Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 10/27/2015 04:23 PM, Martin Babinsky wrote: On 10/22/2015 01:06 PM, Petr Vobornik wrote: On 10/16/2015 06:41 PM, Endi Sukma Dewata wrote: On 10/15/2015 9:54 AM, Simo Sorce wrote: 3) ipa-ca-install fails with: Traceback (most recent call last): File "/usr/lib/python2.7/site-packages/ipas

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 10/22/2015 01:06 PM, Petr Vobornik wrote: On 10/16/2015 06:41 PM, Endi Sukma Dewata wrote: On 10/15/2015 9:54 AM, Simo Sorce wrote: 3) ipa-ca-install fails with: Traceback (most recent call last): File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 445, in start_cr

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 22/10/15 11:54, Martin Basti wrote: On 22.10.2015 17:51, Martin Babinsky wrote: On 10/15/2015 08:14 PM, Simo Sorce wrote: On 15/10/15 11:39, Martin Basti wrote: Without this patch the ipa-ca-install is broken in current master. Unexpected error - see /var/log/ipareplica-ca-install.log for

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 22.10.2015 17:51, Martin Babinsky wrote: On 10/15/2015 08:14 PM, Simo Sorce wrote: On 15/10/15 11:39, Martin Basti wrote: Without this patch the ipa-ca-install is broken in current master. Unexpected error - see /var/log/ipareplica-ca-install.log for details: AttributeError: Values instanc

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 10/15/2015 08:14 PM, Simo Sorce wrote: On 15/10/15 11:39, Martin Basti wrote: Without this patch the ipa-ca-install is broken in current master. Unexpected error - see /var/log/ipareplica-ca-install.log for details: AttributeError: Values instance has no attribute 'promote' Should be fixed

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 10/22/2015 02:01 PM, Petr Vobornik wrote: On 10/22/2015 01:30 PM, Martin Babinsky wrote: On 10/21/2015 09:27 PM, Simo Sorce wrote: snip Thanks, ACK for patch 551-6. I will continue the review of patch 552 when we'll have a dogtag build with fix for https://fedorahosted.org/pki/ticket/

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 10/22/2015 01:30 PM, Martin Babinsky wrote: On 10/21/2015 09:27 PM, Simo Sorce wrote: snip Thanks, ACK for patch 551-6. I will continue the review of patch 552 when we'll have a dogtag build with fix for https://fedorahosted.org/pki/ticket/1580 in copr repo. Martin, could you try it

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 22.10.2015 13:30, Martin Babinsky wrote: On 10/21/2015 09:27 PM, Simo Sorce wrote: On 21/10/15 15:24, Simo Sorce wrote: On 21/10/15 11:46, Martin Babinsky wrote: On 10/20/2015 07:24 PM, Simo Sorce wrote: On 20/10/15 06:32, Martin Babinsky wrote: On 10/15/2015 08:14 PM, Simo Sorce wrote:

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 10/21/2015 09:27 PM, Simo Sorce wrote: On 21/10/15 15:24, Simo Sorce wrote: On 21/10/15 11:46, Martin Babinsky wrote: On 10/20/2015 07:24 PM, Simo Sorce wrote: On 20/10/15 06:32, Martin Babinsky wrote: On 10/15/2015 08:14 PM, Simo Sorce wrote: On 15/10/15 11:39, Martin Basti wrote: Witho

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 10/16/2015 06:41 PM, Endi Sukma Dewata wrote: On 10/15/2015 9:54 AM, Simo Sorce wrote: 3) ipa-ca-install fails with: Traceback (most recent call last): File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 445, in start_creation run_step(full_msg, method) File

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 21/10/15 15:24, Simo Sorce wrote: On 21/10/15 11:46, Martin Babinsky wrote: On 10/20/2015 07:24 PM, Simo Sorce wrote: On 20/10/15 06:32, Martin Babinsky wrote: On 10/15/2015 08:14 PM, Simo Sorce wrote: On 15/10/15 11:39, Martin Basti wrote: Without this patch the ipa-ca-install is broken

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 21/10/15 11:46, Martin Babinsky wrote: On 10/20/2015 07:24 PM, Simo Sorce wrote: On 20/10/15 06:32, Martin Babinsky wrote: On 10/15/2015 08:14 PM, Simo Sorce wrote: On 15/10/15 11:39, Martin Basti wrote: Without this patch the ipa-ca-install is broken in current master. Unexpected error -

