Re: [Freeipa-devel] Please review: V4/AD user short names design draft

2017-03-07 Thread Martin Babinsky
On Wed, Mar 08, 2017 at 07:37:40AM +0100, Jan Cholasta wrote: >On 7.3.2017 15:14, Simo Sorce wrote: >> On Tue, 2017-03-07 at 09:38 +0100, Martin Babinsky wrote: >> > On 03/06/2017 01:48 PM, Simo Sorce wrote: >> > > On Mon, 2017-03-06 at 07:47 +0100, Martin Babinsky wrote: >> > > > On 03/02/2017 02:

Re: [Freeipa-devel] Please review: V4/AD user short names design draft

2017-03-07 Thread Jan Cholasta
On 7.3.2017 15:14, Simo Sorce wrote: On Tue, 2017-03-07 at 09:38 +0100, Martin Babinsky wrote: On 03/06/2017 01:48 PM, Simo Sorce wrote: On Mon, 2017-03-06 at 07:47 +0100, Martin Babinsky wrote: On 03/02/2017 02:54 PM, Simo Sorce wrote: On Thu, 2017-03-02 at 08:10 +0100, Martin Babinsky wrote

Re: [Freeipa-devel] FreeIPA and wildcard certificates

2017-03-07 Thread Fraser Tweedale
On Wed, Feb 22, 2017 at 10:17:32AM +0100, Martin Kosek wrote: > On 02/20/2017 06:03 AM, Fraser Tweedale wrote: > > On Fri, Feb 10, 2017 at 11:48:39AM +0100, Martin Kosek wrote: > >> On 02/10/2017 10:37 AM, Fraser Tweedale wrote: > >>> On Fri, Feb 10, 2017 at 09:23:10AM +0100, Martin Kosek wrote: >

[Freeipa-devel] [freeipa PR#549][opened] T6601 certmap match

2017-03-07 Thread pvomacka
URL: https://github.com/freeipa/freeipa/pull/549 Author: pvomacka Title: #549: T6601 certmap match Action: opened PR body: """ WebUI: add support for certmap match command. PR contains also certmap rule patches from pullrequest #400 (I will rebase once #400 will be merged) because they are

[Freeipa-devel] [freeipa PR#547][+pushed] Use GSS-SPNEGO if connecting locally

2017-03-07 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/547 Title: #547: Use GSS-SPNEGO if connecting locally Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/C

[Freeipa-devel] [freeipa PR#547][comment] Use GSS-SPNEGO if connecting locally

2017-03-07 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/547 Title: #547: Use GSS-SPNEGO if connecting locally tomaskrizek commented: """ master: * adf8aabf10a57383aa6216625921503b83575757 Use GSS-SPNEGO if connecting locally """ See the full comment at https://github.com/freeipa/freeipa/pull/547#issueco

[Freeipa-devel] [freeipa PR#547][closed] Use GSS-SPNEGO if connecting locally

2017-03-07 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/547 Author: simo5 Title: #547: Use GSS-SPNEGO if connecting locally Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/547/head:pr547 git checkout pr547 -- Manage your s

[Freeipa-devel] [freeipa PR#536][comment] ipa systemd unit should define Wants=network instead of Requires=network

2017-03-07 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/536 Title: #536: ipa systemd unit should define Wants=network instead of Requires=network tomaskrizek commented: """ master: * f447489707812643ee918266f99ca1ac82a408af ipa systemd unit should define Wants=network instead of Requires=network """ Se

[Freeipa-devel] [freeipa PR#536][closed] ipa systemd unit should define Wants=network instead of Requires=network

2017-03-07 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/536 Author: flo-renaud Title: #536: ipa systemd unit should define Wants=network instead of Requires=network Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/536/head:

[Freeipa-devel] [freeipa PR#536][+pushed] ipa systemd unit should define Wants=network instead of Requires=network

2017-03-07 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/536 Title: #536: ipa systemd unit should define Wants=network instead of Requires=network Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: htt

[Freeipa-devel] [freeipa PR#533][comment] WebUI: Change structure of Identity submenu

