Re: [Freeipa-devel] Purpose of default user group

2015-03-12 Thread Petr Spacek
On 10.3.2015 16:01, Jakub Hrozek wrote: > On Tue, Mar 10, 2015 at 03:52:44PM +0100, Martin Kosek wrote: >> On 03/10/2015 03:27 PM, Rob Crittenden wrote: >>> Petr Vobornik wrote: Hi, I would like to ask what is a purpose of a default user group - by default ipausers? Default grou

Re: [Freeipa-devel] Purpose of default user group

2015-03-12 Thread Rob Crittenden
Alexander Bokovoy wrote: > On Tue, 10 Mar 2015, Petr Spacek wrote: >> On 10.3.2015 16:01, Jakub Hrozek wrote: >>> On Tue, Mar 10, 2015 at 03:52:44PM +0100, Martin Kosek wrote: On 03/10/2015 03:27 PM, Rob Crittenden wrote: > Petr Vobornik wrote: >> Hi, >> >> I would like to ask

Re: [Freeipa-devel] Time-based account policies

2015-03-12 Thread John Dennis
On 03/10/2015 11:06 AM, Jakub Hrozek wrote: >> We may need to use libraries for processing iCal rules, like libical >> (http://koji.fedoraproject.org/koji/buildinfo?buildID=606329)... > > Is that what Alexander said, though? In his reply, I see: > "Parsing event information would produce a rul

Re: [Freeipa-devel] Purpose of default user group

2015-03-12 Thread Martin Kosek
On 03/10/2015 05:08 PM, Rob Crittenden wrote: > Alexander Bokovoy wrote: >> On Tue, 10 Mar 2015, Petr Spacek wrote: >>> On 10.3.2015 16:01, Jakub Hrozek wrote: On Tue, Mar 10, 2015 at 03:52:44PM +0100, Martin Kosek wrote: > On 03/10/2015 03:27 PM, Rob Crittenden wrote: >> Petr Vobornik

Re: [Freeipa-devel] Purpose of default user group

2015-03-12 Thread Simo Sorce
On Tue, 2015-03-10 at 16:01 +0100, Jakub Hrozek wrote: > On Tue, Mar 10, 2015 at 03:52:44PM +0100, Martin Kosek wrote: > > On 03/10/2015 03:27 PM, Rob Crittenden wrote: > > > Petr Vobornik wrote: > > >> Hi, > > >> > > >> I would like to ask what is a purpose of a default user group - by > > >> defa

Re: [Freeipa-devel] Generic support for unknown DNS RR types (RFC 3597)

2015-03-12 Thread Petr Spacek
On 10.3.2015 17:35, Simo Sorce wrote: > On Tue, 2015-03-10 at 16:19 +0100, Petr Spacek wrote: >> On 10.3.2015 15:53, Simo Sorce wrote: >>> On Tue, 2015-03-10 at 15:32 +0100, Petr Spacek wrote: Hello, I would like to discuss Generic support for unknown DNS RR types (RFC 3597 [0])

Re: [Freeipa-devel] Generic support for unknown DNS RR types (RFC 3597)

2015-03-12 Thread Simo Sorce
On Tue, 2015-03-10 at 18:26 +0100, Petr Spacek wrote: > On 10.3.2015 17:35, Simo Sorce wrote: > > On Tue, 2015-03-10 at 16:19 +0100, Petr Spacek wrote: > >> On 10.3.2015 15:53, Simo Sorce wrote: > >>> On Tue, 2015-03-10 at 15:32 +0100, Petr Spacek wrote: > Hello, > > I would like to

Re: [Freeipa-devel] [PATCH] Password vault

2015-03-12 Thread Endi Sukma Dewata
Thanks for the review. New patch attached to be applied on top of all previous patches. Please see comments below. On 3/6/2015 3:53 PM, Jan Cholasta wrote: Patch 353: 1) Please follow PEP8 in new code. The pep8 tool reports these errors in existing files: ./ipalib/constants.py:98:80: E501 li

Re: [Freeipa-devel] [PATCHES 306-316] Automated migration tool from Winsync

2015-03-12 Thread Jan Cholasta
Hi, Dne 10.3.2015 v 16:35 Tomas Babej napsal(a): On 03/09/2015 12:26 PM, Tomas Babej wrote: Hi, this couple of patches provides a initial implementation of the winsync migration tool: https://fedorahosted.org/freeipa/ticket/4524 Some parts could use some polishing, but this is a sound found

