Re: [Freeipa-devel] Time-based account policies

2015-03-23 Thread Alexander Bokovoy
On Tue, 24 Mar 2015, Jan Cholasta wrote: Dne 23.3.2015 v 20:17 Standa Láznička napsal(a): On 3/23/2015 10:10 AM, Jan Cholasta wrote: Hi, Dne 20.3.2015 v 13:30 Stanislav Láznička napsal(a): ... As for the local time - timezone in the tuple (time, timezone) would only say "Local Time", which c

Re: [Freeipa-devel] Time-based account policies

2015-03-23 Thread Jan Cholasta
Dne 23.3.2015 v 20:17 Standa Láznička napsal(a): On 3/23/2015 10:10 AM, Jan Cholasta wrote: Hi, Dne 20.3.2015 v 13:30 Stanislav Láznička napsal(a): ... As for the local time - timezone in the tuple (time, timezone) would only say "Local Time", which can't be found in Olson's and it means the

Re: [Freeipa-devel] Time-based account policies

2015-03-23 Thread Standa Láznička
On 3/23/2015 10:10 AM, Jan Cholasta wrote: Hi, Dne 20.3.2015 v 13:30 Stanislav Láznička napsal(a): ... As for the local time - timezone in the tuple (time, timezone) would only say "Local Time", which can't be found in Olson's and it means the time record from the tuple should be compared to t

[Freeipa-devel] [PATCH 0210] DNSSEC: CI test

2015-03-23 Thread Martin Basti
Hello, a patch with DNSSEC CI tests attached. * Two types of installation tested * Tests check if zones are signed on both replica and master * The root zone test also checks chain of trust Can somebody very familiar with pytest do review? I'm not sure If I used pytest friendly constructions.

[Freeipa-devel] [PATCHES 0213 - 0221] Server Upgrade: LDAPI, Update plugins

2015-03-23 Thread Martin Basti
Hello, The patches: * allows to specify order of update plugins in update files. * requires to use LDAPI by ipa-ldap-updater patches attached -- Martin Basti From 6093015bc4465fa3ec20038fb246d32309e36ef7 Mon Sep 17 00:00:00 2001 From: Martin Basti Date: Tue, 17 Mar 2015 16:11:48 +0100 Subject

[Freeipa-devel] [PATCH 0212] Server Upgrade: Fix comments

2015-03-23 Thread Martin Basti
Attached patch fixes comments which I forgot to edit in 'make upgrade deterministic' patchset -- Martin Basti From 8c40d3e23c91d2c953244279f7347461f02f779e Mon Sep 17 00:00:00 2001 From: Martin Basti Date: Tue, 17 Mar 2015 18:00:00 +0100 Subject: [PATCH] Server Upgrade: Fix comments https://f

Re: [Freeipa-devel] [PATCHES 0015-0017] consolidation of various Kerberos auth methods in FreeIPA code

2015-03-23 Thread Simo Sorce
On Mon, 2015-03-23 at 14:22 +0100, Petr Spacek wrote: > On 23.3.2015 14:08, Simo Sorce wrote: > > On Mon, 2015-03-23 at 12:48 +0100, Martin Babinsky wrote: > >> On 03/17/2015 06:00 PM, Simo Sorce wrote: > >>> On Mon, 2015-03-16 at 13:30 +0100, Martin Babinsky wrote: > On 03/16/2015 12:15 PM, M

Re: [Freeipa-devel] [PATCHES 0015-0017] consolidation of various Kerberos auth methods in FreeIPA code

2015-03-23 Thread Petr Spacek
On 23.3.2015 14:08, Simo Sorce wrote: > On Mon, 2015-03-23 at 12:48 +0100, Martin Babinsky wrote: >> On 03/17/2015 06:00 PM, Simo Sorce wrote: >>> On Mon, 2015-03-16 at 13:30 +0100, Martin Babinsky wrote: On 03/16/2015 12:15 PM, Martin Kosek wrote: > On 03/13/2015 05:37 PM, Martin Babinsky

Re: [Freeipa-devel] [PATCHES 0015-0017] consolidation of various Kerberos auth methods in FreeIPA code

