<html>
  <head>
    <meta content="text/html; charset=windows-1252"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <br>
    <div class="moz-cite-prefix">On 06/25/2014 10:48 AM, Petr Viktorin
      wrote:<br>
    </div>
    <blockquote cite="mid:53AA8CCD.6000604@redhat.com" type="cite">On
      06/19/2014 03:52 PM, Tomas Babej wrote:
      <br>
      <blockquote type="cite">
        <br>
        On 06/19/2014 12:52 PM, Tomas Babej wrote:
        <br>
        <blockquote type="cite">On 06/18/2014 10:52 AM, Petr Viktorin
          wrote:
          <br>
          <blockquote type="cite">On 06/17/2014 02:15 PM, Tomas Babej
            wrote:
            <br>
            <blockquote type="cite">On 06/17/2014 12:03 PM, Timo
              Aaltonen wrote:
              <br>
              <blockquote type="cite">On 17.06.2014 11:16, Martin Kosek
                wrote:
                <br>
              </blockquote>
              Attached is a new version of patch 226, and a new patch
              228, which moves
              <br>
              the paths from installers to the paths module.
              <br>
            </blockquote>
            In patch 226, there's another "certificated" typo in
            <br>
            remove_ca_cert_from_systemwide_ca_store
            <br>
            <br>
            <blockquote type="cite">I greped the repository, and I do
              not see many paths lurking around any
              <br>
              more, there are only some in the error messages (as these
              can't be
              <br>
              reliably replaced automatically, and will need some manual
              love).
              <br>
              <br>
              If you see any forgotten paths, which should be added to
              the module, let
              <br>
              me know.
              <br>
            </blockquote>
          </blockquote>
        </blockquote>
      </blockquote>
      <br>
      Well, since you asked...
      <br>
      <br>
      install/tools/ipa-upgradeconfig:236:
      ipautil.run([paths.PKI_SETUP_PROXY, '-pki_instance_root=/var/lib'
      <br>
      ipaserver/install/cainstance.py:1330:
      "-pki_instance_root=/var/lib",
      <br>
      <br>
      ipaserver/install/dsinstance.py:209:InstallLdifFile=
      /var/lib/dirsrv/boot.ldif
      <br>
      ipaserver/install/dsinstance.py:210:inst_dir=
      /var/lib/dirsrv/scripts-$SERVERID
      <br>
      <br>
      ipaserver/install/ipa_backup.py:464:
      '--exclude=/var/lib/ipa/backup',
      <br>
      <br>
      ipatests/test_integration/tasks.py:451:    host.run_command("find
      /var/lib/sss/db -name '*.ldb' | "
      <br>
      <br>
      install/tools/ipa-replica-conncheck:403:
      "/usr/sbin/ipa-replica-conncheck " +
      <br>
      install/tools/ipa-replica-conncheck:414:
      print_info("/usr/sbin/ipa-replica-conncheck " + "
      ".join(remote_check_opts))
      <br>
      <br>
      ipapython/ipautil.py:296:        env["PATH"] =
      "/bin:/sbin:/usr/kerberos/bin:/usr/kerberos/sbin:/usr/bin:/usr/sbin"
      <br>
      <br>
      ipaserver/install/cainstance.py:88:ConfigFile =
      /usr/share/pki/ca/conf/database.ldif
      <br>
      <br>
      ipaserver/install/bindinstance.py:829:
      ipautil.run(['/usr/libexec/generate-rndc-key.sh'])
      <br>
      <br>
    </blockquote>
    <br>
    /me will think twice about teasing nex time.<br>
    <br>
    This are paths requiring manual changes in one way or the other and
    as such cannot be handled by my tool. Let's not stall the patcheset
    on this. We can fix these (and surely there are other) as we go
    along.<br>
    <br>
    <blockquote cite="mid:53AA8CCD.6000604@redhat.com" type="cite">
      <br>
      I guess it'll be a while before we catch them all, but now it's at
      least clear where these paths should be, so anyone porting to
      another distro can send patches (or tickets) upstream.
      <br>
      <br>
      <blockquote type="cite">
        <blockquote type="cite">
          <blockquote type="cite">I see another duplicate:
            <br>
                 SSS_KRB5_INCLUDE_D =
            "/var/lib/sss/pubconf/krb5.include.d"
            <br>
                 SSSD_PUBCONF_KRB5_INCLUDE_D_DIR =
            <br>
            "/var/lib/sss/pubconf/krb5.include.d/"
            <br>
          </blockquote>
        </blockquote>
      </blockquote>
      <br>
      Could you just pick one instead? Would ipa_backup.py break if it
      had a trailing slash here?
      <br>
      <br>
    </blockquote>
    <br>
    <meta http-equiv="Content-Type" content="text/html;
      charset=windows-1252">
    <p>
      Yes. I verified it produces the same result with or without
      trailing slash, fixed.<br>
    </p>
    <br>
    <blockquote cite="mid:53AA8CCD.6000604@redhat.com" type="cite">In
      ipa-client-install, if you set:
      <br>
          NSSWITCH_CONF = paths.NSSWITCH_CONF
      <br>
      then you should only use one of those later. (Preferably paths.*,
      to get rid of the redundant constants.)
      <br>
      Perhaps this is for another patch that would clean up all the
      cases where these trivial module variables are used.
      <br>
      <br>
    </blockquote>
    <br>
    I agree. Fixed this occurence.<br>
    <br>
    <blockquote cite="mid:53AA8CCD.6000604@redhat.com" type="cite">
      <blockquote type="cite">
        <blockquote type="cite">Fixed all mentioned issues. I also
          attached a patch 230, which removes
          <br>
          the base Authconfig class.
          <br>
        </blockquote>
      </blockquote>
      <br>
      <br>
      <blockquote type="cite">Attaching one additional patch, which
        removes unnecessary build warnings.
        <br>
        <br>
      </blockquote>
      <br>
      226, 230, 231 look good
      <br>
      <br>
    </blockquote>
    <br>
    Attaching whole updated patchset.<br>
    <br>
    <pre class="moz-signature" cols="72">-- 
Tomas Babej
Associate Software Engineer | Red Hat | Identity Management
RHCE | Brno Site | IRC: tbabej | freeipa.org </pre>
  </body>
</html>