Re: [Freeipa-devel] [PATCH 0036] Bump minimal BIND version for CentOS

2015-06-26 Thread Martin Basti
On 23/06/15 14:14, Petr Spacek wrote: Hello, Bump minimal BIND version for CentOS. DNSSEC support added dependency on bind-pkcs11 sub-package. https://fedorahosted.org/freeipa/ticket/4657 ACK -- Martin Basti -- Manage your subscription for the Freeipa-devel mailing list:

[Freeipa-devel] [PATCH 0053] upgrade: Raise error when certmonger is not running.

2015-06-26 Thread David Kupka
https://fedorahosted.org/freeipa/ticket/5080 -- David Kupka From f5467b5a338647a20aef5e5657b9e21be5b0a2f5 Mon Sep 17 00:00:00 2001 From: David Kupka dku...@redhat.com Date: Fri, 26 Jun 2015 10:42:23 +0200 Subject: [PATCH] upgrade: Raise error when certmonger is not running. Certmonger should be

[Freeipa-devel] [PATCH 0041] DNSSEC: Accept ipa-ods-exporter commands from command line

2015-06-26 Thread Petr Spacek
Hello, DNSSEC: Accept ipa-ods-exporter commands from command line. Previously only systemd socket activation was supported. Ability to call the command directly is handy in special cases, e.g. for debugging or moving key master role from one server to another. -- Petr^2 Spacek From

Re: [Freeipa-devel] [PATCH 0053] upgrade: Raise error when certmonger is not running.

2015-06-26 Thread Petr Vobornik
On 06/26/2015 10:54 AM, David Kupka wrote: https://fedorahosted.org/freeipa/ticket/5080 ACK -- Petr Vobornik -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

Re: [Freeipa-devel] [PATCH 0038] Add hint how to re-run IPA upgrade

2015-06-26 Thread Petr Vobornik
On 06/26/2015 12:41 PM, Petr Spacek wrote: Hello, Add hint how to re-run IPA upgrade. ACK -- Petr Vobornik -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [PATCH 0039] Rate-limit while loop in SystemdService.is_active()

2015-06-26 Thread Petr Spacek
Hello, Rate-limit while loop in SystemdService.is_active(). Previously is_active() was frenetically calling systemctl is_active in tight loop which in fact made the process slower. -- Petr^2 Spacek From ce78ce4ab8ba28c4ca7183ea1415ea5e30839f9f Mon Sep 17 00:00:00 2001 From: Petr Spacek

[Freeipa-devel] [PATCH 0267] Fix broken indicies

2015-06-26 Thread Martin Basti
Patch fixes wrong value for ntUserDomainId and ntUniqueId indicies. Patch attached. -- Martin Basti From a57fb68c3c8b234bff7df2febe5c0919c2abfdb4 Mon Sep 17 00:00:00 2001 From: Martin Basti mba...@redhat.com Date: Fri, 26 Jun 2015 17:14:41 +0200 Subject: [PATCH] Fix indicies ntUserDomainId,

Re: [Freeipa-devel] [PATCH] 878 topology: check topology in ipa-replica-manage del

2015-06-26 Thread Petr Vobornik
On 06/26/2015 02:15 PM, Petr Vobornik wrote: On 06/17/2015 02:00 PM, Petr Vobornik wrote: ipa-replica-manage del now: - checks the whole current topology(before deletion), reports issues - simulates deletion of server and checks the topology again, reports issues Asks admin if he wants to

[Freeipa-devel] [PATCH 0040] DNSSEC: Detect invalid master keys in LDAP

2015-06-26 Thread Petr Spacek
Hello, DNSSEC: Detect invalid master keys in LDAP. -- Petr^2 Spacek From 280c5a51dd5d048fda5eb0e349df93d795d60662 Mon Sep 17 00:00:00 2001 From: Petr Spacek pspa...@redhat.com Date: Fri, 26 Jun 2015 16:04:00 +0200 Subject: [PATCH] DNSSEC: Detect invalid master keys in LDAP. ---

Re: [Freeipa-devel] [PATCH 0053] upgrade: Raise error when certmonger is not running.

