Re: [Freeipa-devel] [PATCH 0042] Removed dead code from LDAPRemoveReverseMember

2016-06-03 Thread Stanislav Laznicka
On 06/03/2016 02:19 PM, Martin Basti wrote: On 03.06.2016 14:13, Stanislav Laznicka wrote: https://fedorahosted.org/freeipa/ticket/5892 NACK please remove it from LDAPAddReverseMember too, it contains the same code Martin^2 Please see the modified patch. Standa From

[Freeipa-devel] [PATCH 0043] Stop uninstaller from failing if a service can't be started

2016-06-07 Thread Stanislav Laznicka
https://fedorahosted.org/freeipa/ticket/5775 From 8ba87072d8e998ccb8743390eb541e74f6b1aa96 Mon Sep 17 00:00:00 2001 From: Stanislav Laznicka Date: Tue, 7 Jun 2016 10:08:45 +0200 Subject: [PATCH] Uninstaller won't fail if service can't be started https://fedorahosted.org/freeipa/t

Re: [Freeipa-devel] [PATCH] 0003 batch command can be used to trigger internal errors on server

2016-06-07 Thread Stanislav Laznicka
Hello, Thank you for your patch. As the thin-client patches were pushed in the meantime, the patch won't apply. Could you please send a rebased version? Also, I have a few comments to the patch: 1) I think that the commit message should be rather a brief conclusion to the changes made in the

Re: [Freeipa-devel] [PATCH] 0006 add context to exception on LdapEntry decode error

2016-06-08 Thread Stanislav Laznicka
On 06/08/2016 01:13 PM, Stanislav Laznicka wrote: On 06/07/2016 05:11 PM, Florence Blanc-Renaud wrote: On 06/07/2016 04:08 PM, Stanislav Laznicka wrote: On 06/06/2016 02:47 PM, Florence Blanc-Renaud wrote: Hi, please find attached the patch for Ticket 5434 add context to exception on

Re: [Freeipa-devel] [PATCH 0042] Removed dead code from LDAPRemoveReverseMember

2016-06-08 Thread Stanislav Laznicka
On 06/07/2016 10:42 AM, Martin Basti wrote: On 07.06.2016 10:43, Jan Cholasta wrote: On 7.6.2016 10:22, Martin Basti wrote: On 07.06.2016 09:07, Jan Cholasta wrote: On 6.6.2016 18:29, Martin Basti wrote: On 03.06.2016 14:28, Stanislav Laznicka wrote: On 06/03/2016 02:19 PM, Martin

Re: [Freeipa-devel] [PATCH] 0003 batch command can be used to trigger internal errors on server

2016-06-08 Thread Stanislav Laznicka
On 06/08/2016 02:09 PM, Petr Vobornik wrote: On 06/08/2016 10:07 AM, Petr Spacek wrote: On 7.6.2016 15:11, Stanislav Laznicka wrote: Hello, Thank you for your patch. As the thin-client patches were pushed in the meantime, the patch won't apply. Could you please send a rebased version?

Re: [Freeipa-devel] [PATCH 0041] Increase nsslapd-db-locks

2016-06-09 Thread Stanislav Laznicka
On 06/07/2016 08:56 AM, thierry bordaz wrote: On 06/06/2016 07:23 PM, Martin Basti wrote: On 03.06.2016 13:38, Stanislav Laznicka wrote: Hello, The attached patch implements solution to https://fedorahosted.org/freeipa/ticket/5914. The patch is rather hacky as nsslapd-db-locks requires

[Freeipa-devel] [PATCH 0046] Don't fail in find/show methods if userCertificate is invalid

2016-06-09 Thread Stanislav Laznicka
Hello, Please see the attached patch of https://fedorahosted.org/freeipa/ticket/5797. Standa From 5f59311092d7f2205287d8c2945325d1017c866a Mon Sep 17 00:00:00 2001 From: Stanislav Laznicka Date: Thu, 9 Jun 2016 13:13:24 +0200 Subject: [PATCH] host/service-show/find shouldn't fail on in

Re: [Freeipa-devel] [PATCH] 0006 add context to exception on LdapEntry decode error

