New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Port ipapython.dnssec.odsmgr to xml.etree #241
Conversation
973b700
to
1584550
Compare
| @@ -0,0 +1 @@ | |||
| {} | |||
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
What is this?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
bah, .gitignore is missing a line to ignore .cache directories.
| # GNU General Public License for more details. | ||
| # | ||
| # You should have received a copy of the GNU General Public License | ||
| # along with this program. If not, see <http://www.gnu.org/licenses/>. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Please use the new license header
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Which is the new license header?
| @@ -248,6 +248,7 @@ Requires: %{name}-server-common = %{version}-%{release} | |||
| Requires: %{name}-common = %{version}-%{release} | |||
| Requires: python2-ipaclient = %{version}-%{release} | |||
| Requires: python-ldap >= 2.4.15 | |||
| Requires: python-lxml | |||
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Why did you move dependency from python-ipalib to python-ipaserver package? You are editing ipapython module which is in python-ipalib package, so dependency should stay in python-ipalib package
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Exactly, I removed the dependency on lxml from ipalib. Only ipaserver depends on lxml.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
file odsmgr.py is in python2-ipalib, so dependency python-lxml should stay with python2-ipalib not ipaserver
$ rpm -ql python2-ipalib | grep odsmgr
/usr/lib/python2.7/site-packages/ipapython/dnssec/odsmgr.py
/usr/lib/python2.7/site-packages/ipapython/dnssec/odsmgr.pyc
/usr/lib/python2.7/site-packages/ipapython/dnssec/odsmgr.pyo
$ # rpm -ql python2-ipaserver | grep odsmgr
$
You can move the whole dnssec dir/package into ipaserver with all related dependencies (in new patch) or keep python-lxml dependency with python-ipalib
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
You are misunderstanding the patch. odsmgr does no longer use python-lxml. That's the whole point of the patch. xml.etree is part of Python's standard library.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
OK
|
I wrote some inline comments, I will test it later, DNSSEC is very hard to debug when an issue occurs, so review must be perfect. |
|
I just replaced the XML parser with a slightly different code. I even included unit test to ensure that the XML parser works. Feel free to add more XML files or a real world example. I couldn't find one. |
The module ipapython.dnssec.odsmgr is the only module in ipalib, ipaclient, ipapython and ipaplatform that uses lxml.etree. https://fedorahosted.org/freeipa/ticket/6469 Signed-off-by: Christian Heimes <cheimes@redhat.com>
1584550
to
d22d101
Compare
The ipa-client-automount script used lxml.etree to modify /etc/autofs_ldap_auth.conf. Signed-off-by: Christian Heimes <cheimes@redhat.com>
|
client/ipa-client-automount also used |
|
Commit has no ticket |
|
There is already DNSSEC issue that is not caused by this PR https://fedorahosted.org/freeipa/ticket/6495 |
The module ipapython.dnssec.odsmgr is the only module in ipalib,
ipaclient, ipapython and ipaplatform that uses lxml.etree.
The only dependency on lxml left in [free]ipa-client package is in the
ipa-client-automount script.
https://fedorahosted.org/freeipa/ticket/6469
https://fedorahosted.org/freeipa/ticket/6491
Signed-off-by: Christian Heimes cheimes@redhat.com