Re: [Freeipa-devel] Reviewed-By for design pages?

2015-01-12 Thread Petr Spacek
On 9.1.2015 14:26, Martin Kosek wrote: On 01/07/2015 05:41 PM, Alexander Bokovoy wrote: On Wed, 07 Jan 2015, Simo Sorce wrote: On Wed, 07 Jan 2015 10:34:59 +0100 Petr Spacek pspa...@redhat.com wrote: Hello, I wonder if we should add something like Reviewed-by tag to newly created design

[Freeipa-devel] [PATCH] 387 Fix validation of ipa-restore options

2015-01-12 Thread Jan Cholasta
Hi, the attached patch fixes https://fedorahosted.org/freeipa/ticket/4797. Note that --data with data-only backup and --logs-only with data-only restore are deliberately ignored and considered no-op. Honza -- Jan Cholasta From 6b14a609d726f5b6dc8e94b1d3d21123637599c1 Mon Sep 17 00:00:00

[Freeipa-devel] [PATCH 0317-0318] Preparation for 7.0 release

2015-01-12 Thread Petr Spacek
Hello, I'm going to release v7.0 with BIND 9.10 support. Following patches were pushed to master: Bump NVR to 7.0. 257618e618a27b3c818f75faf5762130df0701eb Update NEWS for upcoming 7.0 release. c125f23501f8c53047375e45b72e73690fe791a3 -- Petr^2 Spacek From

[Freeipa-devel] [PATCH] 0172 Support Samba PASSDB 0.2.0 aka interface version 24

2015-01-12 Thread Alexander Bokovoy
Hi, Samba project renamed libpdb library we use in ipa-sam module to libsamba-passdb due to naming clash with some other library popular in academic circles (details are in https://bugzilla.samba.org/show_bug.cgi?id=10355) The change will become visible with Samba 4.2.0 release and is actually

[Freeipa-devel] [PATCH] 796 migrate-ds: fix compat plugin check

2015-01-12 Thread Petr Vobornik
[PATCH] migrate-ds: fix compat plugin check After ACI refactoring, admin cannot read Schema Compatibility plugin configuration and therefore migrade-ds won't find if compat plugin is enabled. Now the check si done by looking if cn=compat subtree is present.

Re: [Freeipa-devel] [PATCH] 0036 Abort full backup restoration on not matching host.

2015-01-12 Thread David Kupka
On 01/12/2015 01:41 PM, Jan Cholasta wrote: Dne 12.1.2015 v 13:37 David Kupka napsal(a): On 01/12/2015 01:14 PM, Jan Cholasta wrote: Dne 12.1.2015 v 13:08 Martin Kosek napsal(a): On 01/12/2015 12:53 PM, David Kupka wrote: https://fedorahosted.org/freeipa/ticket/4823 Looking at this patch,

Re: [Freeipa-devel] [PATCH] 487 Bump SSSD Requires to 1.12.3

2015-01-12 Thread Alexander Bokovoy
On Mon, 12 Jan 2015, Martin Kosek wrote: The new SSSD Requires contains support for following features: - FreeIPA user ID View overrides (not just AD users) - User SSH public keys in ID Views - krb5.conf localauth plugin https://fedorahosted.org/freeipa/ticket/4685

Re: [Freeipa-devel] [PATCH] 487 Bump SSSD Requires to 1.12.3

2015-01-12 Thread Martin Kosek
On 01/12/2015 03:57 PM, Alexander Bokovoy wrote: On Mon, 12 Jan 2015, Martin Kosek wrote: The new SSSD Requires contains support for following features: - FreeIPA user ID View overrides (not just AD users) - User SSH public keys in ID Views - krb5.conf localauth plugin

Re: [Freeipa-devel] [PATCH 0315] Support BIND 9.10

2015-01-12 Thread Petr Spacek
On 9.1.2015 16:34, Tomas Hozza wrote: On 12/04/2014 05:04 PM, Petr Spacek wrote: Hello, Support BIND 9.10. https://fedorahosted.org/bind-dyndb-ldap/ticket/139 This patch definitely needs more testing but ...: - It compiles with BIND 9.9 and BIND 9.10. - It seems that it is able to load