2016-06-09 Thread Stanislav Laznicka
On 06/09/2016 11:58 AM, Florence Blanc-Renaud wrote: On 06/08/2016 01:14 PM, Stanislav Laznicka wrote: On 06/08/2016 01:13 PM, Stanislav Laznicka wrote: On 06/07/2016 05:11 PM, Florence Blanc-Renaud wrote: On 06/07/2016 04:08 PM, Stanislav Laznicka wrote: On 06/06/2016 02:47 PM, Florence

Re: [Freeipa-devel] [PATCH 0046] Don't fail in find/show methods if userCertificate is invalid

2016-06-09 Thread Stanislav Laznicka
On 06/09/2016 02:51 PM, Rob Crittenden wrote: Stanislav Laznicka wrote: Hello, Please see the attached patch of https://fedorahosted.org/freeipa/ticket/5797. Standa Just wondering out loud but should usercertificate be excluded from the output if it is unparsable? Is there any value in

Re: [Freeipa-devel] [PATCH 0046] Don't fail in find/show methods if userCertificate is invalid

2016-06-10 Thread Stanislav Laznicka
On 06/09/2016 04:32 PM, Rob Crittenden wrote: Fraser Tweedale wrote: On Thu, Jun 09, 2016 at 03:07:34PM +0200, Martin Basti wrote: On 09.06.2016 15:03, Martin Basti wrote: On 09.06.2016 15:02, Stanislav Laznicka wrote: On 06/09/2016 02:51 PM, Rob Crittenden wrote: Stanislav Laznicka wrote

Re: [Freeipa-devel] [PATCH] 0003 batch command can be used to trigger internal errors on server

2016-06-10 Thread Stanislav Laznicka
On 06/08/2016 02:06 PM, Florence Blanc-Renaud wrote: On 06/08/2016 10:07 AM, Petr Spacek wrote: On 7.6.2016 15:11, Stanislav Laznicka wrote: Hello, Thank you for your patch. As the thin-client patches were pushed in the meantime, the patch won't apply. Could you please send a rebased ve

Re: [Freeipa-devel] [PATCH] 0003 batch command can be used to trigger internal errors on server

2016-06-13 Thread Stanislav Laznicka
On 06/13/2016 10:15 AM, Petr Vobornik wrote: On 06/10/2016 06:31 PM, Stanislav Laznicka wrote: On 06/08/2016 02:06 PM, Florence Blanc-Renaud wrote: On 06/08/2016 10:07 AM, Petr Spacek wrote: On 7.6.2016 15:11, Stanislav Laznicka wrote: Hello, Thank you for your patch. As the thin-client

Re: [Freeipa-devel] [PATCH 0043] Stop uninstaller from failing if a service can't be started

2016-06-14 Thread Stanislav Laznicka
On 06/13/2016 02:51 PM, Martin Babinsky wrote: On 06/07/2016 10:14 AM, Stanislav Laznicka wrote: https://fedorahosted.org/freeipa/ticket/5775 Umm, wouldn't it be better to augment the `Service.start()/restart()` methods themselves with parameters that will suppress exception raisin

Re: [Freeipa-devel] [PATCH 0043] Stop uninstaller from failing if a service can't be started

2016-06-14 Thread Stanislav Laznicka
On 06/14/2016 09:25 AM, Stanislav Laznicka wrote: On 06/13/2016 02:51 PM, Martin Babinsky wrote: On 06/07/2016 10:14 AM, Stanislav Laznicka wrote: https://fedorahosted.org/freeipa/ticket/5775 Umm, wouldn't it be better to augment the `Service.start()/restart()` methods themselves

[Freeipa-devel] [PATCH 0047] Fix uninitialized variables in replicainstall

2016-06-16 Thread Stanislav Laznicka
Hello, There was a possible use of uninitialized variables in replicainstall. From 1b26d42e00506b007e087c74cafc0327090aec40 Mon Sep 17 00:00:00 2001 From: Stanislav Laznicka Date: Thu, 16 Jun 2016 10:05:34 +0200 Subject: [PATCH] Fix unitialized variables in replicainstall ipaconf and

