Re: [Freeipa-devel] [PATCH 0082] Fix --auto-reverse option in --unattended mode

2016-01-08 Thread David Kupka
On 07/01/16 11:25, Petr Spacek wrote: Hello, Fix --auto-reverse option in --unattended mode. Oleg, this should fix your particular environment. Unfortunately it is not a complete fix for https://fedorahosted.org/freeipa/ticket/5559 , stay tuned - I will send other patches related to this.

Re: [Freeipa-devel] [PATCH 0083-0084] Fix DNS zone overlap check to allow ipa-replica-install to worFix dns_is_enabled() API command to throw exceptions as appropriat

2016-01-08 Thread David Kupka
On 07/01/16 16:26, Petr Spacek wrote: Hello, Fix DNS zone overlap check to allow ipa-replica-install to work. My review script claims that "No problems detected using lint, pep8, ./make{api,aci}, and VERSION" Please review. Thanks, looks good and works as expected for me, ACK. -- David

Re: [Freeipa-devel] [PATCH] 942 webui: add examples to network address validator error message

2016-01-08 Thread Martin Basti
On 22.12.2015 14:33, Gabe Alford wrote: LGTM. Gabe On Tue, Dec 22, 2015 at 6:06 AM, Petr Vobornik > wrote: https://fedorahosted.org/freeipa/ticket/5532 -- Petr Vobornik -- Manage your subscription for the

Re: [Freeipa-devel] [PATCH] 943 webui: pwpolicy cospriority field was marked as required

2016-01-08 Thread Martin Basti
On 08.01.2016 10:09, Martin Basti wrote: On 22.12.2015 14:23, Petr Vobornik wrote: https://fedorahosted.org/freeipa/ticket/5553 Pushed to: master: af0e0e5153afdcdf5b8165162ae4ef5d60ecbe0b ipa-4-3: 574a637c730e62b741c9f901e51ff324b57bb781 ACK -- Manage your subscription for the

[Freeipa-devel] [TEST] Workaround for ticket N 5559

2016-01-08 Thread Oleg Fayans
Passes lint, fixes an issue with replica installation failures due to absence of corresponding reverse zone on master. -- Oleg Fayans Quality Engineer FreeIPA team RedHat. From 8d905385ae16d5227248f8ebb98abf0a6b9ee932 Mon Sep 17 00:00:00 2001 From: Oleg Fayans Date: Fri, 8

Re: [Freeipa-devel] [PATCH 0083-0084] Fix DNS zone overlap check to allow ipa-replica-install to worFix dns_is_enabled() API command to throw exceptions as appropriat

2016-01-08 Thread Martin Basti
On 08.01.2016 09:59, David Kupka wrote: On 07/01/16 16:26, Petr Spacek wrote: Hello, Fix DNS zone overlap check to allow ipa-replica-install to work. My review script claims that "No problems detected using lint, pep8, ./make{api,aci}, and VERSION" Please review. Thanks, looks good and

Re: [Freeipa-devel] [PATCH] 0758

2016-01-08 Thread Petr Viktorin
On 01/07/2016 03:55 PM, Rob Crittenden wrote: > Petr Viktorin wrote: >> On 01/06/2016 03:47 PM, Rob Crittenden wrote: >>> Petr Viktorin wrote: Hello, Patches 0753-0757 fix remaining warnings from `pylint --py3k`, except "no-absolute-import" (which seems redundant to me) and the

Re: [Freeipa-devel] [PATCH] 943 webui: pwpolicy cospriority field was marked as required

2016-01-08 Thread Martin Basti
On 22.12.2015 14:23, Petr Vobornik wrote: https://fedorahosted.org/freeipa/ticket/5553 Pushed to: master: af0e0e5153afdcdf5b8165162ae4ef5d60ecbe0b ipa-4-3: 574a637c730e62b741c9f901e51ff324b57bb781 -- Manage your subscription for the Freeipa-devel mailing list:

