Re: [Freeipa-devel] [PATCH] 377 Using LDAPI to setup CA and KRA agents.

2015-09-01 Thread Martin Basti
On 09/01/2015 07:06 AM, Jan Cholasta wrote: On 31.8.2015 22:15, Endi Sukma Dewata wrote: On 8/31/2015 6:18 AM, Martin Basti wrote: On 08/27/2015 09:41 PM, Endi Sukma Dewata wrote: The CA and KRA installation code has been modified to use LDAPI to create the CA and KRA agents directly in

Re: [Freeipa-devel] [PATCH 0302] DNSSEC: remove "DNSSEC is experimental" warnings

2015-09-01 Thread Martin Basti
On 08/31/2015 06:05 PM, Martin Kosek wrote: On 08/31/2015 02:52 PM, Martin Basti wrote: https://fedorahosted.org/freeipa/ticket/5265 Patch attached. Should I remove also message class "DNSSECWarning" which is not used now, or just keep it there because ti has already registered error code?

[Freeipa-devel] [PATCH] 0041 certprofile: remove 'rename' option

2015-09-01 Thread Fraser Tweedale
This patch *removes* the --rename option from certprofile-mod. For context see: https://bugzilla.redhat.com/show_bug.cgi?id=1257163#c6 Thanks, Fraser From 89fae00bfa31cca3784afbbf057a62942e6729e3 Mon Sep 17 00:00:00 2001 From: Fraser Tweedale Date: Tue, 1 Sep 2015 21:04:34

Re: [Freeipa-devel] [PATCHES] 0696-0710 More modernization

2015-09-01 Thread Jan Cholasta
On 27.8.2015 16:00, Jan Cholasta wrote: On 27.8.2015 12:17, Petr Viktorin wrote: On 08/27/2015 09:07 AM, Jan Cholasta wrote: On 26.8.2015 12:15, Petr Viktorin wrote: On 08/26/2015 09:47 AM, Jan Cholasta wrote: On 25.8.2015 15:05, Petr Viktorin wrote: On 08/25/2015 12:39 PM, Christian Heimes

Re: [Freeipa-devel] How to support Designate?

2015-09-01 Thread Petr Spacek
On 1.9.2015 00:42, Rich Megginson wrote: > On 08/31/2015 11:00 AM, Simo Sorce wrote: >> On Mon, 2015-08-31 at 10:15 -0600, Rich Megginson wrote: >>> On 08/31/2015 01:35 AM, Petr Spacek wrote: On 26.8.2015 20:09, Rich Megginson wrote: > On 08/25/2015 09:08 AM, Petr Spacek wrote: >> On

Re: [Freeipa-devel] [PATCH 0302] DNSSEC: remove "DNSSEC is experimental" warnings

2015-09-01 Thread Martin Basti
On 09/01/2015 08:57 AM, Martin Basti wrote: On 08/31/2015 06:05 PM, Martin Kosek wrote: On 08/31/2015 02:52 PM, Martin Basti wrote: https://fedorahosted.org/freeipa/ticket/5265 Patch attached. Should I remove also message class "DNSSECWarning" which is not used now, or just keep it

Re: [Freeipa-devel] [PATCH] 377 Using LDAPI to setup CA and KRA agents.

2015-09-01 Thread Endi Sukma Dewata
On 9/1/2015 1:52 AM, Martin Basti wrote: The CA and KRA installation code has been modified to use LDAPI to create the CA and KRA agents directly in the CA and KRA database. This way it's no longer necessary to use the Directory Manager password or CA and KRA admin certificate.

Re: [Freeipa-devel] [PATCH] 916 vault: add vault container commands

2015-09-01 Thread Endi Sukma Dewata
On 9/1/2015 10:22 AM, Simo Sorce wrote: On Tue, 2015-09-01 at 17:15 +0200, Petr Vobornik wrote: On 09/01/2015 04:39 PM, Jan Cholasta wrote: On 1.9.2015 16:26, Jan Cholasta wrote: On 26.8.2015 13:22, Petr Vobornik wrote: On 08/25/2015 08:04 PM, Petr Vobornik wrote: adds commands: *

[Freeipa-devel] [PATCH 0057] DNSSEC: Wrap master key using RSA OAEP instead of old PKCS v1.5

2015-09-01 Thread Petr Spacek
Hello, DNSSEC: Wrap master key using RSA OAEP instead of old PKCS v1.5. This fixes an forgotten TODO in ipa-ods-exporter. -- Petr^2 Spacek From 28e242b55f4250a8f95841e61762fbc7200e73d2 Mon Sep 17 00:00:00 2001 From: Petr Spacek Date: Tue, 1 Sep 2015 18:16:06 +0200 Subject:

Re: [Freeipa-devel] [PATCH] 916 vault: add vault container commands

2015-09-01 Thread Jan Cholasta
On 1.9.2015 16:26, Jan Cholasta wrote: On 26.8.2015 13:22, Petr Vobornik wrote: On 08/25/2015 08:04 PM, Petr Vobornik wrote: adds commands: * vaultcontainer-show [--service |--user ] * vaultcontainer-add-owner [--service |--user ] [--users ] [--groups ] [--services ] *

