Re: [Freeipa-devel] NTP in FreeIPA

On Thu, Nov 24, 2016 at 9:14 AM, Martin Basti wrote: > > > On 24.11.2016 16:11, Gabe Alford wrote: > > On Thu, Nov 24, 2016 at 1:29 AM, Martin Basti wrote: > >> >> >> On 24.11.2016 07:06, David Kupka wrote: >> >>> On 22/11/16 23:15, Gabe

Re: [Freeipa-devel] NTP in FreeIPA

On Thu, Nov 24, 2016 at 1:29 AM, Martin Basti wrote: > > > On 24.11.2016 07:06, David Kupka wrote: > >> On 22/11/16 23:15, Gabe Alford wrote: >> >>> I would say that it is worth keeping in FreeIPA. I know myself and some >>> customers use its functiona

Re: [Freeipa-devel] NTP in FreeIPA

I would say that it is worth keeping in FreeIPA. I know myself and some customers use its functionality by having the clients sync to the IPA servers and have the servers sync to the NTP source. This way if the NTP source ever gets disrupted for long periods of time (which has happened in my enviro

Re: [Freeipa-devel] [PATCH] 0008 Do not allow installation in FIPS mode

On Mon, Jun 27, 2016 at 12:38 AM, Florence Blanc-Renaud wrote: > Hi, > > this fix is a port of Bug 1131570 - Do not allow IdM server/replica/client > installation in a FIPS-140 mode > It prevents installation of FreeIPA if the host is fips-enabled. > > https://fedorahosted.org/freeipa/ticket/5761

Re: [Freeipa-devel] [PATCH] 0001 (update 2) provide more information for "ipa cert-revoke -h"

Patrice, Can you please send rebased version of this patch? Thanks, Gabe On Fri, May 6, 2016 at 6:45 AM, Martin Basti wrote: > > > On 04.05.2016 14:30, Gabe Alford wrote: > > On Wed, May 4, 2016 at 1:35 AM, Patrice Duc-Jacquet < > patdu...@gmail.com> wrote: > >

Re: [Freeipa-devel] [PATCH 0069] ipa-nis-manage enable: change service name from 'portmap' to 'rpcbind'

On Tue, May 10, 2016 at 6:47 AM, Martin Basti wrote: > > > On 10.05.2016 14:42, Gabe Alford wrote: > > On Tue, May 10, 2016 at 6:26 AM, Martin Basti wrote: > >> >> >> On 10.05.2016 14:13, Gabe Alford wrote: >> >> On Tue, May 10, 2016 at 2:00

Re: [Freeipa-devel] [PATCH 0069] ipa-nis-manage enable: change service name from 'portmap' to 'rpcbind'

On Tue, May 10, 2016 at 6:26 AM, Martin Basti wrote: > > > On 10.05.2016 14:13, Gabe Alford wrote: > > On Tue, May 10, 2016 at 2:00 AM, Martin Basti wrote: > >> >> >> On 04.05.2016 15:14, Gabe Alford wrote: >> >> On Tue, May 3, 2016 at 11:17 PM, A

Re: [Freeipa-devel] [PATCH 0069] ipa-nis-manage enable: change service name from 'portmap' to 'rpcbind'

On Tue, May 10, 2016 at 2:00 AM, Martin Basti wrote: > > > On 04.05.2016 15:14, Gabe Alford wrote: > > On Tue, May 3, 2016 at 11:17 PM, Abhijeet Kasurde < > akasu...@redhat.com> wrote: > >> Hi Gabe, >> >> I am wondering, how are we handling "Ca

Re: [Freeipa-devel] [PATCH 0068] Use ipareplica-ca-install.log instead of ipaserver-ca-install.log

Yeah. That makes sense. Let's fix it with the other logger tickets. Gabe On Tue, May 10, 2016 at 5:47 AM, Martin Basti wrote: > > > On 03.05.2016 15:41, Gabe Alford wrote: > > Hello, > > Fix for https://fedorahosted.org/freeipa/ticket/5727. Per comment #7, &

Re: [Freeipa-devel] [PATCH 0069] ipa-nis-manage enable: change service name from 'portmap' to 'rpcbind'

s returns a non-zero exit status. However when running 'ipa-nis-manage enable', an exception is never hit even if portmap is not installed, hence portmap always being enabled. So it seems that if the process is not installed, "CalledProcessError" doesn't catch an e

Re: [Freeipa-devel] [PATCH] 0001 (update 2) provide more information for "ipa cert-revoke -h"

On Wed, May 4, 2016 at 1:35 AM, Patrice Duc-Jacquet wrote: > Hi everyone > > this is a second update that take into account review feedback. > > In case the proposal fix is K what are the next step to commit this > change. I'm not sure to really understand the process. Thanks and regards > If th

[Freeipa-devel] [PATCH 0069] ipa-nis-manage enable: change service name from 'portmap' to 'rpcbind'

Hello, Fix for https://fedorahosted.org/freeipa/ticket/5857 Thanks, Gabe From 950da9c812a162569379bd9e530977960e9ab7ca Mon Sep 17 00:00:00 2001 From: Gabe Date: Tue, 3 May 2016 21:33:33 -0600 Subject: [PATCH] ipa-nis-manage enable: change service name from 'portmap' to 'rpcbind' https://fedor

Re: [Freeipa-devel] [PATCH] 0001 provide more information for "ipa cert-revoke -h"

On Tue, May 3, 2016 at 9:35 AM, Patrice Duc-Jacquet < patrice.duc.jacq...@gmail.com> wrote: > On 05/03/2016 04:41 PM, Rob Crittenden wrote: > > Gabe Alford wrote: >> >>> Hello, >>> >>> Thank you for your patch as well. >>> >>&g

