Re: [Freeipa-devel] #5881 / bz1327092 ; fixing broken caIPAserviceCert profile

2016-05-11 Thread Fraser Tweedale
On Wed, May 11, 2016 at 04:36:34PM +0200, Jan Cholasta wrote: > On 11.5.2016 15:04, Fraser Tweedale wrote: > >On Wed, May 11, 2016 at 01:31:36PM +0200, Jan Cholasta wrote: > >>On 11.5.2016 11:22, Fraser Tweedale wrote: > >>>Hi, > >>> > >>>Re: Bug 1327092 - URI details missing and OCSP-URI details a

Re: [Freeipa-devel] #5881 / bz1327092 ; fixing broken caIPAserviceCert profile

2016-05-11 Thread Jan Cholasta
On 11.5.2016 15:04, Fraser Tweedale wrote: On Wed, May 11, 2016 at 01:31:36PM +0200, Jan Cholasta wrote: On 11.5.2016 11:22, Fraser Tweedale wrote: Hi, Re: Bug 1327092 - URI details missing and OCSP-URI details are incorrectly displayed when certificate generated using IPA. This issue occurs

Re: [Freeipa-devel] [PATCH] 0011 webui: Offer OTP generation for host enrollment in the UI

2016-05-11 Thread Petr Vobornik
On 03/31/2016 04:59 PM, Pavel Vomacka wrote: > Hello, > > This patch adds option to add host dialog which allows to show generated > OTP. > The patch also changes the way of informing user about success of adding > host > but only when the 'Generate OTP' option is checked. > > https://fedorahoste

Re: [Freeipa-devel] #5881 / bz1327092 ; fixing broken caIPAserviceCert profile

2016-05-11 Thread Fraser Tweedale
On Wed, May 11, 2016 at 01:31:36PM +0200, Jan Cholasta wrote: > On 11.5.2016 11:22, Fraser Tweedale wrote: > >Hi, > > > >Re: Bug 1327092 - URI details missing and OCSP-URI details are > >incorrectly displayed when certificate generated using IPA. > > > >This issue occurs when replica installation o

Re: [Freeipa-devel] [PATCH 0015] Added exception handling for mal-formatted XML Parsing

2016-05-11 Thread Martin Basti
On 10.05.2016 13:59, Abhijeet Kasurde wrote: Hi All, Please find the patch for review. Thanks, Abhijeet Kasurde On 05/10/2016 01:13 PM, Martin Basti wrote: On 09.05.2016 07:26, Abhijeet Kasurde wrote: Hi all, Please review the patch. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=

Re: [Freeipa-devel] #5881 / bz1327092 ; fixing broken caIPAserviceCert profile

2016-05-11 Thread Jan Cholasta
On 11.5.2016 11:22, Fraser Tweedale wrote: Hi, Re: Bug 1327092 - URI details missing and OCSP-URI details are incorrectly displayed when certificate generated using IPA. This issue occurs when replica installation overwrites the existing IPA version of the caIPAserviceCert profile with the vers

Re: [Freeipa-devel] [PATCHES 0089-0093] Authentication Indicators

2016-05-11 Thread Pavel Vomacka
On 05/06/2016 02:44 PM, Sumit Bose wrote: On Wed, May 04, 2016 at 05:33:55PM -0400, Nathaniel McCallum wrote: This series of patches implements authentication indicator insertion, evaluation and management in FreeIPA. Besides these patches, two other patches are needed to round out support. F

Re: [Freeipa-devel] [TEST][patch-0037]Fixes of dnssec tests

2016-05-11 Thread Martin Basti
On 11.05.2016 12:27, Oleg Fayans wrote: Hi Martin, Here as per discussion on monday meeting, I removed from the patch everything unrelated to the workaround itself and added a separate test that runs a standard dnssec-enabled zone and queries it without restarting of named. The test is marked

[Freeipa-devel] [PATCH] 0034: webui: Authentication indicators

2016-05-11 Thread Pavel Vomacka
Hi, the patch adds webui part for authentication indicators. Ticket: https://fedorahosted.org/freeipa/ticket/5872 -- Pavel^3 Vomacka From 912519a2d1a834763f553c2b7b254d8908d85122 Mon Sep 17 00:00:00 2001 From: Pavel Vomacka Date: Wed, 11 May 2016 12:54:43 +0200 Subject: [PATCH] Add authenticat

Re: [Freeipa-devel] [TEST][patch-0037]Fixes of dnssec tests

2016-05-11 Thread Oleg Fayans
Hi Martin, Here as per discussion on monday meeting, I removed from the patch everything unrelated to the workaround itself and added a separate test that runs a standard dnssec-enabled zone and queries it without restarting of named. The test is marked as xfail with strict=True, which means, once

Re: [Freeipa-devel] [PATCH 0104-0109] DNS upgrade: change forwarding policy to "only" if private IPs are used

2016-05-11 Thread Martin Basti
On 03.05.2016 14:59, Petr Spacek wrote: Hello, DNS upgrade: change forwarding policy to "only" if private IPs are used. https://fedorahosted.org/freeipa/ticket/5710 This is the upgrade part. I will add one more patch to print a warning in dnsforwardzone* commands to avoid surprises. Please d

[Freeipa-devel] #5881 / bz1327092 ; fixing broken caIPAserviceCert profile

2016-05-11 Thread Fraser Tweedale
Hi, Re: Bug 1327092 - URI details missing and OCSP-URI details are incorrectly displayed when certificate generated using IPA. This issue occurs when replica installation overwrites the existing IPA version of the caIPAserviceCert profile with the version shipped with Dogtag. My patch 0057 preve

[Freeipa-devel] [PATCH] 0057 Prevent replica-install from overwriting cert profile

2016-05-11 Thread Fraser Tweedale
Hi team, Attached patch fixes https://fedorahosted.org/freeipa/ticket/5881. It will prevent the issue; I will send a separate mail with my ideas about how to repair installations that were already affected. Cheers, Fraser From 017da750cff1be553e94673735722656a75bc837 Mon Sep 17 00:00:00 2001 Fro

Re: [Freeipa-devel] [PATCH 0111] Remove unused file install/share/fedora-ds.init.patc

2016-05-11 Thread Martin Basti
On 10.05.2016 13:09, Petr Spacek wrote: Hello, Remove unused file install/share/fedora-ds.init.patch ACK Pushed to master: ea794f3dec52694c58689c6dac267a42b71e5af9 -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contr

Re: [Freeipa-devel] [PATCH 0103] DNS installer: accept --auto-forwarders option in unattended mode

2016-05-11 Thread Martin Basti
On 06.05.2016 22:20, Martin Basti wrote: On 03.05.2016 14:56, Petr Spacek wrote: Hello, DNS installer: accept --auto-forwarders option in unattended mode https://fedorahosted.org/freeipa/ticket/5869 ACK Pushed to: master: e345b53f35b920c1d8ffd9fed2ec636d3bde11df ipa-4-3: ce2d09ee93

Re: [Freeipa-devel] [PATCH 0473-0476]DNS Locations: Prologue

2016-05-11 Thread Martin Basti
On 10.05.2016 18:56, Petr Spacek wrote: On 10.5.2016 15:38, Petr Spacek wrote: On 10.5.2016 15:26, Martin Basti wrote: On 10.05.2016 15:23, Petr Spacek wrote: On 10.5.2016 14:44, Martin Basti wrote: On 10.05.2016 14:33, Petr Spacek wrote: On 6.5.2016 10:20, Martin Basti wrote: https://fe