2015-06-26 Thread Rob Crittenden
Petr Vobornik wrote: On 06/26/2015 10:54 AM, David Kupka wrote: https://fedorahosted.org/freeipa/ticket/5080 ACK Is there a reason we don't simply start certmonger and quit if it fails to start? Woudln't that be friendlier? rob -- Manage your subscription for the Freeipa-devel mailing

[Freeipa-devel] [PATCH 0040-0045] DNSSEC improvements

2015-06-26 Thread Petr Spacek
Hello, attached patches implement a portion of improvements for ticket https://fedorahosted.org/freeipa/ticket/4657 It came to my mind that it will be better to review them at once - the previous threads with my patches 40 and 41 can be abandoned. I'm sorry for the mess. -- Petr^2 Spacek From

[Freeipa-devel] Issues inizializing api

2015-06-26 Thread Simo Sorce
If I try to create a custom api with something like: myapi = create_api(mode=None) myapi.finalize() I get back a stacktrace in the aci plugin. The aci plugin assumes the general 'api' has been already inizialized and dereferences directly api.env.container_user and other stuff. Do I always have

Re: [Freeipa-devel] [PATCH] 879 Verify replication topology for a suffix

2015-06-26 Thread Petr Vobornik
On 06/17/2015 04:11 PM, Petr Vobornik wrote: On 06/17/2015 02:15 PM, Ludwig Krispenz wrote: On 06/17/2015 02:04 PM, Petr Vobornik wrote: With patch 878 topology: check topology in ipa-replica-manage del we can use the same logic for POC of ipa topologysuffix-verify command. Checks done:

Re: [Freeipa-devel] [PATCH] 878 topology: check topology in ipa-replica-manage del

2015-06-26 Thread Petr Vobornik
On 06/17/2015 02:00 PM, Petr Vobornik wrote: ipa-replica-manage del now: - checks the whole current topology(before deletion), reports issues - simulates deletion of server and checks the topology again, reports issues Asks admin if he wants to continue with the deletion if any errors are

Re: [Freeipa-devel] [PATCH] Use Exception class instead of StandardError

2015-06-26 Thread Martin Basti
On 10/06/15 00:59, Niranjan wrote: Niranjan wrote: Greetings, Please find the modified patch for ipapython/adminutil.py. I have run few tests manually like running ipa-server-install as non-root user or provide --quiet and --verbose to see if it raises ScriptError properly. Also i checked by

Re: [Freeipa-devel] [PATCH 0016] clear start attr from segment after initialization

2015-06-26 Thread thierry bordaz
On 06/22/2015 11:35 AM, Ludwig Krispenz wrote: fix for ticket #5065, removing start - after online init copmpleted - additionally check after startup Hi Ludwig, The fix looks good to me. I have just a clarification regarding ipa_topo_util_reset_init. It resets 'nsds5BeginReplicaRefresh' at

Re: [Freeipa-devel] [PATCH] 881 add python-setuptools to requires

2015-06-26 Thread Martin Basti
On 19/06/15 14:06, Petr Vobornik wrote: Commit 9f049ca14403f3696d54d186e6b1b15181f055df introduced dependency on python-setuptools on line: from pkg_resources import parse_version This dependency is missing on *minimal* installation and then ipa-server-upgrade fails on rpm install/upgrade.

[Freeipa-devel] [PATCH 0038] Add hint how to re-run IPA upgrade

2015-06-26 Thread Petr Spacek
Hello, Add hint how to re-run IPA upgrade. -- Petr^2 Spacek From e2202b998038fd0bb6dc801b019f988d3c12f30a Mon Sep 17 00:00:00 2001 From: Petr Spacek pspa...@redhat.com Date: Fri, 26 Jun 2015 12:40:56 +0200 Subject: [PATCH] Add hint how to re-run IPA upgrade. --- freeipa.spec.in | 2 +- 1 file