Re: [Freeipa-devel] Generic support for unknown DNS RR types (RFC 3597)

2015-03-12 Thread Petr Spacek
On 11.3.2015 15:45, Martin Kosek wrote: > On 03/11/2015 03:38 PM, Petr Spacek wrote: >> On 11.3.2015 15:28, Martin Kosek wrote: >>> On 03/11/2015 12:43 PM, Petr Spacek wrote: On 11.3.2015 11:34, Jan Cholasta wrote: > Dne 11.3.2015 v 11:12 Petr Spacek napsal(a): >> On 10.3.2015 20:04, S

Re: [Freeipa-devel] Rename IPAv3_AD_trust_setup?

2015-03-12 Thread Martin Kosek
On 03/10/2015 09:06 AM, Alexander Bokovoy wrote: > On Tue, 10 Mar 2015, Martin Kosek wrote: >> Hi, >> >> I just saw someone refer to [1] with respect to FreeIPA 4.x. Would it make >> sense to just rename the page from [1] to [2] (with keeping redirect of >> course)? >> >> This would move the page

Re: [Freeipa-devel] [PATCHES] SPEC: Require python2 version of sssd bindings

2015-03-12 Thread Lukas Slebodnik
On (06/03/15 15:05), Lukas Slebodnik wrote: >On (05/03/15 16:20), Petr Vobornik wrote: >>On 03/05/2015 11:23 AM, Lukas Slebodnik wrote: >>>On (05/03/15 08:54), Petr Vobornik wrote: On 02/27/2015 09:50 PM, Lukas Slebodnik wrote: >ehlo, > >Please review attached patches and fix freeip

Re: [Freeipa-devel] Generic support for unknown DNS RR types (RFC 3597)

2015-03-12 Thread Petr Spacek
On 11.3.2015 17:02, Martin Kosek wrote: > On 03/11/2015 04:55 PM, Petr Spacek wrote: >> On 11.3.2015 15:45, Martin Kosek wrote: >>> On 03/11/2015 03:38 PM, Petr Spacek wrote: On 11.3.2015 15:28, Martin Kosek wrote: > On 03/11/2015 12:43 PM, Petr Spacek wrote: >> On 11.3.2015 11:34, Jan

Re: [Freeipa-devel] [PATCHES] SPEC: Require python2 version of sssd bindings

2015-03-12 Thread Petr Vobornik
On 03/06/2015 03:13 PM, Alexander Bokovoy wrote: On Fri, 06 Mar 2015, Lukas Slebodnik wrote: On (05/03/15 16:20), Petr Vobornik wrote: On 03/05/2015 11:23 AM, Lukas Slebodnik wrote: On (05/03/15 08:54), Petr Vobornik wrote: On 02/27/2015 09:50 PM, Lukas Slebodnik wrote: ehlo, Please review

Re: [Freeipa-devel] [PATCHES] SPEC: Require python2 version of sssd bindings

2015-03-12 Thread Alexander Bokovoy
On Thu, 12 Mar 2015, Petr Vobornik wrote: On 03/06/2015 03:13 PM, Alexander Bokovoy wrote: On Fri, 06 Mar 2015, Lukas Slebodnik wrote: On (05/03/15 16:20), Petr Vobornik wrote: On 03/05/2015 11:23 AM, Lukas Slebodnik wrote: On (05/03/15 08:54), Petr Vobornik wrote: On 02/27/2015 09:50 PM, Lu

Re: [Freeipa-devel] [PATCHES] SPEC: Require python2 version of sssd bindings

2015-03-12 Thread Alexander Bokovoy
On Thu, 12 Mar 2015, Alexander Bokovoy wrote: On Thu, 12 Mar 2015, Petr Vobornik wrote: On 03/06/2015 03:13 PM, Alexander Bokovoy wrote: On Fri, 06 Mar 2015, Lukas Slebodnik wrote: On (05/03/15 16:20), Petr Vobornik wrote: On 03/05/2015 11:23 AM, Lukas Slebodnik wrote: On (05/03/15 08:54), P

[Freeipa-devel] [PATCH 0044] Man pages: ipa-replica-prepare can only be created on first master