Re: [Freeipa-devel] fixing Kerberos principal aliases handling in IPA

2015-09-01 Thread Simo Sorce
On Tue, 2015-09-01 at 16:39 +0200, Martin Babinsky wrote: > Hi list, > > I own the following ticket https://fedorahosted.org/freeipa/ticket/3864 > and I would like to clarify what needs to be done in order to make IPA > to fully support multiple aliases per entry. > > So far I have identified

[Freeipa-devel] fixing Kerberos principal aliases handling in IPA

2015-09-01 Thread Martin Babinsky
Hi list, I own the following ticket https://fedorahosted.org/freeipa/ticket/3864 and I would like to clarify what needs to be done in order to make IPA to fully support multiple aliases per entry. So far I have identified these task based on the ticket comments and discussion with Simo way

[Freeipa-devel] [PATCH 0303] backup: back up hosts file

2015-09-01 Thread Martin Basti
https://fedorahosted.org/freeipa/ticket/5275 Patch attached From 15e3e4f832507538fcee7c0f8d4ce97a3a437164 Mon Sep 17 00:00:00 2001 From: Martin Basti Date: Tue, 1 Sep 2015 16:24:44 +0200 Subject: [PATCH] Backup: back up the hosts file

Re: [Freeipa-devel] How to support Designate?

2015-09-01 Thread Rich Megginson
On 09/01/2015 05:39 AM, Petr Spacek wrote: On 1.9.2015 00:42, Rich Megginson wrote: On 08/31/2015 11:00 AM, Simo Sorce wrote: On Mon, 2015-08-31 at 10:15 -0600, Rich Megginson wrote: On 08/31/2015 01:35 AM, Petr Spacek wrote: On 26.8.2015 20:09, Rich Megginson wrote: On 08/25/2015 09:08 AM,

Re: [Freeipa-devel] [PATCH] 916 vault: add vault container commands

2015-09-01 Thread Jan Cholasta
On 26.8.2015 13:22, Petr Vobornik wrote: On 08/25/2015 08:04 PM, Petr Vobornik wrote: adds commands: * vaultcontainer-show [--service |--user ] * vaultcontainer-add-owner [--service |--user ] [--users ] [--groups ] [--services ] * vaultcontainer-remove-owner [--service

Re: [Freeipa-devel] How to support Designate?

2015-09-01 Thread Simo Sorce
On Tue, 2015-09-01 at 07:17 -0600, Rich Megginson wrote: > On 09/01/2015 05:39 AM, Petr Spacek wrote: > > On 1.9.2015 00:42, Rich Megginson wrote: > >> On 08/31/2015 11:00 AM, Simo Sorce wrote: > >>> On Mon, 2015-08-31 at 10:15 -0600, Rich Megginson wrote: > On 08/31/2015 01:35 AM, Petr

Re: [Freeipa-devel] [PATCH] 916 vault: add vault container commands

2015-09-01 Thread Petr Vobornik
On 09/01/2015 04:39 PM, Jan Cholasta wrote: On 1.9.2015 16:26, Jan Cholasta wrote: On 26.8.2015 13:22, Petr Vobornik wrote: On 08/25/2015 08:04 PM, Petr Vobornik wrote: adds commands: * vaultcontainer-show [--service |--user ] * vaultcontainer-add-owner [--service |--user ]

Re: [Freeipa-devel] [PATCH] 916 vault: add vault container commands

2015-09-01 Thread Simo Sorce
On Tue, 2015-09-01 at 17:15 +0200, Petr Vobornik wrote: > On 09/01/2015 04:39 PM, Jan Cholasta wrote: > > On 1.9.2015 16:26, Jan Cholasta wrote: > >> On 26.8.2015 13:22, Petr Vobornik wrote: > >>> On 08/25/2015 08:04 PM, Petr Vobornik wrote: > adds commands: > * vaultcontainer-show

Re: [Freeipa-devel] fixing Kerberos principal aliases handling in IPA

2015-09-01 Thread Martin Babinsky
On 09/01/2015 04:53 PM, Simo Sorce wrote: On Tue, 2015-09-01 at 16:39 +0200, Martin Babinsky wrote: Hi list, I own the following ticket https://fedorahosted.org/freeipa/ticket/3864 and I would like to clarify what needs to be done in order to make IPA to fully support multiple aliases per

Re: [Freeipa-devel] fixing Kerberos principal aliases handling in IPA

2015-09-01 Thread Simo Sorce
On Tue, 2015-09-01 at 17:55 +0200, Martin Babinsky wrote: > On 09/01/2015 04:53 PM, Simo Sorce wrote: > > On Tue, 2015-09-01 at 16:39 +0200, Martin Babinsky wrote: > >> Hi list, > >> > >> I own the following ticket https://fedorahosted.org/freeipa/ticket/3864 > >> and I would like to clarify what