[Freeipa-devel] [freeipa PR#591][comment] spec file: add unconditional python-setuptools BuildRequires

2017-03-15 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/591 Title: #591: spec file: add unconditional python-setuptools BuildRequires HonzaCholasta commented: """ master: * 7ef4e9eb810063243fcc575434d856c854b14eee spec file: add unconditional python-setuptools BuildRequires ""&

[Freeipa-devel] [freeipa PR#591][+pushed] spec file: add unconditional python-setuptools BuildRequires

2017-03-15 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/591 Title: #591: spec file: add unconditional python-setuptools BuildRequires Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freei

[Freeipa-devel] [freeipa PR#596][opened] spec file: support client-only build

2017-03-15 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/596 Author: HonzaCholasta Title: #596: spec file: support client-only build Action: opened PR body: """ nspr-devel, nss-devel and openssl-devel are required for client-only build, move their respective BuildRequires from the

[Freeipa-devel] [freeipa PR#597][opened] spec file: support build without ipatests

2017-03-15 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/597 Author: HonzaCholasta Title: #597: spec file: support build without ipatests Action: opened PR body: """ Build ipatests only if %with_ipatests RPM macro is specified. By default the macro is specified if ONLY_CLIENT is not spe

[Freeipa-devel] [freeipa PR#592][closed] slapi plugins: fix CFLAGS

2017-03-15 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/592 Author: HonzaCholasta Title: #592: slapi plugins: fix CFLAGS Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/592/head:pr592 git checkout pr592 -- Manage your

[Freeipa-devel] [freeipa PR#592][+pushed] slapi plugins: fix CFLAGS

2017-03-15 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/592 Title: #592: slapi plugins: fix CFLAGS Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#592][comment] slapi plugins: fix CFLAGS

2017-03-15 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/592 Title: #592: slapi plugins: fix CFLAGS HonzaCholasta commented: """ master: * b7329e31f5c985b9721e3a21b1cd1bec6430129d slapi plugins: fix CFLAGS """ See the full comment at https://github.com/freeipa/freeipa/p

[Freeipa-devel] [freeipa PR#588][comment] CONFIGURE: Properly detect libpopt on el7

2017-03-15 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/588 Title: #588: CONFIGURE: Properly detect libpopt on el7 HonzaCholasta commented: """ master: * 4fe9166ac9f9a100d69ce37f19ae1ae971bb2ce1 CONFIGURE: Properly detect libpopt on el7 """ See the full comment at http

[Freeipa-devel] [freeipa PR#588][closed] CONFIGURE: Properly detect libpopt on el7

2017-03-15 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/588 Author: HonzaCholasta Title: #588: CONFIGURE: Properly detect libpopt on el7 Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/588/head:pr588 git checkout pr588

[Freeipa-devel] [freeipa PR#588][+pushed] CONFIGURE: Properly detect libpopt on el7

2017-03-15 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/588 Title: #588: CONFIGURE: Properly detect libpopt on el7 Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contrib

[Freeipa-devel] [freeipa PR#596][synchronized] spec file: support client-only build

2017-03-15 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/596 Author: HonzaCholasta Title: #596: spec file: support client-only build Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/596/head:pr596 git checkout pr596

[Freeipa-devel] [freeipa PR#596][comment] spec file: support client-only build

2017-03-15 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/596 Title: #596: spec file: support client-only build HonzaCholasta commented: """ I can't, both are required to build client components (`ipa-getkeytab` specifically), moving them to the server section would break client-only

[Freeipa-devel] [freeipa PR#596][synchronized] spec file: support client-only build

2017-03-15 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/596 Author: HonzaCholasta Title: #596: spec file: support client-only build Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/596/head:pr596 git checkout pr596

[Freeipa-devel] [freeipa PR#596][synchronized] spec file: support client-only build

2017-03-15 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/596 Author: HonzaCholasta Title: #596: spec file: support client-only build Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/596/head:pr596 git checkout pr596

[Freeipa-devel] [freeipa PR#596][comment] spec file: support client-only build

2017-03-15 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/596 Title: #596: spec file: support client-only build HonzaCholasta commented: """ This PR now depends on PR #597. """ See the full comment at https://github.com/freeipa/freeipa/pull/596#issuecomment-286715408 -- Ma

