Re: [Freeipa-devel] [PATCH 0050-0051] Topology fixes for CA suffix

2016-06-24 Thread Petr Vobornik
On 06/23/2016 05:30 PM, Stanislav Laznicka wrote: > On 06/23/2016 04:38 PM, Petr Vobornik wrote: >> On 06/23/2016 04:20 PM, Stanislav Laznicka wrote: >>> Hello, >>> >>> attached are patches fixing the logic mentioned in >>> https://fedorahosted.org/freeipa/ticket/5967. >>> >>> >> If server

Re: [Freeipa-devel] [PATCH 0050-0051] Topology fixes for CA suffix

2016-06-24 Thread Stanislav Laznicka
On 06/24/2016 11:52 AM, Martin Babinsky wrote: On 06/24/2016 11:30 AM, Petr Vobornik wrote: On 06/23/2016 05:30 PM, Stanislav Laznicka wrote: On 06/23/2016 04:38 PM, Petr Vobornik wrote: On 06/23/2016 04:20 PM, Stanislav Laznicka wrote: Hello, attached are patches fixing the logic mentioned

Re: [Freeipa-devel] [PATCH 0096] Add authentication indicators support to Host objects

2016-06-24 Thread Martin Basti
On 24.06.2016 15:11, Sumit Bose wrote: On Tue, Jun 21, 2016 at 02:25:49PM -0400, Nathaniel McCallum wrote: https://fedorahosted.org/freeipa/ticket/433 The patch works for me as expected, but the API.txt update is missing in the patch. bye, Sumit There are no updated managed permissions

Re: [Freeipa-devel] [PATCH] 959 mod_auth_gssapi: enable unique credential caches names

2016-06-24 Thread Stanislav Laznicka
On 06/24/2016 03:11 PM, Martin Basti wrote: On 23.06.2016 17:46, Robbie Harwood wrote: Petr Vobornik writes: mod_auth_gssapi > 1.4.0 implements support for unique ccaches names. Excited to see this appear! Sessions are not in use so there's no need to worry about a

Re: [Freeipa-devel] [PATCH] 959 mod_auth_gssapi: enable unique credential caches names

2016-06-24 Thread Martin Basti
On 24.06.2016 16:13, Martin Basti wrote: On 24.06.2016 16:03, Stanislav Laznicka wrote: On 06/24/2016 03:11 PM, Martin Basti wrote: On 23.06.2016 17:46, Robbie Harwood wrote: Petr Vobornik writes: mod_auth_gssapi > 1.4.0 implements support for unique ccaches

Re: [Freeipa-devel] [PATCH] 959 mod_auth_gssapi: enable unique credential caches names

2016-06-24 Thread Martin Basti
On 23.06.2016 17:46, Robbie Harwood wrote: Petr Vobornik writes: mod_auth_gssapi > 1.4.0 implements support for unique ccaches names. Excited to see this appear! Sessions are not in use so there's no need to worry about a sweeper. This looks correct to me. Thanks

Re: [Freeipa-devel] [PATCH 0096] Add authentication indicators support to Host objects

2016-06-24 Thread Sumit Bose
On Tue, Jun 21, 2016 at 02:25:49PM -0400, Nathaniel McCallum wrote: > https://fedorahosted.org/freeipa/ticket/433 The patch works for me as expected, but the API.txt update is missing in the patch. bye, Sumit > From c7254a9dd182b34665b50c45c5ece42a3cbc56e2 Mon Sep 17 00:00:00 2001 > From:

Re: [Freeipa-devel] [PATCH 0043] Stop uninstaller from failing if a service can't be started

2016-06-24 Thread Stanislav Laznicka
On 06/21/2016 04:39 PM, Martin Basti wrote: On 14.06.2016 17:26, Stanislav Laznicka wrote: -signerd_service.start() +try: +signerd_service.start() +except Exception as e: +root_logger.error("Unable to start '{svcname}':

