Re: [Freeipa-devel] [PATCH] ca-less tests updated

2016-09-09 Thread Oleg Fayans
Hi David, team According to your suggestions I've splitted my commits so that each commit addresses some particular problem. One patch (0071) still contains several unrelated fixes, but they mostly reflect changes in error messages and really small but numerous bugfixes that I did not

Re: [Freeipa-devel] [DESIGN][UPDATE] Time-Based HBAC Policies

2016-09-09 Thread Simo Sorce
On Fri, 2016-09-09 at 13:14 +0200, Standa Laznicka wrote: > On 09/03/2016 06:25 PM, Jan Pazdziora wrote: > > On Thu, Sep 01, 2016 at 11:18:45AM -0400, Simo Sorce wrote: > >> The thing is we (and admins) will be stuck with old client s for a loong > >> time, so we need to make it clear to them what

[Freeipa-devel] [freeipa PR#68] netgroup: avoid extraneous LDAP search when retrieving primary key from DN (comment)

2016-09-09 Thread martbab
martbab commented on a pull request """ Fixed upstream master: https://fedorahosted.org/freeipa/changeset/003b364c5a06a5adc89bac7371f46d534cfb4616 ipa-4-4: https://fedorahosted.org/freeipa/changeset/85b98059f91670bd489c35816b2ff901a7820c4f """ See the full comment at

[Freeipa-devel] [freeipa PR#68] netgroup: avoid extraneous LDAP search when retrieving primary key from DN (+pushed)

2016-09-09 Thread martbab
martbab's pull request #68: "netgroup: avoid extraneous LDAP search when retrieving primary key from DN" label *pushed* has been added See the full pull-request at https://github.com/freeipa/freeipa/pull/68 -- Manage your subscription for the Freeipa-devel mailing list:

[Freeipa-devel] [freeipa PR#68] netgroup: avoid extraneous LDAP search when retrieving primary key from DN (closed)

2016-09-09 Thread martbab
martbab's pull request #68: "netgroup: avoid extraneous LDAP search when retrieving primary key from DN" was closed See the full pull-request at https://github.com/freeipa/freeipa/pull/68 ... or pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch

[Freeipa-devel] [freeipa PR#71] Fix regression introduced in ipa-certupdate (+ack)

2016-09-09 Thread martbab
flo-renaud's pull request #71: "Fix regression introduced in ipa-certupdate" label *ack* has been added See the full pull-request at https://github.com/freeipa/freeipa/pull/71 -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel

[Freeipa-devel] [freeipa PR#62] Configure Anonymous PKINIT on server install (comment)

2016-09-09 Thread abbra
abbra commented on a pull request """ Thanks. Looks good. I'll work on upgrade next week and will do actual testing. """ See the full comment at https://github.com/freeipa/freeipa/pull/62#issuecomment-245906612 -- Manage your subscription for the Freeipa-devel mailing list:

[Freeipa-devel] [freeipa PR#71] Fix regression introduced in ipa-certupdate (+pushed)

2016-09-09 Thread martbab
flo-renaud's pull request #71: "Fix regression introduced in ipa-certupdate" label *pushed* has been added See the full pull-request at https://github.com/freeipa/freeipa/pull/71 -- Manage your subscription for the Freeipa-devel mailing list:

[Freeipa-devel] [freeipa PR#71] Fix regression introduced in ipa-certupdate (closed)

2016-09-09 Thread martbab
flo-renaud's pull request #71: "Fix regression introduced in ipa-certupdate" was closed See the full pull-request at https://github.com/freeipa/freeipa/pull/71 ... or pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/71/head:pr71 git

[Freeipa-devel] [freeipa PR#71] Fix regression introduced in ipa-certupdate (opened)

2016-09-09 Thread flo-renaud
flo-renaud's pull request #71: "Fix regression introduced in ipa-certupdate" was opened PR body: """ The fix for 6288 was overwritten by commit 08b768313020c45bfa82d67cd214afabf605f4b3. https://fedorahosted.org/freeipa/ticket/6288 """ See the full pull-request at

[Freeipa-devel] [freeipa PR#71] Fix regression introduced in ipa-certupdate (comment)

2016-09-09 Thread martbab
martbab commented on a pull request """ Fixed upstream master: https://fedorahosted.org/freeipa/changeset/cd75eb3b2557cbd97e93be3e1ceeef21b948a694 ipa-4-4: https://fedorahosted.org/freeipa/changeset/2eeab3acf43c8f33729b48779c12aea57e453075 """ See the full comment at

[Freeipa-devel] [freeipa PR#43] Tests: Fix regex errors in integration trust tests (+pushed)

2016-09-09 Thread martbab
mirielka's pull request #43: "Tests: Fix regex errors in integration trust tests" label *pushed* has been added See the full pull-request at https://github.com/freeipa/freeipa/pull/43 -- Manage your subscription for the Freeipa-devel mailing list:

[Freeipa-devel] [freeipa PR#43] Tests: Fix regex errors in integration trust tests (comment)

2016-09-09 Thread martbab
martbab commented on a pull request """ Fixed upstream master: https://fedorahosted.org/freeipa/changeset/fc5a99274c2ea0301a539fe9a8b2dc9b61786a8a ipa-4-4: https://fedorahosted.org/freeipa/changeset/86fa116ee8617a60c8111f3061408bcd70db06ff """ See the full comment at

