Re: [Freeipa-devel] Topology plugin quirks

2015-06-03 Thread Ludwig Krispenz
On 06/03/2015 11:51 AM, Oleg Fayans wrote: I confirm every point of this. did you test with all the latest patches applied ? In your issues you refer to crashes, the crashes reported should be resolved, if you still have crashes, pleas provide a core dump or scenario to reproduce the crash.

Re: [Freeipa-devel] Topology plugin quirks

2015-06-03 Thread Ludwig Krispenz
On 06/03/2015 11:37 AM, Martin Babinsky wrote: Hi everyone, I have been playing with the topology related patches and I have encountered a few issues that I would like to address in this thread: 1.) When replica install for whatever reason crashes _after_ the setup of replication

Re: [Freeipa-devel] [PATCH] 857 topology: ipa management commands

2015-06-03 Thread Petr Vobornik
On 06/03/2015 10:59 AM, Martin Babinsky wrote: On 06/03/2015 10:52 AM, Martin Babinsky wrote: On 05/26/2015 03:31 PM, Petr Vobornik wrote: On 05/26/2015 12:19 PM, Petr Vobornik wrote: this patch is based on top of my patch #856 and tbabej' s 325-9. Obsoletes Ludwig's 0006. ipalib part of

Re: [Freeipa-devel] Topology plugin quirks

2015-06-03 Thread Ludwig Krispenz
On 06/03/2015 01:32 PM, Oleg Fayans wrote: Hi Ludwig On 06/03/2015 12:23 PM, Ludwig Krispenz wrote: On 06/03/2015 11:51 AM, Oleg Fayans wrote: I confirm every point of this. did you test with all the latest patches applied ? In your issues you refer to crashes, the crashes reported should

Re: [Freeipa-devel] Topology plugin quirks

2015-06-03 Thread Oleg Fayans
I confirm every point of this. On 06/03/2015 11:37 AM, Martin Babinsky wrote: Hi everyone, I have been playing with the topology related patches and I have encountered a few issues that I would like to address in this thread: 1.) When replica install for whatever reason crashes _after_ the

Re: [Freeipa-devel] [PATCH 0014 v3] Support multiple user and host certificates

2015-06-03 Thread Martin Basti
On 02/06/15 16:03, Jan Cholasta wrote: Dne 2.6.2015 v 12:36 Martin Basti napsal(a): On 02/06/15 11:42, Fraser Tweedale wrote: On Mon, Jun 01, 2015 at 02:50:45PM +0200, Martin Basti wrote: On 01/06/15 06:40, Fraser Tweedale wrote: New version of patch; ``{host,service}-show --out=FILE`` now

Re: [Freeipa-devel] [PATCH 0014 v3] Support multiple user and host certificates

2015-06-03 Thread Milan Kubik
On 06/03/2015 01:17 PM, Martin Basti wrote: On 02/06/15 16:03, Jan Cholasta wrote: Dne 2.6.2015 v 12:36 Martin Basti napsal(a): On 02/06/15 11:42, Fraser Tweedale wrote: On Mon, Jun 01, 2015 at 02:50:45PM +0200, Martin Basti wrote: On 01/06/15 06:40, Fraser Tweedale wrote: New version of

Re: [Freeipa-devel] [PATCH] Password vault

2015-06-03 Thread Jan Cholasta
Dne 2.6.2015 v 20:40 Simo Sorce napsal(a): On Tue, 2015-06-02 at 07:07 -0500, Endi Sukma Dewata wrote: On 6/2/2015 1:10 AM, Martin Kosek wrote: Hi Endi, Quickly skimming through your patches raised couple questions on my side: 1) Will it be possible to also store plain text password via

Re: [Freeipa-devel] [PATCH] Password vault

2015-06-03 Thread Martin Kosek
On 06/02/2015 11:22 PM, Alexander Bokovoy wrote: On Tue, 02 Jun 2015, Endi Sukma Dewata wrote: Please take a look at the new patch. On 6/2/2015 10:05 AM, Martin Kosek wrote: 4) In the vault-archive forward method, you use pki module. However, this module will be only available on FreeIPA

