[Freeipa-devel] [freeipa PR#542][comment] Implementation independent interface for CSR generation

2017-03-22 Thread LiptonB
URL: https://github.com/freeipa/freeipa/pull/542 Title: #542: Implementation independent interface for CSR generation LiptonB commented: """ Thanks for the clarification, @HonzaCholasta. (And for the timely intervention in #579 to make it actually invisible). A new version is pushed, which use

[Freeipa-devel] [freeipa PR#542][comment] Implementation independent interface for CSR generation

2017-03-22 Thread LiptonB
URL: https://github.com/freeipa/freeipa/pull/542 Title: #542: Implementation independent interface for CSR generation LiptonB commented: """ Thanks for the clarification, @HonzaCholasta. (And for the timely intervention in #579 to make it actually invisible). A new version is pushed, which use

[Freeipa-devel] [freeipa PR#542][synchronized] Implementation independent interface for CSR generation

2017-03-22 Thread LiptonB
URL: https://github.com/freeipa/freeipa/pull/542 Author: LiptonB Title: #542: Implementation independent interface for CSR generation Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/542/head:pr542 git check

[Freeipa-devel] [freeipa PR#642][opened] [4.4] Bump python-dns to improve processing of non-complete resolv.conf

2017-03-22 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/642 Author: MartinBasti Title: #642: [4.4] Bump python-dns to improve processing of non-complete resolv.conf Action: opened PR body: """ With missing IP address for nameserver olser python-dns raises an IndexError. python-dns >= 1.13 just ignores b

[Freeipa-devel] [freeipa PR#639][synchronized] WebUI: Login for AD Users

2017-03-22 Thread pvomacka
URL: https://github.com/freeipa/freeipa/pull/639 Author: pvomacka Title: #639: WebUI: Login for AD Users Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/639/head:pr639 git checkout pr639 From 79a2dbfd1459ff

[Freeipa-devel] [freeipa PR#641][synchronized] Set "KDC:Disable Last Success" by default

2017-03-22 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/641 Author: MartinBasti Title: #641: Set "KDC:Disable Last Success" by default Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/641/head:pr641 git checkout pr641

[Freeipa-devel] [freeipa PR#641][opened] Set "KDC:Disable Last Success" by default

2017-03-22 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/641 Author: MartinBasti Title: #641: Set "KDC:Disable Last Success" by default Action: opened PR body: """ In big deployments enabled recording of the last sucesfull login this creates a huge changelog on DS side and cause performance issues even if

[Freeipa-devel] [freeipa PR#640][opened] Master replica dl0

2017-03-22 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/640 Author: stlaz Title: #640: Master replica dl0 Action: opened PR body: """ This patchset removes the ability of setting pkinit options on domain level 0 for server/replica installs. Also fixes a usability issue with `--no-pkinit` I noticed and

[Freeipa-devel] [freeipa PR#640][edited] Remove pkinit options from master/replica on DL0

2017-03-22 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/640 Author: stlaz Title: #640: Remove pkinit options from master/replica on DL0 Action: edited Changed field: title Original value: """ Master replica dl0 """ -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/

[Freeipa-devel] [freeipa PR#639][opened] WebUI: Login for AD Users

2017-03-22 Thread pvomacka
URL: https://github.com/freeipa/freeipa/pull/639 Author: pvomacka Title: #639: WebUI: Login for AD Users Action: opened PR body: """ Allows login as AD user. AD Users has its own menu specification as there is visible only its profile and list of active IPA users. https://pagure.io/freeipa/

[Freeipa-devel] [freeipa PR#637][comment] ldap2: use LDAP whoami operation to retrieve bind DN for current connection

2017-03-22 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/637 Title: #637: ldap2: use LDAP whoami operation to retrieve bind DN for current connection martbab commented: """ ipa-4-5: * 7d48fb841a23e9f036f3d449d80623d1225c820a ldap2: use LDAP whoami operation to retrieve bind DN for current connection mast

[Freeipa-devel] [freeipa PR#637][+pushed] ldap2: use LDAP whoami operation to retrieve bind DN for current connection

2017-03-22 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/637 Title: #637: ldap2: use LDAP whoami operation to retrieve bind DN for current connection Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#637][closed] ldap2: use LDAP whoami operation to retrieve bind DN for current connection

