Re: [Freeipa-devel] [PATCH 0079] Catch USBError during YubiKey location

2014-11-10 Thread Martin Kosek
On 11/10/2014 08:31 AM, Alexander Bokovoy wrote: > On Mon, 10 Nov 2014, Jan Cholasta wrote: >> Hi, >> >> Dne 7.11.2014 v 16:51 Nathaniel McCallum napsal(a): >>> https://fedorahosted.org/freeipa/ticket/4693 >> >> Is it good enough to just say "No YubiKey found"? Would it make sense to log >> the ori

Re: [Freeipa-devel] [PATCH 0021] Fix minimal version of BIND for Fedora 20 and 21

2014-11-10 Thread Martin Kosek
On 11/07/2014 05:14 PM, Petr Vobornik wrote: > On 7.11.2014 16:57, Nathaniel McCallum wrote: >> On Fri, 2014-11-07 at 16:55 +0100, Petr Spacek wrote: >>> Hello, >>> >>> Fix minimal version of BIND for Fedora 20 and 21. >>> >>> We should build new mkosek/freeipa COPR package ASAP to solve conflicts

Re: [Freeipa-devel] FreeIPA 4.1 release preparations

2014-11-10 Thread Lukas Slebodnik
On (09/11/14 10:09), Martin Kosek wrote: >On 11/08/2014 02:43 PM, Lukas Slebodnik wrote: >>On (20/10/14 16:08), Martin Kosek wrote: >>>On 10/20/2014 04:00 PM, Jan Pazdziora wrote: On Mon, Oct 20, 2014 at 03:58:27PM +0200, Petr Vobornik wrote: > >The plan is to release 4.1 and then 4.0.4

Re: [Freeipa-devel] FreeIPA 4.1 release preparations

2014-11-10 Thread Martin Kosek
On 11/10/2014 10:09 AM, Lukas Slebodnik wrote: > On (09/11/14 10:09), Martin Kosek wrote: >> On 11/08/2014 02:43 PM, Lukas Slebodnik wrote: >>> On (20/10/14 16:08), Martin Kosek wrote: On 10/20/2014 04:00 PM, Jan Pazdziora wrote: > On Mon, Oct 20, 2014 at 03:58:27PM +0200, Petr Vobornik wr

[Freeipa-devel] FreeIPA Copr repo plan

2014-11-10 Thread Martin Kosek
Hi guys, Some time ago we started managing FreeIPA Copr repos (mkosek/freeipa) with a target to have the latest greatest FreeIPA available for older arches (read - RHEL/CentOS) and to allow people using older stable Fedoras (read - Fedora 20) try FreeIPA 4.0+ releases which brought in several depe

Re: [Freeipa-devel] [PATCH] 0027 Produce better error in group-add command.

2014-11-10 Thread David Kupka
On 11/10/2014 08:20 AM, Jan Cholasta wrote: Hi, Dne 7.11.2014 v 15:26 David Kupka napsal(a): https://fedorahosted.org/freeipa/ticket/4611 I think you should use MutuallyExclusiveError. Honza Thanks, that's the error class I was searching for. Unfortunately, I didn't know this one so I used

Re: [Freeipa-devel] FreeIPA Copr repo plan

2014-11-10 Thread Jakub Hrozek
On Mon, Nov 10, 2014 at 12:07:46PM +0100, Martin Kosek wrote: > Hi guys, > > Some time ago we started managing FreeIPA Copr repos (mkosek/freeipa) with a > target to have the latest greatest FreeIPA available for older arches (read - > RHEL/CentOS) and to allow people using older stable Fedoras (r

Re: [Freeipa-devel] FreeIPA Copr repo plan

2014-11-10 Thread John Dennis
On 11/10/2014 06:07 AM, Martin Kosek wrote: > c) Daily repos Should we deprecate old John's repos > (http://www.freeipa.org/page/Downloads#Bleeding_Edge) which is > difficult to maintain and replace them with Copr ones? I.e. to have > common repo (e.g. mkosek/freeipa-daily) built for the supporte

Re: [Freeipa-devel] FreeIPA Copr repo plan

2014-11-10 Thread Lukas Slebodnik
On (10/11/14 07:53), John Dennis wrote: >On 11/10/2014 06:07 AM, Martin Kosek wrote: > >> c) Daily repos Should we deprecate old John's repos >> (http://www.freeipa.org/page/Downloads#Bleeding_Edge) which is >> difficult to maintain and replace them with Copr ones? I.e. to have >> common repo (e.g

