[Freeipa-devel] [freeipa PR#584][comment] Improve the implementation of PKINIT certificate retrieval

2017-03-14 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/584 Title: #584: Improve the implementation of PKINIT certificate retrieval MartinBasti commented: """ Since I applied this PR, I cannot pass through failing client side installation: ``` Forwarding 'ping' to json server

[Freeipa-devel] [freeipa PR#587][comment] Python 3: Fix session storage

2017-03-14 Thread simo5
URL: https://github.com/freeipa/freeipa/pull/587 Title: #587: Python 3: Fix session storage simo5 commented: """ Technically principal names could use any encoding ... but we make the assumption they are utf-8 in freeIPA, so this should be ok. """ See the full comment at

[Freeipa-devel] [freeipa PR#587][+ack] Python 3: Fix session storage

2017-03-14 Thread simo5
URL: https://github.com/freeipa/freeipa/pull/587 Title: #587: Python 3: Fix session storage Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#502][comment] Make pylint and jsl optional

2017-03-14 Thread lslebodn
URL: https://github.com/freeipa/freeipa/pull/502 Title: #502: Make pylint and jsl optional lslebodn commented: """ On (14/03/17 09:56), Christian Heimes wrote: >The PR got three +1 / heart and not -1. I propose to get it merged for 4.5 >today. > I cannot see 3-times +1 in this PR. I can see

[Freeipa-devel] [freeipa PR#573][+pushed] Provide centralized management of user short name resolution

2017-03-14 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/573 Title: #573: Provide centralized management of user short name resolution Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#577][+pushed] WebUI: Add support for AD users short name resolution

2017-03-14 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/577 Title: #577: WebUI: Add support for AD users short name resolution Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#577][closed] WebUI: Add support for AD users short name resolution

2017-03-14 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/577 Author: pvomacka Title: #577: WebUI: Add support for AD users short name resolution Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/577/head:pr577 git checkout

[Freeipa-devel] [freeipa PR#577][comment] WebUI: Add support for AD users short name resolution

2017-03-14 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/577 Title: #577: WebUI: Add support for AD users short name resolution MartinBasti commented: """ master: * 2c194d793cd588d595c5ff639fbf5dac93e50e23 WebUI: Add support for management of user short name resolution """ See the full comment at

[Freeipa-devel] [freeipa PR#585][+pushed] Remove allow_constrained_delegation from gssproxy.conf

2017-03-14 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/585 Title: #585: Remove allow_constrained_delegation from gssproxy.conf Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#585][comment] Remove allow_constrained_delegation from gssproxy.conf

2017-03-14 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/585 Title: #585: Remove allow_constrained_delegation from gssproxy.conf MartinBasti commented: """ master: * f4cd61f3011877fc9cc2a809438059b07362b0aa Remove allow_constrained_delegation from gssproxy.conf """ See the full comment at

[Freeipa-devel] [freeipa PR#585][closed] Remove allow_constrained_delegation from gssproxy.conf

2017-03-14 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/585 Author: pvomacka Title: #585: Remove allow_constrained_delegation from gssproxy.conf Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/585/head:pr585 git checkout

[Freeipa-devel] [freeipa PR#573][closed] Provide centralized management of user short name resolution

2017-03-14 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/573 Author: martbab Title: #573: Provide centralized management of user short name resolution Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/573/head:pr573 git

[Freeipa-devel] [freeipa PR#573][comment] Provide centralized management of user short name resolution

2017-03-14 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/573 Title: #573: Provide centralized management of user short name resolution MartinBasti commented: """ master: * 594c87daf873ceec0c0cf3464bcb1aadb9f2b92a Short name resolution: introduce the required schema *

[Freeipa-devel] [freeipa PR#559][+ack] WebUI: Certificate login

2017-03-14 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/559 Title: #559: WebUI: Certificate login Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#559][comment] WebUI: Certificate login

2017-03-14 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/559 Title: #559: WebUI: Certificate login MartinBasti commented: """ #585 was pushed """ See the full comment at https://github.com/freeipa/freeipa/pull/559#issuecomment-286507175 -- Manage your subscription for the Freeipa-devel mailing list:

Re: [Freeipa-devel] [DRAFT] Release notes FreeIPA 4.5.0

2017-03-14 Thread Rob Crittenden
Standa Laznicka wrote: > On 03/14/2017 04:21 PM, Rob Crittenden wrote: >> Standa Laznicka wrote: >>> On 03/14/2017 03:14 PM, Martin Basti wrote: On 14.03.2017 14:56, Luc de Louw wrote: > My 3 cents... > > "Please note that FIPS 140-2 support may not work on some platforms" >

[Freeipa-devel] [freeipa PR#577][+ack] WebUI: Add support for AD users short name resolution

2017-03-14 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/577 Title: #577: WebUI: Add support for AD users short name resolution Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#559][closed] WebUI: Certificate login

2017-03-14 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/559 Author: pvomacka Title: #559: WebUI: Certificate login Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/559/head:pr559 git checkout pr559 -- Manage your

[Freeipa-devel] [freeipa PR#588][opened] CONFIGURE: Properly detect libpopt on el7

2017-03-14 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/588 Author: HonzaCholasta Title: #588: CONFIGURE: Properly detect libpopt on el7 Action: opened PR body: """ libpopt added pkg-config file in 1.16 but there are still distributions which has older version of library (el6, el7). And new features

[Freeipa-devel] Karma Requests for tomcatjss-7.2.1-1

2017-03-14 Thread Matthew Harmsen
Everyone, Sorry, due to a dependency glitch, tomcatjss needed to be re-spun again (please ignore previous tomcatjss Karma emails): *The following updated candidate builds of tomcatjss 7.2.1 were generated:* * *Fedora 25:* o *tomcatjss-7.2.1-1.fc25

[Freeipa-devel] [freeipa PR#502][comment] Make pylint and jsl optional

2017-03-14 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/502 Title: #502: Make pylint and jsl optional tiran commented: """ https://github.com/freeipa/freeipa/pull/502#issue-209980292 two thumbs up, one heart, no thumbs down """ See the full comment at

[Freeipa-devel] [freeipa PR#397][synchronized] Improve wheel building and provide ipaserver wheel for local testing

2017-03-14 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/397 Author: tiran Title: #397: Improve wheel building and provide ipaserver wheel for local testing Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa

[Freeipa-devel] [freeipa PR#475][comment] Add options to run only ipaclient unittests

2017-03-14 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/475 Title: #475: Add options to run only ipaclient unittests tiran commented: """ @martbab I've cleanup up some white space noise and squashed all commits. """ See the full comment at

[Freeipa-devel] [freeipa PR#475][synchronized] Add options to run only ipaclient unittests

2017-03-14 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/475 Author: tiran Title: #475: Add options to run only ipaclient unittests Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/475/head:pr475 git checkout pr475

Re: [Freeipa-devel] [DRAFT] Release notes FreeIPA 4.5.0

2017-03-14 Thread Fraser Tweedale
On Tue, Mar 14, 2017 at 01:51:19PM +0100, Martin Basti wrote: > Hello, > > DRAFT for FreeIPA 4.5.0 release notes is ready > http://www.freeipa.org/page/Releases/4.5.0 > > Please update/let me know what is missing, what is extra. > > > Martin^2 > I think we should add

[Freeipa-devel] [freeipa PR#589][opened] ipaplatform/debian/paths: Add some missing values.

2017-03-14 Thread tjaalton
URL: https://github.com/freeipa/freeipa/pull/589 Author: tjaalton Title: #589: ipaplatform/debian/paths: Add some missing values. Action: opened PR body: """ Rename KRA_AGENT_PEM -> OLD_KRA_AGENT_PEM, add CERTMONGER_DOGTAG_SUBMIT. """ To pull the PR as Git branch: git remote add ghfreeipa

[Freeipa-devel] [freeipa PR#586][synchronized] Ignore ipapython/.DEFAULT_PLUGINS

2017-03-14 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/586 Author: tiran Title: #586: Ignore ipapython/.DEFAULT_PLUGINS Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/586/head:pr586 git checkout pr586 From

[Freeipa-devel] [freeipa PR#397][comment] Improve wheel building and provide ipaserver wheel for local testing

2017-03-14 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/397 Title: #397: Improve wheel building and provide ipaserver wheel for local testing tiran commented: """ I've moved the code to cert.py and raise SkipPluginModule from there. """ See the full comment at

[Freeipa-devel] [freeipa PR#567][comment] Configure KDC to use certs after they are deployed

2017-03-14 Thread simo5
URL: https://github.com/freeipa/freeipa/pull/567 Title: #567: Configure KDC to use certs after they are deployed simo5 commented: """ Can you figure out exactly why certmonger is doing this ? """ See the full comment at https://github.com/freeipa/freeipa/pull/567#issuecomment-286366985 --

[Freeipa-devel] [freeipa PR#577][comment] WebUI: Add support for AD users short name resolution

2017-03-14 Thread pvoborni
URL: https://github.com/freeipa/freeipa/pull/577 Title: #577: WebUI: Add support for AD users short name resolution pvoborni commented: """ ACK if backend won't change """ See the full comment at https://github.com/freeipa/freeipa/pull/577#issuecomment-286373214 -- Manage your subscription

[Freeipa-devel] [freeipa PR#575][synchronized] IPA certauth plugin

2017-03-14 Thread sumit-bose
URL: https://github.com/freeipa/freeipa/pull/575 Author: sumit-bose Title: #575: IPA certauth plugin Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/575/head:pr575 git checkout pr575 From

[Freeipa-devel] [freeipa PR#575][comment] IPA certauth plugin

2017-03-14 Thread sumit-bose
URL: https://github.com/freeipa/freeipa/pull/575 Title: #575: IPA certauth plugin sumit-bose commented: """ I updated the code to reflect the latest changes in the interface from https://github.com/krb5/krb5/pull/610. """ See the full comment at

[Freeipa-devel] [freeipa PR#567][comment] Configure KDC to use certs after they are deployed

2017-03-14 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/567 Title: #567: Configure KDC to use certs after they are deployed martbab commented: """ @simo5 yes the whole PKINIT setup logic on replica is flawed and will probably need to be moved into a later point in master/replica install. Can I re-use

[Freeipa-devel] [freeipa PR#573][comment] Provide centralized management of user short name resolution

2017-03-14 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/573 Title: #573: Provide centralized management of user short name resolution HonzaCholasta commented: """ IMO you should add the object class to all existing idviews on upgrade rather than add it on-demand. """ See the full comment at

[Freeipa-devel] [freeipa PR#567][comment] Configure KDC to use certs after they are deployed

2017-03-14 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/567 Title: #567: Configure KDC to use certs after they are deployed martbab commented: """ @simo5 thank you """ See the full comment at https://github.com/freeipa/freeipa/pull/567#issuecomment-286392161 -- Manage your subscription for the

[Freeipa-devel] [freeipa PR#559][synchronized] WebUI: Certificate login

2017-03-14 Thread pvomacka
URL: https://github.com/freeipa/freeipa/pull/559 Author: pvomacka Title: #559: WebUI: Certificate login Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/559/head:pr559 git checkout pr559 From

[Freeipa-devel] [freeipa PR#578][comment] Coverity: fix bad use of null-like value in cert.py

2017-03-14 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/578 Title: #578: Coverity: fix bad use of null-like value in cert.py MartinBasti commented: """ Ah I see it is really false positive """ See the full comment at https://github.com/freeipa/freeipa/pull/578#issuecomment-286360715 -- Manage your

[Freeipa-devel] [freeipa PR#139][+ack] WebUI: Vault Management

2017-03-14 Thread pvoborni
URL: https://github.com/freeipa/freeipa/pull/139 Title: #139: WebUI: Vault Management Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#577][synchronized] WebUI: Add support for AD users short name resolution

2017-03-14 Thread pvomacka
URL: https://github.com/freeipa/freeipa/pull/577 Author: pvomacka Title: #577: WebUI: Add support for AD users short name resolution Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/577/head:pr577 git

[Freeipa-devel] [freeipa PR#567][comment] Configure KDC to use certs after they are deployed

