[Freeipa-devel] [freeipa PR#618][synchronized] Tox testing support for client wheel packages

2017-04-07 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/618 Author: tiran Title: #618: Tox testing support for client wheel packages Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/618/head:pr618 git checkout pr618

[Freeipa-devel] [freeipa PR#698][opened] install: request service certs after host keytab is set up

2017-04-07 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/698 Author: HonzaCholasta Title: #698: install: request service certs after host keytab is set up Action: opened PR body: """ **dsinstance: reconnect ldap2 after DS is restarted by certmonger** DS is restarted by certmonger in the restart_dirsrv

[Freeipa-devel] [bind-dyndb-ldap PR#15][comment] ignore what configure and make produced

2017-04-07 Thread tomaskrizek
URL: https://github.com/freeipa/bind-dyndb-ldap/pull/15 Title: #15: ignore what configure and make produced tomaskrizek commented: """ I think the *.lo part is needlessly verbose, since we can ignore all generated files anyway. Could you please change the `make` part to ignore the entire

[Freeipa-devel] [freeipa PR#694][comment] RFC: implement local PKINIT deployment in server/replica install

2017-04-07 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/694 Title: #694: RFC: implement local PKINIT deployment in server/replica install martbab commented: """ @MartinBasti I can add some removal logic to upgrader if required. """ See the full comment at

Re: [Freeipa-devel] [SSSD] [RFC] Matching and Mapping Certificates

2017-04-07 Thread Jakub Hrozek
On Thu, Oct 06, 2016 at 12:49:30PM +0200, Sumit Bose wrote: > Hi, > > I've started to write a SSSD design page about enhancing the current > mapping of certificates to users and how to select/match a suitable > certificate if multiple certificates are on a Smartcard. > > My currently thoughts

[Freeipa-devel] [freeipa PR#697][comment] Create system users for FreeIPA services during package installation

2017-04-07 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/697 Title: #697: Create system users for FreeIPA services during package installation HonzaCholasta commented: """ Ah, right, rpmdiff complained about that. Well, that was 2 years ago, and if it works for sssd it must also work for us, so I guess

Re: [Freeipa-devel] [SSSD] [RFC] Matching and Mapping Certificates

2017-04-07 Thread Sumit Bose
On Fri, Apr 07, 2017 at 10:38:55AM +0200, Jakub Hrozek wrote: > On Thu, Oct 06, 2016 at 12:49:30PM +0200, Sumit Bose wrote: > > Hi, > > > > I've started to write a SSSD design page about enhancing the current > > mapping of certificates to users and how to select/match a suitable > > certificate

[Freeipa-devel] [freeipa PR#697][comment] Create system users for FreeIPA services during package installation

2017-04-07 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/697 Title: #697: Create system users for FreeIPA services during package installation martbab commented: """ Right, we do not have systemd available during Docker image build so some fallback mechanism directly in spec would be great. Otherwise we

[Freeipa-devel] [freeipa PR#697][comment] Create system users for FreeIPA services during package installation

2017-04-07 Thread adelton
URL: https://github.com/freeipa/freeipa/pull/697 Title: #697: Create system users for FreeIPA services during package installation adelton commented: """ > I don't think we should do that and rather fail early if the user is missing. +1 """ See the full comment at

[Freeipa-devel] [freeipa PR#697][comment] Create system users for FreeIPA services during package installation

2017-04-07 Thread adelton
URL: https://github.com/freeipa/freeipa/pull/697 Title: #697: Create system users for FreeIPA services during package installation adelton commented: """ > Previously system users needed by FreeIPA server services was created during > ipa-server-install. Actually, for any such case I found I

[Freeipa-devel] [freeipa PR#618][synchronized] Tox testing support for client wheel packages

2017-04-07 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/618 Author: tiran Title: #618: Tox testing support for client wheel packages Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/618/head:pr618 git checkout pr618

[Freeipa-devel] [freeipa PR#697][comment] Create system users for FreeIPA services during package installation

2017-04-07 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/697 Title: #697: Create system users for FreeIPA services during package installation HonzaCholasta commented: """ Note that systemd-sysusers is not available in RHEL and CentOS. It might be better to use the sssd approach:

[Freeipa-devel] [freeipa PR#697][comment] Create system users for FreeIPA services during package installation

2017-04-07 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/697 Title: #697: Create system users for FreeIPA services during package installation tiran commented: """ Originally I used a similar approach for the kdcproxy user based on the snippet

[Freeipa-devel] [freeipa PR#699][opened] Fix libkrb5 filename for macOS

2017-04-07 Thread neffs
URL: https://github.com/freeipa/freeipa/pull/699 Author: neffs Title: #699: Fix libkrb5 filename for macOS Action: opened PR body: """ libkrb5.so.3 is called libkrb5.dylib on macOS """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch

[Freeipa-devel] [bind-dyndb-ldap PR#16][opened] spec: remove unnecessary bind-pkcs11 dependency

2017-04-07 Thread tomaskrizek
URL: https://github.com/freeipa/bind-dyndb-ldap/pull/16 Author: tomaskrizek Title: #16: spec: remove unnecessary bind-pkcs11 dependency Action: opened PR body: """ The bind-pkcs11 dependency was originally introduced in Fedora specfile in 2014 to help with ipa-server-upgrade. This was a

[Freeipa-devel] [bind-dyndb-ldap PR#16][comment] spec: remove unnecessary bind-pkcs11 dependency

2017-04-07 Thread tomaskrizek
URL: https://github.com/freeipa/bind-dyndb-ldap/pull/16 Title: #16: spec: remove unnecessary bind-pkcs11 dependency tomaskrizek commented: """ master: - 4fb51bac7f4f739975a2afb857b686869eff92b6 """ See the full comment at

[Freeipa-devel] [freeipa PR#632][closed] ipa-sam: create the gidNumber attribute in the trusted domain entry

2017-04-07 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/632 Author: flo-renaud Title: #632: ipa-sam: create the gidNumber attribute in the trusted domain entry Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa

[Freeipa-devel] [freeipa PR#632][+pushed] ipa-sam: create the gidNumber attribute in the trusted domain entry

2017-04-07 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/632 Title: #632: ipa-sam: create the gidNumber attribute in the trusted domain entry Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#632][comment] ipa-sam: create the gidNumber attribute in the trusted domain entry

2017-04-07 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/632 Title: #632: ipa-sam: create the gidNumber attribute in the trusted domain entry MartinBasti commented: """ master: * e052c2dce04f5ce147dc2b6804f44705fa4d69df ipa-sam: create the gidNumber attribute in the trusted domain entry *

[Freeipa-devel] [bind-dyndb-ldap PR#16][comment] spec: remove unnecessary bind-pkcs11 dependency

2017-04-07 Thread MartinBasti
URL: https://github.com/freeipa/bind-dyndb-ldap/pull/16 Title: #16: spec: remove unnecessary bind-pkcs11 dependency MartinBasti commented: """ LGTM """ See the full comment at https://github.com/freeipa/bind-dyndb-ldap/pull/16#issuecomment-292500650 -- Manage your subscription for the

[Freeipa-devel] [bind-dyndb-ldap PR#16][+pushed] spec: remove unnecessary bind-pkcs11 dependency

2017-04-07 Thread tomaskrizek
URL: https://github.com/freeipa/bind-dyndb-ldap/pull/16 Title: #16: spec: remove unnecessary bind-pkcs11 dependency Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [bind-dyndb-ldap PR#16][closed] spec: remove unnecessary bind-pkcs11 dependency

2017-04-07 Thread tomaskrizek
URL: https://github.com/freeipa/bind-dyndb-ldap/pull/16 Author: tomaskrizek Title: #16: spec: remove unnecessary bind-pkcs11 dependency Action: closed To pull the PR as Git branch: git remote add ghbind-dyndb-ldap https://github.com/freeipa/bind-dyndb-ldap git fetch ghbind-dyndb-ldap

[Freeipa-devel] [freeipa PR#692][+pushed] tests: add non-reg for idrange-add

2017-04-07 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/692 Title: #692: tests: add non-reg for idrange-add Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#692][closed] tests: add non-reg for idrange-add

2017-04-07 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/692 Author: flo-renaud Title: #692: tests: add non-reg for idrange-add Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/692/head:pr692 git checkout pr692 -- Manage

[Freeipa-devel] [freeipa PR#692][comment] tests: add non-reg for idrange-add

2017-04-07 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/692 Title: #692: tests: add non-reg for idrange-add martbab commented: """ master: * 342dccea47f6cb14cda63f75789eab51070fb3f6 tests: add non-reg for idrange-add ipa-4-5: * ab2706721db217d55ae549d50a95ace571e65aa6 tests: add non-reg for idrange-add

[Freeipa-devel] [bind-dyndb-ldap PR#16][+ack] spec: remove unnecessary bind-pkcs11 dependency

2017-04-07 Thread tomaskrizek
URL: https://github.com/freeipa/bind-dyndb-ldap/pull/16 Title: #16: spec: remove unnecessary bind-pkcs11 dependency Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#692][+ack] tests: add non-reg for idrange-add

2017-04-07 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/692 Title: #692: tests: add non-reg for idrange-add Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#699][comment] Fix libkrb5 filename for macOS