Re: [Freeipa-devel] FreeIPA Copr repo plan

2014-11-10 Thread John Dennis
> It *is not* possible to merge one COPR repo into another. > It is possible to add another yum repo into build dependencies in COPR > but it usually mean you will need to enable 2nd repo for installation of > freeipa as well. The script I wrote to manage the IPA repo entire purpose is to pull pac

[Freeipa-devel] [PATCH] 0671 ipa-restore: Don't crash if AD trust is not installed

2014-11-10 Thread Petr Viktorin
This is a fix for: https://fedorahosted.org/freeipa/ticket/4668 -- PetrĀ³ ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] FreeIPA Copr repo plan

2014-11-10 Thread Jakub Hrozek
On Mon, Nov 10, 2014 at 02:04:34PM +0100, Lukas Slebodnik wrote: > It *is not* possible to merge one COPR repo into another. > It is possible to add another yum repo into build dependencies in COPR Ah, right. Adding the build dependencies allows you to add another SRPM, to be built though.. > but

[Freeipa-devel] [PATCH 0160] Fix objectclass violation during upgrade

2014-11-10 Thread Martin Basti
Ticket: https://fedorahosted.org/freeipa/ticket/4680 Entry dn: cn=adtrust agents,cn=sysaccounts,cn=etc,$SUFFIX must be updated before dn: cn=ADTrust Agents,cn=privileges,cn=pbac,$SUFFIX Patch attached Martin^2 From 0d2e383e080943be82b7edfd9396caef699ab8ee Mon Sep 17 00:00:00 2001 From: Martin B

Re: [Freeipa-devel] FreeIPA Copr repo plan

2014-11-10 Thread Simo Sorce
On Mon, 10 Nov 2014 12:07:46 +0100 Martin Kosek wrote: > 3) Scalability of the approach > Some dependencies are more difficult to maintain than the others. > Especially the PKI ones often required custom Java packaging > (resteasy-base) or a complicated dependency chain (the latest > jackson-jaxr

Re: [Freeipa-devel] FreeIPA Copr repo plan

2014-11-10 Thread Martin Kosek
On 11/10/2014 01:49 PM, Jakub Hrozek wrote: > On Mon, Nov 10, 2014 at 12:07:46PM +0100, Martin Kosek wrote: >> Hi guys, >> >> Some time ago we started managing FreeIPA Copr repos (mkosek/freeipa) with a >> target to have the latest greatest FreeIPA available for older arches (read - >> RHEL/CentOS)

Re: [Freeipa-devel] FreeIPA Copr repo plan

2014-11-10 Thread Martin Kosek
On 11/10/2014 04:22 PM, Simo Sorce wrote: > On Mon, 10 Nov 2014 12:07:46 +0100 > Martin Kosek wrote: > >> 3) Scalability of the approach >> Some dependencies are more difficult to maintain than the others. >> Especially the PKI ones often required custom Java packaging >> (resteasy-base) or a com

Re: [Freeipa-devel] [PATCH] 0671 ipa-restore: Don't crash if AD trust is not installed

2014-11-10 Thread Martin Kosek
On 11/10/2014 02:52 PM, Petr Viktorin wrote: > This is a fix for: https://fedorahosted.org/freeipa/ticket/4668 > And the patch is...? ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] FreeIPA Copr repo plan

2014-11-10 Thread thierry bordaz
On 11/10/2014 04:26 PM, Martin Kosek wrote: On 11/10/2014 01:49 PM, Jakub Hrozek wrote: On Mon, Nov 10, 2014 at 12:07:46PM +0100, Martin Kosek wrote: Hi guys, Some time ago we started managing FreeIPA Copr repos (mkosek/freeipa) with a target to have the latest greatest FreeIPA available for o

[Freeipa-devel] [PATCH] 365 Fix CA certificate backup and restore

2014-11-10 Thread Jan Cholasta
Hi, the attached patch fixes . Honza -- Jan Cholasta >From 5c00f80cce0e0952252df4f7ec3922d71e8f2cc9 Mon Sep 17 00:00:00 2001 From: Jan Cholasta Date: Mon, 10 Nov 2014 16:24:22 + Subject: [PATCH] Fix CA certificate backup and restore Backup and

[Freeipa-devel] [PATCHES] 366-372 Additional Coverity fixes

2014-11-10 Thread Jan Cholasta
Hi, the attached patches provide additional fixes for . I'm not 100% sure if the fixes for ipa-sam and ipa-kdb are correct, please check them carefully. Honza -- Jan Cholasta >From a195644143042a0161de81472646f41f503ffe48 Mon Sep 17 00:00:00 20