[Freeipa-devel] [freeipa PR#367][comment] Remove nsslib from IPA

2017-02-21 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/367 Title: #367: Remove nsslib from IPA stlaz commented: """ Rebased on current master. """ See the full comment at https://github.com/freeipa/freeipa/pull/367#issuecomment-281281981 -- Manage your subscription for the Freeipa-devel mailing list: h

[Freeipa-devel] [freeipa PR#472][comment] Packaging: Add placeholder packages

2017-02-21 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/472 Title: #472: Packaging: Add placeholder packages tiran commented: """ Yes, it is the right thing to do. You can trust in the expert with a decade of experience with Python packaging (formerly known as cheese shop). """ See the full comment at h

[Freeipa-devel] [freeipa PR#489][opened] Fix error in ca_cert_files validator

2017-02-21 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/489 Author: stlaz Title: #489: Fix error in ca_cert_files validator Action: opened PR body: """ ClientInstall expects a single ca_cert_file as a string but the framework gives it a list. https://fedorahosted.org/freeipa/ticket/6694 """ To pull the

[Freeipa-devel] [freeipa PR#490][opened] [WIP] certdb: use certutil and match_hostname for cert verification

2017-02-21 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/490 Author: HonzaCholasta Title: #490: [WIP] certdb: use certutil and match_hostname for cert verification Action: opened PR body: """ Use certutil and ssl.match_hostname calls instead of python-nss for certificate verification. """ To pull the PR

[Freeipa-devel] [freeipa PR#491][opened] Don't prepend option names with additional '--'

2017-02-21 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/491 Author: stlaz Title: #491: Don't prepend option names with additional '--' Action: opened PR body: """ The options now have '--' prepended by their names already, don't add it. https://fedorahosted.org/freeipa/ticket/6392 The issue example: ru

[Freeipa-devel] [freeipa PR#397][comment] Improve wheel building and provide ipaserver wheel for local testing

2017-02-21 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/397 Title: #397: Improve wheel building and provide ipaserver wheel for local testing tiran commented: """ @pvoborni The main reason for this PR is explained in the initial PR message. I like to run an IPA framework server with specially instrumente

[Freeipa-devel] [freeipa PR#397][comment] Improve wheel building and provide ipaserver wheel for local testing

2017-02-21 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/397 Title: #397: Improve wheel building and provide ipaserver wheel for local testing tiran commented: """ To clarify and emphasis, this PR has nothing to do with the PyPI packaging effort. Zero. Zip. Nada. Nilch! The sole intent of this PR is deb

[Freeipa-devel] [freeipa PR#489][comment] Fix error in ca_cert_files validator

2017-02-21 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/489 Title: #489: Fix error in ca_cert_files validator tiran commented: """ tentative ack, see comment """ See the full comment at https://github.com/freeipa/freeipa/pull/489#issuecomment-281295634 -- Manage your subscription for the Freeipa-devel m

[Freeipa-devel] [freeipa PR#472][synchronized] Packaging: Add placeholder packages

2017-02-21 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/472 Author: tiran Title: #472: Packaging: Add placeholder packages Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/472/head:pr472 git checkout pr472 From aee6333

[Freeipa-devel] [freeipa PR#490][comment] [WIP] certdb: use certutil and match_hostname for cert verification

2017-02-21 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/490 Title: #490: [WIP] certdb: use certutil and match_hostname for cert verification tiran commented: """ Do we ensure that the function is always called with an IDN A-Label encoded hostname? ```ssl.match_hostname``` assumes that all parts are A-labe

[Freeipa-devel] [freeipa PR#476][synchronized] vault: cache the transport certificate on client

2017-02-21 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/476 Author: HonzaCholasta Title: #476: vault: cache the transport certificate on client Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/476/head:pr476 git checko

[Freeipa-devel] [freeipa PR#489][+ack] Fix error in ca_cert_files validator

2017-02-21 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/489 Title: #489: Fix error in ca_cert_files validator Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#491][+ack] Don't prepend option names with additional '--'

2017-02-21 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/491 Title: #491: Don't prepend option names with additional '--' Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Cont

[Freeipa-devel] [freeipa PR#482][edited] Don't count service/host/user cert md5 fprints in FIPS

2017-02-21 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/482 Author: stlaz Title: #482: Don't count service/host/user cert md5 fprints in FIPS Action: edited Changed field: title Original value: """ Don't count service/host/user cert md5 fprints in FIPS """ -- Manage your subscription for the Freeipa-d

