[Freeipa-devel] [freeipa PR#373][synchronized] ipaplatform: Add Debian platform module.

2017-01-05 Thread tjaalton
URL: https://github.com/freeipa/freeipa/pull/373 Author: tjaalton Title: #373: ipaplatform: Add Debian platform module. Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/373/head:pr373 git checkout pr373

Re: [Freeipa-devel] Certificate Identity Mapping

2017-01-05 Thread Florence Blanc-Renaud
On 01/05/2017 01:30 PM, Sumit Bose wrote: On Tue, Dec 20, 2016 at 10:10:29AM +0100, Florence Blanc-Renaud wrote: Hi Sumit and Jan, thanks to both of you for providing detailed comments. Please find answers inline. On 12/19/2016 12:13 PM, Sumit Bose wrote: On Mon, Dec 19, 2016 at 10:02:58AM

[Freeipa-devel] [freeipa PR#361][+pushed] This PR implements a number of improvements for our Travis CI:

2017-01-05 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/361 Title: #361: This PR implements a number of improvements for our Travis CI: Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#361][closed] This PR implements a number of improvements for our Travis CI:

2017-01-05 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/361 Author: martbab Title: #361: This PR implements a number of improvements for our Travis CI: Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/361/head:pr361 git

[Freeipa-devel] [freeipa PR#361][comment] This PR implements a number of improvements for our Travis CI:

2017-01-05 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/361 Title: #361: This PR implements a number of improvements for our Travis CI: martbab commented: """ Fixed upstream master: https://fedorahosted.org/freeipa/changeset/d86cae7748a8a629c942f1eafc0a0267f2c9611e

[Freeipa-devel] [freeipa PR#340][+pushed] schema_cache: Make handling of string compatible with python3

2017-01-05 Thread mbasti-rh
URL: https://github.com/freeipa/freeipa/pull/340 Title: #340: schema_cache: Make handling of string compatible with python3 Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#340][comment] schema_cache: Make handling of string compatible with python3

2017-01-05 Thread mbasti-rh
URL: https://github.com/freeipa/freeipa/pull/340 Title: #340: schema_cache: Make handling of string compatible with python3 mbasti-rh commented: """ Fixed upstream master: https://fedorahosted.org/freeipa/changeset/388ed93935de56adbf1db976e9df276327c9a1e4 """ See the full comment at

[Freeipa-devel] [freeipa PR#340][closed] schema_cache: Make handling of string compatible with python3

2017-01-05 Thread mbasti-rh
URL: https://github.com/freeipa/freeipa/pull/340 Author: dkupka Title: #340: schema_cache: Make handling of string compatible with python3 Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/340/head:pr340 git

[Freeipa-devel] [freeipa PR#327][comment] WebUI: RPC refactoring

2017-01-05 Thread pvoborni
URL: https://github.com/freeipa/freeipa/pull/327 Title: #327: WebUI: RPC refactoring pvoborni commented: """ works for me, the travis failure is invalid̈́ - web ui is not related to the tests and pylint passes """ See the full comment at

[Freeipa-devel] [freeipa PR#327][+ack] WebUI: RPC refactoring

2017-01-05 Thread pvoborni
URL: https://github.com/freeipa/freeipa/pull/327 Title: #327: WebUI: RPC refactoring Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#374][opened] pytest: set rules to find test files and functions

2017-01-05 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/374 Author: tiran Title: #374: pytest: set rules to find test files and functions Action: opened PR body: """ 1e06a5195bafe0224d77371987f2509f5508ca2f removed pytest.ini. Without the ini file, pytest 3.x has suboptimal settings and no longer picks

[Freeipa-devel] [freeipa PR#158][comment] WebUI: update Patternfly and Bootstrap

2017-01-05 Thread pvoborni
URL: https://github.com/freeipa/freeipa/pull/158 Title: #158: WebUI: update Patternfly and Bootstrap pvoborni commented: """ Fixed upstream master: https://fedorahosted.org/freeipa/changeset/18425dbbe7b7c311cf947074d505225b235df769 """ See the full comment at

[Freeipa-devel] [freeipa PR#327][comment] WebUI: RPC refactoring

2017-01-05 Thread pvoborni
URL: https://github.com/freeipa/freeipa/pull/327 Title: #327: WebUI: RPC refactoring pvoborni commented: """ Fixed upstream master: https://fedorahosted.org/freeipa/changeset/5a950aeb29963ed22a2c3c1b80723589ac4097de