Re: [Freeipa-devel] [PATCH 0082] Fix --auto-reverse option in --unattended mode

2016-01-08 Thread Martin Basti
On 08.01.2016 09:59, David Kupka wrote: On 07/01/16 11:25, Petr Spacek wrote: Hello, Fix --auto-reverse option in --unattended mode. Oleg, this should fix your particular environment. Unfortunately it is not a complete fix for https://fedorahosted.org/freeipa/ticket/5559 , stay tuned - I

Re: [Freeipa-devel] [PATCH] 0048 Decode HTTP reason phrase as iso-8859-1

2016-01-08 Thread Fraser Tweedale
On Thu, Jan 07, 2016 at 08:00:51PM +1000, Fraser Tweedale wrote: > On Thu, Jan 07, 2016 at 07:56:15AM +0100, Jan Cholasta wrote: > > Hi, > > > > On 6.1.2016 05:26, Fraser Tweedale wrote: > > >Happy new year, all. > > > > > >The attached patch fixes a unicode decode error triggered in some > >

Re: [Freeipa-devel] [PATCH 0373] Upgrade: Fix IPA version comparison

2016-01-08 Thread Martin Kosek
On 12/11/2015 09:36 AM, Martin Kosek wrote: > On 12/10/2015 05:09 PM, Martin Basti wrote: >> >> >> On 10.12.2015 15:49, Tomas Babej wrote: >>> >>> On 12/10/2015 11:23 AM, Martin Basti wrote: On 10.12.2015 09:13, Lukas Slebodnik wrote: > On (09/12/15 19:22), Martin Basti wrote: >>

Re: [Freeipa-devel] import rpm causes failure during IPA caless install

2016-01-08 Thread Tomas Babej
On 01/08/2016 01:45 PM, Martin Basti wrote: > Hello all, > > fix for ticket https://fedorahosted.org/freeipa/ticket/5535 > requires to import rpm module > > This import somehow breaks nsslib in IPA > https://fedorahosted.org/freeipa/ticket/5572 > > > We have 2 ways how to fix it: > > 1)

Re: [Freeipa-devel] import rpm causes failure during IPA caless install

2016-01-08 Thread Martin Babinsky
On 01/08/2016 02:40 PM, Martin Kosek wrote: On 01/08/2016 02:18 PM, Martin Babinsky wrote: On 01/08/2016 02:14 PM, Jan Cholasta wrote: On 8.1.2016 14:09, Martin Basti wrote: On 08.01.2016 14:00, Martin Kosek wrote: On 01/08/2016 01:45 PM, Martin Basti wrote: Hello all, fix for ticket

[Freeipa-devel] import rpm causes failure during IPA caless install

2016-01-08 Thread Martin Basti
Hello all, fix for ticket https://fedorahosted.org/freeipa/ticket/5535 requires to import rpm module This import somehow breaks nsslib in IPA https://fedorahosted.org/freeipa/ticket/5572 We have 2 ways how to fix it: 1) move import rpm to body of methods (attached patch) We are not sure

Re: [Freeipa-devel] import rpm causes failure during IPA caless install

2016-01-08 Thread Martin Kosek
On 01/08/2016 02:18 PM, Martin Babinsky wrote: > On 01/08/2016 02:14 PM, Jan Cholasta wrote: >> On 8.1.2016 14:09, Martin Basti wrote: >>> >>> >>> On 08.01.2016 14:00, Martin Kosek wrote: On 01/08/2016 01:45 PM, Martin Basti wrote: > Hello all, > > fix for ticket

Re: [Freeipa-devel] FreeIPA and modern requirements on certificates

2016-01-08 Thread Fraser Tweedale
On Fri, Jan 08, 2016 at 01:26:57PM +0100, Martin Kosek wrote: > Hi Fraser and other X.509 SMEs, > > I wanted to check with you on what we have or plan to have with respect to > certificate/cipher strength in FreeIPA. > > When I visit the FreeIPA public demo for example, I usually see following >

