Re: anybody running dhcpd & LDAP ?

2015-07-21 Thread Alexander Bokovoy
pr.fedoraproject.org/coprs/jpopelka/dhcp-ldap-auth/). Then please send feedback to me (CC s...@isc.org). -- / Alexander Bokovoy -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

Re: Attempting to contact unresponsive maintainer - gisburn

2015-09-08 Thread Alexander Bokovoy
5 -- The Kerberos network authentication system ( master f23 f22 f21) These two are already at Robbie's hands. pam_krb5 -- A Pluggable Authentication Module for Kerberos 5 ( master f23 f22 f21 ) Can we change this to rharwood too? -- / Alexander Bokovoy -- devel mailing list devel@lists.fedo

Re: Samba as AD DC

2014-09-13 Thread Alexander Bokovoy
ccaches in /etc/krb5.conf in Fedora, which is kernel keyring). -- / Alexander Bokovoy -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

Re: A proposal for Fedora updates

2015-03-27 Thread Alexander Bokovoy
considered for a push ~14-15 hours after. https://admin.fedoraproject.org/updates/freeipa-4.1.4-1.fc21,slapi-nis-0.54.2-1.fc21 https://admin.fedoraproject.org/updates/freeipa-4.1.4-1.fc22,slapi-nis-0.54.2-1.fc22 -- / Alexander Bokovoy -- devel mailing list devel@lists.fedoraproject.org https:/

Re: A proposal for Fedora updates

2015-03-27 Thread Alexander Bokovoy
On Fri, 27 Mar 2015, Kevin Fenzi wrote: On Fri, 27 Mar 2015 10:42:07 +0200 Alexander Bokovoy wrote: Any way to get the push actually working? I've submitted yesterday a security update mid day EST for F21 and F22 and it is not yet even considered for a push ~14-15 hours after.

Re: A proposal for Fedora updates

2015-03-27 Thread Alexander Bokovoy
On Fri, 27 Mar 2015, Kevin Fenzi wrote: On Fri, 27 Mar 2015 15:03:59 +0200 Alexander Bokovoy wrote: My primary worry is CVE handling. These delays are not helping in getting security fixes delivered. I'm not fighting for dropping certain type of content but rather for prioritization.

Re: dnf woes

2015-05-06 Thread Alexander Bokovoy
y not related to dnf but to changes on the Fedora infrastructure on the mirrorlist servers. I believe there just was a small hick-ups, could you try again now to see if you can still reproduce it? I had similar issues couple weeks ago -- dnf was unable to work with a repository while curl or wget from the sam

Re: Checking the ABI of packages submitted to the updates-testing Fedora repository

2015-06-08 Thread Alexander Bokovoy
res are not affected. -- / Alexander Bokovoy -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

Notice: samba 4.0 beta1 and what will be available in Fedora

2012-06-05 Thread Alexander Bokovoy
available at https://wiki.samba.org/index.php/MIT_Build -- / Alexander Bokovoy -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel

Re: F21 Self Contained Change: Remote Journal Logging

2014-04-14 Thread Alexander Bokovoy
verified by checking for appropriate signatures on the certificates. How certificates are managed for sender and receiver parts? Who generates them? Do you require explicit placement of the certificates prior to enabling the service? -- / Alexander Bokovoy -- devel mailing list devel@list

Re: F21 Self Contained Change: Remote Journal Logging

2014-04-14 Thread Alexander Bokovoy
On Mon, 14 Apr 2014, Zbigniew Jędrzejewski-Szmek wrote: On Mon, Apr 14, 2014 at 05:19:17PM +0300, Alexander Bokovoy wrote: How certificates are managed for sender and receiver parts? By some external means... This could be automated, e.g. using certmaster, but I don't want to tie to a spe

Re: fedora-atomic discussion point: /usr/lib/passwd

2014-04-28 Thread Alexander Bokovoy
S and PAM modules to work with these files. It is deployed for years in OpenWall, ALT Linux, and a number of other distributions. -- / Alexander Bokovoy -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel Fedora Code of Conduct: http://fedoraproject

Re: Orphaned Packages in rawhide (2015-10-12)