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 10/20/2015 07:24 PM, Simo Sorce wrote: On 20/10/15 06:32, Martin Babinsky wrote: On 10/15/2015 08:14 PM, Simo Sorce wrote: On 15/10/15 11:39, Martin Basti wrote: Without this patch the ipa-ca-install is broken in current master. Unexpected error - see /var/log/ipareplica-ca-install.log for

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 20/10/15 06:32, Martin Babinsky wrote: On 10/15/2015 08:14 PM, Simo Sorce wrote: On 15/10/15 11:39, Martin Basti wrote: Without this patch the ipa-ca-install is broken in current master. Unexpected error - see /var/log/ipareplica-ca-install.log for details: AttributeError: Values instance ha

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 20/10/15 06:32, Martin Babinsky wrote: On 10/15/2015 08:14 PM, Simo Sorce wrote: On 15/10/15 11:39, Martin Basti wrote: Without this patch the ipa-ca-install is broken in current master. Unexpected error - see /var/log/ipareplica-ca-install.log for details: AttributeError: Values instance ha

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 10/15/2015 08:14 PM, Simo Sorce wrote: On 15/10/15 11:39, Martin Basti wrote: Without this patch the ipa-ca-install is broken in current master. Unexpected error - see /var/log/ipareplica-ca-install.log for details: AttributeError: Values instance has no attribute 'promote' Should be fixed

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 10/15/2015 9:54 AM, Simo Sorce wrote: 3) ipa-ca-install fails with: Traceback (most recent call last): File "/usr/lib/python2.7/site-packages/ipaserver/install/service.py", line 445, in start_creation run_step(full_msg, method) File "/usr/lib/python2.7/site-packages/ipaserver/insta

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 15/10/15 11:39, Martin Basti wrote: Without this patch the ipa-ca-install is broken in current master. Unexpected error - see /var/log/ipareplica-ca-install.log for details: AttributeError: Values instance has no attribute 'promote' Should be fixed with the attached patches. -- Simo Sorce *

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 15.10.2015 14:29, Jan Cholasta wrote: On 15.10.2015 12:00, Petr Vobornik wrote: On 10/15/2015 10:45 AM, Jan Cholasta wrote: On 23.9.2015 19:47, Simo Sorce wrote: On Wed, 2015-09-23 at 08:35 +0200, Jan Cholasta wrote: What I mean is that installing a replica using an already existing repl

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 15.10.2015 14:29, Jan Cholasta wrote: On 15.10.2015 12:00, Petr Vobornik wrote: On 10/15/2015 10:45 AM, Jan Cholasta wrote: On 23.9.2015 19:47, Simo Sorce wrote: On Wed, 2015-09-23 at 08:35 +0200, Jan Cholasta wrote: What I mean is that installing a replica using an already existing repl

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

Commenting only on the 2 remaining patches that need to be committed, inline. On 15/10/15 04:45, Jan Cholasta wrote: On 23.9.2015 19:47, Simo Sorce wrote: "Allow ipa-ca-install to use the new promotion code": 1) The --replica option was not removed: Will do, thanks for spotting. On 22.9

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 15.10.2015 12:00, Petr Vobornik wrote: On 10/15/2015 10:45 AM, Jan Cholasta wrote: On 23.9.2015 19:47, Simo Sorce wrote: On Wed, 2015-09-23 at 08:35 +0200, Jan Cholasta wrote: What I mean is that installing a replica using an already existing replica file should be prevented at level 1 as w

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 10/15/2015 10:45 AM, Jan Cholasta wrote: On 23.9.2015 19:47, Simo Sorce wrote: On Wed, 2015-09-23 at 08:35 +0200, Jan Cholasta wrote: What I mean is that installing a replica using an already existing replica file should be prevented at level 1 as well: root@ipa1# ipa-server-install --domai

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 23.9.2015 19:47, Simo Sorce wrote: On Wed, 2015-09-23 at 08:35 +0200, Jan Cholasta wrote: What I mean is that installing a replica using an already existing replica file should be prevented at level 1 as well: root@ipa1# ipa-server-install --domain-level=0 root@ipa1# ipa-replica-prepare ipa2