Re: [Freeipa-devel] import rpm causes failure during IPA caless install

2016-01-08 Thread Alexander Bokovoy
On Fri, 08 Jan 2016, Jan Cholasta wrote: On 8.1.2016 14:09, Martin Basti wrote: On 08.01.2016 14:00, Martin Kosek wrote: On 01/08/2016 01:45 PM, Martin Basti wrote: Hello all, fix for ticket https://fedorahosted.org/freeipa/ticket/5535 requires to import rpm module This import somehow

Re: [Freeipa-devel] import rpm causes failure during IPA caless install

2016-01-08 Thread Jan Cholasta
On 8.1.2016 14:13, Martin Basti wrote: On 08.01.2016 14:14, Jan Cholasta wrote: On 8.1.2016 14:09, Martin Basti wrote: On 08.01.2016 14:00, Martin Kosek wrote: On 01/08/2016 01:45 PM, Martin Basti wrote: Hello all, fix for ticket https://fedorahosted.org/freeipa/ticket/5535 requires to

Re: [Freeipa-devel] import rpm causes failure during IPA caless install

2016-01-08 Thread Alexander Bokovoy
On Fri, 08 Jan 2016, Jan Cholasta wrote: I would be surprised if NSS was used in this particular function. I will try it No NSS here: Anyway, the function looks simple, so it might be safer to just rewrite it to

Re: [Freeipa-devel] import rpm causes failure during IPA caless install

2016-01-08 Thread Martin Babinsky
On 01/08/2016 02:14 PM, Jan Cholasta wrote: On 8.1.2016 14:09, Martin Basti wrote: On 08.01.2016 14:00, Martin Kosek wrote: On 01/08/2016 01:45 PM, Martin Basti wrote: Hello all, fix for ticket https://fedorahosted.org/freeipa/ticket/5535 requires to import rpm module This import somehow

Re: [Freeipa-devel] [PATCH 0399] Upgrade: fix upgrading of NIS Server configuration

2016-01-08 Thread Alexander Bokovoy
On Wed, 06 Jan 2016, Martin Basti wrote: https://fedorahosted.org/freeipa/ticket/5507 Patch attached. Is proposed workaround in ticket enough or should I also prepare a update that will fix missing maps? The update you have is good but we need to recover missing maps. Given that we know

Re: [Freeipa-devel] import rpm causes failure during IPA caless install

2016-01-08 Thread Martin Kosek
On 01/08/2016 01:45 PM, Martin Basti wrote: > Hello all, > > fix for ticket https://fedorahosted.org/freeipa/ticket/5535 > requires to import rpm module > > This import somehow breaks nsslib in IPA > https://fedorahosted.org/freeipa/ticket/5572 > > > We have 2 ways how to fix it: > > 1) move

Re: [Freeipa-devel] import rpm causes failure during IPA caless install

2016-01-08 Thread Jan Cholasta
On 8.1.2016 14:09, Martin Basti wrote: On 08.01.2016 14:00, Martin Kosek wrote: On 01/08/2016 01:45 PM, Martin Basti wrote: Hello all, fix for ticket https://fedorahosted.org/freeipa/ticket/5535 requires to import rpm module This import somehow breaks nsslib in IPA

Re: [Freeipa-devel] import rpm causes failure during IPA caless install

2016-01-08 Thread Martin Kosek
On 01/08/2016 02:22 PM, Jan Cholasta wrote: > On 8.1.2016 14:13, Martin Basti wrote: >> >> >> On 08.01.2016 14:14, Jan Cholasta wrote: >>> On 8.1.2016 14:09, Martin Basti wrote: On 08.01.2016 14:00, Martin Kosek wrote: > On 01/08/2016 01:45 PM, Martin Basti wrote: >> Hello

Re: [Freeipa-devel] FreeIPA and modern requirements on certificates

2016-01-08 Thread Rob Crittenden
Alexander Bokovoy wrote: > On Fri, 08 Jan 2016, Martin Kosek wrote: >> On 01/08/2016 02:17 PM, Fraser Tweedale wrote: >>> On Fri, Jan 08, 2016 at 02:02:07PM +0100, Martin Kosek wrote: On 01/08/2016 01:56 PM, Fraser Tweedale wrote: > On Fri, Jan 08, 2016 at 01:26:57PM +0100, Martin Kosek

