our keys

URL: https://github.com/freeipa/freeipa/pull/679 Title: #679: Make sure remote hosts have our keys stlaz commented: """ I was able to do it two times in a row with the same master, I can try to reinstall both the master and replica if you want. What do you mean "unclean"? It's a clean 4.4.4

[Freeipa-devel] [freeipa PR#679][comment] Make sure remote hosts have our keys

URL: https://github.com/freeipa/freeipa/pull/679 Title: #679: Make sure remote hosts have our keys stlaz commented: """ I was able to do it two times in a row with the same master, I can try to reinstall both the master and replica if you want. What do you mean "unclean"? It's a clean 4.4.4

[Freeipa-devel] [freeipa PR#679][comment] Make sure remote hosts have our keys

URL: https://github.com/freeipa/freeipa/pull/679 Title: #679: Make sure remote hosts have our keys simo5 commented: """ I've seen this once but thought it was a fluke due to my "unclean" master, as the following times it did not happen. Can you reproduce the error against 4.4.4 consistently ?

[Freeipa-devel] [freeipa PR#749][comment] Added plugins directory to python2-ipaclient subpackage

URL: https://github.com/freeipa/freeipa/pull/749 Title: #749: Added plugins directory to python2-ipaclient subpackage olivergs commented: """ Added :) """ See the full comment at https://github.com/freeipa/freeipa/pull/749#issuecomment-298880927 -- Manage your subscription for the

[Freeipa-devel] [freeipa PR#749][synchronized] Added plugins directory to python2-ipaclient subpackage

URL: https://github.com/freeipa/freeipa/pull/749 Author: olivergs Title: #749: Added plugins directory to python2-ipaclient subpackage Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/749/head:pr749 git

[Freeipa-devel] [freeipa PR#679][comment] Make sure remote hosts have our keys

URL: https://github.com/freeipa/freeipa/pull/679 Title: #679: Make sure remote hosts have our keys stlaz commented: """ Seems to work fine against current master, but fails with ``` Configuring ipa-custodia [1/4]: Generating ipa-custodia config file [2/4]: Generating ipa-custodia keys

[Freeipa-devel] [freeipa PR#754][+ack] ipa-server-install with external CA: fix pkinit cert issuance

URL: https://github.com/freeipa/freeipa/pull/754 Title: #754: ipa-server-install with external CA: fix pkinit cert issuance Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#754][comment] ipa-server-install with external CA: fix pkinit cert issuance

URL: https://github.com/freeipa/freeipa/pull/754 Title: #754: ipa-server-install with external CA: fix pkinit cert issuance stlaz commented: """ LGTM, will test it. """ See the full comment at https://github.com/freeipa/freeipa/pull/754#issuecomment-298853939 -- Manage your subscription for

[Freeipa-devel] [freeipa PR#729][synchronized] Turn on NSSOCSP check in mod_nss conf

URL: https://github.com/freeipa/freeipa/pull/729 Author: pvomacka Title: #729: Turn on NSSOCSP check in mod_nss conf Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/729/head:pr729 git checkout pr729 From

[Freeipa-devel] [freeipa PR#729][comment] Turn on NSSOCSP check in mod_nss conf

URL: https://github.com/freeipa/freeipa/pull/729 Title: #729: Turn on NSSOCSP check in mod_nss conf pvomacka commented: """ @MartinBasti thank you for comments, fixed. """ See the full comment at https://github.com/freeipa/freeipa/pull/729#issuecomment-298853135 -- Manage your subscription

[Freeipa-devel] [freeipa PR#754][opened] ipa-server-install with external CA: fix pkinit cert issuance

URL: https://github.com/freeipa/freeipa/pull/754 Author: flo-renaud Title: #754: ipa-server-install with external CA: fix pkinit cert issuance Action: opened PR body: """ ipa-server-install with external CA fails to issue pkinit certs. This happens because the installer calls krb =

[Freeipa-devel] [freeipa PR#749][comment] Added plugins directory to python2-ipaclient subpackage

URL: https://github.com/freeipa/freeipa/pull/749 Title: #749: Added plugins directory to python2-ipaclient subpackage MartinBasti commented: """ Hello, could you please also add it for python3-ipaclient too? """ See the full comment at

[Freeipa-devel] [freeipa PR#728][synchronized] ipa-cacert-manage: add --external-ca-type

URL: https://github.com/freeipa/freeipa/pull/728 Author: HonzaCholasta Title: #728: ipa-cacert-manage: add --external-ca-type Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/728/head:pr728 git checkout

[Freeipa-devel] [freeipa PR#679][comment] Make sure remote hosts have our keys

URL: https://github.com/freeipa/freeipa/pull/679 Title: #679: Make sure remote hosts have our keys stlaz commented: """ Seems to work fine against current master, but fails with ``` Configuring ipa-custodia [1/4]: Generating ipa-custodia config file [2/4]: Generating ipa-custodia keys

Re: [Freeipa-devel] Automated Fedora update testing

On 04/29/2017 02:07 AM, Adam Williamson wrote: Hi folks! I thought this might be of interest to the FreeIPA community, so I thought I'd write it up here in case anyone missed it elsewhere. Until recently we ran these tests only on Fedora's nightly development release distribution composes.

[Freeipa-devel] [freeipa PR#679][comment] Make sure remote hosts have our keys

URL: https://github.com/freeipa/freeipa/pull/679 Title: #679: Make sure remote hosts have our keys stlaz commented: """ @simo5 will check, sorry for not replying yesterday, I was no more at my machine. """ See the full comment at