Re: [Freeipa-devel] [PATCH] 797 rpcclient: use json_encode_binary for verbose output

On 12/01/15 16:29, Petr Vobornik wrote: `json.dumps` is not able to process some IPA's object types and therefore requires to preprocess it with `json_encode_binary` call. This step was not used in rpcclient's verbose output. https://fedorahosted.org/freeipa/ticket/4773 Works for me. ACK -

Re: [Freeipa-devel] [PATCH] 796 migrate-ds: fix compat plugin check

Hi, Dne 12.1.2015 v 14:31 Petr Vobornik napsal(a): [PATCH] migrate-ds: fix compat plugin check After ACI refactoring, admin cannot read Schema Compatibility plugin configuration and therefore migrade-ds won't find if compat plugin is enabled. Now the check si done by looking if cn=compat subtr

Re: [Freeipa-devel] [PATCHES 0175-0176] New forward zone test cases

On 05/01/15 16:18, Martin Basti wrote: On 17/12/14 15:15, Martin Basti wrote: On 16/12/14 17:14, Martin Basti wrote: On 15/12/14 20:15, Martin Basti wrote: On 15/12/14 19:18, Martin Basti wrote: https://fedorahosted.org/freeipa/ticket/4750 Patches need rebase and minor pytest modification to

Re: [Freeipa-devel] [PATCH] 0035 client: Update DNS with all available local IP addresses.

On 09/01/15 14:43, David Kupka wrote: On 01/07/2015 04:15 PM, Martin Basti wrote: On 07/01/15 12:27, David Kupka wrote: https://fedorahosted.org/freeipa/ticket/4249 Thank you for patch: 1) -root_logger.error("Cannot update DNS records! " - "Failed to connect

[Freeipa-devel] [PATCH] 389 Fix ipa-restore on systems without IPA installed

Hi, the attached patch fixes . Honza -- Jan Cholasta >From 0189d9492412cb4f49982c6eba9440677666a358 Mon Sep 17 00:00:00 2001 From: Jan Cholasta Date: Mon, 12 Jan 2015 17:03:22 + Subject: [PATCH] Fix ipa-restore on systems without IPA installed

[Freeipa-devel] [PATCH] 388 Remove RUV from LDIF files before using them in ipa-restore

Hi, the attached patch fixes . Honza -- Jan Cholasta >From 38223d7d7df123af672a303aa989fb8259e84384 Mon Sep 17 00:00:00 2001 From: Jan Cholasta Date: Mon, 12 Jan 2015 15:37:33 + Subject: [PATCH] Remove RUV from LDIF files before using them in i

[Freeipa-devel] [PATCH 0001] ipa-client-install: attempt to get host TGT several times before aborting client installation

related to ticket https://fedorahosted.org/freeipa/ticket/4808 Patch attached. Martin^3 From 5988842868303d6a9feffeb2ec5ce873b42876e0 Mon Sep 17 00:00:00 2001 From: Martin Babinsky Date: Fri, 9 Jan 2015 17:38:39 +0100 Subject: [PATCH] ipa-client-install: added new option '--tgt-kinit-attempts':

Re: [Freeipa-devel] [PATCH 0179] Fix traceback if zonemgr error message contains unicode characters

On 01/12/2015 01:56 PM, David Kupka wrote: > On 01/12/2015 01:25 PM, Martin Basti wrote: >> On 09/01/15 14:07, David Kupka wrote: >>> On 12/12/2014 02:26 PM, Martin Basti wrote: https://fedorahosted.org/freeipa/ticket/4805 Patch attached. >>> Does not work properly. >>> >>>

Re: [Freeipa-devel] [PATCH] 0036 Abort full backup restoration on not matching host.