Re: [Freeipa-devel] Database error on replicas

2015-06-03 Thread Martin Kosek
On 06/03/2015 10:33 AM, Oleg Fayans wrote: Hi, With the latest freeipa code containing Topology plugin patches, I am unable to make any changes in replicas. I have the following topology: replica1 = master = replica3 Here is the output of the ipa topologysegment-find command: Suffix

Re: [Freeipa-devel] [PATCH] 857 topology: ipa management commands

2015-06-03 Thread Martin Babinsky
On 05/26/2015 03:31 PM, Petr Vobornik wrote: On 05/26/2015 12:19 PM, Petr Vobornik wrote: this patch is based on top of my patch #856 and tbabej' s 325-9. Obsoletes Ludwig's 0006. ipalib part of topology management Design: - http://www.freeipa.org/page/V4/Manage_replication_topology

Re: [Freeipa-devel] [PATCH] 857 topology: ipa management commands

2015-06-03 Thread Martin Babinsky
On 06/03/2015 10:52 AM, Martin Babinsky wrote: On 05/26/2015 03:31 PM, Petr Vobornik wrote: On 05/26/2015 12:19 PM, Petr Vobornik wrote: this patch is based on top of my patch #856 and tbabej' s 325-9. Obsoletes Ludwig's 0006. ipalib part of topology management Design: -

Re: [Freeipa-devel] [PATCH] Password vault

2015-06-03 Thread Martin Kosek
On 06/02/2015 08:34 PM, Simo Sorce wrote: On Tue, 2015-06-02 at 12:04 +0200, Jan Cholasta wrote: Dne 2.6.2015 v 02:02 Endi Sukma Dewata napsal(a): On 5/28/2015 12:46 AM, Jan Cholasta wrote: On a related note, since KRA is optional, can we move the vaults container to cn=kra,cn=vaults? This is

Re: [Freeipa-devel] Database error on replicas

2015-06-03 Thread Ludwig Krispenz
On 06/03/2015 10:44 AM, Martin Kosek wrote: On 06/03/2015 10:33 AM, Oleg Fayans wrote: Hi, With the latest freeipa code containing Topology plugin patches, I am unable to make any changes in replicas. I have the following topology: replica1 = master = replica3 Here is the output of the ipa

Re: [Freeipa-devel] Database error on replicas

2015-06-03 Thread Martin Babinsky
On 06/03/2015 10:33 AM, Oleg Fayans wrote: Hi, With the latest freeipa code containing Topology plugin patches, I am unable to make any changes in replicas. I have the following topology: replica1 = master = replica3 Here is the output of the ipa topologysegment-find command: Suffix name:

Re: [Freeipa-devel] [PATCH] 1112 Add service constraint delegation plugin

2015-06-03 Thread Jan Cholasta
Dne 3.6.2015 v 11:34 Martin Basti napsal(a): On 02/06/15 22:51, Rob Crittenden wrote: Martin Basti wrote: On 31/05/15 04:07, Rob Crittenden wrote: Petr Vobornik wrote: On 05/27/2015 08:17 PM, Martin Basti wrote: On 27/05/15 19:27, Rob Crittenden wrote: Martin Basti wrote: Thank you. I

Re: [Freeipa-devel] Topology plugin quirks

2015-06-03 Thread Martin Babinsky
On 06/03/2015 12:23 PM, Ludwig Krispenz wrote: On 06/03/2015 11:51 AM, Oleg Fayans wrote: I confirm every point of this. did you test with all the latest patches applied ? In your issues you refer to crashes, the crashes reported should be resolved, if you still have crashes, pleas provide a

Re: [Freeipa-devel] Topology plugin quirks

2015-06-03 Thread Petr Vobornik
On 06/03/2015 11:37 AM, Martin Babinsky wrote: Hi everyone, I have been playing with the topology related patches and I have encountered a few issues that I would like to address in this thread: Additional stuff: 1. was able to add duplicate segment - same left and right node - same

