Re: [Freeipa-devel] with new cert profiles patches ipa-replica-prepare fails after update

2015-06-18 Thread Petr Vobornik
On 06/18/2015 02:43 PM, David Kupka wrote: Dne 18.6.2015 v 13:18 Jan Cholasta napsal(a): Dne 17.6.2015 v 12:26 Fraser Tweedale napsal(a): On Fri, Jun 12, 2015 at 03:47:38PM +0200, Petr Vobornik wrote: On 06/12/2015 03:18 PM, Fraser Tweedale wrote: On Thu, Jun 11, 2015 at 09:59:03AM +0200, Mar

Re: [Freeipa-devel] with new cert profiles patches ipa-replica-prepare fails after update

2015-06-18 Thread David Kupka
Dne 18.6.2015 v 13:18 Jan Cholasta napsal(a): Dne 17.6.2015 v 12:26 Fraser Tweedale napsal(a): On Fri, Jun 12, 2015 at 03:47:38PM +0200, Petr Vobornik wrote: On 06/12/2015 03:18 PM, Fraser Tweedale wrote: On Thu, Jun 11, 2015 at 09:59:03AM +0200, Martin Babinsky wrote: On 06/04/2015 04:03 PM,

Re: [Freeipa-devel] with new cert profiles patches ipa-replica-prepare fails after update

2015-06-18 Thread Jan Cholasta
Dne 17.6.2015 v 12:26 Fraser Tweedale napsal(a): On Fri, Jun 12, 2015 at 03:47:38PM +0200, Petr Vobornik wrote: On 06/12/2015 03:18 PM, Fraser Tweedale wrote: On Thu, Jun 11, 2015 at 09:59:03AM +0200, Martin Babinsky wrote: On 06/04/2015 04:03 PM, Petr Vobornik wrote: - ipa-replica-prepare wo

Re: [Freeipa-devel] with new cert profiles patches ipa-replica-prepare fails after update

2015-06-17 Thread Fraser Tweedale
On Fri, Jun 12, 2015 at 03:47:38PM +0200, Petr Vobornik wrote: > On 06/12/2015 03:18 PM, Fraser Tweedale wrote: > >On Thu, Jun 11, 2015 at 09:59:03AM +0200, Martin Babinsky wrote: > >>On 06/04/2015 04:03 PM, Petr Vobornik wrote: > >>>- ipa-replica-prepare works > >>>- old IPA server was upgraded to

Re: [Freeipa-devel] with new cert profiles patches ipa-replica-prepare fails after update

2015-06-12 Thread Petr Vobornik
On 06/12/2015 03:18 PM, Fraser Tweedale wrote: On Thu, Jun 11, 2015 at 09:59:03AM +0200, Martin Babinsky wrote: On 06/04/2015 04:03 PM, Petr Vobornik wrote: - ipa-replica-prepare works - old IPA server was upgraded to today's master (with Cert profiles patches) - ipa-replica-prepare fails with:

Re: [Freeipa-devel] with new cert profiles patches ipa-replica-prepare fails after update

2015-06-12 Thread Fraser Tweedale
On Thu, Jun 11, 2015 at 09:59:03AM +0200, Martin Babinsky wrote: > On 06/04/2015 04:03 PM, Petr Vobornik wrote: > >- ipa-replica-prepare works > >- old IPA server was upgraded to today's master (with Cert profiles > >patches) > >- ipa-replica-prepare fails with: > > > >Log: > > > >ipa: DEBUG: appro

Re: [Freeipa-devel] with new cert profiles patches ipa-replica-prepare fails after update

2015-06-11 Thread Fraser Tweedale
On Thu, Jun 11, 2015 at 09:59:03AM +0200, Martin Babinsky wrote: > On 06/04/2015 04:03 PM, Petr Vobornik wrote: > >- ipa-replica-prepare works > >- old IPA server was upgraded to today's master (with Cert profiles > >patches) > >- ipa-replica-prepare fails with: > > > >Log: > > > >ipa: DEBUG: appro

Re: [Freeipa-devel] with new cert profiles patches ipa-replica-prepare fails after update

2015-06-11 Thread Martin Babinsky
On 06/04/2015 04:03 PM, Petr Vobornik wrote: - ipa-replica-prepare works - old IPA server was upgraded to today's master (with Cert profiles patches) - ipa-replica-prepare fails with: Log: ipa: DEBUG: approved_usage = SSL Server intended_usage = SSL Server ipa: DEBUG: cert valid True for "CN=re