Re: [Freeipa-devel] [PATCH 0043] Stop uninstaller from failing if a service can't be started

2016-06-24 Thread Martin Basti
On 24.06.2016 15:50, Stanislav Laznicka wrote: On 06/21/2016 04:39 PM, Martin Basti wrote: On 14.06.2016 17:26, Stanislav Laznicka wrote: -signerd_service.start() +try: +signerd_service.start() +except Exception as e: +

[Freeipa-devel] [PATCH 0165] IPA API: Do not force setting krbCanonicalName on newly created entries

2016-06-24 Thread Martin Babinsky
This patch reverts commits 705f66f7490c64de1adc129221b31927616c485 and 06d945a04607dc36e25af78688b4295420489fb9 responsible for https://fedorahosted.org/freeipa/ticket/5996 This should unblock replica promotion. -- Martin^3 Babinsky From ff2e26a41189d4192255e5244b5a5cb993b9b258 Mon Sep 17

Re: [Freeipa-devel] [PATCH] 959 mod_auth_gssapi: enable unique credential caches names

2016-06-24 Thread Martin Basti
On 24.06.2016 16:03, Stanislav Laznicka wrote: On 06/24/2016 03:11 PM, Martin Basti wrote: On 23.06.2016 17:46, Robbie Harwood wrote: Petr Vobornik writes: mod_auth_gssapi > 1.4.0 implements support for unique ccaches names. Excited to see this appear! Sessions are

Re: [Freeipa-devel] [PATCH 0043] Stop uninstaller from failing if a service can't be started

2016-06-24 Thread Stanislav Laznicka
On 06/24/2016 04:04 PM, Martin Basti wrote: On 24.06.2016 15:50, Stanislav Laznicka wrote: On 06/21/2016 04:39 PM, Martin Basti wrote: On 14.06.2016 17:26, Stanislav Laznicka wrote: -signerd_service.start() +try: +signerd_service.start() +

Re: [Freeipa-devel] [PATCH 0050-0051] Topology fixes for CA suffix

2016-06-24 Thread Petr Vobornik
On 06/24/2016 12:47 PM, Stanislav Laznicka wrote: > On 06/24/2016 11:52 AM, Martin Babinsky wrote: >> On 06/24/2016 11:30 AM, Petr Vobornik wrote: >>> On 06/23/2016 05:30 PM, Stanislav Laznicka wrote: On 06/23/2016 04:38 PM, Petr Vobornik wrote: > On 06/23/2016 04:20 PM, Stanislav

Re: [Freeipa-devel] [PATCH] 0156 extdom: add certificate request

2016-06-24 Thread Martin Basti
On 22.06.2016 23:20, Lukas Slebodnik wrote: On (22/06/16 11:57), Martin Basti wrote: On 09.06.2016 21:02, Martin Basti wrote: On 09.06.2016 14:45, Martin Basti wrote: On 09.06.2016 14:42, Martin Basti wrote: On 09.06.2016 14:38, Lukas Slebodnik wrote: On (09/06/16 14:29), Martin Basti

[Freeipa-devel] [PATCH 0052] Added missing nsSystemIndex attributes to .update file

2016-06-24 Thread Stanislav Laznicka
https://fedorahosted.org/freeipa/ticket/5947 From e177f6377a84691ba1cdb45ff39488d5d8f8f34d Mon Sep 17 00:00:00 2001 From: Stanislav Laznicka Date: Fri, 24 Jun 2016 14:21:01 +0200 Subject: [PATCH] Add missing nsSystemIndex attributes

Re: [Freeipa-devel] [PATCH] 0020 Enable password change extop to apply on virtual entry like the entry in compat tree

2016-06-24 Thread Martin Basti
On 22.06.2016 19:02, Alexander Bokovoy wrote: On Wed, 22 Jun 2016, thierry bordaz wrote: I think FreeIPA also needs to raise dependency to slapi-nis >= 0.56.0 for this. Testing with slapi-nis 0.56.0-2, successful update of password from compat tree users. Great, ACK! Pushed to master:

