Re: [Freeipa-devel] [PATCH 0001] Fixed incorrect ldap_uri population

2015-04-24 Thread Oleg Fayans
This one is even more correct. On 04/24/2015 04:05 PM, Oleg Fayans wrote: Corresponding ticket is https://fedorahosted.org/freeipa/ticket/5002 -- Oleg Fayans Quality Engineer FreeIPA team RedHat. From c0b7322c804e9cc327b2caa248e2b1d6614e4e06 Mon Sep 17 00:00:00 2001 From: ofayans ofay

[Freeipa-devel] [PATCH 0001] Fixed incorrect ldap_uri population

2015-04-24 Thread Oleg Fayans
Corresponding ticket is https://fedorahosted.org/freeipa/ticket/5002 -- Oleg Fayans Quality Engineer FreeIPA team RedHat. From c0b7322c804e9cc327b2caa248e2b1d6614e4e06 Mon Sep 17 00:00:00 2001 From: ofayans ofay...@redhat.com Date: Fri, 24 Apr 2015 15:40:14 +0200 Subject: [PATCH 1/2] Fixed

Re: [Freeipa-devel] Replication Topology design feedback

2015-05-06 Thread Oleg Fayans
to other developers and we would have it archived for other uses. On 05/04/2015 04:20 PM, Ludwig Krispenz wrote: On 04/30/2015 03:22 PM, Oleg Fayans wrote: Hi Ludwig, While getting myself familiar with Replication Topology Plugin design page I've found a number of places that need some

Re: [Freeipa-devel] [UPSTREAM_FAILURES] Latest changes affect freeipa builds and client configuration

2015-05-20 Thread Oleg Fayans
Hi Martin, On 05/19/2015 06:35 PM, Martin Basti wrote: On 19/05/15 17:21, Oleg Fayans wrote: Dear colleagues I would like to notify you, that: 1. some of the recent changes in the upstream repo have broken the freeipa-client configuration. The symptoms are as follows: at some point during

Re: [Freeipa-devel] [UPSTREAM_FAILURES] Latest changes affect freeipa builds and client configuration

2015-05-20 Thread Oleg Fayans
Hi Martin, Thank you! On 05/19/2015 05:42 PM, Martin Babinsky wrote: Hello Oleg, On 05/19/2015 05:21 PM, Oleg Fayans wrote: Dear colleagues I would like to notify you, that: 1. some of the recent changes in the upstream repo have broken the freeipa-client configuration. The symptoms

Re: [Freeipa-devel] [PATCH] manage replication topology in the shared tree

2015-05-20 Thread Oleg Fayans
patches. E.g. DS plugin, installation, python plugin. So ds plugin review could be separated from the python part. -- Oleg Fayans Quality Engineer FreeIPA team RedHat. -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel

[Freeipa-devel] TypeError at ipa-server-uninstall

2015-06-02 Thread Oleg Fayans
server Unconfiguring ipa_memcached Unconfiguring ipa-otpd Unexpected error - see /var/log/ipaserver-uninstall.log for details: TypeError: coercing to Unicode: need string or buffer, NoneType found The logfile is attached. This error was reproduced twice. -- Oleg Fayans Quality Engineer FreeIPA team

Re: [Freeipa-devel] [PATCH 0007] replica install fails with domain level 1

2015-06-02 Thread Oleg Fayans
01:48 PM, Ludwig Krispenz wrote: On 06/01/2015 01:34 PM, Oleg Fayans wrote: So far I've bumped into problem, using the newly built packages: I've installed a master, a replica (replica1) Then replica3 (prepared on replica1), so, my topology looks like this: master = replica1 = replica3

Re: [Freeipa-devel] [PATCH 0008-0009] use 1 as domain level to activate plugin, fix a crash when removing a replica

2015-06-02 Thread Oleg Fayans
, with the first patch the topo plugin no longer uses plugin version to compare to set domainlevel, always gets activated if dom level = 1 the second patch fixes a crash at replica removal Ludwig -- Oleg Fayans Quality Engineer FreeIPA team RedHat. -- Manage your subscription for the Freeipa

Re: [Freeipa-devel] TypeError at ipa-server-uninstall

2015-06-02 Thread Oleg Fayans
Thanks Martin! It's not merged yet, I can suggest? I think I'll apply it as it is manually then. On 06/02/2015 10:41 AM, Martin Basti wrote: On 02/06/15 10:37, Oleg Fayans wrote: Hi all, I've just caught a TypeError while performing the ipa-server-install --uninstall on replicas running

Re: [Freeipa-devel] [PATCH] 0016..0018 profiles regression fixes

2015-06-05 Thread Oleg Fayans
that should have been a period! Here's an updated 0017..0018. Thanks, Fraser -- Oleg Fayans Quality Engineer FreeIPA team RedHat. -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http

Re: [Freeipa-devel] Topology plugin quirks

2015-06-03 Thread Oleg Fayans
should remove its' entry from cn=masters). 3.) It seems that the removal of topology suffixes containing functioning segments is not handled well. I once tried to do this and it led to segmentation fault on the dirsrv instance. What is the expected behavior in this scenario? -- Oleg Fayans

Re: [Freeipa-devel] Topology plugin quirks

2015-06-03 Thread Oleg Fayans
Hi Ludwig On 06/03/2015 12:23 PM, Ludwig Krispenz wrote: On 06/03/2015 11:51 AM, Oleg Fayans wrote: I confirm every point of this. did you test with all the latest patches applied ? In your issues you refer to crashes, the crashes reported should be resolved, if you still have crashes