2015-10-12 Thread Alexander Bokovoy
On Mon, 12 Oct 2015, opensou...@till.name wrote: zziplib orphan, thias1 weeks ago I picked up zziplib as it is needed for texlive and by extension of that, to krb5 builds. -- / Alexander Bokovoy -- devel mailing list devel@lists.fedoraproject.org https

Re: Packaging of PlayOnLinux

2015-10-14 Thread Alexander Bokovoy
ed. But you will have to unblundle all wine versions and use system wine version ... The devil is in the details. If you want to package POL (which is Java app, btw) anyway, follow guidelines for new packages. They were updated and published recently. -- / Alexander Bokovoy --

Samba AD and MIT Kerberos with trust to FreeIPA update

2015-12-03 Thread Alexander Bokovoy
huge milestone in our four year quest to make it a reality. Thanks to everyone! -- / Alexander Bokovoy -- devel mailing list devel@lists.fedoraproject.org http://lists.fedoraproject.org/admin/lists/devel@lists.fedoraproject.org

Re: [INPUT REQUESTED] Fedora Policy on generated code

2015-12-21 Thread Alexander Bokovoy
rebuild is not only helpful from following a spiritual part of Free Software movement, it actually has practical reasoning by uncovering bugs in the tools that generate code or documentation too. -- / Alexander Bokovoy -- devel mailing list devel@lists.fedoraproject.org http://lists.fedoraproject.o

Re: Mass rebuild for Fedora 18 Complete

2012-07-23 Thread Alexander Bokovoy
built. 656 packages failed to rebuild. Please fix any packages you maintain that failed to rebuild. It looks like freeipa was not rebuilt and neither appears in failures. Is there any reason why it wasn't rebuild? -- / Alexander Bokovoy -- devel mailing list devel@lists.fedoraproject

Re: Mass rebuild for Fedora 18 Complete

2012-07-23 Thread Alexander Bokovoy
On Mon, 23 Jul 2012, Kevin Fenzi wrote: On Mon, 23 Jul 2012 14:14:42 +0300 Alexander Bokovoy wrote: On Sun, 22 Jul 2012, Kevin Fenzi wrote: >On Tue, 17 Jul 2012 07:39:31 -0500 >Dennis Gilmore wrote: > >> it was requested in https://fedorahosted.org/rel-eng/ticket/5222 >&

Re: Mass rebuild for Fedora 18 Complete

2012-07-23 Thread Alexander Bokovoy
On Mon, 23 Jul 2012, Kevin Fenzi wrote: On Mon, 23 Jul 2012 14:14:42 +0300 Alexander Bokovoy wrote: On Sun, 22 Jul 2012, Kevin Fenzi wrote: >On Tue, 17 Jul 2012 07:39:31 -0500 >Dennis Gilmore wrote: > >> it was requested in https://fedorahosted.org/rel-eng/ticket/5222 >&

Re: Mass rebuild for Fedora 18 Complete

2012-07-23 Thread Alexander Bokovoy
On Mon, 23 Jul 2012, Richard W.M. Jones wrote: On Mon, Jul 23, 2012 at 02:14:42PM +0300, Alexander Bokovoy wrote: On Sun, 22 Jul 2012, Kevin Fenzi wrote: >On Tue, 17 Jul 2012 07:39:31 -0500 >Dennis Gilmore wrote: > >>it was requested in https://fedorahosted.org/rel-eng/ticket/52

Re: Mass rebuild for Fedora 18 Complete

2012-07-25 Thread Alexander Bokovoy
l.fedorapeople.org/f18-failures.html http://ausil.fedorapeople.org/f18-needsbuilt.html are the lists of whats failed and what needs building yet. I'll update them a few times a day. Why freeipa is on the list of needsbuilt? I rebuilt it on Monday already. -- / Alexander Bokovoy -- devel ma

Re: Fedora 18 Beta to slip by two weeks, Beta release date is now Nov 27

2012-11-09 Thread Alexander Bokovoy
would still be the same. -- / Alexander Bokovoy -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel

Re: F20 Self Contained Change: FreeIPA OTP UI

2013-07-16 Thread Alexander Bokovoy
uld detect that OTP is enabled for the user as it will be visible in 'ipa' command line commands and in LDAP entry for the user. -- / Alexander Bokovoy -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel

Re: [Test-Announce] FreeIPA AD Trust improvement Test Day tomorrow, 2013-07-25

2013-07-24 Thread Alexander Bokovoy
l mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel -- / Alexander Bokovoy -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel

Re: Another UEFI testing request

2013-04-16 Thread Alexander Bokovoy
eset and seems to be generally faster, OpenGL is accelerated. When TC6 starts to graphic mode and gives first Anaconda screen, it shows an error message box where the only button I could press is 'Quit': http://lh4.googleusercontent.com/-A6BJjSaCLqQ/UW17Bl2RpoI/A_g/pqW9SAWqxLo/s10

Re: systemd 230 change - KillUserProcesses defaults to yes

2016-05-27 Thread Alexander Bokovoy
as getting broken deps reports almost every day. I've rebuilt samba couple days ago after fixing your patch so we should be fine once composes start working. The patch also merged upstream. -- / Alexander Bokovoy -- devel mailing list devel@lists.fedoraproject.org https://lists.

Re: Orphaning xmlrpc-c (critpath)

2016-06-13 Thread Alexander Bokovoy
critical dependency of FreeIPA. -- / Alexander Bokovoy -- devel mailing list devel@lists.fedoraproject.org https://lists.fedoraproject.org/admin/lists/devel@lists.fedoraproject.org

Re: F25 Self Contained Change: Rust Compiler

2016-07-13 Thread Alexander Bokovoy
ists/devel@lists.fedoraproject.org -- / Alexander Bokovoy -- devel mailing list devel@lists.fedoraproject.org https://lists.fedoraproject.org/admin/lists/devel@lists.fedoraproject.org

Re: Broken: Firefox 48 + Private Tab + Kerberos SSO

2016-08-23 Thread Alexander Bokovoy
1291700, 'Never Remember History' mode is now allowing GSSAPI to work. Private browse mode will not allow GSSAPI credentials to work, though, as this is an information leak. -- / Alexander Bokovoy -- devel mailing list devel@lists.fedoraproject.org https://lists.fedoraproj

Re: Broken: Firefox 48 + Private Tab + Kerberos SSO

2016-08-23 Thread Alexander Bokovoy
switch and the other one, 'Never Remember History', was broken with GSSAPI authentication because of this. -- / Alexander Bokovoy -- devel mailing list devel@lists.fedoraproject.org https://lists.fedoraproject.org/admin/lists/devel@lists.fedoraproject.org

Re: Broken: Firefox 48 + Private Tab + Kerberos SSO

2016-08-24 Thread Alexander Bokovoy
On Wed, 24 Aug 2016, Robert Marcano wrote: On 08/24/2016 12:29 AM, Alexander Bokovoy wrote: On Tue, 23 Aug 2016, Dusty Mabe wrote: I can't seem to get firefox-48.0-5.fc24.x86_64 to work with kerberos single sign on in a private window. It works fine when using a non-private window. Any

Re: Attempting to contact unresponsive maintainers - zeenix, theinric, ifarkas, mchalk

2016-09-20 Thread Alexander Bokovoy
contact: rpms/drpm -- A library for making, reading and applying deltarpm packages ( master f25 f24 f23 ) ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedorapr

Re: Heads-up: cyrus-sasl-2.1.26 with libsasl2 soname bump

2013-01-22 Thread Alexander Bokovoy
g API/structures? -- / Alexander Bokovoy -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel

Re: rawhide failing to compose

2015-01-15 Thread Alexander Bokovoy
now. -- / Alexander Bokovoy -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

Re: rawhide failing to compose

2015-01-15 Thread Alexander Bokovoy
On Thu, 15 Jan 2015, Simo Sorce wrote: On Thu, 15 Jan 2015 23:14:46 +0200 Alexander Bokovoy wrote: On Thu, 15 Jan 2015, Kevin Fenzi wrote: >On Thu, 15 Jan 2015 08:04:32 -0600 >Bruno Wolff III wrote: > >> Are the rawhide compose failures being looked at? (I just want to >>

Re: against dnssec

2015-01-18 Thread Alexander Bokovoy
already a reality around the world. -- / Alexander Bokovoy -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

Re: Filing Bugs for Python 3 Switch

2015-01-28 Thread Alexander Bokovoy
, syntax, and ABI. This is not true for python2/python3. You can easily have an application package installed that would be intending python2 via certain required modules (bindings to C libraries, for example) which couldn't be launched with python3 interpreter. -- / Alexander Bokovoy -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

