[Freeipa-devel] [freeipa PR#625][closed] [RFC] remote plugins: add option to force compat plugins

2017-07-10 Thread HonzaCholasta via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/625 Author: HonzaCholasta Title: #625: [RFC] remote plugins: add option to force compat plugins Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/625/head:pr625 git

[Freeipa-devel] [freeipa PR#859][closed] Add CommonNameToSANDefault to default cert profile

2017-06-27 Thread HonzaCholasta via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/859 Author: frasertweedale Title: #859: Add CommonNameToSANDefault to default cert profile Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/859/head:pr859 git checkout

[Freeipa-devel] [freeipa PR#863][closed] [ipa-4-5] Add CommonNameToSANDefault to default cert profile

2017-06-27 Thread HonzaCholasta via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/863 Author: frasertweedale Title: #863: [ipa-4-5] Add CommonNameToSANDefault to default cert profile Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/863/head:pr863 git

[Freeipa-devel] [freeipa PR#833][comment] Fixes traceback in log and corrects console output

2017-06-06 Thread HonzaCholasta via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/833 Title: #833: Fixes traceback in log and corrects console output HonzaCholasta commented: """ NACK. Please don't "fix" the framework with workarounds for ill-behaved commands, this needs to be fixed in the trust plu

[Freeipa-devel] [freeipa PR#833][-ack] Fixes traceback in log and corrects console output

2017-06-06 Thread HonzaCholasta via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/833 Title: #833: Fixes traceback in log and corrects console output Label: -ack ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@list

[Freeipa-devel] [freeipa PR#852][opened] pkinit manage: introduce ipa-pkinit-manage

2017-06-05 Thread HonzaCholasta via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/852 Author: HonzaCholasta Title: #852: pkinit manage: introduce ipa-pkinit-manage Action: opened PR body: """ **server certinstall: update KDC master entry** After the KDC certificate is installed, add the PKINIT enabled flag to

[Freeipa-devel] [freeipa PR#812][comment] [WIP] Refactoring cert-find to use API call directly instead of using

2017-05-30 Thread HonzaCholasta via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/812 Title: #812: [WIP] Refactoring cert-find to use API call directly instead of using HonzaCholasta commented: """ @felipevolpone, that is a bad idea. Calling the API instead of doing a direct LDAP search would degrade perfor

[Freeipa-devel] [freeipa PR#801][synchronized] httpinstance: wait until the service entry is replicated

2017-05-29 Thread HonzaCholasta via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/801 Author: HonzaCholasta Title: #801: httpinstance: wait until the service entry is replicated Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/801/head:pr801

[Freeipa-devel] [freeipa PR#801][synchronized] httpinstance: wait until the service entry is replicated

2017-05-26 Thread HonzaCholasta via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/801 Author: HonzaCholasta Title: #801: httpinstance: wait until the service entry is replicated Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/801/head:pr801

[Freeipa-devel] [freeipa PR#812][comment] Refactoring cert-find to use API call directly instead of using

2017-05-24 Thread HonzaCholasta via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/812 Title: #812: Refactoring cert-find to use API call directly instead of using HonzaCholasta commented: """ @simo5, it will. Same for hosts. @felipevolpone, one possible correct fix would be to modify `cert._owners` to: ```python

[Freeipa-devel] [freeipa PR#804][+ack] krb5: make sure KDC certificate is readable

2017-05-24 Thread HonzaCholasta via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/804 Title: #804: krb5: make sure KDC certificate is readable Label: +ack ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@lists.fedor

[Freeipa-devel] [freeipa PR#771][closed] cert-show: check if certificate_out is in options

2017-05-24 Thread HonzaCholasta via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/771 Author: stlaz Title: #771: cert-show: check if certificate_out is in options Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/771/head:pr771 git checkout pr771

[Freeipa-devel] [freeipa PR#771][comment] cert-show: check if certificate_out is in options

2017-05-24 Thread HonzaCholasta via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/771 Title: #771: cert-show: check if certificate_out is in options HonzaCholasta commented: """ master: * 1ed1717e9956ba5a3baa9d0992e14fd2d4a2dd6a ca/cert-show: check certificate_out in options ipa-4-5: * 9ce5d6bf36e669f40099a8468

[Freeipa-devel] [freeipa PR#771][+pushed] cert-show: check if certificate_out is in options

2017-05-24 Thread HonzaCholasta via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/771 Title: #771: cert-show: check if certificate_out is in options Label: +pushed ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@li

