[Freeipa-devel] Fwd: [MediaWiki-announce] Security and maintenance release: 1.27.6 / 1.30.2 / 1.31.2 / 1.32.2

2019-06-07 Thread Martin Kosek via FreeIPA-devel
FIY, I upgraded also www.freeipa.org (with other minor improvements). If there are problems - ping me. -- Forwarded message - From: Sam Reed Date: Thu, Jun 6, 2019 at 5:52 PM Subject: [MediaWiki-announce] Security and maintenance release: 1.27.6 / 1.30.2 / 1.31.2 / 1.32.2 To: , <

[Freeipa-devel] FreeIPA release - better automation of wiki updates

2017-12-08 Thread Martin Kosek via FreeIPA-devel
Hi all, I was thinking about improvements to FreeIPA release processes and related wiki updates. Relevant changes and upgrades to the wiki and it's plugins [1] that I did recently will may enable us to leverage some of the new functionality to fully automate the wiki updates. If I check the relea

[Freeipa-devel] Re: FreeIPA release - better automation of wiki updates

2017-12-21 Thread Martin Kosek via FreeIPA-devel
On 12/12/2017 03:45 PM, Petr Vobornik wrote: > On Fri, Dec 8, 2017 at 4:14 PM, Alexander Bokovoy wrote: >> On pe, 08 joulu 2017, Martin Kosek via FreeIPA-devel wrote: ... >>> Summary: I think that if we leverage the new wiki capabilities and >>> changes proposed in this

[Freeipa-devel] FreeIPA demo scripts now published

2017-12-22 Thread Martin Kosek via FreeIPA-devel
Hello, As you may or may not know, FreeIPA demo [1] reset procedure was driven from a cron script from my work laptop :-) This worked most of the time, but sometimes did not as my laptop availability was a SPOF here. This week, I worked on a safer solution and converted my hacky script to a prope

[Freeipa-devel] Re: freeIPA certificate with Let’s Encrypt

2018-01-02 Thread Martin Kosek via FreeIPA-devel
On 12/21/2017 09:27 AM, paride.buetti--- via FreeIPA-devel wrote: > Here the procedure to use Let’s Encrypt certificate with freeIPA > > Download isrgrootx1 certificate: > > # wget https://letsencrypt.org/certs/isrgrootx1.pem.txt > # mv isrgrootx1.pem.txt isrgrootx1.pem > > Download letsencrypta

[Freeipa-devel] FreeIPA wiki - new backup scripts

2018-01-03 Thread Martin Kosek via FreeIPA-devel
Hello, I finished hopefully the final major gap with our new FreeIPA wiki infrastructure - a regular backup. I used our existing AWS infrastructure to come up with a shell script [1] and AWS Lambda function triggering it [2] periodically (daily), to store backups to our S3 storage (database dump

[Freeipa-devel] Re: freeIPA certificate with Let’s Encrypt

2018-01-03 Thread Martin Kosek via FreeIPA-devel
On 01/02/2018 12:16 PM, Antonia Stevens via FreeIPA-devel wrote: > Hey Martin and Paride, > > There are also some scripts which use DNS auth and allow multiple DNS > names/aliases/principals: > > https://github.com/antevens/letsencrypt-freeipa > > In addition to that I recently started work on a

[Freeipa-devel] Re: authconfig replacement design

2018-02-23 Thread Martin Kosek via FreeIPA-devel
On 02/21/2018 10:25 AM, Pavel Březina via FreeIPA-devel wrote: >> >> ​ ​ >> couple of scenarious here: >> - install server >>   install it and configure with authselect. there is no --no-sssd option >> for the server installation >> - upgrade server >>   bakup authselect configuration. apply authse

[Freeipa-devel] Re: authconfig replacement design

2018-02-23 Thread Martin Kosek via FreeIPA-devel
On 02/21/2018 03:39 PM, Rob Crittenden via FreeIPA-devel wrote: >>> - install client >>>   a) if we replace rpm dependancy on authconfig with aushselect we can >>> go only this way: new installations done with authselect. if --no-sssd >>> option is provided, then fail. >> --no-sssd option is alread

