<html>
  <head>
    <meta content="text/html; charset=ISO-8859-1"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <br>
    <div class="moz-cite-prefix">On 06/25/2014 04:13 PM, Tomas Babej
      wrote:<br>
    </div>
    <blockquote cite="mid:53AAD91A.2000603@redhat.com" type="cite">
      <meta content="text/html; charset=ISO-8859-1"
        http-equiv="Content-Type">
      <br>
      <div class="moz-cite-prefix">On 06/25/2014 04:01 PM, Tomas Babej
        wrote:<br>
      </div>
      <blockquote cite="mid:53AAD645.3080102@redhat.com" type="cite">
        <meta content="text/html; charset=ISO-8859-1"
          http-equiv="Content-Type">
        <br>
        <div class="moz-cite-prefix">On 06/25/2014 10:48 AM, Petr
          Viktorin wrote:<br>
        </div>
        <blockquote cite="mid:53AA8CCD.6000604@redhat.com" type="cite">On

          06/19/2014 03:52 PM, Tomas Babej wrote: <br>
          <blockquote type="cite"> <br>
            On 06/19/2014 12:52 PM, Tomas Babej wrote: <br>
            <blockquote type="cite">On 06/18/2014 10:52 AM, Petr
              Viktorin wrote: <br>
              <blockquote type="cite">On 06/17/2014 02:15 PM, Tomas
                Babej wrote: <br>
                <blockquote type="cite">On 06/17/2014 12:03 PM, Timo
                  Aaltonen wrote: <br>
                  <blockquote type="cite">On 17.06.2014 11:16, Martin
                    Kosek wrote: <br>
                  </blockquote>
                  Attached is a new version of patch 226, and a new
                  patch 228, which moves <br>
                  the paths from installers to the paths module. <br>
                </blockquote>
                In patch 226, there's another "certificated" typo in <br>
                remove_ca_cert_from_systemwide_ca_store <br>
                <br>
                <blockquote type="cite">I greped the repository, and I
                  do not see many paths lurking around any <br>
                  more, there are only some in the error messages (as
                  these can't be <br>
                  reliably replaced automatically, and will need some
                  manual love). <br>
                  <br>
                  If you see any forgotten paths, which should be added
                  to the module, let <br>
                  me know. <br>
                </blockquote>
              </blockquote>
            </blockquote>
          </blockquote>
          <br>
          Well, since you asked... <br>
          <br>
          install/tools/ipa-upgradeconfig:236:
          ipautil.run([paths.PKI_SETUP_PROXY,
          '-pki_instance_root=/var/lib' <br>
          ipaserver/install/cainstance.py:1330:
          "-pki_instance_root=/var/lib", <br>
          <br>
          ipaserver/install/dsinstance.py:209:InstallLdifFile=
          /var/lib/dirsrv/boot.ldif <br>
          ipaserver/install/dsinstance.py:210:inst_dir=
          /var/lib/dirsrv/scripts-$SERVERID <br>
          <br>
          ipaserver/install/ipa_backup.py:464:
          '--exclude=/var/lib/ipa/backup', <br>
          <br>
          ipatests/test_integration/tasks.py:451:   
          host.run_command("find /var/lib/sss/db -name '*.ldb' | " <br>
          <br>
          install/tools/ipa-replica-conncheck:403:
          "/usr/sbin/ipa-replica-conncheck " + <br>
          install/tools/ipa-replica-conncheck:414:
          print_info("/usr/sbin/ipa-replica-conncheck " + "
          ".join(remote_check_opts)) <br>
          <br>
          ipapython/ipautil.py:296:        env["PATH"] =
          "/bin:/sbin:/usr/kerberos/bin:/usr/kerberos/sbin:/usr/bin:/usr/sbin"
          <br>
          <br>
          ipaserver/install/cainstance.py:88:ConfigFile =
          /usr/share/pki/ca/conf/database.ldif <br>
          <br>
          ipaserver/install/bindinstance.py:829:
          ipautil.run(['/usr/libexec/generate-rndc-key.sh']) <br>
          <br>
        </blockquote>
        <br>
        /me will think twice about teasing nex time.<br>
        <br>
        This are paths requiring manual changes in one way or the other
        and as such cannot be handled by my tool. Let's not stall the
