[Freeipa-devel] [freeipa PR#410][comment] ipa-kdb: support KDB DAL version 6.1

2017-02-07 Thread abbra
URL: https://github.com/freeipa/freeipa/pull/410 Title: #410: ipa-kdb: support KDB DAL version 6.1 abbra commented: """ @simo5 @frozencemetery unfortunately, the provide of "krb5-kdb-version = 6.1" is on krb5-libs, not on krb5-devel, so I cannot do a buildrequires dependency this way. """

[Freeipa-devel] [freeipa PR#421][synchronized] Update warning message for replica install

2017-02-07 Thread Akasurde
URL: https://github.com/freeipa/freeipa/pull/421 Author: Akasurde Title: #421: Update warning message for replica install Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/421/head:pr421 git checkout pr421

[Freeipa-devel] [freeipa PR#435][comment] py3: fix replica install regression

2017-02-07 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/435 Title: #435: py3: fix replica install regression stlaz commented: """ Works for me. """ See the full comment at https://github.com/freeipa/freeipa/pull/435#issuecomment-277948678 -- Manage your subscription for the Freeipa-devel mailing list:

[Freeipa-devel] [freeipa PR#435][+ack] py3: fix replica install regression

2017-02-07 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/435 Title: #435: py3: fix replica install regression Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#410][comment] ipa-kdb: support KDB DAL version 6.1

2017-02-07 Thread simo5
URL: https://github.com/freeipa/freeipa/pull/410 Title: #410: ipa-kdb: support KDB DAL version 6.1 simo5 commented: """ @frozencemetery Should we provide krb5-kdb-version-devel from krb5-devel ? """ See the full comment at https://github.com/freeipa/freeipa/pull/410#issuecomment-277949768 --

[Freeipa-devel] [freeipa PR#437][comment] FIPS: replica install check

2017-02-07 Thread pvoborni
URL: https://github.com/freeipa/freeipa/pull/437 Title: #437: FIPS: replica install check pvoborni commented: """ @MartinBasti I'm not sure from your comment if you would like to provide a way to change non-FIPS server into a FIPS server or just brainstorming ways how it can be worked around.

[Freeipa-devel] [freeipa PR#437][comment] FIPS: replica install check

2017-02-07 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/437 Title: #437: FIPS: replica install check MartinBasti commented: """ @pvoborni more or less brainstorming, as I'm almost sure that people will want to migrate current deployments to FIPS mode """ See the full comment at

[Freeipa-devel] [freeipa PR#438][opened] ipaldap: preserve order of values in LDAPEntry._sync()

2017-02-07 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/438 Author: HonzaCholasta Title: #438: ipaldap: preserve order of values in LDAPEntry._sync() Action: opened PR body: """ In Python 2, the order was preserved by accident. This change makes sure the order is preserved in both Python 2 and 3.

[Freeipa-devel] [freeipa PR#435][comment] py3: fix replica install regression

2017-02-07 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/435 Title: #435: py3: fix replica install regression MartinBasti commented: """ Fixed upstream master: https://fedorahosted.org/freeipa/changeset/91ab650ac42d34d4958e33da7ef0641842511a89 """ See the full comment at

[Freeipa-devel] [freeipa PR#435][closed] py3: fix replica install regression

2017-02-07 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/435 Author: MartinBasti Title: #435: py3: fix replica install regression Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/435/head:pr435 git checkout pr435 -- Manage

[Freeipa-devel] [freeipa PR#409][closed] ipatests: nested netgroups (intg)

2017-02-07 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/409 Author: celestian Title: #409: ipatests: nested netgroups (intg) Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/409/head:pr409 git checkout pr409 -- Manage your

Re: [Freeipa-devel] CSR autogeneration next steps

2017-02-07 Thread Jan Cholasta
On 4.2.2017 16:40, Ben Lipton wrote: On 01/12/2017 04:35 AM, Jan Cholasta wrote: On 11.1.2017 00:38, Ben Lipton wrote: On 01/10/2017 01:58 AM, Jan Cholasta wrote: On 19.12.2016 21:59, Ben Lipton wrote: On 12/15/2016 11:11 PM, Ben Lipton wrote: On 12/12/2016 03:52 AM, Jan Cholasta wrote:

[Freeipa-devel] [freeipa PR#394][comment] Add fix for ipa plugins command

2017-02-07 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/394 Title: #394: Add fix for ipa plugins command MartinBasti commented: """ @Akasurde sorry for delay, we still miss test. Otherwise I'm fine with this approach (when issue commented inline fixed) """ See the full comment at