Re: Fedora rawhide compose report: 20170225.n.0 changes

2017-02-27 Thread Alexander Bokovoy
://bugzilla.redhat.com/show_bug.cgi?id=1426847 which I now moved to python2 folks. As it stands, this bug prevents FreeIPA from being installable in Rawhide. -- / Alexander Bokovoy ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an

Re: Fedora Rawhide-20170227.n.0 compose check report

2017-02-27 Thread Alexander Bokovoy
eeipa yesterday and it again got this dependency even though nothing is explicitly requiring or mentioning it in the code and the spec file. Looks like real issue is somewhere in Python infra in Rawhide. -- / Alexander Bokovoy ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: fedorahosted.org retired today (2017-03-01)

2017-03-02 Thread Alexander Bokovoy
t all. -- / Alexander Bokovoy ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: fedorahosted.org retired today (2017-03-01)

2017-03-02 Thread Alexander Bokovoy
On to, 02 maalis 2017, Pierre-Yves Chibon wrote: On Thu, Mar 02, 2017 at 10:10:21AM +0200, Alexander Bokovoy wrote: On ke, 01 maalis 2017, Kevin Fenzi wrote: > Greetings. > > Today we have retired fedorahosted.org. > > Please see the following wiki page for up to date informa

Re: Fedora Workstation connects using NT1 protocol by default

2017-04-05 Thread Alexander Bokovoy
protocol' to its value. I'm not sure how to get Nautilus to use SMB3 or if it even supports it, or if it's ultimately using smbclient behind the scene. It is using libsmb library which uses client options from smb.conf -- / Alexander Bokovoy ___

Re: Fedora Workstation connects using NT1 protocol by default

2017-04-05 Thread Alexander Bokovoy
On ke, 05 huhti 2017, Florian Weimer wrote: On 04/05/2017 09:38 AM, Alexander Bokovoy wrote: We discussed that some time ago upstream and decided still to keep NT1 as default. There are still too many servers running with NT1 variant -- almost all consumer class NAS servers from 5-7 years old

Re: switching libcurl back to OpenSSL and providing the libcurl-minimal subpackage

2017-04-05 Thread Alexander Bokovoy
e use libcurl internally and we are not yet migrated to OpenSSL fully (definitely not yet in F26). We also need to look at what happens with certmonger. -- / Alexander Bokovoy ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an ema

Re: Fedora Workstation connects using NT1 protocol by default

2017-04-06 Thread Alexander Bokovoy
t and logging back in does not fix it), now it's back. I've reproduced this several times. https://bugzilla.gnome.org/show_bug.cgi?id=780958 Thanks for filing it. -- / Alexander Bokovoy ___ devel mailing list -- devel@lists.fedoraproject.org

Re: Proposed Mass Bug Filing: Renaming "python-" binary packages to "python2-"

2017-06-29 Thread Alexander Bokovoy
ference in the effort in few years and now? If you have a better way to manage this, please let us know! -- Petr Viktorin ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to

Re: F27 Self Contained Change: Samba AD

2017-06-30 Thread Alexander Bokovoy
grade. -- / Alexander Bokovoy ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: F27 Self Contained Change: Samba AD

2017-07-02 Thread Alexander Bokovoy
On la, 01 heinä 2017, Dario Lesca wrote: Il giorno sab, 01/07/2017 alle 06.29 +0300, Alexander Bokovoy ha scritto: While there is no automatic upgrade to Samba AD is planned, we'd like to ensure smooth distribution upgrade. Does this mean? I have on Fedora 25 + samba 4.5.x rebuild with

Re: F27 Self Contained Change: Samba AD

2017-07-06 Thread Alexander Bokovoy
On ma, 03 heinä 2017, Dario Lesca wrote: Il giorno lun, 03/07/2017 alle 09.29 +0300, Alexander Bokovoy ha scritto: > When the firs (beta) F27 + samba 4.7 AD will be release, I will try > the upgrade on a test virtual environment. Sure! Thanks! I'll let you know So, we pushed 4

