Re: [Freeipa-devel] [PATCH 0002][Tests] Small fix for dns_plugin tests

2016-07-21 Thread Martin Basti
On 20.07.2016 18:17, Ganna Kaihorodova wrote: Hello! Thank you for review. I attached patch with fixed commit message Best regards, Ganna Kaihorodova Associate Software Quality Engineer - Original Message - From: "Martin Basti" To: "Ganna Kaihorodova"

[Freeipa-devel] [PATCH 0555] AVC: use copy during instalation to keep SELinux context valid

2016-07-21 Thread Martin Basti
https://fedorahosted.org/freeipa/ticket/6111 I was able to reproduce this locally with vagrant, but I haven't been able to reproduce this in LAB, I don't know where differences are (cloud vs desktop fedora?) Patch attached. From 80e95343c0ff3c8ee1bb8628507a31499e5a96f5 Mon Sep 17 00:00:00

[Freeipa-devel] [PATCH 0556] host-del: fix behavior of --updatedns and PTR records

2016-07-21 Thread Martin Basti
https://fedorahosted.org/freeipa/ticket/6060 Patch attached. From e358291a66827518c29250fce303fc00db7bcec4 Mon Sep 17 00:00:00 2001 From: Martin Basti Date: Thu, 21 Jul 2016 13:18:34 +0200 Subject: [PATCH] Host-del: fix behavior of --updatedns and PTR records * target for

[Freeipa-devel] [PATCH] 0095 cert-request: allow directoryName in SAN extension

2016-07-21 Thread Fraser Tweedale
While I was poking around SAN-processing code, I decided to implement a small enhancement: allowing the subject principal's DN to appear in SAN. https://fedorahosted.org/freeipa/ticket/6112 Patch depends on my other patches 0090, 0092, 0093, 0094. Thanks, Fraser From

Re: [Freeipa-devel] [PATCH] 0090, 0092..0094 cert-show: show subject alternative names

2016-07-21 Thread Fraser Tweedale
On Tue, Jul 19, 2016 at 08:50:34AM +0200, Jan Cholasta wrote: > Hi, > > On 14.7.2016 13:44, Fraser Tweedale wrote: > > Hi all, > > > > The attached patch includes SANs in cert-show output. If you have > > certs with esoteric altnames (especially any that are more than just > > ASN.1 string

Re: [Freeipa-devel] [PATCH 0112-7] Speeding up cli help

2016-07-21 Thread Jan Cholasta
Hi, On 20.7.2016 14:32, David Kupka wrote: On 15/07/16 12:53, David Kupka wrote: Hello! After Honza introduced thin client that builds plugins and commands dynamically from schema client became much slower. This is only logical, instead of importing a module client now must fetch the schema

Re: [Freeipa-devel] [PATCH 190] expose `--secret` option in radiusproxy-* commands

2016-07-21 Thread Martin Babinsky
On 07/20/2016 12:10 PM, Martin Babinsky wrote: On 07/19/2016 12:32 PM, Jan Cholasta wrote: Hi, On 18.7.2016 13:51, Martin Babinsky wrote: https://fedorahosted.org/freeipa/ticket/6078 I don't think we want the secret searchable. Add a 'no_search' flag to the param to fix that. Honza

Re: [Freeipa-devel] [PATCH 0001][Tests] Fix for dns_plugin tests

2016-07-21 Thread Ganna Kaihorodova
Hello! Thank you for review and notes about patch format. I will keep it in mind. I agree that this is not the best way to fix it and I was about to bring up topic of strange behavior of named/bind-dyndb-ldap. Because without restart named service I have one number of failing tests and after

[Freeipa-devel] [PATCH 0194] harden the check for trust namespace overlap in new principals

2016-07-21 Thread Martin Babinsky
'*-add-principal' would crash with error if the trusted domains did not have any UPN suffixes or NETBIOS name associated with them. This patch fixes that. Big thanks to Milan who found and reported the issue during writing tests for the feature. https://fedorahosted.org/freeipa/ticket/6099

Re: [Freeipa-devel] [PATCH] 0211-0212 Make sure --raw option works for trust-add

2016-07-21 Thread Jan Cholasta
On 19.7.2016 11:32, Alexander Bokovoy wrote: On Tue, 19 Jul 2016, Jan Cholasta wrote: On 18.7.2016 12:06, Martin Babinsky wrote: On 07/16/2016 12:50 PM, Alexander Bokovoy wrote: Hi, I had some time and was blocked by these bugs to do my tickets so I actually fixed these three problems that

