Re: [Freeipa-devel] [PATCH] 0052..0054 Configure lightweight CA key replication

2016-06-09 Thread Jan Cholasta
On 9.6.2016 08:31, Fraser Tweedale wrote: On Thu, Jun 09, 2016 at 07:49:51AM +0200, Jan Cholasta wrote: On 9.6.2016 06:07, Fraser Tweedale wrote: Updated patches 0053-6 and 0054-6 attached. Comments inline. Thanks, Fraser On Wed, Jun 08, 2016 at 10:31:07AM +0200, Jan Cholasta wrote: Patch

Re: [Freeipa-devel] [PATCH] 0052..0054 Configure lightweight CA key replication

2016-06-09 Thread Fraser Tweedale
On Thu, Jun 09, 2016 at 07:49:51AM +0200, Jan Cholasta wrote: > On 9.6.2016 06:07, Fraser Tweedale wrote: > > Updated patches 0053-6 and 0054-6 attached. Comments inline. > > > > Thanks, > > Fraser > > > > On Wed, Jun 08, 2016 at 10:31:07AM +0200, Jan Cholasta wrote: > > > Patch 0052: > > > >

Re: [Freeipa-devel] [PATCH] 0052..0054 Configure lightweight CA key replication

2016-06-08 Thread Jan Cholasta
On 9.6.2016 06:07, Fraser Tweedale wrote: Updated patches 0053-6 and 0054-6 attached. Comments inline. Thanks, Fraser On Wed, Jun 08, 2016 at 10:31:07AM +0200, Jan Cholasta wrote: Patch 0052: The target of the "Dogtag service principals can search Custodia keys" ACI matches keys in the

Re: [Freeipa-devel] [PATCH] 0052..0054 Configure lightweight CA key replication

2016-06-08 Thread Fraser Tweedale
Updated patches 0053-6 and 0054-6 attached. Comments inline. Thanks, Fraser On Wed, Jun 08, 2016 at 10:31:07AM +0200, Jan Cholasta wrote: > Patch 0052: > > The target of the "Dogtag service principals can search Custodia keys" ACI > matches keys in the top-level Custodia container, but not in

Re: [Freeipa-devel] [PATCH] 0052..0054 Configure lightweight CA key replication

2016-06-08 Thread Jan Cholasta
On 6.6.2016 15:32, Fraser Tweedale wrote: On Wed, Jun 01, 2016 at 02:49:29PM +1000, Fraser Tweedale wrote: Updated patches attached; comments inline. On Thu, May 05, 2016 at 04:52:29PM +1000, Fraser Tweedale wrote: I would rather add a new ACI than have one super-ACI for everything. That way

Re: [Freeipa-devel] [PATCH] 0052..0054 Configure lightweight CA key replication

2016-06-06 Thread Fraser Tweedale
On Wed, Jun 01, 2016 at 02:49:29PM +1000, Fraser Tweedale wrote: > Updated patches attached; comments inline. > > On Thu, May 05, 2016 at 04:52:29PM +1000, Fraser Tweedale wrote: > > > I would rather add a new ACI than have one super-ACI for everything. That > > > way you don't have to invent any

Re: [Freeipa-devel] [PATCH] 0052..0054 Configure lightweight CA key replication

2016-05-31 Thread Fraser Tweedale
Updated patches attached; comments inline. On Thu, May 05, 2016 at 04:52:29PM +1000, Fraser Tweedale wrote: > > I would rather add a new ACI than have one super-ACI for everything. That > > way you don't have to invent any complicated naming schemes *and* it will be > > more apparent what the ACI