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 13/10/15 03:40, Jan Cholasta wrote: On 1.10.2015 15:22, Simo Sorce wrote: On 01/10/15 07:42, Jan Cholasta wrote: Hi, I have just imported python-jwcrypto, custodia and pki-core-10.2.7 into mkosek/freeipa-master as well, to (hopefully) make things easier. Simo, custodia failed to build F22,

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 1.10.2015 15:22, Simo Sorce wrote: On 01/10/15 07:42, Jan Cholasta wrote: Hi, I have just imported python-jwcrypto, custodia and pki-core-10.2.7 into mkosek/freeipa-master as well, to (hopefully) make things easier. Simo, custodia failed to build F22, any idea why? See

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 10/5/2015 9:33 AM, Endi Sukma Dewata wrote: On 10/5/2015 8:47 AM, Simo Sorce wrote: 2. The second attempt after re-enrolling client resulted in the error of CA installation: This is due to the known bug with authentication in Dogtag. Endy fixed it upstream. Endy, do you know when the bug w

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On Tue, Oct 06, 2015 at 12:26:14PM -0400, Simo Sorce wrote: > > Was custodia running ? > Can you check its log file ? /etc/ipa/custodia/custodia.conf suggests auditlog = /var/log/ipa-custodia.audit.log but that file does not exist at all. So either it was not running, or it failed to cr

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 06/10/15 11:06, Jan Pazdziora wrote: On Mon, Oct 05, 2015 at 09:47:14AM -0400, Simo Sorce wrote: On 05/10/15 09:42, Oleg Fayans wrote: 1. At one point ipa-replica-install on a configured client has thrown the following error: Configuring ipa-custodia [1/5]: Generating ipa-custodia config

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On Mon, Oct 05, 2015 at 09:47:14AM -0400, Simo Sorce wrote: > On 05/10/15 09:42, Oleg Fayans wrote: > >1. At one point ipa-replica-install on a configured client has thrown > >the following error: > > > >Configuring ipa-custodia > > [1/5]: Generating ipa-custodia config file > > [2/5]: Generati

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 10/5/2015 8:47 AM, Simo Sorce wrote: 2. The second attempt after re-enrolling client resulted in the error of CA installation: Starting replication, please wait until this has completed. Update in progress, 7 seconds elapsed Update succeeded [4/24]: creating installation admin user [5/

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

Hi Jan, Simo On 10/05/2015 02:15 PM, Jan Pazdziora wrote: On Thu, Oct 01, 2015 at 04:33:28PM +0200, Oleg Fayans wrote: 1. Having PTR sync enabled in global DNS configuration and installing client with --enable-dns-updates option, ipa master still does not create a PTR record for the client mac

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 05/10/15 09:42, Oleg Fayans wrote: Hi Jan, Simo On 10/05/2015 02:15 PM, Jan Pazdziora wrote: On Thu, Oct 01, 2015 at 04:33:28PM +0200, Oleg Fayans wrote: 1. Having PTR sync enabled in global DNS configuration and installing client with --enable-dns-updates option, ipa master still does not

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On Thu, Oct 01, 2015 at 04:33:28PM +0200, Oleg Fayans wrote: > > 1. > Having PTR sync enabled in global DNS configuration and installing client > with --enable-dns-updates option, ipa master still does not create a PTR > record for the client machine. As a result, ipa-repolica-install throws the >

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 01/10/15 10:33, Oleg Fayans wrote: First glance on the packages built from today's tree reveal the following problems: 1. Having PTR sync enabled in global DNS configuration and installing client with --enable-dns-updates option, ipa master still does not create a PTR record for the client ma

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

First glance on the packages built from today's tree reveal the following problems: 1. Having PTR sync enabled in global DNS configuration and installing client with --enable-dns-updates option, ipa master still does not create a PTR record for the client machine. As a result, ipa-repolica-in

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 01/10/15 07:42, Jan Cholasta wrote: Hi, I have just imported python-jwcrypto, custodia and pki-core-10.2.7 into mkosek/freeipa-master as well, to (hopefully) make things easier. Simo, custodia failed to build F22, any idea why? See

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

Hi, I have just imported python-jwcrypto, custodia and pki-core-10.2.7 into mkosek/freeipa-master as well, to (hopefully) make things easier. Simo, custodia failed to build F22, any idea why? See

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

Hi Ludwig, Thank you! vakwetu/dogtag_10.2.7_test_builds was the bit that was missing On 10/01/2015 12:29 PM, Ludwig Krispenz wrote: On 10/01/2015 12:06 PM, Oleg Fayans wrote: Hi Simo, I was able to build the packages based on your git repo. However, my attempt to install the resulting bits f

