Re: [Freeipa-devel] [PATCH] 0085 Fix upgrade when Dogtag also upgraded from 10.2 -> 10.3

On 06/30/2016 01:16 PM, Fraser Tweedale wrote: Hullo, The attached patch fixes https://fedorahosted.org/freeipa/ticket/6011. Cheers, Fraser ACK -- Martin^3 Babinsky -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] [PATCH 558] Allow disabling requireing preauth by default for Service Principal Names

On 07/01/2016 10:38 AM, Petr Vobornik wrote: On 03/08/2016 06:02 PM, Martin Babinsky wrote: On 03/08/2016 05:50 PM, Simo Sorce wrote: On Tue, 2016-03-08 at 17:20 +0100, Martin Babinsky wrote: On 03/08/2016 05:00 PM, Simo Sorce wrote: On Tue, 2016-03-08 at 16:51 +0100, Martin Babinsky wrote

Re: [Freeipa-devel] [PATCH 0549] Translations IPA 4.4.0

On 07/01/2016 10:34 AM, Martin Basti wrote: On 01.07.2016 09:27, Martin Basti wrote: Patch attached. Updated patch ACK. -- Martin^3 Babinsky -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [PATCH 0178] Fix incorrect check for principal type when evaluating CA ACLs

Fixing first regression caused by principal alias work. Thanks Petr Spacek for finding it. -- Martin^3 Babinsky From da8e18addcc172777977e50f2d4d34603243077f Mon Sep 17 00:00:00 2001 From: Martin Babinsky <mbabi...@redhat.com> Date: Fri, 1 Jul 2016 11:55:47 +0200 Subject: [PATCH] Fix inc

Re: [Freeipa-devel] [PATCH 0025][Tests] RFE: External trust

On 07/01/2016 06:36 AM, Lenka Doudova wrote: On 06/30/2016 05:01 PM, Martin Babinsky wrote: On 06/30/2016 03:47 PM, Lenka Doudova wrote: Hi, attaching patch with some basic coverage for external trust feature. Bit more detailed info in commit message. Since the feature requires me to run

Re: [Freeipa-devel] [PATCH 0026][Tests] RFE: Support UPN for trusted domains

On 07/01/2016 11:13 AM, Lenka Doudova wrote: And, of course, a patch file :) On 07/01/2016 11:09 AM, Lenka Doudova wrote: Hi all, here's patch with basic test suite for support of UPN. Note: it needs to be applied on top of my patch 0025.2 (or later, if there's will be more fixes to that

[Freeipa-devel] Kerberos Principal Aliases Testplan review

Hi, I have looked at the testplan[1] and have the following comments: In general LGTM, but I miss the following test scenarios: 1.) Test principal alias removal, more specifically test that the removal of the alias equivalent to the canonical name triggers an error 2.) Test that you cannot

[Freeipa-devel] [PATCH 0179] Preserve user principal aliases during rename operation

Quick hacky fix for https://fedorahosted.org/freeipa/ticket/6028 Admittedly a more systematic solution exists. We may discuss it further in this thread (such as add options to modrdn plugin to append to multivalue attributes). If time is the issue, we may use this fix instead and revert it

[Freeipa-devel] [PATCH 0181] ipa-nis-manage: Use server API to retrieve plugin status

https://fedorahosted.org/freeipa/ticket/6027 -- Martin^3 Babinsky From e07cb2bad74ab78993e4d233af807198bf487aef Mon Sep 17 00:00:00 2001 From: Martin Babinsky <mbabi...@redhat.com> Date: Mon, 4 Jul 2016 13:33:10 +0200 Subject: [PATCH] ipa-nis-manage: Use server API to retrieve plugin

[Freeipa-devel] [PATCH 0180] allow multiple dashes in the components of server hostname

17 00:00:00 2001 From: Martin Babinsky <mbabi...@redhat.com> Date: Mon, 4 Jul 2016 12:43:08 +0200 Subject: [PATCH] allow multiple dashes in the components of server hostname Relax the check for valid hostname component by allowing multiple consecutive '-' or '/' characters int he middle of the