[Freeipa-devel] [freeipa PR#596][synchronized] spec file: support client-only build

2017-03-15 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/596 Author: HonzaCholasta Title: #596: spec file: support client-only build Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/596/head:pr596 git checkout pr596

[Freeipa-devel] [freeipa PR#596][synchronized] spec file: support client-only build

2017-03-15 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/596 Author: HonzaCholasta Title: #596: spec file: support client-only build Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/596/head:pr596 git checkout pr596

[Freeipa-devel] [freeipa PR#597][synchronized] spec file: support build without ipatests

2017-03-15 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/597 Author: HonzaCholasta Title: #597: spec file: support build without ipatests Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/597/head:pr597 git checkout

[Freeipa-devel] [freeipa PR#502][comment] Make pylint and jsl optional

2017-03-15 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/502 Title: #502: Make pylint and jsl optional HonzaCholasta commented: """ @lslebodn, nobody said that this has to be the last lint build related patch ever, we can change the behavior later, even on top of this PR. I would rather pu

[Freeipa-devel] [freeipa PR#502][comment] Make pylint and jsl optional

2017-03-15 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/502 Title: #502: Make pylint and jsl optional HonzaCholasta commented: """ 4.5.1 will be an official release too. """ See the full comment at https://github.com/freeipa/freeipa/pull/502#issuecomment-286727609 -- Ma

[Freeipa-devel] [freeipa PR#502][comment] Make pylint and jsl optional

2017-03-15 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/502 Title: #502: Make pylint and jsl optional HonzaCholasta commented: """ master: * f1f63506caf88e4d86ea2bfdc7d25eceaf689bc5 Make pylint and jsl optional """ See the full comment at https://github.com/freeipa

[Freeipa-devel] [freeipa PR#502][+pushed] Make pylint and jsl optional

2017-03-15 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/502 Title: #502: Make pylint and jsl optional Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#502][closed] Make pylint and jsl optional

2017-03-15 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/502 Author: tiran Title: #502: Make pylint and jsl optional Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/502/head:pr502 git checkout pr502 -- Manage your subscript

[Freeipa-devel] [freeipa PR#596][synchronized] spec file: support client-only build

2017-03-15 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/596 Author: HonzaCholasta Title: #596: spec file: support client-only build Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/596/head:pr596 git checkout pr596

[Freeipa-devel] [freeipa PR#596][comment] spec file: support client-only build

2017-03-15 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/596 Title: #596: spec file: support client-only build HonzaCholasta commented: """ Now that PR #502 was pushed this should finally work. """ See the full comment at https://github.com/freeipa/freeipa/pull/596#issuecom

[Freeipa-devel] [freeipa PR#597][synchronized] spec file: support build without ipatests

2017-03-15 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/597 Author: HonzaCholasta Title: #597: spec file: support build without ipatests Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/597/head:pr597 git checkout

[Freeipa-devel] [freeipa PR#597][comment] spec file: support build without ipatests

2017-03-15 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/597 Title: #597: spec file: support build without ipatests HonzaCholasta commented: """ master: * e42a846506ee7ad5e8a395da154bec64f6be3654 spec file: support build without ipatests """ See the full comment at http

[Freeipa-devel] [freeipa PR#597][+pushed] spec file: support build without ipatests

2017-03-15 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/597 Title: #597: spec file: support build without ipatests Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contrib

[Freeipa-devel] [freeipa PR#596][synchronized] spec file: support client-only build

2017-03-15 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/596 Author: HonzaCholasta Title: #596: spec file: support client-only build Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/596/head:pr596 git checkout pr596

[Freeipa-devel] [freeipa PR#596][comment] spec file: support client-only build

2017-03-15 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/596 Title: #596: spec file: support client-only build HonzaCholasta commented: """ master: * 417f1926c48b426b34b18edb28869f4f06824873 spec file: support client-only build """ See the full comment at https://githu

[Freeipa-devel] [freeipa PR#596][closed] spec file: support client-only build

2017-03-15 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/596 Author: HonzaCholasta Title: #596: spec file: support client-only build Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/596/head:pr596 git checkout pr596

[Freeipa-devel] [freeipa PR#596][+pushed] spec file: support client-only build

2017-03-15 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/596 Title: #596: spec file: support client-only build Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/C

