Re: [Freeipa-devel] [PATCH] 354 Modififed NSSConnection not to shutdown existing database.

Hi, Dne 28.10.2014 v 23:17 Endi Sukma Dewata napsal(a): On 10/22/2014 9:15 AM, Endi Sukma Dewata wrote: The NSSConnection class has been modified not to shutdown the existing NSS database if the database is already opened to establish an SSL connection, or is already opened by another code that

Re: [Freeipa-devel] [PATCH] 0671 ipa-restore: Don't crash if AD trust is not installed

On 11/10/2014 04:36 PM, Martin Kosek wrote: On 11/10/2014 02:52 PM, Petr Viktorin wrote: This is a fix for: https://fedorahosted.org/freeipa/ticket/4668 And the patch is...? Here, sorry. -- Petr³ From 45c939b7fcd8b07ad9b70bdb8eef4b6d5814867d Mon Sep 17 00:00:00 2001 From: Petr Viktorin D

Re: [Freeipa-devel] [PATCH] 354 Modififed NSSConnection not to shutdown existing database.

On 11/11/2014 09:02 AM, Jan Cholasta wrote: Hi, Dne 28.10.2014 v 23:17 Endi Sukma Dewata napsal(a): On 10/22/2014 9:15 AM, Endi Sukma Dewata wrote: The NSSConnection class has been modified not to shutdown the existing NSS database if the database is already opened to establish an SSL connecti

Re: [Freeipa-devel] [PATCH 0035] fix misleading Directory Manager --help output

On 11/10/2014 08:25 AM, Jan Cholasta wrote: Hi, Dne 7.11.2014 v 17:18 Gabe Alford napsal(a): Hello. Fix for https://fedorahosted.org/freeipa/ticket/4694 Thanks, Gabe ACK. Honza Pushed to: master: d95d557ce5dc8c9c0a629af90bf7ae2224de0eb0 ipa-4-1: 488c10e9208957baa8171ddbf8a10aaed220b011

Re: [Freeipa-devel] [PATCH] 0028 Remove unneeded internal methods. Move code to public, methods.

On 11/10/2014 08:21 AM, Jan Cholasta wrote: Hi, ACK. Pushed to master: 82c3c2b242c3f2b8113c2021cf4d17cab54c2a86 -- Petr³ ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] [PATCH] 365 Fix CA certificate backup and restore

Dne 10.11.2014 v 17:46 Jan Cholasta napsal(a): Hi, the attached patch fixes . Honza Forgot to include /etc/pki/ca-trust/source/anchors/ipa-ca.crt in backup. Updated patch attached. -- Jan Cholasta >From f61c3b242e9eb83fa585b091da4d60b7262d124f M

Re: [Freeipa-devel] FreeIPA 4.1 release preparations

On 8.11.2014 14:43, Lukas Slebodnik wrote: > On (20/10/14 16:08), Martin Kosek wrote: >> On 10/20/2014 04:00 PM, Jan Pazdziora wrote: >>> On Mon, Oct 20, 2014 at 03:58:27PM +0200, Petr Vobornik wrote: The plan is to release 4.1 and then 4.0.4. Besides usual tarballs, 4.1 will go into

Re: [Freeipa-devel] [PATCH] 0671 ipa-restore: Don't crash if AD trust is not installed

Dne 11.11.2014 v 09:08 Petr Viktorin napsal(a): On 11/10/2014 04:36 PM, Martin Kosek wrote: On 11/10/2014 02:52 PM, Petr Viktorin wrote: This is a fix for: https://fedorahosted.org/freeipa/ticket/4668 And the patch is...? Here, sorry. Thanks, ACK. Pushed to: master: a8e2a242bec1ce68d6b

Re: [Freeipa-devel] FreeIPA 4.1 release preparations

On 11/11/2014 10:48 AM, Petr Spacek wrote: > On 8.11.2014 14:43, Lukas Slebodnik wrote: >> On (20/10/14 16:08), Martin Kosek wrote: >>> On 10/20/2014 04:00 PM, Jan Pazdziora wrote: On Mon, Oct 20, 2014 at 03:58:27PM +0200, Petr Vobornik wrote: > > The plan is to release 4.1 and then 4.