Jan Cholasta wrote: > Dne 12.1.2015 v 16:30 Rob Crittenden napsal(a): >> Jan Cholasta wrote: >>> Dne 12.1.2015 v 13:37 David Kupka napsal(a): On 01/12/2015 01:14 PM, Jan Cholasta wrote: > Dne 12.1.2015 v 13:08 Martin Kosek napsal(a): >> On 01/12/2015 12:53 PM, David Kupka wrote: >>

Re: [Freeipa-devel] [PATCH] 0036 Abort full backup restoration on not matching host.

Dne 12.1.2015 v 16:30 Rob Crittenden napsal(a): Jan Cholasta wrote: Dne 12.1.2015 v 13:37 David Kupka napsal(a): On 01/12/2015 01:14 PM, Jan Cholasta wrote: Dne 12.1.2015 v 13:08 Martin Kosek napsal(a): On 01/12/2015 12:53 PM, David Kupka wrote: https://fedorahosted.org/freeipa/ticket/4823

Re: [Freeipa-devel] [PATCH] 0036 Abort full backup restoration on not matching host.

Jan Cholasta wrote: > Dne 12.1.2015 v 13:37 David Kupka napsal(a): >> On 01/12/2015 01:14 PM, Jan Cholasta wrote: >>> Dne 12.1.2015 v 13:08 Martin Kosek napsal(a): On 01/12/2015 12:53 PM, David Kupka wrote: > https://fedorahosted.org/freeipa/ticket/4823 Looking at this patch, are

[Freeipa-devel] [PATCH] 797 rpcclient: use json_encode_binary for verbose output

`json.dumps` is not able to process some IPA's object types and therefore requires to preprocess it with `json_encode_binary` call. This step was not used in rpcclient's verbose output. https://fedorahosted.org/freeipa/ticket/4773 -- Petr Vobornik From 794c06208ddc4cf594f1f7e4dccfaf954f2744dc

Re: [Freeipa-devel] [PATCH] 487 Bump SSSD Requires to 1.12.3

On 01/12/2015 03:57 PM, Alexander Bokovoy wrote: > On Mon, 12 Jan 2015, Martin Kosek wrote: >> The new SSSD Requires contains support for following features: >> - FreeIPA user ID View overrides (not just AD users) >> - User SSH public keys in ID Views >> - krb5.conf localauth plugin >> >> https://f

Re: [Freeipa-devel] [PATCH] 487 Bump SSSD Requires to 1.12.3

On Mon, 12 Jan 2015, Martin Kosek wrote: The new SSSD Requires contains support for following features: - FreeIPA user ID View overrides (not just AD users) - User SSH public keys in ID Views - krb5.conf localauth plugin https://fedorahosted.org/freeipa/ticket/4685 https://fedorahosted.org/freei

[Freeipa-devel] [PATCH] 0172 Support Samba PASSDB 0.2.0 aka interface version 24

Hi, Samba project renamed libpdb library we use in ipa-sam module to libsamba-passdb due to naming clash with some other library popular in academic circles (details are in https://bugzilla.samba.org/show_bug.cgi?id=10355) The change will become visible with Samba 4.2.0 release and is actually

Re: [Freeipa-devel] [PATCH 0081] Add initial tests for OTP

On 01/06/2015 03:26 AM, Nathaniel McCallum wrote: On Thu, 2014-11-20 at 11:13 -0500, Nathaniel McCallum wrote: >This tests the general workflow for OTP including most possible >token combinations. This includes 5872 tests. Further optimization >is possible to reduce the number of duplicate tests

[Freeipa-devel] [PATCH 0317-0318] Preparation for 7.0 release

Hello, I'm going to release v7.0 with BIND 9.10 support. Following patches were pushed to master: Bump NVR to 7.0. 257618e618a27b3c818f75faf5762130df0701eb Update NEWS for upcoming 7.0 release. c125f23501f8c53047375e45b72e73690fe791a3 -- Petr^2 Spacek From c125f23501f8c53047375e45b72e73690fe7

Re: [Freeipa-devel] [PATCH 0315] Support BIND 9.10

On 9.1.2015 16:34, Tomas Hozza wrote: > On 12/04/2014 05:04 PM, Petr Spacek wrote: >> Hello, >> >> Support BIND 9.10. >> >> https://fedorahosted.org/bind-dyndb-ldap/ticket/139 >> >> >> This patch definitely needs more testing but ...: >> - It compiles with BIND 9.9 and BIND 9.10. >> - It seems that

Re: [Freeipa-devel] [PATCH] 0036 Abort full backup restoration on not matching host.