[Freeipa-devel] [freeipa PR#43] Tests: Fix regex errors in integration trust tests (closed)

2016-09-09 Thread martbab
mirielka's pull request #43: "Tests: Fix regex errors in integration trust tests" was closed See the full pull-request at https://github.com/freeipa/freeipa/pull/43 ... or pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/43/head:pr43

Re: [Freeipa-devel] [DESIGN][UPDATE] Time-Based HBAC Policies

2016-09-09 Thread Standa Laznicka
On 09/03/2016 06:25 PM, Jan Pazdziora wrote: On Thu, Sep 01, 2016 at 11:18:45AM -0400, Simo Sorce wrote: The thing is we (and admins) will be stuck with old client s for a loong time, so we need to make it clear to them what works for what. We need to allow admins to create rules that work for

[Freeipa-devel] [freeipa PR#66] [master, ipa-4-4] Tests: Add cleanup to integration trust tests (+ack)

2016-09-09 Thread martbab
mirielka's pull request #66: "[master, ipa-4-4] Tests: Add cleanup to integration trust tests" label *ack* has been added See the full pull-request at https://github.com/freeipa/freeipa/pull/66 -- Manage your subscription for the Freeipa-devel mailing list:

[Freeipa-devel] [freeipa PR#70] [master, ipa-4-4] Tests: Fix failing ldap.backend test (+ack)

2016-09-09 Thread martbab
mirielka's pull request #70: "[master, ipa-4-4] Tests: Fix failing ldap.backend test" label *ack* has been added See the full pull-request at https://github.com/freeipa/freeipa/pull/70 -- Manage your subscription for the Freeipa-devel mailing list:

[Freeipa-devel] [freeipa PR#43] Tests: Fix regex errors in integration trust tests (+ack)

2016-09-09 Thread martbab
mirielka's pull request #43: "Tests: Fix regex errors in integration trust tests" label *ack* has been added See the full pull-request at https://github.com/freeipa/freeipa/pull/43 -- Manage your subscription for the Freeipa-devel mailing list:

[Freeipa-devel] [freeipa PR#68] netgroup: avoid extraneous LDAP search when retrieving primary key from DN (synchronize)

2016-09-09 Thread martbab
martbab's pull request #68: "netgroup: avoid extraneous LDAP search when retrieving primary key from DN" was synchronize See the full pull-request at https://github.com/freeipa/freeipa/pull/68 ... or pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch

[Freeipa-devel] [freeipa PR#68] netgroup: avoid extraneous LDAP search when retrieving primary key from DN (+ack)

2016-09-09 Thread stlaz
martbab's pull request #68: "netgroup: avoid extraneous LDAP search when retrieving primary key from DN" label *ack* has been added See the full pull-request at https://github.com/freeipa/freeipa/pull/68 -- Manage your subscription for the Freeipa-devel mailing list:

[Freeipa-devel] [freeipa PR#68] netgroup: avoid extraneous LDAP search when retrieving primary key from DN (edited)

2016-09-09 Thread martbab
martbab's pull request #68: "netgroup: avoid extraneous LDAP search when retrieving primary key from DN" was edited See the full pull-request at https://github.com/freeipa/freeipa/pull/68 ... or pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch

[Freeipa-devel] [freeipa PR#68] netgroup: avoid extraneous LDAP search when retrieving primary key from DN (comment)

2016-09-09 Thread stlaz
stlaz commented on a pull request """ LGTM, just please add ```assert isinstance(dn, DN)``` as in the parent method. """ See the full comment at https://github.com/freeipa/freeipa/pull/68#issuecomment-245878203 -- Manage your subscription for the Freeipa-devel mailing list:

[Freeipa-devel] [freeipa PR#68] netgroup: avoid extraneous LDAP search when retrieving primary key from DN (comment)

2016-09-09 Thread stlaz
stlaz commented on a pull request """ Please add ```assert isinstance(dn, DN)``` as in the parent method. Also, I think maybe it's safer to check for rdns emptiness before you try to assign from it. """ See the full comment at https://github.com/freeipa/freeipa/pull/68#issuecomment-245878203

[Freeipa-devel] [freeipa PR#70] [Tests: Fix failing ldap.backend test (opened)

2016-09-09 Thread mirielka
mirielka's pull request #70: "[Tests: Fix failing ldap.backend test" was opened PR body: """ Test ipatests/test_ipaserver/test_ldap::test_Backend fails claiming service cannot be found. Fixing this by not using api with in_tree parameter. https://fedorahosted.org/freeipa/ticket/6312 """ See the

[Freeipa-devel] [freeipa PR#70] [master, ipa-4-4] Tests: Fix failing ldap.backend test (edited)

2016-09-09 Thread mirielka
mirielka's pull request #70: "[master, ipa-4-4] Tests: Fix failing ldap.backend test" was edited See the full pull-request at https://github.com/freeipa/freeipa/pull/70 ... or pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa

Re: [Freeipa-devel] [PATCH] 0108 cert-request: raise error when request fails

2016-09-09 Thread Lenka Doudova
On 09/09/2016 01:53 AM, Fraser Tweedale wrote: On Thu, Sep 08, 2016 at 01:15:03PM +0200, Martin Babinsky wrote: On 09/08/2016 04:00 AM, Fraser Tweedale wrote: The attached patch fixes regression in cert-request: https://fedorahosted.org/freeipa/ticket/6309 Thanks, Fraser ACK. Does this