[Freeipa-devel] [freeipa PR#413][+pushed] Complete stageuser API

2017-02-07 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/413 Title: #413: Complete stageuser API Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#336][+pushed] [py3] pki: add missing depedency pki-base[-python3]

2017-02-07 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/336 Title: #336: [py3] pki: add missing depedency pki-base[-python3] Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#336][comment] [py3] pki: add missing depedency pki-base[-python3]

2017-02-07 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/336 Title: #336: [py3] pki: add missing depedency pki-base[-python3] MartinBasti commented: """ Fixed upstream master: https://fedorahosted.org/freeipa/changeset/66fa0585aa3a7219aa3f5b548a0a84f052d62b8e

[Freeipa-devel] [freeipa PR#336][closed] [py3] pki: add missing depedency pki-base[-python3]

2017-02-07 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/336 Author: MartinBasti Title: #336: [py3] pki: add missing depedency pki-base[-python3] Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/336/head:pr336 git checkout

[Freeipa-devel] [freeipa PR#413][comment] Complete stageuser API

2017-02-07 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/413 Title: #413: Complete stageuser API MartinBasti commented: """ Fixed upstream master: https://fedorahosted.org/freeipa/changeset/9c0e86530ec693606ca4f69e74a9dfe4118a21aa

[Freeipa-devel] [freeipa PR#413][closed] Complete stageuser API

2017-02-07 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/413 Author: dkupka Title: #413: Complete stageuser API Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/413/head:pr413 git checkout pr413 -- Manage your subscription

[Freeipa-devel] [freeipa PR#418][closed] replica install: do not log host OTP

2017-02-07 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/418 Author: HonzaCholasta Title: #418: replica install: do not log host OTP Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/418/head:pr418 git checkout pr418 --

[Freeipa-devel] [freeipa PR#418][comment] replica install: do not log host OTP

2017-02-07 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/418 Title: #418: replica install: do not log host OTP MartinBasti commented: """ Fixed upstream master: https://fedorahosted.org/freeipa/changeset/054c1e013aee6fdbee2e9966c32df02d91f0c2c1 """ See the full comment at

[Freeipa-devel] [freeipa PR#435][+pushed] py3: fix replica install regression

2017-02-07 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/435 Title: #435: py3: fix replica install regression Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#418][+ack] replica install: do not log host OTP

2017-02-07 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/418 Title: #418: replica install: do not log host OTP Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#314][comment] RFC: privilege separation for ipa framework code

2017-02-07 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/314 Title: #314: RFC: privilege separation for ipa framework code martbab commented: """ I have figured out that the previous Travis failures were caused by missing version in mod_auth_gssapi Requires. If I downgrade the package to

[Freeipa-devel] [freeipa PR#418][+pushed] replica install: do not log host OTP

2017-02-07 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/418 Title: #418: replica install: do not log host OTP Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#396][comment] Explicitly remove support of SSLv2

2017-02-07 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/396 Title: #396: Explicitly remove support of SSLv2 stlaz commented: """ Did not realize merging to Env from default constants was happening in the end of `_finalize_core()`, moved the checks in config.py accordingly. Also, for some reason, github

[Freeipa-devel] [freeipa PR#314][comment] RFC: privilege separation for ipa framework code

2017-02-07 Thread simo5
URL: https://github.com/freeipa/freeipa/pull/314 Title: #314: RFC: privilege separation for ipa framework code simo5 commented: """ I added 1.5.0 as a dep in freeipa.spec.in and rebased the PR """ See the full comment at https://github.com/freeipa/freeipa/pull/314#issuecomment-278008429 --

[Freeipa-devel] [freeipa PR#396][synchronized] Explicitly remove support of SSLv2

2017-02-07 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/396 Author: stlaz Title: #396: Explicitly remove support of SSLv2 Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/396/head:pr396 git checkout pr396 From

[Freeipa-devel] [freeipa PR#409][+pushed] ipatests: nested netgroups (intg)

2017-02-07 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/409 Title: #409: ipatests: nested netgroups (intg) Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#409][comment] ipatests: nested netgroups (intg)

2017-02-07 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/409 Title: #409: ipatests: nested netgroups (intg) MartinBasti commented: """ Fixed upstream master: https://fedorahosted.org/freeipa/changeset/dc99d3c04e43b08d2364209a641b8b9111e5986c """ See the full comment at

