Re: [Freeipa-devel] [PATCH] 811 performance: faster DN implementation

2015-04-09 Thread Petr Vobornik
On 04/02/2015 11:54 AM, Petr Viktorin wrote: On 03/31/2015 12:11 PM, Petr Vobornik wrote: The only different thing is a lack of utf-8 encoded str support(as input). I don't know how much important the support is. I don't think that support is too important (assuming IPA does

Re: [Freeipa-devel] Designing better API compatibility

2015-04-09 Thread Petr Vobornik
On 04/09/2015 09:35 AM, Martin Kosek wrote: On 04/09/2015 09:16 AM, Jan Cholasta wrote: Dne 8.4.2015 v 16:44 Martin Kosek napsal(a): On 03/20/2015 05:00 PM, Petr Vobornik wrote: On 03/20/2015 04:16 PM, Petr Spacek wrote: On 20.3.2015 15:51, Nathaniel McCallum wrote: On Fri, 2015-03-20 at 09

[Freeipa-devel] [PATCH] 786 webui: unable to select single value in CB by enter key

2015-03-31 Thread Petr Vobornik
This little fellow was hiding in a cupboard (patchset 784-786 was abandoned). Fix: If editable combobox has one value, the value is selected and changed by hand, it can't be re-selected by enter key. -- Petr Vobornik From 210ee41d957c9efb818b721ef40ffc4d469cf15a Mon Sep 17 00:00:00 2001

[Freeipa-devel] [PATCH] webui: use no_members option in entity select search

2015-03-31 Thread Petr Vobornik
Obtaining member information for entity selects is not needed and it causes unwanted performance hit, especially with larger groups. This patch removes it. https://fedorahosted.org/freeipa/ticket/4948 -- Petr Vobornik From f4cc39c016749fd73f0cc8bc67aa170ee248507a Mon Sep 17 00:00:00 2001 From

[Freeipa-devel] [PATCH] 809 speed up convert_attribute_members

2015-03-31 Thread Petr Vobornik
h 809 is useful to avoid high load of 389. https://fedorahosted.org/freeipa/ticket/4965 -- Petr Vobornik From 7d55a7e2bd88cb9c754cb8cc8a05fd947fd5438a Mon Sep 17 00:00:00 2001 From: Petr Vobornik Date: Wed, 18 Mar 2015 18:48:54 +0100 Subject: [PATCH] speed up convert_attribute_members A wor

[Freeipa-devel] [PATCH] 810 speed up indirect member processing

2015-03-31 Thread Petr Vobornik
avoid paging by small pages(default size: 100) which is very slow for many members. https://fedorahosted.org/freeipa/ticket/4947 Useful to test with #809 -- Petr Vobornik From 2d07532771a4a542cb220f87cdc7c1ce115014f6 Mon Sep 17 00:00:00 2001 From: Petr Vobornik Date: Tue, 31 Mar 2015 10:59:37

[Freeipa-devel] [PATCH] 811 performance: faster DN implementation

2015-03-31 Thread Petr Vobornik
d lists of the open ldap repr. so that the change of value or attr is reflected in parent object. -- Petr Vobornik From 1de87815183b9e9ddef5710eab1e83ba36127986 Mon Sep 17 00:00:00 2001 From: Petr Vobornik Date: Wed, 25 Mar 2015 13:39:43 +0100 Subject: [PATCH] performance: faster DN implementation

Re: [Freeipa-devel] [PATCH 0043] Use mod_auth_gssapi instead of mod_auth_kerb.

2015-03-27 Thread Petr Vobornik
with troubleshooting. If we can safely remove it, we should do it. I did a quick test and it looks like we everything works without it. rob Updated patch attached. ACK tested on F22 - both CLI and Web UI -- Petr Vobornik -- Manage your subscription for the Freeipa-devel mailing list:

Re: [Freeipa-devel] [PATCH 0042] Make lint work on Fedora 22.

2015-03-27 Thread Petr Vobornik
ter branch. IMHO it could got to ipa-4-1 branch because of FreeIPA 4.1.4 in F22 -- Petr Vobornik -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

Re: [Freeipa-devel] Announcing FreeIPA 4.1.4

2015-03-27 Thread Petr Vobornik
On 03/27/2015 10:31 AM, Petr Vobornik wrote: On 03/27/2015 10:22 AM, Jan Pazdziora wrote: On Fri, Mar 27, 2015 at 10:48:20AM +0200, Alexander Bokovoy wrote: For Fedora there is updates-testing repository that fits the goal of testing before applying to the actual deployment if you have any (I

Re: [Freeipa-devel] Announcing FreeIPA 4.1.4

2015-03-27 Thread Petr Vobornik
re was the issues with missing slapi-nis build which should be resolved now -- Petr Vobornik -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

Re: [Freeipa-devel] [PATCHES 0001-0002] ipa-client-install NTP fixes

2015-03-26 Thread Petr Vobornik
ushed. Pushed to: master: * f0c1daf7a2a8c88f6d84d81d66c7e39f571e0894 Skip time sync during client install when using --no-ntp ipa-4-1: * b5969c1d1ae6eb1e392e0420fcbf094ae7b34102 Skip time sync during client install when using --no-ntp Note: it's part of Fedora builds as a separate patch (that's why I noticed) -- Petr Voborn

