Re: [Freeipa-devel] [PATCH] Workaround for trac N 5348

2015-10-09 Thread Martin Basti
On 09.10.2015 22:04, Oleg Fayans wrote: On 10/09/2015 11:03 AM, Jan Pazdziora wrote: On Fri, Oct 09, 2015 at 10:31:32AM +0200, Tomas Babej wrote: a heavy process. Also, I wouldn't be strict about it, as we already have a couple of workarounds, and not every time a workaround has a exact

Re: [Freeipa-devel] [PATCH] Workaround for trac N 5348

2015-10-09 Thread Oleg Fayans
On 10/09/2015 11:03 AM, Jan Pazdziora wrote: On Fri, Oct 09, 2015 at 10:31:32AM +0200, Tomas Babej wrote: a heavy process. Also, I wouldn't be strict about it, as we already have a couple of workarounds, and not every time a workaround has a exact mapping to a particular ticket. Frankly, th

[Freeipa-devel] [PATCH 0057] Warn in no installation found when running ipa-server-install --uninstall

2015-10-09 Thread Gabe Alford
Hello, Fix for https://fedorahosted.org/freeipa/ticket/5341 Thanks, Gabe From 0400bf88987b56d1d3b7a0e665bec525fa81ed02 Mon Sep 17 00:00:00 2001 From: Gabe Date: Fri, 9 Oct 2015 10:48:17 -0600 Subject: [PATCH] Warn if no installation found when running ipa-server-install --uninstall https://fe

[Freeipa-devel] [PATCH 0058] Remove bind configuration detected question

2015-10-09 Thread Gabe Alford
Hello, Fix for https://fedorahosted.org/freeipa/ticket/5351 Thanks, Gabe From 509ea0b496fd3d2361df58b23ce6ec8fb0ac9b64 Mon Sep 17 00:00:00 2001 From: Gabe Date: Fri, 9 Oct 2015 11:02:06 -0600 Subject: [PATCH] Remove bind configuration detected question https://fedorahosted.org/freeipa/ticket/5

[Freeipa-devel] [PATCH 0056] Enable nsaccountlock in user.py cli

2015-10-09 Thread Gabe Alford
Hello, This patch enables nsaccountlock in user.py cli. It is very handy to be able to search and find users with disabled/enabled accounts, etc. That said, I couldn't find why it was no_option in the first place, so I am not 100% sure if it breaks something or the reasoning behind no_option. Tha

Re: [Freeipa-devel] [PATCHES 362-366] Realmdomains handling improvements

2015-10-09 Thread Tomas Babej
On 09/23/2015 02:40 PM, Martin Basti wrote: > > > On 09/22/2015 02:23 PM, Tomas Babej wrote: >> On 09/03/2015 04:34 PM, Alexander Bokovoy wrote: >>> On Thu, 03 Sep 2015, Tomas Babej wrote: Hi, this couple of patches fix https://fedorahosted.org/freeipa/ticket/5278 and improv

Re: [Freeipa-devel] LXC NTP Problem

2015-10-09 Thread Martin Basti
On 10/09/2015 03:42 PM, Martin Jørgensen wrote: Hi I really wont to deploy my freeipa server on LXC, but i cannot complete the installation because of NTP dont run on LXC Containers With --no-ntp wont either run, installation just stop when trying to start ntpd Help Mvh Martin Jørgensen

[Freeipa-devel] LXC NTP Problem

2015-10-09 Thread Martin Jørgensen
Hi I really wont to deploy my freeipa server on LXC, but i cannot complete the installation because of NTP dont run on LXC Containers With --no-ntp wont either run, installation just stop when trying to start ntpd Help Mvh Martin Jørgensen TLF: 28738893 -- Manage your subscription for the Free

Re: [Freeipa-devel] [PATCH] 0001 cert-show: Remove check if hostname != CN

2015-10-09 Thread Christian Heimes
On 2015-10-09 15:11, Jan Cholasta wrote: > On 9.10.2015 15:00, Christian Heimes wrote: >> On 2015-10-09 13:21, Jan Orel wrote: >>> Hello, >>> >>> this patch removes (IMHO) redundat check in cert_show, which fails when >>> host tries to re-submit certificate of different host/service which he >>> ca