2017-03-14 Thread simo5
URL: https://github.com/freeipa/freeipa/pull/567 Title: #567: Configure KDC to use certs after they are deployed simo5 commented: """ Sure no prob """ See the full comment at https://github.com/freeipa/freeipa/pull/567#issuecomment-286391140 -- Manage your subscription for the Freeipa-devel

[Freeipa-devel] [freeipa PR#573][comment] Provide centralized management of user short name resolution

2017-03-14 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/573 Title: #573: Provide centralized management of user short name resolution MartinBasti commented: """ @HonzaCholasta it will break in case when idview entry is created on older replica, so it is more safe to appending the objectclass dynamically

[Freeipa-devel] [freeipa PR#568][comment] cert: include certificate chain in cert command output

2017-03-14 Thread dkupka
URL: https://github.com/freeipa/freeipa/pull/568 Title: #568: cert: include certificate chain in cert command output dkupka commented: """ LGTM and works as expected. """ See the full comment at https://github.com/freeipa/freeipa/pull/568#issuecomment-28644 -- Manage your subscription

[Freeipa-devel] [freeipa PR#568][+ack] cert: include certificate chain in cert command output

2017-03-14 Thread dkupka
URL: https://github.com/freeipa/freeipa/pull/568 Title: #568: cert: include certificate chain in cert command output Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#577][synchronized] WebUI: Add support for AD users short name resolution

2017-03-14 Thread pvomacka
URL: https://github.com/freeipa/freeipa/pull/577 Author: pvomacka Title: #577: WebUI: Add support for AD users short name resolution Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/577/head:pr577 git

[Freeipa-devel] [freeipa PR#573][comment] Provide centralized management of user short name resolution

2017-03-14 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/573 Title: #573: Provide centralized management of user short name resolution HonzaCholasta commented: """ Ah, right. """ See the full comment at https://github.com/freeipa/freeipa/pull/573#issuecomment-286395012 -- Manage your subscription for

[Freeipa-devel] [freeipa PR#580][+rejected] Fix KDC certificates export on DL0

2017-03-14 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/580 Title: #580: Fix KDC certificates export on DL0 Label: +rejected -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#580][comment] Fix KDC certificates export on DL0

2017-03-14 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/580 Title: #580: Fix KDC certificates export on DL0 stlaz commented: """ We should not care about KDC certificates at all on DL0. """ See the full comment at https://github.com/freeipa/freeipa/pull/580#issuecomment-286400760 -- Manage your

[Freeipa-devel] [freeipa PR#577][comment] WebUI: Add support for AD users short name resolution

2017-03-14 Thread pvomacka
URL: https://github.com/freeipa/freeipa/pull/577 Title: #577: WebUI: Add support for AD users short name resolution pvomacka commented: """ @simo5 I changed the subject, do you have any suggestion what you would like to see in commit message? I think that this is quite easy and

[Freeipa-devel] [freeipa PR#581][opened] Backup KDC certificate pair

2017-03-14 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/581 Author: stlaz Title: #581: Backup KDC certificate pair Action: opened PR body: """ KDC certificate pair was added but is not included in backup which might cause issues when restoring the IPA service. https://pagure.io/freeipa/issue/6748 This

[Freeipa-devel] [DRAFT] Release notes FreeIPA 4.5.0

2017-03-14 Thread Martin Basti
Hello, DRAFT for FreeIPA 4.5.0 release notes is ready http://www.freeipa.org/page/Releases/4.5.0 Please update/let me know what is missing, what is extra. Martin^2 signature.asc Description: OpenPGP digital signature -- Manage your subscription for the Freeipa-devel mailing list:

[Freeipa-devel] [freeipa PR#582][opened] Remove pkinit from ipa-replica-prepare

2017-03-14 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/582 Author: stlaz Title: #582: Remove pkinit from ipa-replica-prepare Action: opened PR body: """ The PKINIT feature is not available on domain level 0 so any options about pkinit are false. https://pagure.io/freeipa/issue/6759 """ To pull the PR

[Freeipa-devel] [freeipa PR#568][closed] cert: include certificate chain in cert command output