[Freeipa-devel] [PATCH 0048] Remove sys.exit() from installer modules

2016-06-16 Thread Stanislav Laznicka
: Stanislav Laznicka Date: Thu, 16 Jun 2016 17:12:24 +0200 Subject: [PATCH] Remove sys.exit from install modules and scripts sys.exit() calls sometimes make it hard to find bugs and mask code that does not always work properly. https://fedorahosted.org/freeipa/ticket/5750 --- install/tools/ipa-adtrust

Re: [Freeipa-devel] [PATCH 0048] Remove sys.exit() from installer modules

2016-06-16 Thread Stanislav Laznicka
On 06/17/2016 07:45 AM, Petr Spacek wrote: On 16.6.2016 17:33, Stanislav Laznicka wrote: Hello, This patch removes most sys.exits() from installer modules and scripts and replaces them with ScriptError. I only left sys.exits at places where the user decides yes/no on continuation of the script

Re: [Freeipa-devel] [PATCH 0042] Removed dead code from LDAPRemoveReverseMember

2016-06-17 Thread Stanislav Laznicka
On 06/14/2016 04:40 PM, Jan Cholasta wrote: On 14.6.2016 16:35, Martin Basti wrote: On 14.06.2016 16:37, Jan Cholasta wrote: On 14.6.2016 16:29, Martin Basti wrote: On 08.06.2016 14:17, Stanislav Laznicka wrote: On 06/07/2016 10:42 AM, Martin Basti wrote: On 07.06.2016 10:43, Jan Cholasta

Re: [Freeipa-devel] [PATCH 0048] Remove sys.exit() from installer modules

2016-06-17 Thread Stanislav Laznicka
On 06/17/2016 08:48 AM, Petr Spacek wrote: On 17.6.2016 08:43, Stanislav Laznicka wrote: On 06/17/2016 07:45 AM, Petr Spacek wrote: On 16.6.2016 17:33, Stanislav Laznicka wrote: Hello, This patch removes most sys.exits() from installer modules and scripts and replaces them with ScriptError

Re: [Freeipa-devel] [PATCH 0048] Remove sys.exit() from installer modules

2016-06-17 Thread Stanislav Laznicka
On 06/17/2016 09:51 AM, Petr Vobornik wrote: On 17.6.2016 09:24, Stanislav Laznicka wrote: On 06/17/2016 08:48 AM, Petr Spacek wrote: On 17.6.2016 08:43, Stanislav Laznicka wrote: On 06/17/2016 07:45 AM, Petr Spacek wrote: On 16.6.2016 17:33, Stanislav Laznicka wrote: Hello, This patch

Re: [Freeipa-devel] [PATCH 0048] Remove sys.exit() from installer modules

2016-06-17 Thread Stanislav Laznicka
On 06/17/2016 01:01 PM, Petr Vobornik wrote: On 17.6.2016 12:12, Stanislav Laznicka wrote: On 06/17/2016 09:51 AM, Petr Vobornik wrote: On 17.6.2016 09:24, Stanislav Laznicka wrote: On 06/17/2016 08:48 AM, Petr Spacek wrote: On 17.6.2016 08:43, Stanislav Laznicka wrote: On 06/17/2016 07:45

Re: [Freeipa-devel] [PATCH 0047] Fix uninitialized variables in replicainstall

2016-06-20 Thread Stanislav Laznicka
On 06/16/2016 10:16 AM, Stanislav Laznicka wrote: Hello, There was a possible use of uninitialized variables in replicainstall. Discard the patch, Martin sent the same patch yesterday but Honza seems to have already taken care of it. -- Manage your subscription for the Freeipa-devel

[Freeipa-devel] [PATCH 0049] Fix host principal password required in ipa-ca-install

2016-06-22 Thread Stanislav Laznicka
rpcclient connection fail for some other reason and the control would fall back to SSH, this will still be broken and needs fixing. I will create a ticket for that. Standa From 66e49904f7901fbfebcbd1a8b9f397667e89c60b Mon Sep 17 00:00:00 2001 From: Stanislav Laznicka Date: Wed, 22 Jun 2016 16:08:49