Re: [Freeipa-devel] [PATCH] 0001 provide more information for "ipa cert-revoke -h"

Hello, Thank you for your patch as well. >-doc=_('Reason for revoking the certificate (0-10)'), >+doc=_('Reason for revoking the certificate (0-10). See RFC 5280 (paragraph 5.3.1) for reason details'), Rather than just specifying the RFC with the paragraph to go look up,

[Freeipa-devel] [PATCH 0068] Use ipareplica-ca-install.log instead of ipaserver-ca-install.log

Hello, Fix for https://fedorahosted.org/freeipa/ticket/5727. Per comment #7, this removes ipaserver-ca-install.log and uses ipareplica-ca-install.log. Thanks, Gabe From 9f8cb593c1b207d96693879fbd8717a78421e157 Mon Sep 17 00:00:00 2001 From: Gabe Date: Tue, 3 May 2016 07:30:13 -0600 Subject: [PA

[Freeipa-devel] Possble FreeIPA Trac Malicious Link

Hey all, This is something we may need to watch for. I noticed that a possible malicious link was added to the FreeIPA Trac start page. You can view it here: https://fedorahosted.org/freeipa/wiki/WikiStart?action=diff&version=22. I changed it back to the original text before the change. I know tha

Re: [Freeipa-devel] [PATCH 0434] log: add timestamp to filename of logs

On Fri, Mar 11, 2016 at 7:35 AM, Petr Vobornik wrote: > On 03/11/2016 03:00 PM, Rob Crittenden wrote: > >> Martin Kosek wrote: >> >>> On 03/11/2016 09:55 AM, Jan Cholasta wrote: >>> On 11.3.2016 09:33, Martin Kosek wrote: > On 03/08/2016 07:07 PM, Martin Basti wrote: > >> >>

[Freeipa-devel] [PATCH 0067-0069] Various IPA log fixes

Hello, Attached patches fix the following tickets related to IPA log files: https://fedorahosted.org/freeipa/ticket/5724 https://fedorahosted.org/freeipa/ticket/5726 https://fedorahosted.org/freeipa/ticket/5727 Patch 0067 should be applied first, and patch 0069 applied last. Thanks, Gabe From

Re: [Freeipa-devel] [PATCH] 950 webui: remove moot error from webui build

Ack. Works as expected. Gabe On Wed, Jan 27, 2016 at 7:39 AM, Petr Vobornik wrote: > add module 'libs/d3' to a list of modules provided by third party libraries > > it is provided by d3 library in libs directory > > https://fedorahosted.org/freeipa/ticket/5641 > -- > Petr Vobornik > > -- > Mana

Re: [Freeipa-devel] [PATCH 0409] Warn user when ipa *-find reach search limit

On Tue, Jan 26, 2016 at 7:33 AM, Martin Basti wrote: > > > On 26.01.2016 15:17, Petr Spacek wrote: > >> On 26.1.2016 15:06, Martin Basti wrote: >> >>> >>> On 26.01.2016 15:00, Gabe Alford wrote: >>> >>>> On Tue, Jan 26, 2016

Re: [Freeipa-devel] [PATCH 0409] Warn user when ipa *-find reach search limit

On Tue, Jan 26, 2016 at 6:56 AM, Martin Basti wrote: > > > On 26.01.2016 14:55, Petr Spacek wrote: > >> On 26.1.2016 14:02, Martin Basti wrote: >> >>> https://fedorahosted.org/freeipa/ticket/5634 >>> >>> Patch attached. >>> >> It works for me in API, CLI, and Web UI. The warning is shown as expec

Re: [Freeipa-devel] [PATCH] 942 webui: add examples to network address validator error message

LGTM. Gabe On Tue, Dec 22, 2015 at 6:06 AM, Petr Vobornik wrote: > https://fedorahosted.org/freeipa/ticket/5532 > -- > Petr Vobornik > > -- > Manage your subscription for the Freeipa-devel mailing list: > https://www.redhat.com/mailman/listinfo/freeipa-devel > Contribute to FreeIPA: http://www.

Re: [Freeipa-devel] [PATCH 0065] ipa-replica-install prints incorrect error message when replica is already installed

12.2015 07:08, Jan Cholasta wrote: > >> LGTM >> >> On 8.12.2015 17:04, Gabe Alford wrote: >> >>> Updated patch attached. >>> >>> On Tue, Dec 8, 2015 at 8:27 AM, Martin Basti >> <mailto:mba...@redhat.com>> wrote: >>> >>>

Re: [Freeipa-devel] [PATCH 0065] ipa-replica-install prints incorrect error message when replica is already installed

Updated patch attached. On Tue, Dec 8, 2015 at 8:27 AM, Martin Basti wrote: > > > On 08.12.2015 16:26, Gabe Alford wrote: > > Just to confirm: > > if server is installed: > Let's stop here and not do anything else > > if domain level 0: > c

Re: [Freeipa-devel] [PATCH 0065] ipa-replica-install prints incorrect error message when replica is already installed

> On 08.12.2015 16:14, Jan Cholasta wrote: >> >>> On 8.12.2015 16:09, Martin Basti wrote: >>> >>>> >>>> >>>> On 01.12.2015 14:57, Gabe Alford wrote: >>>> >>>>> Sorry guys, I forgot to add a meaningful subject to

Re: [Freeipa-devel] [PATCH 0065]