Re: [Freeipa-devel] [PATCH] 0156 extdom: add certificate request

2016-06-24 Thread Sumit Bose
On Fri, Jun 24, 2016 at 02:00:24PM +0200, Martin Basti wrote: > > > On 22.06.2016 23:20, Lukas Slebodnik wrote: > > On (22/06/16 11:57), Martin Basti wrote: > > > > > > On 09.06.2016 21:02, Martin Basti wrote: > > > > > > > > On 09.06.2016 14:45, Martin Basti wrote: > > > > > > > > > > On

Re: [Freeipa-devel] [PATCH 0021][Tests] Fix failing ipatests/test_ipaserver/test_rpcserver.py

2016-06-24 Thread Oleg Fayans
ACK On 06/24/2016 10:29 AM, Lenka Doudova wrote: > Hi, > > attaching patch for one of the failing tests. Failure caused by an > assertion that was no longer valid. > > Lenka > > > -- Oleg Fayans Quality Engineer FreeIPA team RedHat. -- Manage your subscription for the Freeipa-devel

Re: [Freeipa-devel] [PATCH 0021][Tests] Fix failing ipatests/test_ipaserver/test_rpcserver.py

2016-06-24 Thread Martin Basti
On 24.06.2016 14:11, Oleg Fayans wrote: ACK On 06/24/2016 10:29 AM, Lenka Doudova wrote: Hi, attaching patch for one of the failing tests. Failure caused by an assertion that was no longer valid. Lenka Pushed to master: d64513f1ff89f49d216d229cd4f988a485f0acc4 -- Manage your

Re: [Freeipa-devel] [PATCH] 0156 extdom: add certificate request

2016-06-24 Thread Martin Basti
On 24.06.2016 14:59, Sumit Bose wrote: On Fri, Jun 24, 2016 at 02:00:24PM +0200, Martin Basti wrote: On 22.06.2016 23:20, Lukas Slebodnik wrote: On (22/06/16 11:57), Martin Basti wrote: On 09.06.2016 21:02, Martin Basti wrote: On 09.06.2016 14:45, Martin Basti wrote: On 09.06.2016 14:42,

Re: [Freeipa-devel] [PATCH] 0077 Check for CA subject name collision before attempting creation

2016-06-24 Thread Milan Kubík
On 06/24/2016 09:34 AM, Fraser Tweedale wrote: Hi, Attached patch fixes https://fedorahosted.org/freeipa/ticket/5981. Cheers, Fraser Thanks for the patch, ACK. -- Milan Kubik -- Manage your subscription for the Freeipa-devel mailing list:

Re: [Freeipa-devel] [PATCH 0538-0540] DNS locations: epilogue

2016-06-24 Thread Martin Basti
On 23.06.2016 18:26, Petr Spacek wrote: On 23.6.2016 16:38, Martin Basti wrote: Patches attached. https://fedorahosted.org/freeipa/ticket/2008 freeipa-mbasti-0538-Revert-DNS-Locations-do-not-generate-location-record.patch From 28499422115cbfbb343033511319c7c8710e1ff5 Mon Sep 17

[Freeipa-devel] [PATCH] 0062, 63: webui: Add button for 'server-del' command

2016-06-24 Thread Pavel Vomacka
Hello, please review attached patches, they add 'Delete Server' button. -- Pavel^3 Vomacka From d8100e60bb7cf248f65191223e3e11340372d193 Mon Sep 17 00:00:00 2001 From: Pavel Vomacka Date: Fri, 24 Jun 2016 12:07:03 +0200 Subject: [PATCH 1/2] Add support to change button

[Freeipa-devel] [PATCH 0164] Fix incorrect construction of service principal during replica cleanup