[Freeipa-devel] [freeipa PR#771][+ack] cert-show: check if certificate_out is in options

2017-05-24 Thread HonzaCholasta via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/771 Title: #771: cert-show: check if certificate_out is in options Label: +ack ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@lists

[Freeipa-devel] [freeipa PR#804][comment] krb5: make sure KDC certificate is readable

2017-05-23 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/804 Title: #804: krb5: make sure KDC certificate is readable HonzaCholasta commented: """ No problem, thank you. """ See the full comment at https://github.com/freeipa/freeipa/p

[Freeipa-devel] [freeipa PR#623][comment] client install: do not assume /etc/krb5.conf.d exists

2017-05-22 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/623 Title: #623: client install: do not assume /etc/krb5.conf.d exists HonzaCholasta commented: """ @frozencemetery, this is *not* for the sake of Debian. We will still have to worry about this for operating systems which are not Fe

[Freeipa-devel] [freeipa PR#804][comment] krb5: make sure KDC certificate is readable

2017-05-22 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/804 Title: #804: krb5: make sure KDC certificate is readable HonzaCholasta commented: """ I have already "solved" this by changing the permissions of the cert file in the `renew_kdc_cert` restart script. Your solution is

[Freeipa-devel] [freeipa PR#804][comment] krb5: make sure KDC certificate is readable

2017-05-22 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/804 Title: #804: krb5: make sure KDC certificate is readable HonzaCholasta commented: """ I have already "solved" this by changing the permissions of the cert file in the `renew_kdc_cert`. Your solution is definitely better,

[Freeipa-devel] [freeipa PR#804][-ack] krb5: make sure KDC certificate is readable

2017-05-22 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/804 Title: #804: krb5: make sure KDC certificate is readable Label: -ack ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@lists.fedor

[Freeipa-devel] [freeipa PR#623][synchronized] client install: do not assume /etc/krb5.conf.d exists

2017-05-22 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/623 Author: HonzaCholasta Title: #623: client install: do not assume /etc/krb5.conf.d exists Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/623/head:pr623 git

[Freeipa-devel] [freeipa PR#801][opened] httpinstance: wait until the service entry is replicated

2017-05-22 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/801 Author: HonzaCholasta Title: #801: httpinstance: wait until the service entry is replicated Action: opened PR body: """ Wait until the local HTTP service entry is replicated to the remote master before requesting the server cer

[Freeipa-devel] [freeipa PR#798][opened] [4.5] install: fix CA-less PKINIT

2017-05-19 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/798 Author: HonzaCholasta Title: #798: [4.5] install: fix CA-less PKINIT Action: opened PR body: """ **certdb: add named trust flag constants** Add named constants for common trust flag combinations. Use the named constants instead

[Freeipa-devel] [freeipa PR#758][synchronized] install: fix CA-less PKINIT

2017-05-19 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/758 Author: HonzaCholasta Title: #758: install: fix CA-less PKINIT Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/758/head:pr758 git checkout pr758 From

[Freeipa-devel] [freeipa PR#758][synchronized] install: fix CA-less PKINIT

2017-05-18 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/758 Author: HonzaCholasta Title: #758: install: fix CA-less PKINIT Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/758/head:pr758 git checkout pr758 From

[Freeipa-devel] [freeipa PR#769][comment] test_caless: add pkinit option and test it

2017-05-18 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/769 Title: #769: test_caless: add pkinit option and test it HonzaCholasta commented: """ @stlaz & @Rezney, kind permission given. """ See the full comment at https://github.com/freeipa/freei

[Freeipa-devel] [freeipa PR#758][synchronized] install: fix CA-less PKINIT

2017-05-18 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/758 Author: HonzaCholasta Title: #758: install: fix CA-less PKINIT Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/758/head:pr758 git checkout pr758 From

[Freeipa-devel] [freeipa PR#758][comment] install: fix CA-less PKINIT

2017-05-17 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/758 Title: #758: install: fix CA-less PKINIT HonzaCholasta commented: """ Fixed kdc.conf upgrade. """ See the full comment at https://github.com/freeipa/freeipa/pull/758#issuecomment-302308896 _

[Freeipa-devel] [freeipa PR#758][synchronized] install: fix CA-less PKINIT

2017-05-17 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/758 Author: HonzaCholasta Title: #758: install: fix CA-less PKINIT Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/758/head:pr758 git checkout pr758 From