Re: [Freeipa-devel] [PATCH] 819-820 jQuery.ordered_map: faster creation

2015-05-11 Thread Martin Babinsky
On 04/17/2015 04:31 PM, Petr Vobornik wrote: Improve performance of Web UI with very large user groups or any other usage which adds a lot of values into jQuery.ordered_map. ACK -- Martin^3 Babinsky -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailma

Re: [Freeipa-devel] [PATCH] 801-806 webui-ci: otptoken tests

2015-05-11 Thread Milan Kubik
On 05/07/2015 01:38 PM, Petr Vobornik wrote: On 02/19/2015 03:51 PM, Petr Vobornik wrote: https://fedorahosted.org/freeipa/ticket/4307 For ipa-4-1 apply: - patch 800 (different thread) - patches 801-806 For master apply: - patch 800 (different thread) - patch 807 (different thread) - patch 801

Re: [Freeipa-devel] Domain Level feature kick-off

2015-05-11 Thread Ludwig Krispenz
On 05/06/2015 09:29 AM, Martin Kosek wrote: Hello, as already discussed in December [1], we will need to implement domain levels in FreeIPA 4.2 to make sure we can manage the replication agreement by Topology plugin. I created a ticket for this feature [3] and linked it with Simo's design. The

Re: [Freeipa-devel] Domain Level feature kick-off

2015-05-11 Thread Jan Cholasta
Dne 6.5.2015 v 09:29 Martin Kosek napsal(a): Hello, as already discussed in December [1], we will need to implement domain levels in FreeIPA 4.2 to make sure we can manage the replication agreement by Topology plugin. I created a ticket for this feature [3] and linked it with Simo's design. The

Re: [Freeipa-devel] Domain Level feature kick-off

2015-05-11 Thread Martin Kosek
On 05/11/2015 03:18 PM, Jan Cholasta wrote: > Dne 6.5.2015 v 09:29 Martin Kosek napsal(a): >> Hello, >> >> as already discussed in December [1], we will need to implement domain levels >> in FreeIPA 4.2 to make sure we can manage the replication agreement by >> Topology >> plugin. >> >> I created

Re: [Freeipa-devel] Domain Level feature kick-off

2015-05-11 Thread Jan Cholasta
Dne 11.5.2015 v 15:34 Martin Kosek napsal(a): On 05/11/2015 03:18 PM, Jan Cholasta wrote: Dne 6.5.2015 v 09:29 Martin Kosek napsal(a): Hello, as already discussed in December [1], we will need to implement domain levels in FreeIPA 4.2 to make sure we can manage the replication agreement by Top

Re: [Freeipa-devel] Domain Level feature kick-off

2015-05-11 Thread Martin Kosek
On 05/11/2015 03:50 PM, Jan Cholasta wrote: > Dne 11.5.2015 v 15:34 Martin Kosek napsal(a): >> On 05/11/2015 03:18 PM, Jan Cholasta wrote: >>> Dne 6.5.2015 v 09:29 Martin Kosek napsal(a): Hello, as already discussed in December [1], we will need to implement domain levels

Re: [Freeipa-devel] Fwd: [openssl-users] removing Kerberos support from OpenSSL

2015-05-11 Thread Nathaniel McCallum
Yes and no. The current Kerberos support is insecure and should not be used. The main problem is that the session key is reused for all TLS connections. This prevents perfect forward secrecy. That being said, we have been toying around with the idea of making a new standard for GSSAPI/TLS which u

Re: [Freeipa-devel] Domain Level feature kick-off

2015-05-11 Thread Jan Cholasta
Dne 11.5.2015 v 15:56 Martin Kosek napsal(a): On 05/11/2015 03:50 PM, Jan Cholasta wrote: Dne 11.5.2015 v 15:34 Martin Kosek napsal(a): On 05/11/2015 03:18 PM, Jan Cholasta wrote: Dne 6.5.2015 v 09:29 Martin Kosek napsal(a): Hello, as already discussed in December [1], we will need to implem

Re: [Freeipa-devel] Domain Level feature kick-off

2015-05-11 Thread Petr Vobornik
On 05/11/2015 04:13 PM, Jan Cholasta wrote: Dne 11.5.2015 v 15:56 Martin Kosek napsal(a): On 05/11/2015 03:50 PM, Jan Cholasta wrote: Dne 11.5.2015 v 15:34 Martin Kosek napsal(a): On 05/11/2015 03:18 PM, Jan Cholasta wrote: Dne 6.5.2015 v 09:29 Martin Kosek napsal(a): Hello, as already disc

Re: [Freeipa-devel] Domain Level feature kick-off

2015-05-11 Thread Jan Cholasta
Dne 11.5.2015 v 16:29 Petr Vobornik napsal(a): On 05/11/2015 04:13 PM, Jan Cholasta wrote: Dne 11.5.2015 v 15:56 Martin Kosek napsal(a): On 05/11/2015 03:50 PM, Jan Cholasta wrote: Dne 11.5.2015 v 15:34 Martin Kosek napsal(a): On 05/11/2015 03:18 PM, Jan Cholasta wrote: Dne 6.5.2015 v 09:29