[Freeipa-devel] [freeipa PR#601][opened] spec file: always provide python package aliases

2017-03-15 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/601 Author: HonzaCholasta Title: #601: spec file: always provide python package aliases Action: opened PR body: """ Provide python-ipa* aliases for python2-ipa* subpackages when the python_provide RPM macro is not available. "&

[Freeipa-devel] [freeipa PR#597][closed] spec file: support build without ipatests

2017-03-15 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/597 Author: HonzaCholasta Title: #597: spec file: support build without ipatests Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/597/head:pr597 git checkout pr597

[Freeipa-devel] [freeipa PR#601][closed] spec file: always provide python package aliases

2017-03-15 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/601 Author: HonzaCholasta Title: #601: spec file: always provide python package aliases Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/601/head:pr601 git checkout

[Freeipa-devel] [freeipa PR#601][+pushed] spec file: always provide python package aliases

2017-03-15 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/601 Title: #601: spec file: always provide python package aliases Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/

[Freeipa-devel] [freeipa PR#601][comment] spec file: always provide python package aliases

2017-03-15 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/601 Title: #601: spec file: always provide python package aliases HonzaCholasta commented: """ master: * 990ce9eef314622440b2036742bbf34f57ba2699 spec file: always provide python package aliases """ See the full

[Freeipa-devel] [freeipa PR#542][comment] Implementation independent interface for CSR generation

2017-03-15 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/542 Title: #542: Implementation independent interface for CSR generation HonzaCholasta commented: """ @MartinBasti, it is an internal, user invisible API. @LiptonB, it is OK to change it. """ See the full comment

[Freeipa-devel] [freeipa PR#608][opened] tasks: run `systemctl daemon-reload` after httpd.service.d updates

2017-03-16 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/608 Author: HonzaCholasta Title: #608: tasks: run `systemctl daemon-reload` after httpd.service.d updates Action: opened PR body: """ Run `systemctl daemon-reload` after `/etc/systemd/system/httpd.service.d/ipa.conf` is cre

[Freeipa-devel] [freeipa PR#608][synchronized] tasks: run `systemctl daemon-reload` after httpd.service.d updates

2017-03-16 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/608 Author: HonzaCholasta Title: #608: tasks: run `systemctl daemon-reload` after httpd.service.d updates Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/608

[Freeipa-devel] [freeipa PR#608][edited] tasks: run `systemctl daemon-reload` after httpd.service.d updates

2017-03-16 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/608 Author: HonzaCholasta Title: #608: tasks: run `systemctl daemon-reload` after httpd.service.d updates Action: edited Changed field: body Original value: """ Run `systemctl daemon-reload` after `/etc/systemd/system/httpd.service

[Freeipa-devel] [freeipa PR#615][opened] httpinstance: clean up /etc/httpd/alias on uninstall

2017-03-17 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/615 Author: HonzaCholasta Title: #615: httpinstance: clean up /etc/httpd/alias on uninstall Action: opened PR body: """ **certs: do not implicitly create DS pin.txt** Do not implicitly create DS pin.txt in `CertDB.init_from_pkcs1

[Freeipa-devel] [freeipa PR#616][comment] Simplify KRA transport cert cache

2017-03-17 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/616 Title: #616: Simplify KRA transport cert cache HonzaCholasta commented: """ NACK on the completely unnecessary changes in `_TransportCertCache` interface, variable names and formatting. Otherwise LGTM. """

[Freeipa-devel] [freeipa PR#616][comment] Simplify KRA transport cert cache

2017-03-19 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/616 Title: #616: Simplify KRA transport cert cache HonzaCholasta commented: """ @tiran, * patches targeted at backport branches should be as small as possible, * it's hard to see what is an actual change and what is just a formatt

[Freeipa-devel] [freeipa PR#622][opened] replica prepare: fix wrong IPA CA nickname in replica file

2017-03-19 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/622 Author: HonzaCholasta Title: #622: replica prepare: fix wrong IPA CA nickname in replica file Action: opened PR body: """ Lookup IPA CA subject and pass it to CertDB when creating dscert.p12 and httpcert.p12, otherwise a generi

[Freeipa-devel] [freeipa PR#623][opened] client install: do not assume /etc/krb5.conf.d exists

