Re: [Freeipa-devel] [PATCH] 383 Check subject name encoding in ipa-cacert-manage renew

2014-12-05 Thread Martin Kosek
On 12/04/2014 09:36 AM, Jan Cholasta wrote: +if x509.get_der_subject(cert, x509.DER) != der_subject: +raise admintool.ScriptError(Subject name encoding mismatch) I think we can expect this to be a pretty common error, given this is the default behavior of Microsoft

Re: [Freeipa-devel] [PATCH 0019] Prefer TCP connections to UDP in krb5 clients

2014-12-05 Thread Martin Kosek
On 12/04/2014 07:17 PM, Nathaniel McCallum wrote: On Tue, 2014-12-02 at 11:55 -0500, Nathaniel McCallum wrote: On Tue, 2014-12-02 at 17:51 +0100, Martin Kosek wrote: On 12/02/2014 05:49 PM, Nathaniel McCallum wrote: On Tue, 2014-12-02 at 17:48 +0100, Martin Kosek wrote: On 12/02/2014 05:36

Re: [Freeipa-devel] [PATCH 3] ipa-client-install shouldn't be eager in specifying zone when doing nsupdate

2014-12-05 Thread Martin Kosek
On 12/04/2014 12:47 PM, Martin Basti wrote: On 04/12/14 10:03, Jan Pazdziora wrote: On Wed, Dec 03, 2014 at 05:16:23PM +0100, Martin Basti wrote: On 02/12/14 13:00, Jan Pazdziora wrote: Hello, presumably explicitly specifying zone is not needed and can be harmful. This should be fixed in

Re: [Freeipa-devel] [PATCH 0162] Upgrade fix: masking named service should be executed only once

2014-12-05 Thread David Kupka
On 11/12/2014 01:43 PM, Martin Basti wrote: Hello, masking named service is executed more than once, following patch fixes it. Patch attached. ___ Freeipa-devel mailing list Freeipa-devel@redhat.com

[Freeipa-devel] [PATCH] 384 Do not renew the IPA CA cert by serial number in dogtag-ipa-ca-renew-agent

2014-12-05 Thread Jan Cholasta
Hi, the attached patch fixes https://fedorahosted.org/freeipa/ticket/4784. Honza -- Jan Cholasta From 1e268143669621c01973859590af0a22d80255bf Mon Sep 17 00:00:00 2001 From: Jan Cholasta jchol...@redhat.com Date: Thu, 4 Dec 2014 15:34:55 + Subject: [PATCH] Do not renew the IPA CA cert by

Re: [Freeipa-devel] [PATCH] 383 Check subject name encoding in ipa-cacert-manage renew

2014-12-05 Thread Jan Cholasta
Dne 5.12.2014 v 09:03 Martin Kosek napsal(a): On 12/04/2014 09:36 AM, Jan Cholasta wrote: +if x509.get_der_subject(cert, x509.DER) != der_subject: +raise admintool.ScriptError(Subject name encoding mismatch) I think we can expect this to be a pretty common error,

Re: [Freeipa-devel] [PATCH] 383 Check subject name encoding in ipa-cacert-manage renew

2014-12-05 Thread Martin Kosek
On 12/05/2014 11:34 AM, Jan Cholasta wrote: Dne 5.12.2014 v 09:03 Martin Kosek napsal(a): On 12/04/2014 09:36 AM, Jan Cholasta wrote: +if x509.get_der_subject(cert, x509.DER) != der_subject: +raise admintool.ScriptError(Subject name encoding mismatch) I think we

Re: [Freeipa-devel] [PATCH] 383 Check subject name encoding in ipa-cacert-manage renew

2014-12-05 Thread Jan Cholasta
Dne 5.12.2014 v 11:43 Martin Kosek napsal(a): On 12/05/2014 11:34 AM, Jan Cholasta wrote: Dne 5.12.2014 v 09:03 Martin Kosek napsal(a): On 12/04/2014 09:36 AM, Jan Cholasta wrote: +if x509.get_der_subject(cert, x509.DER) != der_subject: +raise

Re: [Freeipa-devel] [PATCH 0162] Upgrade fix: masking named service should be executed only once

2014-12-05 Thread Martin Basti
On 05/12/14 10:23, David Kupka wrote: On 11/12/2014 01:43 PM, Martin Basti wrote: Hello, masking named service is executed more than once, following patch fixes it. Patch attached. ___ Freeipa-devel mailing list Freeipa-devel@redhat.com