[Freeipa-devel] Fix ipa-replica-prepare after DNS check patches

2016-01-08 Thread David Kupka
https://fedorahosted.org/freeipa/ticket/5563 -- David Kupka From 7d8bf4809059f97ff62f4b9a73a486ed7d19d6bb Mon Sep 17 00:00:00 2001 From: David Kupka Date: Tue, 22 Dec 2015 13:53:41 + Subject: [PATCH] ipa-replica-prepare: Add '--auto-reverse' and '--allow-zone-overlap'

[Freeipa-devel] FreeIPA and modern requirements on certificates

2016-01-08 Thread Martin Kosek
Hi Fraser and other X.509 SMEs, I wanted to check with you on what we have or plan to have with respect to certificate/cipher strength in FreeIPA. When I visit the FreeIPA public demo for example, I usually see following errors with recent browsers: * Your connection to ipa.demo1.freeipa.org is

Re: [Freeipa-devel] FreeIPA and modern requirements on certificates

2016-01-08 Thread Fraser Tweedale
On Fri, Jan 08, 2016 at 02:02:07PM +0100, Martin Kosek wrote: > On 01/08/2016 01:56 PM, Fraser Tweedale wrote: > > On Fri, Jan 08, 2016 at 01:26:57PM +0100, Martin Kosek wrote: > >> Hi Fraser and other X.509 SMEs, > >> > >> I wanted to check with you on what we have or plan to have with respect to

Re: [Freeipa-devel] import rpm causes failure during IPA caless install

2016-01-08 Thread Martin Babinsky
On 01/08/2016 02:14 PM, Jan Cholasta wrote: On 8.1.2016 14:09, Martin Basti wrote: On 08.01.2016 14:00, Martin Kosek wrote: On 01/08/2016 01:45 PM, Martin Basti wrote: Hello all, fix for ticket https://fedorahosted.org/freeipa/ticket/5535 requires to import rpm module This import somehow

Re: [Freeipa-devel] FreeIPA and modern requirements on certificates

2016-01-08 Thread Christian Heimes
On 2016-01-08 13:26, Martin Kosek wrote: > Hi Fraser and other X.509 SMEs, > > I wanted to check with you on what we have or plan to have with respect to > certificate/cipher strength in FreeIPA. > > When I visit the FreeIPA public demo for example, I usually see following > errors with recent

Re: [Freeipa-devel] import rpm causes failure during IPA caless install

2016-01-08 Thread Jan Cholasta
On 8.1.2016 14:34, Martin Kosek wrote: On 01/08/2016 02:32 PM, Martin Kosek wrote: On 01/08/2016 02:22 PM, Jan Cholasta wrote: On 8.1.2016 14:13, Martin Basti wrote: On 08.01.2016 14:14, Jan Cholasta wrote: On 8.1.2016 14:09, Martin Basti wrote: On 08.01.2016 14:00, Martin Kosek wrote:

Re: [Freeipa-devel] import rpm causes failure during IPA caless install

2016-01-08 Thread Tomas Babej
On 01/08/2016 03:31 PM, Lukas Slebodnik wrote: > On (08/01/16 14:14), Jan Cholasta wrote: >> On 8.1.2016 14:09, Martin Basti wrote: >>> >>> >>> On 08.01.2016 14:00, Martin Kosek wrote: On 01/08/2016 01:45 PM, Martin Basti wrote: > Hello all, > > fix for ticket

Re: [Freeipa-devel] import rpm causes failure during IPA caless install

2016-01-08 Thread Martin Kosek
On 01/08/2016 02:09 PM, Martin Basti wrote: > > > On 08.01.2016 14:00, Martin Kosek wrote: >> On 01/08/2016 01:45 PM, Martin Basti wrote: >>> Hello all, >>> >>> fix for ticket https://fedorahosted.org/freeipa/ticket/5535 >>> requires to import rpm module >>> >>> This import somehow breaks nsslib