2017-03-19 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/623 Author: HonzaCholasta Title: #623: client install: do not assume /etc/krb5.conf.d exists Action: opened PR body: """ Add `includedir /etc/krb5.conf.d` to /etc/krb5.conf only if /etc/krb5.conf.d exists. This fixes client insta

[Freeipa-devel] [freeipa PR#623][comment] client install: do not assume /etc/krb5.conf.d exists

2017-03-20 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/623 Title: #623: client install: do not assume /etc/krb5.conf.d exists HonzaCholasta commented: """ There is no reason to, the directory is not owned by us and we don't use it for anything anyway (see ticket triage for relevant d

[Freeipa-devel] [freeipa PR#623][comment] client install: do not assume /etc/krb5.conf.d exists

2017-03-20 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/623 Title: #623: client install: do not assume /etc/krb5.conf.d exists HonzaCholasta commented: """ @puiterwijk, upgrade will be handled by krb5 itself, see https://bugzilla.redhat.com/show_bug.cgi?id=1431198. """

[Freeipa-devel] [freeipa PR#266][closed] ipapython: simplify Env object initialization

2017-03-20 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/266 Author: HonzaCholasta Title: #266: ipapython: simplify Env object initialization Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/266/head:pr266 git checkout pr266

[Freeipa-devel] [freeipa PR#625][opened] [RFC] remote plugins: add option to force compat plugins

2017-03-20 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/625 Author: HonzaCholasta Title: #625: [RFC] remote plugins: add option to force compat plugins Action: opened PR body: """ Add a new `force_client_compat` env flag to force client API not to do any RPC calls to initialize re

[Freeipa-devel] [freeipa PR#616][comment] Simplify KRA transport cert cache

2017-03-20 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/616 Title: #616: Simplify KRA transport cert cache HonzaCholasta commented: """ @tiran, you are right about the interface change, I was seeing things that are not there, I'm sorry. Please address inline comments (mainly the one

[Freeipa-devel] [freeipa PR#625][comment] [RFC] remote plugins: add option to force compat plugins

2017-03-20 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/625 Title: #625: [RFC] remote plugins: add option to force compat plugins HonzaCholasta commented: """ @tiran, please review this, I'm not sure whether this kind of workaround is good enough or not. """ See the

[Freeipa-devel] [freeipa PR#608][comment] tasks: run `systemctl daemon-reload` after httpd.service.d updates

2017-03-20 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/608 Title: #608: tasks: run `systemctl daemon-reload` after httpd.service.d updates HonzaCholasta commented: """ @martbab, can I see httpd error_log? Uninstall works fine for me. """ See the full comment at https://g

[Freeipa-devel] [freeipa PR#608][comment] tasks: run `systemctl daemon-reload` after httpd.service.d updates

2017-03-20 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/608 Title: #608: tasks: run `systemctl daemon-reload` after httpd.service.d updates HonzaCholasta commented: """ @martbab, and httpd journal as well. """ See the full comment at https://github.com/freeipa/freeipa/p

[Freeipa-devel] [freeipa PR#621][comment] Add --force-password-reset to user_mod in user.py

2017-03-20 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/621 Title: #621: Add --force-password-reset to user_mod in user.py HonzaCholasta commented: """ I don't agree. There should be one and only one obvious way to do it. There is no real benefit in having this in multiple different

[Freeipa-devel] [freeipa PR#621][comment] Add --force-password-reset to user_mod in user.py

2017-03-20 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/621 Title: #621: Add --force-password-reset to user_mod in user.py HonzaCholasta commented: """ I don't agree. There should be one and only one obvious way to do it. There is no real benefit in having this in multiple different

[Freeipa-devel] [freeipa PR#621][comment] Add --force-password-reset to user_mod in user.py

2017-03-20 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/621 Title: #621: Add --force-password-reset to user_mod in user.py HonzaCholasta commented: """ Actually, maybe `user-mod` is a better place for the option, as it does LDAP modify operation, whereas `passwd` does LDAP password

[Freeipa-devel] [freeipa PR#620][comment] [WIP] Fixing 6549

2017-03-20 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/620 Title: #620: [WIP] Fixing 6549 HonzaCholasta commented: """ @felipevolpone, the comment should explain *why* DM authentication has to be used. """ See the full comment at https://github.com/freeipa/freeipa/p

