September 2017 - FreeIPA-devel - Fedora mailing-lists

[freeipa PR#960][opened] tests: Add LDAP URI to ldappasswd explicitelly
by davidkupka 13 Oct '17

13 Oct '17

URL: https://github.com/freeipa/freeipa/pull/960 Author: davidkupka Title: #960: tests: Add LDAP URI to ldappasswd explicitelly Action: opened PR body: """ https://fedorahosted.org/freeipa/ticket/6622 This PR replaces PR #404 which is orphaned and I'm no longer able to push into it. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/960/head:pr960 git checkout pr960

2 1

[freeipa PR#1115][opened] ipa-kdb: reinit trusted domain data for enterprise principals
by sumit-bose 13 Oct '17

13 Oct '17

URL: https://github.com/freeipa/freeipa/pull/1115 Author: sumit-bose Title: #1115: ipa-kdb: reinit trusted domain data for enterprise principals Action: opened PR body: """ While processing enterprise principals the information about trusted domains might not be up-to-date. With this patch ipadb_reinit_mspac() is called if an unknown domain is part of the enterprise principal. Resolves https://pagure.io/freeipa/issue/7172 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1115/head:pr1115 git checkout pr1115

2 1

[freeipa PR#1106][opened] tests: add host zone with overlap
by Rezney 11 Oct '17

11 Oct '17

URL: https://github.com/freeipa/freeipa/pull/1106 Author: Rezney Title: #1106: tests: add host zone with overlap Action: opened PR body: """ This patch is mainly for test_forced_client_reenrolment suite where when we are not in control of our client DNS we create an overlap zone in order to get the host records updated. This also sets resolv.conf before every ipa-client-install to the ipa master. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1106/head:pr1106 git checkout pr1106

2 1

[freeipa PR#1118][opened] tests_py3: decode get_file_contents() result
by Rezney 06 Oct '17

06 Oct '17

URL: https://github.com/freeipa/freeipa/pull/1118 Author: Rezney Title: #1118: tests_py3: decode get_file_contents() result Action: opened PR body: """ When running tests in python3 we get bytes object instead of bytestring and when passing it to multihost run_command we later fail on concatenation in shell_quote(). """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1118/head:pr1118 git checkout pr1118

2 1

[freeipa PR#1109][opened] Collect group membership without a size limit
by rcritten 04 Oct '17

04 Oct '17

URL: https://github.com/freeipa/freeipa/pull/1109 Author: rcritten Title: #1109: Collect group membership without a size limit Action: opened PR body: """ If the # of group memberships exceeded the search size limit then SizeLimitExceeded was raised. Being in too many groups should not cause a *_show to fail. https://pagure.io/freeipa/issue/7112 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1109/head:pr1109 git checkout pr1109

2 1

[freeipa PR#1083][opened] test_caless: add caless to external CA test
by Rezney 04 Oct '17

04 Oct '17

URL: https://github.com/freeipa/freeipa/pull/1083 Author: Rezney Title: #1083: test_caless: add caless to external CA test Action: opened PR body: """ Add caless to external CA test as the suite is currently missing one. https://pagure.io/freeipa/issue/7155 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1083/head:pr1083 git checkout pr1083

2 1

[freeipa PR#930][opened] install: allow specifying external CA template
by frasertweedale 04 Oct '17

04 Oct '17

URL: https://github.com/freeipa/freeipa/pull/930 Author: frasertweedale Title: #930: install: allow specifying external CA template Action: opened PR body: """ This PR allow an admin to specify an AD-CS target certificate template by name or OID, via the new option --external-ca-profile. The profile may be specified by name (string) or OID + version + optional minor version. https://pagure.io/freeipa/issue/6858 The approach is: 1. preliminary refactor to the IPAOptionParser to allow easily specifying a custom data constructor (this is used for the data type that holds the template specifier). 2. refactor to reduce duplication of external CA type enum values. 3. the main thing: - add data type for template specifier - add ipa-server-install `--external-ca-profile` CLI option - update CA installation to add the appropriate *pkispawn* config based on the template specifier - update *ipa-server-install* man page 4. add the `external-ca-profile` option to *ipa-ca-install* and update man page. **NOTE FOR TESTERS** *python-cryptography* has a bug parsing long OIDs. It is fixed as of v1.9 (f27). AD-CS creates and uses OIDs long enough to trigger the bug as a matter of course. Apply the following small diff to your *python-cryptography* lib to avoid the bug: https://github.com/frasertweedale/cryptography/blob/effeb600057a93f7cb95df1… **HOW TO TEST** 1. Install AD-CS in a Windows machine and create a custom profile by copying the *SubCA* profile. 2. Two-step external CA ipa-server-install: ``` $ ipa-server-install \ --external-ca --external-ca-type=ms-cs \ --external-ca-profile=1.3.6.1.4.1.311.21.8.8950086.10656446.2706058.12775672.480128.147.7130143.4405632:1 ``` (Use the actual OID of the custom profile). If everything works, hooray! 3. Start over with ca-less deployment. Then add CA via ``ipa-ca-install --external-ca-... # as before``. If everything works, hooray. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/930/head:pr930 git checkout pr930

2 1

[freeipa PR#1113][opened] [Backport][ipa-4-6] test_external_ca: switch to python-cryptography
by stlaz 03 Oct '17

03 Oct '17

URL: https://github.com/freeipa/freeipa/pull/1113 Author: stlaz Title: #1113: [Backport][ipa-4-6] test_external_ca: switch to python-cryptography Action: opened PR body: """ This PR was opened automatically because PR #1053 was pushed to master and backport to ipa-4-6 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1113/head:pr1113 git checkout pr1113

1 1

[freeipa PR#1108][opened] [ipa-4-6] prci: update f26 template
by tomaskrizek 03 Oct '17

03 Oct '17

URL: https://github.com/freeipa/freeipa/pull/1108 Author: tomaskrizek Title: #1108: [ipa-4-6] prci: update f26 template Action: opened PR body: """ Signed-off-by: Tomas Krizek <tkrizek(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1108/head:pr1108 git checkout pr1108

2 1

[freeipa PR#1107][opened] [Backport][ipa-4-6] py3: fix pkcs7 file processing
by tomaskrizek 03 Oct '17

03 Oct '17

URL: https://github.com/freeipa/freeipa/pull/1107 Author: tomaskrizek Title: #1107: [Backport][ipa-4-6] py3: fix pkcs7 file processing Action: opened PR body: """ This PR was opened automatically because PR #1102 was pushed to master and backport to ipa-4-6 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1107/head:pr1107 git checkout pr1107

2 1

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-devel September 2017