Re: [Freeipa-devel] KeyError raised upon replica installation

2015-06-03 Thread Oleg Fayans
BTW, Ludwig, it seems you forgot to attach the 0010 patch to your email. At least, your first letter from 06/02/2015 05:08 PM, containing PATCH 0010 does not have the actual patch On 06/03/2015 02:53 PM, Oleg Fayans wrote: Hi Ludwig, I'll rebuild the packages again with the whole set

Re: [Freeipa-devel] KeyError raised upon replica installation

2015-06-03 Thread Oleg Fayans
, Oleg Fayans wrote: Hi all, The following error was caught during replica installation (I used all the latest patches from Ludwig and Martin Basti): root@localhost:/home/ofayans/rpms]$ ipa-replica-install --setup-ca --setup-dns --forwarder 10.38.5.26 /var/lib/ipa/replica-info-replica1.zaeba.li.gpg

Re: [Freeipa-devel] KeyError raised upon replica installation

2015-06-03 Thread Oleg Fayans
Hi Ludwig, I'll rebuild the packages again with the whole set of patches including 0010 and 0011 and try again. Thanks! On 06/03/2015 02:21 PM, Ludwig Krispenz wrote: On 06/03/2015 02:05 PM, Oleg Fayans wrote: Update: The original error occurs ONLY when installing a replica from a gpg

Re: [Freeipa-devel] topology issues

2015-06-09 Thread Oleg Fayans
On 06/09/2015 04:04 PM, Ludwig Krispenz wrote: On 06/09/2015 03:55 PM, Oleg Fayans wrote: Hi everybody, The current status of Topology plugin testing is as follows: 1. There is still no proper way of removing the replica. Standard procedure using `ipa-replica-manage del` throws Server

Re: [Freeipa-devel] topology issues

2015-06-09 Thread Oleg Fayans
Simo, yep, I entered the name manually when writing this letter On 06/09/2015 04:28 PM, Simo Sorce wrote: On Tue, 2015-06-09 at 16:25 +0200, Oleg Fayans wrote: Then, after issuing `ipa-replica-manage-del f2replica1.bagam.net Is this a copy and paste error or the command you actually used

Re: [Freeipa-devel] topology issues

2015-06-09 Thread Oleg Fayans
On 06/09/2015 04:19 PM, Ludwig Krispenz wrote: On 06/09/2015 04:14 PM, Oleg Fayans wrote: On 06/09/2015 04:04 PM, Ludwig Krispenz wrote: On 06/09/2015 03:55 PM, Oleg Fayans wrote: Hi everybody, The current status of Topology plugin testing is as follows: 1. There is still no proper

[Freeipa-devel] SkipPluginModule error raised during new code installation

2015-06-04 Thread Oleg Fayans
-- Oleg Fayans Quality Engineer FreeIPA team RedHat. -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] f22 issues with freeipa installation

2015-06-04 Thread Oleg Fayans
/samba/codepages/valid.dat /var/lib/samba/private /var/log/samba /var/log/samba/old /var/run/samba /var/run/winbindd -- Oleg Fayans Quality Engineer FreeIPA team RedHat. -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute

Re: [Freeipa-devel] f22 issues with freeipa installation

2015-06-04 Thread Oleg Fayans
Resolved, the packages were built on f21. My bad On 06/04/2015 09:57 AM, Oleg Fayans wrote: Hi everyone, The following problems raise when I try to install the latest FreeIPA code on a fresh f22 machine: root@f22master:/home/ofayans/rpms]$ rpm -ihv *.rpm error: Failed dependencies

[Freeipa-devel] topology issues

2015-06-09 Thread Oleg Fayans
:09:54:46 -0400] - Entry uid=admin,ou=people,o=ipaca -- attribute krbExtraData not allowed -- Oleg Fayans Quality Engineer FreeIPA team RedHat. root@f22master:/home/ofayans]$ ipa topologysegment-find Suffix name: realm -- 2 segments matched -- Segment name

Re: [Freeipa-devel] topology-related issues

2015-06-23 Thread Oleg Fayans
On 06/23/2015 02:27 PM, Ludwig Krispenz wrote: On 06/23/2015 11:44 AM, Oleg Fayans wrote: It looks like the second issue was caused by not running ipa service on vm-244.idm.lab.eng.brq.redhat.com. However, after manual start of the ipa service on thios node, I was still unable to setup

Re: [Freeipa-devel] [PATCH 0016] clear start attr from segment after initialization

2015-06-22 Thread Oleg Fayans
: fix for ticket #5065, removing start - after online init copmpleted - additionally check after startup -- Oleg Fayans Quality Engineer FreeIPA team RedHat. -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute

Re: [Freeipa-devel] [PATCH 0016] clear start attr from segment after initialization

2015-06-22 Thread Oleg Fayans
Oops, you are right! That fixed the issue On 06/22/2015 12:09 PM, Ludwig Krispenz wrote: did you apply 0014 and 0015 before ? On 06/22/2015 11:46 AM, Oleg Fayans wrote: applying freeipa-lkrispen-0016-clear-start-attr-from-segment-after-initialization.patch error: patch failed: daemons/ipa

Re: [Freeipa-devel] LDAP errors in the dirsrv logs during replica preparation

2015-06-22 Thread Oleg Fayans
Hi Petr, team, I was able to reproduce it today with sequential installation. Again: one of three replicas caught this issue. Hostnames were other than those on Friday, all three vm's from the same template. On 06/19/2015 05:10 PM, Petr Vobornik wrote: On 06/19/2015 04:27 PM, Oleg Fayans