[Freeipa-devel] [freeipa PR#482][synchronized] Don't count service/host/user cert md5 fprints in FIPS

2017-02-21 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/482 Author: stlaz Title: #482: Don't count service/host/user cert md5 fprints in FIPS Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/482/head:pr482 git checkout

[Freeipa-devel] [freeipa PR#482][comment] Remove MD5 certificate fingerprints

2017-02-21 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/482 Title: #482: Remove MD5 certificate fingerprints stlaz commented: """ @rcritten thanks for noticing the discrepancy in the previous version of the commit, it was a leftover from previous implementation. I reworked the commit to remove MD5 certifi

[Freeipa-devel] [freeipa PR#476][synchronized] vault: cache the transport certificate on client

2017-02-21 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/476 Author: HonzaCholasta Title: #476: vault: cache the transport certificate on client Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/476/head:pr476 git checko

[Freeipa-devel] [freeipa PR#490][comment] [WIP] certdb: use certutil and match_hostname for cert verification

2017-02-21 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/490 Title: #490: [WIP] certdb: use certutil and match_hostname for cert verification HonzaCholasta commented: """ @tiran, how do I ensure that? """ See the full comment at https://github.com/freeipa/freeipa/pull/490#issuecomment-281313807 -- Manage

[Freeipa-devel] [freeipa PR#490][comment] [WIP] certdb: use certutil and match_hostname for cert verification

2017-02-21 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/490 Title: #490: [WIP] certdb: use certutil and match_hostname for cert verification tiran commented: """ The hostname must be ASCII text. Something like ```hostname.encode('ascii')``` should catch non-ASCII text and Python 3 bytes. """ See the full

[Freeipa-devel] [freeipa PR#472][comment] Packaging: Add placeholder packages

2017-02-21 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/472 Title: #472: Packaging: Add placeholder packages MartinBasti commented: """ I talked with Honza how to handle the build dependency for pypi, and we may to remove the commit that adds python-wheel or add new option to specfile that will install p

[Freeipa-devel] [freeipa PR#490][synchronized] [WIP] certdb: use certutil and match_hostname for cert verification

2017-02-21 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/490 Author: HonzaCholasta Title: #490: [WIP] certdb: use certutil and match_hostname for cert verification Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/490/h

[Freeipa-devel] [freeipa PR#472][comment] Packaging: Add placeholder packages

2017-02-21 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/472 Title: #472: Packaging: Add placeholder packages tiran commented: """ You requsted a dependency in the first place :) If you are going to add a special build or dependency flavor for PyPI packaging, please also add ```python[23]-twine```. It's t

[Freeipa-devel] [freeipa PR#482][comment] Remove MD5 certificate fingerprints

2017-02-21 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/482 Title: #482: Remove MD5 certificate fingerprints tomaskrizek commented: """ @stlaz I think it'd be good to discuss this change on freeipa-devel. Also, since we're removing md5, I'd consider adding sha256. """ See the full comment at https://git

[Freeipa-devel] [freeipa PR#480][comment] Add request_type doc string in cert-request

2017-02-21 Thread frasertweedale
URL: https://github.com/freeipa/freeipa/pull/480 Title: #480: Add request_type doc string in cert-request frasertweedale commented: """ @Akasurde if we just want to hide it, I think you use a client override for the `cert_request` command and filter out the option. @HonzaCholasta can confirm.

[Freeipa-devel] MD5 certificate fingerprints removal

2017-02-21 Thread Standa Laznicka
Hello, Since we're trying to make FreeIPA work in FIPS we got to the point where we need to do something with MD5 fingerprints in the cert plugin. Eventually we came to a realization that it'd be best to get rid of them as a whole. These are counted by the framework and are not stored anywher

[Freeipa-devel] [freeipa PR#397][comment] Improve wheel building and provide ipaserver wheel for local testing

2017-02-21 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/397 Title: #397: Improve wheel building and provide ipaserver wheel for local testing HonzaCholasta commented: """ I can't say I agree with this approach. If this is just for testing, surely you can work around the missing `pyhbac` in some isolated

[Freeipa-devel] [freeipa PR#437][comment] FIPS: replica install check

2017-02-21 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/437 Title: #437: FIPS: replica install check HonzaCholasta commented: """ LGTM. """ See the full comment at https://github.com/freeipa/freeipa/pull/437#issuecomment-281333137 -- Manage your subscription for the Freeipa-devel mailing list: https://w

