Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

Michael Šimáček msima...@redhat.com writes: On 2015-08-24 17:49, Simo Sorce wrote: On Mon, 2015-08-24 at 17:18 +0200, Michael Šimáček wrote: On 2015-08-24 14:50, Jan Cholasta wrote: On 23.8.2015 23:27, Michael Šimáček wrote: 3) ipa-adtrust-install fails with: admin password:

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

Michael Šimáček msima...@redhat.com writes: On 2015-08-20 12:32, Michael Šimáček wrote: Michael Šimáček msima...@redhat.com writes: Attaching new revision of the patch. Changes from the previous: - ldap2's connect now chooses the bind type same way as in ipaldap - get_default_realm usages

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

Michael Šimáček msima...@redhat.com writes: Attaching new revision of the patch. Changes from the previous: - ldap2's connect now chooses the bind type same way as in ipaldap - get_default_realm usages replaced by api.env.realm - fixed missing third kinit attempt in trust-fetch-domains -

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

Simo Sorce s...@redhat.com writes: On Thu, 2015-08-20 at 14:42 -0400, Robbie Harwood wrote: Michael Šimáček msima...@redhat.com writes: On 2015-08-20 12:32, Michael Šimáček wrote: Michael Šimáček msima...@redhat.com writes: Attaching new revision of the patch. Changes from the previous

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

Michael Šimáček msima...@redhat.com writes: GSSAPI doesn't provide any method (that I'm aware of) to get default ccache name. In most cases this is not needed as we can simply not pass any name and it will use the default. The ldap plugin had to be adjusted for this - the connect method now

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

Michael Šimáček msima...@redhat.com writes: On 2015-07-29 19:20, Robbie Harwood wrote: Michael Šimáček msima...@redhat.com writes: -# The keytab may have stale key material (from older trust-add run) -if not os.path.isfile(oneway_ccache_name): -oneway_ccache = kinit_keytab

Re: [Freeipa-devel] [PATCH] Port from python-kerberos library to python-gssapi

Michael Šimáček msima...@redhat.com writes: Attaching new revision of the patch that performs the full negotiation cycle. Looks good to me, thanks! signature.asc Description: PGP signature -- Manage your subscription for the Freeipa-devel mailing list:

Re: [Freeipa-devel] [PATCH] Port from python-kerberos library to python-gssapi

Michael Simacek msima...@redhat.com writes: - Original Message - From: Christian Heimes chei...@redhat.com To: freeipa-devel@redhat.com, msima...@redhat.com Sent: Tuesday, July 21, 2015 2:23:06 PM Subject: Re: [Freeipa-devel] [PATCH] Port from python-kerberos library to

Re: [Freeipa-devel] [PATCH] Port from python-kerberos library to python-gssapi

Michael Simacek msima...@redhat.com writes: This is a first part of my effort to port FreeIPA from Python3-incompatible Kerberos libraries to python-gssapi. This patch should replace python-kerberos with python-gssapi (both use C GSSAPI behind the scenes). Okay, Solly and I went through this

Re: [Freeipa-devel] [PATCH] Port from python-kerberos library to python-gssapi

Some comments from Solly and I inline: Michael Šimáček msima...@redhat.com writes: On 2015-07-22 15:47, Simo Sorce wrote: Comments inline. - Original Message - From: Michael Simacek msima...@redhat.com To: freeipa-devel@redhat.com Sent: Tuesday, July 21, 2015 8:02:26 AM Subject:

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

Jan Cholasta jchol...@redhat.com writes: On 25.8.2015 12:46, Michael Šimáček wrote: On 2015-08-25 12:38, Alexander Bokovoy wrote: On Tue, 25 Aug 2015, Michael Šimáček wrote: On 2015-08-24 20:29, Robbie Harwood wrote: Michael Šimáček msima...@redhat.com writes: On 2015-08-24 17:49, Simo

Re: [Freeipa-devel] [PATCH 0037] Added /etc/krb5.conf.d/ to krb5.conf

Alexander Bokovoy <aboko...@redhat.com> writes: > On Fri, 27 May 2016, Robbie Harwood wrote: >>Stanislav Laznicka <slazn...@redhat.com> writes: >> >>> From 7a55f169181ab8647cd2d919f35c004b14d5bc7f Mon Sep 17 00:00:00 2001 >>> From: Stanislav Laznick

Re: [Freeipa-devel] [PATCH 0037] Added /etc/krb5.conf.d/ to krb5.conf

Stanislav Laznicka writes: > From 7a55f169181ab8647cd2d919f35c004b14d5bc7f Mon Sep 17 00:00:00 2001 > From: Stanislav Laznicka > Date: Fri, 27 May 2016 16:12:31 +0200 > Subject: [PATCH] Added krb5.conf.d/ to included dirs in krb5.conf > > The include of

Re: [Freeipa-devel] [PATCH 0037] Added /etc/krb5.conf.d/ to krb5.conf

Alexander Bokovoy <aboko...@redhat.com> writes: > On Sat, 28 May 2016, Robbie Harwood wrote: >> Alexander Bokovoy <aboko...@redhat.com> writes: >>> On Fri, 27 May 2016, Robbie Harwood wrote: >>>> Stanislav Laznicka <slazn...@redhat.com> writes: >

Re: [Freeipa-devel] [TEST][patch-0032] Added a kdestroy call to clean ccache

Rob Crittenden writes: > Would it be more robust to call kdestroy -A or is that just overkill in > this case? I believe it would be superior to call `kdestroy -A`, yes. signature.asc Description: PGP signature -- Manage your subscription for the Freeipa-devel mailing

Re: [Freeipa-devel] Improving bug reporting

Lukas Slebodnik <lsleb...@redhat.com> writes: > On (03/05/16 12:29), Robbie Harwood wrote: >>David Kupka <dku...@redhat.com> writes: >> >>> --8<- trac-ticket-template-proposal --->8-- >>> Related SW versions: >>

Re: [Freeipa-devel] Improving bug reporting

David Kupka writes: > --8<- trac-ticket-template-proposal --->8-- > Related SW versions: > On server: > {{{ > $ rpm -q freeipa-server pki-base 389-ds-base bind samba krb5-server > certmonger > }}} > On client: > {{{ > $ rpm -q freeipa-client

Re: [Freeipa-devel] FedoraHosted.org sunset

Nathaniel McCallum writes: > On Fri, 2016-09-30 at 14:19 +0200, Martin Kosek wrote: >> On 09/23/2016 09:54 AM, Jakub Hrozek wrote: >>> On Thu, Sep 22, 2016 at 06:09:43PM +0200, Petr Vobornik wrote: As you know, FedoraHosted.org will be decommissioned.  

Re: [Freeipa-devel] gssproxy-0.6.2-2 broken

Standa Laznicka writes: > Hello, > > Current gssproxy in Fedora 25 "updates" repository (gssproxy-0.6.2-2) is > broken. For a freshly-installed IPA server, the infamous error > > "ipa: ERROR: Major (851968): Unspecified GSS failure. Minor code may > provide more