Re: [Freeipa-devel] [PATCH] 0087 uninstall: untrack lightweight CA certs

On 07/04/2016 05:10 AM, Fraser Tweedale wrote: The attached patch fixes https://fedorahosted.org/freeipa/ticket/6020 Thanks, Fraser ACK. -- Martin^3 Babinsky -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to

Re: [Freeipa-devel] [PATCH 0063] Raise error on topology disconnect/last-role-host removal during server uninstall

On 08/15/2016 02:13 PM, Martin Babinsky wrote: On 08/12/2016 12:08 PM, Stanislav Laznicka wrote: Hello, topology disconnect/last-role-host removal errors would just be logged during server uninstall even if ignore options are not present. The host would still appear in the topology even after

Re: [Freeipa-devel] [PATCH] 0207, 0218-0219 Solving trust conflicts and external trust topology fixes

On 08/17/2016 12:41 PM, Alexander Bokovoy wrote: On Wed, 17 Aug 2016, Martin Babinsky wrote: On 08/15/2016 06:06 PM, Alexander Bokovoy wrote: On Mon, 15 Aug 2016, Alexander Bokovoy wrote: Hi! Attached are trust-related patches. 0207 is a pre-requisite. I did send it before, it is re

Re: [Freeipa-devel] [PATCH] 0207, 0218-0219 Solving trust conflicts and external trust topology fixes

On 08/15/2016 06:06 PM, Alexander Bokovoy wrote: On Mon, 15 Aug 2016, Alexander Bokovoy wrote: Hi! Attached are trust-related patches. 0207 is a pre-requisite. I did send it before, it is re-formatting of the ipaserver/dcerpc.py to be close to PEP8 requirements. 0218 is an automated trust

Re: [Freeipa-devel] [PATCH 0063] Raise error on topology disconnect/last-role-host removal during server uninstall

On 08/16/2016 03:47 PM, Stanislav Laznicka wrote: On 08/15/2016 02:20 PM, Martin Babinsky wrote: On 08/15/2016 02:13 PM, Martin Babinsky wrote: On 08/12/2016 12:08 PM, Stanislav Laznicka wrote: Hello, topology disconnect/last-role-host removal errors would just be logged during server

Re: [Freeipa-devel] [PATCH] 0207, 0218-0219 Solving trust conflicts and external trust topology fixes

On 08/17/2016 12:13 PM, Martin Babinsky wrote: On 08/15/2016 06:06 PM, Alexander Bokovoy wrote: On Mon, 15 Aug 2016, Alexander Bokovoy wrote: Hi! Attached are trust-related patches. 0207 is a pre-requisite. I did send it before, it is re-formatting of the ipaserver/dcerpc.py to be close

Re: [Freeipa-devel] [PATCH 0063] Raise error on topology disconnect/last-role-host removal during server uninstall

On 08/17/2016 02:38 PM, Stanislav Laznicka wrote: On 08/17/2016 02:17 PM, Martin Babinsky wrote: On 08/16/2016 03:47 PM, Stanislav Laznicka wrote: On 08/15/2016 02:20 PM, Martin Babinsky wrote: On 08/15/2016 02:13 PM, Martin Babinsky wrote: On 08/12/2016 12:08 PM, Stanislav Laznicka wrote

Re: [Freeipa-devel] [PATCH 0215-0216] Child domain fixes for AD trust

On 08/08/2016 01:27 PM, Alexander Bokovoy wrote: Hi! Attached two patches attempt to fix some of the issues we see with child domains. SSSD only 'sees' users from child domains if there is an ID range for each of them. However, after refactoring of trust code when external trust was

Re: [Freeipa-devel] [IMPORTANT] nss-3.28.1-1.2.fc25 from updates-testing breaks FreeIPA