[Freeipa-devel] [freeipa PR#398][synchronized] Support for Certificate Identity Mapping

2017-02-21 Thread flo-renaud
URL: https://github.com/freeipa/freeipa/pull/398 Author: flo-renaud Title: #398: Support for Certificate Identity Mapping Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/398/head:pr398 git checkout pr398 Fr

[Freeipa-devel] [freeipa PR#437][comment] FIPS: replica install check

2017-02-21 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/437 Title: #437: FIPS: replica install check stlaz commented: """ 3 LGTM + tests passing seems like a good enough reason for ACK to me. """ See the full comment at https://github.com/freeipa/freeipa/pull/437#issuecomment-281336192 -- Manage your su

[Freeipa-devel] [freeipa PR#437][+ack] FIPS: replica install check

2017-02-21 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/437 Title: #437: FIPS: replica install check Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#398][comment] Support for Certificate Identity Mapping

2017-02-21 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/398 Title: #398: Support for Certificate Identity Mapping HonzaCholasta commented: """ LGTM. @flo-renaud, don't forget to register the new OIDs. """ See the full comment at https://github.com/freeipa/freeipa/pull/398#issuecomment-281337299 -- Manag

[Freeipa-devel] [freeipa PR#398][synchronized] Support for Certificate Identity Mapping

2017-02-21 Thread flo-renaud
URL: https://github.com/freeipa/freeipa/pull/398 Author: flo-renaud Title: #398: Support for Certificate Identity Mapping Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/398/head:pr398 git checkout pr398 Fr

[Freeipa-devel] [freeipa PR#482][comment] Remove MD5 certificate fingerprints

2017-02-21 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/482 Title: #482: Remove MD5 certificate fingerprints MartinBasti commented: """ +1 for sha256 """ See the full comment at https://github.com/freeipa/freeipa/pull/482#issuecomment-281352849 -- Manage your subscription for the Freeipa-devel mailing l

Re: [Freeipa-devel] MD5 certificate fingerprints removal

2017-02-21 Thread Rob Crittenden
Standa Laznicka wrote: > Hello, > > Since we're trying to make FreeIPA work in FIPS we got to the point > where we need to do something with MD5 fingerprints in the cert plugin. > Eventually we came to a realization that it'd be best to get rid of them > as a whole. These are counted by the framew

[Freeipa-devel] [freeipa PR#398][synchronized] Support for Certificate Identity Mapping

2017-02-21 Thread flo-renaud
URL: https://github.com/freeipa/freeipa/pull/398 Author: flo-renaud Title: #398: Support for Certificate Identity Mapping Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/398/head:pr398 git checkout pr398 Fr

[Freeipa-devel] [freeipa PR#492][opened] [WIP] config: remove meaningless defaults

2017-02-21 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/492 Author: HonzaCholasta Title: #492: [WIP] config: remove meaningless defaults Action: opened PR body: """ **ipalib.constants: Remove default domain, realm, basedn, xmlrpc_uri, ldap_uri** Domain, realm, basedn, xmlrpc_uri, ldap_uri do not have an

[Freeipa-devel] [freeipa PR#491][comment] Don't prepend option names with additional '--'

2017-02-21 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/491 Title: #491: Don't prepend option names with additional '--' MartinBasti commented: """ Fixed upstream master: https://fedorahosted.org/freeipa/changeset/9ac068ad04a2323192f9447986a3d1c5431f1e50 """ See the full comment at https://github.com/fre

[Freeipa-devel] [freeipa PR#491][closed] Don't prepend option names with additional '--'

2017-02-21 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/491 Author: stlaz Title: #491: Don't prepend option names with additional '--' Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/491/head:pr491 git checkout pr491 -- Ma

[Freeipa-devel] [freeipa PR#113][+rejected] ipalib.constants: Remove default domain, realm, basedn, xmlrpc_uri, ldap_uri

2017-02-21 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/113 Title: #113: ipalib.constants: Remove default domain, realm, basedn, xmlrpc_uri, ldap_uri Label: +rejected -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIP

[Freeipa-devel] [freeipa PR#491][+pushed] Don't prepend option names with additional '--'

2017-02-21 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/491 Title: #491: Don't prepend option names with additional '--' Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/C

[Freeipa-devel] [freeipa PR#489][+pushed] Fix error in ca_cert_files validator

2017-02-21 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/489 Title: #489: Fix error in ca_cert_files validator Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/C

