Re: [Freeipa-devel] [PATCH] 0043 Allow-PKI-CA-Replica-Installs-when-CRL-exceeds-default

2013-01-08 Thread Rob Crittenden
Andrew Wnuk wrote: On 12/20/2012 06:49 AM, Simo Sorce wrote: On Thu, 2012-12-20 at 09:39 -0500, Ade Lee wrote: On Wed, 2012-12-19 at 21:35 -0500, Simo Sorce wrote: On Wed, 2012-12-19 at 22:41 +, JR Aquino wrote: On Dec 19, 2012, at 2:32 PM, Simo Sorce wrote: On Wed, 2012-12-19 at 20:52

Re: [Freeipa-devel] [PATCH] 0043 Allow-PKI-CA-Replica-Installs-when-CRL-exceeds-default

2012-12-20 Thread Andrew Wnuk
On 12/20/2012 06:49 AM, Simo Sorce wrote: On Thu, 2012-12-20 at 09:39 -0500, Ade Lee wrote: On Wed, 2012-12-19 at 21:35 -0500, Simo Sorce wrote: On Wed, 2012-12-19 at 22:41 +, JR Aquino wrote: On Dec 19, 2012, at 2:32 PM, Simo Sorce wrote: On Wed, 2012-12-19 at 20:52 +, JR Aquino wro

Re: [Freeipa-devel] [PATCH] 0043 Allow-PKI-CA-Replica-Installs-when-CRL-exceeds-default

2012-12-20 Thread Simo Sorce
On Thu, 2012-12-20 at 09:39 -0500, Ade Lee wrote: > On Wed, 2012-12-19 at 21:35 -0500, Simo Sorce wrote: > > On Wed, 2012-12-19 at 22:41 +, JR Aquino wrote: > > > On Dec 19, 2012, at 2:32 PM, Simo Sorce wrote: > > > > > > > On Wed, 2012-12-19 at 20:52 +, JR Aquino wrote: > > > >> Due to a

Re: [Freeipa-devel] [PATCH] 0043 Allow-PKI-CA-Replica-Installs-when-CRL-exceeds-default

2012-12-20 Thread Ade Lee
On Wed, 2012-12-19 at 21:35 -0500, Simo Sorce wrote: > On Wed, 2012-12-19 at 22:41 +, JR Aquino wrote: > > On Dec 19, 2012, at 2:32 PM, Simo Sorce wrote: > > > > > On Wed, 2012-12-19 at 20:52 +, JR Aquino wrote: > > >> Due to a limitation with 389 DS, the nsslapd-maxbersize cannot be set

Re: [Freeipa-devel] [PATCH] 0043 Allow-PKI-CA-Replica-Installs-when-CRL-exceeds-default

2012-12-19 Thread Simo Sorce
On Wed, 2012-12-19 at 22:41 +, JR Aquino wrote: > On Dec 19, 2012, at 2:32 PM, Simo Sorce wrote: > > > On Wed, 2012-12-19 at 20:52 +, JR Aquino wrote: > >> Due to a limitation with 389 DS, the nsslapd-maxbersize cannot be set > >> dynamically. > >> This causes an issue during IPA PKI-CA R

Re: [Freeipa-devel] [PATCH] 0043 Allow-PKI-CA-Replica-Installs-when-CRL-exceeds-default

2012-12-19 Thread JR Aquino
On Dec 19, 2012, at 2:32 PM, Simo Sorce wrote: > On Wed, 2012-12-19 at 20:52 +, JR Aquino wrote: >> Due to a limitation with 389 DS, the nsslapd-maxbersize cannot be set >> dynamically. >> This causes an issue during IPA PKI-CA Replica installs, when the master has >> a CRL that exceeds the

Re: [Freeipa-devel] [PATCH] 0043 Allow-PKI-CA-Replica-Installs-when-CRL-exceeds-default

2012-12-19 Thread Simo Sorce
On Wed, 2012-12-19 at 20:52 +, JR Aquino wrote: > Due to a limitation with 389 DS, the nsslapd-maxbersize cannot be set > dynamically. > This causes an issue during IPA PKI-CA Replica installs, when the master has > a CRL that exceeds the default limit. > The cainstance.py code attempts to se