2016-06-24 Thread Martin Babinsky
https://fedorahosted.org/freeipa/ticket/5985 -- Martin^3 Babinsky From 1fccd557a5582f49b715e57552a27b29d1325add Mon Sep 17 00:00:00 2001 From: Martin Babinsky Date: Fri, 24 Jun 2016 10:32:11 +0200 Subject: [PATCH] Fix incorrect construction of service principal during

Re: [Freeipa-devel] [PATCH] 498 Update Contributors.txt

2016-06-24 Thread Martin Basti
On 24.06.2016 08:24, Martin Kosek wrote: On 06/23/2016 07:39 PM, Lukas Slebodnik wrote: On (23/06/16 15:22), Martin Kosek wrote: Update .mailmap to fix wrong commit author and re-generate the Developer contributor list. -- Martin Kosek Manager, Software Engineering -

[Freeipa-devel] [PATCH 0021][Tests] Fix failing ipatests/test_ipaserver/test_rpcserver.py

2016-06-24 Thread Lenka Doudova
Hi, attaching patch for one of the failing tests. Failure caused by an assertion that was no longer valid. Lenka From 9eb1ec2335145916ce0e83a6f2a9ca6bac056682 Mon Sep 17 00:00:00 2001 From: Lenka Doudova Date: Fri, 24 Jun 2016 10:24:40 +0200 Subject: [PATCH] Tests: Fix

Re: [Freeipa-devel] [patch 0038-0040] Sub CA test patches

2016-06-24 Thread Milan Kubík
On 06/24/2016 03:42 AM, Fraser Tweedale wrote: On Tue, Jun 21, 2016 at 05:01:35PM +0200, Milan Kubík wrote: Hi Fraser and list, I have made changes to the test plan on the wiki [1] according to the information in "[Testplan review] Sub CAs" thread. I also implemented the tests in the test

Re: [Freeipa-devel] [PATCH] 0156 extdom: add certificate request

2016-06-24 Thread Martin Basti
On 24.06.2016 15:09, Martin Basti wrote: On 24.06.2016 14:59, Sumit Bose wrote: On Fri, Jun 24, 2016 at 02:00:24PM +0200, Martin Basti wrote: On 22.06.2016 23:20, Lukas Slebodnik wrote: On (22/06/16 11:57), Martin Basti wrote: On 09.06.2016 21:02, Martin Basti wrote: On 09.06.2016

Re: [Freeipa-devel] [PATCH] 0156 extdom: add certificate request

2016-06-24 Thread Lukas Slebodnik
On (24/06/16 17:53), Martin Basti wrote: > > >On 24.06.2016 15:09, Martin Basti wrote: >> >> >> On 24.06.2016 14:59, Sumit Bose wrote: >> > On Fri, Jun 24, 2016 at 02:00:24PM +0200, Martin Basti wrote: >> > > >> > > On 22.06.2016 23:20, Lukas Slebodnik wrote: >> > > > On (22/06/16 11:57),

Re: [Freeipa-devel] [PATCH] 0156 extdom: add certificate request

2016-06-24 Thread Alexander Bokovoy
On Fri, 24 Jun 2016, Sumit Bose wrote: On Fri, Jun 24, 2016 at 05:53:27PM +0200, Martin Basti wrote: On 24.06.2016 15:09, Martin Basti wrote: > > > On 24.06.2016 14:59, Sumit Bose wrote: > > On Fri, Jun 24, 2016 at 02:00:24PM +0200, Martin Basti wrote: > > > > > > On 22.06.2016 23:20, Lukas

Re: [Freeipa-devel] [PATCH] 0156 extdom: add certificate request

2016-06-24 Thread Alexander Bokovoy
On Fri, 24 Jun 2016, Lukas Slebodnik wrote: > > ah sorry, since 1.14.0 is not release yet we use 1.13.9x to track the > > alpha and beta releases and still have incrementing version numbers. So, > > it might be better to use '>= 1.13.90' in the spec file instead of > > '1.14.0'. > +1, At this