Re: F27 System Wide Change: Switch OpenLDAP from NSS to OpenSSL

2017-07-07 Thread Alexander Bokovoy
understanding that it is not being able to fully migrate to OpenSSL, including handling of updates within F27 time frame, due to aggressive schedule F27 has. So this change should be coordinated well. -- / Alexander Bokovoy ___ devel mailing list -- devel

Re: Fedora rawhide compose report: 20170708.n.0 changes

2017-07-10 Thread Alexander Bokovoy
D/freeipa-4.5.2/install/ui/build/freeipa' make[4]: *** [Makefile:463: all-recursive] Error 1 the latter excerpt is from https://kojipkgs.fedoraproject.org//work/tasks/8844/20438844/build.log -- / Alexander Bokovoy ___ devel mailing list -- devel@lists.

Re: Fedora rawhide compose report: 20170708.n.0 changes

2017-07-10 Thread Alexander Bokovoy
On ma, 10 heinä 2017, Stephen Gallagher wrote: On Mon, Jul 10, 2017 at 9:53 AM Tomasz Torcz wrote: On Mon, Jul 10, 2017 at 03:30:02PM +0300, Alexander Bokovoy wrote: > On la, 08 heinä 2017, Fedora Rawhide Report wrote: > > [freeipa] > > freeipa-server-trust-ad-4.5.2

Re: super-drafty F28 and F29 schedules

2017-07-11 Thread Alexander Bokovoy
rtunately, with such an aggressive schedule it is guaranteed to be a failure in OpenSSL migration. -- / Alexander Bokovoy ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: Fedora 27 mass rebuild at risk

2017-07-13 Thread Alexander Bokovoy
/koji/taskinfo?taskID=20494649 -- / Alexander Bokovoy ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: F27 System Wide Change: Graphical Applications as Flatpaks

2017-07-17 Thread Alexander Bokovoy
grading the whole desktop". Just restart your session when the upgrade is done, no harm done. This kind of a mess does not happen with routine updates. Konversation gets routinely killed every time dbus daemon reloads its configuration or restarts during updates. This is not even remotely

Re: Enabling "-Werror=format-security" by default

2013-11-20 Thread Alexander Bokovoy
ts) as you can see, in all these cases format *is* a string literal and there are exact format arguments passed. -- / Alexander Bokovoy -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

Re: RPMbuild mystery parameters "--with" and "--without"

2014-01-20 Thread Alexander Bokovoy
d in mind at all. Naming of the defines is just logical. :). -- / Alexander Bokovoy -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

Re: introducing curl-minimal and libcurl-minimal RPM packages

2016-03-19 Thread Alexander Bokovoy
restored the GSSAPI support in the libcurl-minimal package: http://pkgs.fedoraproject.org/cgit/rpms/curl.git/commit/?id=92700939 ... and scheduled a new Copr build for that: https://copr.fedorainfracloud.org/coprs/kdudka/curl-minimal/build/168860/ Thanks! -- / Alexander Bokovoy -- de

Re: introducing curl-minimal and libcurl-minimal RPM packages

2016-03-19 Thread Alexander Bokovoy
On Thu, 17 Mar 2016, Kamil Dudka wrote: On Thursday 17 March 2016 08:57:19 Alexander Bokovoy wrote: On Wed, 16 Mar 2016, Dennis Gilmore wrote: >On Wednesday, March 16, 2016 9:39:33 PM CDT Kamil Dudka wrote: >> On Wednesday, March 16, 2016 16:19:23 Bill Nottingham wrote: >> >

Re: introducing curl-minimal and libcurl-minimal RPM packages

2016-03-19 Thread Alexander Bokovoy
etely. There are many uses of that within kickstart or cloud-init files. -- / Alexander Bokovoy -- devel mailing list devel@lists.fedoraproject.org http://lists.fedoraproject.org/admin/lists/devel@lists.fedoraproject.org

Re: libsoup 2.54.0 accidental ABI break fixed in 2.54.1

2016-04-27 Thread Alexander Bokovoy
ists/devel@lists.fedoraproject.org -- / Alexander Bokovoy -- devel mailing list devel@lists.fedoraproject.org http://lists.fedoraproject.org/admin/lists/devel@lists.fedoraproject.org

