Re: [Freeipa-devel] [PATCH 0038] Update default NTP Configuration

2014-12-02 Thread Martin Basti
On 01/12/14 16:16, Gabe Alford wrote: Thanks, David. You're totally right. I am good with it. thanks, Gabe ACK On Mon, Dec 1, 2014 at 5:20 AM, David Kupka dku...@redhat.com mailto:dku...@redhat.com wrote: On 11/30/2014 02:03 AM, Gabe Alford wrote: Hello, Fix for

Re: [Freeipa-devel] [PATCH 0173] Throw zonemgr error message before installation proceeds

2014-12-02 Thread Petr Spacek
On 1.12.2014 13:32, Jan Cholasta wrote: Actually, sratch that, exceptions thrown by python-dns do not have messages. Oh yes, it is very annoying. I have asked upstream if potential patches about this issues can be accepted: https://github.com/rthalley/dnspython/issues/84 -- Petr^2 Spacek

Re: [Freeipa-devel] [PATCH 0038] Update default NTP Configuration

2014-12-02 Thread Martin Kosek
I understand this as a patch from Gabe and ACK from David :-) Pushed to master: 5f223a89adb400cfbe25231c8e6629dbf867642f Martin On 12/01/2014 04:16 PM, Gabe Alford wrote: Thanks, David. You're totally right. I am good with it. thanks, Gabe On Mon, Dec 1, 2014 at 5:20 AM, David Kupka

Re: [Freeipa-devel] [PATCH] 791 fix indentation in ipa-restore page

2014-12-02 Thread Petr Viktorin
ACK, pushed to: master: 79d9c4943617bf57fde4a38325cbc9a14d0ff495 ipa-4-1: 250bb5cf3cf6d05fca7e99867a29ce1cfbb1da97 -- PetrĀ³ ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] [PATCH] Stop ntpd before running ntpdate

2014-12-02 Thread Martin Kosek
On 05/09/2014 04:09 AM, Gabe Alford wrote: Re-factored my second patch. :) Gabe On Tue, Apr 29, 2014 at 8:04 PM, Gabe Alford redhatri...@gmail.com wrote: Updated patch to not run ntpdate if ntpd is running. Gabe On Tue, Apr 29, 2014 at 8:16 AM, Gabe Alford

[Freeipa-devel] [PATCH 3] ipa-client-install shouldn't be eager in specifying zone when doing nsupdate

2014-12-02 Thread Jan Pazdziora
Hello, presumably explicitly specifying zone is not needed and can be harmful. -- Jan Pazdziora Principal Software Engineer, Identity Management Engineering, Red Hat From 934c5672cb0f73fc7d237cbf916707693dff9c39 Mon Sep 17 00:00:00 2001 From: Jan Pazdziora jpazdzi...@redhat.com Date: Tue, 2

[Freeipa-devel] [PATCH 0288] certs: Fix incorrect flag handling in load_cacert

2014-12-02 Thread Tomas Babej
Hi, For CA certificates that are not certificates of IPA CA, we incorrectly set the trust flags to ,,, regardless what the actual trust_flags parameter was passed. Make the load_cacert method respect trust_flags and make C,, default set of trust flags.

Re: [Freeipa-devel] [PATCH 0288] certs: Fix incorrect flag handling in load_cacert

2014-12-02 Thread Jan Cholasta
Hi, Dne 2.12.2014 v 13:16 Tomas Babej napsal(a): Hi, For CA certificates that are not certificates of IPA CA, we incorrectly set the trust flags to ,,, regardless what the actual trust_flags parameter was passed. Make the load_cacert method respect trust_flags and make C,, default set of

Re: [Freeipa-devel] [PATCH 0288] certs: Fix incorrect flag handling in load_cacert

2014-12-02 Thread Tomas Babej
On 12/02/2014 01:45 PM, Jan Cholasta wrote: Hi, Dne 2.12.2014 v 13:16 Tomas Babej napsal(a): Hi, For CA certificates that are not certificates of IPA CA, we incorrectly set the trust flags to ,,, regardless what the actual trust_flags parameter was passed. Make the load_cacert method

Re: [Freeipa-devel] [PATCH 0288] certs: Fix incorrect flag handling in load_cacert

2014-12-02 Thread Jan Cholasta
Dne 2.12.2014 v 13:55 Tomas Babej napsal(a): On 12/02/2014 01:45 PM, Jan Cholasta wrote: Hi, Dne 2.12.2014 v 13:16 Tomas Babej napsal(a): Hi, For CA certificates that are not certificates of IPA CA, we incorrectly set the trust flags to ,,, regardless what the actual trust_flags parameter