Re: [Freeipa-devel] [PATCH] 0156 extdom: add certificate request

2016-06-24 Thread Lukas Slebodnik
On (24/06/16 20:00), Alexander Bokovoy wrote: >On Fri, 24 Jun 2016, Sumit Bose wrote: >> On Fri, Jun 24, 2016 at 05:53:27PM +0200, Martin Basti wrote: >> > >> > >> > On 24.06.2016 15:09, Martin Basti wrote: >> > > >> > > >> > > On 24.06.2016 14:59, Sumit Bose wrote: >> > > > On Fri, Jun 24, 2016

Re: [Freeipa-devel] [PATCH] 0156 extdom: add certificate request

2016-06-24 Thread Alexander Bokovoy
On Fri, 24 Jun 2016, Lukas Slebodnik wrote: On (24/06/16 20:00), Alexander Bokovoy wrote: On Fri, 24 Jun 2016, Sumit Bose wrote: On Fri, Jun 24, 2016 at 05:53:27PM +0200, Martin Basti wrote: > > > On 24.06.2016 15:09, Martin Basti wrote: > > > > > > On 24.06.2016 14:59, Sumit Bose wrote: > > >

Re: [Freeipa-devel] [PATCH] 0156 extdom: add certificate request

2016-06-24 Thread Lukas Slebodnik
On (24/06/16 20:43), Alexander Bokovoy wrote: >On Fri, 24 Jun 2016, Lukas Slebodnik wrote: >> On (24/06/16 20:00), Alexander Bokovoy wrote: >> > On Fri, 24 Jun 2016, Sumit Bose wrote: >> > > On Fri, Jun 24, 2016 at 05:53:27PM +0200, Martin Basti wrote: >> > > > >> > > > >> > > > On 24.06.2016

Re: [Freeipa-devel] [PATCH] 0156 extdom: add certificate request

2016-06-24 Thread Lukas Slebodnik
On (24/06/16 21:09), Alexander Bokovoy wrote: >On Fri, 24 Jun 2016, Lukas Slebodnik wrote: >> > > > > ah sorry, since 1.14.0 is not release yet we use 1.13.9x to track the >> > > > > alpha and beta releases and still have incrementing version numbers. >> > > > > So, >> > > > > it might be better

Re: [Freeipa-devel] [PATCH] 0072..0075 Lightweight CA renewal

2016-06-24 Thread Fraser Tweedale
On Thu, Jun 23, 2016 at 09:51:02AM +0200, Jan Cholasta wrote: > Hi, > > On 21.6.2016 08:24, Fraser Tweedale wrote: > > The attached patches add lightweight CA renewal. There are two > > substantive aspects: > > > > 1. The renew_ca_cert updates the serial number in the lightweight > > CA's entry

Re: [Freeipa-devel] [PATCH] 498 Update Contributors.txt

2016-06-24 Thread Martin Kosek
On 06/23/2016 07:39 PM, Lukas Slebodnik wrote: > On (23/06/16 15:22), Martin Kosek wrote: >> Update .mailmap to fix wrong commit author and re-generate >> the Developer contributor list. >> >> -- >> Martin Kosek >> Manager, Software Engineering - Identity Management Team >>

[Freeipa-devel] [PATCH] 0077 Check for CA subject name collision before attempting creation

2016-06-24 Thread Fraser Tweedale
Hi, Attached patch fixes https://fedorahosted.org/freeipa/ticket/5981. Cheers, Fraser From 905bef9ca787cea6ae66e2dbe3df33a2420bbd8b Mon Sep 17 00:00:00 2001 From: Fraser Tweedale Date: Fri, 24 Jun 2016 17:29:51 +1000 Subject: [PATCH] Check for CA subject name collision

[Freeipa-devel] [WIP] Kerberos principal aliases pt. 2

2016-06-24 Thread Martin Babinsky
Hi list, I am furiously working on tickets related to the proper support and API for managing kerberos principal aliases for hosts, users, and services[1-5]. To better track and comment on my progress, I have forked freeipa on git and created a branch for you to test and review. The link is