Re: [Freeipa-devel] [PATCH 0074] Make token window sizes configurable

2014-12-05 Thread Petr Vobornik
On 12/04/2014 07:15 PM, Nathaniel McCallum wrote: On Thu, 2014-12-04 at 14:56 +0100, Petr Vobornik wrote: On 2.12.2014 20:57, Nathaniel McCallum wrote: Works fine. python part of 0004: ACK, but VERSION needs to be updated before push 0005: ACK Fixed and rebased. Patch numbers have

Re: [Freeipa-devel] [PATCH 0074] Make token window sizes configurable

2014-12-05 Thread Martin Kosek
On 12/05/2014 01:46 PM, Petr Vobornik wrote: On 12/04/2014 07:15 PM, Nathaniel McCallum wrote: On Thu, 2014-12-04 at 14:56 +0100, Petr Vobornik wrote: On 2.12.2014 20:57, Nathaniel McCallum wrote: Works fine. python part of 0004: ACK, but VERSION needs to be updated before push 0005: ACK

[Freeipa-devel] [PATCH] 793-794 Fix schema related replication issues between IPA-3-0 and IPA-4-1

2014-12-05 Thread Petr Vobornik
Hello, I've transformed Thierry's and Ludwig's findings of bz 1167964 [1] and ticket 4794 [2] into patches. I wonder if the mgrpRFC822MailMember and nsViewFilter issue(patch 794) should be solved on 389's side rather than on FreeIPA's? Also is the increase of nsslapd-sasl-max-buffer-size

Re: [Freeipa-devel] [PATCH 0289] hosts: Display assigned ID view by default in host-find and show

2014-12-05 Thread Petr Vobornik
On 12/04/2014 04:22 PM, Tomas Babej wrote: Updated patch with fixed WebUI bits. ACK Pushed to: master: d0a781b9c6911f1875df4b0c7da5e6ae030d36de ipa-4-1: b986eb281d038e871cd613bf5a7a21a1456370cc -- Petr Vobornik ___ Freeipa-devel mailing list

Re: [Freeipa-devel] topology management question

2014-12-05 Thread Rob Crittenden
Ludwig Krispenz wrote: hi, I just have another (hopefully this will end soon) issue I want to get your input. (please read to teh end first) To recapture the conditions: - the topology plugin manages the connections between servers as segments in the shared tree - it is authoritative

[Freeipa-devel] [PATCH] 795 webui: increase duration of notification messages

2014-12-05 Thread Petr Vobornik
increase duration of notification messages by 66% https://fedorahosted.org/freeipa/ticket/4792 -- Petr Vobornik From 275974a7021a606d89789ee146d8f710d3ed93df Mon Sep 17 00:00:00 2001 From: Petr Vobornik pvobo...@redhat.com Date: Fri, 5 Dec 2014 16:21:19 +0100 Subject: [PATCH] webui: increase

Re: [Freeipa-devel] [PATCH 0019] Prefer TCP connections to UDP in krb5 clients

2014-12-05 Thread Nathaniel McCallum
On Fri, 2014-12-05 at 09:19 +0100, Martin Kosek wrote: On 12/04/2014 07:17 PM, Nathaniel McCallum wrote: On Tue, 2014-12-02 at 11:55 -0500, Nathaniel McCallum wrote: On Tue, 2014-12-02 at 17:51 +0100, Martin Kosek wrote: On 12/02/2014 05:49 PM, Nathaniel McCallum wrote: On Tue, 2014-12-02

Re: [Freeipa-devel] [Freeipa-interest] Announcing FreeIPA 4.1.2 - NEED HELP WITH 2FA/OTP!!!

2014-12-05 Thread Dmitri Pal
Hello, WE NEED HELP! The biggest and the most interesting feature of FreeIPA 4.1.2 is support for the two factor authentication using HOTP/TOTP compatible software tokens like FreeOTP (open source compatible alternative to Google Authenticator) and hardware tokens like Yubikeys. This feature

[Freeipa-devel] [RANT] pytest fixture scope is braindead

2014-12-05 Thread Nathaniel McCallum
So I've been working this week on porting the OTP tests that were manually coded to the new pytest framework. Now, I'm the first to want better tooling to make our job easier. But, pytest? Meh. I'm having to write just as much code (or more) to get my tests on par with pytest, and they are riddled