Re: [Freeipa-devel] Topology plugin quirks

2015-06-03 Thread Oleg Fayans
Hi Ludwig On 06/03/2015 12:23 PM, Ludwig Krispenz wrote: On 06/03/2015 11:51 AM, Oleg Fayans wrote: I confirm every point of this. did you test with all the latest patches applied ? In your issues you refer to crashes, the crashes reported should be resolved, if you still have crashes,

Re: [Freeipa-devel] [PATCH] 857 topology: ipa management commands

2015-06-03 Thread Petr Vobornik
On 06/03/2015 02:38 PM, Martin Babinsky wrote: On 06/03/2015 01:34 PM, Petr Vobornik wrote: On 06/03/2015 10:59 AM, Martin Babinsky wrote: On 06/03/2015 10:52 AM, Martin Babinsky wrote: On 05/26/2015 03:31 PM, Petr Vobornik wrote: On 05/26/2015 12:19 PM, Petr Vobornik wrote: this patch is

Re: [Freeipa-devel] [PATCH] Password vault

2015-06-03 Thread Alexander Bokovoy
On Wed, 03 Jun 2015, Endi Sukma Dewata wrote: On 6/3/2015 1:41 AM, Martin Kosek wrote: On 06/02/2015 11:22 PM, Alexander Bokovoy wrote: On Tue, 02 Jun 2015, Endi Sukma Dewata wrote: I think ideally the client and server code should be in separate files (so they can be deployed separately

Re: [Freeipa-devel] [PATCH 0026-0028] Fix nits in user-visible output

2015-06-03 Thread Martin Basti
On 14/04/15 09:43, Petr Spacek wrote: On 14.4.2015 09:10, Martin Kosek wrote: On 04/13/2015 05:05 PM, Petr Spacek wrote: Hello, documentation team proposed few changes in user-visible messages so here it is. It was not worth a ticket and related overhead. The changes look OK to me. I would

Re: [Freeipa-devel] [PATCH] Password vault

2015-06-03 Thread Endi Sukma Dewata
On 6/3/2015 8:52 AM, Alexander Bokovoy wrote: Having to use the same plugins for client and server is a framework limitation/poor design. Having to use conditional imports to work around the limitation is a bad programming practice. The fact that trust plugin has to implement a similar

Re: [Freeipa-devel] [PATCH 0010] KeyError raised upon replica installation

2015-06-03 Thread Martin Kosek
On 06/03/2015 04:10 PM, Petr Vobornik wrote: On 06/02/2015 02:20 PM, Ludwig Krispenz wrote: replicas installed from older versions do not have a binddn group just accept the errror ACK Pushed to master: 8457edc14dade724b486540800bcdafb7d9a6f76 Note that this group will be populated

Re: [Freeipa-devel] [PATCH 0010] KeyError raised upon replica installation

2015-06-03 Thread Petr Vobornik
On 06/02/2015 02:20 PM, Ludwig Krispenz wrote: replicas installed from older versions do not have a binddn group just accept the errror ACK Pushed to master: 8457edc14dade724b486540800bcdafb7d9a6f76 Note that this group will be populated later. IMHO it should be done as a part of

Re: [Freeipa-devel] [PATCH 0010] KeyError raised upon replica installation

2015-06-03 Thread Ludwig Krispenz
On 06/03/2015 04:10 PM, Petr Vobornik wrote: On 06/02/2015 02:20 PM, Ludwig Krispenz wrote: replicas installed from older versions do not have a binddn group just accept the errror ACK Pushed to master: 8457edc14dade724b486540800bcdafb7d9a6f76 Note that this group will be populated later.