Re: [Freeipa-devel] [PATCH 0049] Fix host principal password required in ipa-ca-install

2016-06-22 Thread Stanislav Laznicka
On 06/23/2016 08:09 AM, Jan Cholasta wrote: On 22.6.2016 16:22, Stanislav Laznicka wrote: Hello, Please see the patch attached that fixes the issue from https://fedorahosted.org/freeipa/ticket/5965. The patch took me quite a while to create as I thought something was wrong with the SshExec

[Freeipa-devel] [PATCH 0050-0051] Topology fixes for CA suffix

2016-06-23 Thread Stanislav Laznicka
Hello, attached are patches fixing the logic mentioned in https://fedorahosted.org/freeipa/ticket/5967. From 7d833bf0018f4b3e85bae88cbe383568f6d9c3f4 Mon Sep 17 00:00:00 2001 From: Stanislav Laznicka Date: Thu, 23 Jun 2016 16:04:04 +0200 Subject: [PATCH 1/2] Raise exception on incorrect

Re: [Freeipa-devel] [PATCH 0050-0051] Topology fixes for CA suffix

2016-06-23 Thread Stanislav Laznicka
On 06/23/2016 04:38 PM, Petr Vobornik wrote: On 06/23/2016 04:20 PM, Stanislav Laznicka wrote: Hello, attached are patches fixing the logic mentioned in https://fedorahosted.org/freeipa/ticket/5967. If server supports the suffix can be verified in validate_nodes call where masters are

Re: [Freeipa-devel] [PATCH 0050-0051] Topology fixes for CA suffix

2016-06-24 Thread Stanislav Laznicka
On 06/24/2016 11:52 AM, Martin Babinsky wrote: On 06/24/2016 11:30 AM, Petr Vobornik wrote: On 06/23/2016 05:30 PM, Stanislav Laznicka wrote: On 06/23/2016 04:38 PM, Petr Vobornik wrote: On 06/23/2016 04:20 PM, Stanislav Laznicka wrote: Hello, attached are patches fixing the logic mentioned

[Freeipa-devel] [PATCH 0052] Added missing nsSystemIndex attributes to .update file

2016-06-24 Thread Stanislav Laznicka
https://fedorahosted.org/freeipa/ticket/5947 From e177f6377a84691ba1cdb45ff39488d5d8f8f34d Mon Sep 17 00:00:00 2001 From: Stanislav Laznicka Date: Fri, 24 Jun 2016 14:21:01 +0200 Subject: [PATCH] Add missing nsSystemIndex attributes https://fedorahosted.org/freeipa/ticket/5947 --- install

Re: [Freeipa-devel] [PATCH 0043] Stop uninstaller from failing if a service can't be started

2016-06-24 Thread Stanislav Laznicka
On 06/21/2016 04:39 PM, Martin Basti wrote: On 14.06.2016 17:26, Stanislav Laznicka wrote: -signerd_service.start() +try: +signerd_service.start() +except Exception as e: +root_logger.error("Unable to start '{svcna

Re: [Freeipa-devel] [PATCH] 959 mod_auth_gssapi: enable unique credential caches names

2016-06-24 Thread Stanislav Laznicka
On 06/24/2016 03:11 PM, Martin Basti wrote: On 23.06.2016 17:46, Robbie Harwood wrote: Petr Vobornik writes: mod_auth_gssapi > 1.4.0 implements support for unique ccaches names. Excited to see this appear! Sessions are not in use so there's no need to worry about a sweeper. This looks corr

Re: [Freeipa-devel] [PATCH 0043] Stop uninstaller from failing if a service can't be started

2016-06-24 Thread Stanislav Laznicka
On 06/24/2016 04:04 PM, Martin Basti wrote: On 24.06.2016 15:50, Stanislav Laznicka wrote: On 06/21/2016 04:39 PM, Martin Basti wrote: On 14.06.2016 17:26, Stanislav Laznicka wrote: -signerd_service.start() +try: +signerd_service.start