[Freeipa-devel] [freeipa PR#621][comment] Add --force-password-reset to user_mod in user.py

2017-03-21 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/621 Title: #621: Add --force-password-reset to user_mod in user.py HonzaCholasta commented: """ I have given this some thought over the night - maybe we should make the option more generic and allow the user to specify the expirat

[Freeipa-devel] [freeipa PR#543][reopened] Add options to allow ticket caching

2017-03-21 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/543 Author: simo5 Title: #543: Add options to allow ticket caching Action: reopened To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/543/head:pr543 git checkout pr543 -- Manage your

[Freeipa-devel] [freeipa PR#543][-pushed] Add options to allow ticket caching

2017-03-21 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/543 Title: #543: Add options to allow ticket caching Label: -pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Co

[Freeipa-devel] [freeipa PR#543][comment] Add options to allow ticket caching

2017-03-21 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/543 Title: #543: Add options to allow ticket caching HonzaCholasta commented: """ @martbab, the ticket says 4.5.1, but this was not pushed to ipa-4-5. """ See the full comment at https://github.com/freeipa/freeipa/p

[Freeipa-devel] [freeipa PR#543][comment] Add options to allow ticket caching

2017-03-21 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/543 Title: #543: Add options to allow ticket caching HonzaCholasta commented: """ ipa-4-5: * 62d39385e20b3e1b059466f37cc06383331e Add options to allow ticket caching """ See the full comment at https://githu

[Freeipa-devel] [freeipa PR#543][+pushed] Add options to allow ticket caching

2017-03-21 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/543 Title: #543: Add options to allow ticket caching Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Co

[Freeipa-devel] [freeipa PR#543][closed] Add options to allow ticket caching

2017-03-21 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/543 Author: simo5 Title: #543: Add options to allow ticket caching Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/543/head:pr543 git checkout pr543 -- Manage your su

[Freeipa-devel] [freeipa PR#621][comment] Add --force-password-reset to user_mod in user.py

2017-03-21 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/621 Title: #621: Add --force-password-reset to user_mod in user.py HonzaCholasta commented: """ @redhatrises, do not handle the format yourself, use the `DateTime` param type. Note that you will need to extend it to correctly int

[Freeipa-devel] [freeipa PR#634][opened] cert: do not limit internal searches in cert-find

2017-03-22 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/634 Author: HonzaCholasta Title: #634: cert: do not limit internal searches in cert-find Action: opened PR body: """ Instead, apply the limits on the combined result. This fixes (absence of) `--sizelimit` leading to strange behavior

[Freeipa-devel] [freeipa PR#634][synchronized] cert: do not limit internal searches in cert-find

2017-03-22 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/634 Author: HonzaCholasta Title: #634: cert: do not limit internal searches in cert-find Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/634/head:pr634 git

[Freeipa-devel] [freeipa PR#634][comment] cert: do not limit internal searches in cert-find

2017-03-22 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/634 Title: #634: cert: do not limit internal searches in cert-find HonzaCholasta commented: """ The fix was incomplete, it should be OK now. """ See the full comment at https://github.com/freeipa/freeipa/pull/634#iss

[Freeipa-devel] [freeipa PR#650][comment] CA-less installation fix

2017-03-27 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/650 Title: #650: CA-less installation fix HonzaCholasta commented: """ @stlaz, `NSSDatabase.publish_ca_cert()` and `CertDB.publish_ca_cert()` become unused after your changes, could we remove them? """ See the full

[Freeipa-devel] [freeipa PR#616][reopened] Simplify KRA transport cert cache

2017-03-27 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/616 Author: tiran Title: #616: Simplify KRA transport cert cache Action: reopened To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/616/head:pr616 git checkout pr616 -- Manage your su

[Freeipa-devel] [freeipa PR#616][-rejected] Simplify KRA transport cert cache

2017-03-27 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/616 Title: #616: Simplify KRA transport cert cache Label: -rejected -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Co

[Freeipa-devel] [freeipa PR#616][comment] Simplify KRA transport cert cache

2017-03-27 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/616 Title: #616: Simplify KRA transport cert cache HonzaCholasta commented: """ I guess you must have missed my last comment about the PR being almost OK - reopening. """ See the full comment at https://githu

