Re: [Freeipa-devel] [PATCH] 0090, 0092..0094 cert-show: show subject alternative names

2016-08-15 Thread Fraser Tweedale
Thanks for reviews. Rebased and updated patches attached (and one new patch). No substantive changes to 92..94. Patch order is: 92-2, 93-2, 94-2, 98, 90-3 Other comments inline. Thanks, Fraser On Fri, Aug 12, 2016 at 11:33:28AM +0200, Jan Cholasta wrote: > Patch 0092: ACK > > Patch 0093: AC

[Freeipa-devel] default debug_level of sssd

2016-08-15 Thread Oleg Fayans
Hi all, Does anyone know what is the default debug_level for sssd daemon in ipa? We've found out that some tests (mainly basic-trust) generate huge volumes of sssd logs which we have to store. A quick glance into the logs show that these log every tiny bit of really low level information that

Re: [Freeipa-devel] default debug_level of sssd

2016-08-15 Thread Alexander Bokovoy
On Mon, 15 Aug 2016, Oleg Fayans wrote: Hi all, Does anyone know what is the default debug_level for sssd daemon in ipa? We've found out that some tests (mainly basic-trust) generate huge volumes of sssd logs which we have to store. A quick glance into the logs show that these log every tiny

Re: [Freeipa-devel] [PATCH 0003][Tests] Fix for integration tests replication layouts

2016-08-15 Thread Ganna Kaihorodova
Hello, Petr! Yes, this is exactly what I meant. Martin Basti educated me with that. Best regards, Ganna Kaihorodova Associate Software Quality Engineer - Original Message - From: "Petr Spacek" To: freeipa-devel@redhat.com Sent: Friday, August 12, 2016 6:58:54 PM Subject: Re: [Freeipa-

[Freeipa-devel] [PATCH 0031, 0032][Tests] Fixes for failing test_ipalib/test_messages tests

2016-08-15 Thread Lenka Doudova
Hi, attached are patches that are fixing 3 failing tests in test_ipalib/test_messages.py. Lenka From 11bd09d8b82630b959deebe265320221db815540 Mon Sep 17 00:00:00 2001 From: Lenka Doudova Date: Mon, 15 Aug 2016 11:10:57 +0200 Subject: [PATCH 1/2] Fix malformed or missing docstrings in ipalib

Re: [Freeipa-devel] [PATCH 0003][Tests] Fix for integration tests replication layouts

2016-08-15 Thread Ganna Kaihorodova
Hello! I fixed typo in commit message. Best regards, Ganna Kaihorodova Associate Software Quality Engineer - Original Message - From: "Ganna Kaihorodova" To: "Petr Spacek" Cc: freeipa-devel@redhat.com Sent: Monday, August 15, 2016 10:55:08 AM Subject: Re: [Freeipa-devel] [PATCH 0003][T

Re: [Freeipa-devel] [PATCH] [WIP] Allow full customisability of CA subject name

2016-08-15 Thread Jan Cholasta
On 19.7.2016 12:05, Jan Cholasta wrote: On 19.7.2016 11:54, Fraser Tweedale wrote: On Tue, Jul 19, 2016 at 09:36:17AM +0200, Jan Cholasta wrote: Hi, On 15.7.2016 07:05, Fraser Tweedale wrote: On Fri, Jul 15, 2016 at 03:04:48PM +1000, Fraser Tweedale wrote: The attached patch is a work in pro

Re: [Freeipa-devel] [PATCH 0063] Raise error on topology disconnect/last-role-host removal during server uninstall

2016-08-15 Thread Martin Babinsky
On 08/12/2016 12:08 PM, Stanislav Laznicka wrote: Hello, topology disconnect/last-role-host removal errors would just be logged during server uninstall even if ignore options are not present. The host would still appear in the topology even after "successful" uninstall. https://fedorahosted.org

Re: [Freeipa-devel] [PATCH 0063] Raise error on topology disconnect/last-role-host removal during server uninstall

2016-08-15 Thread Martin Babinsky
On 08/15/2016 02:13 PM, Martin Babinsky wrote: On 08/12/2016 12:08 PM, Stanislav Laznicka wrote: Hello, topology disconnect/last-role-host removal errors would just be logged during server uninstall even if ignore options are not present. The host would still appear in the topology even after "

[Freeipa-devel] [PATCH 0033][Tests] Fix test_ipalib/test_output failing due to change of Output class behaviour

2016-08-15 Thread Lenka Doudova
Hi, attaching patch for https://fedorahosted.org/freeipa/ticket/6189 Lenka From 9e0591f6099c587218aa8155113d3e7bd85fe9f4 Mon Sep 17 00:00:00 2001 From: Lenka Doudova Date: Mon, 15 Aug 2016 14:24:11 +0200 Subject: [PATCH] Tests: test_ipalib/test_output fails due to change of Output behaviour