Re: [Freeipa-devel] [PATCH 0042] Removed dead code from LDAPRemoveReverseMember

2016-06-28 Thread Stanislav Laznicka
On 06/17/2016 09:14 AM, Stanislav Laznicka wrote: On 06/14/2016 04:40 PM, Jan Cholasta wrote: On 14.6.2016 16:35, Martin Basti wrote: On 14.06.2016 16:37, Jan Cholasta wrote: On 14.6.2016 16:29, Martin Basti wrote: On 08.06.2016 14:17, Stanislav Laznicka wrote: On 06/07/2016 10:42 AM

[Freeipa-devel] [PATCH 0053] Fix wrong imports in copy-schema-to-ca

2016-06-28 Thread Stanislav Laznicka
Hello, The attached patch fixes wrong imports in copy-schema-to-ca.py script. https://fedorahosted.org/freeipa/ticket/6003 From 8c72d5257f0643ca486f6c7a2649123a72e5ceb2 Mon Sep 17 00:00:00 2001 From: Stanislav Laznicka Date: Tue, 28 Jun 2016 14:37:34 +0200 Subject: [PATCH] Fix wrong imports

Re: [Freeipa-devel] [PATCH 0042] Removed dead code from LDAPRemoveReverseMember

2016-06-29 Thread Stanislav Laznicka
On 06/28/2016 10:34 AM, Stanislav Laznicka wrote: On 06/17/2016 09:14 AM, Stanislav Laznicka wrote: On 06/14/2016 04:40 PM, Jan Cholasta wrote: On 14.6.2016 16:35, Martin Basti wrote: On 14.06.2016 16:37, Jan Cholasta wrote: On 14.6.2016 16:29, Martin Basti wrote: On 08.06.2016 14:17

Re: [Freeipa-devel] [PATCH] 0007 Fix ipa-server-certinstall with certs signed by 3rd-party CA

2016-06-29 Thread Stanislav Laznicka
On 06/22/2016 09:29 PM, Florence Blanc-Renaud wrote: Hi, This patch fixes ipa-server-certinstall when used with 3rd-party certs. The scenario is the following: - install the server with an embedded CA - use ipa-cacert-manage to install a 3rd party CA - use ipa-certupdate to put the 3rd party CA

Re: [Freeipa-devel] [PATCH 0096] Add authentication indicators support to Host objects

2016-06-29 Thread Stanislav Laznicka
There are no updated managed permissions for krbprincipalauthind attribute in hosts.py, is this omitted on purpose? Martin^2 The attached patch adds them should these be required. From becd1e2d284dcd98a2ba35fcd68e0f9354f0a365 Mon Sep 17 00:00:00 2001 From: Stanislav Laznicka Date: Wed, 29

Re: [Freeipa-devel] [PATCH 0096] Add authentication indicators support to Host objects

2016-06-29 Thread Stanislav Laznicka
On 06/29/2016 03:53 PM, Martin Basti wrote: On 29.06.2016 15:52, Stanislav Laznicka wrote: On 06/24/2016 03:14 PM, Martin Basti wrote: On 24.06.2016 15:11, Sumit Bose wrote: On Tue, Jun 21, 2016 at 02:25:49PM -0400, Nathaniel McCallum wrote: https://fedorahosted.org/freeipa/ticket/433

Re: [Freeipa-devel] [PATCH 0096] Add authentication indicators support to Host objects

2016-06-29 Thread Stanislav Laznicka
On 06/29/2016 04:02 PM, Stanislav Laznicka wrote: On 06/29/2016 03:53 PM, Martin Basti wrote: On 29.06.2016 15:52, Stanislav Laznicka wrote: On 06/24/2016 03:14 PM, Martin Basti wrote: On 24.06.2016 15:11, Sumit Bose wrote: On Tue, Jun 21, 2016 at 02:25:49PM -0400, Nathaniel McCallum

Re: [Freeipa-devel] [PATCH 0545] cert.py: split doctring to multiple ugettext strings

2016-06-30 Thread Stanislav Laznicka
On 06/30/2016 09:18 AM, Martin Basti wrote: Make life of translators easier, there was recent change in cert.py docstring, so they have to translate the whole docstring again, so I'm splitting it to multiple parts. Patch attached I'm not sure whether the "See RFC 5280 for more details" shoul