[Freeipa-devel] [freeipa PR#655][comment] httpinstance.disable_system_trust: Don't fail if module 'Root Certs' …

2017-03-27 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/655 Title: #655: httpinstance.disable_system_trust: Don't fail if module 'Root Certs' … HonzaCholasta commented: """ @stlaz, you can't do just `-disable`, as that would break upgrade (note that the `-list` is ther

[Freeipa-devel] [freeipa PR#652][+ack] dogtag-ipa-ca-renew-agent-submit: fix the is_replicated() function

2017-03-28 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/652 Title: #652: dogtag-ipa-ca-renew-agent-submit: fix the is_replicated() function Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.fr

[Freeipa-devel] [freeipa PR#652][+pushed] dogtag-ipa-ca-renew-agent-submit: fix the is_replicated() function

2017-03-28 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/652 Title: #652: dogtag-ipa-ca-renew-agent-submit: fix the is_replicated() function Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www

[Freeipa-devel] [freeipa PR#652][closed] dogtag-ipa-ca-renew-agent-submit: fix the is_replicated() function

2017-03-28 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/652 Author: flo-renaud Title: #652: dogtag-ipa-ca-renew-agent-submit: fix the is_replicated() function Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/652/head:pr652 g

[Freeipa-devel] [freeipa PR#652][comment] dogtag-ipa-ca-renew-agent-submit: fix the is_replicated() function

2017-03-28 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/652 Title: #652: dogtag-ipa-ca-renew-agent-submit: fix the is_replicated() function HonzaCholasta commented: """ master: * e934da09d5e738c735f874931dd1b54d79b3150b dogtag-ipa-ca-renew-agent-submit: fix the is_replicated() f

[Freeipa-devel] [freeipa PR#616][+pushed] Simplify KRA transport cert cache

2017-03-28 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/616 Title: #616: Simplify KRA transport cert cache Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#616][+ack] Simplify KRA transport cert cache

2017-03-28 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/616 Title: #616: Simplify KRA transport cert cache Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#616][closed] Simplify KRA transport cert cache

2017-03-28 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/616 Author: tiran Title: #616: Simplify KRA transport cert cache Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/616/head:pr616 git checkout pr616 -- Manage your subs

[Freeipa-devel] [freeipa PR#616][comment] Simplify KRA transport cert cache

2017-03-28 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/616 Title: #616: Simplify KRA transport cert cache HonzaCholasta commented: """ master: * abefb64bea8ea1b8487ad87716e4a33d19dc Simplify KRA transport cert cache ipa-4-5: * 2723b5fa5edc75901c8fbaf110a37c87df0aec87 Simplify KRA

[Freeipa-devel] [freeipa PR#662][opened] spec file: bump krb5-devel BuildRequires for certauth

2017-03-28 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/662 Author: HonzaCholasta Title: #662: spec file: bump krb5-devel BuildRequires for certauth Action: opened PR body: """ Bump BuildRequires on krb5-devel to the version which introduces the certauth pluggable interface. This

[Freeipa-devel] [freeipa PR#623][synchronized] client install: do not assume /etc/krb5.conf.d exists

2017-03-28 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/623 Author: HonzaCholasta Title: #623: client install: do not assume /etc/krb5.conf.d exists Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/623/head:pr623 git

[Freeipa-devel] [freeipa PR#662][comment] spec file: bump krb5-devel BuildRequires for certauth

2017-03-28 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/662 Title: #662: spec file: bump krb5-devel BuildRequires for certauth HonzaCholasta commented: """ master: * 2dda1acf44dc96e660e81baadee9c3a54bf05eb0 spec file: bump krb5-devel BuildRequires for c

[Freeipa-devel] [freeipa PR#662][closed] spec file: bump krb5-devel BuildRequires for certauth

2017-03-28 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/662 Author: HonzaCholasta Title: #662: spec file: bump krb5-devel BuildRequires for certauth Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/662/head:pr662 git

[Freeipa-devel] [freeipa PR#662][+pushed] spec file: bump krb5-devel BuildRequires for certauth

2017-03-28 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/662 Title: #662: spec file: bump krb5-devel BuildRequires for certauth Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/