Yup you are right. I meant to bump the other one. > It is on my TODO list. Awesome. On Mon, Dec 7, 2015 at 7:20 AM, Martin Basti wrote: > > > On 07.12.2015 14:55, Gabe Alford wrote: > > Bump for review. > > On Mon, Nov 30, 2015 at 7:31 PM, Gabe Alford > wrote: >

Re: [Freeipa-devel] [PATCH 0065]

Bump for review. On Mon, Nov 30, 2015 at 7:31 PM, Gabe Alford wrote: > Hello, > > Patch fix for the following tickets: > > https://fedorahosted.org/freeipa/ticket/5022 > https://fedorahosted.org/freeipa/ticket/5320 > > Thanks, > > Gabe > -- Manage your s

Re: [Freeipa-devel] [PATCH 0066] Migrate wget references to curl

My bad. Copy and paste error. Updated patch attached. Thanks, Gabe On Fri, Dec 4, 2015 at 12:17 PM, Martin Basti wrote: > > > On 01.12.2015 15:00, Gabe Alford wrote: > > Hello, > > Fix for https://fedorahosted.org/freeipa/ticket/5458 > > Thanks, > > Gabe

[Freeipa-devel] [PATCH 0066] Migrate wget references to curl

Hello, Fix for https://fedorahosted.org/freeipa/ticket/5458 Thanks, Gabe From 490bb5aceb2c1ea3385c15bb85aea5c29c77f70b Mon Sep 17 00:00:00 2001 From: Gabe Date: Tue, 1 Dec 2015 06:45:59 -0700 Subject: [PATCH] Migrate wget references and usage to curl https://fedorahosted.org/freeipa/ticket/545

[Freeipa-devel] [PATCH 0065] ipa-replica-install prints incorrect error message when replica is already installed

Sorry guys, I forgot to add a meaningful subject to this message. Ignore the previous thread start. -- Forwarded message -- From: Gabe Alford Date: Mon, Nov 30, 2015 at 7:31 PM Subject: [PATCH 0065] To: freeipa-devel Hello, Patch fix for the following tickets: https

[Freeipa-devel] [PATCH 0065]

Hello, Patch fix for the following tickets: https://fedorahosted.org/freeipa/ticket/5022 https://fedorahosted.org/freeipa/ticket/5320 Thanks, Gabe From 3e0a6c556a3402bbd0e15a6f113498aae27e2cf4 Mon Sep 17 00:00:00 2001 From: Gabe Date: Mon, 30 Nov 2015 18:42:14 -0700 Subject: [PATCH] ipa-replic

Re: [Freeipa-devel] [PATCH 0015] mod_auth_gssapi: Remove ntlmssp support and restrict, mechanism to krb5

Bump for push. May need a rebase. On Wed, Jul 22, 2015 at 7:49 AM, Simo Sorce wrote: > - Original Message - > > From: "Christian Heimes" > > To: "freeipa-devel" > > Sent: Wednesday, July 22, 2015 9:32:59 AM > > Subject: [Freeipa-devel] [PATCH 0015] mod_auth_gssapi: Remove ntlmssp > sup

Re: [Freeipa-devel] [PATCH 0384] ipa-client-automount: Leverage IPAChangeConf to configure the idmapd

Ack. Gabe On Wed, Nov 11, 2015 at 7:22 AM, Tomas Babej wrote: > Hi, > > Simple regexp substitution caused that the domain directive fell under > an inapprorpiate section, if the domain directive was not present. Hence > the idmapd.conf file was not properly parsed. > > Use IPAChangeConf to put

Re: [Freeipa-devel] [PATCH 0064] Check if IPA is configured before attempting a winsync migration

Thanks. Updated patch attached. Gabe On Fri, Nov 20, 2015 at 10:36 AM, Martin Babinsky wrote: > On 11/20/2015 04:02 PM, Gabe Alford wrote: > >> Hello, >> >> Fix for https://fedorahosted.org/freeipa/ticket/5470 >> >> Thanks, >> >> Gabe >>

[Freeipa-devel] [PATCH 0064] Check if IPA is configured before attempting a winsync migration

Hello, Fix for https://fedorahosted.org/freeipa/ticket/5470 Thanks, Gabe From 9e9b8813d069b3a65e16ef90a602bf35feade9c9 Mon Sep 17 00:00:00 2001 From: Gabe Date: Fri, 20 Nov 2015 07:54:30 -0700 Subject: [PATCH] Check if IPA is configured before attempting a winsync migration https://fedorahost

Re: [Freeipa-devel] [PATCH 0063] ipa-replica-manage del continues when host does not exist in domain level 1

Yeah. That's better. Thanks, Martin. Ack. On Thu, Nov 12, 2015 at 6:02 AM, Martin Basti wrote: > > > On 09.11.2015 14:37, Gabe Alford wrote: > > Hello, > > Fix for https://fedorahosted.org/freeipa/ticket/5424 > > thanks, > > Gabe > > > Tha

Re: [Freeipa-devel] [PATCH 0064-0065] ipa-dns-install offers IP addresses from resolv.conf as default forwarder

Does this also fix https://fedorahosted.org/freeipa/ticket/3926? On Tue, Nov 10, 2015 at 8:58 AM, Petr Spacek wrote: > Hello, > > Patch 64: > ipa-dns-install offer IP addresses from resolv.conf as default forwarders > > In non-interactive more option --auto-forwarders can be used to do the > sam