2017-03-07 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/533 Title: #533: WebUI: Change structure of Identity submenu tomaskrizek commented: """ master: * 070bc48dd6c9bce32caa0f0f2de8d44b4e51 WebUI: Change structure of Identity submenu """ See the full comment at https://github.com/freeipa/freeipa/p

[Freeipa-devel] [freeipa PR#533][closed] WebUI: Change structure of Identity submenu

2017-03-07 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/533 Author: pvomacka Title: #533: WebUI: Change structure of Identity submenu Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/533/head:pr533 git checkout pr533 -- Man

[Freeipa-devel] [freeipa PR#533][+pushed] WebUI: Change structure of Identity submenu

2017-03-07 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/533 Title: #533: WebUI: Change structure of Identity submenu Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contr

[Freeipa-devel] [freeipa PR#519][closed] WebUI: add sizelimit:0 to cert-find

2017-03-07 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/519 Author: pvomacka Title: #519: WebUI: add sizelimit:0 to cert-find Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/519/head:pr519 git checkout pr519 -- Manage your

[Freeipa-devel] [freeipa PR#519][comment] WebUI: add sizelimit:0 to cert-find

2017-03-07 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/519 Title: #519: WebUI: add sizelimit:0 to cert-find tomaskrizek commented: """ master: * aa8530b7af8f04a4ba868f73ea9f171911162638 WebUI: add sizelimit:0 to cert-find """ See the full comment at https://github.com/freeipa/freeipa/pull/519#issuecomm

[Freeipa-devel] [freeipa PR#519][+pushed] WebUI: add sizelimit:0 to cert-find

2017-03-07 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/519 Title: #519: WebUI: add sizelimit:0 to cert-find Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Co

[Freeipa-devel] [freeipa PR#504][comment] Add SHA256 fingerprints

2017-03-07 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/504 Title: #504: Add SHA256 fingerprints tomaskrizek commented: """ master: * a06c71b1268850e485e89049ed3654f893edff0b Add SHA256 fingerprints for certs """ See the full comment at https://github.com/freeipa/freeipa/pull/504#issuecomment-284819750

[Freeipa-devel] [freeipa PR#504][closed] Add SHA256 fingerprints

2017-03-07 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/504 Author: tomaskrizek Title: #504: Add SHA256 fingerprints Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/504/head:pr504 git checkout pr504 -- Manage your subscrip

[Freeipa-devel] [freeipa PR#504][+pushed] Add SHA256 fingerprints

2017-03-07 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/504 Title: #504: Add SHA256 fingerprints Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#529][comment] installer: update time estimates

2017-03-07 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/529 Title: #529: installer: update time estimates tomaskrizek commented: """ @stlaz That estimate was a bit off :) Thanks for noticing! """ See the full comment at https://github.com/freeipa/freeipa/pull/529#issuecomment-284802644 -- Manage your su

[Freeipa-devel] [freeipa PR#529][synchronized] installer: update time estimates

2017-03-07 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/529 Author: tomaskrizek Title: #529: installer: update time estimates Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/529/head:pr529 git checkout pr529 From 3ee3

Re: [Freeipa-devel] Please review: V4/AD user short names design draft

2017-03-07 Thread Martin Basti
On 07.03.2017 15:41, Martin Babinsky wrote: > On Tue, Mar 07, 2017 at 04:34:42PM +0200, Alexander Bokovoy wrote: >> On ti, 07 maalis 2017, Simo Sorce wrote: >>> On Tue, 2017-03-07 at 09:38 +0100, Martin Babinsky wrote: On 03/06/2017 01:48 PM, Simo Sorce wrote: > On Mon, 2017-03-06 at 07:

[Freeipa-devel] [freeipa PR#400][comment] WebUI: Certificate Mapping

2017-03-07 Thread pvomacka
URL: https://github.com/freeipa/freeipa/pull/400 Title: #400: WebUI: Certificate Mapping pvomacka commented: """ @pvoborni Thanks for review. I removed the space :) """ See the full comment at https://github.com/freeipa/freeipa/pull/400#issuecomment-284796053 -- Manage your subscription for