2017-04-07 Thread abbra
URL: https://github.com/freeipa/freeipa/pull/699 Title: #699: Fix libkrb5 filename for macOS abbra commented: """ Thanks. Do you have IPA client code working on Mac OS X? """ See the full comment at https://github.com/freeipa/freeipa/pull/699#issuecomment-292523505 -- Manage your

[Freeipa-devel] [freeipa PR#699][comment] Fix libkrb5 filename for macOS

2017-04-07 Thread neffs
URL: https://github.com/freeipa/freeipa/pull/699 Title: #699: Fix libkrb5 filename for macOS neffs commented: """ It connects via RPC and user-show works. Didn't check much further. I also created an issue: https://pagure.io/freeipa/issue/6850 """ See the full comment at

[Freeipa-devel] [freeipa PR#699][comment] Fix libkrb5 filename for macOS

2017-04-07 Thread neffs
URL: https://github.com/freeipa/freeipa/pull/699 Title: #699: Fix libkrb5 filename for macOS neffs commented: """ It connects via RPC and user-show works. Didn't check much further. I also created an issue: https://pagure.io/freeipa/issue/6850 """ See the full comment at

[Freeipa-devel] [freeipa PR#699][comment] Fix libkrb5 filename for macOS

2017-04-07 Thread abbra
URL: https://github.com/freeipa/freeipa/pull/699 Title: #699: Fix libkrb5 filename for macOS abbra commented: """ Ok. Let me look at it next week when I'll have time. Could you please add a short step by step instruction how you configured IPA client on Mac OS X? """ See the full comment at

[Freeipa-devel] [freeipa PR#699][comment] Fix libkrb5 filename for macOS

2017-04-07 Thread abbra
URL: https://github.com/freeipa/freeipa/pull/699 Title: #699: Fix libkrb5 filename for macOS abbra commented: """ There is a PEP8 error: PEP-8 errors: ./ipapython/session_storage.py:11:21: E225 missing whitespace around operator """ See the full comment at

[Freeipa-devel] [freeipa PR#699][synchronized] Fix libkrb5 filename for macOS

2017-04-07 Thread neffs
URL: https://github.com/freeipa/freeipa/pull/699 Author: neffs Title: #699: Fix libkrb5 filename for macOS Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/699/head:pr699 git checkout pr699 From

[Freeipa-devel] [freeipa PR#699][comment] Fix libkrb5 filename for macOS

2017-04-07 Thread neffs
URL: https://github.com/freeipa/freeipa/pull/699 Title: #699: Fix libkrb5 filename for macOS neffs commented: """ I added the steps here: https://pagure.io/freeipa/issue/6850 """ See the full comment at https://github.com/freeipa/freeipa/pull/699#issuecomment-292532086 -- Manage your

[Freeipa-devel] [freeipa PR#700][opened] Use entry_points for ipa CLI

2017-04-07 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/700 Author: tiran Title: #700: Use entry_points for ipa CLI Action: opened PR body: """ Fix problem with hard-coded shebang in ipa command line tool by using a proper setuptools entry point for the console script. ipaclient is now an executable

[Freeipa-devel] [bind-dyndb-ldap PR#17][opened] settings: skip unconfigured values

2017-04-07 Thread tomaskrizek
URL: https://github.com/freeipa/bind-dyndb-ldap/pull/17 Author: tomaskrizek Title: #17: settings: skip unconfigured values Action: opened PR body: """ When a value is not configured in settings map, it is skipped. If it is the last processed value, the result of ISC_R_NOTFOUND would cause the

[Freeipa-devel] [freeipa PR#699][synchronized] Fix libkrb5 filename for macOS

2017-04-07 Thread neffs
URL: https://github.com/freeipa/freeipa/pull/699 Author: neffs Title: #699: Fix libkrb5 filename for macOS Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/699/head:pr699 git checkout pr699 From

[Freeipa-devel] [freeipa PR#699][comment] Fix libkrb5 filename for macOS

2017-04-07 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/699 Title: #699: Fix libkrb5 filename for macOS tiran commented: """ @neffs thanks David. Please squash your commits into a single commit (```git rebase -i @~3``` and use fixup on the 2nd and 3rd commit, then git push --force). """ See the full

[Freeipa-devel] [freeipa PR#699][synchronized] Fix libkrb5 filename for macOS

2017-04-07 Thread neffs
URL: https://github.com/freeipa/freeipa/pull/699 Author: neffs Title: #699: Fix libkrb5 filename for macOS Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/699/head:pr699 git checkout pr699 From

[Freeipa-devel] [freeipa PR#700][synchronized] Use entry_points for ipa CLI

2017-04-07 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/700 Author: tiran Title: #700: Use entry_points for ipa CLI Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/700/head:pr700 git checkout pr700 From

[Freeipa-devel] [freeipa PR#699][edited] ipaclient/ipapython macOS compatibility fixes