Re: [Freeipa-devel] [PATCH] Use Exception class instead of BaseException

2015-06-03 Thread Petr Viktorin
On 06/01/2015 06:33 AM, Niranjan wrote: Greetings, I would like to present patch for replacing StandardError exception with Exception class in ipapython/adminutil.py. Also replacing BaseException class with Exception class. Though the use of StandardError is many places. I would like to

Re: [Freeipa-devel] [PATCH] Use Exception class instead of BaseException

2015-06-03 Thread Martin Basti
On 01/06/15 06:33, Niranjan wrote: Greetings, I would like to present patch for replacing StandardError exception with Exception class in ipapython/adminutil.py. Also replacing BaseException class with Exception class. Though the use of StandardError is many places. I would like to start with

Re: [Freeipa-devel] KeyError raised upon replica installation

2015-06-03 Thread Oleg Fayans
BTW, Ludwig, it seems you forgot to attach the 0010 patch to your email. At least, your first letter from 06/02/2015 05:08 PM, containing PATCH 0010 does not have the actual patch On 06/03/2015 02:53 PM, Oleg Fayans wrote: Hi Ludwig, I'll rebuild the packages again with the whole set of

Re: [Freeipa-devel] [PATCH] Password vault

2015-06-03 Thread Endi Sukma Dewata
On 6/3/2015 1:41 AM, Martin Kosek wrote: On 06/02/2015 11:22 PM, Alexander Bokovoy wrote: On Tue, 02 Jun 2015, Endi Sukma Dewata wrote: I think ideally the client and server code should be in separate files (so they can be deployed separately too), but the framework doesn't seem to allow that.

Re: [Freeipa-devel] KeyError raised upon replica installation

2015-06-03 Thread Ludwig Krispenz
On 06/03/2015 02:05 PM, Oleg Fayans wrote: Update: The original error occurs ONLY when installing a replica from a gpg file prepared on a master running FreeIPA 4.1.2. but this should be covere with patch 0010 If The master runs the upstream code, it works. On 06/02/2015 02:11 PM, Martin

[Freeipa-devel] [PATCH 0011] check-for-existing-and-self-referential-segments

2015-06-03 Thread Ludwig Krispenz
Hi, this should prevent adding duplicate segments or segments with same start and end node From 759790e3c6c87ebe75610fdcfda06c6d4bc00475 Mon Sep 17 00:00:00 2001 From: Ludwig Krispenz lkris...@redhat.com Date: Wed, 3 Jun 2015 14:22:52 +0200 Subject: [PATCH] check for existing and self

Re: [Freeipa-devel] [PATCH] Password vault

2015-06-03 Thread Endi Sukma Dewata
On 6/2/2015 1:34 PM, Simo Sorce wrote: On Tue, 2015-06-02 at 12:04 +0200, Jan Cholasta wrote: Dne 2.6.2015 v 02:02 Endi Sukma Dewata napsal(a): On 5/28/2015 12:46 AM, Jan Cholasta wrote: On a related note, since KRA is optional, can we move the vaults container to cn=kra,cn=vaults? This is

Re: [Freeipa-devel] [PATCHES 0233-0234] DNSSEC: forwarders validation

2015-06-03 Thread Petr Spacek
On 18.5.2015 13:48, Martin Basti wrote: On 15/05/15 18:11, Petr Spacek wrote: On 7.5.2015 18:12, Martin Basti wrote: On 07/05/15 12:19, Petr Spacek wrote: On 7.5.2015 08:59, David Kupka wrote: On 05/06/2015 03:20 PM, Martin Basti wrote: On 05/05/15 15:00, Martin Basti wrote: On 30/04/15

Re: [Freeipa-devel] [PATCH] Password vault

2015-06-03 Thread Jan Cholasta
Dne 3.6.2015 v 14:58 Endi Sukma Dewata napsal(a): On 6/2/2015 1:34 PM, Simo Sorce wrote: On Tue, 2015-06-02 at 12:04 +0200, Jan Cholasta wrote: Dne 2.6.2015 v 02:02 Endi Sukma Dewata napsal(a): On 5/28/2015 12:46 AM, Jan Cholasta wrote: On a related note, since KRA is optional, can we move