On 01/20/2017 10:13 AM, Martin Babinsky wrote: On 01/20/2017 10:05 AM, Martin Babinsky wrote: Hi list, I have noticed the following failures in our Travis CI during server installation phase: https://paste.fedoraproject.org/531238/84902361/ After inspecting ipaclient-install.log

Re: [Freeipa-devel] [IMPORTANT] nss-3.28.1-1.2.fc25 from updates-testing breaks FreeIPA

On 01/20/2017 10:05 AM, Martin Babinsky wrote: Hi list, I have noticed the following failures in our Travis CI during server installation phase: https://paste.fedoraproject.org/531238/84902361/ After inspecting ipaclient-install.log the following error can be observed: """ 2

[Freeipa-devel] [IMPORTANT] nss-3.28.1-1.2.fc25 from updates-testing breaks FreeIPA

Hi list, I have noticed the following failures in our Travis CI during server installation phase: https://paste.fedoraproject.org/531238/84902361/ After inspecting ipaclient-install.log the following error can be observed: """ 2017-01-20T08:47:51Z DEBUG Verifying that master.ipa.test (realm

Re: [Freeipa-devel] [PATCH] 0207, 0218-0219 Solving trust conflicts and external trust topology fixes

On 08/18/2016 05:13 PM, Martin Babinsky wrote: On 08/18/2016 01:25 PM, Martin Babinsky wrote: On 08/17/2016 01:20 PM, Alexander Bokovoy wrote: On Wed, 17 Aug 2016, Martin Babinsky wrote: Hi Alexander, patch 207: LGTM, but I have a feeling that the patch should be linked to both #6021

Re: [Freeipa-devel] [PATCH 0215-0216] Child domain fixes for AD trust

On 08/19/2016 10:28 AM, Alexander Bokovoy wrote: On Wed, 17 Aug 2016, Martin Babinsky wrote: On 08/08/2016 01:27 PM, Alexander Bokovoy wrote: Hi! Attached two patches attempt to fix some of the issues we see with child domains. SSSD only 'sees' users from child domains if there is an ID

[Freeipa-devel] Please review: V4/AD user short names design draft

Hello list, I have put together a draft of design page describing server-side implementation of user short name -> fully-qualified name resolution.[1] In the end I have taken the liberty to change a few aspects of the design we have agreed on before and I will be grad if we can discuss them

Re: [Freeipa-devel] Please review: V4/AD user short names design draft

On 03/01/2017 05:51 PM, Simo Sorce wrote: On Wed, 2017-03-01 at 17:29 +0100, Martin Basti wrote: On 01.03.2017 17:04, Simo Sorce wrote: On Wed, 2017-03-01 at 16:47 +0100, Martin Babinsky wrote: On 03/01/2017 04:32 PM, Simo Sorce wrote: On Wed, 2017-03-01 at 16:17 +0100, Martin Babinsky

Re: [Freeipa-devel] Please review: V4/AD user short names design draft

On 03/01/2017 05:28 PM, Alexander Bokovoy wrote: On ke, 01 maalis 2017, Simo Sorce wrote: > My take is: cut API/UI work, and do the underlying infrastructure work > for the widest set of serves/clients possible instead. > > It is much more important to get the underlying gears done than to add

Re: [Freeipa-devel] Please review: V4/AD user short names design draft

Alexander, thank you for your comments. Replies inline: On 02/28/2017 01:48 PM, Alexander Bokovoy wrote: On ti, 28 helmi 2017, Martin Babinsky wrote: Hello list, I have put together a draft of design page describing server-side implementation of user short name -> fully-qualified n

Re: [Freeipa-devel] Please review: V4/AD user short names design draft

On 03/01/2017 03:42 PM, Simo Sorce wrote: On Tue, 2017-02-28 at 13:29 +0100, Martin Babinsky wrote: Hello list, I have put together a draft of design page describing server-side implementation of user short name -> fully-qualified name resolution.[1] In the end I have taken the libe