2015-03-23 Thread Simo Sorce
On Mon, 2015-03-23 at 12:48 +0100, Martin Babinsky wrote: > On 03/17/2015 06:00 PM, Simo Sorce wrote: > > On Mon, 2015-03-16 at 13:30 +0100, Martin Babinsky wrote: > >> On 03/16/2015 12:15 PM, Martin Kosek wrote: > >>> On 03/13/2015 05:37 PM, Martin Babinsky wrote: > Attaching the next iterati

Re: [Freeipa-devel] [PATCH 0022] migrate-ds: proper treatment of unsuccessful migrations

2015-03-23 Thread Petr Vobornik
On 03/23/2015 12:55 PM, Martin Babinsky wrote: On 03/23/2015 09:52 AM, Martin Babinsky wrote: On 03/18/2015 10:54 AM, Martin Babinsky wrote: This is a proper fix to both https://fedorahosted.org/freeipa/ticket/4846 and https://fedorahosted.org/freeipa/ticket/4952. To do this I had to throw out

Re: [Freeipa-devel] [PATCH 0022] migrate-ds: proper treatment of unsuccessful migrations

2015-03-23 Thread Martin Babinsky
On 03/23/2015 09:52 AM, Martin Babinsky wrote: On 03/18/2015 10:54 AM, Martin Babinsky wrote: This is a proper fix to both https://fedorahosted.org/freeipa/ticket/4846 and https://fedorahosted.org/freeipa/ticket/4952. To do this I had to throw out some unused parameters from _update_default_gro

Re: [Freeipa-devel] [PATCHES 0015-0017] consolidation of various Kerberos auth methods in FreeIPA code

2015-03-23 Thread Martin Babinsky
On 03/17/2015 06:00 PM, Simo Sorce wrote: On Mon, 2015-03-16 at 13:30 +0100, Martin Babinsky wrote: On 03/16/2015 12:15 PM, Martin Kosek wrote: On 03/13/2015 05:37 PM, Martin Babinsky wrote: Attaching the next iteration of patches. I have tried my best to reword the ipa-client-install man pag

Re: [Freeipa-devel] [PATCH] Password vault

2015-03-23 Thread Jan Cholasta
Dne 11.3.2015 v 15:12 Endi Sukma Dewata napsal(a): Thanks for the review. New patch attached to be applied on top of all previous patches. Please see comments below. Thanks. I have replied to some of your comments below. On 3/6/2015 3:53 PM, Jan Cholasta wrote: Patch 353: 1) Please follow

Re: [Freeipa-devel] Time-based account policies

2015-03-23 Thread Jan Cholasta
Hi, Dne 20.3.2015 v 13:30 Stanislav Láznička napsal(a): Hi! I went through the last week's thread on Time-Based Policies, discussed some parts I wasn't very sure about with Martin, and would like to make a summary of it, followed by some further questions on the topic. The mail is a bit longer

Re: [Freeipa-devel] [PATCH 0022] migrate-ds: proper treatment of unsuccessful migrations

2015-03-23 Thread Martin Babinsky
On 03/18/2015 10:54 AM, Martin Babinsky wrote: This is a proper fix to both https://fedorahosted.org/freeipa/ticket/4846 and https://fedorahosted.org/freeipa/ticket/4952. To do this I had to throw out some unused parameters from _update_default_group function (particularly the pesky pkey causing

Re: [Freeipa-devel] [PATCH 0208] Remove --test option from upgrade

2015-03-23 Thread Tomas Babej
On 03/19/2015 12:25 PM, David Kupka wrote: On 03/17/2015 01:07 PM, Martin Basti wrote: On 12/03/15 16:10, David Kupka wrote: On 03/06/2015 06:00 PM, Martin Basti wrote: Upgrade plugins which modify LDAP data directly should not be executed in --test mode. This patch is a workaround, to ensu

[Freeipa-devel] New installer PoC

2015-03-23 Thread Jan Cholasta
Hi, the attached patch contains a new PoC installer for httpd. Design goals: 1) Make code related to any particular configuration change co-located, be it install/uninstall/upgrade. 2) Get rid of code duplicates. 3) Use the same code path for install and upgrade. 4) Provide metadata for pa

Re: [Freeipa-devel] OT - git help

2015-03-23 Thread Petr Spacek
On 20.3.2015 23:22, Alan Evans wrote: > I have been working on a 3.3.3 install on CentOS that I've made some > changes to. I have a patch showing the changes I've made to 3.3.3. I > would like to submit them as a patch to freeipa (presumably for master) but > my git-fu is not strong. > > How can