On 01/12/2015 01:41 PM, Jan Cholasta wrote: Dne 12.1.2015 v 13:37 David Kupka napsal(a): On 01/12/2015 01:14 PM, Jan Cholasta wrote: Dne 12.1.2015 v 13:08 Martin Kosek napsal(a): On 01/12/2015 12:53 PM, David Kupka wrote: https://fedorahosted.org/freeipa/ticket/4823 Looking at this patch, a

[Freeipa-devel] [PATCH] 796 migrate-ds: fix compat plugin check

[PATCH] migrate-ds: fix compat plugin check After ACI refactoring, admin cannot read Schema Compatibility plugin configuration and therefore migrade-ds won't find if compat plugin is enabled. Now the check si done by looking if cn=compat subtree is present. https://fedorahosted.org/freeipa/t

[Freeipa-devel] [PATCH] 387 Fix validation of ipa-restore options

Hi, the attached patch fixes . Note that --data with data-only backup and --logs-only with data-only restore are deliberately ignored and considered no-op. Honza -- Jan Cholasta >From 6b14a609d726f5b6dc8e94b1d3d21123637599c1 Mon Sep 17 00:00:00 2

Re: [Freeipa-devel] [PATCH 0179] Fix traceback if zonemgr error message contains unicode characters

On 01/12/2015 01:25 PM, Martin Basti wrote: On 09/01/15 14:07, David Kupka wrote: On 12/12/2014 02:26 PM, Martin Basti wrote: https://fedorahosted.org/freeipa/ticket/4805 Patch attached. Does not work properly. $ locale LANG=cs_CZ.iso88592 LC_CTYPE="cs_CZ.iso88592" LC_NUMERIC="cs_CZ.iso885

[Freeipa-devel] [PATCH] 487 Bump SSSD Requires to 1.12.3

The new SSSD Requires contains support for following features: - FreeIPA user ID View overrides (not just AD users) - User SSH public keys in ID Views - krb5.conf localauth plugin https://fedorahosted.org/freeipa/ticket/4685 https://fedorahosted.org/freeipa/ticket/4509 https://fedorahosted.org/fre

Re: [Freeipa-devel] [PATCH] 0036 Abort full backup restoration on not matching host.

Dne 12.1.2015 v 13:37 David Kupka napsal(a): On 01/12/2015 01:14 PM, Jan Cholasta wrote: Dne 12.1.2015 v 13:08 Martin Kosek napsal(a): On 01/12/2015 12:53 PM, David Kupka wrote: https://fedorahosted.org/freeipa/ticket/4823 Looking at this patch, are data-only backups supposed to work properl

Re: [Freeipa-devel] [PATCH] 0036 Abort full backup restoration on not matching host.

On 01/12/2015 01:37 PM, David Kupka wrote: > On 01/12/2015 01:14 PM, Jan Cholasta wrote: >> Dne 12.1.2015 v 13:08 Martin Kosek napsal(a): >>> On 01/12/2015 12:53 PM, David Kupka wrote: https://fedorahosted.org/freeipa/ticket/4823 >>> >>> Looking at this patch, are data-only backups supposed to

Re: [Freeipa-devel] [PATCH] 0036 Abort full backup restoration on not matching host.