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 10/01/2015 12:06 PM, Oleg Fayans wrote: Hi Simo, I was able to build the packages based on your git repo. However, my attempt to install the resulting bits failed due to lack of dependencies: pki-ca >= 10.2.7 is needed by freeipa-server-4.2.90.201510010815GITb726fa9-0.fc22.x86_64 pki-kra

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

Hi Simo, I was able to build the packages based on your git repo. However, my attempt to install the resulting bits failed due to lack of dependencies: pki-ca >= 10.2.7 is needed by freeipa-server-4.2.90.201510010815GITb726fa9-0.fc22.x86_64 pki-kra >= 10.2.7 is needed by freeipa-server-4.2.9

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 30.9.2015 15:15, Simo Sorce wrote: On 30/09/15 08:32, Jan Cholasta wrote: On 24.9.2015 15:10, Simo Sorce wrote: On 24/09/15 04:43, Martin Basti wrote: On 09/24/2015 02:25 AM, Martin Basti wrote: On 09/22/2015 10:45 AM, Jan Cholasta wrote: Hi, On 9.9.2015 20:25, Simo Sorce wrote: On

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On Tue, Sep 29, 2015 at 03:31:23PM -0400, Simo Sorce wrote: > On 29/09/15 14:56, Oleg Fayans wrote: > > > > > >On 09/29/2015 06:47 PM, Simo Sorce wrote: > >>On 29/09/15 11:50, Oleg Fayans wrote: > >>>Hi Simo, > >>> > >>>It seems to have resolved the initial issue, but now the build fails due > >>>t

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 30/09/15 08:32, Jan Cholasta wrote: On 24.9.2015 15:10, Simo Sorce wrote: On 24/09/15 04:43, Martin Basti wrote: On 09/24/2015 02:25 AM, Martin Basti wrote: On 09/22/2015 10:45 AM, Jan Cholasta wrote: Hi, On 9.9.2015 20:25, Simo Sorce wrote: On Wed, 2015-08-26 at 17:27 -0400, Simo So

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 24.9.2015 15:10, Simo Sorce wrote: On 24/09/15 04:43, Martin Basti wrote: On 09/24/2015 02:25 AM, Martin Basti wrote: On 09/22/2015 10:45 AM, Jan Cholasta wrote: Hi, On 9.9.2015 20:25, Simo Sorce wrote: On Wed, 2015-08-26 at 17:27 -0400, Simo Sorce wrote: This patchset implements htt

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 29/09/15 14:56, Oleg Fayans wrote: On 09/29/2015 06:47 PM, Simo Sorce wrote: On 29/09/15 11:50, Oleg Fayans wrote: Hi Simo, It seems to have resolved the initial issue, but now the build fails due to lint complaints: https://paste.fedoraproject.org/272714/54174014/ These happens if you

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 09/29/2015 06:47 PM, Simo Sorce wrote: On 29/09/15 11:50, Oleg Fayans wrote: Hi Simo, It seems to have resolved the initial issue, but now the build fails due to lint complaints: https://paste.fedoraproject.org/272714/54174014/ These happens if you do not have custodia installed. I guess

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 29/09/15 11:50, Oleg Fayans wrote: Hi Simo, It seems to have resolved the initial issue, but now the build fails due to lint complaints: https://paste.fedoraproject.org/272714/54174014/ These happens if you do not have custodia installed. I guess I should make it also a BuildRequires ? Sim

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

Hi Simo, It seems to have resolved the initial issue, but now the build fails due to lint complaints: https://paste.fedoraproject.org/272714/54174014/ On 09/29/2015 04:54 PM, Simo Sorce wrote: On 29/09/15 10:39, Oleg Fayans wrote: Hi Simo, Is this [1] the correct link to the repo containing

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 29/09/15 10:39, Oleg Fayans wrote: Hi Simo, Is this [1] the correct link to the repo containing all latest replica-promotion patches? I tried to build the packages from this code and the build failed due to libpdb not having make_pdb_method [2] I was able to successfully build from the clean

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

Hi Simo, Is this [1] the correct link to the repo containing all latest replica-promotion patches? I tried to build the packages from this code and the build failed due to libpdb not having make_pdb_method [2] I was able to successfully build from the clean upstream tree on the same machine.