Re: [Freeipa-devel] [PATCH 0343] Upgrade: enable custodia service during upgrade

Ack. Thanks, Gabe On Tue, Nov 3, 2015 at 11:18 AM, Martin Basti wrote: > https://fedorahosted.org/freeipa/ticket/5429 > > Patch attached. > > -- > Manage your subscription for the Freeipa-devel mailing list: > https://www.redhat.com/mailman/listinfo/freeipa-devel > Contribute to FreeIPA: http:

[Freeipa-devel] [PATCH 0063] ipa-replica-manage del continues when host does not exist in domain level 1

Hello, Fix for https://fedorahosted.org/freeipa/ticket/5424 thanks, Gabe From f2f0deee5ca743518d97efe4f01cc22c0672e87a Mon Sep 17 00:00:00 2001 From: Gabe Date: Sun, 8 Nov 2015 17:18:17 -0700 Subject: [PATCH] ipa-replica-manage del continues when host does not exist in domain level 1 - Raises

[Freeipa-devel] [PATCH 0062] custodia: ipa-upgrade failed on replica

Hello, Fix for https://fedorahosted.org/freeipa/ticket/5374. I could reproduce it as the Custodia update file was missing from the updates Makefile which in turn was not being packaged into the rpms. Thanks, Gabe From 871822779696ece33f36e6940ecc96fc090b7ea2 Mon Sep 17 00:00:00 2001 From: Gabe

Re: [Freeipa-devel] [PATCH 0060] Incomplete ports for IPA AD Trust

: > On 30.10.2015 11:10, Alexander Bokovoy wrote: > > On Fri, 30 Oct 2015, Petr Spacek wrote: > >> On 30.10.2015 07:54, Alexander Bokovoy wrote: > >>> On Thu, 29 Oct 2015, Gabe Alford wrote: > >>>> Hello, > >>>> > >>>>

Re: [Freeipa-devel] [PATCH 0061] Remove 50-lockout-policy.update file

Can do Alexander. Here is the updated patch. Gabe On Fri, Oct 30, 2015 at 12:56 AM, Alexander Bokovoy wrote: > On Thu, 29 Oct 2015, Gabe Alford wrote: > >> Hello, >> >> Fix for https://fedorahosted.org/freeipa/ticket/5418 >> > ACK but can you please add

[Freeipa-devel] [PATCH 0061] Remove 50-lockout-policy.update file

Hello, Fix for https://fedorahosted.org/freeipa/ticket/5418 Thanks, Gabe From 7a9086162717bc414a1d65ea71a2d65729f6fa7e Mon Sep 17 00:00:00 2001 From: Gabe Date: Thu, 29 Oct 2015 20:30:35 -0600 Subject: [PATCH] Remove 50-lockout-policy.update file https://fedorahosted.org/freeipa/ticket/5418 --

[Freeipa-devel] [PATCH 0060] Incomplete ports for IPA AD Trust

Hello, Fix for https://fedorahosted.org/freeipa/ticket/5414 Thanks, Gabe From 515582d66252521a3cbf6a6a48f33745bd788c86 Mon Sep 17 00:00:00 2001 From: Gabe Date: Thu, 29 Oct 2015 20:28:27 -0600 Subject: [PATCH] Incomplete ports for IPA AD Trust https://fedorahosted.org/freeipa/ticket/5414 ---

Re: [Freeipa-devel] [PATCH 0058] interactive installer does not ignore leading/trailing whitespace

My bad Martin^2. Here is an updated patch. Gabe On Thu, Oct 29, 2015 at 7:14 AM, Martin Basti wrote: > > > On 28.10.2015 02:35, Gabe Alford wrote: > > Hello, > > Fix for https://fedorahosted.org/freeipa/ticket/5355 > > Thanks, > > Gabe > > > Thank

[Freeipa-devel] [PATCH 0059] Add Firefox options to ipa-client-install man page

Hello, Fix for https://fedorahosted.org/freeipa/ticket/5375 Thanks, Gabe From 4e0dba6b17f78aa7dd631780cbfe7c4bfa9edea4 Mon Sep 17 00:00:00 2001 From: Gabe Date: Wed, 28 Oct 2015 17:39:40 -0600 Subject: [PATCH] Add Firefox options to ipa-client-install man page - Update --configure-firefox desc

[Freeipa-devel] [PATCH 0058] interactive installer does not ignore leading/trailing whitespace

Hello, Fix for https://fedorahosted.org/freeipa/ticket/5355 Thanks, Gabe From 02434fc8467bbc81313d4bda0cf0e9644c151f00 Mon Sep 17 00:00:00 2001 From: Gabe Date: Tue, 27 Oct 2015 19:17:43 -0600 Subject: [PATCH] interactive installer does not ignore leading/trailing whitespace https://fedorahos

Re: [Freeipa-devel] [PATCH 0057] Warn in no installation found when running ipa-server-install --uninstall

Thanks Martin^2. Updated patched attached. On Wed, Oct 21, 2015 at 2:46 AM, Martin Basti wrote: > > > On 20.10.2015 05:17, Gabe Alford wrote: > > Bump for re-review. > > > Hello, > > thank your for your patch, the patch LGTM, but please use print() as > fu

Re: [Freeipa-devel] [PATCH 0057] Warn in no installation found when running ipa-server-install --uninstall

Bump for re-review. On Tue, Oct 13, 2015 at 7:15 AM, Gabe Alford wrote: > No worries Petr. All a part of the review process. > > I have attached an updated patch that prints only a warning message. > > thanks, > > Gabe > > On Tue, Oct 13, 2015 at 12:39 AM, Petr Spa