[Freeipa-devel] [freeipa PR#490][synchronized] certdb: use certutil and match_hostname for cert verification

2017-03-28 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/490 Author: HonzaCholasta Title: #490: certdb: use certutil and match_hostname for cert verification Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/490

[Freeipa-devel] [freeipa PR#668][opened] spec file: bump libsss_nss_idmap-devel BuildRequires

2017-03-29 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/668 Author: HonzaCholasta Title: #668: spec file: bump libsss_nss_idmap-devel BuildRequires Action: opened PR body: """ Bump BuildRequires on libsss_nss_idmap-devel to the version which introduces the sss_nss_getlistbycert function.

[Freeipa-devel] [freeipa PR#668][comment] spec file: bump libsss_nss_idmap-devel BuildRequires

2017-03-29 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/668 Title: #668: spec file: bump libsss_nss_idmap-devel BuildRequires HonzaCholasta commented: """ Right. """ See the full comment at https://github.com/freeipa/freeipa/pull/668#issuecomment-290015269 -- Manage you

[Freeipa-devel] [freeipa PR#668][comment] spec file: bump libsss_nss_idmap-devel BuildRequires

2017-03-29 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/668 Title: #668: spec file: bump libsss_nss_idmap-devel BuildRequires HonzaCholasta commented: """ Changed ticket link to https://pagure.io/freeipa/issue/6828. """ See the full comment at https://github.com/freeipa

[Freeipa-devel] [freeipa PR#668][synchronized] spec file: bump libsss_nss_idmap-devel BuildRequires

2017-03-29 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/668 Author: HonzaCholasta Title: #668: spec file: bump libsss_nss_idmap-devel BuildRequires Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/668/head:pr668 git

[Freeipa-devel] [freeipa PR#625][comment] [RFC] remote plugins: add option to force compat plugins

2017-03-29 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/625 Title: #625: [RFC] remote plugins: add option to force compat plugins HonzaCholasta commented: """ * With `force_client_compat=False`, the benefit is the client API matches the remote server API, the drawback is `api.finalize()`

[Freeipa-devel] [freeipa PR#621][comment] Add --password-expiration to allow an admin to force a password change

2017-03-29 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/621 Title: #621: Add --password-expiration to allow an admin to force a password change HonzaCholasta commented: """ @redhatrises, `datetime.utcnow()` is what I meant. """ See the full comment at https://githu

[Freeipa-devel] [freeipa PR#621][comment] Add --password-expiration to allow an admin to force a password change

2017-03-29 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/621 Title: #621: Add --password-expiration to allow an admin to force a password change HonzaCholasta commented: """ The `admin` user is not allowed to write to the attribute: ``` $ kinit admin Password for ad...@abc.idm.lab.eng

[Freeipa-devel] [freeipa PR#677][opened] cert: defer cert-find result post-processing

2017-03-30 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/677 Author: HonzaCholasta Title: #677: cert: defer cert-find result post-processing Action: opened PR body: """ Rather than post-processing the results of each internal search, post-process the combined result. This avoid

[Freeipa-devel] [freeipa PR#621][comment] Add --password-expiration to allow an admin to force a password change

2017-03-30 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/621 Title: #621: Add --password-expiration to allow an admin to force a password change HonzaCholasta commented: """ @redhatrises, the "Admin can manage any entry" ACI in fact contains a blacklist of attributes which admin

[Freeipa-devel] [freeipa PR#490][synchronized] certdb: use certutil and match_hostname for cert verification

2017-03-30 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/490 Author: HonzaCholasta Title: #490: certdb: use certutil and match_hostname for cert verification Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/490

[Freeipa-devel] [freeipa PR#677][synchronized] cert: defer cert-find result post-processing

2017-03-30 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/677 Author: HonzaCholasta Title: #677: cert: defer cert-find result post-processing Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/677/head:pr677 git checkout

[Freeipa-devel] [freeipa PR#490][comment] certdb: use certutil and match_hostname for cert verification

2017-03-30 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/490 Title: #490: certdb: use certutil and match_hostname for cert verification HonzaCholasta commented: """ Awesome indeed! As for your suggestions to improve the validation, I completely agree with them, but the focus of this PR is

<    1   2   3   4   5   6   >