[Freeipa-devel] [freeipa PR#413][+ack] Complete stageuser API

2017-02-07 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/413 Title: #413: Complete stageuser API Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#336][+ack] [py3] pki: add missing depedency pki-base[-python3]

2017-02-07 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/336 Title: #336: [py3] pki: add missing depedency pki-base[-python3] Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#396][synchronized] Explicitly remove support of SSLv2

2017-02-07 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/396 Author: stlaz Title: #396: Explicitly remove support of SSLv2 Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/396/head:pr396 git checkout pr396 From

[Freeipa-devel] [freeipa PR#396][synchronized] Explicitly remove support of SSLv2

2017-02-07 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/396 Author: stlaz Title: #396: Explicitly remove support of SSLv2 Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/396/head:pr396 git checkout pr396 From

[Freeipa-devel] [freeipa PR#439][synchronized] [Py3] tests: fix various bytes related issues in tests

2017-02-07 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/439 Author: MartinBasti Title: #439: [Py3] tests: fix various bytes related issues in tests Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/439/head:pr439 git

[Freeipa-devel] [freeipa PR#439][edited] [Py3] tests: fix various bytes related issues in tests

2017-02-07 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/439 Author: MartinBasti Title: #439: [Py3] tests: fix various bytes related issues in tests Action: edited Changed field: title Original value: """ [Py3] tests: fix various bytes related issues in tests """ -- Manage your subscription for the

[Freeipa-devel] [freeipa PR#440][opened] [Py3] fix various issues in tests related to BytesWarning

2017-02-07 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/440 Author: MartinBasti Title: #440: [Py3] fix various issues in tests related to BytesWarning Action: opened PR body: """ """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa

[Freeipa-devel] [freeipa PR#439][synchronized] [WIP] [Py3] testing both py2/py3 in travis

2017-02-07 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/439 Author: MartinBasti Title: #439: [WIP] [Py3] testing both py2/py3 in travis Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/439/head:pr439 git checkout

[Freeipa-devel] [freeipa PR#426][comment] DNSSEC: forwarders validation improvement

2017-02-07 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/426 Title: #426: DNSSEC: forwarders validation improvement tomaskrizek commented: """ I think the same issue can also occur in `validate_dnssec_zone_forwarder_step2()`. """ See the full comment at

[Freeipa-devel] [freeipa PR#427][synchronized] [Py3] WSGI part 2

2017-02-07 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/427 Author: MartinBasti Title: #427: [Py3] WSGI part 2 Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/427/head:pr427 git checkout pr427 From

[Freeipa-devel] [freeipa PR#396][comment] Explicitly remove support of SSLv2

2017-02-07 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/396 Title: #396: Explicitly remove support of SSLv2 HonzaCholasta commented: """ @stlaz, you don't have to replace `root_logger` in old code, but don't use it in new code. """ See the full comment at

[Freeipa-devel] [freeipa PR#438][synchronized] ipaldap: preserve order of values in LDAPEntry._sync()

2017-02-07 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/438 Author: HonzaCholasta Title: #438: ipaldap: preserve order of values in LDAPEntry._sync() Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/438/head:pr438 git

[Freeipa-devel] [freeipa PR#437][comment] FIPS: replica install check

2017-02-07 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/437 Title: #437: FIPS: replica install check tomaskrizek commented: """ Thanks for the feedback. Hopefully I addressed all the concerns above in the update. """ See the full comment at

[Freeipa-devel] [freeipa PR#439][opened] [Py3] tests: fix various bytes related issues in tests

2017-02-07 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/439 Author: MartinBasti Title: #439: [Py3] tests: fix various bytes related issues in tests Action: opened PR body: """ This is more or less for testing purposes of py2/py3 compatibility """ To pull the PR as Git branch: git remote add ghfreeipa

[Freeipa-devel] [freeipa PR#437][synchronized] FIPS: replica install check

2017-02-07 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/437 Author: tomaskrizek Title: #437: FIPS: replica install check Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/437/head:pr437 git checkout pr437 From

[Freeipa-devel] [freeipa PR#439][synchronized] [WIP] [Py3] testing both py2/py3 in travis

2017-02-07 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/439 Author: MartinBasti Title: #439: [WIP] [Py3] testing both py2/py3 in travis Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/439/head:pr439 git checkout

[Freeipa-devel] [freeipa PR#433][comment] csrgen: Allow some certificate fields to be specified by the user