2015-03-12 Thread Gabe Alford
Hello, Fix for https://fedorahosted.org/freeipa/ticket/4944. Since there seems to be plenty of time, I added it to the freeipa-4-1 branch. Thanks, Gabe From 0887f4f4595e62ce4d24f1b031418e47da7586fb Mon Sep 17 00:00:00 2001 From: Gabe Date: Thu, 12 Mar 2015 07:26:34 -0600 Subject: [PATCH] ipa-re

Re: [Freeipa-devel] [PATCH 0044] Man pages: ipa-replica-prepare can only be created on first master

2015-03-12 Thread Martin Kosek
On 03/12/2015 02:37 PM, Gabe Alford wrote: > Hello, > > Fix for https://fedorahosted.org/freeipa/ticket/4944. Since there seems to > be plenty of time, I added it to the freeipa-4-1 branch. Thanks Gabe! I would still suggest against moving the tickets to milestones yourself, all new tickets shoul

Re: [Freeipa-devel] [PATCHES 0018-0019] ipa-dns-install: Use LDAPI for all DS connections

2015-03-12 Thread Martin Babinsky
On 03/11/2015 03:13 PM, Martin Basti wrote: On 11/03/15 13:00, Martin Babinsky wrote: These patches solve https://fedorahosted.org/freeipa/ticket/4933. They are to be applied to master branch. I will rebase them for ipa-4-1 after the review. Thank you for the patches. I have a few comments:

Re: [Freeipa-devel] [PATCH 0203] Remove unused PRE_SCHEMA upgrade

2015-03-12 Thread David Kupka
On 03/06/2015 04:52 PM, Martin Basti wrote: This upgrade step is not used anymore. Required by: https://fedorahosted.org/freeipa/ticket/4904 Patch attached. Looks and works good to me, ACK. -- David Kupka -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.c

Re: [Freeipa-devel] [PATCH 0208] Respect --test option in upgrade plugins

2015-03-12 Thread David Kupka
On 03/06/2015 06:00 PM, Martin Basti wrote: Upgrade plugins which modify LDAP data directly should not be executed in --test mode. This patch is a workaround, to ensure update with --test option will not modify any LDAP data. https://fedorahosted.org/freeipa/ticket/3448 Patch attached. Id

Re: [Freeipa-devel] [PATCHES 0204-0207] Server upgrade: Make LDAP data upgrade deterministic

2015-03-12 Thread David Kupka
On 03/06/2015 04:50 PM, Martin Basti wrote: The patchset ensure, the upgrade order will respect ordering of entries in *.update files. Required for: https://fedorahosted.org/freeipa/ticket/4904 Patch 205 also fixes https://fedorahosted.org/freeipa/ticket/3560 Required patch mbasti-0203 Patche

Re: [Freeipa-devel] [PATCH 0203] Remove unused PRE_SCHEMA upgrade

2015-03-12 Thread Rob Crittenden
David Kupka wrote: > On 03/06/2015 04:52 PM, Martin Basti wrote: >> This upgrade step is not used anymore. >> >> Required by: https://fedorahosted.org/freeipa/ticket/4904 >> >> Patch attached. >> >> >> > > Looks and works good to me, ACK. Is this going away because one can simply create an update

Re: [Freeipa-devel] [PATCH 0208] Respect --test option in upgrade plugins

2015-03-12 Thread Rob Crittenden
David Kupka wrote: > On 03/06/2015 06:00 PM, Martin Basti wrote: >> Upgrade plugins which modify LDAP data directly should not be executed >> in --test mode. >> >> This patch is a workaround, to ensure update with --test option will not >> modify any LDAP data. >> >> https://fedorahosted.org/freeip

Re: [Freeipa-devel] [PATCHES 0204-0207] Server upgrade: Make LDAP data upgrade deterministic

2015-03-12 Thread Rob Crittenden
Martin Basti wrote: > The patchset ensure, the upgrade order will respect ordering of entries > in *.update files. > > Required for: https://fedorahosted.org/freeipa/ticket/4904 > > Patch 205 also fixes https://fedorahosted.org/freeipa/ticket/3560 > > Required patch mbasti-0203 > > Patches atta