Re: [Freeipa-devel] [PATCH] 0001 cert-show: Remove check if hostname != CN

2015-10-09 Thread Jan Cholasta
On 9.10.2015 15:00, Christian Heimes wrote: On 2015-10-09 13:21, Jan Orel wrote: Hello, this patch removes (IMHO) redundat check in cert_show, which fails when host tries to re-submit certificate of different host/service which he can manage. I also reported the bug here: https://bugzilla.redh

Re: [Freeipa-devel] [PATCH] 0001 cert-show: Remove check if hostname != CN

2015-10-09 Thread Rob Crittenden
Christian Heimes wrote: > On 2015-10-09 13:21, Jan Orel wrote: >> Hello, >> >> this patch removes (IMHO) redundat check in cert_show, which fails when >> host tries to re-submit certificate of different host/service which he >> can manage. >> >> I also reported the bug here: >> https://bugzilla.re

Re: [Freeipa-devel] [PATCH] 0001 cert-show: Remove check if hostname != CN

2015-10-09 Thread Christian Heimes
On 2015-10-09 13:21, Jan Orel wrote: > Hello, > > this patch removes (IMHO) redundat check in cert_show, which fails when > host tries to re-submit certificate of different host/service which he > can manage. > > I also reported the bug here: > https://bugzilla.redhat.com/show_bug.cgi?id=1269089

[Freeipa-devel] [PATCH 0059] ipa-adtrust-install: Print complete SRV record

2015-10-09 Thread Petr Spacek
Hello, I found this when reviewing DNS parts of IdM and AD integration guides. ipa-adtrust-install: Print complete SRV records. https://fedorahosted.org/freeipa/ticket/5358 -- Petr^2 Spacek From b10bd3b49c24c43a8540830303ab81250de6dd42 Mon Sep 17 00:00:00 2001 From: Petr Spacek Date: Fri, 9 Oc

Re: [Freeipa-devel] [PATCH] 0001 cert-show: Remove check if hostname != CN

2015-10-09 Thread Rob Crittenden
Jan Orel wrote: > Hello, > > this patch removes (IMHO) redundat check in cert_show, which fails when > host tries to re-submit certificate of different host/service which he > can manage. > > I also reported the bug here: > https://bugzilla.redhat.com/show_bug.cgi?id=1269089 > > I tired to run

Re: [Freeipa-devel] [PATCH] Workaround for trac N 5348

2015-10-09 Thread Martin Basti
On 10/08/2015 11:18 AM, Oleg Fayans wrote: Done On 10/08/2015 10:37 AM, Martin Basti wrote: On 10/08/2015 09:13 AM, Oleg Fayans wrote: Hi Martin On 10/07/2015 04:30 PM, Martin Basti wrote: On 10/07/2015 04:13 PM, Oleg Fayans wrote: subj Workaround looks good, but I prefer not to pu

[Freeipa-devel] [PATCH 0009] WebUI: Disappearing automember rule expressions

2015-10-09 Thread Stanislav Laznicka
Hi, please see the patch attached. Standa L. From 8bb771ad0f2f015ea1ebbdf7291ed5c7ae2a0a9b Mon Sep 17 00:00:00 2001 From: Stanislav Laznicka Date: Fri, 9 Oct 2015 13:32:33 +0200 Subject: [PATCH] Fixes disappearing automember expressions https://fedorahosted.org/freeipa/ticket/5353 --- install/

[Freeipa-devel] HOWTO: Troubleshooting SUDO

2015-10-09 Thread Pavel Březina
Hi, I just submitted a sudo troubleshooting guide [1]. If you find anything missing, please, let me know. [1] https://fedorahosted.org/sssd/wiki/HOWTO_Troubleshoot_SUDO -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contrib

Re: [Freeipa-devel] [PATCH] 0197 client referral support for trusted domain principal

2015-10-09 Thread Sumit Bose
On Thu, Oct 08, 2015 at 01:36:23PM +0300, Alexander Bokovoy wrote: > On Mon, 05 Oct 2015, Sumit Bose wrote: > >On Thu, Sep 03, 2015 at 06:22:05PM +0300, Alexander Bokovoy wrote: > >>On Thu, 03 Sep 2015, Alexander Bokovoy wrote: > >>>Hi, > >>> > >>>attached patch adds support for issuing client refe

[Freeipa-devel] [PATCH] 0001 cert-show: Remove check if hostname != CN

2015-10-09 Thread Jan Orel
Hello, this patch removes (IMHO) redundat check in cert_show, which fails when host tries to re-submit certificate of different host/service which he can manage. I also reported the bug here: https://bugzilla.redhat.com/show_bug.cgi?id=1269089 I tired to run the tests as well and it doesn't seem