Re: [Freeipa-devel] [PATCH] Password vault

2015-06-03 Thread Jan Cholasta
Dne 2.6.2015 v 02:00 Endi Sukma Dewata napsal(a): Please take a look at the updated patch. On 5/27/2015 12:39 AM, Jan Cholasta wrote: 21) vault_archive is not a retrieve operation, it should be based on LDAPUpdate instead of LDAPRetrieve. Or Command actually, since it does not do anything with

Re: [Freeipa-devel] KeyError raised upon replica installation

2015-06-03 Thread Oleg Fayans
Update: The original error occurs ONLY when installing a replica from a gpg file prepared on a master running FreeIPA 4.1.2. If The master runs the upstream code, it works. On 06/02/2015 02:11 PM, Martin Babinsky wrote: On 06/02/2015 02:07 PM, Martin Babinsky wrote: On 06/02/2015 12:09 PM,

Re: [Freeipa-devel] [PATCH 0014 v3] Support multiple user and host certificates

2015-06-03 Thread Fraser Tweedale
On Wed, Jun 03, 2015 at 01:55:47PM +0200, Milan Kubik wrote: On 06/03/2015 01:17 PM, Martin Basti wrote: On 02/06/15 16:03, Jan Cholasta wrote: Dne 2.6.2015 v 12:36 Martin Basti napsal(a): On 02/06/15 11:42, Fraser Tweedale wrote: On Mon, Jun 01, 2015 at 02:50:45PM +0200, Martin Basti wrote:

Re: [Freeipa-devel] [PATCH] 857 topology: ipa management commands

2015-06-03 Thread Martin Babinsky
On 06/03/2015 01:34 PM, Petr Vobornik wrote: On 06/03/2015 10:59 AM, Martin Babinsky wrote: On 06/03/2015 10:52 AM, Martin Babinsky wrote: On 05/26/2015 03:31 PM, Petr Vobornik wrote: On 05/26/2015 12:19 PM, Petr Vobornik wrote: this patch is based on top of my patch #856 and tbabej' s

Re: [Freeipa-devel] KeyError raised upon replica installation

2015-06-03 Thread Oleg Fayans
Hi Ludwig, I'll rebuild the packages again with the whole set of patches including 0010 and 0011 and try again. Thanks! On 06/03/2015 02:21 PM, Ludwig Krispenz wrote: On 06/03/2015 02:05 PM, Oleg Fayans wrote: Update: The original error occurs ONLY when installing a replica from a gpg

Re: [Freeipa-devel] [PATCH 424] install: Introduce installer framework ipapython.install

2015-06-03 Thread Martin Basti
On 02/06/15 15:21, Jan Cholasta wrote: Dne 11.5.2015 v 13:41 Jan Cholasta napsal(a): Dne 6.5.2015 v 08:22 Jan Cholasta napsal(a): Dne 6.5.2015 v 08:11 Martin Kosek napsal(a): On 04/29/2015 06:25 PM, Jan Cholasta wrote: Dne 20.4.2015 v 16:56 Jan Cholasta napsal(a): Dne 20.4.2015 v 15:14

Re: [Freeipa-devel] [PATCH] Password vault

2015-06-03 Thread Simo Sorce
On Wed, 2015-06-03 at 09:27 +0200, Martin Kosek wrote: On 06/02/2015 08:34 PM, Simo Sorce wrote: On Tue, 2015-06-02 at 12:04 +0200, Jan Cholasta wrote: Dne 2.6.2015 v 02:02 Endi Sukma Dewata napsal(a): On 5/28/2015 12:46 AM, Jan Cholasta wrote: On a related note, since KRA is optional,

Re: [Freeipa-devel] [PATCH] Password vault

2015-06-03 Thread Jan Cholasta
Dne 3.6.2015 v 15:20 Simo Sorce napsal(a): On Wed, 2015-06-03 at 09:27 +0200, Martin Kosek wrote: On 06/02/2015 08:34 PM, Simo Sorce wrote: On Tue, 2015-06-02 at 12:04 +0200, Jan Cholasta wrote: Dne 2.6.2015 v 02:02 Endi Sukma Dewata napsal(a): On 5/28/2015 12:46 AM, Jan Cholasta wrote: On

