[Freeipa-devel] [PATCH] 164 Fix nsSaslMapping object class before configuring SASL mappings

2013-08-27 Thread Jan Cholasta
Hi, the attached patch fixes https://fedorahosted.org/freeipa/ticket/3778. Honza -- Jan Cholasta From 3168b27ba841de568d0e4dc3ec53b5f92ee5300c Mon Sep 17 00:00:00 2001 From: Jan Cholasta jchol...@redhat.com Date: Tue, 27 Aug 2013 07:57:07 + Subject: [PATCH] Fix nsSaslMapping object class

Re: [Freeipa-devel] [PATCH] 0057 Add integration tests for Kerberos Flags

2013-08-27 Thread Petr Viktorin
On 08/25/2013 08:56 PM, Ana Krivokapic wrote: Hello, This patch adds integration tests for the Kerberos Flags feature (except the web UI tests), according to the test plan at: http://www.freeipa.org/page/V3/Kerberos_Flags#Test_Plan. https://fedorahosted.org/freeipa/ticket/3831 Thank you! The

Re: [Freeipa-devel] [PATCH] 0057 Add integration tests for Kerberos Flags

2013-08-27 Thread Ana Krivokapic
On 08/27/2013 10:45 AM, Petr Viktorin wrote: On 08/25/2013 08:56 PM, Ana Krivokapic wrote: Hello, This patch adds integration tests for the Kerberos Flags feature (except the web UI tests), according to the test plan at: http://www.freeipa.org/page/V3/Kerberos_Flags#Test_Plan.

Re: [Freeipa-devel] [PATCH] 0057 Add integration tests for Kerberos Flags

2013-08-27 Thread Petr Viktorin
On 08/27/2013 12:25 PM, Ana Krivokapic wrote: On 08/27/2013 10:45 AM, Petr Viktorin wrote: On 08/25/2013 08:56 PM, Ana Krivokapic wrote: Hello, This patch adds integration tests for the Kerberos Flags feature (except the web UI tests), according to the test plan at:

Re: [Freeipa-devel] FreeIPA and Dogtag support for User Certificates in OpenStack Keystone

2013-08-27 Thread Ade Lee
On Mon, 2013-08-26 at 12:38 -0400, Adam Young wrote: Keystone needs signing certificates for Signing PKI tokens. In addition, CERN has a developed an approach that allows user to authenticate to Keystone via X509 for batch jobs. This requires Client Certs. Both of these use cases are

Re: [Freeipa-devel] [PATCH 0093] Fix incorrect message occurence when re-adding the trust

2013-08-27 Thread Petr Viktorin
On 08/23/2013 07:23 PM, Nathaniel McCallum wrote: On Fri, 2013-08-23 at 13:13 +0200, Tomas Babej wrote: Hi, You cannot re-add the trust and modify the range in the process. The check in the code was malfunctioning since it assumed that range_size parameter has default value. However, default

[Freeipa-devel] [PATCHES] 165-166 Clean up ipa-server-certinstall CLI options

2013-08-27 Thread Jan Cholasta
Hi, the attached patches fix https://fedorahosted.org/freeipa/ticket/3869. Note that I made a slight change to the design page to reflect what ipa-server-certinstall actually does: The -d and -w options are allowed to be used simultaneously to replace both DS and HTTP certificates in one

Re: [Freeipa-devel] [PATCH] 164 Fix nsSaslMapping object class before configuring SASL mappings

2013-08-27 Thread Petr Viktorin
On 08/27/2013 10:05 AM, Jan Cholasta wrote: Hi, the attached patch fixes https://fedorahosted.org/freeipa/ticket/3778. Honza Thanks, ACK, pushed to master: 5a8e326aebe8c25f5a82e95baf762dfc95f244d9 ipa-3-3: 20b90070232e4b2c3444bfe7d3b7ad90ea1f13a8 -- PetrĀ³

[Freeipa-devel] [PATCHES] Fixes for some coverity errors

2013-08-27 Thread Simo Sorce
Tickets 3882, 3883, 3884 Minor coverity issues, but should all be pushed to master and current release tree where appropriate. The memory leak is particularly important to fix for the OTP case. Simo. -- Simo Sorce * Red Hat, Inc * New York From 86e749abf7d26cd8853384ca7db4d0f4c4d885c8 Mon

Re: [Freeipa-devel] certmonger/oddjob for DNSSEC key maintenance

2013-08-27 Thread Dmitri Pal
On 08/09/2013 08:30 AM, Petr Spacek wrote: Hello, I would like to get opinions about key maintenance for DNSSEC. Problem summary: - FreeIPA will support DNSSEC - DNSSEC deployment requires 2,n cryptographic keys for each DNS zone (i.e. objects in LDAP) - The same keys are shared by all

Re: [Freeipa-devel] certmonger/oddjob for DNSSEC key maintenance

2013-08-27 Thread Rob Crittenden
Dmitri Pal wrote: On 08/09/2013 08:30 AM, Petr Spacek wrote: Hello, I would like to get opinions about key maintenance for DNSSEC. Problem summary: - FreeIPA will support DNSSEC - DNSSEC deployment requires 2,n cryptographic keys for each DNS zone (i.e. objects in LDAP) - The same keys are

Re: [Freeipa-devel] certmonger/oddjob for DNSSEC key maintenance

2013-08-27 Thread Dmitri Pal
On 08/27/2013 03:05 PM, Rob Crittenden wrote: Dmitri Pal wrote: On 08/09/2013 08:30 AM, Petr Spacek wrote: Hello, I would like to get opinions about key maintenance for DNSSEC. Problem summary: - FreeIPA will support DNSSEC - DNSSEC deployment requires 2,n cryptographic keys for each DNS

Re: [Freeipa-devel] [PATCH] 0269 Add man pages for testing tools

2013-08-27 Thread Rob Crittenden
Petr Viktorin wrote: Hello, This patch adds man pages for testing tools. As far as I can see, we use autotools for installing man pages. I added the autotools machinery to ipatests/man only. I'd appreciate if an autotools expert could check if this approach is OK. Or would it be better to not