Re: [Freeipa-devel] Topology: Central node removal in star topology

2015-06-24 Thread Oleg Fayans
:04 AM, Oleg Fayans wrote: Hi everybody, Current implementation of topology plugin (including patch 878 from Petr) allows the deletion of the central node in the star topology. I had the following topology: vm056 vm036 \ / | vm175

[Freeipa-devel] Topology: Central node removal in star topology

2015-06-24 Thread Oleg Fayans
recalculate the resulting topology and send it to all nodes before actual removal. -- Oleg Fayans Quality Engineer FreeIPA team RedHat. -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http

Re: [Freeipa-devel] Topology: Central node removal in star topology

2015-06-24 Thread Oleg Fayans
On 06/24/2015 11:47 AM, Ludwig Krispenz wrote: On 06/24/2015 11:36 AM, Oleg Fayans wrote: On 06/24/2015 11:25 AM, Ludwig Krispenz wrote: Oleg, the topology plugin relies on existing connection between servers which remain in a topolgy. If you remove a central node in your topology you

[Freeipa-devel] topologysegment-mod question

2015-06-24 Thread Oleg Fayans
, iparepltoposegment $ ipa topologysegment-mod realm 127-to-244 --setattr=connectivity=left-right ipa: ERROR: attribute connectivity not allowed $ ipa topologysegment-mod realm 127-to-244 --setattr=direction=left-right ipa: ERROR: attribute direction not allowed -- Oleg Fayans Quality Engineer

Re: [Freeipa-devel] topologysegment-mod question

2015-06-24 Thread Oleg Fayans
On 06/24/2015 02:25 PM, Ludwig Krispenz wrote: On 06/24/2015 01:59 PM, Oleg Fayans wrote: Hi Petr, Thanks for clarification! It seems though, that all possible attributes are already mapped to the topologysegment-mod options: [13:42:45]ofayans@vm-244:~]$ ipa show-mappings

Re: [Freeipa-devel] Topology: Central node removal in star topology

2015-06-24 Thread Oleg Fayans
On 06/24/2015 12:02 PM, Oleg Fayans wrote: On 06/24/2015 11:47 AM, Ludwig Krispenz wrote: On 06/24/2015 11:36 AM, Oleg Fayans wrote: On 06/24/2015 11:25 AM, Ludwig Krispenz wrote: Oleg, the topology plugin relies on existing connection between servers which remain in a topolgy

Re: [Freeipa-devel] topologysegment-mod question

2015-06-24 Thread Oleg Fayans
12:19 PM, Oleg Fayans wrote: Hi Ludwig, I see some contradictions in the way the segment modification cli is implemented: 1. $ ipa help topologysegment-mod Usage: ipa [global-options] topologysegment-mod TOPOLOGYSUFFIX NAME [options] $ ipa topologysegment-mod realm 127-to-244 --setattr=Segment

Re: [Freeipa-devel] Topology: Central node removal in star topology

2015-06-24 Thread Oleg Fayans
On 06/24/2015 12:28 PM, Ludwig Krispenz wrote: On 06/24/2015 12:02 PM, Oleg Fayans wrote: On 06/24/2015 11:47 AM, Ludwig Krispenz wrote: On 06/24/2015 11:36 AM, Oleg Fayans wrote: On 06/24/2015 11:25 AM, Ludwig Krispenz wrote: Oleg, the topology plugin relies on existing connection

[Freeipa-devel] [Test Plan] Manage replication topology

2015-06-24 Thread Oleg Fayans
Hi, The initial revision of the Replication Topology plugin Test Plan is available at http://www.freeipa.org/page/V4/Manage_replication_topology/Test_plan It does not yet contain testcases checking all possible Topology related actions, just a very basic stuff. -- Oleg Fayans Quality

Re: [Freeipa-devel] topologysegment-mod question

2015-06-24 Thread Oleg Fayans
On 06/24/2015 02:35 PM, Ludwig Krispenz wrote: On 06/24/2015 02:30 PM, Oleg Fayans wrote: On 06/24/2015 02:25 PM, Ludwig Krispenz wrote: On 06/24/2015 01:59 PM, Oleg Fayans wrote: Hi Petr, Thanks for clarification! It seems though, that all possible attributes are already mapped

[Freeipa-devel] docker-based upstream builder

2015-06-24 Thread Oleg Fayans
to build the docker image (f22-based) can be found here: https://github.com/ofayans/freeipa_upstream_builder The local script to launch container is attached. -- Oleg Fayans Quality Engineer FreeIPA team RedHat. buildrpms.sh Description: application/shellscript -- Manage your subscription

[Freeipa-devel] LDAP errors in the dirsrv logs during replica preparation

2015-06-19 Thread Oleg Fayans
replicas simultaneously: 2 of them installed successfully and one - failed. All three replicas were launched from the same vm-template -- Oleg Fayans Quality Engineer FreeIPA team RedHat. 2015-06-19T13:01:36Z INFO Setting agreement cn=meTovm-069.idm.lab.eng.brq.redhat.com,cn=replica,cn=dc\=idm\,dc