Re: [Freeipa-devel] import rpm causes failure during IPA caless install

2016-01-08 Thread Martin Kosek
On 01/08/2016 02:32 PM, Martin Kosek wrote: > On 01/08/2016 02:22 PM, Jan Cholasta wrote: >> On 8.1.2016 14:13, Martin Basti wrote: >>> >>> >>> On 08.01.2016 14:14, Jan Cholasta wrote: On 8.1.2016 14:09, Martin Basti wrote: > > > On 08.01.2016 14:00, Martin Kosek wrote: >> On

Re: [Freeipa-devel] FreeIPA and modern requirements on certificates

2016-01-08 Thread Alexander Bokovoy
On Fri, 08 Jan 2016, Martin Kosek wrote: On 01/08/2016 02:17 PM, Fraser Tweedale wrote: On Fri, Jan 08, 2016 at 02:02:07PM +0100, Martin Kosek wrote: On 01/08/2016 01:56 PM, Fraser Tweedale wrote: On Fri, Jan 08, 2016 at 01:26:57PM +0100, Martin Kosek wrote: Hi Fraser and other X.509 SMEs,

Re: [Freeipa-devel] import rpm causes failure during IPA caless install

2016-01-08 Thread Lukas Slebodnik
On (08/01/16 14:14), Jan Cholasta wrote: >On 8.1.2016 14:09, Martin Basti wrote: >> >> >>On 08.01.2016 14:00, Martin Kosek wrote: >>>On 01/08/2016 01:45 PM, Martin Basti wrote: Hello all, fix for ticket https://fedorahosted.org/freeipa/ticket/5535 requires to import rpm module

Re: [Freeipa-devel] FreeIPA and modern requirements on certificates

2016-01-08 Thread Martin Kosek
On 01/08/2016 02:24 PM, Christian Heimes wrote: > On 2016-01-08 13:26, Martin Kosek wrote: >> Hi Fraser and other X.509 SMEs, >> >> I wanted to check with you on what we have or plan to have with respect to >> certificate/cipher strength in FreeIPA. >> >> When I visit the FreeIPA public demo for

Re: [Freeipa-devel] [PATCHES] 0752-0757, 0759 Enable pylint --py3k

2016-01-08 Thread Petr Viktorin
On 01/06/2016 03:28 PM, Petr Viktorin wrote: > Hello, > > Patches 0753-0757 fix remaining warnings from `pylint --py3k`, except > "no-absolute-import" (which seems redundant to me) and the ones in > contrib/RHEL4. > The last patch adds py3k lint check to make-lint. It's a bit > cumbersome,

Re: [Freeipa-devel] import rpm causes failure during IPA caless install

2016-01-08 Thread Alexander Bokovoy
On Fri, 08 Jan 2016, Tomas Babej wrote: On 01/08/2016 01:45 PM, Martin Basti wrote: Hello all, fix for ticket https://fedorahosted.org/freeipa/ticket/5535 requires to import rpm module This import somehow breaks nsslib in IPA https://fedorahosted.org/freeipa/ticket/5572 We have 2 ways how

Re: [Freeipa-devel] import rpm causes failure during IPA caless install

2016-01-08 Thread Martin Basti
On 08.01.2016 14:00, Martin Kosek wrote: On 01/08/2016 01:45 PM, Martin Basti wrote: Hello all, fix for ticket https://fedorahosted.org/freeipa/ticket/5535 requires to import rpm module This import somehow breaks nsslib in IPA https://fedorahosted.org/freeipa/ticket/5572 We have 2 ways