[Freeipa-devel] Announcing FreeIPA 4.1.4

2015-03-26 Thread Petr Vobornik
z (1) === * Limit deadlocks between DS plugin DNA and slapi-nis -- Petr Vobornik -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

Re: [Freeipa-devel] [PATCH] FreeIPA 4.1.4 release and fixes for CVE-2015-1827 and CVE-2015-0283

2015-03-26 Thread Petr Vobornik
2 for CVE-2015-0283 fixes master: * 1b781b777f534b12a178202afa0982afd2d9c1dd slapi-nis: require 0.54.2 for CVE-2015-0283 fixes I'm going to do the FreeIPA 4.1.4 release now. -- Petr Vobornik -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailma

Re: [Freeipa-devel] [PATCH 0020] show the exception message raised by dogtag._parse_ca_status during install

2015-03-26 Thread Petr Vobornik
: e8d4f6dba1743389962e9d51871a88dc384840ec ipa-4-1: d7863f3e1ee8cbd5acda26ce1170913ca936ce7e -- Petr Vobornik -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

Re: [Freeipa-devel] [PATCH 0022] migrate-ds: proper treatment of unsuccessful migrations

2015-03-23 Thread Petr Vobornik
aster: 5a5e1a2494e4aa2cae57d8188de73f5035362638 -- Petr Vobornik -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

Re: [Freeipa-devel] Designing better API compatibility

2015-03-20 Thread Petr Vobornik
sioning. And if this can't land for 4.2, land it in the next release. I'd rather do API-stability correctly and a release later than rushed with compromises. We have to live with this forever. + all votes I have :-) +1 -- Petr Vobornik -- Manage your subscription for the Fre

Re: [Freeipa-devel] [PATCHES 0001-0002] ipa-client-install NTP fixes

2015-03-17 Thread Petr Vobornik
oject. F21 update: - https://admin.fedoraproject.org/updates/freeipa-4.1.3-3.fc21 F22 update: - https://admin.fedoraproject.org/updates/freeipa-4.1.3-3.fc22 -- Petr Vobornik -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contrib

Re: [Freeipa-devel] Purpose of default user group

2015-03-13 Thread Petr Vobornik
Thanks all for the answers. On 03/10/2015 03:27 PM, Rob Crittenden wrote: Petr Vobornik wrote: In ipa migrate-ds we also set the group to all users who are not member of anything. Why is it important for a user to be a member of a group? Every POSIX user needs a default GID. We don't c

Re: [Freeipa-devel] [PATCHES] SPEC: Require python2 version of sssd bindings

2015-03-12 Thread Petr Vobornik
On 03/06/2015 03:13 PM, Alexander Bokovoy wrote: On Fri, 06 Mar 2015, Lukas Slebodnik wrote: On (05/03/15 16:20), Petr Vobornik wrote: On 03/05/2015 11:23 AM, Lukas Slebodnik wrote: On (05/03/15 08:54), Petr Vobornik wrote: On 02/27/2015 09:50 PM, Lukas Slebodnik wrote: ehlo, Please review

Re: [Freeipa-devel] Generic support for unknown DNS RR types (RFC 3597)

2015-03-10 Thread Petr Vobornik
meters/dns-parameters.xhtml#dns-parameters-4 [5] http://tools.ietf.org/html/rfc3597#section-5 -- Petr^2 Spacek -- Petr Vobornik -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] Purpose of default user group

2015-03-10 Thread Petr Vobornik
? Thank you -- Petr Vobornik -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

Re: [Freeipa-devel] UI plugins

2015-03-09 Thread Petr Vobornik
ice method[1] to put new field between two existing ones. [1] https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Array/splice -- Petr Vobornik -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel C

Re: [Freeipa-devel] [PATCHES 0015-0019] changes to the way host TGT is obtained using keytab

2015-03-06 Thread Petr Vobornik
3) I think it would be nice to support ccache types other than FILE. According to Petr Vobornik (see his reply), the user is limited mostly to FILE ccache type, so I don't know if it will make sense to support also other types. Actually I agree with Honza. I wanted to say that with your

Re: [Freeipa-devel] UI plugins

2015-03-06 Thread Petr Vobornik
gain! Corey On Fri, Mar 6, 2015 at 3:51 AM, Petr Vobornik wrote: On 03/06/2015 03:54 AM, Corey Kovacs wrote: After reading the extending freeipa training document I was able successfully add us to meet attributes and add/modify them using the cli which was pretty cool. Now that I got the cli o

Re: [Freeipa-devel] [PATCHES 0015-0019] changes to the way host TGT is obtained using keytab

2015-03-06 Thread Petr Vobornik
name=ccache_file, ... krbV snipped doesn't use it so maybe we can remove it. https://git.fedorahosted.org/cgit/python-krbV.git/tree/krbV-code-snippets.py -- Petr Vobornik -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-d

Re: [Freeipa-devel] UI plugins

2015-03-06 Thread Petr Vobornik
n or you don't return a plugin object or the plugin could not be loaded (bad name) - it's good to use some JavaScript liner - jsl or jshint to catch syntax errors early. I running version 3.3 on rhel 7. Any help or pointers to more documentation would be greatly appreciated. -- P

Re: [Freeipa-devel] [PATCHES] SPEC: Require python2 version of sssd bindings

2015-03-05 Thread Petr Vobornik
On 03/05/2015 11:23 AM, Lukas Slebodnik wrote: On (05/03/15 08:54), Petr Vobornik wrote: On 02/27/2015 09:50 PM, Lukas Slebodnik wrote: ehlo, Please review attached patches and fix freeipa in fedora 22 ASAP. I think the most critical is 1st patch sh$ git grep "SSSDConfig" | g

Re: [Freeipa-devel] [PATCH] 0039 Try continue ipa-client-automount even if nsslapd-minssf > 0.

2015-03-05 Thread Petr Vobornik
: 0344f246c294d5dcdf19ec4dd851de48a55e6274 -- Petr Vobornik ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] [PATCHES] SPEC: Require python2 version of sssd bindings

2015-03-04 Thread Petr Vobornik
of freeipa. LS Fedora 22 was amended. Patch 1: ACK Patch 2: ACK Patch3: the package name is libsss_nss_idmap-python not python-libsss_nss_idmap which already is required in adtrust package -- Petr Vobornik ___ Freeipa-devel mailing list Freeipa-devel@

Re: [Freeipa-devel] [PATCH 0001] ipa-client-install: attempt to get host TGT several times before aborting client installation

2015-03-02 Thread Petr Vobornik
rom ipa-client-install (if location is specified) and therefore it might fail during client installation. Or also, kinit call with admin creadentials worked for the user but I wonder if it was just a coincidence and may break under slightly different but similar conditions. -

[Freeipa-devel] [PATCH] 808 webui: service: add ipakrbrequirespreauth checkbox

2015-02-25 Thread Petr Vobornik
Allow to configure missing krb ticket flag - ipakrbrequirespreauth from Web UI. -- Petr Vobornik From 23def2a08bf3aec43bc341bafeebaf4fee302ad2 Mon Sep 17 00:00:00 2001 From: Petr Vobornik Date: Wed, 25 Feb 2015 12:56:19 +0100 Subject: [PATCH] webui: service: add ipakrbrequirespreauth checkbox

[Freeipa-devel] Announcing FreeIPA 4.1.3

2015-02-25 Thread Petr Vobornik
nd commands * ipatests: Add coverage for referential integrity plugin applied on ipaAssignedIDView * ipatests: Fix old command references in the ID views tests * ipatests: Fix incorrect assumptions in idviews tests -- Petr Vobornik ___ Freeipa-devel mai

Re: [Freeipa-devel] [PATCH] 799 ipatests: add missing ssh object classes to idoverrideuser

2015-02-19 Thread Petr Vobornik
On 02/19/2015 04:31 PM, Martin Kosek wrote: On 02/19/2015 01:03 PM, Petr Vobornik wrote: tests in test_xmlrpc/test_idviews_plugin.py were failing - due to https://fedorahosted.org/freeipa/ticket/4868 also attaching amended freeipa-tbabej-0302-ipatests-Add-coverage-for-adding-and-removing

Re: [Freeipa-devel] FreeIPA 4.1.3 release notes draft

2015-02-19 Thread Petr Vobornik
On 02/19/2015 03:51 PM, Martin Kosek wrote: On 02/17/2015 08:26 AM, Martin Kosek wrote: On 02/16/2015 05:13 PM, Petr Vobornik wrote: ... Q: The same upgrade instructions are copied from release to release. Shouldn't we rather move them into separate page which would contain the upgrade

[Freeipa-devel] [PATCH] 800 rpc-client: add forms based auth support

2015-02-19 Thread Petr Vobornik
mp_db.secdir) ca_certs = [cert.der_data for cert in certs] for i, cert in enumerate(ca_certs): tmp_db.add_cert(cert, 'CA certificate %d' % (i + 1), 'C,,') my_nss_dir_path = tmp_db.secdir -- Petr Vobornik From 38ade84e5e6601171ad080fe8c427c78f1d946b8 Mon Sep 17 00:00:00 2

[Freeipa-devel] [PATCH] 801-806 webui-ci: otptoken tests

2015-02-19 Thread Petr Vobornik
self.api.Command.user_del(USER_ID, **{'continue': True}) 2. to reconnect as other user: self.reconnect_api(USER_ID, USER_PW) 3. reconnect back as admin: self.reconnect_api() -- Petr Vobornik From c7deab1ddc95908abdf953b42ee29c87c392c065 Mon Sep 17 00:00:00 2001 From: Petr Voborni

[Freeipa-devel] [PATCH] 807 webui-ci: do not open 2 browser windows

2015-02-19 Thread Petr Vobornik
Only for master branch. -- Petr Vobornik From 1a6d0bdf3ff57240728470ad5703268079794206 Mon Sep 17 00:00:00 2001 From: Petr Vobornik Date: Thu, 19 Feb 2015 15:04:47 +0100 Subject: [PATCH] webui-ci: do not open 2 browser windows --- ipatests/test_webui/ui_driver.py | 6 +++--- 1 file changed, 3