On 01/12/2015 01:14 PM, Jan Cholasta wrote: Dne 12.1.2015 v 13:08 Martin Kosek napsal(a): On 01/12/2015 12:53 PM, David Kupka wrote: https://fedorahosted.org/freeipa/ticket/4823 Looking at this patch, are data-only backups supposed to work properly then? Wouldn't for example Directory Server

Re: [Freeipa-devel] [PATCH 0179] Fix traceback if zonemgr error message contains unicode characters

On 09/01/15 14:07, David Kupka wrote: On 12/12/2014 02:26 PM, Martin Basti wrote: https://fedorahosted.org/freeipa/ticket/4805 Patch attached. Does not work properly. $ locale LANG=cs_CZ.iso88592 LC_CTYPE="cs_CZ.iso88592" LC_NUMERIC="cs_CZ.iso88592" LC_TIME="cs_CZ.iso88592" LC_COLLATE="cs_C

Re: [Freeipa-devel] [PATCH] 0036 Abort full backup restoration on not matching host.

Dne 12.1.2015 v 13:08 Martin Kosek napsal(a): On 01/12/2015 12:53 PM, David Kupka wrote: https://fedorahosted.org/freeipa/ticket/4823 Looking at this patch, are data-only backups supposed to work properly then? Wouldn't for example Directory Server fail to start when cn=config contain some hos

[Freeipa-devel] [PATCH 0182] Fix pkcs11 python extension reference counting

Part of DNSSEC (https://fedorahosted.org/freeipa/ticket/4657) Patch attached. -- Martin Basti From 28b3ca9f12e75afc581d0ac6c462c8647e054a07 Mon Sep 17 00:00:00 2001 From: Martin Basti Date: Mon, 12 Jan 2015 13:05:53 +0100 Subject: [PATCH] Fix reference counting in pkcs11 extension * removed u

Re: [Freeipa-devel] [PATCH] 0036 Abort full backup restoration on not matching host.

On 01/12/2015 12:53 PM, David Kupka wrote: > https://fedorahosted.org/freeipa/ticket/4823 Looking at this patch, are data-only backups supposed to work properly then? Wouldn't for example Directory Server fail to start when cn=config contain some hostname-bound values? Just checking... _

[Freeipa-devel] [PATCH] 0036 Abort full backup restoration on not matching host.

https://fedorahosted.org/freeipa/ticket/4823 -- David Kupka From f04a311b98c6db0bd19486e21dbe07addf2c0f87 Mon Sep 17 00:00:00 2001 From: David Kupka Date: Sun, 11 Jan 2015 18:45:11 -0500 Subject: [PATCH] Abort full backup restoration on not matching host. Full backup cannot be restored on other

Re: [Freeipa-devel] ipalib as RPC client in Web UI CI tests, forms-based auth in ipalib

On 01/08/2015 03:39 PM, Petr Vobornik wrote: Hello, tl;dr; I want to add forms based auth in ipalib's rpc client and use method 2.e) for API configuration. Will be used in otp tests (ipa-4-1 upstream). Want to know if you are OK with it. PoC implementation attached. == Background == I want to c

Re: [Freeipa-devel] Reviewed-By for design pages?

On 01/12/2015 09:29 AM, Petr Spacek wrote: > On 9.1.2015 14:26, Martin Kosek wrote: >> On 01/07/2015 05:41 PM, Alexander Bokovoy wrote: >>> On Wed, 07 Jan 2015, Simo Sorce wrote: On Wed, 07 Jan 2015 10:34:59 +0100 Petr Spacek wrote: > Hello, > > I wonder if we should add

Re: [Freeipa-devel] Reviewed-By for design pages?

On 9.1.2015 14:26, Martin Kosek wrote: > On 01/07/2015 05:41 PM, Alexander Bokovoy wrote: >> On Wed, 07 Jan 2015, Simo Sorce wrote: >>> On Wed, 07 Jan 2015 10:34:59 +0100 >>> Petr Spacek wrote: >>> Hello, I wonder if we should add something like Reviewed-by tag to newly created