Re: [Freeipa-devel] Unable to install bits from ipa-4-2 branch

2015-08-24 Thread Oleg Fayans
Hi, On 08/18/2015 11:37 AM, Jan Cholasta wrote: On 17.8.2015 16:47, Milan Kubík wrote: On 08/17/2015 04:44 PM, Milan Kubík wrote: On 08/17/2015 10:23 AM, Martin Basti wrote: On 08/12/2015 01:10 PM, Milan Kubík wrote: On 08/10/2015 04:41 PM, Jan Cholasta wrote: Dne 10.8.2015 v 16:03 Milan

Re: [Freeipa-devel] [PATCH] 0196 trusts: format Kerberos principal properly when fetching trust topology

2015-08-24 Thread Tomas Babej
On 08/20/2015 02:21 PM, Alexander Bokovoy wrote: > Hi, > > one more fix for the problem with trusts that Scott Poore found when > verifying fixes to bug https://bugzilla.redhat.com/show_bug.cgi?id=1250190 > > Details are in the commit message. > > > ACK, this fixes the issue in case of two-

Re: [Freeipa-devel] [PATCH 0002] TEST: Stageuser plugin

2015-08-24 Thread Lenka Doudova
On 08/20/2015 03:48 PM, Martin Basti wrote: On 08/14/2015 06:32 PM, Lenka Doudova wrote: Yes, that is "correct" - it's malfunctioning behavior of the plugin - command 'stageuser-add --from-delete', which is discussed in another thread. I left this test case for so long as it's not fixed/cha

Re: [Freeipa-devel] [PATCH] 0196 trusts: format Kerberos principal properly when fetching trust topology

2015-08-24 Thread Jan Cholasta
On 24.8.2015 10:44, Tomas Babej wrote: On 08/20/2015 02:21 PM, Alexander Bokovoy wrote: Hi, one more fix for the problem with trusts that Scott Poore found when verifying fixes to bug https://bugzilla.redhat.com/show_bug.cgi?id=1250190 Details are in the commit message. ACK, this fixes

[Freeipa-devel] [PATCH 0006] Fixed installation failures

2015-08-24 Thread Oleg Fayans
Hi all. The current issue [1] effectively blocks testing of 4.2 branch. Here is (one of the possible) solution, that proved to work. [1] https://www.redhat.com/archives/freeipa-devel/2015-August/msg00085.html -- Oleg Fayans Quality Engineer FreeIPA team RedHat. From a1cad62c373009dd78d5ef7e4c97

Re: [Freeipa-devel] [PATCH] small fixes related to running dnssec tests in RHEL

2015-08-24 Thread Oleg Fayans
Hi, Could anyone review this. We are really blocked with testing on RHEL and Patch 0005 fixes it. Thank you. On 08/21/2015 10:52 AM, Oleg Fayans wrote: Hi list, Here are the the fixes for https://fedorahosted.org/freeipa/ticket/5240 plus pep8-related fixes, plus created a user-friendly error

Re: [Freeipa-devel] [PATCH 0002] TEST: Stageuser plugin

2015-08-24 Thread Lenka Doudova
... and adding a patch version applicable for master branch Lenka On 08/24/2015 12:14 PM, Lenka Doudova wrote: On 08/20/2015 03:48 PM, Martin Basti wrote: On 08/14/2015 06:32 PM, Lenka Doudova wrote: Yes, that is "correct" - it's malfunctioning behavior of the plugin - command 'stageuser

Re: [Freeipa-devel] [PATCH] small fixes related to running dnssec tests in RHEL

2015-08-24 Thread Martin Basti
On 08/24/2015 01:28 PM, Oleg Fayans wrote: Hi, Could anyone review this. We are really blocked with testing on RHEL and Patch 0005 fixes it. Thank you. On 08/21/2015 10:52 AM, Oleg Fayans wrote: Hi list, Here are the the fixes for https://fedorahosted.org/freeipa/ticket/5240 plus pep8-rel

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-08-24 Thread Jan Cholasta
On 23.8.2015 23:27, Michael Šimáček wrote: On 2015-08-21 15:52, Michael Šimáček wrote: On 2015-08-20 20:42, Robbie Harwood wrote: Michael Šimáček writes: On 2015-08-20 12:32, Michael Šimáček wrote: Michael Šimáček writes: Attaching new revision of the patch. Changes from the previou