        patcheset on this. We can fix these (and surely there are other)
        as we go along.<br>
        <br>
        <blockquote cite="mid:53AA8CCD.6000604@redhat.com" type="cite">
          <br>
          I guess it'll be a while before we catch them all, but now
          it's at least clear where these paths should be, so anyone
          porting to another distro can send patches (or tickets)
          upstream. <br>
          <br>
          <blockquote type="cite">
            <blockquote type="cite">
              <blockquote type="cite">I see another duplicate: <br>
                     SSS_KRB5_INCLUDE_D =
                "/var/lib/sss/pubconf/krb5.include.d" <br>
                     SSSD_PUBCONF_KRB5_INCLUDE_D_DIR = <br>
                "/var/lib/sss/pubconf/krb5.include.d/" <br>
              </blockquote>
            </blockquote>
          </blockquote>
          <br>
          Could you just pick one instead? Would ipa_backup.py break if
          it had a trailing slash here? <br>
          <br>
        </blockquote>
        <br>
        <meta http-equiv="Content-Type" content="text/html;
          charset=ISO-8859-1">
        <p> Yes. I verified it produces the same result with or without
          trailing slash, fixed.<br>
        </p>
        <br>
        <blockquote cite="mid:53AA8CCD.6000604@redhat.com" type="cite">In

          ipa-client-install, if you set: <br>
              NSSWITCH_CONF = paths.NSSWITCH_CONF <br>
          then you should only use one of those later. (Preferably
          paths.*, to get rid of the redundant constants.) <br>
          Perhaps this is for another patch that would clean up all the
          cases where these trivial module variables are used. <br>
          <br>
        </blockquote>
        <br>
        I agree. Fixed this occurence.<br>
        <br>
        <blockquote cite="mid:53AA8CCD.6000604@redhat.com" type="cite">
          <blockquote type="cite">
            <blockquote type="cite">Fixed all mentioned issues. I also
              attached a patch 230, which removes <br>
              the base Authconfig class. <br>
            </blockquote>
          </blockquote>
          <br>
          <br>
          <blockquote type="cite">Attaching one additional patch, which
            removes unnecessary build warnings. <br>
            <br>
          </blockquote>
          <br>
          226, 230, 231 look good <br>
          <br>
        </blockquote>
        <br>
        Attaching whole updated patchset.<br>
      </blockquote>
      <br>
      Attaching one more patch which should fix broken CI tests.<br>
      <br>
      <blockquote cite="mid:53AAD645.3080102@redhat.com" type="cite"> <br>
        <pre class="moz-signature" cols="72">-- 
Tomas Babej
Associate Software Engineer | Red Hat | Identity Management
RHCE | Brno Site | IRC: tbabej | freeipa.org </pre>
        <br>
        <fieldset class="mimeAttachmentHeader"></fieldset>
        <br>
        <pre wrap="">_______________________________________________
Freeipa-devel mailing list
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:Freeipa-devel@redhat.com">Freeipa-devel@redhat.com</a>
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/freeipa-devel">https://www.redhat.com/mailman/listinfo/freeipa-devel</a></pre>
      </blockquote>
      <br>
      <pre class="moz-signature" cols="72">-- 
Tomas Babej
Associate Software Engineer | Red Hat | Identity Management
RHCE | Brno Site | IRC: tbabej | freeipa.org </pre>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
Freeipa-devel mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Freeipa-devel@redhat.com">Freeipa-devel@redhat.com</a>
<a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/freeipa-devel">https://www.redhat.com/mailman/listinfo/freeipa-devel</a></pre>
    </blockquote>
    <br>
    Self-NACK - It seems I omitted one occurence of NSSWITCH_CONF in
    ipa-client-install, fixed now.<br>
    <br>
    Attaching the whole patchset for your convenience.<br>
    <pre class="moz-signature" cols="72">-- 
Tomas Babej
Associate Software Engineer | Red Hat | Identity Management
RHCE | Brno Site | IRC: tbabej | freeipa.org </pre>
  </body>
</html>