Re: [Freeipa-devel] Please review: V4/AD user short names design draft

On 03/01/2017 04:32 PM, Simo Sorce wrote: On Wed, 2017-03-01 at 16:17 +0100, Martin Babinsky wrote: On 03/01/2017 03:42 PM, Simo Sorce wrote: On Tue, 2017-02-28 at 13:29 +0100, Martin Babinsky wrote: Hello list, I have put together a draft of design page describing server-side implementation

Re: [Freeipa-devel] [PATCH] 0100 Track lightweight CAs on replica installation

On 09/05/2016 07:46 PM, Fraser Tweedale wrote: On Mon, Aug 29, 2016 at 06:39:58PM +0200, Martin Babinsky wrote: On 08/23/2016 08:40 AM, Fraser Tweedale wrote: Hi folks, Please review attached patch which fixes https://fedorahosted.org/freeipa/ticket/6019. Thanks, Fraser Hi Fraser, I

Re: [Freeipa-devel] [PATCH] 0101 Add ca-disable and ca-enable commands

On 09/06/2016 04:49 PM, Fraser Tweedale wrote: On Tue, Aug 30, 2016 at 10:23:10AM +0200, Martin Babinsky wrote: On 08/30/2016 10:09 AM, Jan Cholasta wrote: Hi, On 30.8.2016 09:56, Martin Babinsky wrote: On 08/25/2016 10:25 AM, Fraser Tweedale wrote: Hi team, The attached patch fixes https

Re: [Freeipa-devel] [PATCH] 0102..0105 Better handling for cert-request to disabled CA

On 09/06/2016 04:51 PM, Fraser Tweedale wrote: On Tue, Aug 30, 2016 at 10:54:32AM +0200, Martin Babinsky wrote: On 08/26/2016 04:19 AM, Fraser Tweedale wrote: The attached patches add better handling of cert-request failure due to target CA being disabled (#6260). To do this, rather than go

Re: [Freeipa-devel] [PATCH] 0108 cert-request: raise error when request fails

On 09/08/2016 04:00 AM, Fraser Tweedale wrote: The attached patch fixes regression in cert-request: https://fedorahosted.org/freeipa/ticket/6309 Thanks, Fraser ACK. Does this patch also fix the (reopened) https://fedorahosted.org/freeipa/ticket/3473 ? -- Martin^3 Babinsky -- Manage your

Re: [Freeipa-devel] [PATCH 190] expose `--secret` option in radiusproxy-* commands

On 09/07/2016 03:55 PM, Jan Cholasta wrote: On 21.7.2016 10:50, Jan Cholasta wrote: On 21.7.2016 10:13, Martin Babinsky wrote: On 07/20/2016 12:10 PM, Martin Babinsky wrote: On 07/19/2016 12:32 PM, Jan Cholasta wrote: Hi, On 18.7.2016 13:51, Martin Babinsky wrote: https://fedorahosted.org

Re: [Freeipa-devel] [PATCH] 0101 Add ca-disable and ca-enable commands

On 08/30/2016 10:09 AM, Jan Cholasta wrote: Hi, On 30.8.2016 09:56, Martin Babinsky wrote: On 08/25/2016 10:25 AM, Fraser Tweedale wrote: Hi team, The attached patch fixes https://fedorahosted.org/freeipa/ticket/6257. The behaviour of cert-request when the CA is disabled is not very nice

Re: [Freeipa-devel] [PATCH] 0102..0105 Better handling for cert-request to disabled CA

On 08/26/2016 04:19 AM, Fraser Tweedale wrote: The attached patches add better handling of cert-request failure due to target CA being disabled (#6260). To do this, rather than go and do extra work in Dogtag that we would depend on, instead I bite the bullet and refactor ra.request_certificate