Re: [Freeipa-devel] [PATCH 0545] cert.py: split doctring to multiple ugettext strings

2016-06-30 Thread Stanislav Laznicka
On 06/30/2016 01:08 PM, Martin Basti wrote: On 30.06.2016 10:13, Stanislav Laznicka wrote: On 06/30/2016 09:18 AM, Martin Basti wrote: Make life of translators easier, there was recent change in cert.py docstring, so they have to translate the whole docstring again, so I'm splitting

Re: [Freeipa-devel] [PATCH 0144] Fix `Conflicts` with ipa-python

2016-06-30 Thread Stanislav Laznicka
On 06/29/2016 02:36 PM, Petr Spacek wrote: Hello, Fix `Conflicts` with ipa-python The conflicts should have constant version in it because it is related to package split. https://fedorahosted.org/freeipa/ticket/6004 I've tested the same change in RHEL 7.2->7.3 upgrade and it worked just fine

Re: [Freeipa-devel] [PATCH] 0070..0071 Fix replica installation from IPA v4.2

2016-06-30 Thread Stanislav Laznicka
On 06/17/2016 08:59 AM, Fraser Tweedale wrote: The attached patches fix https://fedorahosted.org/freeipa/ticket/5963 Thanks Milan for reporting. Cheers, Fraser Tried this patch on 4.4 with domain level set to 0 and it does fix the issue for me so ACK for 4.4. Not sure if this is going to be

[Freeipa-devel] [PATCH 0056] removed unused parameter from migrate-ds

2016-07-11 Thread Stanislav Laznicka
https://fedorahosted.org/freeipa/ticket/6034 From 1bd10577189ee3037244a51edc1af82bde05806e Mon Sep 17 00:00:00 2001 From: Stanislav Laznicka Date: Mon, 11 Jul 2016 12:31:39 +0200 Subject: [PATCH] Removed unused method parameter from migrate-ds An extra parameter on client side command override

[Freeipa-devel] [PATCH 0057] Don't show part of warning containing --force-ntpd in replica install

2016-07-11 Thread Stanislav Laznicka
https://fedorahosted.org/freeipa/ticket/6046 From b35b2154984df77bdaf08bc82c227ea9f801ed00 Mon Sep 17 00:00:00 2001 From: Stanislav Laznicka Date: Mon, 11 Jul 2016 13:17:32 +0200 Subject: [PATCH] Don't show --force-ntpd option in replica install Don't show the warning message

Re: [Freeipa-devel] [PATCH 0183] ipa-advise: correct handling of plugin namespace iteration

2016-07-11 Thread Stanislav Laznicka
On 07/11/2016 02:18 PM, Martin Babinsky wrote: https://fedorahosted.org/freeipa/ticket/6044 ACK. -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

Re: [Freeipa-devel] [PATCH 0057] Don't show part of warning containing --force-ntpd in replica install

2016-07-11 Thread Stanislav Laznicka
On 07/11/2016 04:27 PM, Petr Vobornik wrote: On 07/11/2016 01:23 PM, Stanislav Laznicka wrote: https://fedorahosted.org/freeipa/ticket/6046 Isn't the bug about something else? The issue was that ipa-replica-install doesn't have --force-ntpd option. It is an option of ipa-clie

Re: [Freeipa-devel] [PATCH 0182] ipa-compat-manage: use server API to retrieve plugin statu

2016-07-12 Thread Stanislav Laznicka
On 07/11/2016 10:50 AM, Martin Babinsky wrote: Fixes regression reported in https://fedorahosted.org/freeipa/ticket/6033 Hello, The ticket is rather cryptic as it has ipa-compat-manage in header but describes error in ipa-nis-manage. Both scripts suffer with the very same error, could you

Re: [Freeipa-devel] [PATCH 0182] ipa-compat-manage: use server API to retrieve plugin statu

2016-07-12 Thread Stanislav Laznicka
On 07/12/2016 10:02 AM, Stanislav Laznicka wrote: On 07/11/2016 10:50 AM, Martin Babinsky wrote: Fixes regression reported in https://fedorahosted.org/freeipa/ticket/6033 Hello, The ticket is rather cryptic as it has ipa-compat-manage in header but describes error in ipa-nis-manage. Both