[Freeipa-devel] [freeipa PR#327][+pushed] WebUI: RPC refactoring

2017-01-05 Thread pvoborni
URL: https://github.com/freeipa/freeipa/pull/327 Title: #327: WebUI: RPC refactoring Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#340][+ack] schema_cache: Make handling of string compatible with python3

2017-01-05 Thread mbasti-rh
URL: https://github.com/freeipa/freeipa/pull/340 Title: #340: schema_cache: Make handling of string compatible with python3 Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#317][+ack] Unify password generation across FreeIPA

2017-01-05 Thread mbasti-rh
URL: https://github.com/freeipa/freeipa/pull/317 Title: #317: Unify password generation across FreeIPA Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#351][comment] [fedora-26] named.conf template: update API for bind 9.11

2017-01-05 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/351 Title: #351: [fedora-26] named.conf template: update API for bind 9.11 tomaskrizek commented: """ This fix only applies to new IPA installations. Upgrade of `named.conf` will be handled separately by bind-dyndb-ldap. When a new version will be

[Freeipa-devel] [freeipa PR#158][+pushed] WebUI: update Patternfly and Bootstrap

2017-01-05 Thread pvoborni
URL: https://github.com/freeipa/freeipa/pull/158 Title: #158: WebUI: update Patternfly and Bootstrap Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#158][closed] WebUI: update Patternfly and Bootstrap

2017-01-05 Thread pvoborni
URL: https://github.com/freeipa/freeipa/pull/158 Author: pvomacka Title: #158: WebUI: update Patternfly and Bootstrap Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/158/head:pr158 git checkout pr158 -- Manage

[Freeipa-devel] [freeipa PR#327][closed] WebUI: RPC refactoring

2017-01-05 Thread pvoborni
URL: https://github.com/freeipa/freeipa/pull/327 Author: pvomacka Title: #327: WebUI: RPC refactoring Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/327/head:pr327 git checkout pr327 -- Manage your

[Freeipa-devel] [freeipa PR#158][comment] WebUI: update Patternfly and Bootstrap

2017-01-05 Thread pvoborni
URL: https://github.com/freeipa/freeipa/pull/158 Title: #158: WebUI: update Patternfly and Bootstrap pvoborni commented: """ works for me """ See the full comment at https://github.com/freeipa/freeipa/pull/158#issuecomment-270705015 -- Manage your subscription for the Freeipa-devel mailing

[Freeipa-devel] [freeipa PR#158][+ack] WebUI: update Patternfly and Bootstrap

2017-01-05 Thread pvoborni
URL: https://github.com/freeipa/freeipa/pull/158 Title: #158: WebUI: update Patternfly and Bootstrap Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#317][comment] Unify password generation across FreeIPA

2017-01-05 Thread mbasti-rh
URL: https://github.com/freeipa/freeipa/pull/317 Title: #317: Unify password generation across FreeIPA mbasti-rh commented: """ PR needs rebase """ See the full comment at https://github.com/freeipa/freeipa/pull/317#issuecomment-270705142 -- Manage your subscription for the Freeipa-devel

[Freeipa-devel] [freeipa PR#375][opened] Fix used before assignment bug in host_port_open()

2017-01-05 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/375 Author: tiran Title: #375: Fix used before assignment bug in host_port_open() Action: opened PR body: """ Detected by most recent pylint under Python 3.5. Signed-off-by: Christian Heimes """ To pull the PR as Git branch:

[Freeipa-devel] [freeipa PR#375][comment] Fix used before assignment bug in host_port_open()

2017-01-05 Thread mbasti-rh
URL: https://github.com/freeipa/freeipa/pull/375 Title: #375: Fix used before assignment bug in host_port_open() mbasti-rh commented: """ Instant ACK """ See the full comment at https://github.com/freeipa/freeipa/pull/375#issuecomment-270728710 -- Manage your subscription for the

[Freeipa-devel] [freeipa PR#370][comment] ci: send build log to paste.fedoraproject.org

2017-01-05 Thread frasertweedale
URL: https://github.com/freeipa/freeipa/pull/370 Title: #370: ci: send build log to paste.fedoraproject.org frasertweedale commented: """ Note: a new fedora pastebin is forthcoming. Staging instance: https://modernpaste.stg.fedoraproject.org/ """ See the full comment at

[Freeipa-devel] [freeipa PR#370][edited] ci: send build log to paste.fedoraproject.org

2017-01-05 Thread frasertweedale
URL: https://github.com/freeipa/freeipa/pull/370 Author: frasertweedale Title: #370: ci: send build log to paste.fedoraproject.org Action: edited Changed field: body Original value: """ This commit is just to see if we can ship our build logs off travis to a pastebin. If we can, we can