Re: [Freeipa-devel] [PATCH 0081] Add initial tests for OTP

2015-01-12 Thread Petr Viktorin
On 01/06/2015 03:26 AM, Nathaniel McCallum wrote: On Thu, 2014-11-20 at 11:13 -0500, Nathaniel McCallum wrote: This tests the general workflow for OTP including most possible token combinations. This includes 5872 tests. Further optimization is possible to reduce the number of duplicate tests

[Freeipa-devel] [PATCH] 487 Bump SSSD Requires to 1.12.3

2015-01-12 Thread Martin Kosek
The new SSSD Requires contains support for following features: - FreeIPA user ID View overrides (not just AD users) - User SSH public keys in ID Views - krb5.conf localauth plugin https://fedorahosted.org/freeipa/ticket/4685 https://fedorahosted.org/freeipa/ticket/4509

[Freeipa-devel] [PATCH] 0036 Abort full backup restoration on not matching host.

2015-01-12 Thread David Kupka
https://fedorahosted.org/freeipa/ticket/4823 -- David Kupka From f04a311b98c6db0bd19486e21dbe07addf2c0f87 Mon Sep 17 00:00:00 2001 From: David Kupka dku...@redhat.com Date: Sun, 11 Jan 2015 18:45:11 -0500 Subject: [PATCH] Abort full backup restoration on not matching host. Full backup cannot be

Re: [Freeipa-devel] [PATCH] 0036 Abort full backup restoration on not matching host.

2015-01-12 Thread Jan Cholasta
Dne 12.1.2015 v 13:08 Martin Kosek napsal(a): On 01/12/2015 12:53 PM, David Kupka wrote: https://fedorahosted.org/freeipa/ticket/4823 Looking at this patch, are data-only backups supposed to work properly then? Wouldn't for example Directory Server fail to start when cn=config contain some

Re: [Freeipa-devel] [PATCH 0179] Fix traceback if zonemgr error message contains unicode characters

2015-01-12 Thread Martin Basti
On 09/01/15 14:07, David Kupka wrote: On 12/12/2014 02:26 PM, Martin Basti wrote: https://fedorahosted.org/freeipa/ticket/4805 Patch attached. Does not work properly. $ locale LANG=cs_CZ.iso88592 LC_CTYPE=cs_CZ.iso88592 LC_NUMERIC=cs_CZ.iso88592 LC_TIME=cs_CZ.iso88592

Re: [Freeipa-devel] Reviewed-By for design pages?

2015-01-12 Thread Martin Kosek
On 01/12/2015 09:29 AM, Petr Spacek wrote: On 9.1.2015 14:26, Martin Kosek wrote: On 01/07/2015 05:41 PM, Alexander Bokovoy wrote: On Wed, 07 Jan 2015, Simo Sorce wrote: On Wed, 07 Jan 2015 10:34:59 +0100 Petr Spacek pspa...@redhat.com wrote: Hello, I wonder if we should add something

Re: [Freeipa-devel] [PATCH] 0036 Abort full backup restoration on not matching host.

2015-01-12 Thread Martin Kosek
On 01/12/2015 01:37 PM, David Kupka wrote: On 01/12/2015 01:14 PM, Jan Cholasta wrote: Dne 12.1.2015 v 13:08 Martin Kosek napsal(a): On 01/12/2015 12:53 PM, David Kupka wrote: https://fedorahosted.org/freeipa/ticket/4823 Looking at this patch, are data-only backups supposed to work properly

Re: [Freeipa-devel] ipalib as RPC client in Web UI CI tests, forms-based auth in ipalib

2015-01-12 Thread Petr Viktorin
On 01/08/2015 03:39 PM, Petr Vobornik wrote: Hello, tl;dr; I want to add forms based auth in ipalib's rpc client and use method 2.e) for API configuration. Will be used in otp tests (ipa-4-1 upstream). Want to know if you are OK with it. PoC implementation attached. == Background == I want to

Re: [Freeipa-devel] [PATCH] 0036 Abort full backup restoration on not matching host.

2015-01-12 Thread Martin Kosek
On 01/12/2015 12:53 PM, David Kupka wrote: https://fedorahosted.org/freeipa/ticket/4823 Looking at this patch, are data-only backups supposed to work properly then? Wouldn't for example Directory Server fail to start when cn=config contain some hostname-bound values? Just checking...