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 29/09/15 09:28, Jan Pazdziora wrote: On Thu, Sep 24, 2015 at 09:10:30AM -0400, Simo Sorce wrote: I think the problem is that the patch was pushed prematurely. The option should become unused once the other patches in this patchset are applied, that is why that patch was not on top of the lis

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On Thu, Sep 24, 2015 at 09:10:30AM -0400, Simo Sorce wrote: > > I think the problem is that the patch was pushed prematurely. > The option should become unused once the other patches in this patchset are > applied, that is why that patch was not on top of the list but rather down > close to the bo

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 24/09/15 04:43, Martin Basti wrote: On 09/24/2015 02:25 AM, Martin Basti wrote: On 09/22/2015 10:45 AM, Jan Cholasta wrote: Hi, On 9.9.2015 20:25, Simo Sorce wrote: On Wed, 2015-08-26 at 17:27 -0400, Simo Sorce wrote: This patchset implements https://fedorahosted.org/freeipa/ticket/28

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 09/24/2015 02:25 AM, Martin Basti wrote: On 09/22/2015 10:45 AM, Jan Cholasta wrote: Hi, On 9.9.2015 20:25, Simo Sorce wrote: On Wed, 2015-08-26 at 17:27 -0400, Simo Sorce wrote: This patchset implements https://fedorahosted.org/freeipa/ticket/2888 and introduces a number of required

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 09/22/2015 10:45 AM, Jan Cholasta wrote: Hi, On 9.9.2015 20:25, Simo Sorce wrote: On Wed, 2015-08-26 at 17:27 -0400, Simo Sorce wrote: This patchset implements https://fedorahosted.org/freeipa/ticket/2888 and introduces a number of required changes and dependencies to achieve this goal

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On Wed, 2015-09-23 at 08:35 +0200, Jan Cholasta wrote: > What I mean is that installing a replica using an already existing > replica file should be prevented at level 1 as well: > > root@ipa1# ipa-server-install --domain-level=0 > root@ipa1# ipa-replica-prepare ipa2.example.com > root@ipa1# ipa

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 23.9.2015 02:47, Simo Sorce wrote: On Tue, 2015-09-22 at 10:57 -0400, Simo Sorce wrote: On Tue, 2015-09-22 at 10:45 +0200, Jan Cholasta wrote: Hi, On 9.9.2015 20:25, Simo Sorce wrote: On Wed, 2015-08-26 at 17:27 -0400, Simo Sorce wrote: This patchset implements https://fedorahosted.org/fr

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 22.9.2015 17:23, Simo Sorce wrote: On Tue, 2015-09-22 at 10:45 +0200, Jan Cholasta wrote: 4) pylint fails with: daemons/ipa-custodia/ipakeys/kem.py:156: [E1002(super-on-old-class), IPAKEMKeys.__init__] Use of super on an old style class) daemons/ipa-custodia/ipakeys/kem.py:178: [E1101(no-mem

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On Tue, 2015-09-22 at 10:57 -0400, Simo Sorce wrote: > On Tue, 2015-09-22 at 10:45 +0200, Jan Cholasta wrote: > > Hi, > > > > On 9.9.2015 20:25, Simo Sorce wrote: > > > On Wed, 2015-08-26 at 17:27 -0400, Simo Sorce wrote: > > >> This patchset implements https://fedorahosted.org/freeipa/ticket/2888

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On Tue, 2015-09-22 at 10:45 +0200, Jan Cholasta wrote: > 4) pylint fails with: > > daemons/ipa-custodia/ipakeys/kem.py:156: [E1002(super-on-old-class), > IPAKEMKeys.__init__] Use of super on an old style class) > daemons/ipa-custodia/ipakeys/kem.py:178: [E1101(no-member), > IPAKEMKeys.generate_s

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On Tue, 2015-09-22 at 10:45 +0200, Jan Cholasta wrote: > Hi, > > On 9.9.2015 20:25, Simo Sorce wrote: > > On Wed, 2015-08-26 at 17:27 -0400, Simo Sorce wrote: > >> This patchset implements https://fedorahosted.org/freeipa/ticket/2888 > >> and introduces a number of required changes and dependenci

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

Hi, On 9.9.2015 20:25, Simo Sorce wrote: On Wed, 2015-08-26 at 17:27 -0400, Simo Sorce wrote: This patchset implements https://fedorahosted.org/freeipa/ticket/2888 and introduces a number of required changes and dependencies to achieve this goal. This work requires the custodia project to secu