Re: [Freeipa-devel] [PATCH 0056] Enable nsaccountlock in user.py cli

yield option > > But I do not like too much this code, we plan to do some ipalib > refactoring in IPA 4.4, so we can do there bigger changes and solve this > issue in nicer way. > If you don't mind, I would postpone this to IPA 4.4, instead of hacking > the framework

Re: [Freeipa-devel] [PATCH 0056] Enable nsaccountlock in user.py cli

Updated patch attached. On Tue, Oct 13, 2015 at 10:59 AM, Martin Basti wrote: > > > On 13.10.2015 18:53, Gabe Alford wrote: > > Thanks Martin, > > What about adding no_create and no_update flags? > > Gabe > > Yes, that may work, also please increment minor ver

Re: [Freeipa-devel] [PATCH 0056] Enable nsaccountlock in user.py cli

Thanks Martin, What about adding no_create and no_update flags? Gabe On Tue, Oct 13, 2015 at 9:54 AM, Martin Basti wrote: > > > On 09.10.2015 19:17, Gabe Alford wrote: > > Hello, > > This patch enables nsaccountlock in user.py cli. It is very handy to be > able to se

Re: [Freeipa-devel] [PATCH 0057] Warn in no installation found when running ipa-server-install --uninstall

lly moving us back. > > > > The proper fix would be to *remove* the check from install (as opposed to > > adding it to uninstall), but this requires the install code to be > idempotent, > > and we're not there yet. > > > > I'm OK with making this

Re: [Freeipa-devel] [PATCH 0057] Warn in no installation found when running ipa-server-install --uninstall

uninstall process to clean it > up. > > Could you amend the patch to respect --force option? In that case the > detection should be skipped. > > Thank you for your time! > > Petr^2 Spacek > > On 9.10.2015 19:17, Gabe Alford wrote: > > diff --git a/ipaserver/install/

[Freeipa-devel] [PATCH 0057] Warn in no installation found when running ipa-server-install --uninstall

Hello, Fix for https://fedorahosted.org/freeipa/ticket/5341 Thanks, Gabe From 0400bf88987b56d1d3b7a0e665bec525fa81ed02 Mon Sep 17 00:00:00 2001 From: Gabe Date: Fri, 9 Oct 2015 10:48:17 -0600 Subject: [PATCH] Warn if no installation found when running ipa-server-install --uninstall https://fe

[Freeipa-devel] [PATCH 0058] Remove bind configuration detected question

Hello, Fix for https://fedorahosted.org/freeipa/ticket/5351 Thanks, Gabe From 509ea0b496fd3d2361df58b23ce6ec8fb0ac9b64 Mon Sep 17 00:00:00 2001 From: Gabe Date: Fri, 9 Oct 2015 11:02:06 -0600 Subject: [PATCH] Remove bind configuration detected question https://fedorahosted.org/freeipa/ticket/5

[Freeipa-devel] [PATCH 0056] Enable nsaccountlock in user.py cli

Hello, This patch enables nsaccountlock in user.py cli. It is very handy to be able to search and find users with disabled/enabled accounts, etc. That said, I couldn't find why it was no_option in the first place, so I am not 100% sure if it breaks something or the reasoning behind no_option. Tha

Re: [Freeipa-devel] [PATCH 0054] Update FreeIPA package description

Bump for review. On Mon, Sep 21, 2015 at 9:37 AM, Gabe Alford wrote: > Hello, > > Fix for https://fedorahosted.org/freeipa/ticket/5284 > > Thanks, > > Gabe > -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/fre

Re: [Freeipa-devel] [PATCH 0055] dnssec options missing in ipa-dns-install man page

Thanks. Updated patch attached. On Wed, Sep 23, 2015 at 7:14 AM, Martin Basti wrote: > > > On 09/23/2015 03:12 PM, Gabe Alford wrote: > > Odd and done. Updated patch attached. > > Gabe > > On Wed, Sep 23, 2015 at 5:20 AM, Martin Basti wrote: > >> >> &g

Re: [Freeipa-devel] [PATCH 0055] dnssec options missing in ipa-dns-install man page

Odd and done. Updated patch attached. Gabe On Wed, Sep 23, 2015 at 5:20 AM, Martin Basti wrote: > > > On 09/22/2015 03:32 PM, Gabe Alford wrote: > >> create mode 100644 >> install/tools/man/freeipa-rga-0055-dnssec-options-missing-in-ipa-dns-install-man-page.patch &g

Re: [Freeipa-devel] [PATCH 0055] dnssec options missing in ipa-dns-install man page

Thanks! Added and attached updated patch. Gabe On Tue, Sep 22, 2015 at 1:17 AM, Martin Basti wrote: > > > On 09/21/2015 05:37 PM, Gabe Alford wrote: > > Hello, > > Fix for https://fedorahosted.org/freeipa/ticket/5300 > > Thanks, > > Gabe > > > Thank

[Freeipa-devel] [PATCH 0055] dnssec options missing in ipa-dns-install man page

Hello, Fix for https://fedorahosted.org/freeipa/ticket/5300 Thanks, Gabe From e13330dfdff13101aa625e1651289304bd4d73bf Mon Sep 17 00:00:00 2001 From: Gabe Date: Mon, 21 Sep 2015 09:30:31 -0600 Subject: [PATCH] dnssec options missing in ipa-dns-install man page https://fedorahosted.org/freeipa/

[Freeipa-devel] [PATCH 0054] Update FreeIPA package description

Hello, Fix for https://fedorahosted.org/freeipa/ticket/5284 Thanks, Gabe From 4f46a069b799f2613dd3b7ae42bb64b998bc2c40 Mon Sep 17 00:00:00 2001 From: Gabe Date: Mon, 21 Sep 2015 07:56:36 -0600 Subject: [PATCH] Update FreeIPA package description https://fedorahosted.org/freeipa/ticket/5284 ---