[Freeipa-devel] [patch 0052] ipatests: Fix wrong fixture in kerberos principal alias test

2016-08-15 Thread Milan KubĂ­k
Fixes issue in ticket https://fedorahosted.org/freeipa/ticket/6197 -- Milan Kubik From b0a731c2b655c331001c9cb217f66045c9c2fdb7 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Milan=20Kub=C3=ADk?= Date: Mon, 15 Aug 2016 14:31:48 +0200 Subject: [PATCH] ipatests: Fix wrong fixture in kerberos principal

Re: [Freeipa-devel] [PATCH 0004-0012] Automatic CSR generation

2016-08-15 Thread Petr Spacek
On 2.8.2016 05:57, Fraser Tweedale wrote: >> > Hah! This is what I get for thinking I know what the output has to look >> > like, and not testing all the way through to requesting the cert. I'll >> > change the profile to generate a subject with CN= instead of UID=. Updated >> > patch is attached.

Re: [Freeipa-devel] [PATCH] [WIP] Allow full customisability of CA subject name

2016-08-15 Thread Fraser Tweedale
On Mon, Aug 15, 2016 at 02:08:54PM +0200, Jan Cholasta wrote: > On 19.7.2016 12:05, Jan Cholasta wrote: > > On 19.7.2016 11:54, Fraser Tweedale wrote: > > > On Tue, Jul 19, 2016 at 09:36:17AM +0200, Jan Cholasta wrote: > > > > Hi, > > > > > > > > On 15.7.2016 07:05, Fraser Tweedale wrote: > > > >

Re: [Freeipa-devel] [PATCH] 0090, 0092..0094 cert-show: show subject alternative names

2016-08-15 Thread Fraser Tweedale
On Mon, Aug 15, 2016 at 07:48:22AM +0200, Jan Cholasta wrote: > On 12.8.2016 18:57, Petr Spacek wrote: > > On 12.8.2016 11:33, Jan Cholasta wrote: > > > On 4.8.2016 18:18, Petr Vobornik wrote: > > > > On 07/22/2016 07:13 AM, Fraser Tweedale wrote: > > > > > On Tue, Jul 19, 2016 at 08:50:34AM +0200,

Re: [Freeipa-devel] [PATCH 0004-0012] Automatic CSR generation

2016-08-15 Thread Fraser Tweedale
On Mon, Aug 15, 2016 at 02:52:46PM +0200, Petr Spacek wrote: > On 2.8.2016 05:57, Fraser Tweedale wrote: > >> > Hah! This is what I get for thinking I know what the output has to look > >> > like, and not testing all the way through to requesting the cert. I'll > >> > change the profile to generate

Re: [Freeipa-devel] [PATCH] 0090, 0092..0094 cert-show: show subject alternative names

2016-08-15 Thread Petr Spacek
On 15.8.2016 15:07, Fraser Tweedale wrote: > On Mon, Aug 15, 2016 at 07:48:22AM +0200, Jan Cholasta wrote: >> On 12.8.2016 18:57, Petr Spacek wrote: >>> On 12.8.2016 11:33, Jan Cholasta wrote: On 4.8.2016 18:18, Petr Vobornik wrote: > On 07/22/2016 07:13 AM, Fraser Tweedale wrote: >> O

Re: [Freeipa-devel] [PATCH 0004-0012] Automatic CSR generation

2016-08-15 Thread Petr Spacek
On 15.8.2016 15:16, Fraser Tweedale wrote: > On Mon, Aug 15, 2016 at 02:52:46PM +0200, Petr Spacek wrote: >> On 2.8.2016 05:57, Fraser Tweedale wrote: > Hah! This is what I get for thinking I know what the output has to look > like, and not testing all the way through to requesting the cert

Re: [Freeipa-devel] [PATCH 0004-0012] Automatic CSR generation

2016-08-15 Thread Fraser Tweedale
On Mon, Aug 15, 2016 at 03:31:20PM +0200, Petr Spacek wrote: > On 15.8.2016 15:16, Fraser Tweedale wrote: > > On Mon, Aug 15, 2016 at 02:52:46PM +0200, Petr Spacek wrote: > >> On 2.8.2016 05:57, Fraser Tweedale wrote: > > Hah! This is what I get for thinking I know what the output has to look >