2017-03-14 Thread dkupka
URL: https://github.com/freeipa/freeipa/pull/568 Author: HonzaCholasta Title: #568: cert: include certificate chain in cert command output Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/568/head:pr568 git

[Freeipa-devel] [freeipa PR#568][comment] cert: include certificate chain in cert command output

2017-03-14 Thread dkupka
URL: https://github.com/freeipa/freeipa/pull/568 Title: #568: cert: include certificate chain in cert command output dkupka commented: """ master: * c60d9c9744b1f8a7b55bcdda65cce8bb36700bf6 cert: add output file option to cert-request * 8ed891cb619abd2efd428f767edf760ebf5eec5d cert: include

[Freeipa-devel] [freeipa PR#580][closed] Fix KDC certificates export on DL0

2017-03-14 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/580 Author: stlaz Title: #580: Fix KDC certificates export on DL0 Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/580/head:pr580 git checkout pr580 -- Manage your

[Freeipa-devel] [freeipa PR#579][comment] csrgen: hide cert-get-requestdata in CLI

2017-03-14 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/579 Title: #579: csrgen: hide cert-get-requestdata in CLI HonzaCholasta commented: """ master: * 72de679eb445c975ec70cd265d37d4927823ce5b csrgen: hide cert-get-requestdata in CLI """ See the full comment at

[Freeipa-devel] [freeipa PR#579][closed] csrgen: hide cert-get-requestdata in CLI

2017-03-14 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/579 Author: HonzaCholasta Title: #579: csrgen: hide cert-get-requestdata in CLI Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/579/head:pr579 git checkout pr579 --

[Freeipa-devel] [freeipa PR#579][+pushed] csrgen: hide cert-get-requestdata in CLI

2017-03-14 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/579 Title: #579: csrgen: hide cert-get-requestdata in CLI Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#560][synchronized] rpcserver: x509_login: Handle unsuccessful certificate login gracefully

2017-03-14 Thread dkupka
URL: https://github.com/freeipa/freeipa/pull/560 Author: dkupka Title: #560: rpcserver: x509_login: Handle unsuccessful certificate login gracefully Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa

Re: [Freeipa-devel] [DRAFT] Release notes FreeIPA 4.5.0

2017-03-14 Thread Luc de Louw
My 3 cents... "Please note that FIPS 140-2 support may not work on some platforms" -> Does is work in Fedora? Should be worth mention it so people are more encouraged to test it in Fedora before its getting to RHEL 7.4 Thanks, Luc On 03/14/2017 02:50 PM, Jakub Hrozek wrote: On Tue, Mar

[Freeipa-devel] [freeipa PR#574][comment] ipa-replica-prepare fix

2017-03-14 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/574 Title: #574: ipa-replica-prepare fix MartinBasti commented: """ master: * 992e6ecd1ff33f4f872e8f174bd426507c55f5c4 Fix ipa-replica-prepare server-cert creation * 8980f4098ebf6b62556e24f090718802d1e495d3 Don't fail more if cert req/cert

Re: [Freeipa-devel] [DRAFT] Release notes FreeIPA 4.5.0

2017-03-14 Thread Alexander Bokovoy
On ti, 14 maalis 2017, Luc de Louw wrote: My 3 cents... "Please note that FIPS 140-2 support may not work on some platforms" -> Does is work in Fedora? Should be worth mention it so people are more encouraged to test it in Fedora before its getting to RHEL 7.4 I think we should actually add

[Freeipa-devel] [freeipa PR#559][+ack] WebUI: Certificate login

2017-03-14 Thread dkupka
URL: https://github.com/freeipa/freeipa/pull/559 Title: #559: WebUI: Certificate login Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

Re: [Freeipa-devel] [DRAFT] Release notes FreeIPA 4.5.0

2017-03-14 Thread Martin Basti
On 14.03.2017 15:08, Florence Blanc-Renaud wrote: > On 03/14/2017 01:51 PM, Martin Basti wrote: >> Hello, >> >> DRAFT for FreeIPA 4.5.0 release notes is ready >> http://www.freeipa.org/page/Releases/4.5.0 >> >> Please update/let me know what is missing, what is extra. >> >> >> Martin^2 >> >> >>