Re: [Freeipa-devel] [PATCH] small fixes related to running dnssec tests in RHEL

2015-08-24 Thread Oleg Fayans
Hi Martin, On 08/24/2015 02:36 PM, Martin Basti wrote: On 08/24/2015 01:28 PM, Oleg Fayans wrote: Hi, Could anyone review this. We are really blocked with testing on RHEL and Patch 0005 fixes it. Thank you. On 08/21/2015 10:52 AM, Oleg Fayans wrote: Hi list, Here are the the fixes for htt

Re: [Freeipa-devel] [PATCH 0002] TEST: Stageuser plugin

2015-08-24 Thread Martin Basti
NACK You have unmerged changes in the patch On 08/24/2015 02:14 PM, Lenka Doudova wrote: from ipatests.test_xmlrpc import objectclasses +<<< HEAD from ipatests.test_xmlrpc.xmlrpc_test import ( Declarative, fuzzy_digits, fuzzy_uuid, fuzzy_set_ci, add_sid, add_oc) +=== +from xml

[Freeipa-devel] [PATCH 0300] DNSSEC: fix forwardzone forwarders check

2015-08-24 Thread Martin Basti
https://fedorahosted.org/freeipa/ticket/5179 patch attached From 8497a0fc42560853810ccb7476ed27e1f037b3c2 Mon Sep 17 00:00:00 2001 From: Martin Basti Date: Mon, 24 Aug 2015 12:53:30 +0200 Subject: [PATCH] DNSSEC: fix forward zone forwarders checks https://fedorahosted.org/freeipa/ticket/5179 --

Re: [Freeipa-devel] [PATCH 0002] TEST: Stageuser plugin

2015-08-24 Thread Lenka Doudova
Attached. Lenka On 08/24/2015 03:14 PM, Martin Basti wrote: NACK You have unmerged changes in the patch On 08/24/2015 02:14 PM, Lenka Doudova wrote: from ipatests.test_xmlrpc import objectclasses +<<< HEAD from ipatests.test_xmlrpc.xmlrpc_test import ( Declarative, fuzzy_digits,

Re: [Freeipa-devel] [PATCH] small fixes related to running dnssec tests in RHEL

2015-08-24 Thread Martin Basti
On 08/24/2015 03:08 PM, Oleg Fayans wrote: Hi Martin, On 08/24/2015 02:36 PM, Martin Basti wrote: On 08/24/2015 01:28 PM, Oleg Fayans wrote: Hi, Could anyone review this. We are really blocked with testing on RHEL and Patch 0005 fixes it. Thank you. On 08/21/2015 10:52 AM, Oleg Fayans wr

Re: [Freeipa-devel] [PATCH] small fixes related to running dnssec tests in RHEL

2015-08-24 Thread Martin Basti
On 08/24/2015 02:36 PM, Martin Basti wrote: On 08/24/2015 01:28 PM, Oleg Fayans wrote: Hi, Could anyone review this. We are really blocked with testing on RHEL and Patch 0005 fixes it. Thank you. On 08/21/2015 10:52 AM, Oleg Fayans wrote: Hi list, Here are the the fixes for https://fed

Re: [Freeipa-devel] [PATCH 0058] dns: do not add (forward)zone if it is already resolvable.

2015-08-24 Thread Martin Basti
On 08/20/2015 10:28 AM, David Kupka wrote: On 31/07/15 13:32, Martin Basti wrote: On 30/07/15 14:38, Martin Basti wrote: On 29/07/15 16:12, David Kupka wrote: https://fedorahosted.org/freeipa/ticket/5087 NACK You forgot to update API.txt file Thanks for catching that. Updated patch attac

Re: [Freeipa-devel] [PATCH 020] Change internal rsa_(public|private)_key variable names

2015-08-24 Thread Martin Basti
On 07/28/2015 04:28 PM, Simo Sorce wrote: On Tue, 2015-07-28 at 16:18 +0200, Christian Heimes wrote: In two places the vault plugin refers to rsa public or rsa private key although the code can handle just any kind of asymmetric algorithms, e.g. ECDSA. The patch just renames the occurences to

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-08-24 Thread Michael Šimáček
On 2015-08-24 14:50, Jan Cholasta wrote: On 23.8.2015 23:27, Michael Šimáček wrote: On 2015-08-21 15:52, Michael Šimáček wrote: On 2015-08-20 20:42, Robbie Harwood wrote: Michael Šimáček writes: On 2015-08-20 12:32, Michael Šimáček wrote: Michael Šimáček writes: Attaching new revis