Re: [Freeipa-devel] [PATCH 0074] Make token window sizes configurable

2014-12-02 Thread thierry bordaz
On 11/12/2014 11:37 PM, Nathaniel McCallum wrote: On Mon, 2014-11-10 at 08:28 +0100, Martin Kosek wrote: On 11/07/2014 04:44 PM, Petr Vobornik wrote: On 7.11.2014 08:58, Martin Kosek wrote: On 11/04/2014 05:17 PM, Nathaniel McCallum wrote: On Wed, 2014-10-29 at 09:34 -0400, Nathaniel

Re: [Freeipa-devel] [PATCH 0288] certs: Fix incorrect flag handling in load_cacert

2014-12-02 Thread Tomas Babej
On 12/02/2014 02:02 PM, Jan Cholasta wrote: Dne 2.12.2014 v 13:55 Tomas Babej napsal(a): On 12/02/2014 01:45 PM, Jan Cholasta wrote: Hi, Dne 2.12.2014 v 13:16 Tomas Babej napsal(a): Hi, For CA certificates that are not certificates of IPA CA, we incorrectly set the trust flags to ,,,

[Freeipa-devel] [PATCH 0289] hosts: Display assigned ID view by default in host-find and show

2014-12-02 Thread Tomas Babej
Hi, Makes ipaassignedidview a default attribute and takes care about the conversion from the DN to the proper ID view name. https://fedorahosted.org/freeipa/ticket/4774 -- Tomas Babej Associate Software Engineer | Red Hat | Identity Management RHCE | Brno Site | IRC: tbabej | freeipa.org

Re: [Freeipa-devel] [PATCH 0288] certs: Fix incorrect flag handling in load_cacert

2014-12-02 Thread Jan Cholasta
Dne 2.12.2014 v 14:09 Tomas Babej napsal(a): On 12/02/2014 02:02 PM, Jan Cholasta wrote: Dne 2.12.2014 v 13:55 Tomas Babej napsal(a): On 12/02/2014 01:45 PM, Jan Cholasta wrote: Hi, Dne 2.12.2014 v 13:16 Tomas Babej napsal(a): Hi, For CA certificates that are not certificates of IPA CA,

Re: [Freeipa-devel] FreeIPA integration with external DNS services

2014-12-02 Thread Petr Spacek
On 1.12.2014 17:12, Simo Sorce wrote: On Mon, 01 Dec 2014 16:17:54 +0100 Petr Spacek pspa...@redhat.com wrote: On 14.11.2014 17:31, Petr Spacek wrote: On 14.11.2014 02:22, Simo Sorce wrote: On Tue, 11 Nov 2014 16:29:51 +0100 Petr Spacek pspa...@redhat.com wrote: Hello, this thread is

Re: [Freeipa-devel] [PATCH 0289] hosts: Display assigned ID view by default in host-find and show

2014-12-02 Thread Jan Cholasta
Hi, Dne 2.12.2014 v 15:43 Tomas Babej napsal(a): Hi, Makes ipaassignedidview a default attribute and takes care about the conversion from the DN to the proper ID view name. https://fedorahosted.org/freeipa/ticket/4774 Since you are converting the value from DN to primary key string, the

Re: [Freeipa-devel] [PATCH 0074] Make token window sizes configurable

2014-12-02 Thread Nathaniel McCallum
On Mon, 2014-12-01 at 17:46 +0100, thierry bordaz wrote: On 11/12/2014 11:37 PM, Nathaniel McCallum wrote: On Mon, 2014-11-10 at 08:28 +0100, Martin Kosek wrote: On 11/07/2014 04:44 PM, Petr Vobornik wrote: On 7.11.2014 08:58, Martin Kosek wrote: On 11/04/2014 05:17 PM, Nathaniel

Re: [Freeipa-devel] [PATCH 0289] hosts: Display assigned ID view by default in host-find and show

2014-12-02 Thread Petr Vobornik
On 12/02/2014 04:14 PM, Jan Cholasta wrote: Hi, Dne 2.12.2014 v 15:43 Tomas Babej napsal(a): Hi, Makes ipaassignedidview a default attribute and takes care about the conversion from the DN to the proper ID view name. https://fedorahosted.org/freeipa/ticket/4774 Since you are converting the

Re: [Freeipa-devel] [PATCH 0289] hosts: Display assigned ID view by default in host-find and show

2014-12-02 Thread Tomas Babej
On 12/02/2014 04:14 PM, Jan Cholasta wrote: Hi, Dne 2.12.2014 v 15:43 Tomas Babej napsal(a): Hi, Makes ipaassignedidview a default attribute and takes care about the conversion from the DN to the proper ID view name. https://fedorahosted.org/freeipa/ticket/4774 Since you are converting

Re: [Freeipa-devel] [PATCH 0080] Expose the disabled User Auth Type

2014-12-02 Thread Nathaniel McCallum
On Thu, 2014-11-13 at 12:04 -0500, Nathaniel McCallum wrote: Additionally, fix a small bug in ipa-kdb so that the disabled User Auth Type is properly handled. https://fedorahosted.org/freeipa/ticket/4720 I still need a review of this. Any takers?