[Freeipa-devel] topology-related issues

2015-06-23 Thread Oleg Fayans
.idm.lab.eng.brq.redhat.com-vm-244.idm.lab.eng.brq.redhat.com]: 069-to-244 ipa: ERROR: invalid 'rightnode': right node is not a topology node: vm-244.idm.lab.eng.brq.redhat.com -- Oleg Fayans Quality Engineer FreeIPA team RedHat. -- Manage your subscription for the Freeipa-devel mailing list: https

Re: [Freeipa-devel] topology-related issues

2015-06-23 Thread Oleg Fayans
valid', -1765328351) The dirsrv error log of this node is attached. On 06/23/2015 11:27 AM, Oleg Fayans wrote: Hi Ludwig, team, I have a couple of issues with the topology plugin. 1. I was able to remove the middle node in a line topology, which resulted in disconnecting a segment. I had master

[Freeipa-devel] topologysegment-mod question

2015-06-22 Thread Oleg Fayans
behavior? -- Oleg Fayans Quality Engineer FreeIPA team RedHat. -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

Re: [Freeipa-devel] [PATCH 0012-0012] more topology plugin fixes

2015-06-11 Thread Oleg Fayans
endpoints and connectivity - better manage the rdn of a replication agreements represented by a segment -- Oleg Fayans Quality Engineer FreeIPA team RedHat. -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA

[Freeipa-devel] Unable to prepare a replica file on a replica

2015-06-15 Thread Oleg Fayans
with it? The corresponding line in dirsrv error.log is: [15/Jun/2015:06:33:51 -0400] - Entry uid=admin,ou=people,o=ipaca -- attribute krbExtraData not allowed -- Oleg Fayans Quality Engineer FreeIPA team RedHat. -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com

Re: [Freeipa-devel] disabling topology segment has no effect

2015-06-18 Thread Oleg Fayans
Krispenz wrote: On 06/17/2015 05:43 PM, Oleg Fayans wrote: On 06/17/2015 05:34 PM, Ludwig Krispenz wrote: On 06/17/2015 05:26 PM, Oleg Fayans wrote: Hi Ludwig, On 06/17/2015 05:13 PM, Ludwig Krispenz wrote: Hi, On 06/17/2015 05:07 PM, Oleg Fayans wrote: On 06/17/2015 04:59 PM, Ludwig

Re: [Freeipa-devel] user deletion in offline mode does not get replicated after node recovery

2015-06-17 Thread Oleg Fayans
=accounts,dc=bagam,dc=net [16/Jun/2015:10:18:37 -0400] conn=8 op=9 RESULT err=0 tag=103 nentries=0 etime=0 csn=55802fd6 On 06/16/2015 04:49 PM, Oleg Fayans wrote: Hi all, I've bumped into a strange problem with only a part of changes implemented on master during replica outage get

[Freeipa-devel] disabling topology segment has no effect

2015-06-17 Thread Oleg Fayans
any of the nodes. -- Oleg Fayans Quality Engineer FreeIPA team RedHat. -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

Re: [Freeipa-devel] disabling topology segment has no effect

2015-06-17 Thread Oleg Fayans
On 06/17/2015 04:31 PM, Simo Sorce wrote: On Wed, 2015-06-17 at 16:15 +0200, Ludwig Krispenz wrote: On 06/17/2015 03:37 PM, Oleg Fayans wrote: Hi Ludwig, Petr, Presently I have noticed that disabling a segment, using `ipa topologysegment-mod realm replica1-to-replica2 --enabled=off` does

Re: [Freeipa-devel] disabling topology segment has no effect

2015-06-17 Thread Oleg Fayans
Hi Ludwig, On 06/17/2015 04:15 PM, Ludwig Krispenz wrote: On 06/17/2015 03:37 PM, Oleg Fayans wrote: Hi Ludwig, Petr, Presently I have noticed that disabling a segment, using `ipa topologysegment-mod realm replica1-to-replica2 --enabled=off` does not have effect on the way the data

Re: [Freeipa-devel] disabling topology segment has no effect

2015-06-17 Thread Oleg Fayans
Hi Ludwig, On 06/17/2015 05:13 PM, Ludwig Krispenz wrote: Hi, On 06/17/2015 05:07 PM, Oleg Fayans wrote: On 06/17/2015 04:59 PM, Ludwig Krispenz wrote: On 06/17/2015 04:46 PM, Oleg Fayans wrote: Hi Ludwig, On 06/17/2015 04:15 PM, Ludwig Krispenz wrote: On 06/17/2015 03:37 PM, Oleg

Re: [Freeipa-devel] disabling topology segment has no effect

2015-06-17 Thread Oleg Fayans
On 06/17/2015 05:34 PM, Ludwig Krispenz wrote: On 06/17/2015 05:26 PM, Oleg Fayans wrote: Hi Ludwig, On 06/17/2015 05:13 PM, Ludwig Krispenz wrote: Hi, On 06/17/2015 05:07 PM, Oleg Fayans wrote: On 06/17/2015 04:59 PM, Ludwig Krispenz wrote: On 06/17/2015 04:46 PM, Oleg Fayans wrote

[Freeipa-devel] upstream build failure

2015-06-15 Thread Oleg Fayans
=permissions,cn=pbac,dc=ipa,dc=example;) dn: cn=sudocmds,cn=sudo,dc=ipa,dc=example Managed permission ACI validation failed. Re-check permission changes and run `makeaci`. ACI.txt validation failed Makefile:130: recipe for target 'version-update' failed make: *** [version-update] Error 1 -- Oleg Fayans