Re: [Freeipa-devel] FreeIPA and modern requirements on certificates

2016-01-08 Thread Martin Kosek
On 01/08/2016 02:17 PM, Fraser Tweedale wrote: > On Fri, Jan 08, 2016 at 02:02:07PM +0100, Martin Kosek wrote: >> On 01/08/2016 01:56 PM, Fraser Tweedale wrote: >>> On Fri, Jan 08, 2016 at 01:26:57PM +0100, Martin Kosek wrote: Hi Fraser and other X.509 SMEs, I wanted to check with

Re: [Freeipa-devel] FreeIPA and modern requirements on certificates

2016-01-08 Thread Martin Kosek
On 01/08/2016 01:56 PM, Fraser Tweedale wrote: > On Fri, Jan 08, 2016 at 01:26:57PM +0100, Martin Kosek wrote: >> Hi Fraser and other X.509 SMEs, >> >> I wanted to check with you on what we have or plan to have with respect to >> certificate/cipher strength in FreeIPA. >> >> When I visit the

Re: [Freeipa-devel] import rpm causes failure during IPA caless install

2016-01-08 Thread Martin Basti
On 08.01.2016 14:14, Jan Cholasta wrote: On 8.1.2016 14:09, Martin Basti wrote: On 08.01.2016 14:00, Martin Kosek wrote: On 01/08/2016 01:45 PM, Martin Basti wrote: Hello all, fix for ticket https://fedorahosted.org/freeipa/ticket/5535 requires to import rpm module This import somehow

Re: [Freeipa-devel] import rpm causes failure during IPA caless install

2016-01-08 Thread Lukas Slebodnik
On (08/01/16 14:18), Martin Babinsky wrote: >On 01/08/2016 02:14 PM, Jan Cholasta wrote: >>On 8.1.2016 14:09, Martin Basti wrote: >>> >>> >>>On 08.01.2016 14:00, Martin Kosek wrote: On 01/08/2016 01:45 PM, Martin Basti wrote: >Hello all, > >fix for ticket

Re: [Freeipa-devel] FreeIPA and modern requirements on certificates

2016-01-08 Thread Petr Spacek
On 8.1.2016 13:56, Fraser Tweedale wrote: > On Fri, Jan 08, 2016 at 01:26:57PM +0100, Martin Kosek wrote: >> > Hi Fraser and other X.509 SMEs, >> > >> > I wanted to check with you on what we have or plan to have with respect to >> > certificate/cipher strength in FreeIPA. >> > >> > When I visit

Re: [Freeipa-devel] FreeIPA and modern requirements on certificates

2016-01-08 Thread Petr Spacek
On 8.1.2016 16:57, Christian Heimes wrote: > On 2016-01-08 16:49, Petr Spacek wrote: >> On 8.1.2016 13:56, Fraser Tweedale wrote: >>> On Fri, Jan 08, 2016 at 01:26:57PM +0100, Martin Kosek wrote: > Hi Fraser and other X.509 SMEs, > > I wanted to check with you on what we have or plan

[Freeipa-devel] [PATCH 0124] ipa-csreplica-manage: remove extraneous ldap2 connection

2016-01-08 Thread Martin Babinsky
fixes ipa-csreplica-manage del blowing up due https://fedorahosted.org/freeipa/ticket/5583 for master and ipa-4-3 only. -- Martin^3 Babinsky -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

Re: [Freeipa-devel] [PATCH 0399] Upgrade: fix upgrading of NIS Server configuration

2016-01-08 Thread Martin Basti
On 08.01.2016 16:19, Petr Vobornik wrote: On 01/08/2016 02:54 PM, Alexander Bokovoy wrote: On Wed, 06 Jan 2016, Martin Basti wrote: https://fedorahosted.org/freeipa/ticket/5507 Patch attached. Is proposed workaround in ticket enough or should I also prepare a update that will fix missing

Re: [Freeipa-devel] FreeIPA and modern requirements on certificates

2016-01-08 Thread Martin Kosek
On 01/08/2016 03:02 PM, Rob Crittenden wrote: > Alexander Bokovoy wrote: >> On Fri, 08 Jan 2016, Martin Kosek wrote: >>> On 01/08/2016 02:17 PM, Fraser Tweedale wrote: On Fri, Jan 08, 2016 at 02:02:07PM +0100, Martin Kosek wrote: > On 01/08/2016 01:56 PM, Fraser Tweedale wrote: >> On