Re: [Freeipa-devel] [PATCH 0019] Prefer TCP connections to UDP in krb5 clients

2014-12-02 Thread Nathaniel McCallum
On Thu, 2014-11-06 at 18:00 -0500, Nathaniel McCallum wrote: On Fri, 2013-10-04 at 06:12 -0400, Simo Sorce wrote: - Original Message - On 3.10.2013 23:43, Nathaniel McCallum wrote: Patch attached. I'm curious - what is the purpose of this patch? To prevent 1 second

Re: [Freeipa-devel] FreeIPA integration with external DNS services

2014-12-02 Thread Simo Sorce
On Tue, 02 Dec 2014 15:56:28 +0100 Petr Spacek pspa...@redhat.com wrote: On 1.12.2014 17:12, Simo Sorce wrote: On Mon, 01 Dec 2014 16:17:54 +0100 Petr Spacek pspa...@redhat.com wrote: On 14.11.2014 17:31, Petr Spacek wrote: On 14.11.2014 02:22, Simo Sorce wrote: On Tue, 11 Nov 2014

Re: [Freeipa-devel] [PATCH 0289] hosts: Display assigned ID view by default in host-find and show

2014-12-02 Thread Jan Cholasta
Dne 2.12.2014 v 17:01 Tomas Babej napsal(a): On 12/02/2014 04:14 PM, Jan Cholasta wrote: Hi, Dne 2.12.2014 v 15:43 Tomas Babej napsal(a): Hi, Makes ipaassignedidview a default attribute and takes care about the conversion from the DN to the proper ID view name.

Re: [Freeipa-devel] [PATCH 0074] Make token window sizes configurable

2014-12-02 Thread Nathaniel McCallum
On Tue, 2014-12-02 at 17:12 +0100, Martin Kosek wrote: On 12/02/2014 04:56 PM, Nathaniel McCallum wrote: On Tue, 2014-12-02 at 14:05 +0100, thierry bordaz wrote: On 11/12/2014 11:37 PM, Nathaniel McCallum wrote: On Mon, 2014-11-10 at 08:28 +0100, Martin Kosek wrote: On 11/07/2014 04:44

Re: [Freeipa-devel] [PATCH 0019] Prefer TCP connections to UDP in krb5 clients

2014-12-02 Thread Simo Sorce
On Tue, 02 Dec 2014 11:12:11 -0500 Nathaniel McCallum npmccal...@redhat.com wrote: On Thu, 2014-11-06 at 18:00 -0500, Nathaniel McCallum wrote: On Fri, 2013-10-04 at 06:12 -0400, Simo Sorce wrote: - Original Message - On 3.10.2013 23:43, Nathaniel McCallum wrote: Patch

[Freeipa-devel] [PATCH 4] Removing the dependency on subscription-manager

2014-12-02 Thread Jan Pazdziora
Hello, Martin suggests dependency on subscription-manager is no longer needed. -- Jan Pazdziora Principal Software Engineer, Identity Management Engineering, Red Hat From 4243c4016d5e9844e555f134ce091cf85c01fcb2 Mon Sep 17 00:00:00 2001 From: Jan Pazdziora jpazdzi...@redhat.com Date: Tue, 2

Re: [Freeipa-devel] [PATCH 0074] Make token window sizes configurable

2014-12-02 Thread thierry bordaz
On 12/02/2014 05:24 PM, Nathaniel McCallum wrote: On Tue, 2014-12-02 at 17:12 +0100, Martin Kosek wrote: On 12/02/2014 04:56 PM, Nathaniel McCallum wrote: On Tue, 2014-12-02 at 14:05 +0100, thierry bordaz wrote: On 11/12/2014 11:37 PM, Nathaniel McCallum wrote: On Mon, 2014-11-10 at 08:28

Re: [Freeipa-devel] [PATCH 0019] Prefer TCP connections to UDP in krb5 clients

2014-12-02 Thread Martin Kosek
On 12/02/2014 05:36 PM, Simo Sorce wrote: On Tue, 02 Dec 2014 11:12:11 -0500 Nathaniel McCallum npmccal...@redhat.com wrote: On Thu, 2014-11-06 at 18:00 -0500, Nathaniel McCallum wrote: On Fri, 2013-10-04 at 06:12 -0400, Simo Sorce wrote: - Original Message - On 3.10.2013 23:43,