[Freeipa-devel] [PATCH] 799 ipatests: add missing ssh object classes to idoverrideuser

2015-02-19 Thread Petr Vobornik
tests in test_xmlrpc/test_idviews_plugin.py were failing - due to https://fedorahosted.org/freeipa/ticket/4868 also attaching amended freeipa-tbabej-0302-ipatests-Add-coverage-for-adding-and-removing-sshpub.patch which abandoned during #4868 review. -- Petr Vobornik From

Re: [Freeipa-devel] [PATCH 0002] Changing the token owner also changes its manager

2015-02-18 Thread Petr Vobornik
el Attaching updated patch. ACK Pushed to: master: b95f4330c9433683f61c46f9605fd1d24bb8b998 ipa-4-1: c985de1ee6429c49e6273a037478212e7ee301c8 -- Petr Vobornik ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] [PATCH 300] Fix incorrect python shebang usage

2015-02-18 Thread Petr Vobornik
On 01/22/2015 04:49 PM, Martin Basti wrote: On 22/01/15 12:52, Tomas Babej wrote: Hi, attached patch fixes few python2 non-explicit shebangs that lurked into the codebase. Tomas ACK was pushed by tbabej to master on 2015-01-26 f30865c5f07bdc4d5f87e89f9ed99148f4d361ce -- Petr Vobornik

Re: [Freeipa-devel] [PATCH] 494 group-detach does not add correct objectclasses

2015-02-18 Thread Petr Vobornik
ticket for regression tests: https://fedorahosted.org/freeipa/ticket/4909 -- Petr Vobornik ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel

[Freeipa-devel] [PATCH] 798 Fix TOTP Synchronization Window label

2015-02-16 Thread Petr Vobornik
not consistent with others -- Petr Vobornik From 38e0ee88016210b90f282aad15e4428e6f0efbe6 Mon Sep 17 00:00:00 2001 From: Petr Vobornik Date: Fri, 13 Feb 2015 19:12:43 +0100 Subject: [PATCH] Fix TOTP Synchronization Window label --- ipalib/plugins/otpconfig.py | 2 +- 1 file changed, 1

Re: [Freeipa-devel] FreeIPA 4.1.3 release notes draft

2015-02-16 Thread Petr Vobornik
On 02/16/2015 05:49 PM, Martin Basti wrote: On 16/02/15 17:13, Petr Vobornik wrote: Hello list, First version of release notes for FreeIPA 4.1.3 release is prepared: http://www.freeipa.org/page/Releases/4.1.3 Please comment/amend. Q: The same upgrade instructions are copied from release

[Freeipa-devel] FreeIPA 4.1.3 release notes draft

2015-02-16 Thread Petr Vobornik
n the upgrade steps? Listed by releases which introduced them. Thank you -- Petr Vobornik ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] [PATCH 0080] Expose the disabled User Auth Type

2015-02-12 Thread Petr Vobornik
On 01/06/2015 06:14 PM, Petr Vobornik wrote: Alright, I was able to reproduce this problem via a bisect. I think you hit a bug that was introduced in 953c6846b7cb8d75253538ab92a1360fceee0c3c and fixed by 9baa93da1cbf56c2a6f7e82e099bc3ff3f19e2e4. Those patches existed in my local branch as one

Re: [Freeipa-devel] [PATCH] 488-489 PermissionsV2 related winsync fixes

2015-02-05 Thread Petr Vobornik
Administrators manipulate Winsync Agreements -- Petr Vobornik ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] [PATCH] 491 Replication Administrators cannot remove replication

2015-02-05 Thread Petr Vobornik
://fedorahosted.org/freeipa/ticket/4848 Works for me. ACK Was pushed by mkosek (2015-01-20): master: 251c97cf96edccaec5ce034007068609ad69227f ipa-4-1: 338831aea3cdf04a27f5ea9159f84f9ce933e0c1 -- Petr Vobornik ___ Freeipa-devel mailing list Freeipa

Re: [Freeipa-devel] [PATCH] 388 Remove RUV from LDIF files before using them in ipa-restore

2015-01-13 Thread Petr Vobornik
On 01/12/2015 05:46 PM, Jan Cholasta wrote: Hi, the attached patch fixes <https://fedorahosted.org/freeipa/ticket/4822>. Honza works for me, ACK -- Petr Vobornik ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redh

Re: [Freeipa-devel] [PATCH] 389 Fix ipa-restore on systems without IPA installed

2015-01-13 Thread Petr Vobornik
On 01/13/2015 05:06 PM, Jan Cholasta wrote: Dne 13.1.2015 v 16:47 Petr Vobornik napsal(a): On 01/13/2015 11:54 AM, Jan Cholasta wrote: Dne 13.1.2015 v 10:46 Petr Vobornik napsal(a): On 01/12/2015 06:07 PM, Jan Cholasta wrote: Hi, the attached patch fixes <https://fedorahosted.org/free

Re: [Freeipa-devel] [PATCH] 389 Fix ipa-restore on systems without IPA installed

2015-01-13 Thread Petr Vobornik
On 01/13/2015 11:54 AM, Jan Cholasta wrote: Dne 13.1.2015 v 10:46 Petr Vobornik napsal(a): On 01/12/2015 06:07 PM, Jan Cholasta wrote: Hi, the attached patch fixes <https://fedorahosted.org/freeipa/ticket/4824>. Honza Is there a reason why `installutils.check_server_configuration(