[Freeipa-devel] [freeipa PR#400][synchronized] WebUI: Certificate Mapping

2017-03-07 Thread pvomacka
URL: https://github.com/freeipa/freeipa/pull/400 Author: pvomacka Title: #400: WebUI: Certificate Mapping Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/400/head:pr400 git checkout pr400 From 4ec6844bec472

[Freeipa-devel] [freeipa PR#548][opened] ipa-server-install: add --setup-kra option

2017-03-07 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/548 Author: MartinBasti Title: #548: ipa-server-install: add --setup-kra option Action: opened PR body: """ """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/548/head:pr548 git c

[Freeipa-devel] [freeipa PR#533][+ack] WebUI: Change structure of Identity submenu

2017-03-07 Thread pvoborni
URL: https://github.com/freeipa/freeipa/pull/533 Title: #533: WebUI: Change structure of Identity submenu Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribu

[Freeipa-devel] [freeipa PR#546][synchronized] Store session cookie in a ccache option

2017-03-07 Thread simo5
URL: https://github.com/freeipa/freeipa/pull/546 Author: simo5 Title: #546: Store session cookie in a ccache option Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/546/head:pr546 git checkout pr546 From 77b

[Freeipa-devel] [freeipa PR#516][comment] IdM Server: list all Employees with matching Smart Card

2017-03-07 Thread dkupka
URL: https://github.com/freeipa/freeipa/pull/516 Title: #516: IdM Server: list all Employees with matching Smart Card dkupka commented: """ @flo-renaud That's right but we should probably stress this somehow because it's not intuitive. Also we're returning what SSSD would return on master but

[Freeipa-devel] [freeipa PR#547][comment] Use GSS-SPNEGO if connecting locally

2017-03-07 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/547 Title: #547: Use GSS-SPNEGO if connecting locally tomaskrizek commented: """ The patch works with both `cyrus-sasl-2.1.26-26.2.fc24` and `cyrus-sasl-2.1.26-29.fc26`. Since the newer version is not a hard dependency, we can add it later on, as @

[Freeipa-devel] [freeipa PR#547][+ack] Use GSS-SPNEGO if connecting locally

2017-03-07 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/547 Title: #547: Use GSS-SPNEGO if connecting locally Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#546][comment] Store session cookie in a ccache option

2017-03-07 Thread simo5
URL: https://github.com/freeipa/freeipa/pull/546 Title: #546: Store session cookie in a ccache option simo5 commented: """ I also renamed the module and the class, makes more sense to me this way around. """ See the full comment at https://github.com/freeipa/freeipa/pull/546#issuecomment-28477

[Freeipa-devel] [freeipa PR#546][comment] Store session cookie in a ccache option

2017-03-07 Thread simo5
URL: https://github.com/freeipa/freeipa/pull/546 Title: #546: Store session cookie in a ccache option simo5 commented: """ Ok removed a bunch of code and made sure pylint passes. """ See the full comment at https://github.com/freeipa/freeipa/pull/546#issuecomment-284775623 -- Manage your subs

[Freeipa-devel] [freeipa PR#546][synchronized] Store session cookie in a ccache option

2017-03-07 Thread simo5
URL: https://github.com/freeipa/freeipa/pull/546 Author: simo5 Title: #546: Store session cookie in a ccache option Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/546/head:pr546 git checkout pr546 From 1a9

[Freeipa-devel] [freeipa PR#516][comment] IdM Server: list all Employees with matching Smart Card

2017-03-07 Thread flo-renaud
URL: https://github.com/freeipa/freeipa/pull/516 Title: #516: IdM Server: list all Employees with matching Smart Card flo-renaud commented: """ Hi @dkupka As the goal of this command is to return exactly the same list of users as SSSD would consider for authentication, IMHO it is expected that

[Freeipa-devel] [freeipa PR#516][comment] IdM Server: list all Employees with matching Smart Card

2017-03-07 Thread dkupka
URL: https://github.com/freeipa/freeipa/pull/516 Title: #516: IdM Server: list all Employees with matching Smart Card dkupka commented: """ @flo-renaud While playing with this command I've noticed one disturbing fact. Because we rely on SSSD and SSSD rely its cache we will likely return inaccu

