Re: [Freeipa-devel] Provisioning throughput

2016-05-17 Thread thierry bordaz
On 05/13/2016 10:18 AM, Ludwig Krispenz wrote: On 05/13/2016 09:42 AM, Petr Spacek wrote: On 13.5.2016 09:26, Martin Kosek wrote: On 05/12/2016 04:16 PM, Ludwig Krispenz wrote: On 05/12/2016 03:45 PM, Ludwig Krispenz wrote: On 05/12/2016 02:16 PM, Petr Vobornik wrote: On 05/10/2016 05:50

[Freeipa-devel] [PATCH] 0002 Incorrect message when KRA already installed

2016-05-17 Thread Patrice Duc-Jacquet
Hi everyone Please see attached candidate patch for ticket https://fedorahosted.org/freeipa/ticket/5315 Thanks and regards Pat From b87f48165361199d140be7bea96f07390d7d500f Mon Sep 17 00:00:00 2001 From: Patrice Duc-Jacquet Date: Tue, 17 May 2016 10:35:42 +0200 Subject: [PATCH] Incorrect messa

Re: [Freeipa-devel] [DESIGN] Time-Based HBAC Policies

2016-05-17 Thread Petr Spacek
On 13.5.2016 13:50, Stanislav Laznicka wrote: > Hello list, > > We had a discussion today over integrating the Time Rules into the CLI and > WebUI and a problem came up with with the current solution. It seems that > while having templating handled by CoSTemplates might be nice in terms of easy >

Re: [Freeipa-devel] V4/Sub-CAs review

2016-05-17 Thread Jan Cholasta
On 10.5.2016 12:36, Fraser Tweedale wrote: Honza, thanks for the review. Comments inline. Copy Nalin, re certmonger discussion at the very bottom. On Mon, May 09, 2016 at 08:54:32AM +0200, Jan Cholasta wrote: Hi, 8<-- 2) It

Re: [Freeipa-devel] [DESIGN-REVIEW] V4/Manage_replication_topology_4_4

2016-05-17 Thread Oleg Fayans
Sorry, I forgot to list the tickets themselves On 05/16/2016 03:48 PM, Oleg Fayans wrote: > Hi, > > The design is OK, the onlz thing that is missing is a HowToTest section > in track tickets [1] and [2] about clean-dangling-ruvs and > abort-clean-ruv respectively. It would really help if these ti

Re: [Freeipa-devel] [PATCH] 0001 (update 2) provide more information for "ipa cert-revoke -h"

2016-05-17 Thread Gabe Alford
Patrice, Can you please send rebased version of this patch? Thanks, Gabe On Fri, May 6, 2016 at 6:45 AM, Martin Basti wrote: > > > On 04.05.2016 14:30, Gabe Alford wrote: > > On Wed, May 4, 2016 at 1:35 AM, Patrice Duc-Jacquet < > patdu...@gmail.com> wrote: > >> Hi everyone >> >> this is a s

Re: [Freeipa-devel] V4/Sub-CAs review

2016-05-17 Thread Fraser Tweedale
On Tue, May 17, 2016 at 01:28:15PM +0200, Jan Cholasta wrote: > On 10.5.2016 12:36, Fraser Tweedale wrote: > > Honza, thanks for the review. Comments inline. > > > > Copy Nalin, re certmonger discussion at the very bottom. > > > > On Mon, May 09, 2016 at 08:54:32AM +0200, Jan Cholasta wrote: > >

Re: [Freeipa-devel] [WIP] Thin client

2016-05-17 Thread David Kupka
On 28/04/16 14:45, Jan Cholasta wrote: Hi, I have pushed my thin client WIP branch to GitHub: . All commits up to "ipalib: use relative imports for cross-plugin imports" should be good for review. The rest is subject to change (WARNING: I will

[Freeipa-devel] feature template: "How to test" section renamed to "How to use"

2016-05-17 Thread Petr Vobornik
New text: """ == How to Use == Easy to follow instructions how to use the new feature according to the [[#Use_Cases|use cases]] described above. FreeIPA user needs to be able to follow the steps and demonstrate the new features. The chapter may be divided in sub-sections per [[#Use_Cases|Use Cas

Re: [Freeipa-devel] V4/Sub-CAs review

2016-05-17 Thread Nalin Dahyabhai
On Tue, May 17, 2016 at 01:28:15PM +0200, Jan Cholasta wrote: > > > 7) > > > > > > How is a certificate going to be requested from a specific sub-CA using > > > the > > > getcert command? > > > > > I added a preliminary design; add a new certmo

[Freeipa-devel] Updated External EPEL CentOS 7 COPR builds are now available . . .

2016-05-17 Thread Matthew Harmsen
An updated external EPEL CentOS 7 COPR repo is available now available which contains Dogtag 10.3.1 builds: * https://copr.fedorainfracloud.org/coprs/g/pki/10.3.1/repo/epel-7/group_pki-10.3.1-epel-7.repo [group_pki-10.3.1] name=Copr repo for 10.3.1 owned by @pki baseurl=https://

Re: [Freeipa-devel] [WIP] Thin client

2016-05-17 Thread Jan Cholasta
On 16.5.2016 16:35, Martin Basti wrote: On 09.05.2016 14:07, Jan Cholasta wrote: On 6.5.2016 14:32, Martin Basti wrote: On 28.04.2016 14:45, Jan Cholasta wrote: Hi, I have pushed my thin client WIP branch to GitHub: . All commits up to

[Freeipa-devel] [PATCH] 0057..0058 Fix caIPAserviceCert regression

2016-05-17 Thread Fraser Tweedale
Rebased version of 0057 attached, along with new patch 0058 that detects when the Dogtag version of caIPAserviceCert has been erroneously imported and repairs the profile. Thanks, Fraser From 9994a98a0cd3bcf6b4af72708c7ac1cfdfdd5440 Mon Sep 17 00:00:00 2001 From: Fraser Tweedale Date: Wed, 11 May

Re: [Freeipa-devel] [DESIGN] Time-Based HBAC Policies

2016-05-17 Thread Stanislav Laznicka
On 05/17/2016 12:40 PM, Petr Spacek wrote: On 13.5.2016 13:50, Stanislav Laznicka wrote: Hello list, We had a discussion today over integrating the Time Rules into the CLI and WebUI and a problem came up with with the current solution. It seems that while having templating handled by CoSTemplat