Re: [Freeipa-devel] [PATH 0053] Inconsistency between ipasearchrecordslimit and --sizelimit

Sorry. I had fixed another mistake and had not read your comment carefully. Updated patch attached. Gabe On Wed, Sep 16, 2015 at 12:23 AM, Jan Cholasta wrote: > On 15.9.2015 14:42, Gabe Alford wrote: > >> Yup. You are right. It was a mistake. Updated patch attached. >> >&

Re: [Freeipa-devel] [PATH 0053] Inconsistency between ipasearchrecordslimit and --sizelimit

Yup. You are right. It was a mistake. Updated patch attached. On Tue, Sep 15, 2015 at 12:46 AM, Jan Cholasta wrote: > On 14.9.2015 14:58, Gabe Alford wrote: > >> Sounds good to me. Updated patch attached. >> >> On Mon, Sep 14, 2015 at 1:34 AM, Petr Spacek > <mai

Re: [Freeipa-devel] [PATH 0053] Inconsistency between ipasearchrecordslimit and --sizelimit

, as you pointed out. You might say "0 > or -1 > > is unlimited" if you think it's clearer. > > my +1 to "0 or -1 is unlimited" variant > > Petr^2 Spacek > > > > On 10.9.2015 18:39, Gabe Alford wrote: > >> Oops.. replied without t

Re: [Freeipa-devel] [PATH 0053] Inconsistency between ipasearchrecordslimit and --sizelimit

0 is unlimited"? > > On 10.9.2015 16:08, Gabe Alford wrote: > >> Makes sense. I also changed the doc string to reflect -1 as well. >> Updated patch attached. >> >> Thanks, >> >> Gabe >> >> On Thu, Sep 10, 2015 at 1:41 AM, Jan Cholasta >

Re: [Freeipa-devel] [PATH 0053] Inconsistency between ipasearchrecordslimit and --sizelimit

Makes sense. I also changed the doc string to reflect -1 as well. Updated patch attached. Thanks, Gabe On Thu, Sep 10, 2015 at 1:41 AM, Jan Cholasta wrote: > On 4.9.2015 14:43, Gabe Alford wrote: > >> Bump for review. >> >> On Wed, Aug 12, 2015 at 9:32 AM, Gabe A

Re: [Freeipa-devel] [PATH 0053] Inconsistency between ipasearchrecordslimit and --sizelimit

Bump for review. On Wed, Aug 12, 2015 at 9:32 AM, Gabe Alford wrote: > On Tue, Aug 11, 2015 at 1:34 AM, Jan Cholasta wrote: > >> On 6.8.2015 21:43, Gabe Alford wrote: >> >>> Hello, >>> >>> Updated patch attached. >>> >>> - Time lim

Re: [Freeipa-devel] [PATCH 0052] Add Chromium configuration note under Chrome section in ssbrowser

Bump for review On Wed, Jul 29, 2015 at 7:49 AM, Gabe Alford wrote: > Hello, > > As Chromium and Chrome are configured similarly but are configured in > different /etc directories, this patch adds a note to the Chrome section in > ssbrowser.html stating that. > > Thanks,

Re: [Freeipa-devel] [PATH 0053] Inconsistency between ipasearchrecordslimit and --sizelimit

On Tue, Aug 11, 2015 at 1:34 AM, Jan Cholasta wrote: > On 6.8.2015 21:43, Gabe Alford wrote: > >> Hello, >> >> Updated patch attached. >> >> - Time limit is -1 for unlimited. I found this >> https://www.redhat.com/archives/freeipa-devel/2011-January/ms

Re: [Freeipa-devel] [PATH 0053] Inconsistency between ipasearchrecordslimit and --sizelimit

-1 is entered for unlimited size limit. >Actually, 0 means unlimited for size limit, see >< http://www.python-ldap.org/doc/html/ldap.html#ldap.LDAPObject.search_ext_s> Thanks, Gabe On Tue, Aug 4, 2015 at 3:28 AM, Jan Cholasta wrote: > Dne 31.7.2015 v 17:0

Re: [Freeipa-devel] [PATH 0053] Inconsistency between ipasearchrecordslimit and --sizelimit

Updated patch attached. Thanks, Gabe On Thu, Jul 30, 2015 at 7:15 AM, Gabe Alford wrote: > On Thu, Jul 30, 2015 at 1:32 AM, Jan Cholasta wrote: > >> Dne 30.7.2015 v 09:23 Jan Cholasta napsal(a): >> >>> Hi, >>> >>> Dne 29.7.2015 v 17:23 Gabe Alford

Re: [Freeipa-devel] [PATH 0053] Inconsistency between ipasearchrecordslimit and --sizelimit

On Thu, Jul 30, 2015 at 1:32 AM, Jan Cholasta wrote: > Dne 30.7.2015 v 09:23 Jan Cholasta napsal(a): > >> Hi, >> >> Dne 29.7.2015 v 17:23 Gabe Alford napsal(a): >> >>> Hello, >>> >>> Fix for https://fedorahosted.org/freeipa/ticket/4023

[Freeipa-devel] [PATH 0053] Inconsistency between ipasearchrecordslimit and --sizelimit

Hello, Fix for https://fedorahosted.org/freeipa/ticket/4023 Thanks, Gabe From cba4b0d90f65be7734a977cb84f96f378e1c91d0 Mon Sep 17 00:00:00 2001 From: Gabe Date: Wed, 29 Jul 2015 09:04:32 -0600 Subject: [PATCH] Standardize minvalue for ipasearchrecordlimit and sizelimit for unlimited option ht