[Freeipa-devel] [freeipa PR#529][comment] installer: update time estimates

2017-03-07 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/529 Title: #529: installer: update time estimates stlaz commented: """ This will say: ``` Configuring certificate server (pki-tomcatd). Estimated time: 3 minutes [1/2]: configure certmonger for renewals [2/2]: Importing RA key ``` but the operatio

[Freeipa-devel] [freeipa PR#529][comment] installer: update time estimates

2017-03-07 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/529 Title: #529: installer: update time estimates stlaz commented: """ This will say: ``` Configuring certificate server (pki-tomcatd). Estimated time: 3 minutes [1/2]: configure certmonger for renewals [2/2]: Importing RA key ``` but the operatio

[Freeipa-devel] [freeipa PR#546][comment] Store session cookie in a ccache option

2017-03-07 Thread simo5
URL: https://github.com/freeipa/freeipa/pull/546 Title: #546: Store session cookie in a ccache option simo5 commented: """ Not sure how to provide unit tests, these functions work only if you have a valid ccache in the name of the principal you are trying to store a session cookie for. """ Se

[Freeipa-devel] [freeipa PR#546][comment] Store session cookie in a ccache option

2017-03-07 Thread simo5
URL: https://github.com/freeipa/freeipa/pull/546 Title: #546: Store session cookie in a ccache option simo5 commented: """ @rcritten the keyring stuff is still used for detection of keyring in other places, so I did not touch it as those uses are still vaild """ See the full comment at https

[Freeipa-devel] [freeipa PR#546][comment] Store session cookie in a ccache option

2017-03-07 Thread rcritten
URL: https://github.com/freeipa/freeipa/pull/546 Title: #546: Store session cookie in a ccache option rcritten commented: """ Should this patch not also remove the keyring code? Unit tests should be provided. """ See the full comment at https://github.com/freeipa/freeipa/pull/546#issuecomment

[Freeipa-devel] [freeipa PR#536][+ack] ipa systemd unit should define Wants=network instead of Requires=network

2017-03-07 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/536 Title: #536: ipa systemd unit should define Wants=network instead of Requires=network Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http:/

[Freeipa-devel] [freeipa PR#538][comment] Run test_ipaclient test suite

2017-03-07 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/538 Title: #538: Run test_ipaclient test suite tomaskrizek commented: """ Please rebase and remove 5dfb17168972e480c1880e688a60fd2eb7de1dfe. """ See the full comment at https://github.com/freeipa/freeipa/pull/538#issuecomment-284755651 -- Manage yo

[Freeipa-devel] [freeipa PR#546][comment] Store session cookie in a ccache option

2017-03-07 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/546 Title: #546: Store session cookie in a ccache option MartinBasti commented: """ Pylint failed and I have a few inline comments ``` * Module ipapython.ccache_storage ipapython/ccache_storage.py:234: [C0305(trailing-newlines), ] Trailing

[Freeipa-devel] [freeipa PR#545][comment] install_check: require IPv6 stack to be enabled

2017-03-07 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/545 Title: #545: install_check: require IPv6 stack to be enabled tomaskrizek commented: """ We tested it with @MartinBasti and `/proc` is mounted in container. """ See the full comment at https://github.com/freeipa/freeipa/pull/545#issuecomment-2847

[Freeipa-devel] [freeipa PR#543][comment] Add options to allow ticket caching

2017-03-07 Thread simo5
URL: https://github.com/freeipa/freeipa/pull/543 Title: #543: Add options to allow ticket caching simo5 commented: """ Yes, I think we should add a new PR later once we release gssproxy 0.7 """ See the full comment at https://github.com/freeipa/freeipa/pull/543#issuecomment-284743273 -- Manag

[Freeipa-devel] [freeipa PR#547][comment] Use GSS-SPNEGO if connecting locally

2017-03-07 Thread simo5
URL: https://github.com/freeipa/freeipa/pull/547 Title: #547: Use GSS-SPNEGO if connecting locally simo5 commented: """ We actually do not need to put a strong require, this patch will work regardless, but won't provide any performance advantage on older versions. You will add a stronger requi