2017-03-22 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/637 Author: abbra Title: #637: ldap2: use LDAP whoami operation to retrieve bind DN for current connection Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/637/head:pr

[Freeipa-devel] [freeipa PR#637][+ack] ldap2: use LDAP whoami operation to retrieve bind DN for current connection

2017-03-22 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/637 Title: #637: ldap2: use LDAP whoami operation to retrieve bind DN for current connection Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: htt

[Freeipa-devel] [freeipa PR#619][comment] pytest 3.x compatibility

2017-03-22 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/619 Title: #619: pytest 3.x compatibility MartinBasti commented: """ LGTM """ See the full comment at https://github.com/freeipa/freeipa/pull/619#issuecomment-288449915 -- Manage your subscription for the Freeipa-devel mailing list: https://www.red

[Freeipa-devel] [freeipa PR#517][comment] Use Custodia 0.3 features

2017-03-22 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/517 Title: #517: Use Custodia 0.3 features tiran commented: """ Full error message: ```code 406, message Key name ca/caSigningCert%20cert-pki-ca does not match subject ca/caSigningCert cert-pki-ca``` Custodia issue https://github.com/latchset/custo

[Freeipa-devel] [freeipa PR#607][comment] Backup ipa-specific httpd unit-file

2017-03-22 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/607 Title: #607: Backup ipa-specific httpd unit-file MartinBasti commented: """ However it fixed issue listed in ticket, so this can resolved in separate PR. """ See the full comment at https://github.com/freeipa/freeipa/pull/607#issuecomment-288443

[Freeipa-devel] [freeipa PR#607][+ack] Backup ipa-specific httpd unit-file

2017-03-22 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/607 Title: #607: Backup ipa-specific httpd unit-file Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#607][comment] Backup ipa-specific httpd unit-file

2017-03-22 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/607 Title: #607: Backup ipa-specific httpd unit-file MartinBasti commented: """ After restore I cannot connect to webUI ``` [Wed Mar 22 16:43:48.779900 2017] [wsgi:error] [pid 100377] [remote 2620:52:0:2280:206a:7885:fe7b:1356:184] mod_wsgi (pid=100

[Freeipa-devel] [freeipa PR#622][closed] replica prepare: fix wrong IPA CA nickname in replica file

2017-03-22 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/622 Author: HonzaCholasta Title: #622: replica prepare: fix wrong IPA CA nickname in replica file Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/622/head:pr622 git ch

[Freeipa-devel] [freeipa PR#622][+pushed] replica prepare: fix wrong IPA CA nickname in replica file

2017-03-22 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/622 Title: #622: replica prepare: fix wrong IPA CA nickname in replica file Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa

[Freeipa-devel] [freeipa PR#622][comment] replica prepare: fix wrong IPA CA nickname in replica file

2017-03-22 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/622 Title: #622: replica prepare: fix wrong IPA CA nickname in replica file martbab commented: """ master: * 9939aa53630a9c6a66e83140e64ec56539891c13 replica prepare: fix wrong IPA CA nickname in replica file ipa-4-5: * df60e88e1bca6efd5ebf2a88e782

[Freeipa-devel] [freeipa PR#622][+ack] replica prepare: fix wrong IPA CA nickname in replica file

2017-03-22 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/622 Title: #622: replica prepare: fix wrong IPA CA nickname in replica file Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.or

[Freeipa-devel] [freeipa PR#622][comment] replica prepare: fix wrong IPA CA nickname in replica file

2017-03-22 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/622 Title: #622: replica prepare: fix wrong IPA CA nickname in replica file martbab commented: """ I ran into some issues with CA deployment, but they vanished after re-provisioning my test env. Otherwise it works. """ See the full comment at https

[Freeipa-devel] [freeipa PR#614][comment] [4.5] Constrain wheel package versions

2017-03-22 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/614 Title: #614: [4.5] Constrain wheel package versions MartinBasti commented: """ @tomaskrizek make sure that both commits are the same """ See the full comment at https://github.com/freeipa/freeipa/pull/614#issuecomment-288415527 -- Manage your s