[Freeipa-devel] [PATCH 0052] Add Chromium configuration note under Chrome section in ssbrowser

Hello, As Chromium and Chrome are configured similarly but are configured in different /etc directories, this patch adds a note to the Chrome section in ssbrowser.html stating that. Thanks, Gabe From a7fb316d3cc273531947768e6b93c656a6bad1bb Mon Sep 17 00:00:00 2001 From: Gabe Date: Wed, 29 Jul

Re: [Freeipa-devel] [PATCH] Port from python-kerberos library to python-gssapi

Hello, Would you mind formatting your patch following the format described at http://www.freeipa.org/page/Contribute/Patch_Format and attach the patch to this thread? Please attach your patch to the corresponding trac ticket as well. thanks, Gabe On Tue, Jul 21, 2015 at 7:26 AM, Michael

Re: [Freeipa-devel] Finishing the Community Portal

On Wed, Jul 15, 2015 at 2:32 PM, Nathaniel McCallum wrote: > I definitely see both models finding use. > +1 > - Original Message - > > Yeah, user creation requires manual intervention; an admin has to move > > the user from staging to the main user tree. > > > > It could be pretty easi

Re: [Freeipa-devel] [PATCH 0050] Fix client ca.crt to match the server's cert

:05, Martin Basti wrote: > > On 30/06/15 17:31, Gabe Alford wrote: > > On Tue, Jun 30, 2015 at 8:51 AM, Martin Basti wrote: > >> On 16/06/15 16:58, Gabe Alford wrote: >> >> I know you guys are busy. Bump for review. >> >> Thanks, >> >> Gab

Re: [Freeipa-devel] [PATCH 0050] Fix client ca.crt to match the server's cert

On Tue, Jun 30, 2015 at 8:51 AM, Martin Basti wrote: > On 16/06/15 16:58, Gabe Alford wrote: > > I know you guys are busy. Bump for review. > > Thanks, > > Gabe > > On Tue, May 26, 2015 at 8:16 AM, Gabe Alford > wrote: > >> Hello, >> >&g

Re: [Freeipa-devel] [PATCH 0050] Fix client ca.crt to match the server's cert

I know you guys are busy. Bump for review. Thanks, Gabe On Tue, May 26, 2015 at 8:16 AM, Gabe Alford wrote: > Hello, > > Fix for https://fedorahosted.org/freeipa/ticket/3809 > > Thanks, > > Gabe > -- Manage your subscription for the Freeipa-devel mailing list: https:

Re: [Freeipa-devel] [PATCH 0051] Clear SSSD caches when uninstalling the client

Thanks. Updated patch attached. On Fri, Jun 5, 2015 at 9:53 AM, Jakub Hrozek wrote: > On Fri, Jun 05, 2015 at 09:46:05AM -0600, Gabe Alford wrote: > > How should ​ > > https://www.redhat.com/archives/freeipa-users/2015-June/msg00116.html be > > handled where the user cle

Re: [Freeipa-devel] [PATCH 0051] Clear SSSD caches when uninstalling the client

How should ​ https://www.redhat.com/archives/freeipa-users/2015-June/msg00116.html be handled where the user cleared out the db cache? On Fri, Jun 5, 2015 at 9:08 AM, Jakub Hrozek wrote: > On Fri, Jun 05, 2015 at 05:03:08PM +0200, Martin Basti wrote: > > On 05/06/15 16:13, Gabe Alf

[Freeipa-devel] [PATCH 0051] Clear SSSD caches when uninstalling the client

Hello, Fix for https://fedorahosted.org/freeipa/ticket/5049 Thanks, Gabe From f35225373240b3a26882925fc9db39d8da77c883 Mon Sep 17 00:00:00 2001 From: Gabe Date: Fri, 5 Jun 2015 08:01:55 -0600 Subject: [PATCH] Clear SSSD caches when uninstalling the client https://fedorahosted.org/freeipa/

[Freeipa-devel] [PATCH 0050] Fix client ca.crt to match the server's cert

Hello, Fix for https://fedorahosted.org/freeipa/ticket/3809 Thanks, Gabe From b6a852f82e9335ac04fb5d9b96f31013fb2a3bdb Mon Sep 17 00:00:00 2001 From: Gabe Date: Tue, 26 May 2015 08:06:12 -0600 Subject: [PATCH] Fix client ca.crt to match the server's cert https://fedorahosted.org/freeipa/ticket

Re: [Freeipa-devel] [PATCH 0048] fix ipa help command output errors

On Fri, May 22, 2015 at 9:01 AM, Martin Basti wrote: > On 22/05/15 16:08, Gabe Alford wrote: > > Hello, > > This should fix https://fedorahosted.org/freeipa/ticket/3584, and as > requested in the ticket, this should also fix > https://fedorahosted.org/freeipa/ti

[Freeipa-devel] [PATCH 0048] fix ipa help command output errors

Hello, This should fix https://fedorahosted.org/freeipa/ticket/3584, and as requested in the ticket, this should also fix https://fedorahosted.org/freeipa/ticket/2284 Thanks, Gabe From 3d4e7b60287f30e70455facb0035fa30df913c34 Mon Sep 17 00:00:00 2001 From: Gabe Date: Fri, 22 May 2015 07:52:58 -