Re: [Freeipa-devel] [PATCH] 857 topology: ipa management commands

2015-05-27 Thread Oleg Fayans
/freeipa/ticket/4302 New version attached: - domainlevel_show usage changed to domainlevel_get - updated VERSION - added more attrs to default_attributes -- Oleg Fayans Quality Engineer FreeIPA team RedHat. -- Manage your subscription for the Freeipa-devel mailing list: https

[Freeipa-devel] topology + domainlevels + testing

2015-05-29 Thread Oleg Fayans
a special field in the wiki header of design pages displaying the link to the corresponding testplan page (somewhere between Ticket and Target version, for example). WDYT? -- Oleg Fayans Quality Engineer FreeIPA team RedHat. -- Manage your subscription for the Freeipa-devel mailing list: https

Re: [Freeipa-devel] topology + domainlevels + testing

2015-05-29 Thread Oleg Fayans
Thank you! On 05/29/2015 12:20 PM, Martin Kosek wrote: Done - I updated the template - there is new test_plan attribute. On 05/29/2015 12:06 PM, Oleg Fayans wrote: Examples are 1. http://www.freeipa.org/page/V4/Manage_replication_topology http://www.freeipa.org/page/Www.freeipa.org/page/V4

Re: [Freeipa-devel] topology* commands not exported through ipalib.api.Command

2015-05-29 Thread Oleg Fayans
Hi Martin, Thanks for the clarification! On 05/29/2015 12:05 PM, Martin Kosek wrote: On 05/29/2015 12:01 PM, Oleg Fayans wrote: Hi Ludwig, Should topology plugin export it's commands through ipalib.api? Currently when I import ipalib.api and inspect available commands in api.Command

Re: [Freeipa-devel] topology + domainlevels + testing

2015-05-29 Thread Oleg Fayans
/2015 12:02 PM, Martin Kosek wrote: On 05/29/2015 11:28 AM, Oleg Fayans wrote: Hi all, Is there already a separate testplan for Domain Levels feature? If not, should I probably take care of domainlevel-specific testcases in the scope of the Topology testplan, since these features are closely

Re: [Freeipa-devel] [PATCH 0007] replica install fails with domain level 1

2015-06-01 Thread Oleg Fayans
to install 2 replicas with domain level 1 in one topology. Code looks good to me as well. Tentative ACK (would be nice if it was skimmed by Thierry). -- Oleg Fayans Quality Engineer FreeIPA team RedHat. -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman

[Freeipa-devel] Domain level change failed

2015-06-01 Thread Oleg Fayans
not be able to *raise* domain level if one of the replicas does not support this, but there should be no limitations on *lowering* the domain level. -- Oleg Fayans Quality Engineer FreeIPA team RedHat. -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo

Re: [Freeipa-devel] New replica installation and topology - we need stable base

2015-05-27 Thread Oleg Fayans
am for example not sure if the IPA masters hostgroup is needed for Topology work without Custodia, I think Ludwig used some other group for authorization purposes in Topology. Thanks. -- Oleg Fayans Quality Engineer FreeIPA team RedHat. -- Manage your subscription for the Freeipa-devel

Re: [Freeipa-devel] Domain level for topology plugin = 2

2015-05-28 Thread Oleg Fayans
Hi Simo, On 05/28/2015 03:52 PM, Simo Sorce wrote: On Thu, 2015-05-28 at 15:39 +0200, Oleg Fayans wrote: On 05/28/2015 03:26 PM, Simo Sorce wrote: On Thu, 2015-05-28 at 14:11 +0200, Petr Spacek wrote: On 28.5.2015 10:49, Martin Kosek wrote: On 05/28/2015 09:05 AM, Petr Spacek wrote

[Freeipa-devel] KeyError raised upon replica installation

2015-06-02 Thread Oleg Fayans
. The log is attached -- Oleg Fayans Quality Engineer FreeIPA team RedHat. ipareplica-install.log.gz Description: application/gzip -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org

Re: [Freeipa-devel] [PATCH 0329] ipa-replica-manage: Do not allow topology altering commands

2015-06-02 Thread Oleg Fayans
://fedorahosted.org/freeipa/ticket/4302 -- Oleg Fayans Quality Engineer FreeIPA team RedHat. -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] Replication Topology plugin issues

2015-05-25 Thread Oleg Fayans
entry You may need to manually remove them from the tree Failed to cleanup replica1.pesen.net DNS entries: no matching entry found You may need to manually remove them from the tree IIRC upon one of the early discussions with Ludwig, this is yet to be implemented. -- Oleg Fayans Quality Engineer

Re: [Freeipa-devel] Replication Topology plugin issues

2015-05-26 Thread Oleg Fayans
PM, Oleg Fayans wrote: Hi, Playing around with the replication topology plugin, I've noticed a couple of issues: 1. around 50% of attempts to setup a replica of a freeipa master with topology plugin enabled (domain level set to 1.0) end up with the following error message in the stdoutput

[Freeipa-devel] conflict in the 4.2 packages freeipa-server and freeipa-server-dns

2015-08-21 Thread Oleg Fayans
expiration check performed 0:00:39 ago on Fri Aug 21 09:48:30 2015. Error: package freeipa-server-dns-4.2.0-20150821123735Zjenkins41git6b86238.fc22.x86_64 obsoletes freeipa-server = 4.2.0.0 provided by freeipa-server-4.2.0-20150821123735Zjenkins41git6b86238.fc22.x86_64 -- Oleg Fayans Quality