Re: [Freeipa-devel] Topology plugin quirks

2015-06-03 Thread Ludwig Krispenz
Hi Petr, good catch. I didn't check for self referential segments. There is a check for existing segments, but unfortuantely the entry lookup in the pblock was incorrect and the test always passed. For the removal, there is teh assumption that no duplicate segments exist and so removal of

Re: [Freeipa-devel] [PATCH 0001] Migrate now accepts scope as argument

2015-06-03 Thread Martin Basti
On 02/06/15 22:32, Drew Erny wrote: Sorry, the email address on that patch is wrong. It picked the old one off my personal box when I migrated my dotfiles. I don't know if that's important, but if the merger could s/dpe...@crimson.ua.edu/de...@redhat.com/g, that would be better. Sorry about

Re: [Freeipa-devel] [PATCHES 0233-0234] DNSSEC: forwarders validation

2015-06-03 Thread Martin Basti
On 03/06/15 14:57, Petr Spacek wrote: On 18.5.2015 13:48, Martin Basti wrote: On 15/05/15 18:11, Petr Spacek wrote: On 7.5.2015 18:12, Martin Basti wrote: On 07/05/15 12:19, Petr Spacek wrote: On 7.5.2015 08:59, David Kupka wrote: On 05/06/2015 03:20 PM, Martin Basti wrote: On 05/05/15

Re: [Freeipa-devel] Topology plugin quirks

2015-06-03 Thread Simo Sorce
On Wed, 2015-06-03 at 11:37 +0200, Martin Babinsky wrote: 3.) It seems that the removal of topology suffixes containing functioning segments is not handled well. I once tried to do this and it led to segmentation fault on the dirsrv instance. What is the expected behavior in this

Re: [Freeipa-devel] [PATCH 0010] KeyError raised upon replica installation

2015-06-03 Thread Simo Sorce
On Wed, 2015-06-03 at 16:10 +0200, Petr Vobornik wrote: On 06/02/2015 02:20 PM, Ludwig Krispenz wrote: replicas installed from older versions do not have a binddn group just accept the errror ACK Pushed to master: 8457edc14dade724b486540800bcdafb7d9a6f76 Note that this group will be

[Freeipa-devel] [PATCH 0049] Move CA installation code into single module.

2015-06-03 Thread David Kupka
-- David Kupka From b5218e9c0101f852e25945cc7e64ff061a04ff4b Mon Sep 17 00:00:00 2001 From: David Kupka dku...@redhat.com Date: Wed, 3 Jun 2015 17:43:27 +0200 Subject: [PATCH] Move CA installation code into single module. --- install/tools/ipa-ca-install | 185 ++-

Re: [Freeipa-devel] [PATCH] 857 topology: ipa management commands

2015-06-03 Thread Martin Babinsky
On 06/03/2015 03:53 PM, Petr Vobornik wrote: On 06/03/2015 02:38 PM, Martin Babinsky wrote: On 06/03/2015 01:34 PM, Petr Vobornik wrote: On 06/03/2015 10:59 AM, Martin Babinsky wrote: On 06/03/2015 10:52 AM, Martin Babinsky wrote: On 05/26/2015 03:31 PM, Petr Vobornik wrote: On 05/26/2015

Re: [Freeipa-devel] [PATCH 0014 v3] Support multiple user and host certificates

2015-06-03 Thread Martin Basti
On 03/06/15 15:21, Fraser Tweedale wrote: On Wed, Jun 03, 2015 at 01:55:47PM +0200, Milan Kubik wrote: On 06/03/2015 01:17 PM, Martin Basti wrote: On 02/06/15 16:03, Jan Cholasta wrote: Dne 2.6.2015 v 12:36 Martin Basti napsal(a): On 02/06/15 11:42, Fraser Tweedale wrote: On Mon, Jun 01,