Re: F26 proposed release tooling changes

2016-10-25 Thread Alexander Bokovoy
. We implemented HTTPS proxying of the Kerberos protocol, based on MS-KKDCP specification. It is in MIT Kerberos 1.13+. -- / Alexander Bokovoy ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: F26 proposed release tooling changes

2016-10-27 Thread Alexander Bokovoy
. -- / Alexander Bokovoy ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: upcoming build and release developer flag day December 12 2016

2016-11-21 Thread Alexander Bokovoy
t from 'KRB5_TRACE=/dev/stderr kinit vondr...@fedoraproject.org' to get further. -- / Alexander Bokovoy ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: upcoming build and release developer flag day December 12 2016

2016-11-21 Thread Alexander Bokovoy
s that don't support MS-KKDCP (RHEL 6, for example), you are back to use naked Kerberos 5 traffic. Our effort is to get to SPAKE sooner than later. -- / Alexander Bokovoy ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe

Re: upcoming build and release developer flag day December 12 2016

2016-11-21 Thread Alexander Bokovoy
On ma, 21 marras 2016, Florian Weimer wrote: On 11/21/2016 04:03 PM, Alexander Bokovoy wrote: Fedora infrastructure uses MS-KKDCP proxy with Fedora certificate to tunnel Kerberos 5 traffic. If you have recent Fedora, you'll get it used automatically with the help of DNS URI. For older cl

Re: upcoming build and release developer flag day December 12 2016

2016-11-23 Thread Alexander Bokovoy
coming, according to Patrick. Heimdal does not support MS-KKDCP spec, so you are left with direct Kerberos communication over port 88/tcp or 88/udp, but these are enabled in Fedora infrastructure, yes. -- / Alexander Bokovoy ___ devel mailing list -- devel

Re: upcoming build and release developer flag day December 12 2016

2016-11-28 Thread Alexander Bokovoy
On su, 27 marras 2016, Ken Dreyer wrote: On Wed, Nov 23, 2016 at 7:17 AM, Alexander Bokovoy wrote: Heimdal does not support MS-KKDCP spec, so you are left with direct Kerberos communication over port 88/tcp or 88/udp, but these are enabled in Fedora infrastructure, yes. I thought direct

Re: samba client broken in rawhide?

2016-12-07 Thread Alexander Bokovoy
onfiguration script to fail to recognize versioning and build without it. There are some patches upstream trying to deal with the issue, not merged yet. A mere rebuild will not help, sorry. -- / Alexander Bokovoy ___ devel mailing list -- devel@lists.fe

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread Alexander Bokovoy
hon-gssapi will have ability to choose the credentials cache automatically based on the realm of the target service, regardless of what credentials cache is active right now in the collection. The version in Fedora right now (1.11.0-1.fc25) is not yet built with the patch to use python-gssapi. -- /

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread Alexander Bokovoy
On ti, 13 joulu 2016, Alexander Bokovoy wrote: On ti, 13 joulu 2016, Vít Ondruch wrote: Dne 12.12.2016 v 16:02 Stephen Gallagher napsal(a): On 12/12/2016 04:53 AM, Vít Ondruch wrote: So several questions: 1) When I have 2 domains I login to with kerberos, how to really make it work. I

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread Alexander Bokovoy
On ti, 13 joulu 2016, Daniel P. Berrange wrote: On Tue, Dec 13, 2016 at 12:19:45PM +0200, Alexander Bokovoy wrote: On ti, 13 joulu 2016, Alexander Bokovoy wrote: > On ti, 13 joulu 2016, Vít Ondruch wrote: > > > > > > Dne 12.12.2016 v 16:02 Stephen Gallagher napsal(a): >

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread Alexander Bokovoy
On ti, 13 joulu 2016, Dan Horák wrote: On Tue, 13 Dec 2016 12:29:57 +0200 Alexander Bokovoy wrote: On ti, 13 joulu 2016, Daniel P. Berrange wrote: >On Tue, Dec 13, 2016 at 12:19:45PM +0200, Alexander Bokovoy wrote: >> On ti, 13 joulu 2016, Alexander Bokovoy wrote: >> > On

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread Alexander Bokovoy
am FreeIPA. ;) -- / Alexander Bokovoy ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: Packagers - Flag day 2016 Important changes