Re: [Freeipa-devel] [PATCH] small fixes related to running dnssec tests in RHEL

2015-08-24 Thread Oleg Fayans
Hi Martin, On 08/24/2015 02:36 PM, Martin Basti wrote: On 08/24/2015 01:28 PM, Oleg Fayans wrote: Hi, Could anyone review this. We are really blocked with testing on RHEL and Patch 0005 fixes it. Thank you. On 08/21/2015 10:52 AM, Oleg Fayans wrote: Hi list, Here are the the fixes

[Freeipa-devel] ipa-replica-prepare requests reverse zone on RHEL

2015-08-20 Thread Oleg Fayans
-prepare -p 'password' --ip-address 10.34.54.25 dell-pe1950-05.rhts.eng.brq.redhat.com Do you want to configure the reverse zone? [yes]: -- Oleg Fayans Quality Engineer FreeIPA team RedHat. -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa

Re: [Freeipa-devel] ipa-replica-prepare requests reverse zone on RHEL

2015-08-20 Thread Oleg Fayans
Hi Martin On 08/20/2015 11:33 AM, Martin Basti wrote: On 08/20/2015 10:18 AM, Oleg Fayans wrote: Hi all, I am trying to run integration tests for dnssec in RHEL-7.2 The tests keep failing at the step of preparing the replica. I figured out, the ipa-replica-prepare with the standard

[Freeipa-devel] [PATCH 0003] Added PyYAML as a dependency for ipa-tests, fixed a replica preparation in RHEL

2015-08-20 Thread Oleg Fayans
Fixed two failures of integration tests under RHEL: 1. PyYAML, needed for integration tests is not installed as a dependency 2. ipa-replica-prepare requests a reverse zone info under RHEL. -- Oleg Fayans Quality Engineer FreeIPA team RedHat. From 335ccc8a63b457e479b7f4e21fe4131e788c455d Mon Sep

Re: [Freeipa-devel] ipa-replica-prepare requests reverse zone on RHEL

2015-08-20 Thread Oleg Fayans
. On 08/20/2015 12:37 PM, Oleg Fayans wrote: On 08/20/2015 12:01 PM, Martin Basti wrote: On 08/20/2015 11:52 AM, Martin Basti wrote: On 08/20/2015 11:42 AM, Oleg Fayans wrote: Hi Martin On 08/20/2015 11:33 AM, Martin Basti wrote: On 08/20/2015 10:18 AM, Oleg Fayans wrote: Hi all, I am

Re: [Freeipa-devel] ipa-replica-prepare requests reverse zone on RHEL

2015-08-20 Thread Oleg Fayans
On 08/20/2015 12:01 PM, Martin Basti wrote: On 08/20/2015 11:52 AM, Martin Basti wrote: On 08/20/2015 11:42 AM, Oleg Fayans wrote: Hi Martin On 08/20/2015 11:33 AM, Martin Basti wrote: On 08/20/2015 10:18 AM, Oleg Fayans wrote: Hi all, I am trying to run integration tests

Re: [Freeipa-devel] ipa-replica-prepare requests reverse zone on RHEL

2015-08-20 Thread Oleg Fayans
: It could be, please file a bug. On 08/20/2015 12:51 PM, Oleg Fayans wrote: Hi Martin, I guess, I know where is the problem. During replica-install the replica tries to resolve it's own ip to a hostname to check whether the dns is configured correctly. And fails, since we specified --no-reverse

Re: [Freeipa-devel] ipa-replica-prepare requests reverse zone on RHEL

2015-08-20 Thread Oleg Fayans
On 08/20/2015 02:46 PM, Martin Basti wrote: On 08/20/2015 02:40 PM, Oleg Fayans wrote: Done. https://fedorahosted.org/freeipa/ticket/5240 The initial question however is still unsolved: why does ipa-replica-prepare behaves differently on fedora and rhel? I thought, rhel host had more than

Re: [Freeipa-devel] ipa-replica-prepare requests reverse zone on RHEL

2015-08-20 Thread Oleg Fayans
On 08/20/2015 03:11 PM, Petr Vobornik wrote: On 08/20/2015 02:46 PM, Martin Basti wrote: On 08/20/2015 02:40 PM, Oleg Fayans wrote: Done. https://fedorahosted.org/freeipa/ticket/5240 The initial question however is still unsolved: why does ipa-replica-prepare behaves differently on fedora

Re: [Freeipa-devel] ipa-replica-prepare requests reverse zone on RHEL

2015-08-20 Thread Oleg Fayans
On 08/20/2015 03:19 PM, Simo Sorce wrote: On Thu, 2015-08-20 at 15:11 +0200, Petr Vobornik wrote: On 08/20/2015 02:46 PM, Martin Basti wrote: On 08/20/2015 02:40 PM, Oleg Fayans wrote: Done. https://fedorahosted.org/freeipa/ticket/5240 The initial question however is still unsolved: why

[Freeipa-devel] [PATCH] small fixes related to running dnssec tests in RHEL

2015-08-21 Thread Oleg Fayans
Hi list, Here are the the fixes for https://fedorahosted.org/freeipa/ticket/5240 plus pep8-related fixes, plus created a user-friendly error message at import error. obsoletes my previous patch -- Oleg Fayans Quality Engineer FreeIPA team RedHat. From 61bef8f0f8377340deef136ae3125063d06458ce

Re: [Freeipa-devel] [PATCH 0003] Added PyYAML as a dependency for ipa-tests, fixed a replica preparation in RHEL