[Freeipa-devel] [freeipa PR#614][comment] [4.5] Constrain wheel package versions

2017-03-22 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/614 Title: #614: [4.5] Constrain wheel package versions tomaskrizek commented: """ ipa-4-5: * 7c93a518c8b6fb0e3a85bc1ae0ee807c71168213 Constrain wheel package versions """ See the full comment at https://github.com/freeipa/freeipa/pull/614#issuecom

[Freeipa-devel] [freeipa PR#620][+pushed] ipa-replica-install: fix domain level 0 remote LDAP connection

2017-03-22 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/620 Title: #620: ipa-replica-install: fix domain level 0 remote LDAP connection Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.fr

[Freeipa-devel] [freeipa PR#620][closed] ipa-replica-install: fix domain level 0 remote LDAP connection

2017-03-22 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/620 Author: felipevolpone Title: #620: ipa-replica-install: fix domain level 0 remote LDAP connection Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/620/head:pr620 g

[Freeipa-devel] [freeipa PR#620][comment] ipa-replica-install: fix domain level 0 remote LDAP connection

2017-03-22 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/620 Title: #620: ipa-replica-install: fix domain level 0 remote LDAP connection tomaskrizek commented: """ master: * 772d4e3d4e9a2756e6a34e265a1219599688cde3 Fixing replica install: fix ldap connection in domlvl 0 ipa-4-5: * af4531d26ea1082acf1725

[Freeipa-devel] [freeipa PR#614][comment] [4.5] Constrain wheel package versions

2017-03-22 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/614 Title: #614: [4.5] Constrain wheel package versions tomaskrizek commented: """ @MartinBasti I checked, they are. """ See the full comment at https://github.com/freeipa/freeipa/pull/614#issuecomment-288416366 -- Manage your subscription for the

[Freeipa-devel] [freeipa PR#620][comment] ipa-replica-install: fix domain level 0 remote LDAP connection

2017-03-22 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/620 Title: #620: ipa-replica-install: fix domain level 0 remote LDAP connection MartinBasti commented: """ You fixed this issue, but uncover more issues, I will open particular tickets. ACK for this fix """ See the full comment at https://github.c

[Freeipa-devel] [freeipa PR#620][+ack] ipa-replica-install: fix domain level 0 remote LDAP connection

2017-03-22 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/620 Title: #620: ipa-replica-install: fix domain level 0 remote LDAP connection Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freei

[Freeipa-devel] [freeipa PR#614][closed] [4.5] Constrain wheel package versions

2017-03-22 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/614 Author: tiran Title: #614: [4.5] Constrain wheel package versions Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/614/head:pr614 git checkout pr614 -- Manage your

[Freeipa-devel] [freeipa PR#614][+pushed] [4.5] Constrain wheel package versions

2017-03-22 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/614 Title: #614: [4.5] Constrain wheel package versions Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute

[Freeipa-devel] [freeipa PR#614][comment] [4.5] Constrain wheel package versions

2017-03-22 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/614 Title: #614: [4.5] Constrain wheel package versions tomaskrizek commented: """ ipatool supports pushing to multiple branches, so there's no need to open multiple PRs if the commits are exactly the same and don't have to be rebased. """ See the f

[Freeipa-devel] [freeipa PR#613][closed] Constrain wheel package versions

2017-03-22 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/613 Author: tiran Title: #613: Constrain wheel package versions Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/613/head:pr613 git checkout pr613 -- Manage your subsc

[Freeipa-devel] [freeipa PR#613][comment] Constrain wheel package versions

2017-03-22 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/613 Title: #613: Constrain wheel package versions tomaskrizek commented: """ master: * fe17d187f9f2cbac28fe369cbcdd697d85105481 Constrain wheel package versions ipa-4-5: * 7c93a518c8b6fb0e3a85bc1ae0ee807c71168213 Constrain wheel package versions """

[Freeipa-devel] [freeipa PR#613][+pushed] Constrain wheel package versions

2017-03-22 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/613 Title: #613: Constrain wheel package versions Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#614][+ack] [4.5] Constrain wheel package versions

2017-03-22 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/614 Title: #614: [4.5] Constrain wheel package versions Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Co

[Freeipa-devel] [freeipa PR#638][comment] ipalib/rpc.py: Fix session handling for KEYRING: ccaches