Re: [Freeipa-devel] [PATCH] 0036 Abort full backup restoration on not matching host.

2015-01-12 Thread Jan Cholasta
Dne 12.1.2015 v 13:37 David Kupka napsal(a): On 01/12/2015 01:14 PM, Jan Cholasta wrote: Dne 12.1.2015 v 13:08 Martin Kosek napsal(a): On 01/12/2015 12:53 PM, David Kupka wrote: https://fedorahosted.org/freeipa/ticket/4823 Looking at this patch, are data-only backups supposed to work

Re: [Freeipa-devel] [PATCH 0179] Fix traceback if zonemgr error message contains unicode characters

2015-01-12 Thread David Kupka
On 01/12/2015 01:25 PM, Martin Basti wrote: On 09/01/15 14:07, David Kupka wrote: On 12/12/2014 02:26 PM, Martin Basti wrote: https://fedorahosted.org/freeipa/ticket/4805 Patch attached. Does not work properly. $ locale LANG=cs_CZ.iso88592 LC_CTYPE=cs_CZ.iso88592 LC_NUMERIC=cs_CZ.iso88592

[Freeipa-devel] [PATCH 0182] Fix pkcs11 python extension reference counting

2015-01-12 Thread Martin Basti
Part of DNSSEC (https://fedorahosted.org/freeipa/ticket/4657) Patch attached. -- Martin Basti From 28b3ca9f12e75afc581d0ac6c462c8647e054a07 Mon Sep 17 00:00:00 2001 From: Martin Basti mba...@redhat.com Date: Mon, 12 Jan 2015 13:05:53 +0100 Subject: [PATCH] Fix reference counting in pkcs11

Re: [Freeipa-devel] [PATCH] 0036 Abort full backup restoration on not matching host.

2015-01-12 Thread David Kupka
On 01/12/2015 01:14 PM, Jan Cholasta wrote: Dne 12.1.2015 v 13:08 Martin Kosek napsal(a): On 01/12/2015 12:53 PM, David Kupka wrote: https://fedorahosted.org/freeipa/ticket/4823 Looking at this patch, are data-only backups supposed to work properly then? Wouldn't for example Directory Server

[Freeipa-devel] [PATCH] 797 rpcclient: use json_encode_binary for verbose output

2015-01-12 Thread Petr Vobornik
`json.dumps` is not able to process some IPA's object types and therefore requires to preprocess it with `json_encode_binary` call. This step was not used in rpcclient's verbose output. https://fedorahosted.org/freeipa/ticket/4773 -- Petr Vobornik From 794c06208ddc4cf594f1f7e4dccfaf954f2744dc

[Freeipa-devel] [PATCH 0001] ipa-client-install: attempt to get host TGT several times before aborting client installation

2015-01-12 Thread Martin Babinsky
related to ticket https://fedorahosted.org/freeipa/ticket/4808 Patch attached. Martin^3 From 5988842868303d6a9feffeb2ec5ce873b42876e0 Mon Sep 17 00:00:00 2001 From: Martin Babinsky mbabi...@redhat.com Date: Fri, 9 Jan 2015 17:38:39 +0100 Subject: [PATCH] ipa-client-install: added new option

Re: [Freeipa-devel] [PATCH] 0036 Abort full backup restoration on not matching host.

2015-01-12 Thread Rob Crittenden
Jan Cholasta wrote: Dne 12.1.2015 v 16:30 Rob Crittenden napsal(a): Jan Cholasta wrote: Dne 12.1.2015 v 13:37 David Kupka napsal(a): On 01/12/2015 01:14 PM, Jan Cholasta wrote: Dne 12.1.2015 v 13:08 Martin Kosek napsal(a): On 01/12/2015 12:53 PM, David Kupka wrote:

[Freeipa-devel] [PATCH] 388 Remove RUV from LDIF files before using them in ipa-restore

2015-01-12 Thread Jan Cholasta
Hi, the attached patch fixes https://fedorahosted.org/freeipa/ticket/4822. Honza -- Jan Cholasta From 38223d7d7df123af672a303aa989fb8259e84384 Mon Sep 17 00:00:00 2001 From: Jan Cholasta jchol...@redhat.com Date: Mon, 12 Jan 2015 15:37:33 + Subject: [PATCH] Remove RUV from LDIF files