Re: [Freeipa-devel] Topology plugin quirks

2015-06-03 Thread Simo Sorce
On Wed, 2015-06-03 at 12:51 +0200, Petr Vobornik wrote: On 06/03/2015 11:37 AM, Martin Babinsky wrote: Hi everyone, I have been playing with the topology related patches and I have encountered a few issues that I would like to address in this thread: Additional stuff: 1. was able

Re: [Freeipa-devel] [PATCH 0011] check-for-existing-and-self-referential-segments

2015-06-03 Thread Simo Sorce
On Wed, 2015-06-03 at 14:53 +0200, Ludwig Krispenz wrote: Hi, this should prevent adding duplicate segments or segments with same start and end node LGTM! Simo. -- Simo Sorce * Red Hat, Inc * New York -- Manage your subscription for the Freeipa-devel mailing list:

Re: [Freeipa-devel] [PATCH] 822 webui: topology plugin

2015-06-03 Thread Martin Babinsky
On 05/27/2015 04:14 PM, Petr Vobornik wrote: On 05/26/2015 12:22 PM, Petr Vobornik wrote: On 05/15/2015 01:50 PM, Petr Vobornik wrote: On 04/21/2015 04:09 PM, Petr Vobornik wrote: First iteration of Topology plugin Web UI. It reflects current state of topology plugin python part which is

Re: [Freeipa-devel] [PATCH 0010] KeyError raised upon replica installation

2015-06-03 Thread Simo Sorce
On Wed, 2015-06-03 at 16:50 +0200, Martin Kosek wrote: On 06/03/2015 04:10 PM, Petr Vobornik wrote: On 06/02/2015 02:20 PM, Ludwig Krispenz wrote: replicas installed from older versions do not have a binddn group just accept the errror ACK Pushed to master:

Re: [Freeipa-devel] [PATCH 0014] Support multiple user and host certificates

2015-06-03 Thread Martin Basti
On 02/06/15 16:56, Petr Vobornik wrote: On 05/27/2015 03:53 PM, Fraser Tweedale wrote: This patch adds supports for multiple user / host certificates. No schema change is needed ('usercertificate' attribute is already multi-value). The revoke-previous-cert behaviour of host-mod and user-mod

Re: [Freeipa-devel] [PATCHES 0001-0013 v7] Profiles and CA ACLs

2015-06-03 Thread Martin Basti
On 03/06/15 16:17, Fraser Tweedale wrote: On Tue, Jun 02, 2015 at 06:37:42PM +0200, Martin Basti wrote: On 02/06/15 14:11, Fraser Tweedale wrote: On Mon, Jun 01, 2015 at 05:22:28PM +1000, Fraser Tweedale wrote: On Mon, Jun 01, 2015 at 05:10:58PM +1000, Fraser Tweedale wrote: On Fri, May 29,

Re: [Freeipa-devel] [PATCH] Use Exception class instead of BaseException

2015-06-03 Thread Niranjan
Petr Viktorin wrote: On 06/01/2015 06:33 AM, Niranjan wrote: Greetings, I would like to present patch for replacing StandardError exception with Exception class in ipapython/adminutil.py. Also replacing BaseException class with Exception class. Though the use of StandardError is

[Freeipa-devel] [PATCH 0001 v2] Migrate now accepts scope as argument

2015-06-03 Thread Drew Erny
Hi, all, This is an updated patch, with the code changes suggested by Martin Batsi in my test email. The biggest difference is that I had to do from ldap import SCOPE_BASE, SCOPE_ONELEVEL, SCOPE_SUBTREE To get access to those constants in the global scope. This seems like a fairly clean

Re: [Freeipa-devel] [PATCH 0014 v3] Support multiple user and host certificates

2015-06-03 Thread Jan Cholasta
Dne 3.6.2015 v 17:44 Martin Basti napsal(a): On 03/06/15 15:21, Fraser Tweedale wrote: On Wed, Jun 03, 2015 at 01:55:47PM +0200, Milan Kubik wrote: On 06/03/2015 01:17 PM, Martin Basti wrote: On 02/06/15 16:03, Jan Cholasta wrote: Dne 2.6.2015 v 12:36 Martin Basti napsal(a): On 02/06/15