2017-02-07 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/433 Title: #433: csrgen: Allow some certificate fields to be specified by the user MartinBasti commented: """ ``` * Module ipaclient.csrgen ipaclient/csrgen.py:376: [E1101(no-member), CSRGenerator.get_user_prompts] Module 'ipalib.errors'

[Freeipa-devel] [freeipa PR#423][comment] dns-update-system-records: add support for nsupdate output format

2017-02-07 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/423 Title: #423: dns-update-system-records: add support for nsupdate output format tomaskrizek commented: """ I added some in-line comments/questions. """ See the full comment at https://github.com/freeipa/freeipa/pull/423#issuecomment-278076554 --

[Freeipa-devel] [freeipa PR#439][synchronized] [WIP] [Py3] testing both py2/py3 in travis

2017-02-07 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/439 Author: MartinBasti Title: #439: [WIP] [Py3] testing both py2/py3 in travis Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/439/head:pr439 git checkout

Re: [Freeipa-devel] [DESIGN] IPA permission enforcement in Dogtag

2017-02-07 Thread Jan Cholasta
On 8.2.2017 08:06, Fraser Tweedale wrote: On Wed, Feb 08, 2017 at 08:02:18AM +0100, Jan Cholasta wrote: On 8.2.2017 07:29, Fraser Tweedale wrote: On Mon, Feb 06, 2017 at 10:24:31AM +0100, Jan Cholasta wrote: On 17.1.2017 08:57, David Kupka wrote: On 13/01/17 08:07, Fraser Tweedale wrote:

[Freeipa-devel] [freeipa PR#427][closed] [Py3] WSGI part 2

2017-02-07 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/427 Author: MartinBasti Title: #427: [Py3] WSGI part 2 Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/427/head:pr427 git checkout pr427 -- Manage your subscription

[Freeipa-devel] [freeipa PR#427][+pushed] [Py3] WSGI part 2

2017-02-07 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/427 Title: #427: [Py3] WSGI part 2 Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#427][comment] [Py3] WSGI part 2

2017-02-07 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/427 Title: #427: [Py3] WSGI part 2 HonzaCholasta commented: """ Fixed upstream master: https://fedorahosted.org/freeipa/changeset/caa560ca79e4038b161b27d11e3f144606dbbcdb

[Freeipa-devel] [freeipa PR#396][synchronized] Explicitly remove support of SSLv2

2017-02-07 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/396 Author: stlaz Title: #396: Explicitly remove support of SSLv2 Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/396/head:pr396 git checkout pr396 From

[Freeipa-devel] [freeipa PR#396][comment] Explicitly remove support of SSLv2

2017-02-07 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/396 Title: #396: Explicitly remove support of SSLv2 stlaz commented: """ Done. Also added a docstring to the `get_proper_tls_version_span()` function. """ See the full comment at https://github.com/freeipa/freeipa/pull/396#issuecomment-278252451 --

[Freeipa-devel] [freeipa PR#427][+ack] [Py3] WSGI part 2

2017-02-07 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/427 Title: #427: [Py3] WSGI part 2 Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] FreeIPA and wildcard certificates

2017-02-07 Thread Martin Kosek
Hi Fraser and the list, I recently was in a conversation about integrating OpenShift with FreeIPA. One of the gaps was around generating a wildcard certificate by FreeIPA that will be used in the default OpenShift router for applications that do not deploy own certificates [1]. Is there any way

Re: [Freeipa-devel] [DESIGN] IPA permission enforcement in Dogtag

2017-02-07 Thread Jan Cholasta
On 8.2.2017 07:29, Fraser Tweedale wrote: On Mon, Feb 06, 2017 at 10:24:31AM +0100, Jan Cholasta wrote: On 17.1.2017 08:57, David Kupka wrote: On 13/01/17 08:07, Fraser Tweedale wrote: Related to design: http://www.freeipa.org/page/V4/Dogtag_GSS-API_Authentication Currently there are some

Re: [Freeipa-devel] [DESIGN] IPA permission enforcement in Dogtag

2017-02-07 Thread Fraser Tweedale
On Wed, Feb 08, 2017 at 08:02:18AM +0100, Jan Cholasta wrote: > On 8.2.2017 07:29, Fraser Tweedale wrote: > > On Mon, Feb 06, 2017 at 10:24:31AM +0100, Jan Cholasta wrote: > > > On 17.1.2017 08:57, David Kupka wrote: > > > > On 13/01/17 08:07, Fraser Tweedale wrote: > > > > > Related to design: >

[Freeipa-devel] [freeipa PR#370][comment] ci: send build log to paste.fedoraproject.org