2015-08-21 Thread Oleg Fayans
Agreed. Please, disregard this patch. On 08/21/2015 08:57 AM, Tomas Babej wrote: On 08/20/2015 12:08 PM, Martin Babinsky wrote: On 08/20/2015 11:48 AM, Oleg Fayans wrote: Fixed two failures of integration tests under RHEL: 1. PyYAML, needed for integration tests is not installed

Re: [Freeipa-devel] [PATCH] First part of integration tests for Topology Plugin

2015-08-19 Thread Oleg Fayans
Hi Martin, As discussed, here is a new version with pep8-related fixes On 08/14/2015 10:44 AM, Oleg Fayans wrote: Hi Martin, Already noticed that. Implemented the named groups as Tomas advised. Added the third test for http://www.freeipa.org/page/V4/Manage_replication_topology/Test_plan

[Freeipa-devel] [PATCH 0006] Fixed installation failures

2015-08-24 Thread Oleg Fayans
Hi all. The current issue [1] effectively blocks testing of 4.2 branch. Here is (one of the possible) solution, that proved to work. [1] https://www.redhat.com/archives/freeipa-devel/2015-August/msg00085.html -- Oleg Fayans Quality Engineer FreeIPA team RedHat. From

Re: [Freeipa-devel] Unable to install bits from ipa-4-2 branch

2015-08-24 Thread Oleg Fayans
the naming scheme of the packages (freeipa-4.2.0-2015* to freeipa-4.2.0.2015*). Could we implement the change in freeipa.spec.in, proposed by Jan? I mean, Obsoletes: %{name}-server = 4.2.0.0-0.0 -- Oleg Fayans Quality Engineer FreeIPA team RedHat. -- Manage your subscription for the Freeipa-devel

Re: [Freeipa-devel] [PATCH] small fixes related to running dnssec tests in RHEL

2015-08-24 Thread Oleg Fayans
Hi, Could anyone review this. We are really blocked with testing on RHEL and Patch 0005 fixes it. Thank you. On 08/21/2015 10:52 AM, Oleg Fayans wrote: Hi list, Here are the the fixes for https://fedorahosted.org/freeipa/ticket/5240 plus pep8-related fixes, plus created a user-friendly

Re: [Freeipa-devel] ipa-server-install completely broken in upstream

2015-07-30 Thread Oleg Fayans
Hi Alexander, On 07/30/2015 02:23 PM, Alexander Bokovoy wrote: On Thu, 30 Jul 2015, Oleg Fayans wrote: Hi all, Any attempts to install ipa server from today's upstream code result in ipa-server-install silently exiting without doing anything. Here is how it looks like: root@f22master

[Freeipa-devel] ipa-server-install completely broken in upstream

2015-07-30 Thread Oleg Fayans
@f22master:/home/ofayans]$ ipa-server-install root@f22master:/home/ofayans]$ Any Ideas how did it happen? -- Oleg Fayans Quality Engineer FreeIPA team RedHat. -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http

Re: [Freeipa-devel] ipa-server-install completely broken in upstream

2015-07-30 Thread Oleg Fayans
Somehow the problem disappeared after vm restart. Don't know what it was On 07/30/2015 02:18 PM, Oleg Fayans wrote: Hi all, Any attempts to install ipa server from today's upstream code result in ipa-server-install silently exiting without doing anything. Here is how it looks like: root

Re: [Freeipa-devel] ipa-server-install completely broken in upstream

2015-07-30 Thread Oleg Fayans
On 07/30/2015 02:39 PM, Alexander Bokovoy wrote: On Thu, 30 Jul 2015, Oleg Fayans wrote: Hi Alexander, On 07/30/2015 02:23 PM, Alexander Bokovoy wrote: On Thu, 30 Jul 2015, Oleg Fayans wrote: Hi all, Any attempts to install ipa server from today's upstream code result in ipa-server

Re: [Freeipa-devel] ipa-server-install completely broken in upstream

2015-07-30 Thread Oleg Fayans
Hi Martin, On 07/30/2015 02:31 PM, Martin Basti wrote: On 30/07/15 14:18, Oleg Fayans wrote: Hi all, Any attempts to install ipa server from today's upstream code result in ipa-server-install silently exiting without doing anything. Here is how it looks like: root@f22master:/home/ofayans

Re: [Freeipa-devel] [PATCH] First part of integration tests for Topology Plugin

2015-08-11 Thread Oleg Fayans
Hi Martin, Thanks for the review! On 08/10/2015 07:08 PM, Martin Basti wrote: Thank you for patch, I have a few nitpicks: 1) On 10/08/15 13:05, Oleg Fayans wrote: +def create_segment(master, leftnode, rightnode): +create_segment(master, leftnode, rightnode) Why do you add the name

Re: [Freeipa-devel] [PATCH] First part of integration tests for Topology Plugin

2015-08-11 Thread Oleg Fayans
Hi Martin, On 08/11/2015 02:02 PM, Martin Basti wrote: NACK, comments inline. On 11/08/15 13:25, Oleg Fayans wrote: Hi Martin, Thanks for the review! On 08/10/2015 07:08 PM, Martin Basti wrote: Thank you for patch, I have a few nitpicks: 1) On 10/08/15 13:05, Oleg Fayans wrote: +def

Re: [Freeipa-devel] Topology Plugin design questions

2015-08-14 Thread Oleg Fayans
actually create a segment, it asks for connectivity interactively, which effectively blocks automation. On 08/13/2015 12:13 PM, Ludwig Krispenz wrote: On 08/13/2015 10:49 AM, Petr Vobornik wrote: On 08/13/2015 09:55 AM, Ludwig Krispenz wrote: On 08/10/2015 10:54 AM, Oleg Fayans wrote: Hi