[Freeipa-devel] [freeipa PR#559][comment] WebUI: Certificate login

2017-03-14 Thread dkupka
URL: https://github.com/freeipa/freeipa/pull/559 Title: #559: WebUI: Certificate login dkupka commented: """ LGTM and works. """ See the full comment at https://github.com/freeipa/freeipa/pull/559#issuecomment-28641 -- Manage your subscription for the Freeipa-devel mailing list:

Re: [Freeipa-devel] [DRAFT] Release notes FreeIPA 4.5.0

2017-03-14 Thread Martin Basti
On 14.03.2017 14:56, Luc de Louw wrote: > My 3 cents... > > "Please note that FIPS 140-2 support may not work on some platforms" > > -> Does is work in Fedora? Should be worth mention it so people are > more encouraged to test it in Fedora before its getting to RHEL 7.4 > > Thanks, > > Luc We

Re: [Freeipa-devel] [DRAFT] Release notes FreeIPA 4.5.0

2017-03-14 Thread Martin Basti
On 14.03.2017 15:06, Alexander Bokovoy wrote: > On ti, 14 maalis 2017, Luc de Louw wrote: >> My 3 cents... >> >> "Please note that FIPS 140-2 support may not work on some platforms" >> >> -> Does is work in Fedora? Should be worth mention it so people are >> more encouraged to test it in Fedora

[Freeipa-devel] [freeipa PR#569][comment] Remove copy-schema-to-ca.py from master branch

2017-03-14 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/569 Title: #569: Remove copy-schema-to-ca.py from master branch MartinBasti commented: """ master: * f4c7f1dd8a9ce530a8291219a904686ee47e59c7 Remove copy-schema-to-ca.py from master branch * ca5b53adccdd581bc39233378c422ca448e6edd2 Add

[Freeipa-devel] [freeipa PR#569][+pushed] Remove copy-schema-to-ca.py from master branch

2017-03-14 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/569 Title: #569: Remove copy-schema-to-ca.py from master branch Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#574][closed] ipa-replica-prepare fix

2017-03-14 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/574 Author: stlaz Title: #574: ipa-replica-prepare fix Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/574/head:pr574 git checkout pr574 -- Manage your subscription

[Freeipa-devel] [freeipa PR#574][+pushed] ipa-replica-prepare fix

2017-03-14 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/574 Title: #574: ipa-replica-prepare fix Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

Re: [Freeipa-devel] [DRAFT] Release notes FreeIPA 4.5.0

2017-03-14 Thread Florence Blanc-Renaud
On 03/14/2017 01:51 PM, Martin Basti wrote: Hello, DRAFT for FreeIPA 4.5.0 release notes is ready http://www.freeipa.org/page/Releases/4.5.0 Please update/let me know what is missing, what is extra. Martin^2 Hi Martin, thank you for the release notes. Could you update the section about

Re: [Freeipa-devel] [DRAFT] Release notes FreeIPA 4.5.0

2017-03-14 Thread Jakub Hrozek
On Tue, Mar 14, 2017 at 01:51:19PM +0100, Martin Basti wrote: > Hello, > > DRAFT for FreeIPA 4.5.0 release notes is ready > http://www.freeipa.org/page/Releases/4.5.0 > > Please update/let me know what is missing, what is extra. Please update this paragraph: AD User Short Names Support

[Freeipa-devel] [freeipa PR#559][+pushed] WebUI: Certificate login

2017-03-14 Thread dkupka
URL: https://github.com/freeipa/freeipa/pull/559 Title: #559: WebUI: Certificate login Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#559][comment] WebUI: Certificate login

2017-03-14 Thread dkupka
URL: https://github.com/freeipa/freeipa/pull/559 Title: #559: WebUI: Certificate login dkupka commented: """ master: * 75c592d3b9081474cae51c929e6af29c7a0eebb6 Support certificate login after installation and upgrade * 585547ee9478ea0173106d88d40d7807baab8bcf WebUI: add link to login page

[Freeipa-devel] [freeipa PR#559][closed] WebUI: Certificate login

2017-03-14 Thread dkupka
URL: https://github.com/freeipa/freeipa/pull/559 Author: pvomacka Title: #559: WebUI: Certificate login Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/559/head:pr559 git checkout pr559 -- Manage your

[Freeipa-devel] [freeipa PR#569][closed] Remove copy-schema-to-ca.py from master branch

2017-03-14 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/569 Author: MartinBasti Title: #569: Remove copy-schema-to-ca.py from master branch Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/569/head:pr569 git checkout pr569

[Freeipa-devel] [freeipa PR#583][synchronized] ipaplatform/debian/services: Fix is_running arguments.