Re: [Freeipa-devel] Please review: V4/AD user short names design draft

2017-03-07 Thread Martin Babinsky
On Tue, Mar 07, 2017 at 04:34:42PM +0200, Alexander Bokovoy wrote: >On ti, 07 maalis 2017, Simo Sorce wrote: >> On Tue, 2017-03-07 at 09:38 +0100, Martin Babinsky wrote: >> > On 03/06/2017 01:48 PM, Simo Sorce wrote: >> > > On Mon, 2017-03-06 at 07:47 +0100, Martin Babinsky wrote: >> > >> On 03/02/

[Freeipa-devel] [freeipa PR#533][comment] WebUI: Change structure of Identity submenu

2017-03-07 Thread simo5
URL: https://github.com/freeipa/freeipa/pull/533 Title: #533: WebUI: Change structure of Identity submenu simo5 commented: """ I do not have enough insights on the .js side to say this is all correct, but having seen the mockups I want to give an ack from my side here. """ See the full comment

[Freeipa-devel] [freeipa PR#511][comment] Bump required version of gssproxy to 0.6.2

2017-03-07 Thread dkupka
URL: https://github.com/freeipa/freeipa/pull/511 Title: #511: Bump required version of gssproxy to 0.6.2 dkupka commented: """ Ok, please comment here once 0.7 is out and I will update the commit. """ See the full comment at https://github.com/freeipa/freeipa/pull/511#issuecomment-284738537 -

[Freeipa-devel] [freeipa PR#547][comment] Use GSS-SPNEGO if connecting locally

2017-03-07 Thread abbra
URL: https://github.com/freeipa/freeipa/pull/547 Title: #547: Use GSS-SPNEGO if connecting locally abbra commented: """ LGTM but I think we should also update Requires: in the spec file to use cyrus-sasl-2.1.26-29.fc26 or later. """ See the full comment at https://github.com/freeipa/freeipa/p

[Freeipa-devel] [freeipa PR#545][comment] install_check: require IPv6 stack to be enabled

2017-03-07 Thread abbra
URL: https://github.com/freeipa/freeipa/pull/545 Title: #545: install_check: require IPv6 stack to be enabled abbra commented: """ how the /proc check going to play with containers? """ See the full comment at https://github.com/freeipa/freeipa/pull/545#issuecomment-284738343 -- Manage your s

Re: [Freeipa-devel] Please review: V4/AD user short names design draft

2017-03-07 Thread Alexander Bokovoy
On ti, 07 maalis 2017, Simo Sorce wrote: On Tue, 2017-03-07 at 09:38 +0100, Martin Babinsky wrote: On 03/06/2017 01:48 PM, Simo Sorce wrote: > On Mon, 2017-03-06 at 07:47 +0100, Martin Babinsky wrote: >> On 03/02/2017 02:54 PM, Simo Sorce wrote: >>> On Thu, 2017-03-02 at 08:10 +0100, Martin Babi

[Freeipa-devel] [freeipa PR#543][comment] Add options to allow ticket caching

2017-03-07 Thread abbra
URL: https://github.com/freeipa/freeipa/pull/543 Title: #543: Add options to allow ticket caching abbra commented: """ LGTM. Here I'd also like to bump gssproxy and krb5 dependencies in the spec file. We need to ensure gssproxy is actually updated. """ See the full comment at https://github.c

[Freeipa-devel] [freeipa PR#511][comment] Bump required version of gssproxy to 0.6.2

2017-03-07 Thread simo5
URL: https://github.com/freeipa/freeipa/pull/511 Title: #511: Bump required version of gssproxy to 0.6.2 simo5 commented: """ We are actually planning 0.7 at this point, due to the changes in the last few patchsets :-) """ See the full comment at https://github.com/freeipa/freeipa/pull/511#is

[Freeipa-devel] [freeipa PR#545][synchronized] install_check: require IPv6 stack to be enabled

2017-03-07 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/545 Author: tomaskrizek Title: #545: install_check: require IPv6 stack to be enabled Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/545/head:pr545 git checkout