[Freeipa-devel] FreeIPA, Duo Security integration

2017-01-05 Thread Oucema Bellagha
Hi, As of now, we have FreeIPA with OTP working perfectly. Now, I am looking at possibly integrating Duo security instead of FreeIPA's 2FA. I am concerned about how it will fit in with FreeIPA... Has anyone else tried this before? If so, are there any pitfalls or problems you have

[Freeipa-devel] [freeipa PR#370][comment] [EXPERIMENT] ci: send build log to paste.fedoraproject.org

2017-01-05 Thread frasertweedale
URL: https://github.com/freeipa/freeipa/pull/370 Title: #370: [EXPERIMENT] ci: send build log to paste.fedoraproject.org frasertweedale commented: """ Additional notes about paste.fedoraproject.org projects: - seems that only names consisting entirely of alpha chars work (thus ruling out

[Freeipa-devel] [freeipa PR#365][comment] Silence pylint import errors of ipaserver in ipalib and ipaclient

2017-01-05 Thread mbasti-rh
URL: https://github.com/freeipa/freeipa/pull/365 Title: #365: Silence pylint import errors of ipaserver in ipalib and ipaclient mbasti-rh commented: """ Fixed upstream master: https://fedorahosted.org/freeipa/changeset/987d24f784e05e911bf4e87bd1156abb1dd56210 """ See the full comment at

[Freeipa-devel] [freeipa PR#361][synchronized] This PR implements a number of improvements for our Travis CI:

2017-01-05 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/361 Author: martbab Title: #361: This PR implements a number of improvements for our Travis CI: Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/361/head:pr361

[Freeipa-devel] [freeipa PR#348][comment] ca: fix ca-find with --pkey-only

2017-01-05 Thread frasertweedale
URL: https://github.com/freeipa/freeipa/pull/348 Title: #348: ca: fix ca-find with --pkey-only frasertweedale commented: """ It is an ACK. I don't have perms to add the label tho :) """ See the full comment at https://github.com/freeipa/freeipa/pull/348#issuecomment-270589226 -- Manage your

[Freeipa-devel] [freeipa PR#348][comment] ca: fix ca-find with --pkey-only

2017-01-05 Thread frasertweedale
URL: https://github.com/freeipa/freeipa/pull/348 Title: #348: ca: fix ca-find with --pkey-only frasertweedale commented: """ Thanks @mbasti-rh ! """ See the full comment at https://github.com/freeipa/freeipa/pull/348#issuecomment-270590370 -- Manage your subscription for the Freeipa-devel

[Freeipa-devel] [freeipa PR#348][+ack] ca: fix ca-find with --pkey-only

2017-01-05 Thread frasertweedale
URL: https://github.com/freeipa/freeipa/pull/348 Title: #348: ca: fix ca-find with --pkey-only Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#362][comment] Clarify meaning of --domain and --realm in installers

2017-01-05 Thread mbasti-rh
URL: https://github.com/freeipa/freeipa/pull/362 Title: #362: Clarify meaning of --domain and --realm in installers mbasti-rh commented: """ Fixed upstream master: https://fedorahosted.org/freeipa/changeset/25a6ddcce8e7b9effaf19431c421dc5b3497fa22 """ See the full comment at

[Freeipa-devel] [freeipa PR#362][+pushed] Clarify meaning of --domain and --realm in installers

2017-01-05 Thread mbasti-rh
URL: https://github.com/freeipa/freeipa/pull/362 Title: #362: Clarify meaning of --domain and --realm in installers Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#362][closed] Clarify meaning of --domain and --realm in installers

2017-01-05 Thread mbasti-rh
URL: https://github.com/freeipa/freeipa/pull/362 Author: stlaz Title: #362: Clarify meaning of --domain and --realm in installers Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/362/head:pr362 git checkout pr362

Re: [Freeipa-devel] CI: exporting test runner output

2017-01-05 Thread Fraser Tweedale
On Thu, Jan 05, 2017 at 09:38:03AM +0100, Tomas Krizek wrote: > On 01/05/2017 09:25 AM, Fraser Tweedale wrote: > > On Thu, Jan 05, 2017 at 08:53:14AM +0100, Martin Babinsky wrote: > >> On 01/05/2017 08:06 AM, Fraser Tweedale wrote: > >>> Hi all, > >>> > >>> Although it has been discussed before

[Freeipa-devel] [freeipa PR#355][+pushed] Set up DS TLS on replica in CA-less topology

2017-01-05 Thread mbasti-rh
URL: https://github.com/freeipa/freeipa/pull/355 Title: #355: Set up DS TLS on replica in CA-less topology Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#355][comment] Set up DS TLS on replica in CA-less topology

2017-01-05 Thread mbasti-rh
URL: https://github.com/freeipa/freeipa/pull/355 Title: #355: Set up DS TLS on replica in CA-less topology mbasti-rh commented: """ Fixed upstream master: https://fedorahosted.org/freeipa/changeset/6f7d982fe2e2d2f042e85710b8d8d59167e5796f

[Freeipa-devel] [freeipa PR#355][closed] Set up DS TLS on replica in CA-less topology

2017-01-05 Thread mbasti-rh
URL: https://github.com/freeipa/freeipa/pull/355 Author: frasertweedale Title: #355: Set up DS TLS on replica in CA-less topology Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/355/head:pr355 git checkout pr355

[Freeipa-devel] [freeipa PR#361][comment] This PR implements a number of improvements for our Travis CI:

2017-01-05 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/361 Title: #361: This PR implements a number of improvements for our Travis CI: martbab commented: """ @stlaz I have implemented a simple log trimming which keeps only pytest failures if present. The original behavior is kept as a fallback for the

Re: [Freeipa-devel] [RFC] Matching and Mapping Certificates

2017-01-05 Thread Sumit Bose
On Mon, Jan 02, 2017 at 09:18:47AM +0100, Jan Cholasta wrote: > On 18.10.2016 07:34, Jan Cholasta wrote: > > On 17.10.2016 16:50, Rob Crittenden wrote: > > > Jan Cholasta wrote: > > > > Hi, > > > > > > > > On 13.10.2016 18:52, Sumit Bose wrote: > > > > > = Issuer specific matching = > > >

[Freeipa-devel] [freeipa PR#371][opened] Set up DS TLS on replica in CA-less topology

2017-01-05 Thread frasertweedale
URL: https://github.com/freeipa/freeipa/pull/371 Author: frasertweedale Title: #371: Set up DS TLS on replica in CA-less topology Action: opened PR body: """ Fixes: https://fedorahosted.org/freeipa/ticket/6226 """ To pull the PR as Git branch: git remote add ghfreeipa

[Freeipa-devel] [freeipa PR#361][synchronized] This PR implements a number of improvements for our Travis CI:

2017-01-05 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/361 Author: martbab Title: #361: This PR implements a number of improvements for our Travis CI: Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/361/head:pr361

[Freeipa-devel] [freeipa PR#355][comment] Set up DS TLS on replica in CA-less topology

2017-01-05 Thread frasertweedale
URL: https://github.com/freeipa/freeipa/pull/355 Title: #355: Set up DS TLS on replica in CA-less topology frasertweedale commented: """ ipa-4-4 PR: #371 """ See the full comment at https://github.com/freeipa/freeipa/pull/355#issuecomment-270605522 -- Manage your subscription for the

[Freeipa-devel] [freeipa PR#365][closed] Silence pylint import errors of ipaserver in ipalib and ipaclient

2017-01-05 Thread mbasti-rh
URL: https://github.com/freeipa/freeipa/pull/365 Author: tiran Title: #365: Silence pylint import errors of ipaserver in ipalib and ipaclient Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/365/head:pr365 git

[Freeipa-devel] [freeipa PR#365][+pushed] Silence pylint import errors of ipaserver in ipalib and ipaclient

2017-01-05 Thread mbasti-rh
URL: https://github.com/freeipa/freeipa/pull/365 Title: #365: Silence pylint import errors of ipaserver in ipalib and ipaclient Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#365][+ack] Silence pylint import errors of ipaserver in ipalib and ipaclient

2017-01-05 Thread mbasti-rh
URL: https://github.com/freeipa/freeipa/pull/365 Title: #365: Silence pylint import errors of ipaserver in ipalib and ipaclient Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

Re: [Freeipa-devel] CI: exporting test runner output

2017-01-05 Thread Fraser Tweedale
On Thu, Jan 05, 2017 at 08:53:14AM +0100, Martin Babinsky wrote: > On 01/05/2017 08:06 AM, Fraser Tweedale wrote: > > Hi all, > > > > Although it has been discussed before and met with some skepticism, > > here is a POC that exporting test runner output to, e.g. a pastebin, > > does work: > > >

Re: [Freeipa-devel] CI: exporting test runner output

2017-01-05 Thread Tomas Krizek
On 01/05/2017 09:25 AM, Fraser Tweedale wrote: > On Thu, Jan 05, 2017 at 08:53:14AM +0100, Martin Babinsky wrote: >> On 01/05/2017 08:06 AM, Fraser Tweedale wrote: >>> Hi all, >>> >>> Although it has been discussed before and met with some skepticism, >>> here is a POC that exporting test runner

[Freeipa-devel] [freeipa PR#355][comment] Set up DS TLS on replica in CA-less topology

2017-01-05 Thread mbasti-rh
URL: https://github.com/freeipa/freeipa/pull/355 Title: #355: Set up DS TLS on replica in CA-less topology mbasti-rh commented: """ Please provide PR for ipa-4-4 too """ See the full comment at https://github.com/freeipa/freeipa/pull/355#issuecomment-270598873 -- Manage your subscription for

[Freeipa-devel] [freeipa PR#279][closed] installer: Stop adding distro-specific NTP servers into ntp.conf

2017-01-05 Thread dkupka
URL: https://github.com/freeipa/freeipa/pull/279 Author: dkupka Title: #279: installer: Stop adding distro-specific NTP servers into ntp.conf Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/279/head:pr279 git

[Freeipa-devel] [freeipa PR#370][comment] [EXPERIMENT] ci: send build log to paste.fedoraproject.org

2017-01-05 Thread frasertweedale
URL: https://github.com/freeipa/freeipa/pull/370 Title: #370: [EXPERIMENT] ci: send build log to paste.fedoraproject.org frasertweedale commented: """ fedora-infra ticket for project name limitations: https://pagure.io/fedora-infrastructure/issue/5661 """ See the full comment at

[Freeipa-devel] [freeipa PR#371][edited] [4.4] Set up DS TLS on replica in CA-less topology

2017-01-05 Thread mbasti-rh
URL: https://github.com/freeipa/freeipa/pull/371 Author: frasertweedale Title: #371: [4.4] Set up DS TLS on replica in CA-less topology Action: edited Changed field: title Original value: """ Set up DS TLS on replica in CA-less topology """ -- Manage your subscription for the Freeipa-devel

[Freeipa-devel] [freeipa PR#361][comment] This PR implements a number of improvements for our Travis CI:

2017-01-05 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/361 Title: #361: This PR implements a number of improvements for our Travis CI: stlaz commented: """ The change LGTM, ACK, we'll see how it works :) """ See the full comment at https://github.com/freeipa/freeipa/pull/361#issuecomment-270612407 --

[Freeipa-devel] [freeipa PR#361][+ack] This PR implements a number of improvements for our Travis CI:

2017-01-05 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/361 Title: #361: This PR implements a number of improvements for our Travis CI: Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#348][comment] ca: fix ca-find with --pkey-only

2017-01-05 Thread mbasti-rh
URL: https://github.com/freeipa/freeipa/pull/348 Title: #348: ca: fix ca-find with --pkey-only mbasti-rh commented: """ @frasertweedale your permissions have been upgraded :) """ See the full comment at https://github.com/freeipa/freeipa/pull/348#issuecomment-270589759 -- Manage your

[Freeipa-devel] [freeipa PR#181][comment] Tests : User Tracker creation of user with minimal values

2017-01-05 Thread mbasti-rh
URL: https://github.com/freeipa/freeipa/pull/181 Title: #181: Tests : User Tracker creation of user with minimal values mbasti-rh commented: """ PR needs rebase """ See the full comment at https://github.com/freeipa/freeipa/pull/181#issuecomment-270594446 -- Manage your subscription for the

[Freeipa-devel] [freeipa PR#279][comment] installer: Stop adding distro-specific NTP servers into ntp.conf

2017-01-05 Thread dkupka
URL: https://github.com/freeipa/freeipa/pull/279 Title: #279: installer: Stop adding distro-specific NTP servers into ntp.conf dkupka commented: """ Fixed upstream master: https://fedorahosted.org/freeipa/changeset/a15fdea615fa4e1153fbbed234113a235135572e """ See the full comment at

[Freeipa-devel] [freeipa PR#279][+pushed] installer: Stop adding distro-specific NTP servers into ntp.conf

2017-01-05 Thread dkupka
URL: https://github.com/freeipa/freeipa/pull/279 Title: #279: installer: Stop adding distro-specific NTP servers into ntp.conf Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#314][comment] RFC: privilege separation for ipa framework code

2017-01-05 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/314 Title: #314: RFC: privilege separation for ipa framework code HonzaCholasta commented: """ @simo5, I might have fixed the certmonger issue, see HonzaCholasta@907ef3cff2045edd4625d4c422d1d0ae473fe51c, however I'm hitting the "No valid Negotiate

[Freeipa-devel] [freeipa PR#348][comment] ca: fix ca-find with --pkey-only

2017-01-05 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/348 Title: #348: ca: fix ca-find with --pkey-only HonzaCholasta commented: """ @frasertweedale, is that an ACK? :-) """ See the full comment at https://github.com/freeipa/freeipa/pull/348#issuecomment-270586148 -- Manage your subscription for the

[Freeipa-devel] [freeipa PR#366][synchronized] Use pytest conftest.py

2017-01-05 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/366 Author: tiran Title: #366: Use pytest conftest.py Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/366/head:pr366 git checkout pr366 From

[Freeipa-devel] [freeipa PR#372][opened] Restore IPA 3.0 compatibility of copy-schema-to-ca.py

2017-01-05 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/372 Author: tiran Title: #372: Restore IPA 3.0 compatibility of copy-schema-to-ca.py Action: opened PR body: """ Apparently ipaplatform.paths is not available on IPA 3.x. https://fedorahosted.org/freeipa/ticket/6540 Signed-off-by: Christian

[Freeipa-devel] [freeipa PR#371][comment] [4.4] Set up DS TLS on replica in CA-less topology

2017-01-05 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/371 Title: #371: [4.4] Set up DS TLS on replica in CA-less topology tomaskrizek commented: """ I re-tested CA-less and CA-full use cases in both domlvl0 and domlvl1. They all seem to work and ldapssl is running. Thanks for fixing the issue! """

Re: [Freeipa-devel] Certificate Identity Mapping

2017-01-05 Thread Sumit Bose
On Tue, Dec 20, 2016 at 10:10:29AM +0100, Florence Blanc-Renaud wrote: > Hi Sumit and Jan, > > thanks to both of you for providing detailed comments. Please find answers > inline. > > On 12/19/2016 12:13 PM, Sumit Bose wrote: > > On Mon, Dec 19, 2016 at 10:02:58AM +0100, Jan Cholasta wrote: > >

[Freeipa-devel] [freeipa PR#361][-ack] This PR implements a number of improvements for our Travis CI:

2017-01-05 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/361 Title: #361: This PR implements a number of improvements for our Travis CI: Label: -ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

Re: [Freeipa-devel] FreeIPA, Duo Security integration

2017-01-05 Thread Petr Vobornik
On 01/05/2017 09:36 AM, Oucema Bellagha wrote: > Hi, > As of now, we have FreeIPA with OTP working perfectly. Now, I am looking at > possibly integrating Duo security instead of FreeIPA's 2FA. I am concerned > about how it will fit in with FreeIPA... Has anyone else tried this before? > If

[Freeipa-devel] [freeipa PR#371][+ack] [4.4] Set up DS TLS on replica in CA-less topology

2017-01-05 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/371 Title: #371: [4.4] Set up DS TLS on replica in CA-less topology Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

Re: [Freeipa-devel] Certificate Identity Mapping

2017-01-05 Thread Sumit Bose
On Mon, Jan 02, 2017 at 08:06:04AM +0100, Jan Cholasta wrote: > On 19.12.2016 12:13, Sumit Bose wrote: > > On Mon, Dec 19, 2016 at 10:02:58AM +0100, Jan Cholasta wrote: > > > I agree with *almost* everything Sumit said. See my inline comments below. > > > > > > On 16.12.2016 11:53, Sumit Bose

[Freeipa-devel] [freeipa PR#181][comment] Tests : User Tracker creation of user with minimal values

2017-01-05 Thread gkaihorodova
URL: https://github.com/freeipa/freeipa/pull/181 Title: #181: Tests : User Tracker creation of user with minimal values gkaihorodova commented: """ will do, but before let me do small changes that was requested by @stlaz in #210, to use str.format() instead of " %r " """ See the full comment

[Freeipa-devel] [freeipa PR#372][comment] Restore IPA 3.0 compatibility of copy-schema-to-ca.py

2017-01-05 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/372 Title: #372: Restore IPA 3.0 compatibility of copy-schema-to-ca.py tiran commented: """ ```SHARE_DIR``` is no longer available. I had to find another approach. The approach ```import else use well-known constants``` is safe and will not break

[Freeipa-devel] [freeipa PR#210][synchronized] Tests: Stage User Tracker implementation

2017-01-05 Thread gkaihorodova
URL: https://github.com/freeipa/freeipa/pull/210 Author: gkaihorodova Title: #210: Tests: Stage User Tracker implementation Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/210/head:pr210 git checkout pr210

[Freeipa-devel] [freeipa PR#373][synchronized] ipaplatform: Add Debian platform module.