[Freeipa-devel] [freeipa PR#113][closed] ipalib.constants: Remove default domain, realm, basedn, xmlrpc_uri, ldap_uri

2017-02-21 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/113 Author: pspacek Title: #113: ipalib.constants: Remove default domain, realm, basedn, xmlrpc_uri, ldap_uri Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/113/head

[Freeipa-devel] [freeipa PR#489][comment] Fix error in ca_cert_files validator

2017-02-21 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/489 Title: #489: Fix error in ca_cert_files validator MartinBasti commented: """ Fixed upstream master: https://fedorahosted.org/freeipa/changeset/0fffeabe0249d9c3c11e522fccf22ddeb1197b64 """ See the full comment at https://github.com/freeipa/freeip

[Freeipa-devel] [freeipa PR#113][comment] ipalib.constants: Remove default domain, realm, basedn, xmlrpc_uri, ldap_uri

2017-02-21 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/113 Title: #113: ipalib.constants: Remove default domain, realm, basedn, xmlrpc_uri, ldap_uri HonzaCholasta commented: """ Superseded by #492. """ See the full comment at https://github.com/freeipa/freeipa/pull/113#issuecomment-281360258 -- Manage

[Freeipa-devel] [freeipa PR#489][closed] Fix error in ca_cert_files validator

2017-02-21 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/489 Author: stlaz Title: #489: Fix error in ca_cert_files validator Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/489/head:pr489 git checkout pr489 -- Manage your s

[Freeipa-devel] [freeipa PR#481][comment] Minor typo fix in DNS install plugin

2017-02-21 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/481 Title: #481: Minor typo fix in DNS install plugin MartinBasti commented: """ Fixed upstream master: https://fedorahosted.org/freeipa/changeset/cc446fb44870592f73af9c0dc2a35c5d37ce7a5c """ See the full comment at https://github.com/freeipa/freeip

[Freeipa-devel] [freeipa PR#481][+pushed] Minor typo fix in DNS install plugin

2017-02-21 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/481 Title: #481: Minor typo fix in DNS install plugin Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/C

[Freeipa-devel] [freeipa PR#437][comment] FIPS: replica install check

2017-02-21 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/437 Title: #437: FIPS: replica install check MartinBasti commented: """ Needs rebase """ See the full comment at https://github.com/freeipa/freeipa/pull/437#issuecomment-281361284 -- Manage your subscription for the Freeipa-devel mailing list: htt

[Freeipa-devel] [freeipa PR#481][closed] Minor typo fix in DNS install plugin

2017-02-21 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/481 Author: Akasurde Title: #481: Minor typo fix in DNS install plugin Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/481/head:pr481 git checkout pr481 -- Manage you

[Freeipa-devel] [freeipa PR#492][comment] [WIP] config: remove meaningless defaults

2017-02-21 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/492 Title: #492: [WIP] config: remove meaningless defaults tiran commented: """ https://github.com/HonzaCholasta/freeipa/blob/4ebf4b907213c9951eb9cbd276e0460552563fb1/ipalib/config.py#L579 initializes server from jsonrpc_uri. Does it make sense move

[Freeipa-devel] [freeipa PR#492][comment] [WIP] config: remove meaningless defaults

2017-02-21 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/492 Title: #492: [WIP] config: remove meaningless defaults HonzaCholasta commented: """ @tiran, not really, the order does not matter here. """ See the full comment at https://github.com/freeipa/freeipa/pull/492#issuecomment-281373944 -- Manage you

[Freeipa-devel] [freeipa PR#399][comment] Certificate mapping test

2017-02-21 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/399 Title: #399: Certificate mapping test martbab commented: """ I have some inline comments. I was also thinking about the nomenclature of the Tracker mixins and I think we should name them based on the noun of the action that is being tracked, e.g

Re: [Freeipa-devel] MD5 certificate fingerprints removal

2017-02-21 Thread Tomas Krizek
On 02/21/2017 03:23 PM, Rob Crittenden wrote: > Standa Laznicka wrote: >> Hello, >> >> Since we're trying to make FreeIPA work in FIPS we got to the point >> where we need to do something with MD5 fingerprints in the cert plugin. >> Eventually we came to a realization that it'd be best to get rid o

[Freeipa-devel] [freeipa PR#492][comment] [WIP] config: remove meaningless defaults