Re: [Freeipa-devel] Please review: V4/AD user short names design draft

2017-03-07 Thread Simo Sorce
On Tue, 2017-03-07 at 09:38 +0100, Martin Babinsky wrote: > On 03/06/2017 01:48 PM, Simo Sorce wrote: > > On Mon, 2017-03-06 at 07:47 +0100, Martin Babinsky wrote: > >> On 03/02/2017 02:54 PM, Simo Sorce wrote: > >>> On Thu, 2017-03-02 at 08:10 +0100, Martin Babinsky wrote: > In this case it w

[Freeipa-devel] [freeipa PR#542][comment] Implementation independent interface for CSR generation

2017-03-07 Thread LiptonB
URL: https://github.com/freeipa/freeipa/pull/542 Title: #542: Implementation independent interface for CSR generation LiptonB commented: """ Thanks for the feedback. I will put together a new version using CFFI and the `openssl req` format for subject names. Regarding helpers, this code has al

[Freeipa-devel] [freeipa PR#547][synchronized] Use GSS-SPNEGO if connecting locally

2017-03-07 Thread simo5
URL: https://github.com/freeipa/freeipa/pull/547 Author: simo5 Title: #547: Use GSS-SPNEGO if connecting locally Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/547/head:pr547 git checkout pr547 From 431a21

[Freeipa-devel] [freeipa PR#543][synchronized] Add options to allow ticket caching

2017-03-07 Thread simo5
URL: https://github.com/freeipa/freeipa/pull/543 Author: simo5 Title: #543: Add options to allow ticket caching Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/543/head:pr543 git checkout pr543 From 4c13d33

[Freeipa-devel] [freeipa PR#547][opened] Use GSS-SPNEGO if connecting locally

2017-03-07 Thread simo5
URL: https://github.com/freeipa/freeipa/pull/547 Author: simo5 Title: #547: Use GSS-SPNEGO if connecting locally Action: opened PR body: """ GSS-SPNEGO allows us to negotiate a SASL bind with less roundtrips therefore use it when possible. We only enable it for local connections for now becau

[Freeipa-devel] [freeipa PR#546][opened] Store session cookie in a ccache option

2017-03-07 Thread simo5
URL: https://github.com/freeipa/freeipa/pull/546 Author: simo5 Title: #546: Store session cookie in a ccache option Action: opened PR body: """ Instead of using the kernel keyring, store the session cookie within the ccache. This way kdestroy will really wipe away all crededntials. Ticket: ht

[Freeipa-devel] [freeipa PR#420][comment] Allow login to WebUI using Kerberos aliases/enterprise principals

2017-03-07 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/420 Title: #420: Allow login to WebUI using Kerberos aliases/enterprise principals martbab commented: """ @abbra I have a question regarding one of your comments, please review. """ See the full comment at https://github.com/freeipa/freeipa/pull/420

[Freeipa-devel] [freeipa PR#545][edited] install_check: require IPv6 stack to be enabled

2017-03-07 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/545 Author: tomaskrizek Title: #545: install_check: require IPv6 stack to be enabled Action: edited Changed field: body Original value: """ Add checks to install and replica install to verify IPv6 stack is enabled. IPv6 is required by some IPA part

[Freeipa-devel] [freeipa PR#545][opened] install_check: require IPv6 stack to be enabled

2017-03-07 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/545 Author: tomaskrizek Title: #545: install_check: require IPv6 stack to be enabled Action: opened PR body: """ Add checks to install and replica install to verify IPv6 stack is enabled. IPv6 is required by some IPA parts (AD, conncheck, ...). htt

[Freeipa-devel] [freeipa PR#540][closed] rabase.get_certificate: make serial number arg mandatory

2017-03-07 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/540 Author: frasertweedale Title: #540: rabase.get_certificate: make serial number arg mandatory Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/540/head:pr540 git che

[Freeipa-devel] [freeipa PR#540][comment] rabase.get_certificate: make serial number arg mandatory