2017-03-22 Thread abbra
URL: https://github.com/freeipa/freeipa/pull/638 Title: #638: ipalib/rpc.py: Fix session handling for KEYRING: ccaches abbra commented: """ Yes, KCM will work. However, I wonder if we could use a different approach by storing cookie in a fake ticket with a proper lifetime set to the cookie exp

[Freeipa-devel] [freeipa PR#617][comment] Allow renaming of sudo and HBAC rules

2017-03-22 Thread abbra
URL: https://github.com/freeipa/freeipa/pull/617 Title: #617: Allow renaming of sudo and HBAC rules abbra commented: """ I like the idea but please address @HonzaCholasta comments. """ See the full comment at https://github.com/freeipa/freeipa/pull/617#issuecomment-288411495 -- Manage your su

[Freeipa-devel] [freeipa PR#613][comment] Constrain wheel package versions

2017-03-22 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/613 Title: #613: Constrain wheel package versions MartinBasti commented: """ Works for me """ See the full comment at https://github.com/freeipa/freeipa/pull/613#issuecomment-288409858 -- Manage your subscription for the Freeipa-devel mailing list:

[Freeipa-devel] [freeipa PR#613][+ack] Constrain wheel package versions

2017-03-22 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/613 Title: #613: Constrain wheel package versions Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#615][closed] httpinstance: clean up /etc/httpd/alias on uninstall

2017-03-22 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/615 Author: HonzaCholasta Title: #615: httpinstance: clean up /etc/httpd/alias on uninstall Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/615/head:pr615 git checkout

[Freeipa-devel] [freeipa PR#615][comment] httpinstance: clean up /etc/httpd/alias on uninstall

2017-03-22 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/615 Title: #615: httpinstance: clean up /etc/httpd/alias on uninstall martbab commented: """ ipa-4-5: * cf188c8513c6b36a0724866025ddc220683de8dc certs: do not implicitly create DS pin.txt * f788e3e36bcaefc7d94c92895916246681e64291 httpinstance: clea

[Freeipa-devel] [freeipa PR#615][+pushed] httpinstance: clean up /etc/httpd/alias on uninstall

2017-03-22 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/615 Title: #615: httpinstance: clean up /etc/httpd/alias on uninstall Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/p

[Freeipa-devel] [freeipa PR#638][comment] ipalib/rpc.py: Fix session handling for KEYRING: ccaches

2017-03-22 Thread simo5
URL: https://github.com/freeipa/freeipa/pull/638 Title: #638: ipalib/rpc.py: Fix session handling for KEYRING: ccaches simo5 commented: """ One way to deal with this in the FILE case is to copy the ccache to a tmp file and then rename to the original one. There is a risk of racing and removing

[Freeipa-devel] [freeipa PR#615][+ack] httpinstance: clean up /etc/httpd/alias on uninstall

2017-03-22 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/615 Title: #615: httpinstance: clean up /etc/httpd/alias on uninstall Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page

[Freeipa-devel] [freeipa PR#637][synchronized] ldap2: use LDAP whoami operation to retrieve bind DN for current connection

2017-03-22 Thread abbra
URL: https://github.com/freeipa/freeipa/pull/637 Author: abbra Title: #637: ldap2: use LDAP whoami operation to retrieve bind DN for current connection Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/637/h

[Freeipa-devel] [freeipa PR#637][comment] ldap2: use LDAP whoami operation to retrieve bind DN for current connection

2017-03-22 Thread abbra
URL: https://github.com/freeipa/freeipa/pull/637 Title: #637: ldap2: use LDAP whoami operation to retrieve bind DN for current connection abbra commented: """ Removed try: finally: block, I agree that it is better to propagate error up the stack. """ See the full comment at https://github.co

[Freeipa-devel] Issues with session caching in Kerberos ccaches

2017-03-22 Thread Alexander Bokovoy
Hi, we have a number of issues with session caching in Kerberos ccaches: - MIT Kerberos FILE: ccache code does always append entries, so we end up with ever growing ccache files. In KEYRING: case we are lucky that add_key syscall actually updates the key with the same name. - MIT Kerberos F

[Freeipa-devel] [freeipa PR#638][comment] ipalib/rpc.py: Fix session handling for KEYRING: ccaches