Re: [Freeipa-devel] [PATCH] 387 Fix validation of ipa-restore options

2015-01-13 Thread Petr Vobornik
On 01/13/2015 02:26 PM, Jan Cholasta wrote: Dne 13.1.2015 v 13:01 Petr Vobornik napsal(a): On 01/12/2015 02:28 PM, Jan Cholasta wrote: Hi, the attached patch fixes <https://fedorahosted.org/freeipa/ticket/4797>. Note that --data with data-only backup and --logs-only with data-only r

Re: [Freeipa-devel] [PATCH] 0037 Remove ipanttrustauthincoming/ipanttrustauthoutgoing from ipa trust-add output.

2015-01-13 Thread Petr Vobornik
On 01/13/2015 01:51 PM, David Kupka wrote: On 01/13/2015 01:39 PM, Petr Vobornik wrote: On 01/13/2015 01:33 PM, David Kupka wrote: https://fedorahosted.org/freeipa/ticket/4787 Haven't try it, but: have you considered: result['result'].pop('ipanttrustauthincoming&

Re: [Freeipa-devel] [PATCH] 0037 Remove ipanttrustauthincoming/ipanttrustauthoutgoing from ipa trust-add output.

2015-01-13 Thread Petr Vobornik
On 01/13/2015 01:33 PM, David Kupka wrote: https://fedorahosted.org/freeipa/ticket/4787 Haven't try it, but: have you considered: result['result'].pop('ipanttrustauthincoming', None) ? -- Petr Vobornik ___ Freeipa-d

Re: [Freeipa-devel] [PATCH] 387 Fix validation of ipa-restore options

2015-01-13 Thread Petr Vobornik
8 continuation line under-indented for visual indent -- Petr Vobornik ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] [PATCH] 389 Fix ipa-restore on systems without IPA installed

2015-01-13 Thread Petr Vobornik
nd not in `run` as for DATA backup? -- Petr Vobornik ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] [PATCH] 797 rpcclient: use json_encode_binary for verbose output

2015-01-13 Thread Petr Vobornik
On 01/12/2015 07:15 PM, Martin Basti wrote: On 12/01/15 16:29, Petr Vobornik wrote: `json.dumps` is not able to process some IPA's object types and therefore requires to preprocess it with `json_encode_binary` call. This step was not used in rpcclient's verbose outp

[Freeipa-devel] [PATCH] 797 rpcclient: use json_encode_binary for verbose output

2015-01-12 Thread Petr Vobornik
`json.dumps` is not able to process some IPA's object types and therefore requires to preprocess it with `json_encode_binary` call. This step was not used in rpcclient's verbose output. https://fedorahosted.org/freeipa/ticket/4773 -- Petr Vobornik From 794c06208ddc4cf594f1f7e4dccfaf

[Freeipa-devel] [PATCH] 796 migrate-ds: fix compat plugin check

2015-01-12 Thread Petr Vobornik
eeipa/ticket/4825 -- Petr Vobornik From 43a8e5ac5897e1d7bdda3ceac69c58b2634f7e83 Mon Sep 17 00:00:00 2001 From: Petr Vobornik Date: Mon, 12 Jan 2015 13:08:11 +0100 Subject: [PATCH] migrate-ds: fix compat plugin check After ACI refactoring, admin cannot read Schema Compatibility plugin configuratio

Re: [Freeipa-devel] Move FreeIPA translations to Zanata?

2015-01-09 Thread Petr Vobornik
out. Anecdotal reports suggest migrations are relatively smooth. YMMV. +1 -- Petr Vobornik ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel

[Freeipa-devel] ipalib as RPC client in Web UI CI tests, forms-based auth in ipalib

2015-01-08 Thread Petr Vobornik
like to use this feature in otptests which should land in 4.1 -> a) is not an option because of its complexity. Therefore, atm, I would like to go with e) or c) Thanks -- Petr Vobornik From 3c1a140b80b87693a6deb76dc7ebeb4ef479c560 Mon Sep 17 00:00:00 2001 From: Petr Vobornik Date: Fri, 12 D

Re: [Freeipa-devel] [PATCH 0080] Expose the disabled User Auth Type

2015-01-06 Thread Petr Vobornik
On 12/18/2014 07:52 PM, Nathaniel McCallum wrote: On Thu, 2014-12-04 at 19:56 +0100, Petr Vobornik wrote: On 12/04/2014 07:25 PM, Nathaniel McCallum wrote: On Wed, 2014-12-03 at 17:18 +0100, Petr Vobornik wrote: On 13.11.2014 18:04, Nathaniel McCallum wrote: Additionally, fix a small bug in

Re: [Freeipa-devel] Modifying ID Range

2015-01-06 Thread Petr Vobornik
D allocation. It has to be done in DNA plugin configuration." warning when modifying base id or a size of a local IPA range. Such warning would be visible in both CLI and Web UI. [1] http://directory.fedoraproject.org/docs/389ds/design/dna-plugin.html [2] http://