Re: [Freeipa-devel] Domain Level feature kick-off

2015-05-11 Thread Martin Kosek
On 05/11/2015 04:34 PM, Jan Cholasta wrote: > Dne 11.5.2015 v 16:29 Petr Vobornik napsal(a): >> On 05/11/2015 04:13 PM, Jan Cholasta wrote: >>> Dne 11.5.2015 v 15:56 Martin Kosek napsal(a): On 05/11/2015 03:50 PM, Jan Cholasta wrote: > Dne 11.5.2015 v 15:34 Martin Kosek napsal(a): >> O

Re: [Freeipa-devel] ipa-replica-manage del fails to delete host entry

2015-05-11 Thread Martin Kosek
On 05/06/2015 03:07 PM, Tomas Babej wrote: > > > On 05/06/2015 02:47 PM, Ludwig Krispenz wrote: >> >> Hi, >> in recent posts about corrupted ruvs, there also was the error about failing >> cleanup, like: >> >> ipa-replica-manage del vm-162.idm.lab.eng.brq.redhat.com >> >> .. >> Failed to cleanup

Re: [Freeipa-devel] Domain Level feature kick-off

2015-05-11 Thread Petr Spacek
On 11.5.2015 16:36, Martin Kosek wrote: > On 05/11/2015 04:34 PM, Jan Cholasta wrote: >> Dne 11.5.2015 v 16:29 Petr Vobornik napsal(a): >>> On 05/11/2015 04:13 PM, Jan Cholasta wrote: Dne 11.5.2015 v 15:56 Martin Kosek napsal(a): > On 05/11/2015 03:50 PM, Jan Cholasta wrote: >> Dne 11.

Re: [Freeipa-devel] Domain Level feature kick-off

2015-05-11 Thread Ludwig Krispenz
On 05/11/2015 05:42 PM, Petr Spacek wrote: On 11.5.2015 16:36, Martin Kosek wrote: On 05/11/2015 04:34 PM, Jan Cholasta wrote: Dne 11.5.2015 v 16:29 Petr Vobornik napsal(a): On 05/11/2015 04:13 PM, Jan Cholasta wrote: Dne 11.5.2015 v 15:56 Martin Kosek napsal(a): On 05/11/2015 03:50 PM, Jan

Re: [Freeipa-devel] [PATCHES 0231-0232] Server Upgrade: support base64 encoded values in update files + remove CSV

2015-05-11 Thread Jan Cholasta
Dne 7.5.2015 v 19:54 Martin Basti napsal(a): On 07/05/15 11:09, Martin Basti wrote: On 06/05/15 13:17, Martin Basti wrote: On 29/04/15 10:07, Jan Cholasta wrote: Dne 27.4.2015 v 16:46 Martin Basti napsal(a): On 27/04/15 13:05, Martin Basti wrote: On 23/04/15 13:06, Martin Basti wrote: On 16

Re: [Freeipa-devel] Domain Level feature kick-off

2015-05-11 Thread Jan Cholasta
Dne 11.5.2015 v 18:03 Ludwig Krispenz napsal(a): On 05/11/2015 05:42 PM, Petr Spacek wrote: On 11.5.2015 16:36, Martin Kosek wrote: On 05/11/2015 04:34 PM, Jan Cholasta wrote: Dne 11.5.2015 v 16:29 Petr Vobornik napsal(a): On 05/11/2015 04:13 PM, Jan Cholasta wrote: Dne 11.5.2015 v 15:56 Ma

Re: [Freeipa-devel] Fwd: [openssl-users] removing Kerberos support from OpenSSL

2015-05-11 Thread Nathaniel McCallum
Nico Williams has made an interesting proposal on this topic: http://marc.info/?l=openssl-users&m=143136162429551&w=2 It is probably worth discussing. On Mon, 2015-05-11 at 10:09 -0400, Nathaniel McCallum wrote: > Yes and no. > > The current Kerberos support is insecure and should not be used. T

Re: [Freeipa-devel] Domain Level feature kick-off

2015-05-11 Thread Ludwig Krispenz
On 05/11/2015 06:44 PM, Jan Cholasta wrote: Dne 11.5.2015 v 18:03 Ludwig Krispenz napsal(a): On 05/11/2015 05:42 PM, Petr Spacek wrote: On 11.5.2015 16:36, Martin Kosek wrote: On 05/11/2015 04:34 PM, Jan Cholasta wrote: Dne 11.5.2015 v 16:29 Petr Vobornik napsal(a): On 05/11/2015 04:13 PM,

Re: [Freeipa-devel] [PATCH] 0178 Fix AD trusts in Fedora 22

2015-05-11 Thread Alexander Bokovoy
On Fri, 08 May 2015, Alexander Bokovoy wrote: Hi, attached patch fixes issues with Samba 4.2 in Fedora 22. See commit message for the details. Note that you'll also need Samba fixes from https://bugzilla.redhat.com/show_bug.cgi?id=1219832 to test the patch. Fixes https://bugzilla.redhat.com/sh

Re: [Freeipa-devel] [PATCH 0031] provide a dedicated ccache file to httpd

2015-05-11 Thread Alexander Bokovoy
On Mon, 04 May 2015, Martin Babinsky wrote: On 04/30/2015 08:23 AM, Alexander Bokovoy wrote: On Thu, 30 Apr 2015, Jan Cholasta wrote: Hi, Dne 29.4.2015 v 19:42 Martin Babinsky napsal(a): The attached patch is a merge of PATCHES 0031-0032 incorporating Simo's and Martin's suggestions (see e.g.