Re: [Freeipa-devel] [PATCH 0006] Fixed installation failures

2015-08-24 Thread Martin Basti
On 08/24/2015 12:55 PM, Oleg Fayans wrote: Hi all. The current issue [1] effectively blocks testing of 4.2 branch. Here is (one of the possible) solution, that proved to work. [1] https://www.redhat.com/archives/freeipa-devel/2015-August/msg00085.html The patch needs rebase for ipa-4-2

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-08-24 Thread Simo Sorce
On Mon, 2015-08-24 at 17:18 +0200, Michael Šimáček wrote: > On 2015-08-24 14:50, Jan Cholasta wrote: > > On 23.8.2015 23:27, Michael Šimáček wrote: > >> > >> > >> On 2015-08-21 15:52, Michael Šimáček wrote: > >>> > >>> > >>> On 2015-08-20 20:42, Robbie Harwood wrote: > Michael Šimáček writes:

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-08-24 Thread Michael Šimáček
On 2015-08-24 17:49, Simo Sorce wrote: On Mon, 2015-08-24 at 17:18 +0200, Michael Šimáček wrote: On 2015-08-24 14:50, Jan Cholasta wrote: On 23.8.2015 23:27, Michael Šimáček wrote: On 2015-08-21 15:52, Michael Šimáček wrote: On 2015-08-20 20:42, Robbie Harwood wrote: Michael Šimáček w

[Freeipa-devel] kra an ca instance installation

2015-08-24 Thread Simo Sorce
Why do we have cainstance.py and ca.py and krainstance.py and kra.py in ipaserver/install when you always need both files to do anything around installation of the ca ? Is there a motivation ? Or can I simply provide a patch to remove the ca.py and kra.py files an unify all code in the proper *ins

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-08-24 Thread Robbie Harwood
Michael Šimáček writes: > On 2015-08-24 17:49, Simo Sorce wrote: > >> On Mon, 2015-08-24 at 17:18 +0200, Michael Šimáček wrote: >> >>> On 2015-08-24 14:50, Jan Cholasta wrote: >>> On 23.8.2015 23:27, Michael Šimáček wrote: 3) ipa-adtrust-install fails with: admin password

[Freeipa-devel] Adding client-side functionality in Vault

2015-08-24 Thread Endi Sukma Dewata
Hi, Recently I posted the following patches which are still pending review: * 371-2: Added support for changing vault encryption. * 375-1: Added mechanism to copy vault secrets. Here are the tickets: * https://fedorahosted.org/freeipa/ticket/5176 * https://fedorahosted.org/freeipa/ticket/5223 T

[Freeipa-devel] [PATCH] 0040 certprofile: prevent rename (modrdn)

2015-08-24 Thread Fraser Tweedale
The attached patch fixes https://fedorahosted.org/freeipa/ticket/5247. Thanks, Fraser From 2cb4ab6eeedccc3471ed9bf983add4687ecd5c1a Mon Sep 17 00:00:00 2001 From: Fraser Tweedale Date: Mon, 24 Aug 2015 20:25:10 -0400 Subject: [PATCH] certprofile: prevent rename (modrdn) Fixes: https://fedorahost

Re: [Freeipa-devel] Adding client-side functionality in Vault

2015-08-24 Thread Alexander Bokovoy
On Mon, 24 Aug 2015, Endi Sukma Dewata wrote: Hi, Recently I posted the following patches which are still pending review: * 371-2: Added support for changing vault encryption. * 375-1: Added mechanism to copy vault secrets. Here are the tickets: * https://fedorahosted.org/freeipa/ticket/5176 *

Re: [Freeipa-devel] [PATCH] 0040 certprofile: prevent rename (modrdn)

2015-08-24 Thread Alexander Bokovoy
On Tue, 25 Aug 2015, Fraser Tweedale wrote: The attached patch fixes https://fedorahosted.org/freeipa/ticket/5247. Thanks, Fraser From 2cb4ab6eeedccc3471ed9bf983add4687ecd5c1a Mon Sep 17 00:00:00 2001 From: Fraser Tweedale Date: Mon, 24 Aug 2015 20:25:10 -0400 Subject: [PATCH] certprofile: p