2017-02-07 Thread frasertweedale
URL: https://github.com/freeipa/freeipa/pull/370 Title: #370: ci: send build log to paste.fedoraproject.org frasertweedale commented: """ So... any blocker on merging this? """ See the full comment at https://github.com/freeipa/freeipa/pull/370#issuecomment-278236511 -- Manage your

[Freeipa-devel] [freeipa PR#416][comment] replica install: relax domain level check for promotion

2017-02-07 Thread frasertweedale
URL: https://github.com/freeipa/freeipa/pull/416 Title: #416: replica install: relax domain level check for promotion frasertweedale commented: """ Any other changes requested? What's preventing ack on this? """ See the full comment at

[Freeipa-devel] [freeipa PR#415][comment] ca-del: require CA to already be disabled

2017-02-07 Thread frasertweedale
URL: https://github.com/freeipa/freeipa/pull/415 Title: #415: ca-del: require CA to already be disabled frasertweedale commented: """ Shelving this PR for now. It might get resurrected later. Discussion: https://www.redhat.com/archives/freeipa-devel/2017-February/msg00150.html """ See the

Re: [Freeipa-devel] [DESIGN] IPA permission enforcement in Dogtag

2017-02-07 Thread Fraser Tweedale
On Mon, Feb 06, 2017 at 10:24:31AM +0100, Jan Cholasta wrote: > On 17.1.2017 08:57, David Kupka wrote: > > On 13/01/17 08:07, Fraser Tweedale wrote: > > > Related to design: > > > http://www.freeipa.org/page/V4/Dogtag_GSS-API_Authentication > > > > > > Currently there are some operations that hit

[Freeipa-devel] [freeipa PR#415][closed] ca-del: require CA to already be disabled

2017-02-07 Thread frasertweedale
URL: https://github.com/freeipa/freeipa/pull/415 Author: frasertweedale Title: #415: ca-del: require CA to already be disabled Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/415/head:pr415 git checkout pr415 --

[Freeipa-devel] [freeipa PR#410][synchronized] ipa-kdb: support KDB DAL version 6.1

2017-02-07 Thread abbra
URL: https://github.com/freeipa/freeipa/pull/410 Author: abbra Title: #410: ipa-kdb: support KDB DAL version 6.1 Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/410/head:pr410 git checkout pr410 From

[Freeipa-devel] [freeipa PR#410][synchronized] ipa-kdb: support KDB DAL version 6.1

2017-02-07 Thread abbra
URL: https://github.com/freeipa/freeipa/pull/410 Author: abbra Title: #410: ipa-kdb: support KDB DAL version 6.1 Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/410/head:pr410 git checkout pr410 From

[Freeipa-devel] [freeipa PR#410][comment] ipa-kdb: support KDB DAL version 6.1

2017-02-07 Thread abbra
URL: https://github.com/freeipa/freeipa/pull/410 Title: #410: ipa-kdb: support KDB DAL version 6.1 abbra commented: """ Updated the spec file and the commit message. """ See the full comment at https://github.com/freeipa/freeipa/pull/410#issuecomment-278108158 -- Manage your subscription for

[Freeipa-devel] [freeipa PR#434][comment] csrgen: Automate full cert request flow

2017-02-07 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/434 Title: #434: csrgen: Automate full cert request flow MartinBasti commented: """ - pylint: ``` * Module ipaclient.plugins.cert ipaclient/plugins/cert.py:102: [W1612(unicode-builtin), cert_request.forward] unicode built-in referenced)

[Freeipa-devel] [freeipa PR#410][comment] ipa-kdb: support KDB DAL version 6.1

2017-02-07 Thread frozencemetery
URL: https://github.com/freeipa/freeipa/pull/410 Title: #410: ipa-kdb: support KDB DAL version 6.1 frozencemetery commented: """ @simo5 @abbra I'll move it over, but it won't break anything to pull in krb5-devel *and* krb5-kdb-version as far as I can tell. """ See the full comment at

[Freeipa-devel] [freeipa PR#410][comment] ipa-kdb: support KDB DAL version 6.1

2017-02-07 Thread frozencemetery
URL: https://github.com/freeipa/freeipa/pull/410 Title: #410: ipa-kdb: support KDB DAL version 6.1 frozencemetery commented: """ @simo5 @abbra I'll move it over, but it won't break anything to pull in krb5-devel *and* krb5-kdb-version as far as I can tell. """ See the full comment at