Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

2015-10-07 Thread Endi Sukma Dewata
On 10/5/2015 9:33 AM, Endi Sukma Dewata wrote: On 10/5/2015 8:47 AM, Simo Sorce wrote: 2. The second attempt after re-enrolling client resulted in the error of CA installation: This is due to the known bug with authentication in Dogtag. Endy fixed it upstream. Endy, do you know when the bug

[Freeipa-devel] [PATCHES 0002-0008] [RFE] Implement iCal based time managment in HBAC

2015-10-07 Thread Stanislav Laznicka
Hi, The moment's here, I'd like to share my code with you now. Let me comment on some additions from my last post here in August. The methods for testing HBAC rules in hbactest module were modified so that a time zone can now also be picked in case there are some rules with the "host" time

Re: [Freeipa-devel] [PATCHES] More Python 3 porting

2015-10-07 Thread Jan Cholasta
On 6.10.2015 12:04, Petr Viktorin wrote: On 10/05/2015 07:56 AM, Jan Cholasta wrote: On 2.10.2015 13:09, Petr Viktorin wrote: On 10/01/2015 03:15 PM, Jan Cholasta wrote: Hi, On 1.10.2015 13:01, Martin Basti wrote: On 09/30/2015 10:25 AM, Petr Viktorin wrote: On 09/23/2015 04:46 PM, Petr

Re: [Freeipa-devel] [PATCH 0006-0010] Low hanging fruit for #5343 -- platform abstractions

2015-10-07 Thread Tomas Babej
On Tue, Oct 06, 2015 at 09:58:04PM +0300, Timo Aaltonen wrote: > > Hi > > So here's the first batch of quick patches for ticket #5343. They're > only compile-tested so far (so no stupid mistakes I hope), as I don't > have 4.2+ working yet. Wonder how the quotes in the last patch work,

Re: [Freeipa-devel] [PATCH 0006-0010] Low hanging fruit for #5343 -- platform abstractions

2015-10-07 Thread Tomas Babej
On Wed, Oct 07, 2015 at 12:51:10PM +0200, Tomas Babej wrote: > On Tue, Oct 06, 2015 at 09:58:04PM +0300, Timo Aaltonen wrote: > > > > Hi > > > > So here's the first batch of quick patches for ticket #5343. They're > > only compile-tested so far (so no stupid mistakes I hope), as I don't >

Re: [Freeipa-devel] [PATCH 0058] Avoid ipa-dnskeysync-replica & ipa-ods-exporter crashes caused by exceeding LDAP limit

2015-10-07 Thread Martin Basti
On 10/06/2015 10:28 AM, Petr Spacek wrote: On 6.10.2015 10:10, Martin Basti wrote: On 10/06/2015 09:46 AM, Petr Spacek wrote: Hello, Avoid ipa-dnskeysync-replica & ipa-ods-exporter crashes caused by exceeding LDAP limits. https://bugzilla.redhat.com/show_bug.cgi?id=1268027 NACK

Re: [Freeipa-devel] [PATCHES 0069-0077] support for proper Kerberos principal canonicalization

2015-10-07 Thread David Kupka
On 06/10/15 17:52, Jakub Hrozek wrote: On Tue, Oct 06, 2015 at 08:32:29AM -0400, Simo Sorce wrote: On 06/10/15 08:04, David Kupka wrote: On 06/10/15 13:35, Simo Sorce wrote: On 06/10/15 03:51, thierry bordaz wrote: On 10/06/2015 07:19 AM, David Kupka wrote: On 05/10/15 16:12, Simo Sorce

Re: [Freeipa-devel] [PATCH 0006-0010] Low hanging fruit for #5343 -- platform abstractions

2015-10-07 Thread Martin Basti
thanks comments inline On 10/07/2015 12:51 PM, Tomas Babej wrote: On Tue, Oct 06, 2015 at 09:58:04PM +0300, Timo Aaltonen wrote: Hi So here's the first batch of quick patches for ticket #5343. They're only compile-tested so far (so no stupid mistakes I hope), as I don't have 4.2+

[Freeipa-devel] [PATCH] Workaround for trac N 5348

2015-10-07 Thread Oleg Fayans
subj -- Oleg Fayans Quality Engineer FreeIPA team RedHat. From 7ab1afe5e9a8f6b28be2d5b92423eccec61248a0 Mon Sep 17 00:00:00 2001 From: Oleg Fayans Date: Wed, 7 Oct 2015 16:08:30 +0200 Subject: [PATCH] Added a workaround for ticket N 5348 After creating signed root zone, the

Re: [Freeipa-devel] [PATCH] Workaround for trac N 5348

2015-10-07 Thread Martin Basti
On 10/07/2015 04:13 PM, Oleg Fayans wrote: subj Workaround looks good, but I prefer not to push it in upstream tests, because it is not test failure. Why is there this sleep, this might be useful in upstream tests too, but what is the reason to add sleep there? # verify

Re: [Freeipa-devel] [PATCHES 0069-0077] support for proper Kerberos principal canonicalization

2015-10-07 Thread thierry bordaz
On 10/07/2015 05:29 PM, Simo Sorce wrote: On 07/10/15 11:06, thierry bordaz wrote: On 10/07/2015 03:10 PM, David Kupka wrote: On 06/10/15 17:52, Jakub Hrozek wrote: On Tue, Oct 06, 2015 at 08:32:29AM -0400, Simo Sorce wrote: On 06/10/15 08:04, David Kupka wrote: On 06/10/15 13:35, Simo

Re: [Freeipa-devel] [PATCHES 0069-0077] support for proper Kerberos principal canonicalization

2015-10-07 Thread thierry bordaz
On 10/07/2015 03:10 PM, David Kupka wrote: On 06/10/15 17:52, Jakub Hrozek wrote: On Tue, Oct 06, 2015 at 08:32:29AM -0400, Simo Sorce wrote: On 06/10/15 08:04, David Kupka wrote: On 06/10/15 13:35, Simo Sorce wrote: On 06/10/15 03:51, thierry bordaz wrote: On 10/06/2015 07:19 AM, David

Re: [Freeipa-devel] [PATCH] Workaround for trac N 5348

2015-10-07 Thread Martin Kosek
On 10/07/2015 04:13 PM, Oleg Fayans wrote: > subj I would suggest using standard FreeIPA format of refering to tickets, i.e. URL. I would also suggest including ticket URL in patch description so that people can easily find it: http://www.freeipa.org/page/Contribute/Patch_Format Martin --

Re: [Freeipa-devel] [PATCHES 0069-0077] support for proper Kerberos principal canonicalization

2015-10-07 Thread Simo Sorce
On 07/10/15 11:06, thierry bordaz wrote: On 10/07/2015 03:10 PM, David Kupka wrote: On 06/10/15 17:52, Jakub Hrozek wrote: On Tue, Oct 06, 2015 at 08:32:29AM -0400, Simo Sorce wrote: On 06/10/15 08:04, David Kupka wrote: On 06/10/15 13:35, Simo Sorce wrote: On 06/10/15 03:51, thierry bordaz