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On Wed, 2015-08-26 at 17:27 -0400, Simo Sorce wrote: > This patchset implements https://fedorahosted.org/freeipa/ticket/2888 > and introduces a number of required changes and dependencies to achieve > this goal. > This work requires the custodia project to securely transfer keys > between ipa serv

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On Thu, 2015-09-03 at 15:21 +0200, Martin Basti wrote: > > On 09/03/2015 02:57 PM, Simo Sorce wrote: > > On Thu, 2015-09-03 at 10:57 +0200, Martin Basti wrote: > >> On 09/02/2015 10:37 PM, Simo Sorce wrote: > >>> On Wed, 2015-09-02 at 15:22 -0400, Simo Sorce wrote: > On Mon, 2015-08-31 at 14:

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 09/03/2015 02:57 PM, Simo Sorce wrote: On Thu, 2015-09-03 at 10:57 +0200, Martin Basti wrote: On 09/02/2015 10:37 PM, Simo Sorce wrote: On Wed, 2015-09-02 at 15:22 -0400, Simo Sorce wrote: On Mon, 2015-08-31 at 14:45 +0200, Tomas Babej wrote: On 08/26/2015 11:27 PM, Simo Sorce wrote: Th

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On Thu, 2015-09-03 at 10:57 +0200, Martin Basti wrote: > > On 09/02/2015 10:37 PM, Simo Sorce wrote: > > On Wed, 2015-09-02 at 15:22 -0400, Simo Sorce wrote: > >> On Mon, 2015-08-31 at 14:45 +0200, Tomas Babej wrote: > >>> On 08/26/2015 11:27 PM, Simo Sorce wrote: > This patchset implements h

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

I've encountered this today too. Filed a ticket about it: https://fedorahosted.org/freeipa/ticket/5283 On 09/03/2015 10:57 AM, Martin Basti wrote: On 09/02/2015 10:37 PM, Simo Sorce wrote: On Wed, 2015-09-02 at 15:22 -0400, Simo Sorce wrote: On Mon, 2015-08-31 at 14:45 +0200, Tomas Babej wr

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 09/02/2015 10:37 PM, Simo Sorce wrote: On Wed, 2015-09-02 at 15:22 -0400, Simo Sorce wrote: On Mon, 2015-08-31 at 14:45 +0200, Tomas Babej wrote: On 08/26/2015 11:27 PM, Simo Sorce wrote: This patchset implements https://fedorahosted.org/freeipa/ticket/2888 and introduces a number of requ

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On Wed, 2015-09-02 at 15:22 -0400, Simo Sorce wrote: > On Mon, 2015-08-31 at 14:45 +0200, Tomas Babej wrote: > > > > On 08/26/2015 11:27 PM, Simo Sorce wrote: > > > This patchset implements https://fedorahosted.org/freeipa/ticket/2888 > > > and introduces a number of required changes and dependen

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On Mon, 2015-08-31 at 14:45 +0200, Tomas Babej wrote: > > On 08/26/2015 11:27 PM, Simo Sorce wrote: > > This patchset implements https://fedorahosted.org/freeipa/ticket/2888 > > and introduces a number of required changes and dependencies to achieve > > this goal. > > This work requires the custo

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 08/31/2015 02:56 PM, Simo Sorce wrote: > On Mon, 2015-08-31 at 14:45 +0200, Tomas Babej wrote: >> >> On 08/26/2015 11:27 PM, Simo Sorce wrote: >>> This patchset implements https://fedorahosted.org/freeipa/ticket/2888 >>> and introduces a number of required changes and dependencies to achieve

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On Mon, 2015-08-31 at 14:45 +0200, Tomas Babej wrote: > > On 08/26/2015 11:27 PM, Simo Sorce wrote: > > This patchset implements https://fedorahosted.org/freeipa/ticket/2888 > > and introduces a number of required changes and dependencies to achieve > > this goal. > > This work requires the custo

Re: [Freeipa-devel] [PATCHSET] Replica promotion patches

On 08/26/2015 11:27 PM, Simo Sorce wrote: > This patchset implements https://fedorahosted.org/freeipa/ticket/2888 > and introduces a number of required changes and dependencies to achieve > this goal. > This work requires the custodia project to securely transfer keys > between ipa servers. > >