Re: [Freeipa-devel] [PATCH 0047] Unsaved changes dialog inconsistent

Thanks Petr. I thought I had grepped all that out. Guess I didn't do it from the top of the tree. Updated patch attached. On Tue, May 5, 2015 at 5:15 AM, Petr Vobornik wrote: > On 04/30/2015 07:43 PM, Gabe Alford wrote: > >> Thanks Kyle and Petr. >> >> Update pa

Re: [Freeipa-devel] [PATCH 0047] Unsaved changes dialog inconsistent

Thanks Kyle and Petr. Update patch attached. On Wed, Apr 29, 2015 at 7:59 AM, Kyle Baker wrote: > > - Original Message - > > On 04/27/2015 03:03 PM, Gabe Alford wrote: > > > Hello, > > > > > > Fix for https://fedorahosted.org/freeipa/ticket/49

Re: [Freeipa-devel] [PATCH 0046] Remove unneeded --ip-address option in ipa-adtrust-install

On Tue, Apr 28, 2015 at 7:18 AM, Martin Basti wrote: > On 27/04/15 15:02, Gabe Alford wrote: > > Hello, > > Fix for https://fedorahosted.org/freeipa/ticket/4575 > > Thanks, > > Gabe > > > Hello, > > thank you for your patch, looks good. > >

[Freeipa-devel] [PATCH 0046] Remove unneeded --ip-address option in ipa-adtrust-install

Hello, Fix for https://fedorahosted.org/freeipa/ticket/4575 Thanks, Gabe From 6c9ac52a18df8bbce33db09c16494159258ff104 Mon Sep 17 00:00:00 2001 From: Gabe Date: Wed, 15 Apr 2015 09:18:58 -0600 Subject: [PATCH] Remove unneeded ip-address option in ipa-adtrust-install https://fedorahosted.org/fr

[Freeipa-devel] [PATCH 0047] Unsaved changes dialog inconsistent

Hello, Fix for https://fedorahosted.org/freeipa/ticket/4926 Thanks, Gabe From 053f7dd53e9d1acd6dec4688ab515f138d832ef4 Mon Sep 17 00:00:00 2001 From: Gabe Date: Mon, 27 Apr 2015 06:49:25 -0600 Subject: [PATCH] Unsaved changes dialog internally inconsistent - Change "Update" button text to "Sav

Re: [Freeipa-devel] [PATCH 0082] Update python-yubico dependency version

Ack. Thanks, Gabe On Wed, Apr 22, 2015 at 1:45 PM, Nathaniel McCallum wrote: > On Tue, 2015-03-31 at 10:25 -0400, Nathaniel McCallum wrote: > > This change enables support for all current YubiKey hardware. > > Can someone please review this patch? > > Nathaniel > > -- > Manage your subscriptio

Re: [Freeipa-devel] [PATCH 001] Remove recommendation from ipa-adtrust-install

Ack from me. Thanks, Gabe On Fri, Apr 10, 2015 at 7:35 AM, Thorsten Scherf wrote: > > > -- > Manage your subscription for the Freeipa-devel mailing list: > https://www.redhat.com/mailman/listinfo/freeipa-devel > Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code > -- Manage yo

Re: [Freeipa-devel] [PATCH 0045] Add message for skipping NTP configuration during client install

Stupid me. I realized that chronyd was running which messed up my testing and such (sorry about that). New patch attached that implements 'else' On Tue, Apr 7, 2015 at 2:32 AM, Martin Basti wrote: > On 02/04/15 17:47, Gabe Alford wrote: > > On Thu, Apr 2, 2015 at 8:59 AM,

Re: [Freeipa-devel] [PATCH 0045] Add message for skipping NTP configuration during client install

On Thu, Apr 2, 2015 at 8:59 AM, Martin Basti wrote: > On 30/03/15 15:25, Gabe Alford wrote: > > Hello, > > With the merging of ticket 4842 > <https://fedorahosted.org/freeipa/ticket/4842>, I believe that half of > ticket 3092 <https://fedorahosted.org/free

[Freeipa-devel] [PATCH 0045] Add message for skipping NTP configuration during client install

Hello, With the merging of ticket 4842 , I believe that half of ticket 3092 has been done. This patch just adds a message that says that NTP configuration was skipped which I believe should finish 3092

Re: [Freeipa-devel] [PATCH 0044] Man pages: ipa-replica-prepare can only be created on first master

"Limitations" is fine with me. Updated patch attached. On Fri, Mar 13, 2015 at 7:17 AM, Martin Kosek wrote: > On 03/13/2015 02:13 PM, Gabe Alford wrote: > >> On Thu, Mar 12, 2015 at 8:26 AM, Martin Kosek > <mailto:mko...@redhat.com>> wrote: >> >>

Re: [Freeipa-devel] [PATCH 0044] Man pages: ipa-replica-prepare can only be created on first master

On Thu, Mar 12, 2015 at 8:26 AM, Martin Kosek wrote: > On 03/12/2015 02:37 PM, Gabe Alford wrote: > > Hello, > > > > Fix for https://fedorahosted.org/freeipa/ticket/4944. Since there seems > to > > be plenty of time, I added it to the freeipa-4-1 branch. > >

[Freeipa-devel] [PATCH 0044] Man pages: ipa-replica-prepare can only be created on first master

Hello, Fix for https://fedorahosted.org/freeipa/ticket/4944. Since there seems to be plenty of time, I added it to the freeipa-4-1 branch. Thanks, Gabe From 0887f4f4595e62ce4d24f1b031418e47da7586fb Mon Sep 17 00:00:00 2001 From: Gabe Date: Thu, 12 Mar 2015 07:26:34 -0600 Subject: [PATCH] ipa-re

  1   2   >