Re: [Freeipa-devel] [PATCH] 0751 spec: Split out python-ipap11helper and, python-default_encoding_utf8

2016-01-22 Thread Petr Viktorin
On 01/21/2016 01:14 PM, Jan Cholasta wrote: > We got rid of both default_encoding_utf8 and _ipap11helper, so > python-ipalib can be packaged as noarch. See the attached patch. The patch looks good to me, so ACK (though an ACK for me probably doesn't count). -- Petr Viktorin -- Manage your

Re: [Freeipa-devel] [PATCH] 948 stop installer when setup-ds.pl fail

2016-01-22 Thread Martin Babinsky
On 01/21/2016 07:28 PM, Petr Vobornik wrote: Petr Vobornik ACK. -- Martin^3 Babinsky -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

Re: [Freeipa-devel] [PATCH 540] cert renewal: import all external CA certs on IPA CA cert renewal

2016-01-22 Thread Martin Babinsky
On 01/21/2016 10:27 AM, Jan Cholasta wrote: Hi, the attached patch fixes . Honza ACK -- Martin^3 Babinsky -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to

Re: [Freeipa-devel] [PATCH 540] cert renewal: import all external CA certs on IPA CA cert renewal

2016-01-22 Thread Jan Cholasta
On 22.1.2016 10:34, Martin Babinsky wrote: On 01/21/2016 10:27 AM, Jan Cholasta wrote: Hi, the attached patch fixes . Honza ACK Self-NACK. Doesn't work with external CA install. -- Jan Cholasta -- Manage your subscription for the

Re: [Freeipa-devel] [PATCH 0030] Modernize mod_nss's cipher suites

2016-01-22 Thread Martin Kosek
On 01/21/2016 04:21 PM, Christian Heimes wrote: The list of supported TLS cipher suites in /etc/httpd/conf.d/nss.conf has been modernized. Insecure or less secure algorithms such as RC4, DES and 3DES are removed. Perfect forward secrecy suites with ephemeral ECDH key exchange have been added. IE

Re: [Freeipa-devel] [PATCH 0011-0012][RFE] ipa-replica-manage: automatically clean dangling RUVs

2016-01-22 Thread Martin Basti
On 15.01.2016 13:47, Stanislav Laznicka wrote: On 01/14/2016 04:59 PM, Petr Vobornik wrote: On 01/14/2016 04:16 PM, Ludwig Krispenz wrote: On 01/14/2016 03:59 PM, Stanislav Laznicka wrote: On 01/14/2016 03:21 PM, Rob Crittenden wrote: Stanislav Laznicka wrote: Please see the rebased

Re: [Freeipa-devel] [PATCH 0031] ipatests: fix the install of external ca

2016-01-22 Thread Martin Babinsky
On 01/19/2016 05:56 PM, Milan Kubík wrote: On 01/19/2016 05:31 PM, Milan Kubík wrote: Patch attached. This actually has a ticket opened. Patch with fixed commit message. ;) -- Milan Kubik Hi Milan, for the step 1 installation I would rather reuse the tasks:install_master function

[Freeipa-devel] [PATCH 0408] CI DNSSEC: add missing glue record

2016-01-22 Thread Martin Basti
Patch attached. From 15e6c98420c9ffc7b840373910a06f251cca653a Mon Sep 17 00:00:00 2001 From: Martin Basti Date: Fri, 22 Jan 2016 14:23:53 +0100 Subject: [PATCH] Fix DNSSEC test: add glue record Missing glue record causes test failure in cases when DNS zone was not managed by

Re: [Freeipa-devel] [PATCH] 0760 - Split ipa-client/ into ipaclient/ and client/

2016-01-22 Thread Petr Viktorin
On 01/14/2016 05:49 PM, Petr Viktorin wrote: > On 01/14/2016 11:09 AM, Jan Cholasta wrote: >> On 14.1.2016 10:48, Petr Viktorin wrote: >>> On 01/14/2016 07:55 AM, Jan Cholasta wrote: Hi, On 13.1.2016 13:03, Martin Babinsky wrote: > On 01/13/2016 11:34 AM, Petr Viktorin wrote: