Re: [Freeipa-devel] [PATCH] 751 dogtag replication

2011-03-10 Thread Martin Kosek
On Thu, 2011-03-10 at 00:10 -0500, Rob Crittenden wrote: The replication between dogtag servers wasn't using TLS or SSL. This uses a new option to pkisilent to create replication agreements that use TLS. The SSL cert we will use is the same as the main 389-ds instance via symbolic link.

Re: [Freeipa-devel] [PATCH] 751 dogtag replication

2011-03-10 Thread Rob Crittenden
Martin Kosek wrote: On Thu, 2011-03-10 at 00:10 -0500, Rob Crittenden wrote: The replication between dogtag servers wasn't using TLS or SSL. This uses a new option to pkisilent to create replication agreements that use TLS. The SSL cert we will use is the same as the main 389-ds instance via

[Freeipa-devel] Wrong timeout parameter in ipapython

2011-03-10 Thread Sylvain Baubeau
Hi, I was facing an error with ipapython that caused an NSPRError exception to be raised at line 159 of ipapython/nsslib.py : 157 logging.debug(connecting: %s, net_addr) 158 try: 159 self.sock.connect(net_addr, family) 160

Re: [Freeipa-devel] Wrong timeout parameter in ipapython

2011-03-10 Thread Rob Crittenden
Sylvain Baubeau wrote: Hi, I was facing an error with ipapython that caused an NSPRError exception to be raised at line 159 of ipapython/nsslib.py : 157 logging.debug(connecting: %s, net_addr) 158 try: 159 self.sock.connect(net_addr,