2017-03-07 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/540 Title: #540: rabase.get_certificate: make serial number arg mandatory tomaskrizek commented: """ master: * 3ba0375c831eca673c2df146b565a32dbc03fdb3 rabase.get_certificate: make serial number arg mandatory """ See the full comment at https://gi

[Freeipa-devel] [freeipa PR#540][+pushed] rabase.get_certificate: make serial number arg mandatory

2017-03-07 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/540 Title: #540: rabase.get_certificate: make serial number arg mandatory Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.o

[Freeipa-devel] [freeipa PR#540][+ack] rabase.get_certificate: make serial number arg mandatory

2017-03-07 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/540 Title: #540: rabase.get_certificate: make serial number arg mandatory Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/

[Freeipa-devel] [freeipa PR#537][closed] test_csrgen: adjusted comparison test scripts for CSRGenerator

2017-03-07 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/537 Author: Rezney Title: #537: test_csrgen: adjusted comparison test scripts for CSRGenerator Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/537/head:pr537 git check

[Freeipa-devel] [freeipa PR#537][+pushed] test_csrgen: adjusted comparison test scripts for CSRGenerator

2017-03-07 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/537 Title: #537: test_csrgen: adjusted comparison test scripts for CSRGenerator Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.fre

[Freeipa-devel] [freeipa PR#537][comment] test_csrgen: adjusted comparison test scripts for CSRGenerator

2017-03-07 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/537 Title: #537: test_csrgen: adjusted comparison test scripts for CSRGenerator martbab commented: """ master: * 83e2c2b65eeb5a3aa4a59c0535e9177aac5e4637 test_csrgen: adjusted comparison test scripts for CSRGenerator """ See the full comment at ht

[Freeipa-devel] [freeipa PR#544][opened] Don't use weak ciphers for client HTTPS connections

2017-03-07 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/544 Author: stlaz Title: #544: Don't use weak ciphers for client HTTPS connections Action: opened PR body: """ https://pagure.io/freeipa/issue/6730 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fe

[Freeipa-devel] [freeipa PR#516][comment] IdM Server: list all Employees with matching Smart Card

2017-03-07 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/516 Title: #516: IdM Server: list all Employees with matching Smart Card HonzaCholasta commented: """ @flo-renaud, thanks, LGTM. BTW Travis fails because there is no `sssd-dbus >= 1.15.1` - submitting a build to freeipa-master now. """ See the full

Re: [Freeipa-devel] Please review: V4/AD user short names design draft

2017-03-07 Thread Martin Babinsky
On 03/06/2017 01:48 PM, Simo Sorce wrote: On Mon, 2017-03-06 at 07:47 +0100, Martin Babinsky wrote: On 03/02/2017 02:54 PM, Simo Sorce wrote: On Thu, 2017-03-02 at 08:10 +0100, Martin Babinsky wrote: In this case it would probably be a good idea to think about "forward compatibility" and defin

[Freeipa-devel] [freeipa PR#504][comment] Add SHA256 fingerprints

2017-03-07 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/504 Title: #504: Add SHA256 fingerprints stlaz commented: """ Hm, apparently I had old `po/`, never mind, then. """ See the full comment at https://github.com/freeipa/freeipa/pull/504#issuecomment-284656476 -- Manage your subscription for the Freei

[Freeipa-devel] [freeipa PR#504][+ack] Add SHA256 fingerprints

2017-03-07 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/504 Title: #504: Add SHA256 fingerprints Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#516][comment] IdM Server: list all Employees with matching Smart Card

2017-03-07 Thread flo-renaud
URL: https://github.com/freeipa/freeipa/pull/516 Title: #516: IdM Server: list all Employees with matching Smart Card flo-renaud commented: """ Hi @HonzaCholasta sorry I overlooked the change for count. It's updated now, thank you for the review. """ See the full comment at https://github.co

[Freeipa-devel] [freeipa PR#516][synchronized] IdM Server: list all Employees with matching Smart Card

2017-03-07 Thread flo-renaud
URL: https://github.com/freeipa/freeipa/pull/516 Author: flo-renaud Title: #516: IdM Server: list all Employees with matching Smart Card Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/516/head:pr516 git ch