2017-02-21 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/492 Title: #492: [WIP] config: remove meaningless defaults tiran commented: """ It does matter. In the current version ```if 'server' not in self:``` is checked and ```self.server``` is checked a couple of lines after ```if 'ldap_uri' not in self an

[Freeipa-devel] [freeipa PR#481][comment] Minor typo fix in DNS install plugin

2017-02-21 Thread Akasurde
URL: https://github.com/freeipa/freeipa/pull/481 Title: #481: Minor typo fix in DNS install plugin Akasurde commented: """ @stlaz Thanks. """ See the full comment at https://github.com/freeipa/freeipa/pull/481#issuecomment-281383157 -- Manage your subscription for the Freeipa-devel mailing li

[Freeipa-devel] [freeipa PR#437][synchronized] FIPS: replica install check

2017-02-21 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/437 Author: tomaskrizek Title: #437: FIPS: replica install check Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/437/head:pr437 git checkout pr437 From 85da41c78

[Freeipa-devel] [freeipa PR#437][+pushed] FIPS: replica install check

2017-02-21 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/437 Title: #437: FIPS: replica install check Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#397][synchronized] Improve wheel building and provide ipaserver wheel for local testing

2017-02-21 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/397 Author: tiran Title: #397: Improve wheel building and provide ipaserver wheel for local testing Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/397/head:pr3

[Freeipa-devel] [freeipa PR#379][synchronized] Packaging: Add placeholder and IPA commands packages

2017-02-21 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/379 Author: tiran Title: #379: Packaging: Add placeholder and IPA commands packages Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/379/head:pr379 git checkout p

[Freeipa-devel] [freeipa PR#437][comment] FIPS: replica install check

2017-02-21 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/437 Title: #437: FIPS: replica install check MartinBasti commented: """ Fixed upstream master: https://fedorahosted.org/freeipa/changeset/3372ad2766c0d182fa88c8bc28cf43477dc4cb3b https://fedorahosted.org/freeipa/changeset/7292890042677ae40faa44753ebf5

[Freeipa-devel] [freeipa PR#437][closed] FIPS: replica install check

2017-02-21 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/437 Author: tomaskrizek Title: #437: FIPS: replica install check Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/437/head:pr437 git checkout pr437 -- Manage your subs

[Freeipa-devel] Certificate Identity Mapping - new API to retrieve matching users

2017-02-21 Thread Florence Blanc-Renaud
Hi, related to the Certificate Identity Mapping feature, a new CLI will be needed to find all the users matching a given certificate. I propose to provide this as: ipa certmaptest --certificate --- 2 users matched --- Matched user login: test1 Matched user login:

[Freeipa-devel] [freeipa PR#453][comment] Cleanup certdb

2017-02-21 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/453 Title: #453: Cleanup certdb tiran commented: """ @stlaz You did most work with NSS and certdb recently. Can you have a look at this collection of fixes. Iis it useful for you or do you plan to rip out the module soonish? Either way please feel f

Re: [Freeipa-devel] MD5 certificate fingerprints removal

2017-02-21 Thread Standa Laznicka
On 02/21/2017 04:24 PM, Tomas Krizek wrote: On 02/21/2017 03:23 PM, Rob Crittenden wrote: Standa Laznicka wrote: Hello, Since we're trying to make FreeIPA work in FIPS we got to the point where we need to do something with MD5 fingerprints in the cert plugin. Eventually we came to a realizatio

[Freeipa-devel] [freeipa PR#493][opened] Update Contributors.txt

2017-02-21 Thread mkosek
URL: https://github.com/freeipa/freeipa/pull/493 Author: mkosek Title: #493: Update Contributors.txt Action: opened PR body: """ Update mailmap with the new mistyped authors and generate a new Contributors list. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/fre

[Freeipa-devel] [freeipa PR#453][comment] Cleanup certdb

2017-02-21 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/453 Title: #453: Cleanup certdb stlaz commented: """ @tiran Thanks for reminding me. I was waiting for some of my fixes to get pushed as well, I will go through your PR first thing tomorrow. """ See the full comment at https://github.com/freeipa/fr

[Freeipa-devel] [freeipa PR#485][+ack] Fix session logout

2017-02-21 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/485 Title: #485: Fix session logout Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#485][comment] Fix session logout

2017-02-21 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/485 Title: #485: Fix session logout stlaz commented: """ Works as expected. """ See the full comment at https://github.com/freeipa/freeipa/pull/485#issuecomment-281402720 -- Manage your subscription for the Freeipa-devel mailing list: https://www.r

