freeipa.git/daemons/dnssec, branch kdc-fixes FreeIPA patches Modernize number literals 2015-07-31T13:22:19+00:00 Petr Viktorin pviktori@redhat.com 2015-07-15T14:38:06+00:00 b8c46f2a32d0d8c2dc6ef0867f85f63cf076a004 Use Python-3 compatible syntax, without breaking compatibility with py 2.7 - Octals literals start with 0o to prevent confusion - The "L" at the end of large int literals is not required as they use long on Python 2 automatically. - Using 'int' instead of 'long' for small numbers is OK in all cases except strict type checking checking, e.g. type(0). https://fedorahosted.org/freeipa/ticket/4985 Reviewed-By: Jan Cholasta <jcholast@redhat.com> 
Use Python-3 compatible syntax, without breaking compatibility with py 2.7

- Octals literals start with 0o to prevent confusion
- The "L" at the end of large int literals is not required as they use
  long on Python 2 automatically.
- Using 'int' instead of 'long' for small numbers is OK in all cases except
  strict type checking checking, e.g. type(0).

https://fedorahosted.org/freeipa/ticket/4985

Reviewed-By: Jan Cholasta <jcholast@redhat.com>
ipalib: Load ipaserver plugins when api.env.in_server is True 2015-07-01T13:05:30+00:00 Jan Cholasta jcholast@redhat.com 2015-06-22T09:59:33+00:00 fe2accf77663693628835d7063da7d871b1ad268 https://fedorahosted.org/freeipa/ticket/3090 https://fedorahosted.org/freeipa/ticket/5073 Reviewed-By: Martin Babinsky <mbabinsk@redhat.com> 
https://fedorahosted.org/freeipa/ticket/3090
https://fedorahosted.org/freeipa/ticket/5073

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
DNSSEC: Store time & date key metadata in UTC. 2015-07-01T10:25:52+00:00 Petr Spacek pspacek@redhat.com 2015-06-30T12:04:13+00:00 fe6819eb9d7d9f84616daadb5f07072a3dfa02b1 OpenDNSSEC stores key metadata in local time zone but BIND needs timestamps in UTC. UTC will be stored in LDAP. https://fedorahosted.org/freeipa/ticket/4657 Reviewed-By: Martin Basti <mbasti@redhat.com> 
OpenDNSSEC stores key metadata in local time zone but BIND needs
timestamps in UTC. UTC will be stored in LDAP.

https://fedorahosted.org/freeipa/ticket/4657

Reviewed-By: Martin Basti <mbasti@redhat.com>
DNSSEC: Improve ipa-ods-exporter log messages with key metadata. 2015-06-29T12:32:26+00:00 Petr Spacek pspacek@redhat.com 2015-06-26T16:48:46+00:00 f9cbdd4915d13cd6e20fe7631d3c95c1352860f9 https://fedorahosted.org/freeipa/ticket/4657 Reviewed-By: Martin Basti <mbasti@redhat.com> 
https://fedorahosted.org/freeipa/ticket/4657

Reviewed-By: Martin Basti <mbasti@redhat.com>
DNSSEC: Add ability to trigger full data synchronization to ipa-ods-exporter. 2015-06-29T12:32:26+00:00 Petr Spacek pspacek@redhat.com 2015-06-26T16:21:38+00:00 579d30571ba15b9b62b32472ce5f04a7c561ee0d New exporter's command 'ipa-full-update' will resynchronize all zone keys from ODS database to LDAP. This command holds database lock for the whole time to avoid race conditions so it should be used only in special cases, e.g. during master server migration. https://fedorahosted.org/freeipa/ticket/4657 Reviewed-By: Martin Basti <mbasti@redhat.com> 
New exporter's command 'ipa-full-update' will resynchronize all zone
keys from ODS database to LDAP.

This command holds database lock for the whole time to avoid race
conditions so it should be used only in special cases, e.g. during
master server migration.

https://fedorahosted.org/freeipa/ticket/4657

Reviewed-By: Martin Basti <mbasti@redhat.com>
DNSSEC: log ipa-ods-exporter file lock operations into debug log 2015-06-29T12:32:26+00:00 Petr Spacek pspacek@redhat.com 2015-06-26T15:58:25+00:00 6a8fb04460a127dcf03d531c4e3956016df91a3e https://fedorahosted.org/freeipa/ticket/4657 Reviewed-By: Martin Basti <mbasti@redhat.com> 
https://fedorahosted.org/freeipa/ticket/4657

Reviewed-By: Martin Basti <mbasti@redhat.com>
DNSSEC: ipa-ods-exporter: move zone synchronization into separate function 2015-06-29T12:32:26+00:00 Petr Spacek pspacek@redhat.com 2015-06-26T15:53:17+00:00 fd2340649fb8888d946d7e17e4711e802cbbd239 https://fedorahosted.org/freeipa/ticket/4657 Reviewed-By: Martin Basti <mbasti@redhat.com> 
https://fedorahosted.org/freeipa/ticket/4657

Reviewed-By: Martin Basti <mbasti@redhat.com>
DNSSEC: Accept ipa-ods-exporter commands from command line. 2015-06-29T12:32:26+00:00 Petr Spacek pspacek@redhat.com 2015-06-26T15:39:47+00:00 68d0f641babb28d6b1d486aca7a113e305521d45 Previously only systemd socket activation was supported. Ability to call the command directly is handy in special cases, e.g. for debugging or moving key master role from one server to another. https://fedorahosted.org/freeipa/ticket/4657 Reviewed-By: Martin Basti <mbasti@redhat.com> 
Previously only systemd socket activation was supported.
Ability to call the command directly is handy in special cases,
e.g. for debugging or moving key master role from one server to another.

https://fedorahosted.org/freeipa/ticket/4657

Reviewed-By: Martin Basti <mbasti@redhat.com>
DNSSEC: Detect invalid master keys in LDAP. 2015-06-29T12:32:26+00:00 Petr Spacek pspacek@redhat.com 2015-06-26T14:04:00+00:00 c37e83f4b3c19df305648bab9a12e81956c8e232 This should never happen ... https://fedorahosted.org/freeipa/ticket/4657 Reviewed-By: Martin Basti <mbasti@redhat.com> 
This should never happen ...

https://fedorahosted.org/freeipa/ticket/4657

Reviewed-By: Martin Basti <mbasti@redhat.com>
Hide traceback in ipa-dnskeysyncd if kinit failed. 2015-06-24T12:25:40+00:00 Petr Spacek pspacek@redhat.com 2015-06-23T12:14:33+00:00 33bc9e7faca55497e00a3f6c08f4bff7262e290c https://fedorahosted.org/freeipa/ticket/4657 Reviewed-By: Martin Babinsky <mbabinsk@redhat.com> 
https://fedorahosted.org/freeipa/ticket/4657

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>