Re: [Freeipa-devel] [PATCH 0004-0012] Automatic CSR generation

2016-08-15 Thread Petr Spacek
On 15.8.2016 15:54, Fraser Tweedale wrote: > On Mon, Aug 15, 2016 at 03:31:20PM +0200, Petr Spacek wrote: >> On 15.8.2016 15:16, Fraser Tweedale wrote: >>> On Mon, Aug 15, 2016 at 02:52:46PM +0200, Petr Spacek wrote: On 2.8.2016 05:57, Fraser Tweedale wrote: >>> Hah! This is what I get for

[Freeipa-devel] [PATCH] 0207, 0218-0219 Solving trust conflicts and external trust topology fixes

2016-08-15 Thread Alexander Bokovoy
Hi! Attached are trust-related patches. 0207 is a pre-requisite. I did send it before, it is re-formatting of the ipaserver/dcerpc.py to be close to PEP8 requirements. 0218 is an automated trust topology conflict resolver for DNS namespace conflicts. Read the commit message for details, and als

Re: [Freeipa-devel] [PATCH] 0207, 0218-0219 Solving trust conflicts and external trust topology fixes

2016-08-15 Thread Alexander Bokovoy
On Mon, 15 Aug 2016, Alexander Bokovoy wrote: Hi! Attached are trust-related patches. 0207 is a pre-requisite. I did send it before, it is re-formatting of the ipaserver/dcerpc.py to be close to PEP8 requirements. 0218 is an automated trust topology conflict resolver for DNS namespace conflict

Re: [Freeipa-devel] [PATCH 0004-0012] Automatic CSR generation

2016-08-15 Thread Fraser Tweedale
On Mon, Aug 15, 2016 at 03:58:40PM +0200, Petr Spacek wrote: > On 15.8.2016 15:54, Fraser Tweedale wrote: > > On Mon, Aug 15, 2016 at 03:31:20PM +0200, Petr Spacek wrote: > >> On 15.8.2016 15:16, Fraser Tweedale wrote: > >>> On Mon, Aug 15, 2016 at 02:52:46PM +0200, Petr Spacek wrote: > On 2.8

Re: [Freeipa-devel] [PATCH] 0097 Add options to write lightweight CA cert or chain to file

2016-08-15 Thread Fraser Tweedale
On Mon, Aug 15, 2016 at 08:19:33AM +0200, Jan Cholasta wrote: > On 9.8.2016 16:47, Fraser Tweedale wrote: > > On Mon, Aug 08, 2016 at 10:49:27AM +0200, Jan Cholasta wrote: > > > On 8.8.2016 09:06, Fraser Tweedale wrote: > > > > On Mon, Aug 08, 2016 at 08:54:05AM +0200, Jan Cholasta wrote: > > > > >

Re: [Freeipa-devel] [PATCH] 0097 Add options to write lightweight CA cert or chain to file

2016-08-15 Thread Jan Cholasta
On 16.8.2016 07:24, Fraser Tweedale wrote: On Mon, Aug 15, 2016 at 08:19:33AM +0200, Jan Cholasta wrote: On 9.8.2016 16:47, Fraser Tweedale wrote: On Mon, Aug 08, 2016 at 10:49:27AM +0200, Jan Cholasta wrote: On 8.8.2016 09:06, Fraser Tweedale wrote: On Mon, Aug 08, 2016 at 08:54:05AM +0200,

Re: [Freeipa-devel] [DESIGN][UPDATE] Time-Based HBAC Policies

2016-08-15 Thread Stanislav Laznicka
On 08/12/2016 06:48 PM, Petr Spacek wrote: On 11.8.2016 12:34, Stanislav Laznicka wrote: Hello, I updated the design of the Time-Based HBAC Policies according to the discussion we led here earlier. Please check the design page http://www.freeipa.org/page/V4/Time-Based_Account_Policies. The bigg

Re: [Freeipa-devel] [PATCH] 0090, 0092..0094 cert-show: show subject alternative names

2016-08-15 Thread Lukas Slebodnik
On (15/08/16 15:30), Petr Spacek wrote: >On 15.8.2016 15:07, Fraser Tweedale wrote: >> On Mon, Aug 15, 2016 at 07:48:22AM +0200, Jan Cholasta wrote: >>> On 12.8.2016 18:57, Petr Spacek wrote: On 12.8.2016 11:33, Jan Cholasta wrote: > On 4.8.2016 18:18, Petr Vobornik wrote: >> On 07/22/

Re: [Freeipa-devel] [PATCH 0048] Remove sys.exit() from installer modules

2016-08-15 Thread Stanislav Laznicka
On 08/02/2016 01:08 PM, Stanislav Laznicka wrote: On 07/28/2016 10:57 AM, Martin Basti wrote: Hello, suprisingly, patch needs rebase :) 1) Is the script error the right Exception? I chose ScriptError because it's able to change the return value of the script, which is necessary sometimes. Run