Re: [Freeipa-devel] [PATCH 0398] Allow to use mixed case for sysrestore

2016-01-08 Thread Martin Babinsky
On 01/07/2016 05:55 PM, Martin Basti wrote: On 06.01.2016 19:08, Martin Basti wrote: https://fedorahosted.org/freeipa/ticket/5574 Patch attached. I missed one occurrence, updated patch attached. ACK (also the reason why Martin^2 didn't do it the nice way by subclassing

Re: [Freeipa-devel] FreeIPA and modern requirements on certificates

2016-01-08 Thread Christian Heimes
On 2016-01-08 16:49, Petr Spacek wrote: > On 8.1.2016 13:56, Fraser Tweedale wrote: >> On Fri, Jan 08, 2016 at 01:26:57PM +0100, Martin Kosek wrote: Hi Fraser and other X.509 SMEs, I wanted to check with you on what we have or plan to have with respect to certificate/cipher

Re: [Freeipa-devel] [PATCH 0122-0123] reimplementation of package version comparison code

2016-01-08 Thread Lukas Slebodnik
On (08/01/16 16:59), Martin Babinsky wrote: >Patch 0122 reimplements version checking and fixes >https://fedorahosted.org/freeipa/ticket/5572 > >Patch 0123 contains unit test for version checking code. > >Thanks to Martin^1 for the idea of using CFFI for calling rpm C-API directly. > >--

Re: [Freeipa-devel] import rpm causes failure during IPA caless install

2016-01-08 Thread Martin Babinsky
On 01/08/2016 04:10 PM, Lukas Slebodnik wrote: On (08/01/16 14:18), Martin Babinsky wrote: On 01/08/2016 02:14 PM, Jan Cholasta wrote: On 8.1.2016 14:09, Martin Basti wrote: On 08.01.2016 14:00, Martin Kosek wrote: On 01/08/2016 01:45 PM, Martin Basti wrote: Hello all, fix for ticket

[Freeipa-devel] Design: Automatic Empty Zone handling in bind-dyndb-ldap

2016-01-08 Thread Petr Spacek
Hello, recent improvements in FreeIPA 4.3.0 (finally) prevent FreeIPA installer from creating made-up DNS reverse zones, which already exist on some other DNS server. This change uncovered a well-hidden automatic empty zones in BIND 9.9+, which is now causing problem to users. It seems that

Re: [Freeipa-devel] [PATCH 0122-0123] reimplementation of package version comparison code

2016-01-08 Thread Martin Babinsky
On 01/08/2016 05:23 PM, Lukas Slebodnik wrote: On (08/01/16 16:59), Martin Babinsky wrote: Patch 0122 reimplements version checking and fixes https://fedorahosted.org/freeipa/ticket/5572 Patch 0123 contains unit test for version checking code. Thanks to Martin^1 for the idea of using CFFI for

[Freeipa-devel] [PATCH 0122-0123] reimplementation of package version comparison code

2016-01-08 Thread Martin Babinsky
Patch 0122 reimplements version checking and fixes https://fedorahosted.org/freeipa/ticket/5572 Patch 0123 contains unit test for version checking code. Thanks to Martin^1 for the idea of using CFFI for calling rpm C-API directly. -- Martin^3 Babinsky From

Re: [Freeipa-devel] [PATCH 0122-0123] reimplementation of package version comparison code

2016-01-08 Thread Lukas Slebodnik
On (08/01/16 17:56), Martin Babinsky wrote: >On 01/08/2016 05:23 PM, Lukas Slebodnik wrote: >>On (08/01/16 16:59), Martin Babinsky wrote: >>>Patch 0122 reimplements version checking and fixes >>>https://fedorahosted.org/freeipa/ticket/5572 >>> >>>Patch 0123 contains unit test for version checking