Re: [Freeipa-devel] SSH Public Key - Centralized Solution

2015-01-05 Thread Petr Vobornik
anks in advance. --Prashant -- Petr Vobornik ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] [PATCH 0292] idviews: Ignore host or hostgroup options set to None

2014-12-12 Thread Petr Vobornik
On 12/12/2014 04:49 PM, Tomas Babej wrote: Hi, Since passing --hosts= or --hostsgroups= to idview-apply or unapply commands does not make sense, ignore it. https://fedorahosted.org/freeipa/ticket/4806 ACK -- Petr Vobornik ___ Freeipa-devel

Re: [Freeipa-devel] [PATCH 0291] idviews: Complain if host is already assigned the ID View in idview-apply

2014-12-12 Thread Petr Vobornik
On 12/12/2014 04:15 PM, Tomas Babej wrote: Thanks, fixed. Updated patch attached. ACK Pushed to: master: fdd7b79eeafae3891a9aa5bf414f9c65f947e88d ipa-4-1: 12f6969ec9daafe7926a49a6775501d1034694f4 -- Petr Vobornik ___ Freeipa-devel mailing list

Re: [Freeipa-devel] [PATCH 0291] idviews: Complain if host is already assigned the ID View in idview-apply

2014-12-12 Thread Petr Vobornik
/usr/lib64/python2.7/json/encoder.py", line 332, in _iterencode_list for chunk in chunks: File "/usr/lib64/python2.7/json/encoder.py", line 442, in _iterencode o = _default(o) File "/usr/lib64/python2.7/json/encoder.py", line 184, in default raise Typ

Re: [Freeipa-devel] [PATCH] 384 Do not renew the IPA CA cert by serial number in dogtag-ipa-ca-renew-agent

2014-12-09 Thread Petr Vobornik
pa-4-1: 7f1db9303e14fc7b3f505cf63d21544197ea6047 -- Petr Vobornik ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] [PATCH] 382 Fix automatic CA cert renewal endless loop in dogtag-ipa-ca-renew-agent

2014-12-09 Thread Petr Vobornik
pa-4-1: 9bfb16c22043d714b8227567600f94345c40cad6 -- Petr Vobornik ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] [PATCH 0162] Upgrade fix: masking named service should be executed only once

2014-12-09 Thread Petr Vobornik
: b13f764b3c355576692e558299d17e8ea8819834 -- Petr Vobornik ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] [PATCH] 795 webui: increase duration of notification messages

2014-12-09 Thread Petr Vobornik
On 12/09/2014 12:48 PM, Martin Basti wrote: On 05/12/14 16:23, Petr Vobornik wrote: increase duration of notification messages by 66% https://fedorahosted.org/freeipa/ticket/4792 ACK Pushed to: master: e4f014dfa01e8b37c6b196310f7cca18ca4b5400 ipa-4-1

Re: [Freeipa-devel] [PATCH] 790 webui: fix service unprovisioning

2014-12-09 Thread Petr Vobornik
On 12/09/2014 12:48 PM, Martin Basti wrote: On 27/11/14 15:50, Petr Vobornik wrote: Missed part of field refactoring caused that service could not be unprovisioned. https://fedorahosted.org/freeipa/ticket/4770 For regression tests I've opened ticket: https://fedorahosted.org/freeipa/t

[Freeipa-devel] [PATCH] 795 webui: increase duration of notification messages

2014-12-05 Thread Petr Vobornik
increase duration of notification messages by 66% https://fedorahosted.org/freeipa/ticket/4792 -- Petr Vobornik From 275974a7021a606d89789ee146d8f710d3ed93df Mon Sep 17 00:00:00 2001 From: Petr Vobornik Date: Fri, 5 Dec 2014 16:21:19 +0100 Subject: [PATCH] webui: increase duration of

Re: [Freeipa-devel] [PATCH 0289] hosts: Display assigned ID view by default in host-find and show

2014-12-05 Thread Petr Vobornik
On 12/04/2014 04:22 PM, Tomas Babej wrote: Updated patch with fixed WebUI bits. ACK Pushed to: master: d0a781b9c6911f1875df4b0c7da5e6ae030d36de ipa-4-1: b986eb281d038e871cd613bf5a7a21a1456370cc -- Petr Vobornik ___ Freeipa-devel mailing list

[Freeipa-devel] [PATCH] 793-794 Fix schema related replication issues between IPA-3-0 and IPA-4-1

2014-12-05 Thread Petr Vobornik
lapd-sasl-max-buffer-size necessary? With these two patches, replication appears to work fine for me. Tested with F21 FreeIPA 4.1.x-GIT-something and ipa-server-3.0.0-42.el6.x86_64 [1] https://bugzilla.redhat.com/show_bug.cgi?id=1167964 [2] https://fedorahosted.org/freeipa/ticket/4794

Re: [Freeipa-devel] [PATCH 0074] Make token window sizes configurable

2014-12-05 Thread Petr Vobornik
On 12/04/2014 07:15 PM, Nathaniel McCallum wrote: On Thu, 2014-12-04 at 14:56 +0100, Petr Vobornik wrote: On 2.12.2014 20:57, Nathaniel McCallum wrote: Works fine. python part of 0004: ACK, but VERSION needs to be updated before push 0005: ACK Fixed and rebased. Patch numbers have