Re: [Freeipa-devel] [PATCH 0019] Prefer TCP connections to UDP in krb5 clients

2014-12-02 Thread Nathaniel McCallum
On Tue, 2014-12-02 at 17:48 +0100, Martin Kosek wrote: On 12/02/2014 05:36 PM, Simo Sorce wrote: On Tue, 02 Dec 2014 11:12:11 -0500 Nathaniel McCallum npmccal...@redhat.com wrote: On Thu, 2014-11-06 at 18:00 -0500, Nathaniel McCallum wrote: On Fri, 2013-10-04 at 06:12 -0400, Simo Sorce

Re: [Freeipa-devel] [PATCH 0019] Prefer TCP connections to UDP in krb5 clients

2014-12-02 Thread Martin Kosek
On 12/02/2014 05:49 PM, Nathaniel McCallum wrote: On Tue, 2014-12-02 at 17:48 +0100, Martin Kosek wrote: On 12/02/2014 05:36 PM, Simo Sorce wrote: On Tue, 02 Dec 2014 11:12:11 -0500 Nathaniel McCallum npmccal...@redhat.com wrote: On Thu, 2014-11-06 at 18:00 -0500, Nathaniel McCallum wrote:

Re: [Freeipa-devel] [PATCH 0019] Prefer TCP connections to UDP in krb5 clients

2014-12-02 Thread Nathaniel McCallum
On Tue, 2014-12-02 at 17:51 +0100, Martin Kosek wrote: On 12/02/2014 05:49 PM, Nathaniel McCallum wrote: On Tue, 2014-12-02 at 17:48 +0100, Martin Kosek wrote: On 12/02/2014 05:36 PM, Simo Sorce wrote: On Tue, 02 Dec 2014 11:12:11 -0500 Nathaniel McCallum npmccal...@redhat.com wrote:

Re: [Freeipa-devel] [PATCH 0074] Make token window sizes configurable

2014-12-02 Thread Petr Vobornik
On 12/02/2014 05:39 PM, thierry bordaz wrote: On 12/02/2014 05:24 PM, Nathaniel McCallum wrote: On Tue, 2014-12-02 at 17:12 +0100, Martin Kosek wrote: On 12/02/2014 04:56 PM, Nathaniel McCallum wrote: On Tue, 2014-12-02 at 14:05 +0100, thierry bordaz wrote: On 11/12/2014 11:37 PM, Nathaniel

Re: [Freeipa-devel] [PATCH 0074] Make token window sizes configurable

2014-12-02 Thread Nathaniel McCallum
On Tue, 2014-12-02 at 17:56 +0100, Petr Vobornik wrote: On 12/02/2014 05:39 PM, thierry bordaz wrote: On 12/02/2014 05:24 PM, Nathaniel McCallum wrote: On Tue, 2014-12-02 at 17:12 +0100, Martin Kosek wrote: On 12/02/2014 04:56 PM, Nathaniel McCallum wrote: On Tue, 2014-12-02 at 14:05

[Freeipa-devel] Announcing bind-dyndb-ldap version 6.1

2014-12-02 Thread Petr Spacek
The FreeIPA team is proud to announce bind-dyndb-ldap version 6.1. It can be downloaded from https://fedorahosted.org/released/bind-dyndb-ldap/ The new version has also been built for Fedora 21+ and and is on its way to updates-testing:

Re: [Freeipa-devel] [PATCH 0074] Make token window sizes configurable

2014-12-02 Thread Nathaniel McCallum
On Tue, 2014-12-02 at 12:20 -0500, Nathaniel McCallum wrote: On Tue, 2014-12-02 at 17:56 +0100, Petr Vobornik wrote: On 12/02/2014 05:39 PM, thierry bordaz wrote: On 12/02/2014 05:24 PM, Nathaniel McCallum wrote: On Tue, 2014-12-02 at 17:12 +0100, Martin Kosek wrote: On 12/02/2014

Re: [Freeipa-devel] [PATCH 0036] Add missing python files to Makefile

2014-12-02 Thread Gabe Alford
This patch removes the changelog and Makefile.am for ipaclient as well. Thanks, Gabe On Mon, Dec 1, 2014 at 8:28 AM, Martin Kosek mko...@redhat.com wrote: On 12/01/2014 04:25 PM, Rob Crittenden wrote: Gabe Alford wrote: On Mon, Dec 1, 2014 at 6:05 AM, Martin Kosek mko...@redhat.com

[Freeipa-devel] [PATCH 0039] Add test case for unsupported arg for ipa-advise

2014-12-02 Thread Gabe Alford
Hello, I was going to try my hand at attempting a patch for ipa-tests. However in wanting to test my patch, I am not sure how to run ipa-tests to check if it works or not. Documentation is not really clear on what needs to be done to start a test and run a test. This is for