[Freeipa-devel] [freeipa PR#492][comment] [WIP] config: remove meaningless defaults

2017-02-21 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/492 Title: #492: [WIP] config: remove meaningless defaults HonzaCholasta commented: """ I stand corrected, but it does not make sense to reorder the code as you suggested anyway, as it would change the current default of `server` when only `xmlrpc_u

Re: [Freeipa-devel] Certificate Identity Mapping - new API to retrieve matching users

2017-02-21 Thread Petr Vobornik
On 02/21/2017 05:15 PM, Florence Blanc-Renaud wrote: Hi, related to the Certificate Identity Mapping feature, a new CLI will be needed to find all the users matching a given certificate. I propose to provide this as: ipa certmaptest --certificate --- 2 users matched --

[Freeipa-devel] [freeipa PR#482][comment] Remove MD5 certificate fingerprints

2017-02-21 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/482 Title: #482: Remove MD5 certificate fingerprints tomaskrizek commented: """ Btw, I think sha256 can be added in a separate PR. Let's just wait if there are any concerns about removing md5 on the freeipa-devel. """ See the full comment at https:

[Freeipa-devel] [freeipa PR#482][comment] Remove MD5 certificate fingerprints

2017-02-21 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/482 Title: #482: Remove MD5 certificate fingerprints stlaz commented: """ I don't have a problem adding it in this PR, it needs to be resolved according to the outcome of the freeipa-devel thread anyway. > On 21 Feb 2017, at 18:54, Tomas Krizek wro

[Freeipa-devel] [freeipa PR#364][synchronized] Client-only builds with --disable-server

2017-02-21 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/364 Author: tiran Title: #364: Client-only builds with --disable-server Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/364/head:pr364 git checkout pr364 From b6

[Freeipa-devel] [freeipa PR#364][comment] Client-only builds with --disable-server

2017-02-21 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/364 Title: #364: Client-only builds with --disable-server tiran commented: """ Now ```-without-ipatests``` argument for @lslebodn """ See the full comment at https://github.com/freeipa/freeipa/pull/364#issuecomment-281478186 -- Manage your subscri

[Freeipa-devel] [freeipa PR#364][comment] Client-only builds with --disable-server

2017-02-21 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/364 Title: #364: Client-only builds with --disable-server tiran commented: """ Now ```-without-ipatests``` argument for @lslebodn """ See the full comment at https://github.com/freeipa/freeipa/pull/364#issuecomment-281478186 -- Manage your subscri

Re: [Freeipa-devel] MD5 certificate fingerprints removal

2017-02-21 Thread Fraser Tweedale
On Tue, Feb 21, 2017 at 05:23:07PM +0100, Standa Laznicka wrote: > On 02/21/2017 04:24 PM, Tomas Krizek wrote: > > On 02/21/2017 03:23 PM, Rob Crittenden wrote: > > > Standa Laznicka wrote: > > > > Hello, > > > > > > > > Since we're trying to make FreeIPA work in FIPS we got to the point > > > > w

Re: [Freeipa-devel] Certificate Identity Mapping - new API to retrieve matching users

2017-02-21 Thread Fraser Tweedale
On Tue, Feb 21, 2017 at 06:12:23PM +0100, Petr Vobornik wrote: > On 02/21/2017 05:15 PM, Florence Blanc-Renaud wrote: > > Hi, > > > > related to the Certificate Identity Mapping feature, a new CLI will be > > needed to find all the users matching a given certificate. > > > > I propose to provide

[Freeipa-devel] [freeipa PR#364][comment] Client-only builds with --disable-server

2017-02-21 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/364 Title: #364: Client-only builds with --disable-server HonzaCholasta commented: """ @tiran, not just for @lslebodn, `--without-ipatests` will be very useful to me for RHEL and Arch Linux packaging as well 😉. """ See the full comment at https://g

[Freeipa-devel] [freeipa PR#301][+ack] scripts, tests: explicitly set confdir in the rest of server code

2017-02-21 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/301 Title: #301: scripts, tests: explicitly set confdir in the rest of server code Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.fre

[Freeipa-devel] [freeipa PR#301][comment] scripts, tests: explicitly set confdir in the rest of server code

2017-02-21 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/301 Title: #301: scripts, tests: explicitly set confdir in the rest of server code stlaz commented: """ This PR implements the stuff that was agreed on in later comments in https://github.com/freeipa/freeipa/pull/280 and actually requested by @pvobor