Re: [Freeipa-devel] [PATCH 0080] Expose the disabled User Auth Type

2014-12-04 Thread Petr Vobornik
On 12/04/2014 07:25 PM, Nathaniel McCallum wrote: On Wed, 2014-12-03 at 17:18 +0100, Petr Vobornik wrote: On 13.11.2014 18:04, Nathaniel McCallum wrote: Additionally, fix a small bug in ipa-kdb so that the disabled User Auth Type is properly handled. https://fedorahosted.org/freeipa/ticket

Re: [Freeipa-devel] [PATCH 0074] Make token window sizes configurable

2014-12-04 Thread Petr Vobornik
o extend each token, regardless of type, by 'ipatokenOTPConfig' object class? I.e. to have config attributes for both types? Or do you plan to have special object classes for each token type as we now have for tokens? -- Petr Vobornik ___ F

Re: [Freeipa-devel] [PATCH 0080] Expose the disabled User Auth Type

2014-12-03 Thread Petr Vobornik
o fbar's config, I could also login with otp. -- Petr Vobornik ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] [PATCH 0074] Make token window sizes configurable

2014-12-02 Thread Petr Vobornik
McCallum wrote: On Mon, 2014-11-10 at 08:28 +0100, Martin Kosek wrote: On 11/07/2014 04:44 PM, Petr Vobornik wrote: On 7.11.2014 08:58, Martin Kosek wrote: On 11/04/2014 05:17 PM, Nathaniel McCallum wrote: On Wed, 2014-10-29 at 09:34 -0400, Nathaniel McCallum wrote: On Wed, 2014-10-29 at 12

Re: [Freeipa-devel] [PATCH 0289] hosts: Display assigned ID view by default in host-find and show

2014-12-02 Thread Petr Vobornik
rq,dc=redhat,dc=com" ], to: "ipaassignedidview": "foo", 2. the value is not normalized in host-mod command -- Petr Vobornik ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] [PATCH] 792 add --hosts option to allow/retrieve keytab methods

2014-12-01 Thread Petr Vobornik
On 12/01/2014 02:33 PM, Jan Cholasta wrote: Hi, Dne 1.12.2014 v 14:17 Petr Vobornik napsal(a): `--hosts` option added to: * service-allow-create-keytab * service-allow-retrieve-keytab * service-disallow-create-keytab * service-disallow-retrieve-keytab * host-allow-create-keytab * host-allow

[Freeipa-devel] [PATCH] 792 add --hosts option to allow/retrieve keytab methods

2014-12-01 Thread Petr Vobornik
ails pages because the amount of space on the page required for the keytab management is much bigger than its importance compared to other fields. -- Petr Vobornik From 5a7b77d47abd5b0ca5b97b667d1478c5e8f8dc3d Mon Sep 17 00:00:00 2001 From: Petr Vobornik Date: Mon, 1 Dec 2014 10:15:21 +01

[Freeipa-devel] Announcing FreeIPA 4.1.2

2014-11-27 Thread Petr Vobornik
le DNS forwards for various cli tools -- Petr Vobornik ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] [PATCH 0287] Re-initialize NSS database after otptoken plugin tests

2014-11-27 Thread Petr Vobornik
ed to ipa-4-1: 7215f7e2215b485daac7dc5d54478752b682181b -- Petr Vobornik ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel

[Freeipa-devel] [PATCH] 791 fix indentation in ipa-restore page

2014-11-27 Thread Petr Vobornik
-- Petr Vobornik From 67c0d657975dad37cd8393903b7f4b8006696a06 Mon Sep 17 00:00:00 2001 From: Petr Vobornik Date: Thu, 27 Nov 2014 17:08:12 +0100 Subject: [PATCH] fix indentation in ipa-restore page --- install/tools/man/ipa-restore.1 | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions

[Freeipa-devel] [PATCH] 790 webui: fix service unprovisioning

2014-11-27 Thread Petr Vobornik
Missed part of field refactoring caused that service could not be unprovisioned. https://fedorahosted.org/freeipa/ticket/4770 For regression tests I've opened ticket: https://fedorahosted.org/freeipa/ticket/4772 -- Petr Vobornik From 0a1ef3e4d4ec6d758a736774d34362d203e5dfba Mon Sep 17

Re: [Freeipa-devel] [PATCH 0037] ipa-managed-entries prompts for password with -p option and incorrect passowrd

2014-11-26 Thread Petr Vobornik
On 11/26/2014 02:17 PM, Martin Basti wrote: On 24/11/14 04:43, Gabe Alford wrote: Hello, I have a fix for https://fedorahosted.org/freeipa/ticket/4089 thanks, Gabe Thank you! ACK Pushed to master: 45dbd12d8886ca2025bcab5b10ec5e004af3d9ab -- Petr Vobornik

Re: [Freeipa-devel] [PATCH] 0033 Use singular in help metavars + update man pages.