Re: [Freeipa-devel] [PATCHES] 366-372 Additional Coverity fixes

Dne 10.11.2014 v 19:25 Jan Cholasta napsal(a): Hi, the attached patches provide additional fixes for . I'm not 100% sure if the fixes for ipa-sam and ipa-kdb are correct, please check them carefully. Honza Changed the ticket to

Re: [Freeipa-devel] [PATCHES] 366-372 Additional Coverity fixes

On Tue, 11 Nov 2014, Jan Cholasta wrote: From 7ca2b25b93f1e3bff1e4c54ef1794cad462e533a Mon Sep 17 00:00:00 2001 From: Jan Cholasta Date: Mon, 10 Nov 2014 17:40:35 + Subject: [PATCH 3/7] Fix Kerberos error handling in ipa-sam https://fedorahosted.org/freeipa/ticket/4713 --- daemons/ipa-sam/

Re: [Freeipa-devel] [PATCHES] 366-372 Additional Coverity fixes

On Tue, 11 Nov 2014, Jan Cholasta wrote: From 82d7d37ca310af015018ebb2da2f9a72c4dabcaa Mon Sep 17 00:00:00 2001 From: Jan Cholasta Date: Mon, 10 Nov 2014 18:10:27 + Subject: [PATCH 4/7] Fix unchecked return value in ipa-kdb https://fedorahosted.org/freeipa/ticket/4713 --- daemons/ipa-kdb/i

Re: [Freeipa-devel] [PATCH] 773-777 ranges: prohibit setting --rid-base with ipa-trust-ad-posix type

On 11/04/2014 01:05 PM, Petr Vobornik wrote: On 10/15/2014 02:20 PM, Petr Vobornik wrote: > ticket: https://fedorahosted.org/freeipa/ticket/4221 > > > updated version of patch 773 attached. Fixes issue in > interactive_prompt_callback. > > Not related to this ticket: > - should we sho

Re: [Freeipa-devel] [PATCH] 773-777 ranges: prohibit setting --rid-base with ipa-trust-ad-posix type

On 11.11.2014 12:13, Tomas Babej wrote: On 11/04/2014 01:05 PM, Petr Vobornik wrote: On 10/15/2014 02:20 PM, Petr Vobornik wrote: ticket: https://fedorahosted.org/freeipa/ticket/4221 updated version of patch 773 attached. Fixes issue in interactive_prompt_callback. Not related to this tick

Re: [Freeipa-devel] [PATCHES] 366-372 Additional Coverity fixes

Dne 11.11.2014 v 11:40 Alexander Bokovoy napsal(a): On Tue, 11 Nov 2014, Jan Cholasta wrote: From 82d7d37ca310af015018ebb2da2f9a72c4dabcaa Mon Sep 17 00:00:00 2001 From: Jan Cholasta Date: Mon, 10 Nov 2014 18:10:27 + Subject: [PATCH 4/7] Fix unchecked return value in ipa-kdb https://fedor

[Freeipa-devel] [PATCH] Add help string on how to configure multiple DNS forwards on cli

The ipa-server-install man page is more descriptive on how to configure multiple DNS forwarders than the cli help. The cli help is more verbose now. https://fedorahosted.org//ticket/4465 Cheers, Thorsten From 11dcf90ba36f00f9c4ee74a33c6aa6f8773210ff Mon Sep 17 00:00:00 2001 From: Thorsten Scher

Re: [Freeipa-devel] [PATCH] Add help string on how to configure multiple DNS forwards on cli

On 11/11/14 13:37, Thorsten Scherf wrote: The ipa-server-install man page is more descriptive on how to configure multiple DNS forwarders than the cli help. The cli help is more verbose now. https://fedorahosted.org//ticket/4465 Cheers, Thorsten Hello, thanks for patch, but I have a few obj

