<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
<div class="moz-cite-prefix">On 06/25/2014 04:13 PM, Tomas Babej
wrote:<br>
</div>
<blockquote cite="mid:53AAD91A.2000603@redhat.com" type="cite">
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
<br>
<div class="moz-cite-prefix">On 06/25/2014 04:01 PM, Tomas Babej
wrote:<br>
</div>
<blockquote cite="mid:53AAD645.3080102@redhat.com" type="cite">
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
<br>
<div class="moz-cite-prefix">On 06/25/2014 10:48 AM, Petr
Viktorin wrote:<br>
</div>
<blockquote cite="mid:53AA8CCD.6000604@redhat.com" type="cite">On
06/19/2014 03:52 PM, Tomas Babej wrote: <br>
<blockquote type="cite"> <br>
On 06/19/2014 12:52 PM, Tomas Babej wrote: <br>
<blockquote type="cite">On 06/18/2014 10:52 AM, Petr
Viktorin wrote: <br>
<blockquote type="cite">On 06/17/2014 02:15 PM, Tomas
Babej wrote: <br>
<blockquote type="cite">On 06/17/2014 12:03 PM, Timo
Aaltonen wrote: <br>
<blockquote type="cite">On 17.06.2014 11:16, Martin
Kosek wrote: <br>
</blockquote>
Attached is a new version of patch 226, and a new
patch 228, which moves <br>
the paths from installers to the paths module. <br>
</blockquote>
In patch 226, there's another "certificated" typo in <br>
remove_ca_cert_from_systemwide_ca_store <br>
<br>
<blockquote type="cite">I greped the repository, and I
do not see many paths lurking around any <br>
more, there are only some in the error messages (as
these can't be <br>
reliably replaced automatically, and will need some
manual love). <br>
<br>
If you see any forgotten paths, which should be added
to the module, let <br>
me know. <br>
</blockquote>
</blockquote>
</blockquote>
</blockquote>
<br>
Well, since you asked... <br>
<br>
install/tools/ipa-upgradeconfig:236:
ipautil.run([paths.PKI_SETUP_PROXY,
'-pki_instance_root=/var/lib' <br>
ipaserver/install/cainstance.py:1330:
"-pki_instance_root=/var/lib", <br>
<br>
ipaserver/install/dsinstance.py:209:InstallLdifFile=
/var/lib/dirsrv/boot.ldif <br>
ipaserver/install/dsinstance.py:210:inst_dir=
/var/lib/dirsrv/scripts-$SERVERID <br>
<br>
ipaserver/install/ipa_backup.py:464:
'--exclude=/var/lib/ipa/backup', <br>
<br>
ipatests/test_integration/tasks.py:451:
host.run_command("find /var/lib/sss/db -name '*.ldb' | " <br>
<br>
install/tools/ipa-replica-conncheck:403:
"/usr/sbin/ipa-replica-conncheck " + <br>
install/tools/ipa-replica-conncheck:414:
print_info("/usr/sbin/ipa-replica-conncheck " + "
".join(remote_check_opts)) <br>
<br>
ipapython/ipautil.py:296: env["PATH"] =
"/bin:/sbin:/usr/kerberos/bin:/usr/kerberos/sbin:/usr/bin:/usr/sbin"
<br>
<br>
ipaserver/install/cainstance.py:88:ConfigFile =
/usr/share/pki/ca/conf/database.ldif <br>
<br>
ipaserver/install/bindinstance.py:829:
ipautil.run(['/usr/libexec/generate-rndc-key.sh']) <br>
<br>
</blockquote>
<br>
/me will think twice about teasing nex time.<br>
<br>
This are paths requiring manual changes in one way or the other
and as such cannot be handled by my tool. Let's not stall the
patcheset on this. We can fix these (and surely there are other)
as we go along.<br>
<br>
<blockquote cite="mid:53AA8CCD.6000604@redhat.com" type="cite">
<br>
I guess it'll be a while before we catch them all, but now
it's at least clear where these paths should be, so anyone
porting to another distro can send patches (or tickets)
upstream. <br>
<br>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite">I see another duplicate: <br>
SSS_KRB5_INCLUDE_D =
"/var/lib/sss/pubconf/krb5.include.d" <br>
SSSD_PUBCONF_KRB5_INCLUDE_D_DIR = <br>
"/var/lib/sss/pubconf/krb5.include.d/" <br>
</blockquote>
</blockquote>
</blockquote>
<br>
Could you just pick one instead? Would ipa_backup.py break if
it had a trailing slash here? <br>
<br>
</blockquote>
<br>
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1">
<p> Yes. I verified it produces the same result with or without
trailing slash, fixed.<br>
</p>
<br>
<blockquote cite="mid:53AA8CCD.6000604@redhat.com" type="cite">In
ipa-client-install, if you set: <br>
NSSWITCH_CONF = paths.NSSWITCH_CONF <br>
then you should only use one of those later. (Preferably
paths.*, to get rid of the redundant constants.) <br>
Perhaps this is for another patch that would clean up all the
cases where these trivial module variables are used. <br>
<br>
</blockquote>
<br>
I agree. Fixed this occurence.<br>
<br>
<blockquote cite="mid:53AA8CCD.6000604@redhat.com" type="cite">
<blockquote type="cite">
<blockquote type="cite">Fixed all mentioned issues. I also
attached a patch 230, which removes <br>
the base Authconfig class. <br>
</blockquote>
</blockquote>
<br>
<br>
<blockquote type="cite">Attaching one additional patch, which
removes unnecessary build warnings. <br>
<br>
</blockquote>
<br>
226, 230, 231 look good <br>
<br>
</blockquote>
<br>
Attaching whole updated patchset.<br>
</blockquote>
<br>
Attaching one more patch which should fix broken CI tests.<br>
<br>
<blockquote cite="mid:53AAD645.3080102@redhat.com" type="cite"> <br>
<pre class="moz-signature" cols="72">--
Tomas Babej
Associate Software Engineer | Red Hat | Identity Management
RHCE | Brno Site | IRC: tbabej | freeipa.org </pre>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Freeipa-devel mailing list
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:Freeipa-devel@redhat.com">Freeipa-devel@redhat.com</a>
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/freeipa-devel">https://www.redhat.com/mailman/listinfo/freeipa-devel</a></pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Tomas Babej
Associate Software Engineer | Red Hat | Identity Management
RHCE | Brno Site | IRC: tbabej | freeipa.org </pre>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Freeipa-devel mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Freeipa-devel@redhat.com">Freeipa-devel@redhat.com</a>
<a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/freeipa-devel">https://www.redhat.com/mailman/listinfo/freeipa-devel</a></pre>
</blockquote>
<br>
Self-NACK - It seems I omitted one occurence of NSSWITCH_CONF in
ipa-client-install, fixed now.<br>
<br>
Attaching the whole patchset for your convenience.<br>
<pre class="moz-signature" cols="72">--
Tomas Babej
Associate Software Engineer | Red Hat | Identity Management
RHCE | Brno Site | IRC: tbabej | freeipa.org </pre>
</body>
</html>