2017-01-05 Thread tjaalton
URL: https://github.com/freeipa/freeipa/pull/373 Author: tjaalton Title: #373: ipaplatform: Add Debian platform module. Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/373/head:pr373 git checkout pr373

[Freeipa-devel] [freeipa PR#367][comment] Remove nsslib from IPA

2017-01-05 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/367 Title: #367: Remove nsslib from IPA tiran commented: """ ``` ctx = ssl.SSLContext(ssl.PROTOCOL_SSLv23) ctx.options = ssl.OP_ALL | ssl.OP_NO_COMPRESSION | ssl.OP_SINGLE_DH_USE | ssl.OP_SINGLE_ECDH_USE | ssl.OP_NO_SSLv2 | ssl.OP_NO_SSLv3 try:

[Freeipa-devel] [freeipa PR#361][synchronized] This PR implements a number of improvements for our Travis CI:

2017-01-05 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/361 Author: martbab Title: #361: This PR implements a number of improvements for our Travis CI: Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/361/head:pr361

[Freeipa-devel] [freeipa PR#314][comment] RFC: privilege separation for ipa framework code

2017-01-05 Thread simo5
URL: https://github.com/freeipa/freeipa/pull/314 Title: #314: RFC: privilege separation for ipa framework code simo5 commented: """ I switched all endpoints to use GSSAPI (and transparently use a session cookie once one transation is successful), so there may be some parts of the code a bit

[Freeipa-devel] [freeipa PR#373][opened] ipaplatform: Add Debian platform module.

2017-01-05 Thread tjaalton
URL: https://github.com/freeipa/freeipa/pull/373 Author: tjaalton Title: #373: ipaplatform: Add Debian platform module. Action: opened PR body: """ Hi, this just adds the Debian platform module. There are still other changes needed before vanilla master can be used on Debian or it's

[Freeipa-devel] [freeipa PR#181][synchronized] Tests : User Tracker creation of user with minimal values

2017-01-05 Thread gkaihorodova
URL: https://github.com/freeipa/freeipa/pull/181 Author: gkaihorodova Title: #181: Tests : User Tracker creation of user with minimal values Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/181/head:pr181

[Freeipa-devel] [freeipa PR#366][comment] Use pytest conftest.py

2017-01-05 Thread apophys
URL: https://github.com/freeipa/freeipa/pull/366 Title: #366: Use pytest conftest.py apophys commented: """ Thank you for squashing the commits. """ See the full comment at https://github.com/freeipa/freeipa/pull/366#issuecomment-270653055 -- Manage your subscription for the Freeipa-devel

[Freeipa-devel] [freeipa PR#361][+ack] This PR implements a number of improvements for our Travis CI:

2017-01-05 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/361 Title: #361: This PR implements a number of improvements for our Travis CI: Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#361][comment] This PR implements a number of improvements for our Travis CI:

2017-01-05 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/361 Title: #361: This PR implements a number of improvements for our Travis CI: stlaz commented: """ I have no more remarks on this, hopefully final ACK. """ See the full comment at https://github.com/freeipa/freeipa/pull/361#issuecomment-270659749

[Freeipa-devel] [freeipa PR#372][comment] Restore IPA 3.0 compatibility of copy-schema-to-ca.py

2017-01-05 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/372 Title: #372: Restore IPA 3.0 compatibility of copy-schema-to-ca.py stlaz commented: """ Is there a reason not to stick with the original `ipautil.SHARE_DIR` and without setting `confdir`? This script won't be run on servers that either need

[Freeipa-devel] [freeipa PR#371][+pushed] [4.4] Set up DS TLS on replica in CA-less topology

2017-01-05 Thread mbasti-rh
URL: https://github.com/freeipa/freeipa/pull/371 Title: #371: [4.4] Set up DS TLS on replica in CA-less topology Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#371][closed] [4.4] Set up DS TLS on replica in CA-less topology

2017-01-05 Thread mbasti-rh
URL: https://github.com/freeipa/freeipa/pull/371 Author: frasertweedale Title: #371: [4.4] Set up DS TLS on replica in CA-less topology Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/371/head:pr371 git checkout

[Freeipa-devel] [freeipa PR#371][comment] [4.4] Set up DS TLS on replica in CA-less topology

2017-01-05 Thread mbasti-rh
URL: https://github.com/freeipa/freeipa/pull/371 Title: #371: [4.4] Set up DS TLS on replica in CA-less topology mbasti-rh commented: """ Fixed upstream ipa-4-4: https://fedorahosted.org/freeipa/changeset/cdb6ffb779b7e1e563494eb3234b2441ba74d692 """ See the full comment at