[Freeipa-devel] [PATCH 0036] Add missing python files to Makefile

Hello, Fix for https://fedorahosted.org/freeipa/ticket/4700 Thanks, Gabe From b6674996bb00ac82943b90248a20114d4ca43073 Mon Sep 17 00:00:00 2001 From: Gabe Date: Tue, 11 Nov 2014 07:02:15 -0700 Subject: [PATCH] Add missing python files to Makefiles https://fedorahosted.org/freeipa/ticket/4700 -

Re: [Freeipa-devel] [PATCH] Add help string on how to configure multiple DNS forwards on cli

On [Tue, 11.11.2014 13:57], Martin Basti wrote: On 11/11/14 13:37, Thorsten Scherf wrote: The ipa-server-install man page is more descriptive on how to configure multiple DNS forwarders than the cli help. The cli help is more verbose now. https://fedorahosted.org//ticket/4465 Cheers, Thorsten

Re: [Freeipa-devel] [PATCH] 365 Fix CA certificate backup and restore

On 11/11/2014 09:52 AM, Jan Cholasta wrote: Dne 10.11.2014 v 17:46 Jan Cholasta napsal(a): Hi, the attached patch fixes . Honza Forgot to include /etc/pki/ca-trust/source/anchors/ipa-ca.crt in backup. Updated patch attached. Looks good ACK, p

[Freeipa-devel] [PATCH 0161] Fix dyndb-ldap working dir permission

Using specfile to create file doesn't work if named user is not on system. Appropriate permission have to be set during ipa-dns installation. Patch attached -- Martin Basti From 44593f97c51cc683218ac4ed81f821ee751ee6c5 Mon Sep 17 00:00:00 2001 From: Martin Basti Date: Tue, 11 Nov 2014 13:00:18

[Freeipa-devel] FreeIPA integration with external DNS services

Hello, this thread is about RFE "IPA servers when installed should register themselves in the external DNS" https://fedorahosted.org/freeipa/ticket/4424 It is not a complete design, just a raw idea. Use case FreeIPA installation to a network with existing DNS infrastructure + network a

Re: [Freeipa-devel] [PATCH] Add help string on how to configure multiple DNS forwards on cli

On 11/11/14 15:42, Thorsten Scherf wrote: On [Tue, 11.11.2014 13:57], Martin Basti wrote: On 11/11/14 13:37, Thorsten Scherf wrote: The ipa-server-install man page is more descriptive on how to configure multiple DNS forwarders than the cli help. The cli help is more verbose now. https://fedor

[Freeipa-devel] [PATCH] 0672 - ipaplatform: Use the dirsrv service, not target

https://fedorahosted.org/freeipa/ticket/4709 With this patch, IPA should no longer call systemctl on dirsrv.tagret, but rather on its concrete service. Since systemctl stop waits for shutdown of services (but not targets), we can assume dirsrv will be down (and the database unlocked) after s

Re: [Freeipa-devel] [PATCH 0161] Fix dyndb-ldap working dir permission

Hi, Dne 11.11.2014 v 16:22 Martin Basti napsal(a): Using specfile to create file doesn't work if named user is not on system. Appropriate permission have to be set during ipa-dns installation. Patch attached Why is the directory set up in dnskeysyncinstance instead of bindinstance? The orig

Re: [Freeipa-devel] [PATCHES] 366-372 Additional Coverity fixes

On 11.11.2014 12:27, Jan Cholasta wrote: > Dne 11.11.2014 v 11:40 Alexander Bokovoy napsal(a): >> On Tue, 11 Nov 2014, Jan Cholasta wrote: From 82d7d37ca310af015018ebb2da2f9a72c4dabcaa Mon Sep 17 00:00:00 2001 >>> From: Jan Cholasta >>> Date: Mon, 10 Nov 2014 18:10:27 + >>> Subject: [PATC