Re: [Freeipa-devel] [PATCH 0203] Remove unused PRE_SCHEMA upgrade

2015-03-12 Thread Martin Basti
On 12/03/15 16:22, Rob Crittenden wrote: David Kupka wrote: On 03/06/2015 04:52 PM, Martin Basti wrote: This upgrade step is not used anymore. Required by: https://fedorahosted.org/freeipa/ticket/4904 Patch attached. Looks and works good to me, ACK. Is this going away because one can sim

Re: [Freeipa-devel] [PATCH 0203] Remove unused PRE_SCHEMA upgrade

2015-03-12 Thread Rob Crittenden
Martin Basti wrote: > On 12/03/15 16:22, Rob Crittenden wrote: >> David Kupka wrote: >>> On 03/06/2015 04:52 PM, Martin Basti wrote: This upgrade step is not used anymore. Required by: https://fedorahosted.org/freeipa/ticket/4904 Patch attached. >>> Looks and

Re: [Freeipa-devel] [PATCH 0208] Respect --test option in upgrade plugins

2015-03-12 Thread Rob Crittenden
Petr Spacek wrote: > On 12.3.2015 16:23, Rob Crittenden wrote: >> David Kupka wrote: >>> On 03/06/2015 06:00 PM, Martin Basti wrote: Upgrade plugins which modify LDAP data directly should not be executed in --test mode. This patch is a workaround, to ensure update with --test op

Re: [Freeipa-devel] [PATCH 0208] Respect --test option in upgrade plugins

2015-03-12 Thread Petr Spacek
On 12.3.2015 16:23, Rob Crittenden wrote: > David Kupka wrote: >> On 03/06/2015 06:00 PM, Martin Basti wrote: >>> Upgrade plugins which modify LDAP data directly should not be executed >>> in --test mode. >>> >>> This patch is a workaround, to ensure update with --test option will not >>> modify an

Re: [Freeipa-devel] [PATCH 0208] Respect --test option in upgrade plugins

2015-03-12 Thread Petr Spacek
On 12.3.2015 17:05, Petr Spacek wrote: > On 12.3.2015 16:23, Rob Crittenden wrote: >> David Kupka wrote: >>> On 03/06/2015 06:00 PM, Martin Basti wrote: Upgrade plugins which modify LDAP data directly should not be executed in --test mode. This patch is a workaround, to ensure u

Re: [Freeipa-devel] [PATCHES 0018-0019] ipa-dns-install: Use LDAPI for all DS connections

2015-03-12 Thread Martin Babinsky
On 03/12/2015 03:59 PM, Martin Babinsky wrote: On 03/11/2015 03:13 PM, Martin Basti wrote: On 11/03/15 13:00, Martin Babinsky wrote: These patches solve https://fedorahosted.org/freeipa/ticket/4933. They are to be applied to master branch. I will rebase them for ipa-4-1 after the review. Tha

Re: [Freeipa-devel] [PATCH 0203] Remove unused PRE_SCHEMA upgrade

2015-03-12 Thread Martin Basti
On 12/03/15 17:08, Rob Crittenden wrote: Martin Basti wrote: On 12/03/15 16:22, Rob Crittenden wrote: David Kupka wrote: On 03/06/2015 04:52 PM, Martin Basti wrote: This upgrade step is not used anymore. Required by: https://fedorahosted.org/freeipa/ticket/4904 Patch attached. Looks and

Re: [Freeipa-devel] [PATCH] Password vault

2015-03-12 Thread Endi Sukma Dewata
On 3/11/2015 9:12 PM, Endi Sukma Dewata wrote: Thanks for the review. New patch attached to be applied on top of all previous patches. Please see comments below. New patch #362-1 attached replacing #362. It fixed some issues in handle_not_found(). -- Endi S. Dewata >From 6741138b647427cd3448

Re: [Freeipa-devel] [PATCHES 0001-0002] ipa-client-install NTP fixes

2015-03-12 Thread Nathan Kinder
On 03/04/2015 11:25 AM, Nathan Kinder wrote: > > > On 03/04/2015 10:58 AM, Martin Basti wrote: >> On 04/03/15 19:56, Nathan Kinder wrote: >>> >>> On 03/04/2015 10:41 AM, Rob Crittenden wrote: Nathan Kinder wrote: > > On 02/28/2015 01:13 PM, Nathan Kinder wrote: >> >> On 02/