[Freeipa-devel] [freeipa PR#366][+ack] Use pytest conftest.py

2017-01-05 Thread apophys
URL: https://github.com/freeipa/freeipa/pull/366 Title: #366: Use pytest conftest.py Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#369][+ack] Catch ValueError raised by pytest.config.getoption()

2017-01-05 Thread apophys
URL: https://github.com/freeipa/freeipa/pull/369 Title: #369: Catch ValueError raised by pytest.config.getoption() Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#369][+pushed] Catch ValueError raised by pytest.config.getoption()

2017-01-05 Thread mbasti-rh
URL: https://github.com/freeipa/freeipa/pull/369 Title: #369: Catch ValueError raised by pytest.config.getoption() Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#369][closed] Catch ValueError raised by pytest.config.getoption()

2017-01-05 Thread mbasti-rh
URL: https://github.com/freeipa/freeipa/pull/369 Author: tiran Title: #369: Catch ValueError raised by pytest.config.getoption() Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/369/head:pr369 git checkout pr369

[Freeipa-devel] [freeipa PR#369][comment] Catch ValueError raised by pytest.config.getoption()

2017-01-05 Thread mbasti-rh
URL: https://github.com/freeipa/freeipa/pull/369 Title: #369: Catch ValueError raised by pytest.config.getoption() mbasti-rh commented: """ Fixed upstream master: https://fedorahosted.org/freeipa/changeset/3387734e6c6d47a756b5e914e7e515d2610a424f """ See the full comment at

[Freeipa-devel] [freeipa PR#366][comment] Use pytest conftest.py

2017-01-05 Thread mbasti-rh
URL: https://github.com/freeipa/freeipa/pull/366 Title: #366: Use pytest conftest.py mbasti-rh commented: """ Fixed upstream master: https://fedorahosted.org/freeipa/changeset/1e06a5195bafe0224d77371987f2509f5508ca2f """ See the full comment at

[Freeipa-devel] [freeipa PR#366][+pushed] Use pytest conftest.py

2017-01-05 Thread mbasti-rh
URL: https://github.com/freeipa/freeipa/pull/366 Title: #366: Use pytest conftest.py Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#370][synchronized] [EXPERIMENT] ci: send build log to paste.fedoraproject.org

2017-01-05 Thread frasertweedale
URL: https://github.com/freeipa/freeipa/pull/370 Author: frasertweedale Title: #370: [EXPERIMENT] ci: send build log to paste.fedoraproject.org Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa

[Freeipa-devel] [freeipa PR#370][edited] ci: send build log to paste.fedoraproject.org

2017-01-05 Thread frasertweedale
URL: https://github.com/freeipa/freeipa/pull/370 Author: frasertweedale Title: #370: ci: send build log to paste.fedoraproject.org Action: edited Changed field: title Original value: """ [EXPERIMENT] ci: send build log to paste.fedoraproject.org """ -- Manage your subscription for the

Re: [Freeipa-devel] Certificate Identity Mapping

2017-01-05 Thread Jan Cholasta
On 5.1.2017 13:15, Sumit Bose wrote: On Mon, Jan 02, 2017 at 08:06:04AM +0100, Jan Cholasta wrote: On 19.12.2016 12:13, Sumit Bose wrote: On Mon, Dec 19, 2016 at 10:02:58AM +0100, Jan Cholasta wrote: I agree with *almost* everything Sumit said. See my inline comments below. On 16.12.2016

[Freeipa-devel] [freeipa PR#181][comment] Tests : User Tracker creation of user with minimal values

2017-01-05 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/181 Title: #181: Tests : User Tracker creation of user with minimal values stlaz commented: """ Seems fine + Travis is satisfied as well, ACK. """ See the full comment at https://github.com/freeipa/freeipa/pull/181#issuecomment-270845790 -- Manage

[Freeipa-devel] [freeipa PR#181][comment] Tests : User Tracker creation of user with minimal values

2017-01-05 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/181 Title: #181: Tests : User Tracker creation of user with minimal values stlaz commented: """ Seems fine + Travis is satisfied as well, ACK. """ See the full comment at https://github.com/freeipa/freeipa/pull/181#issuecomment-270845790 -- Manage

Re: [Freeipa-devel] [RFC] Matching and Mapping Certificates

2017-01-05 Thread Jan Cholasta
On 5.1.2017 10:39, Sumit Bose wrote: On Mon, Jan 02, 2017 at 09:18:47AM +0100, Jan Cholasta wrote: On 18.10.2016 07:34, Jan Cholasta wrote: On 17.10.2016 16:50, Rob Crittenden wrote: Jan Cholasta wrote: Hi, On 13.10.2016 18:52, Sumit Bose wrote: = Issuer specific matching =

  1   2   >