2017-03-22 Thread abbra
URL: https://github.com/freeipa/freeipa/pull/638 Title: #638: ipalib/rpc.py: Fix session handling for KEYRING: ccaches abbra commented: """ Note: this is WIP, please test it against KEYRING: ccaches. """ See the full comment at https://github.com/freeipa/freeipa/pull/638#issuecomment-288402486

[Freeipa-devel] [freeipa PR#638][opened] ipalib/rpc.py: Fix session handling for KEYRING: ccaches

2017-03-22 Thread abbra
URL: https://github.com/freeipa/freeipa/pull/638 Author: abbra Title: #638: ipalib/rpc.py: Fix session handling for KEYRING: ccaches Action: opened PR body: """ MIT Kerberos allows to store configuration entries in the ccache. Unfortunately, there are big differences between ccache types in ho

[Freeipa-devel] [freeipa PR#627][closed] Add CI helper script invocation to Travis CI

2017-03-22 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/627 Author: martbab Title: #627: Add CI helper script invocation to Travis CI Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/627/head:pr627 git checkout pr627 -- Man

[Freeipa-devel] [freeipa PR#627][+pushed] Add CI helper script invocation to Travis CI

2017-03-22 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/627 Title: #627: Add CI helper script invocation to Travis CI Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Cont

[Freeipa-devel] [freeipa PR#627][comment] Add CI helper script invocation to Travis CI

2017-03-22 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/627 Title: #627: Add CI helper script invocation to Travis CI tomaskrizek commented: """ master: * b6624594bedce75849248469305ae964ce5ea2ef Travis CI: invoke integration test helper scripts before test execution """ See the full comment at https:/

[Freeipa-devel] [freeipa PR#627][+ack] Add CI helper script invocation to Travis CI

2017-03-22 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/627 Title: #627: Add CI helper script invocation to Travis CI Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contrib

[Freeipa-devel] [freeipa PR#617][edited] Allow renaming of sudo and HBAC rules

2017-03-22 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/617 Author: stlaz Title: #617: Allow renaming of sudo and HBAC rules Action: edited Changed field: title Original value: """ Allow renaming of sudo rules """ -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/m

[Freeipa-devel] [freeipa PR#617][comment] Allow renaming of sudo rules

2017-03-22 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/617 Title: #617: Allow renaming of sudo rules stlaz commented: """ Thank you Alexander for your insight. Since this was a hack, I did not want to do it server-wise. I chose a different approach to the problem and reworked the original idea so the re

[Freeipa-devel] [freeipa PR#627][synchronized] Add CI helper script invocation to Travis CI

2017-03-22 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/627 Author: martbab Title: #627: Add CI helper script invocation to Travis CI Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/627/head:pr627 git checkout pr627 F

[Freeipa-devel] [freeipa PR#620][comment] ipa-replica-install: fix domain level 0 remote LDAP connection

2017-03-22 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/620 Title: #620: ipa-replica-install: fix domain level 0 remote LDAP connection MartinBasti commented: """ I updated title to more descriptive one and I'm going to test it """ See the full comment at https://github.com/freeipa/freeipa/pull/620#issu

[Freeipa-devel] [freeipa PR#617][synchronized] Allow renaming of sudo rules

2017-03-22 Thread stlaz
URL: https://github.com/freeipa/freeipa/pull/617 Author: stlaz Title: #617: Allow renaming of sudo rules Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/617/head:pr617 git checkout pr617 From 5eb4c77e8bd624

[Freeipa-devel] [freeipa PR#620][edited] ipa-replica-install: fix domain level 0 remote LDAP connection

2017-03-22 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/620 Author: felipevolpone Title: #620: ipa-replica-install: fix domain level 0 remote LDAP connection Action: edited Changed field: title Original value: """ [WIP] Fixing 6549 """ -- Manage your subscription for the Freeipa-devel mailing list: h

[Freeipa-devel] [freeipa PR#627][comment] Add CI helper script invocation to Travis CI

2017-03-22 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/627 Title: #627: Add CI helper script invocation to Travis CI tomaskrizek commented: """ @martbab Exactly, please remove the extra commits. """ See the full comment at https://github.com/freeipa/freeipa/pull/627#issuecomment-288387364 -- Manage you

[Freeipa-devel] [freeipa PR#626][+pushed] Move helper code for integration plugin