Re: [Freeipa-devel] [PATCH 0078-0081] ipa-client-install autodiscovery code improvements

2015-10-09 Thread Martin Babinsky
On 10/09/2015 11:47 AM, Petr Spacek wrote: On 9.10.2015 09:14, Petr Spacek wrote: On 8.10.2015 19:09, Martin Babinsky wrote: These patches fix https://fedorahosted.org/freeipa/ticket/4305 Actually only the last patch does the work itself (suppress autodiscovery when installing client on master

Re: [Freeipa-devel] [PATCH 0078-0081] ipa-client-install autodiscovery code improvements

2015-10-09 Thread Petr Spacek
On 9.10.2015 09:14, Petr Spacek wrote: > On 8.10.2015 19:09, Martin Babinsky wrote: >> These patches fix https://fedorahosted.org/freeipa/ticket/4305 >> >> Actually only the last patch does the work itself (suppress autodiscovery >> when >> installing client on master), but when I saw the state of

Re: [Freeipa-devel] [PATCH] Workaround for trac N 5348

2015-10-09 Thread Petr Spacek
On 9.10.2015 11:03, Jan Pazdziora wrote: > On Fri, Oct 09, 2015 at 10:31:32AM +0200, Tomas Babej wrote: >> >> a heavy process. Also, I wouldn't be strict about it, as we already have >> a couple of workarounds, and not every time a workaround has a exact >> mapping to a particular ticket. > > Fran

Re: [Freeipa-devel] [PATCH] Workaround for trac N 5348

2015-10-09 Thread Jan Pazdziora
On Fri, Oct 09, 2015 at 10:31:32AM +0200, Tomas Babej wrote: > > a heavy process. Also, I wouldn't be strict about it, as we already have > a couple of workarounds, and not every time a workaround has a exact > mapping to a particular ticket. Frankly, this worries me much more than not having tic

Re: [Freeipa-devel] [PATCH] Workaround for trac N 5348

2015-10-09 Thread Tomas Babej
On 10/09/2015 09:15 AM, Jan Pazdziora wrote: > On Fri, Oct 09, 2015 at 09:01:46AM +0200, Milan Kubík wrote: >> >> Perhaps we could use pytest's expected fail (xfail) or skip marker. [1] It >> would prevent test from failing in the report and once the underlying issue >> is fixed, it will raise as

Re: [Freeipa-devel] [PATCH] Workaround for trac N 5348

2015-10-09 Thread Jan Pazdziora
On Fri, Oct 09, 2015 at 09:01:46AM +0200, Milan Kubík wrote: > > Perhaps we could use pytest's expected fail (xfail) or skip marker. [1] It > would prevent test from failing in the report and once the underlying issue > is fixed, it will raise as an unexpected pass. > > It could be used as a tempo

Re: [Freeipa-devel] [PATCH 0078-0081] ipa-client-install autodiscovery code improvements

2015-10-09 Thread Petr Spacek
On 8.10.2015 19:09, Martin Babinsky wrote: > These patches fix https://fedorahosted.org/freeipa/ticket/4305 > > Actually only the last patch does the work itself (suppress autodiscovery when > installing client on master), but when I saw the state of autodiscovery code I > have taken the liberty t

Re: [Freeipa-devel] [PATCH] Workaround for trac N 5348

2015-10-09 Thread Milan Kubík
On 10/09/2015 09:01 AM, Milan Kubík wrote: On 10/08/2015 02:50 PM, Martin Basti wrote: On 10/08/2015 02:39 PM, Martin Kosek wrote: On 10/08/2015 02:08 PM, Oleg Fayans wrote: Hi, On 10/08/2015 11:18 AM, Jan Pazdziora wrote: On Thu, Oct 08, 2015 at 11:12:37AM +0200, Oleg Fayans wrote: When

Re: [Freeipa-devel] [PATCH] Workaround for trac N 5348

2015-10-09 Thread Milan Kubík
On 10/08/2015 02:50 PM, Martin Basti wrote: On 10/08/2015 02:39 PM, Martin Kosek wrote: On 10/08/2015 02:08 PM, Oleg Fayans wrote: Hi, On 10/08/2015 11:18 AM, Jan Pazdziora wrote: On Thu, Oct 08, 2015 at 11:12:37AM +0200, Oleg Fayans wrote: When the ticket is addressed and these workaround