Re: [Freeipa-devel] [PATCH] 0101 Add ca-disable and ca-enable commands

On 08/25/2016 10:25 AM, Fraser Tweedale wrote: Hi team, The attached patch fixes https://fedorahosted.org/freeipa/ticket/6257. The behaviour of cert-request when the CA is disabled is not very nice (it reports a server error from Dogtag). The Dogtag REST interface gives much better errors so

Re: [Freeipa-devel] [PATCH] 0108 cert-request: raise error when request fails

On 09/09/2016 11:30 AM, Lenka Doudova wrote: On 09/09/2016 01:53 AM, Fraser Tweedale wrote: On Thu, Sep 08, 2016 at 01:15:03PM +0200, Martin Babinsky wrote: On 09/08/2016 04:00 AM, Fraser Tweedale wrote: The attached patch fixes regression in cert-request: https://fedorahosted.org/freeipa

[Freeipa-devel] announcing ipa-docker-test-runner

Hi fellow FreeIPA developers, Did you ever wanted to have a means to build FreeIPA rpms locally without pulling in all the build requires or firing up VMs just to do such a simple task? Did you ever wish to fire up a quick script which will build RPMs and install FreeIPA server for you to

Re: [Freeipa-devel] Suspicious IPA cert test fail after upgrade to pki-ca-10.3.5-6

On 09/22/2016 01:41 PM, Martin Basti wrote: Hello all, Following test is failing: test_cert_find.test_0007_find_revocation_reason_0

Re: [Freeipa-devel] [PATCH] 0207, 0218-0219 Solving trust conflicts and external trust topology fixes

On 08/17/2016 01:20 PM, Alexander Bokovoy wrote: On Wed, 17 Aug 2016, Martin Babinsky wrote: Hi Alexander, patch 207: LGTM, but I have a feeling that the patch should be linked to both #6021 and #6076 so that it is not lost during backports. patch 218: ipalib/errors.py: 1.) I'm not sure

Re: [Freeipa-devel] [PATCH] 0207, 0218-0219 Solving trust conflicts and external trust topology fixes

On 08/18/2016 01:25 PM, Martin Babinsky wrote: On 08/17/2016 01:20 PM, Alexander Bokovoy wrote: On Wed, 17 Aug 2016, Martin Babinsky wrote: Hi Alexander, patch 207: LGTM, but I have a feeling that the patch should be linked to both #6021 and #6076 so that it is not lost during backports

Re: [Freeipa-devel] [PATCH] 0100 Track lightweight CAs on replica installation

On 08/23/2016 08:40 AM, Fraser Tweedale wrote: Hi folks, Please review attached patch which fixes https://fedorahosted.org/freeipa/ticket/6019. Thanks, Fraser Hi Fraser, I have couple of comments: 1.) -for entry in lwcas: -

[Freeipa-devel] python-nss-1.0.0-2.fc24.x86_64 from updates-testing breaks FreeIPA client API

Hi list, today I noticed the following exceptions in my VMs when installing/using FreeIPA: """ # ipa ping exception in SSLSocket.handshake_callback Traceback (most recent call last): File "/usr/lib/python2.7/site-packages/ipapython/nsslib.py", line 258, in handshake_callback channel =

Re: [Freeipa-devel] Script to setup Kerberized NFS exports using IPA

On 11/07/2016 05:43 PM, Justin Mitchell wrote: I have been working on a python script to setup secure NFS exports using kerberos that relies heavily on FreeIPA, and is in many ways the server side compliment to ipa-client-automount. It attempts to automatically discover the setup, and falls back

Re: [Freeipa-devel] [Test][Patch-0049, 0050] Certs in ID overrides test

On 10/14/2016 03:48 PM, Oleg Fayans wrote: So, did I understand correctly, that there would be 2 patches: one containing test for basic idoverrides functionality without AD-integration, and the second one - with AD-integration and an sssd check, correct? I guess, the

[Freeipa-devel] tomcat-8.0.37-3.fc24.noarch package from updates testing breaks CA instance spawn