[Freeipa-devel] Re: authconfig replacement design

2018-02-23 Thread Martin Kosek via FreeIPA-devel
On 02/23/2018 01:25 PM, Alexander Bokovoy wrote: > On pe, 23 helmi 2018, Pavel Březina via FreeIPA-devel wrote: >> On 02/23/2018 12:57 PM, Martin Kosek wrote: >>> On 02/21/2018 10:25 AM, Pavel Březina via FreeIPA-devel wrote: > > ​ ​ > couple of scenarious here: > - install server >

[Freeipa-devel] Re: authconfig replacement design

2018-02-23 Thread Martin Kosek via FreeIPA-devel
On 02/23/2018 01:45 PM, Pavel Březina wrote: > On 02/23/2018 01:29 PM, Martin Kosek wrote: >> On 02/23/2018 01:25 PM, Alexander Bokovoy wrote: >>> On pe, 23 helmi 2018, Pavel Březina via FreeIPA-devel wrote: On 02/23/2018 12:57 PM, Martin Kosek wrote: > On 02/21/2018 10:25 AM, Pavel Březin

[Freeipa-devel] Re: authconfig replacement design

2018-02-26 Thread Martin Kosek via FreeIPA-devel
On 02/26/2018 01:16 PM, Lukas Slebodnik wrote: > On (23/02/18 13:08), Martin Kosek via FreeIPA-devel wrote: >> On 02/21/2018 03:39 PM, Rob Crittenden via FreeIPA-devel wrote: >>>>> - install client >>>>>   a) if we replace rpm dependancy on authconfig with a

[Freeipa-devel] Re: authconfig replacement design

2018-03-01 Thread Martin Kosek via FreeIPA-devel
On 02/26/2018 05:08 PM, Martin Kosek wrote: >> Because I do not know any platform/distribution which has freeipa-client >> and does not have sssd. > I see, thanks for info. > > Reading this, I would be quite fine with removing all the --no-sssd > functionality from client installer and leaving peo

[Freeipa-devel] FreeIPA Privacy policy

2018-05-24 Thread Martin Kosek via FreeIPA-devel
As part of FreeIPA project's commitment to addressing the EU General Data Privacy Regulation (GDPR), among other reasons, the FreeIPA privacy statement has been created. You can find the new statement at our project wiki: https://www.freeipa.org/page/FreeIPA:Privacy_policy and also linked from the

[Freeipa-devel] FreeIPA demo update - collecting wishes

2018-07-15 Thread Martin Kosek via FreeIPA-devel
Hi all, I will be updating FreeIPA public demo [1] this week due to expiring LE certificate. The demo is now running 4.6.3 on F28, please let me know if any changes shall be made to it, maybe except updating to 4.6.4. Thanks, Martin [1] https://www.freeipa.org/page/Demo _

[Freeipa-devel] Re: FreeIPA demo update - collecting wishes

2018-07-19 Thread Martin Kosek via FreeIPA-devel
On Wed, Jul 18, 2018 at 6:37 PM Petr Vobornik wrote: > > On Mon, Jul 16, 2018 at 8:56 AM Martin Kosek via FreeIPA-devel > wrote: > > > > Hi all, > > > > I will be updating FreeIPA public demo [1] this week due to expiring > > LE certificate. The demo is

[Freeipa-devel] FreeIPA.org wiki updated

2018-08-03 Thread Martin Kosek via FreeIPA-devel
Hi all, I updated FreeIPA.org wiki to the current stable Mediawiki version - 1.31 (along with couple minor deployment improvements). The updated sources are in the standard place [1]. If you see some regression with the updated wiki, please let me know! Martin [1] https://github.com/freeipa/fre

[Freeipa-devel] FreeIPA demo: upgrading to Fedora 29 failed

2018-10-26 Thread Martin Kosek via FreeIPA-devel
Hi all, So I tried today to upgrade FreeIPA demo [1] to Fedora 29 since I was touching the VM because of something else anyway. I was not successful yet, I hit following issues: 1) A packaging issue before I could upgrade the system, that I could resolve by removing all python2*ipa* packages fro

[Freeipa-devel] Re: FreeIPA demo: upgrading to Fedora 29 failed

2018-10-26 Thread Martin Kosek via FreeIPA-devel
On Fri, Oct 26, 2018 at 4:17 PM Rob Crittenden wrote: > Martin Kosek via FreeIPA-devel wrote: > > Hi all, > > > > So I tried today to upgrade FreeIPA demo [1] to Fedora 29 since I was > > touching the VM because of something else anyway. > > > > I was not