2017-03-14 Thread tjaalton
URL: https://github.com/freeipa/freeipa/pull/583 Author: tjaalton Title: #583: ipaplatform/debian/services: Fix is_running arguments. Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/583/head:pr583 git

[Freeipa-devel] [freeipa PR#531][+ack] httpinstance: disable system trust module in /etc/httpd/alias

2017-03-14 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/531 Title: #531: httpinstance: disable system trust module in /etc/httpd/alias Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#583][opened] ipaplatform/debian/services: Fix is_running arguments.

2017-03-14 Thread tjaalton
URL: https://github.com/freeipa/freeipa/pull/583 Author: tjaalton Title: #583: ipaplatform/debian/services: Fix is_running arguments. Action: opened PR body: """ Brown paper bag moment, discovered when trying to install 4.4.x. """ To pull the PR as Git branch: git remote add ghfreeipa

[Freeipa-devel] [freeipa PR#582][comment] Remove pkinit from ipa-replica-prepare

2017-03-14 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/582 Title: #582: Remove pkinit from ipa-replica-prepare MartinBasti commented: """ Works for me. @abbra @simo5 do you have any objections? """ See the full comment at https://github.com/freeipa/freeipa/pull/582#issuecomment-286444597 -- Manage

[Freeipa-devel] [freeipa PR#531][comment] httpinstance: disable system trust module in /etc/httpd/alias

2017-03-14 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/531 Title: #531: httpinstance: disable system trust module in /etc/httpd/alias stlaz commented: """ It seems to work fine for "mod_nss" reinstalls but `ipa-server-upgrade` is currently failing so I can't confirm that's ok. """ See the full comment

[Freeipa-devel] [freeipa PR#531][comment] httpinstance: disable system trust module in /etc/httpd/alias

2017-03-14 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/531 Title: #531: httpinstance: disable system trust module in /etc/httpd/alias stlaz commented: """ It seems to work fine for "mod_nss" reinstalls but `ipa-server-upgrade` is currently failing so I can't confirm that's ok. """ See the full comment

[Freeipa-devel] [freeipa PR#582][comment] Remove pkinit from ipa-replica-prepare

2017-03-14 Thread abbra
URL: https://github.com/freeipa/freeipa/pull/582 Title: #582: Remove pkinit from ipa-replica-prepare abbra commented: """ LGTM. """ See the full comment at https://github.com/freeipa/freeipa/pull/582#issuecomment-286447734 -- Manage your subscription for the Freeipa-devel mailing list:

[Freeipa-devel] [freeipa PR#531][-ack] httpinstance: disable system trust module in /etc/httpd/alias

2017-03-14 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/531 Title: #531: httpinstance: disable system trust module in /etc/httpd/alias Label: -ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#543][comment] Add options to allow ticket caching

2017-03-14 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/543 Title: #543: Add options to allow ticket caching tiran commented: """ @simo5 please resolve the merge conflict """ See the full comment at https://github.com/freeipa/freeipa/pull/543#issuecomment-286448385 -- Manage your subscription for the

[Freeipa-devel] [freeipa PR#582][comment] Remove pkinit from ipa-replica-prepare

2017-03-14 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/582 Title: #582: Remove pkinit from ipa-replica-prepare HonzaCholasta commented: """ The options were available since forever, so I guess you should just hide them instead of removing them. The same options are still available in domain level 0

[Freeipa-devel] [freeipa PR#517][synchronized] [WIP] Use Custodia 0.3 features

2017-03-14 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/517 Author: tiran Title: #517: [WIP] Use Custodia 0.3 features Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/517/head:pr517 git checkout pr517 From

