September 2017 - FreeIPA-devel - Fedora mailing-lists

[freeipa PR#919][opened] client.py: Using Augeas to configure krb5.conf
by Tiboris 02 Jul '19

02 Jul '19

URL: https://github.com/freeipa/freeipa/pull/919 Author: Tiboris Title: #919: client.py: Using Augeas to configure krb5.conf Action: opened PR body: """ Using Augeas should avoid issues like https://pagure.io/freeipa/issue/5912. Resolves: https://pagure.io/freeipa/issue/5913 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/919/head:pr919 git checkout pr919

1 1

[freeipa PR#920][opened] fix ods-ksmutil for 2.0.x
by tduehr 15 May '18

15 May '18

URL: https://github.com/freeipa/freeipa/pull/920 Author: tduehr Title: #920: fix ods-ksmutil for 2.0.x Action: opened PR body: """ It became ods-enforcer and its behavior changed. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/920/head:pr920 git checkout pr920

2 3

[freeipa PR#953][opened] [master] WebUI: Turn on pagination on certificate page
by pvomacka 22 Mar '18

22 Mar '18

URL: https://github.com/freeipa/freeipa/pull/953 Author: pvomacka Title: #953: [master] WebUI: Turn on pagination on certificate page Action: opened PR body: """ Almost all other search tables use pagination. Only this one does not. This change makes WebUI more consistent. https://pagure.io/freeipa/issue/6079 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/953/head:pr953 git checkout pr953

2 1

[freeipa PR#1024][opened] py3: turn all shebangs to python3
by stlaz 15 Feb '18

15 Feb '18

URL: https://github.com/freeipa/freeipa/pull/1024 Author: stlaz Title: #1024: py3: turn all shebangs to python3 Action: opened PR body: """ This patchset turns all shebangs in IPA scripts to Python 3. Note that this may seem like going against what we agreed on some two months ago but the outcome to turn everything to `/usr/bin/python` to use default python version would be a setback in the Fedora planning: https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 and there is no reason not to use the up-till-now long running Python 3 effort. This also required to regenerate the `API.txt` file so that our checks don't fail to validate for python2/3 type discrepancies. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1024/head:pr1024 git checkout pr1024

2 1

[freeipa PR#973][opened] test_dnssec: re-add named-pkcs11 workarounds
by tomaskrizek 09 Feb '18

09 Feb '18

URL: https://github.com/freeipa/freeipa/pull/973 Author: tomaskrizek Title: #973: test_dnssec: re-add named-pkcs11 workarounds Action: opened PR body: """ DNSSEC tests starrted to fail again, probably due to a bug in some underlaying component. This reverts commit 8bc677512296a7e94c29edd0c1a96aa7273f352a and makes the xfail test check less strict - it will no longer mark the test suite red if it passes. Related https://pagure.io/freeipa/issue/5348 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/973/head:pr973 git checkout pr973

2 1

[freeipa PR#980][opened] [WIP][tests] Replica Promotion improvements
by Akasurde 08 Feb '18

08 Feb '18

URL: https://github.com/freeipa/freeipa/pull/980 Author: Akasurde Title: #980: [WIP][tests] Replica Promotion improvements Action: opened PR body: """ * Change string check in replica install at domain level 0 Fixes: https://pagure.io/freeipa/issue/7104 Signed-off-by: Abhijeet Kasurde <akasurde(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/980/head:pr980 git checkout pr980

2 3

[freeipa PR#927][opened] WebUI: Cockpit integration
by pvomacka 07 Feb '18

07 Feb '18

URL: https://github.com/freeipa/freeipa/pull/927 Author: pvomacka Title: #927: WebUI: Cockpit integration Action: opened PR body: """ Link to the cockpit is placed to each host details page in case the Cockpit is installed on the server. Showing or hiding cockpit link is possible because of Cockpit's API which provides public URL for check whether Cockpit is the software which listen on given port. https://pagure.io/freeipa/issue/4891 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/927/head:pr927 git checkout pr927

2 1

[freeipa PR#837][opened] ca-add: fix permission issue
by frasertweedale 05 Feb '18

05 Feb '18

URL: https://github.com/freeipa/freeipa/pull/837 Author: frasertweedale Title: #837: ca-add: fix permission issue Action: opened PR body: """ The ca-add command pre_callback uses ldap.can_add() to check whether the user has permission to add CAs. Alas, the GetEffectiveRights control used by ldap.can_add() doesn't correctly interpret ACIs with 'targetfilter' constraints, and returns a false-negative for non-admin users, even when they have the 'System: Add CA' permission. To work around this, add the CA object to FreeIPA before attempting to create the CA in Dogtag. If the CA creation in Dogtag succeds, the user then updates the FreeIPA object with the Authority ID and other authoritative data returned by Dogtag. If the CA creation in Dogtag fails, the user cleans up by deleting the newly-created CA object from FreeIPA. This modified procedure ensures that the user certainly has the 'System: Add CA' permission before the CA creation in Dogtag is attempted. But it also means that the user must have 'write' and 'delete' permission on 'ipaca' objects in FreeIPA, so that it can complete the object after CA creation in Dogtag, or clean up if that step fails. Therefore, update the 'System: Add CA' permission to confer 'write' and 'delete' access on 'ipaca' objects, as well as 'add' access. Fixes: https://pagure.io/freeipa/issue/6609 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/837/head:pr837 git checkout pr837

2 7

[freeipa PR#1116][opened] Enable ephemeral KRA requests
by rcritten 14 Dec '17

14 Dec '17

URL: https://github.com/freeipa/freeipa/pull/1116 Author: rcritten Title: #1116: Enable ephemeral KRA requests Action: opened PR body: """ Enabling ephemeral KRA requests will reduce the amount of LDAP write operations and improve overall performance. https://pagure.io/freeipa/issue/6703 NOTE: I'm not 100% sure on the upgrade for existing instances. My logic is that tomcat is always stopped and then within that block the CA (if any) will be updated. Given that the KRA runs in the same service that is why I stuck that update code there. It worked in my testing. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1116/head:pr1116 git checkout pr1116

2 1

[freeipa PR#1011][opened] py3: dnssec
by tomaskrizek 12 Dec '17

12 Dec '17

URL: https://github.com/freeipa/freeipa/pull/1011 Author: tomaskrizek Title: #1011: py3: dnssec Action: opened PR body: """ This PR is a partial fix that should allow DNSSEC installation for master. Keys will not be distributed to replicas. With my limited DNSSEC/IPA knowledge, I wasn't able to verify the data stored in LDAP are actually correct. In case they are not, this would prevent installation of DNSSEC replicas in the future. Our DNSSEC tests are not passing, thus we can't use them to verify this PR. Given these circumstances, I propose to officially discourage DNSSEC installation in 4.6.0. This PR supersedes #898. For review, it is highly recommended to rebase on #999. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1011/head:pr1011 git checkout pr1011

3 3

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-devel September 2017