Re: [Freeipa-devel] [PATCH 0001][Tests] Fix for dns_plugin tests

2016-07-21 Thread Martin Basti
On 21.07.2016 12:24, Ganna Kaihorodova wrote: Hello! Thank you for review and notes about patch format. I will keep it in mind. I agree that this is not the best way to fix it and I was about to bring up topic of strange behavior of named/bind-dyndb-ldap. Because without restart named

Re: [Freeipa-devel] [PATCH] 963 unite log file name of ipa-ca-install

2016-07-21 Thread Petr Vobornik
On 07/19/2016 09:27 AM, Petr Vobornik wrote: > On 07/19/2016 08:01 AM, Jan Cholasta wrote: >> Hi, >> >> On 18.7.2016 18:50, Florence Blanc-Renaud wrote: >>> On 07/15/2016 04:29 PM, Petr Vobornik wrote: ipa-ca-install said that it used /var/log/ipareplica-ca-install.log but in fact

Re: [Freeipa-devel] [DESIGN] Text-based rules for CSR autogeneration using Jinja2

2016-07-21 Thread Petr Spacek
On 20.7.2016 19:25, Ben Lipton wrote: > On 07/20/2016 12:21 PM, Simo Sorce wrote: >> On Wed, 2016-07-20 at 12:14 -0400, Ben Lipton wrote: >>> On 07/20/2016 10:37 AM, Simo Sorce wrote: On Wed, 2016-07-20 at 10:17 -0400, Ben Lipton wrote: > On 07/20/2016 06:27 AM, Simo Sorce wrote: >>

Re: [Freeipa-devel] [PATCH] 963 unite log file name of ipa-ca-install

2016-07-21 Thread Martin Babinsky
On 07/21/2016 05:22 PM, Petr Vobornik wrote: On 07/19/2016 09:27 AM, Petr Vobornik wrote: On 07/19/2016 08:01 AM, Jan Cholasta wrote: Hi, On 18.7.2016 18:50, Florence Blanc-Renaud wrote: On 07/15/2016 04:29 PM, Petr Vobornik wrote: ipa-ca-install said that it used

[Freeipa-devel] [PATCH] 0083: webui: remove full name column from user to user group adder dialog

2016-07-21 Thread Pavel Vomacka
Remove full name from adding user to user group dialog As the 'cn' is not in the response of user-show there is empty column in adder dialog. Therefore the column was removed. https://fedorahosted.org/freeipa/ticket/6055 -- Pavel^3 Vomacka From 336a37f1c5d1ed34c7abbd75dd7dd63a1f274d9d Mon

Re: [Freeipa-devel] [PATCH] 963 unite log file name of ipa-ca-install

2016-07-21 Thread Petr Vobornik
On 07/21/2016 05:47 PM, Martin Babinsky wrote: > On 07/21/2016 05:22 PM, Petr Vobornik wrote: >> On 07/19/2016 09:27 AM, Petr Vobornik wrote: >>> On 07/19/2016 08:01 AM, Jan Cholasta wrote: Hi, On 18.7.2016 18:50, Florence Blanc-Renaud wrote: > On 07/15/2016 04:29 PM, Petr

[Freeipa-devel] [DRAFT] FreeIPA 4.3.2 release notes

2016-07-21 Thread Petr Vobornik
Hi all, this is a draft of release notes for upcoming 4.3.2 release - http://www.freeipa.org/page/Releases/4.3.2 Comments/updates welcome! Regards, -- Petr Vobornik -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] [PATCH] 963 unite log file name of ipa-ca-install

2016-07-21 Thread Martin Babinsky
On 07/21/2016 05:49 PM, Petr Vobornik wrote: On 07/21/2016 05:47 PM, Martin Babinsky wrote: On 07/21/2016 05:22 PM, Petr Vobornik wrote: On 07/19/2016 09:27 AM, Petr Vobornik wrote: On 07/19/2016 08:01 AM, Jan Cholasta wrote: Hi, On 18.7.2016 18:50, Florence Blanc-Renaud wrote: On