Re: [Freeipa-devel] [PATCH 0550] host-find: do not show SSH keys by default

2016-07-12 Thread Stanislav Laznicka
On 07/08/2016 01:52 PM, Martin Basti wrote: Reproducible only with 2+ hosts, patch attached. https://fedorahosted.org/freeipa/ticket/6043 ACK. -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://w

Re: [Freeipa-devel] [PATCH 0184] vault-add: set the default vault type on the client side if none was given

2016-07-12 Thread Stanislav Laznicka
On 07/12/2016 02:10 PM, Martin Babinsky wrote: Quick fix for https://fedorahosted.org/freeipa/ticket/6047 Note that it depends on mbasti's patch 552 (already acked) otherwise client-side vault commands would not be even visible in CLI. ACK. -- Manage your subscription for the Freeipa-devel

Re: [Freeipa-devel] [PATCH 0057] Don't show part of warning containing --force-ntpd in replica install

2016-07-12 Thread Stanislav Laznicka
On 07/12/2016 08:44 AM, Stanislav Laznicka wrote: On 07/11/2016 04:27 PM, Petr Vobornik wrote: On 07/11/2016 01:23 PM, Stanislav Laznicka wrote: https://fedorahosted.org/freeipa/ticket/6046 Isn't the bug about something else? The issue was that ipa-replica-install doesn't ha

Re: [Freeipa-devel] [PATCH 0057] Don't show part of warning containing --force-ntpd in replica install

2016-07-13 Thread Stanislav Laznicka
On 07/13/2016 09:51 AM, Petr Vobornik wrote: On 07/13/2016 08:26 AM, Stanislav Laznicka wrote: On 07/12/2016 08:44 AM, Stanislav Laznicka wrote: On 07/11/2016 04:27 PM, Petr Vobornik wrote: On 07/11/2016 01:23 PM, Stanislav Laznicka wrote: https://fedorahosted.org/freeipa/ticket/6046

[Freeipa-devel] [PATCH 0058] Make get_entries not ignore its size_limit argument

2016-07-14 Thread Stanislav Laznicka
kind of important if the environment size_limit is not set properly :) The patch does not fix the non-propagation of the paged_search, though. Cheers, Standa From f76d301b418219b61a571e12ad7404eaf91a5046 Mon Sep 17 00:00:00 2001 From: Stanislav Laznicka Date: Thu, 14 Jul 2016 13:53:56 +0200 S

[Freeipa-devel] [PATCH 0059] Fix to ipa-cacert-manage man and help differences

2016-07-15 Thread Stanislav Laznicka
https://fedorahosted.org/freeipa/ticket/6013 From 44e55c3523aa1bf9a7243b9d22fb52e50f7c9440 Mon Sep 17 00:00:00 2001 From: Stanislav Laznicka Date: Fri, 15 Jul 2016 14:04:59 +0200 Subject: [PATCH] Improvements for the ipa-cacert-manage man and help The man page for ipa-cacert-manage didn&#

Re: [Freeipa-devel] [DESIGN] Time-Based HBAC Policies

2016-07-15 Thread Stanislav Laznicka
On 07/15/2016 02:10 PM, Simo Sorce wrote: On Wed, 2016-05-18 at 15:28 +0200, Stanislav Laznicka wrote: On 05/18/2016 02:19 PM, Alexander Bokovoy wrote: On Wed, 18 May 2016, Stanislav Laznicka wrote: when removal succeeds but addition fails for some reason? The operation is not atomic anymore

Re: [Freeipa-devel] [DESIGN] Time-Based HBAC Policies

2016-07-15 Thread Stanislav Laznicka
On 07/15/2016 03:11 PM, Simo Sorce wrote: On Fri, 2016-07-15 at 14:29 +0200, Stanislav Laznicka wrote: On 07/15/2016 02:10 PM, Simo Sorce wrote: On Wed, 2016-05-18 at 15:28 +0200, Stanislav Laznicka wrote: On 05/18/2016 02:19 PM, Alexander Bokovoy wrote: On Wed, 18 May 2016, Stanislav

<    1   2