[Freeipa-devel] [PATCH 684] vault: add missing salt option to vault_mod

2016-08-04 Thread Jan Cholasta
Hi, the attached patch fixes . Pushed under the one-liner rule to master: 1a73477e1561b0a2a66852575010a136edc014a6 Honza -- Jan Cholasta From 4f416db82a6f335e9d727730c782f9ad2b0be20e Mon Sep 17 00:00:00 2001 From: Jan Cholasta

[Freeipa-devel] [Test][patch-0056] Fixed incorrect returncode assert in test

2016-08-04 Thread Oleg Fayans
-- Oleg Fayans Quality Engineer FreeIPA team RedHat. From 8b8732c3d86820124c117c88c6f892d9bb41cbc3 Mon Sep 17 00:00:00 2001 From: Oleg Fayans Date: Thu, 4 Aug 2016 12:42:23 +0200 Subject: [PATCH] Fixed incorrect return code assert The assert checked that the returncode of

[Freeipa-devel] [Tests][patch-0066] Fixed incorrect domainlevel determination in integration tests

2016-08-04 Thread Oleg Fayans
-- Oleg Fayans Quality Engineer FreeIPA team RedHat. From 2deee8b3baeb091904eb7c2ba61b90e669cc8df2 Mon Sep 17 00:00:00 2001 From: Oleg Fayans Date: Thu, 4 Aug 2016 09:22:31 +0200 Subject: [PATCH] Fixed incorrect domainlevel determination in tests

Re: [Freeipa-devel] [PATCH 0196] baseldap: Fix MidairCollision instantiation during entry modification

2016-08-04 Thread Lenka Doudova
On 07/26/2016 05:22 PM, Alexander Bokovoy wrote: On Tue, 26 Jul 2016, Martin Babinsky wrote: Fix for https://fedorahosted.org/freeipa/ticket/6097 Since this issue was found during investigation of other ticket[1], you can test it by performing steps to reproduce #6041, but instead of

[Freeipa-devel] [PATCH 683] install: fix external CA cert validation

2016-08-04 Thread Jan Cholasta
Hi, the attached patch fixes . Pushed under the one-liner rule to: master: a42b456b91cb345e977c6f0febf5c30f15a954d3 ipa-4-3: 44401d26c29e35d38bc94a7a87b9f2dd205e0643 Honza -- Jan Cholasta From 35856043cb92fd99268c4b7afb87909efba74ed7 Mon Sep 17

Re: [Freeipa-devel] [PATCH 0112-7] Speeding up cli help

2016-08-04 Thread David Kupka
On 03/08/16 16:33, Jan Cholasta wrote: On 3.8.2016 16:23, David Kupka wrote: On 21/07/16 10:12, Jan Cholasta wrote: Hi, On 20.7.2016 14:32, David Kupka wrote: On 15/07/16 12:53, David Kupka wrote: Hello! After Honza introduced thin client that builds plugins and commands dynamically from

Re: [Freeipa-devel] [Test][patch-0056] Fixed incorrect returncode assert in test

2016-08-04 Thread Martin Basti
On 04.08.2016 13:38, Oleg Fayans wrote: Pushed to master: 2df047b8c51098bae9224b88dbdf03e5f9504f21 ACK -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

Re: [Freeipa-devel] [PATCH] 0096 caacl: fix regression in rule instantiation

2016-08-04 Thread Martin Basti
On 29.07.2016 06:21, Fraser Tweedale wrote: On Thu, Jul 28, 2016 at 09:56:30AM +0200, Martin Babinsky wrote: On 07/28/2016 03:31 AM, Fraser Tweedale wrote: The attached patch fixes a kerberos.Principal-related regression. Thanks, Fraser Hi Fraser, The ticket you linked in the commit

Re: [Freeipa-devel] [PATCH] 0013 Fix ipa hbactest output

2016-08-04 Thread Florence Blanc-Renaud
On 08/03/2016 05:49 PM, Martin Basti wrote: On 02.08.2016 13:22, Florence Blanc-Renaud wrote: Hi, please find attached a patch related to 'ipa hbactest' producing a Traceback. https://fedorahosted.org/freeipa/ticket/6157 Flo. Hello Flo, 1) can you please move that check, right bellow

Re: [Freeipa-devel] [PATCH] 0013 Fix ipa hbactest output

2016-08-04 Thread Martin Basti
On 04.08.2016 16:19, Florence Blanc-Renaud wrote: On 08/03/2016 05:49 PM, Martin Basti wrote: On 02.08.2016 13:22, Florence Blanc-Renaud wrote: Hi, please find attached a patch related to 'ipa hbactest' producing a Traceback. https://fedorahosted.org/freeipa/ticket/6157 Flo. Hello

Re: [Freeipa-devel] [PATCH] 0001 Added new authentication method

2016-08-04 Thread Jan Pazdziora
On Wed, Aug 03, 2016 at 10:29:52AM +0300, Alexander Bokovoy wrote: > > Got it. One thing I would correct, though, -- don't use kadmin.local, we > do support setting ok_as_delegate on the service principals via IPA CLI: > $ ipa service-mod --help |grep -A1 ok-as-delegate > --ok-as-delegate=BOOL >

Re: [Freeipa-devel] [PATCH 0153] Fix ipa-replica-prepare's error message about missing local CA instanc

2016-08-04 Thread Petr Spacek
On 3.8.2016 22:56, Ben Lipton wrote: > > On 08/01/2016 11:38 AM, Petr Spacek wrote: >> Hello, >> >> Fix ipa-replica-prepare's error message about missing local CA instance >> >> ipa-replica-prepare must be run on a replica with CA or all the certs >> needs to be provided (for CA-less case). >> >>

Re: [Freeipa-devel] [PATCH] 0090, 0092..0094 cert-show: show subject alternative names

2016-08-04 Thread Petr Vobornik
On 07/22/2016 07:13 AM, Fraser Tweedale wrote: > On Tue, Jul 19, 2016 at 08:50:34AM +0200, Jan Cholasta wrote: >> Hi, >> >> On 14.7.2016 13:44, Fraser Tweedale wrote: >>> Hi all, >>> >>> The attached patch includes SANs in cert-show output. If you have >>> certs with esoteric altnames (especially

[Freeipa-devel] External plugin integration

2016-08-04 Thread Alexander Bokovoy
Hi! I've stumbled into an interesting problem. Suppose, I have a plugin that adds schema and a subtree where entries it manages will be stored. This subtree will have ACIs applied based on the plugin permissions' configuration. Now, I put schema file in /usr/ipa/share, and updates file in

Re: [Freeipa-devel] certmonger proxy configuration not possible ?

2016-08-04 Thread Alexander Bokovoy
On Thu, 04 Aug 2016, Marx, Peter wrote: I tried it and found out it can't work this way - when issuing a CSR with getcert, the parameters of this request are normally handed over by getcert to the scep-submit helper. I see no way to intercept these parameters and pass them to the