Re: [Freeipa-devel] [PATCH] First part of integration tests for Topology Plugin

2015-08-14 Thread Oleg Fayans
:_Removal_of_a_topology_segment_is_allowed_only_if_there_is_at_least_one_more_segment_connecting_the_given_replica On 08/13/2015 05:06 PM, Martin Basti wrote: On 08/11/2015 03:36 PM, Oleg Fayans wrote: Hi Martin, On 08/11/2015 02:02 PM, Martin Basti wrote: NACK, comments inline. On 11/08/15 13:25, Oleg Fayans wrote: Hi Martin, Thanks for the review! On 08/10/2015 07:08 PM, Martin Basti wrote

[Freeipa-devel] [PATCH] First part of integration tests for Topology Plugin

2015-08-10 Thread Oleg Fayans
Hi list, Here are 2 integration tests for topology plugin. Plus I got rid of using nose in test_ipaserver/test_topology_plugin.py: I am using @pytest.mark.skipif instead -- Oleg Fayans Quality Engineer FreeIPA team RedHat. From ac28eb85f92d730134b9e8b047dd49d54fb07d3a Mon Sep 17 00:00:00

Re: [Freeipa-devel] [PATCH] First part of integration tests for Topology Plugin

2015-08-10 Thread Oleg Fayans
Last update to the patch. On 08/10/2015 09:41 AM, Oleg Fayans wrote: Hi all. Applied pPOP8 requirements to the code, removed unused imports. Please, disregard the first version of this patch On 08/10/2015 08:20 AM, Oleg Fayans wrote: Hi list, Here are 2 integration tests for topology plugin

Re: [Freeipa-devel] Topology Plugin design questions

2015-08-14 Thread Oleg Fayans
Hi Petr, Ludwig, On 08/14/2015 09:25 AM, Petr Vobornik wrote: On 08/14/2015 08:26 AM, Oleg Fayans wrote: The problem of current implementation of topologysegment-add is that it does not support '--connectivity' commandline option: $ ipa help topologysegment-add Usage: ipa [global-options

Re: [Freeipa-devel] [PATCH 0001] Test Topology plugin is listed among DS plugins

2015-07-22 Thread Oleg Fayans
Hi Martin, Patch updated. Thank you for the review! On 07/21/2015 05:45 PM, Martin Basti wrote: On 20/07/15 14:07, Oleg Fayans wrote: Hi Martin, Updated. On 07/20/2015 12:46 PM, Martin Basti wrote: On 20/07/15 11:57, Oleg Fayans wrote: +pwfile = api.env.dot_ipa + os.sep + .dmpw

Re: [Freeipa-devel] [PATCH 0001] Test Topology plugin is listed among DS plugins

2015-07-22 Thread Oleg Fayans
Hi Martin, Fixed. On 07/22/2015 09:26 AM, Martin Basti wrote: On 22/07/15 09:23, Oleg Fayans wrote: Hi Martin, Patch updated. Thank you for the review! On 07/21/2015 05:45 PM, Martin Basti wrote: On 20/07/15 14:07, Oleg Fayans wrote: Hi Martin, Updated. On 07/20/2015 12:46 PM, Martin

Re: [Freeipa-devel] [PATCH 0001] Test Topology plugin is listed among DS plugins

2015-07-23 Thread Oleg Fayans
Forgot to attach the new version, sorry! On 07/23/2015 10:32 AM, Oleg Fayans wrote: Hi Martin, On 07/22/2015 05:48 PM, Martin Basti wrote: On 22/07/15 15:19, Oleg Fayans wrote: Hi Martin, Fixed. On 07/22/2015 09:26 AM, Martin Basti wrote: On 22/07/15 09:23, Oleg Fayans wrote: Hi Martin

Re: [Freeipa-devel] [PATCH 0001] Test Topology plugin is listed among DS plugins

2015-07-23 Thread Oleg Fayans
Hi Martin, On 07/22/2015 05:48 PM, Martin Basti wrote: On 22/07/15 15:19, Oleg Fayans wrote: Hi Martin, Fixed. On 07/22/2015 09:26 AM, Martin Basti wrote: On 22/07/15 09:23, Oleg Fayans wrote: Hi Martin, Patch updated. Thank you for the review! On 07/21/2015 05:45 PM, Martin Basti wrote

[Freeipa-devel] right way to connect to DS with Directory Manager creds from the test

2015-07-17 Thread Oleg Fayans
manager has different password than admin 2. It does not work anyway, because kerberos is configured to store the cache not in the FILE:/tmp/krb5cc_%{uid}file (as the test expects), but rather in KEYRING:persistent:%{uid}:%{gid} Thank you in advance. -- Oleg Fayans Quality Engineer FreeIPA team

[Freeipa-devel] [PATCH 0001] Test Topology plugin is listed among DS plugins

2015-07-20 Thread Oleg Fayans
A simple test to check that Topology Plugin has registered itself in the ldap tree. -- Oleg Fayans Quality Engineer FreeIPA team RedHat. From 49280b12b1701c3baf095c8d3c209e14dce0dcde Mon Sep 17 00:00:00 2001 From: Oleg Fayans ofay...@redhat.com Date: Mon, 20 Jul 2015 11:50:32 +0200 Subject

  1   2   3   4   >