2017-03-22 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/626 Title: #626: Move helper code for integration plugin Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribut

[Freeipa-devel] [freeipa PR#626][comment] Move helper code for integration plugin

2017-03-22 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/626 Title: #626: Move helper code for integration plugin tomaskrizek commented: """ master: * dde71ec4a9669a155456a8e8912ed3a0503b8704 Move helper code for integration plugin * 2895e3931d0b4a9e20e1b211ef5a76f79fc73c9d Move config module to ipatests

[Freeipa-devel] [freeipa PR#626][closed] Move helper code for integration plugin

2017-03-22 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/626 Author: tiran Title: #626: Move helper code for integration plugin Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/626/head:pr626 git checkout pr626 -- Manage you

[Freeipa-devel] [freeipa PR#602][+pushed] configure: Use ODS_USER and NAMED_GROUP in daemons/dnssec/*.service.in

2017-03-22 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/602 Title: #602: configure: Use ODS_USER and NAMED_GROUP in daemons/dnssec/*.service.in Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http:

[Freeipa-devel] [freeipa PR#602][comment] configure: Use ODS_USER and NAMED_GROUP in daemons/dnssec/*.service.in

2017-03-22 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/602 Title: #602: configure: Use ODS_USER and NAMED_GROUP in daemons/dnssec/*.service.in martbab commented: """ master: * 44a3e0fe1d168ad87182654976a26e352287b1e0 configure: Use ODS_USER and NAMED_GROUP in daemons/dnssec/*.service.in ipa-4-5: * 57d

[Freeipa-devel] [freeipa PR#602][closed] configure: Use ODS_USER and NAMED_GROUP in daemons/dnssec/*.service.in

2017-03-22 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/602 Author: tjaalton Title: #602: configure: Use ODS_USER and NAMED_GROUP in daemons/dnssec/*.service.in Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/602/head:pr60

[Freeipa-devel] [freeipa PR#627][comment] Add CI helper script invocation to Travis CI

2017-03-22 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/627 Title: #627: Add CI helper script invocation to Travis CI martbab commented: """ @tomaskrizek I guess Green Travis means we can merge #626 and I can then remove those commits from this PR right? """ See the full comment at https://github.com/fr

[Freeipa-devel] [freeipa PR#602][comment] configure: Use ODS_USER and NAMED_GROUP in daemons/dnssec/*.service.in

2017-03-22 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/602 Title: #602: configure: Use ODS_USER and NAMED_GROUP in daemons/dnssec/*.service.in MartinBasti commented: """ Works for me """ See the full comment at https://github.com/freeipa/freeipa/pull/602#issuecomment-288382385 -- Manage your subscript

[Freeipa-devel] [freeipa PR#602][+ack] configure: Use ODS_USER and NAMED_GROUP in daemons/dnssec/*.service.in

2017-03-22 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/602 Title: #602: configure: Use ODS_USER and NAMED_GROUP in daemons/dnssec/*.service.in Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://w

[Freeipa-devel] [freeipa PR#637][comment] ldap2: use LDAP whoami operation to retrieve bind DN for current connection

2017-03-22 Thread pvomacka
URL: https://github.com/freeipa/freeipa/pull/637 Title: #637: ldap2: use LDAP whoami operation to retrieve bind DN for current connection pvomacka commented: """ Hi @abbra, thank you for patch, works for me. """ See the full comment at https://github.com/freeipa/freeipa/pull/637#issuecomment-

[Freeipa-devel] [freeipa PR#517][comment] Use Custodia 0.3 features

2017-03-22 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/517 Title: #517: Use Custodia 0.3 features MartinBasti commented: """ Replica logs^ Master logs: ``` Mar 21 15:46:03 vm-126.abc.idm.lab.eng.brq.redhat.com systemd[1]: Stopping IPA Custodia Service... Mar 21 15:46:03 vm-126.abc.idm.lab.eng.brq.redha

[Freeipa-devel] [freeipa PR#637][comment] ldap2: use LDAP whoami operation to retrieve bind DN for current connection

2017-03-22 Thread martbab
URL: https://github.com/freeipa/freeipa/pull/637 Title: #637: ldap2: use LDAP whoami operation to retrieve bind DN for current connection martbab commented: """ LGTM but lint has some complains probably related to my in-line comment. """ See the full comment at https://github.com/freeipa/free