2017-04-07 Thread neffs
URL: https://github.com/freeipa/freeipa/pull/699 Author: neffs Title: #699: ipaclient/ipapython macOS compatibility fixes Action: edited Changed field: title Original value: """ macOS compatibility fixes """ -- Manage your subscription for the Freeipa-devel mailing list:

[Freeipa-devel] [freeipa PR#699][edited] macOS compatibility fixes

2017-04-07 Thread neffs
URL: https://github.com/freeipa/freeipa/pull/699 Author: neffs Title: #699: macOS compatibility fixes Action: edited Changed field: title Original value: """ Fix libkrb5 filename for macOS """ -- Manage your subscription for the Freeipa-devel mailing list:

[Freeipa-devel] [freeipa PR#699][synchronized] ipaclient/ipapython macOS compatibility fixes

2017-04-07 Thread neffs
URL: https://github.com/freeipa/freeipa/pull/699 Author: neffs Title: #699: ipaclient/ipapython macOS compatibility fixes Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/699/head:pr699 git checkout pr699

[Freeipa-devel] [freeipa PR#682][edited] [WIP] ipserver/dcerpc: unify error processing

2017-04-07 Thread abbra
URL: https://github.com/freeipa/freeipa/pull/682 Author: abbra Title: #682: [WIP] ipserver/dcerpc: unify error processing Action: edited Changed field: title Original value: """ [WIP] ipserver/dcerpc: unify error processing """ -- Manage your subscription for the Freeipa-devel mailing

[Freeipa-devel] [freeipa PR#700][comment] Use entry_points for ipa CLI

2017-04-07 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/700 Title: #700: Use entry_points for ipa CLI tomaskrizek commented: """ Looks good, tested with both rpm and wheels. Ack if the tests pass. """ See the full comment at https://github.com/freeipa/freeipa/pull/700#issuecomment-292547332 -- Manage

[Freeipa-devel] [freeipa PR#700][comment] Use entry_points for ipa CLI

2017-04-07 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/700 Title: #700: Use entry_points for ipa CLI martbab commented: """ I wish all of our scripts could be autogenerated from entry points. Long road ahead for that effort. However, this is a good start IMHO. """ See the full comment at

[Freeipa-devel] [freeipa PR#682][comment] ipserver/dcerpc: unify error processing

2017-04-07 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/682 Title: #682: ipserver/dcerpc: unify error processing MartinBasti commented: """ Please fix issues found by pylint ``` * Module ipaserver.plugins.trust ipaserver/plugins/trust.py:1753: [W0612(unused-variable),

[Freeipa-devel] [freeipa PR#618][synchronized] Tox testing support for client wheel packages

2017-04-07 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/618 Author: tiran Title: #618: Tox testing support for client wheel packages Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/618/head:pr618 git checkout pr618

[Freeipa-devel] [freeipa PR#701][opened] ipa help doesn't always work

2017-04-07 Thread neffs
URL: https://github.com/freeipa/freeipa/pull/701 Author: neffs Title: #701: ipa help doesn't always work Action: opened PR body: """ `ipa help` will not work when calling it when no schema is cached. """ To pull the PR as Git branch: git remote add ghfreeipa

[Freeipa-devel] [freeipa PR#682][comment] [WIP] ipserver/dcerpc: unify error processing

2017-04-07 Thread abbra
URL: https://github.com/freeipa/freeipa/pull/682 Title: #682: [WIP] ipserver/dcerpc: unify error processing abbra commented: """ Updated patches and descriptions to include bug references. """ See the full comment at https://github.com/freeipa/freeipa/pull/682#issuecomment-292545612 --

[Freeipa-devel] [freeipa PR#698][closed] install: request service certs after host keytab is set up

2017-04-07 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/698 Author: HonzaCholasta Title: #698: install: request service certs after host keytab is set up Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/698/head:pr698 git

[Freeipa-devel] [freeipa PR#698][+ack] install: request service certs after host keytab is set up

2017-04-07 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/698 Title: #698: install: request service certs after host keytab is set up Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#682][synchronized] [WIP] ipserver/dcerpc: unify error processing

2017-04-07 Thread abbra
URL: https://github.com/freeipa/freeipa/pull/682 Author: abbra Title: #682: [WIP] ipserver/dcerpc: unify error processing Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/682/head:pr682 git checkout pr682

[Freeipa-devel] [freeipa PR#698][+pushed] install: request service certs after host keytab is set up

2017-04-07 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/698 Title: #698: install: request service certs after host keytab is set up Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#698][comment] install: request service certs after host keytab is set up

2017-04-07 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/698 Title: #698: install: request service certs after host keytab is set up martbab commented: """ master: * b189be12ecd1ba9efa35daf41e7e04a9362c6a5e dsinstance: reconnect ldap2 after DS is restarted by certmonger *