[Freeipa-devel] Re: FreeIPA demo: upgrading to Fedora 29 failed

2018-10-29 Thread Martin Kosek via FreeIPA-devel
On Fri, Oct 26, 2018 at 9:26 PM Rob Crittenden wrote: > Martin Kosek via FreeIPA-devel wrote: > > On Fri, Oct 26, 2018 at 4:17 PM Rob Crittenden > <mailto:rcrit...@redhat.com>> wrote: > > > > Martin Kosek via FreeIPA-devel wrote: > > > Hi al

[Freeipa-devel] Re: [DESIGN DRAFT] IPA client installation with Ansible

2017-08-16 Thread Martin Kosek via FreeIPA-devel
On 08/02/2017 01:36 PM, Florence Blanc-Renaud via FreeIPA-devel wrote: > Hi all, > > The first version of a new design document is available at > https://www.freeipa.org/page/V4/ClientInstallationWithAnsible > > The feature will allow to deploy IPA clients using Ansible. Please feel > free to sen

[Freeipa-devel] FreeIPA wiki migration to OpenShift v3

2017-09-15 Thread Martin Kosek via FreeIPA-devel
Hello all, I would like to start a discussion regarding the migration of current FreeIPA services that are running on OpenShift v2 that was obsoleted [1] and will go soon EOL (the ultimate cut-off date is Dec 31, 2017). After a short discussion I had with several FreeIPA developers, the preferenc

[Freeipa-devel] Re: FreeIPA wiki migration to OpenShift v3

2017-11-01 Thread Martin Kosek via FreeIPA-devel
On 09/15/2017 12:54 PM, Martin Kosek wrote: > Hello all, > > I would like to start a discussion regarding the migration of current > FreeIPA services that are running on OpenShift v2 that was obsoleted [1] > and will go soon EOL (the ultimate cut-off date is Dec 31, 2017). > > After a short discu

[Freeipa-devel] Re: FreeIPA wiki migration to OpenShift v3

2017-11-15 Thread Martin Kosek via FreeIPA-devel
On 11/15/2017 04:53 PM, Rob Crittenden wrote: > Martin Kosek via FreeIPA-devel wrote: >> On 09/15/2017 12:54 PM, Martin Kosek wrote: >>> Hello all, >>> >>> I would like to start a discussion regarding the migration of current >>> FreeIPA services that a

[Freeipa-devel] FreeIPA wiki migration finished

2017-11-20 Thread Martin Kosek via FreeIPA-devel
Hello all, Please note that over the weekend, I finished migration of the FreeIPA wiki to OpenShift container platform, as discussed in [1]. DNS of "www.freeipa.org" was changed, wiki can be used in production. I am tracking existing issues or remaining work with the new wiki platform in [2]. The

[Freeipa-devel] FreeIPA wiki - emails and notifications working

2017-11-24 Thread Martin Kosek via FreeIPA-devel
Hello all, Related to our dear FreeIPA Wiki running on new platform now, I was able to do several improvements to the wiki, including enabling email infrastructure [1] and related support for *notifications*. You can now Watch a page and you should receive an email when the page is modified by so

[Freeipa-devel] FreeIPA demo updated to 4.6.1 @ F27

2017-11-24 Thread Martin Kosek via FreeIPA-devel
Hi all, I updated the FreeIPA demo [1] from F26 to vanilla F27 version (i.e. FreeIPA 4.6.1) and updated LE certificate. From quick sanity testing, it seems to be working fine. Let me know if there is any problem with the updated demo. Thanks! [1] https://ipa.demo1.freeipa.org/ipa/ui -- Martin

[Freeipa-devel] FreeIPA Planet - migrating to OCP

2017-12-04 Thread Martin Kosek via FreeIPA-devel
Hello all, I have finished preparations for moving our FreeIPA Planet from the OpenShift v2 platform (EOL Dec 31st [1]) into the new OpenShift v3 container environment. Just like with our wiki, the FreeIPA Planet app source code is hosted openly in FreeIPA GitHub organization [2], including a sta

[Freeipa-devel] Re: FreeIPA Planet - migrating to OCP

2017-12-06 Thread Martin Kosek via FreeIPA-devel
On 12/04/2017 04:38 PM, Martin Kosek wrote: > If there are any major concerns about this migration, let me know. If > not, I will just get DNS "planet.freeipa.org" updated in next days. Done. The new container planet is in production. ___ FreeIPA-devel m