[Freeipa-devel] [freeipa PR#517][comment] Use Custodia 0.3 features

2017-03-22 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/517 Title: #517: Use Custodia 0.3 features MartinBasti commented: """ custodia-0.3.0-3.fc25.noarch """ See the full comment at https://github.com/freeipa/freeipa/pull/517#issuecomment-288373442 -- Manage your subscription for the Freeipa-devel mai

[Freeipa-devel] [freeipa PR#517][comment] Use Custodia 0.3 features

2017-03-22 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/517 Title: #517: Use Custodia 0.3 features MartinBasti commented: """ ``` [root@vm-058-017 ~]# journalctl -u ipa-custodia -- Logs begin at Wed 2017-03-15 15:56:23 CET, end at Wed 2017-03-22 12:35:17 CET. -- Mar 15 16:20:58 vm-058-017.abc.idm.lab.eng.

[Freeipa-devel] [freeipa PR#517][comment] Use Custodia 0.3 features

2017-03-22 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/517 Title: #517: Use Custodia 0.3 features MartinBasti commented: """ @tiran I manually installed custodia on my VM from koji. Travis doesn't run replica install tests what is the primary use case for custodia in FreeIPA, so travis result has no wei

[Freeipa-devel] [freeipa PR#517][comment] Use Custodia 0.3 features

2017-03-22 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/517 Title: #517: Use Custodia 0.3 features tiran commented: """ Please custodia logs (```journalctl -u ipa-custodia``` and ```/var/log/ipa-custodia.audit.log```) from the server. """ See the full comment at https://github.com/freeipa/freeipa/pull/5

[Freeipa-devel] [freeipa PR#517][comment] Use Custodia 0.3 features

2017-03-22 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/517 Title: #517: Use Custodia 0.3 features tiran commented: """ @MartinBasti How did you get Custodia into the test envs when it is not available in COPR or Fedora repos? """ See the full comment at https://github.com/freeipa/freeipa/pull/517#issue

[Freeipa-devel] [freeipa PR#633][+pushed] Support 8192-bit RSA keys in default cert profile

2017-03-22 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/633 Title: #633: Support 8192-bit RSA keys in default cert profile Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page

[Freeipa-devel] [freeipa PR#633][closed] Support 8192-bit RSA keys in default cert profile

2017-03-22 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/633 Author: frasertweedale Title: #633: Support 8192-bit RSA keys in default cert profile Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/633/head:pr633 git checkout p

[Freeipa-devel] [freeipa PR#633][comment] Support 8192-bit RSA keys in default cert profile

2017-03-22 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/633 Title: #633: Support 8192-bit RSA keys in default cert profile tomaskrizek commented: """ master: * 1530758475c2e21dd732581ff6816e03ca74dede Support 8192-bit RSA keys in default cert profile ipa-4-5: * 9118c08455d42f4e7f43370be1a858595a60bc9a S

[Freeipa-devel] [freeipa PR#633][+ack] Support 8192-bit RSA keys in default cert profile

2017-03-22 Thread tomaskrizek
URL: https://github.com/freeipa/freeipa/pull/633 Title: #633: Support 8192-bit RSA keys in default cert profile Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Co

[Freeipa-devel] [freeipa PR#517][comment] Use Custodia 0.3 features

2017-03-22 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/517 Title: #517: Use Custodia 0.3 features MartinBasti commented: """ No this PR si not blocker by this but by this. I manually tried this patch and replica installation failed. ``` File "/usr/lib/python2.7/site-packages/ipaserver/install/ca.py",

[Freeipa-devel] [freeipa PR#637][opened] ldap2: use LDAP whoami operation to retrieve bind DN for current connection

2017-03-22 Thread abbra
URL: https://github.com/freeipa/freeipa/pull/637 Author: abbra Title: #637: ldap2: use LDAP whoami operation to retrieve bind DN for current connection Action: opened PR body: """ For external users which are mapped to some DN in LDAP server, we wouldn't neccesary be able to find a kerberos d