2016-12-14 Thread Alexander Bokovoy
13/12/16 16:47:52 14/12/16 12:40:41 host/koji.fedoraproject@fedoraproject.org renew until 20/12/16 12:40:41, Etype (skey, tkt): aes256-cts-hmac-sha1-96, aes256-cts-hmac-sha1-96 Could you please show output of KRB5_TRACE=/dev/stderr koji hello -- / Alexander Bokovoy

Re: Packagers - Flag day 2016 Important changes

2016-12-14 Thread Alexander Bokovoy
n Fedora Infrastructure. These aren't exposed publicly. -- / Alexander Bokovoy ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: Packagers - Flag day 2016 Important changes

2016-12-14 Thread Alexander Bokovoy
s no additional communication/channels. It is far away yet, may be Fedora 26/27 time frame, but this gives us also time to improve other tooling around the user experience -- GNOME Online accounts and the rest of tools not directly involved into a system level logon flow. -- / Al

Re: [HEADS UP] Updated xmlrpc-c (1.47.1) is on the way

2016-12-18 Thread Alexander Bokovoy
ues/5 [3] https://bugzilla.redhat.com/show_bug.cgi?id=1385596 -- / Alexander Bokovoy ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: Important: NSS + Firefox + Thunderbird + Seamonkey + Icecat + Xulrunner

2017-01-20 Thread Alexander Bokovoy
://bugzilla.redhat.com/show_bug.cgi?id=1414929 ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org -- / Alexander Bokovoy

Re: Important: NSS + Firefox + Thunderbird + Seamonkey + Icecat + Xulrunner

2017-01-20 Thread Alexander Bokovoy
On pe, 20 tammi 2017, Hubert Kario wrote: On Friday, 20 January 2017 18:40:13 CET Alexander Bokovoy wrote: On pe, 20 tammi 2017, Kai Engert wrote: >Hello, > >we are currently dealing with a tricky situation, that the NSS and Mozilla >package maintainers have been discussing, and

Re: Important: NSS + Firefox + Thunderbird + Seamonkey + Icecat + Xulrunner

2017-01-20 Thread Alexander Bokovoy
On pe, 20 tammi 2017, Kai Engert wrote: On Fri, 2017-01-20 at 18:40 +0200, Alexander Bokovoy wrote: FreeIPA is broken when trying to install with nss 3.28.1. We reliably reproduce this issue with https://bodhi.fedoraproject.org/updates/FEDORA-2017-e42b513012 It seems that new nss also breaks

Re: Important: NSS + Firefox + Thunderbird + Seamonkey + Icecat + Xulrunner

2017-01-23 Thread Alexander Bokovoy
nd make fast turnaround for bug-fixing after the fact rather problematic. -- / Alexander Bokovoy ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: F26 System Wide Change: Kerberos KCM credential cache by default

2017-02-02 Thread Alexander Bokovoy
then don't worry about it. Kerberos credential cache is a fairly generic term. KCM is one type of a Kerberos credential cache, FILE: is another, KEYRING is another.. It is Kerberos Cache Manager, as opposed to credentials cache or credentials cache collections. -- / Alexander Bokovoy ___

Re: F26 System Wide Change: Kerberos KCM credential cache by default

2017-02-02 Thread Alexander Bokovoy
being commonly used in kerberos contexts too for awhile, so there may be no avoiding it. :( Yep. -- / Alexander Bokovoy ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: F26 System Wide Change: Kerberos KCM credential cache by default

2017-02-02 Thread Alexander Bokovoy
NG: by default didn't — pam_winbind was putting creds in /tmp/krb5cc_$UID still, and then they weren't consistently being found there. It is a bug in winbindd. There is a patch on samba-technical@ which attempts to fix this but I haven't yet looked

Re: F26 System Wide Change: Kerberos KCM credential cache by default

2017-02-02 Thread Alexander Bokovoy
x27;ll continue having it with other features. KCM protocol in libkrb5 is the same one libkrb5 is already using on Mac OS X, with a small change of doing Unix domain socket on the Linux and doing a special kernel interface on Mac OS X. -- / Alexander Bokovoy _

Re: python2-dns without DNSSEC support in rawhide

2020-04-29 Thread Alexander Bokovoy
ion) a bad idea and would make the spec file ugly. Second solution is kinda lot of work for nothing. So I hope nobody will be affected by missing DNSSEC in python2-dns :) Could you please add a sentence like 'Note this library has no DNSSEC support' to python2-dns subpackage desc