An update for Apache Tmocat recently pushed into bodhi[1] seems to break CA instance spawning in a spectacular way.[2] It seems that the update once again breaks the loading of Java classes during Dogtag server initialization. I gave the package negative karma and I suggest for you to do the

Re: [Freeipa-devel] pam_winbind(sshd:auth): pam_get_item returned a password

On 11/16/2016 10:41 AM, rajat gupta wrote: I am using FreeIPA version 4.4.0 and Active Directory trust setup. on Active Directory side I am using UPN suffix. Following are my setup. AD DOMANIN :- corp.addomain.com UPN suffix :- usern...@mydomain.com

Re: [Freeipa-devel] [PATCH] 0221 fix trustdomain-del

On 10/31/2016 05:23 PM, Alexander Bokovoy wrote: See description. This is a regression since FreeIPA 4.4.0. Hi Alexander, Please link upstream ticket[1] to the commit message, not BZ. I have put on my Travis hat and found: 1.) pep8 error: ./ipaserver/plugins/trust.py:1623:25: E128

Re: [Freeipa-devel] [PATCH] 0221 fix trustdomain-del

On 11/01/2016 09:42 AM, Alexander Bokovoy wrote: On ti, 01 marras 2016, Martin Babinsky wrote: On 10/31/2016 05:23 PM, Alexander Bokovoy wrote: See description. This is a regression since FreeIPA 4.4.0. Hi Alexander, Please link upstream ticket[1] to the commit message, not BZ. I have

[Freeipa-devel] Travis CI broke after merging PR 177

Hi list, https://github.com/freeipa/freeipa/pull/177 was recently merged despite causing nearly half of the tests in our Travis CI gating to fail. This broke Travis CI for all other PR that were rebased after this merge, causing false negative errors everywhere. Fraser reverted the

Re: [Freeipa-devel] Travis CI unexpected PEP8 errors

On 12/14/2016 09:00 AM, Standa Laznicka wrote: On 12/14/2016 02:53 AM, Ben Lipton wrote: Hi all, I'm pretty sure this is unrelated to the CI issues discussed in other threads recently, but they reminded me that I've been having this odd issue.

Re: [Freeipa-devel] Travis CI broke after merging PR 177

On 12/13/2016 01:07 PM, Fraser Tweedale wrote: On Tue, Dec 13, 2016 at 09:41:40AM +0100, Martin Babinsky wrote: Hi list, https://github.com/freeipa/freeipa/pull/177 was recently merged despite causing nearly half of the tests in our Travis CI gating to fail. This broke Travis CI for all other

Re: [Freeipa-devel] CI failures - I need your help

On 12/13/2016 12:20 PM, Fraser Tweedale wrote: Hi all, The CI failures caused by one of my recent commits have me baffled. It is exactly this commit[1] at which the problems begin. I cannot see anything in the commit to point a finger at. In-tree tests run fine. [1]

Re: [Freeipa-devel] Travis CI broke after merging PR 177

On 12/13/2016 01:41 PM, Fraser Tweedale wrote: On Tue, Dec 13, 2016 at 01:11:37PM +0100, Martin Babinsky wrote: On 12/13/2016 01:07 PM, Fraser Tweedale wrote: On Tue, Dec 13, 2016 at 09:41:40AM +0100, Martin Babinsky wrote: Hi list, https://github.com/freeipa/freeipa/pull/177 was recently

Re: [Freeipa-devel] Travis CI broke after merging PR 177

On 12/13/2016 09:41 AM, Martin Babinsky wrote: Hi list, https://github.com/freeipa/freeipa/pull/177 was recently merged despite causing nearly half of the tests in our Travis CI gating to fail. This broke Travis CI for all other PR that were rebased after this merge, causing false negative

Re: [Freeipa-devel] CI: exporting test runner output

On 01/05/2017 08:06 AM, Fraser Tweedale wrote: Hi all, Although it has been discussed before and met with some skepticism, here is a POC that exporting test runner output to, e.g. a pastebin, does work: - experimental commit: https://github.com/freeipa/freeipa/pull/370 - example paste:

Re: [Freeipa-devel] [DESIGN] Dogtag GSS-API Authentication

Hi Fraser, I have some rather inane comments. I guess Jan cholasta will do a more thorough review of your design. See below: On 01/06/2017 09:08 AM, Fraser Tweedale wrote: Hi comrades, I have written up the high-level details of the FreeIPA->Dogtag GSS-API authentication design. The goal

Re: [Freeipa-devel] PKINIT Handling in mixed/CA-less topologies

On Thu, Mar 23, 2017 at 04:46:20PM +0200, Alexander Bokovoy wrote: >On to, 23 maalis 2017, Simo Sorce wrote: >> On Thu, 2017-03-23 at 16:08 +0200, Alexander Bokovoy wrote: >> > On to, 23 maalis 2017, Martin Babinsky wrote: >> > >Hi List, >> > >

Re: [Freeipa-devel] PKINIT Handling in mixed/CA-less topologies

On Fri, Mar 24, 2017 at 10:53:49AM +0200, Alexander Bokovoy wrote: >On pe, 24 maalis 2017, Martin Babinsky wrote: >> On Thu, Mar 23, 2017 at 04:46:20PM +0200, Alexander Bokovoy wrote: >> > On to, 23 maalis 2017, Simo Sorce wrote: >> > > On Thu, 2017-03-23 at 16:08

[Freeipa-devel] PKINIT Handling in mixed/CA-less topologies

L9gydE=/ -- Martin Babinsky -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [TESTING] Please test and add karma to pki-core-10.4.0-1

-9c6007b406 -- Martin Babinsky -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] Temporary breakage of Travis CI

. -- Martin Babinsky -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

Re: [Freeipa-devel] Please review: V4/AD user short names design draft

On 03/06/2017 01:48 PM, Simo Sorce wrote: On Mon, 2017-03-06 at 07:47 +0100, Martin Babinsky wrote: On 03/02/2017 02:54 PM, Simo Sorce wrote: On Thu, 2017-03-02 at 08:10 +0100, Martin Babinsky wrote: In this case it would probably be a good idea to think about "forward compatib

Re: [Freeipa-devel] Please review: V4/AD user short names design draft

On Tue, Mar 07, 2017 at 04:34:42PM +0200, Alexander Bokovoy wrote: >On ti, 07 maalis 2017, Simo Sorce wrote: >> On Tue, 2017-03-07 at 09:38 +0100, Martin Babinsky wrote: >> > On 03/06/2017 01:48 PM, Simo Sorce wrote: >> > > On Mon, 2017-03-06 at 07:47 +0100, Martin Ba

Re: [Freeipa-devel] Please review: V4/AD user short names design draft

On 03/02/2017 02:54 PM, Simo Sorce wrote: On Thu, 2017-03-02 at 08:10 +0100, Martin Babinsky wrote: In this case it would probably be a good idea to think about "forward compatibility" and define a new AUX objectclass bringing in 'ipaDomainResolutionOrder' instead of extending tw

Re: [Freeipa-devel] Please review: V4/AD user short names design draft

On Wed, Mar 08, 2017 at 07:37:40AM +0100, Jan Cholasta wrote: >On 7.3.2017 15:14, Simo Sorce wrote: >> On Tue, 2017-03-07 at 09:38 +0100, Martin Babinsky wrote: >> > On 03/06/2017 01:48 PM, Simo Sorce wrote: >> > > On Mon, 2017-03-06 at 07:47 +0100, Martin Babinsky wr

Re: [Freeipa-devel] Please review: V4/AD user short names design draft

On Tue, Feb 28, 2017 at 01:29:50PM +0100, Martin Babinsky wrote: >Hello list, > >I have put together a draft of design page describing server-side >implementation of user short name -> fully-qualified name resolution.[1] > >In the end I have taken the liberty to change a few

<    3   4   5   6   7   8