2014-11-26 Thread Petr Vobornik
On 11/26/2014 01:04 PM, Martin Basti wrote: On 26/11/14 12:37, David Kupka wrote: Fixed. Thanks! ACK Pushed to ipa-4-1: 2f8c4e7b165609706a4af9f680579c0e47edaeca Pushed to master: 3a6d714bb229f8dd68ae219d94283f05cf57a6d7 -- Petr Vobornik

[Freeipa-devel] Release notes of FreeIPA 4.1.2

2014-11-26 Thread Petr Vobornik
Hi all, FreeIPA 4.1.2 release was created yesterday. The only missing step is sending an announce mail. Here's release notes draft: - http://www.freeipa.org/page/Releases/4.1.2 Feel free to amend. I'll wait 2 hours and then send it. -- Pet

Re: [Freeipa-devel] [PATCH] 0032 Fix error message for nonexistent members and add tests.

2014-11-24 Thread Petr Vobornik
83 webui: normalize idview tab labels"? -- Petr Vobornik ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] [PATCH] 376 Stop tracking certificates before restoring them in ipa-restore

2014-11-21 Thread Petr Vobornik
On 20.11.2014 15:21, Jan Cholasta wrote: Hi, the attached patch fixes <https://fedorahosted.org/freeipa/ticket/4727>. Honza ACK Pushed to master: aa9ecb253a60d9d15cd41c5c38695fe64058669a Pushed to ipa-4-1: 66db7b910ff0dcc6f2bbce01c3c2b1ce6442 -- Petr Vo

Re: [Freeipa-devel] Releasing FreeIPA 4.1.2

2014-11-21 Thread Petr Vobornik
able updates consumed the fixed build for the Fedora 21 release. Fedora 21 build and update with fixes for blockers created: https://admin.fedoraproject.org/updates/freeipa-4.1.1-2.fc21 -- Petr Vobornik ___ Freeipa-devel mailing list Freeipa-d

[Freeipa-devel] [PATCH] 789 restore: clear httpd ccache after restore

2014-11-20 Thread Petr Vobornik
eeipa/ticket/4726 -- Petr Vobornik From 4483d0edd36d56245dfd379dd4360b9af5d3bc86 Mon Sep 17 00:00:00 2001 From: Petr Vobornik Date: Thu, 20 Nov 2014 15:11:02 +0100 Subject: [PATCH] restore: clear httpd ccache after restore so that httpd ccache won't contain old credentials which would make ip

Re: [Freeipa-devel] [PATCH 0166] Workaround: warning if CA did not start at end of upgrade instead of raising error

2014-11-20 Thread Petr Vobornik
. Pushed to: master: 43285b1fc3da7ab0c0fe411295e53a45f9a42106 ipa-4-1: 3f3f49ea93f8ca0c2cdd569a78c952492e7b520a -- Petr Vobornik ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel

[Freeipa-devel] [PATCH] 788 webui: fix potential XSS vulnerabilities

2014-11-19 Thread Petr Vobornik
Escape user defined text to prevent XSS attacks. Extra precaution was taken to escape also parts which are unlikely to contain user-defined text. https://fedorahosted.org/freeipa/ticket/4742 resolves CVE-2014-7850 f21 blocker candidate, requires priority review. -- Petr Vobornik From

Re: [Freeipa-devel] [PATCH] 0673 Do not restore SELinux settings that were not backed up

2014-11-19 Thread Petr Vobornik
On 18.11.2014 12:17, Petr Viktorin wrote: This fixes https://fedorahosted.org/freeipa/ticket/4678 ACK Pushed to: master: a14ce85357419f41f0994625d29d3f1af7a53d4c ipa-4-1: 1d7407c06caa06119635910d34213167d97125a0 -- Petr Vobornik ___ Freeipa-devel

Re: [Freeipa-devel] [PATCH 0164] Fix warning message should not contain CLI commands due WebUI

2014-11-19 Thread Petr Vobornik
On 19.11.2014 13:47, Martin Basti wrote: On 19/11/14 12:45, Petr Vobornik wrote: On 13.11.2014 16:49, Martin Basti wrote: Ticket: https://fedorahosted.org/freeipa/ticket/4647 Patch attached. The change looses information about the zone apex record. User also might not know what is the

Re: [Freeipa-devel] [PATCH 0078] Enable QR code display by default in otptoken-add

2014-11-19 Thread Petr Vobornik
On 18.11.2014 18:27, Petr Vobornik wrote: On 18.11.2014 17:27, Nathaniel McCallum wrote: This patch still needs to land in 4.1.2, so is it okay as it is? I don't think the label is necessary but it doesn't hurt either, at least it's clear, so ACK. Pu

Re: [Freeipa-devel] [PATCH] 373 Update Requires on pki-ca to 10.2.1-0.1

2014-11-19 Thread Petr Vobornik
On 19.11.2014 13:59, Jan Cholasta wrote: Dne 19.11.2014 v 13:55 Petr Vobornik napsal(a): On 18.11.2014 23:29, Nathaniel McCallum wrote: On Tue, 2014-11-18 at 19:56 +0100, Jan Cholasta wrote: Hi, the attached patch fixes <https://fedorahosted.org/freeipa/ticket/4645>. ACK Shouldn

<    3   4   5   6   7   8   9   10   11   12   >