Re: Orphaned uglify-js

2020-04-29 Thread Alexander Bokovoy
code? -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org F

Re: Orphaned uglify-js

2020-04-29 Thread Alexander Bokovoy
On ke, 29 huhti 2020, Alexander Bokovoy wrote: On ke, 29 huhti 2020, Jun Aruga wrote: Hi, I orphaned the package. https://src.fedoraproject.org/rpms/uglify-js because * I removed the uglify-js dependency from rubygem-uglifier. * When I asked the co-maintainers, there was no response. * The

Re: Many packages unnecessarily link to libpython

2020-05-16 Thread Alexander Bokovoy
itializing-and-finalizing-the-interpreter List of possibly affected packages, provided through $ repoquery --repo=rawhide --source --whatrequires 'libpython3.8.so.1.0()(64bit)' Samba does use Py_Initialize and thus link correctly. -- / Alexander Bokovoy Sr. Principal Softwa

Re: Fedora 32: samba 4.12.2: Problem with access from win10b to win10a via remote desktop

2020-05-16 Thread Alexander Bokovoy
same principal for the check that is being done here. For MIT Kerberos, it doesn't see them as aliases as it does explicit compare of the principals and requested service principal does not match the principal in the evidence (2nd) ticket. -- / Alexander Bokovoy Sr. Principal Software Engineer

Re: Modularity and the system-upgrade path

2019-10-16 Thread Alexander Bokovoy
content of default modules in non-modular way ignores the fact that you somehow need to be able to rebuild those packages and they might depend in their build dependencies on packages from other modules, including non-default streams. -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Id

Re: Modularity and the system-upgrade path

2019-10-16 Thread Alexander Bokovoy
On to, 17 loka 2019, Kevin Kofler wrote: Alexander Bokovoy wrote: You are mixing up parallel availability and parallel installability. These aren't the same. Modularity does solve parallel availability problem. It was never designed to solve parallel installability problem. … which is ex

Re: Modularity and the system-upgrade path

2019-10-17 Thread Alexander Bokovoy
le streams are helpful to maintain coherent user experience for existing users of kickstart files. -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland ___ devel mailing list -- devel@l

Re: Modularity and the system-upgrade path

2019-10-17 Thread Alexander Bokovoy
On to, 17 loka 2019, Kevin Kofler wrote: Alexander Bokovoy wrote: On to, 17 loka 2019, Kevin Kofler wrote: … which is exactly why it causes version hell. It does not cause version hell in a system where you cannot install multiple versions at the same time. You do not necessarily do that

Re: Modularity and the system-upgrade path

2019-10-17 Thread Alexander Bokovoy
On to, 17 loka 2019, Kevin Kofler wrote: Alexander Bokovoy wrote: The one thing we are using default modular stream in RHEL 8 for is to be able to provide access to packages in kickstart that were moved to modules in RHEL 8. An example is idm:client stream which is a default module stream in

Re: Modularity and the system-upgrade path

2019-10-17 Thread Alexander Bokovoy
ve an answer for those use cases with VMs and containers and they aren't requiring parallel installability. -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland ___ devel mailing lis

Re: Modularity and the system-upgrade path

2019-10-18 Thread Alexander Bokovoy
On pe, 18 loka 2019, Kevin Kofler wrote: Alexander Bokovoy wrote: This does not work for server components and is not generalizable. For example, you cannot have multiple versions of Samba running on the same system. You cannot have multiple versions of FreeIPA running on the same system either

Re: Modularity and the system-upgrade path

2019-10-18 Thread Alexander Bokovoy
since switching to domain level 1 and that implies you have to do client installation first. And at the time when all this was designed, kickstart had no support for modularized installation. It has it now, of course. -- / Alexander Bokovoy Sr. Principal Software Engineer Se

Re: Modularity and the system-upgrade path

2019-10-18 Thread Alexander Bokovoy
On pe, 18 loka 2019, Kevin Kofler wrote: Alexander Bokovoy wrote: That's my point -- requiring parallel installability is not really a MUST, especially in my area. You are driving this requirement as if nothing else could solve your issues. I am not. This is a strawman. What I am sayi

  1   2   3   >