Re: [Freeipa-devel] [PATCH 0179] Fix traceback if zonemgr error message contains unicode characters

2015-01-12 Thread Martin Kosek
On 01/12/2015 01:56 PM, David Kupka wrote: On 01/12/2015 01:25 PM, Martin Basti wrote: On 09/01/15 14:07, David Kupka wrote: On 12/12/2014 02:26 PM, Martin Basti wrote: https://fedorahosted.org/freeipa/ticket/4805 Patch attached. Does not work properly. $ locale LANG=cs_CZ.iso88592

Re: [Freeipa-devel] [PATCH] 797 rpcclient: use json_encode_binary for verbose output

2015-01-12 Thread Martin Basti
On 12/01/15 16:29, Petr Vobornik wrote: `json.dumps` is not able to process some IPA's object types and therefore requires to preprocess it with `json_encode_binary` call. This step was not used in rpcclient's verbose output. https://fedorahosted.org/freeipa/ticket/4773 Works for me. ACK

Re: [Freeipa-devel] [PATCH] 0036 Abort full backup restoration on not matching host.

2015-01-12 Thread Jan Cholasta
Dne 12.1.2015 v 16:30 Rob Crittenden napsal(a): Jan Cholasta wrote: Dne 12.1.2015 v 13:37 David Kupka napsal(a): On 01/12/2015 01:14 PM, Jan Cholasta wrote: Dne 12.1.2015 v 13:08 Martin Kosek napsal(a): On 01/12/2015 12:53 PM, David Kupka wrote: https://fedorahosted.org/freeipa/ticket/4823

Re: [Freeipa-devel] [PATCH] 0036 Abort full backup restoration on not matching host.

2015-01-12 Thread Rob Crittenden
Jan Cholasta wrote: Dne 12.1.2015 v 13:37 David Kupka napsal(a): On 01/12/2015 01:14 PM, Jan Cholasta wrote: Dne 12.1.2015 v 13:08 Martin Kosek napsal(a): On 01/12/2015 12:53 PM, David Kupka wrote: https://fedorahosted.org/freeipa/ticket/4823 Looking at this patch, are data-only backups

Re: [Freeipa-devel] [PATCHES 0175-0176] New forward zone test cases

2015-01-12 Thread Martin Basti
On 05/01/15 16:18, Martin Basti wrote: On 17/12/14 15:15, Martin Basti wrote: On 16/12/14 17:14, Martin Basti wrote: On 15/12/14 20:15, Martin Basti wrote: On 15/12/14 19:18, Martin Basti wrote: https://fedorahosted.org/freeipa/ticket/4750 Patches need rebase and minor pytest modification

Re: [Freeipa-devel] [PATCH] 796 migrate-ds: fix compat plugin check

2015-01-12 Thread Jan Cholasta
Hi, Dne 12.1.2015 v 14:31 Petr Vobornik napsal(a): [PATCH] migrate-ds: fix compat plugin check After ACI refactoring, admin cannot read Schema Compatibility plugin configuration and therefore migrade-ds won't find if compat plugin is enabled. Now the check si done by looking if cn=compat

Re: [Freeipa-devel] [PATCH] 0035 client: Update DNS with all available local IP addresses.

2015-01-12 Thread Martin Basti
On 09/01/15 14:43, David Kupka wrote: On 01/07/2015 04:15 PM, Martin Basti wrote: On 07/01/15 12:27, David Kupka wrote: https://fedorahosted.org/freeipa/ticket/4249 Thank you for patch: 1) -root_logger.error(Cannot update DNS records! - Failed to connect to

[Freeipa-devel] [PATCH] 389 Fix ipa-restore on systems without IPA installed

2015-01-12 Thread Jan Cholasta
Hi, the attached patch fixes https://fedorahosted.org/freeipa/ticket/4824. Honza -- Jan Cholasta From 0189d9492412cb4f49982c6eba9440677666a358 Mon Sep 17 00:00:00 2001 From: Jan Cholasta jchol...@redhat.com Date: Mon, 12 Jan 2015 17:03:22 + Subject: [PATCH] Fix ipa-restore on systems