[Freeipa-devel] [freeipa PR#636][opened] [Py3] Fix ipatests.util doc tests

2017-03-22 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/636 Author: tiran Title: #636: [Py3] Fix ipatests.util doc tests Action: opened PR body: """ Doctests of ipatests.util fail under Python 3. The old test scenario does no longer work on Python 3 since u'how are you' and 'how are you' have identical

[Freeipa-devel] [freeipa PR#626][comment] Move helper code for integration plugin

2017-03-22 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/626 Title: #626: Move helper code for integration plugin tiran commented: """ @apophys has created ticket https://pagure.io/freeipa/issue/6798 and I have updated all commit messages. """ See the full comment at https://github.com/freeipa/freeipa/pu

[Freeipa-devel] [freeipa PR#626][edited] Move helper code for integration plugin

2017-03-22 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/626 Author: tiran Title: #626: Move helper code for integration plugin Action: edited Changed field: body Original value: """ fd1b4f6ec9a349196d5df510008c4745f0b1fb84 broke integration tests because the integration helper imports code from ``ipate

[Freeipa-devel] [freeipa PR#397][comment] Improve wheel building and provide ipaserver wheel for local testing

2017-03-22 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/397 Title: #397: Improve wheel building and provide ipaserver wheel for local testing tiran commented: """ PR is blocked by #613 """ See the full comment at https://github.com/freeipa/freeipa/pull/397#issuecomment-288357734 -- Manage your subscrip

[Freeipa-devel] [freeipa PR#517][comment] Use Custodia 0.3 features

2017-03-22 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/517 Title: #517: Use Custodia 0.3 features tiran commented: """ PR is blocked because custodia 0.3 is not yet in https://copr.fedorainfracloud.org/coprs/g/freeipa/freeipa-master/packages/ Please add the package fro Koji builds https://github.com/fr

[Freeipa-devel] [freeipa PR#613][comment] Constrain wheel package versions

2017-03-22 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/613 Title: #613: Constrain wheel package versions tiran commented: """ @MartinBasti please finish the review. The issue makes my daily work harder and more complicated. """ See the full comment at https://github.com/freeipa/freeipa/pull/613#issueco

[Freeipa-devel] [freeipa PR#626][comment] Move helper code for integration plugin

2017-03-22 Thread apophys
URL: https://github.com/freeipa/freeipa/pull/626 Title: #626: Move helper code for integration plugin apophys commented: """ will do """ See the full comment at https://github.com/freeipa/freeipa/pull/626#issuecomment-288355769 -- Manage your subscription for the Freeipa-devel mailing list: h

[Freeipa-devel] [freeipa PR#616][closed] Simplify KRA transport cert cache

2017-03-22 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/616 Author: tiran Title: #616: Simplify KRA transport cert cache Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/616/head:pr616 git checkout pr616 -- Manage your subs

[Freeipa-devel] [freeipa PR#616][+rejected] Simplify KRA transport cert cache

2017-03-22 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/616 Title: #616: Simplify KRA transport cert cache Label: +rejected -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Co

[Freeipa-devel] [freeipa PR#619][comment] pytest 3.x compatibility

2017-03-22 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/619 Title: #619: pytest 3.x compatibility tiran commented: """ @martbab @MartinBasti Do you agree with the workaround or do you want to suggest a different approach? """ See the full comment at https://github.com/freeipa/freeipa/pull/619#issuecomme

[Freeipa-devel] [freeipa PR#626][comment] Move helper code for integration plugin

2017-03-22 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/626 Title: #626: Move helper code for integration plugin tiran commented: """ @apophys Please create a ticket for the issue. This PR should not get merged until the issue is properly documented in a ticket and commit messages have been updated. """

[Freeipa-devel] [freeipa PR#634][comment] cert: do not limit internal searches in cert-find

2017-03-22 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/634 Title: #634: cert: do not limit internal searches in cert-find HonzaCholasta commented: """ The fix was incomplete, it should be OK now. """ See the full comment at https://github.com/freeipa/freeipa/pull/634#issuecomment-288344593 -- Manage yo

[Freeipa-devel] [freeipa PR#634][synchronized] cert: do not limit internal searches in cert-find

2017-03-22 Thread HonzaCholasta
URL: https://github.com/freeipa/freeipa/pull/634 Author: HonzaCholasta Title: #634: cert: do not limit internal searches in cert-find Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/634/head:pr634 git check

  1   2   >