Re: [Freeipa-devel] [PATCH 0124] ipa-csreplica-manage: remove extraneous ldap2 connection

2016-01-08 Thread Martin Babinsky
On 01/08/2016 06:17 PM, Martin Basti wrote: On 08.01.2016 17:18, Martin Babinsky wrote: fixes ipa-csreplica-manage del blowing up due https://fedorahosted.org/freeipa/ticket/5583 for master and ipa-4-3 only. Give me patch plese!! Auto-attach plugin would be most

Re: [Freeipa-devel] Design: Automatic Empty Zone handling in bind-dyndb-ldap

2016-01-08 Thread Martin Basti
On 08.01.2016 16:57, Petr Spacek wrote: Hello, recent improvements in FreeIPA 4.3.0 (finally) prevent FreeIPA installer from creating made-up DNS reverse zones, which already exist on some other DNS server. This change uncovered a well-hidden automatic empty zones in BIND 9.9+, which is now

Re: [Freeipa-devel] [PATCH 0118] fix Py3 incompatible exception instantiation in replica install code

2016-01-08 Thread Tomas Babej
On 01/07/2016 05:56 PM, Martin Babinsky wrote: > On 01/04/2016 09:02 AM, Martin Babinsky wrote: >> >> >> > I have created ticket to patch and added it to commit message: > > https://fedorahosted.org/freeipa/ticket/5585 > > > ACK for these changes, however, there are additional occurrences

Re: [Freeipa-devel] [PATCH 0398] Allow to use mixed case for sysrestore

2016-01-08 Thread Martin Basti
On 08.01.2016 16:48, Martin Babinsky wrote: On 01/07/2016 05:55 PM, Martin Basti wrote: On 06.01.2016 19:08, Martin Basti wrote: https://fedorahosted.org/freeipa/ticket/5574 Patch attached. I missed one occurrence, updated patch attached. ACK (also the reason why Martin^2 didn't

Re: [Freeipa-devel] [PATCH 0399] Upgrade: fix upgrading of NIS Server configuration

2016-01-08 Thread Alexander Bokovoy
On Fri, 08 Jan 2016, Petr Vobornik wrote: On 01/08/2016 02:54 PM, Alexander Bokovoy wrote: On Wed, 06 Jan 2016, Martin Basti wrote: https://fedorahosted.org/freeipa/ticket/5507 Patch attached. Is proposed workaround in ticket enough or should I also prepare a update that will fix missing

Re: [Freeipa-devel] [PATCH 0399] Upgrade: fix upgrading of NIS Server configuration

2016-01-08 Thread Martin Basti
On 08.01.2016 16:22, Martin Basti wrote: On 08.01.2016 16:19, Petr Vobornik wrote: On 01/08/2016 02:54 PM, Alexander Bokovoy wrote: On Wed, 06 Jan 2016, Martin Basti wrote: https://fedorahosted.org/freeipa/ticket/5507 Patch attached. Is proposed workaround in ticket enough or should I

Re: [Freeipa-devel] [PATCH 0124] ipa-csreplica-manage: remove extraneous ldap2 connection

2016-01-08 Thread Martin Basti
On 08.01.2016 17:18, Martin Babinsky wrote: fixes ipa-csreplica-manage del blowing up due https://fedorahosted.org/freeipa/ticket/5583 for master and ipa-4-3 only. Give me patch plese!! -- Manage your subscription for the Freeipa-devel mailing list:

Re: [Freeipa-devel] import rpm causes failure during IPA caless install

2016-01-08 Thread John Dennis
On 01/08/2016 08:22 AM, Jan Cholasta wrote: On 8.1.2016 14:13, Martin Basti wrote: On 08.01.2016 14:14, Jan Cholasta wrote: On 8.1.2016 14:09, Martin Basti wrote: On 08.01.2016 14:00, Martin Kosek wrote: On 01/08/2016 01:45 PM, Martin Basti wrote: Hello all, fix for ticket