[Freeipa-devel] [freeipa PR#517][comment] [WIP] Use Custodia 0.3 features

2017-03-14 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/517 Title: #517: [WIP] Use Custodia 0.3 features tiran commented: """ sigh, template markers aren't picked up automatically. I fixed ```init/systemd/Makefile.am```. """ See the full comment at

[Freeipa-devel] [freeipa PR#582][comment] Remove pkinit from ipa-replica-prepare

2017-03-14 Thread abbra
URL: https://github.com/freeipa/freeipa/pull/582 Title: #582: Remove pkinit from ipa-replica-prepare abbra commented: """ They were in DL0 in `ipa-server-install` for very long time and never worked. We left them there to make sure we can get them back to work sometime later. We did but in

Re: [Freeipa-devel] [DRAFT] Release notes FreeIPA 4.5.0

2017-03-14 Thread Standa Laznicka
On 03/14/2017 03:14 PM, Martin Basti wrote: On 14.03.2017 14:56, Luc de Louw wrote: My 3 cents... "Please note that FIPS 140-2 support may not work on some platforms" -> Does is work in Fedora? Should be worth mention it so people are more encouraged to test it in Fedora before its getting to

[Freeipa-devel] [freeipa PR#542][comment] Implementation independent interface for CSR generation

2017-03-14 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/542 Title: #542: Implementation independent interface for CSR generation tiran commented: """ @LiptonB needs rebase """ See the full comment at https://github.com/freeipa/freeipa/pull/542#issuecomment-286452115 -- Manage your subscription for the

[Freeipa-devel] [freeipa PR#573][synchronized] Provide centralized management of user short name resolution

2017-03-14 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/573 Author: martbab Title: #573: Provide centralized management of user short name resolution Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/573/head:pr573 git

[Freeipa-devel] [freeipa PR#573][synchronized] Provide centralized management of user short name resolution

2017-03-14 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/573 Author: martbab Title: #573: Provide centralized management of user short name resolution Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/573/head:pr573 git

[Freeipa-devel] [freeipa PR#578][comment] Coverity: fix bad use of null-like value in cert.py

2017-03-14 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/578 Title: #578: Coverity: fix bad use of null-like value in cert.py stlaz commented: """ if you look at steps 2, 4 and 13 in the Synopsis report (sorry, community!), you will see that this is a false positive. Anyone, please close this as

[Freeipa-devel] [freeipa PR#579][opened] csrgen: hide cert-get-requestdata in CLI

2017-03-14 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/579 Author: HonzaCholasta Title: #579: csrgen: hide cert-get-requestdata in CLI Action: opened PR body: """ The CSR generation feature is supposed to be used from cert-request, hide the internal cert-get-requestdata command in the CLI.

[Freeipa-devel] [freeipa PR#573][synchronized] Provide centralized management of user short name resolution

2017-03-14 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/573 Author: martbab Title: #573: Provide centralized management of user short name resolution Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/573/head:pr573 git

[Freeipa-devel] Karma Requests for jss-4.4.0-1

2017-03-14 Thread Matthew Harmsen
*The following updated candidate builds of jss 4.4.0 were generated:* * *Fedora 25:* o *jss-4.4.0-1.fc25 * * *Fedora 26:* o *jss-4.4.0-1.fc26

[Freeipa-devel] [freeipa PR#579][+ack] csrgen: hide cert-get-requestdata in CLI

2017-03-14 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/579 Title: #579: csrgen: hide cert-get-requestdata in CLI Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#574][comment] ipa-replica-prepare fix

2017-03-14 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/574 Title: #574: ipa-replica-prepare fix stlaz commented: """ Actually, this is most probably a privilege-separation issue since "kdc.pem" which we try to read here does not exist ever since. """ See the full comment at

[Freeipa-devel] [freeipa PR#574][comment] ipa-replica-prepare fix

2017-03-14 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/574 Title: #574: ipa-replica-prepare fix stlaz commented: """ Actually, this is most probably a privilege-separation issue since "kdc.pem" which we try to read here does not exist ever since. """ See the full comment at

  1   2   >