[freeipa PR#2439][opened] adtrust: define Guests mapping after creating cifs/ principal
by abbra
URL: https://github.com/freeipa/freeipa/pull/2439
Author: abbra
Title: #2439: adtrust: define Guests mapping after creating cifs/ principal
Action: opened
PR body:
"""
All Samba utilities load passdb modules from the configuration file. As
result, 'net groupmap' call would try to initialize ipasam passdb module
and that one would try to connect to LDAP using Kerberos authentication.
We should be running it after cifs/ principal is actually created in
ipa-adtrust-install or otherwise setting up group mapping will fail.
This only affects new installations. For older ones 'net groupmap' would
work just fine because adtrust is already configured and all principals
exist already.
A re-run of 'ipa-server-upgrade' is a workaround too but better to fix
the initial setup.
Related: https://pagure.io/freeipa/issue/7705
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2439/head:pr2439
git checkout pr2439
5 years, 6 months
[freeipa PR#2437][opened] ipatests: mark known failures as xfail
by flo-renaud
URL: https://github.com/freeipa/freeipa/pull/2437
Author: flo-renaud
Title: #2437: ipatests: mark known failures as xfail
Action: opened
PR body:
"""
Commit 5dbcc1a marked the base class method `test_replica0_with_ca_kra_dns_install` as known failure, but this does not work with inherited classes. The child class methods need to be marked
themselves as known failures with `(a)pytest.mark.xfail`.
Furthermore, `TestInstallWithCA_KRA2` and `TestInstallWithCA_KRA_DNS2` tests should succeed because the master is installed with KRA (issue 7651 is related to replica install with --setup-kra
when it is the first KRA instance).
Related to https://pagure.io/freeipa/issue/7651
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2437/head:pr2437
git checkout pr2437
5 years, 6 months
[freeipa PR#2413][opened] Find orphan automember rules
by t-woerner
URL: https://github.com/freeipa/freeipa/pull/2413
Author: t-woerner
Title: #2413: Find orphan automember rules
Action: opened
PR body:
"""
If groups or hostgroups have been removed after automember rules have been
created using them, then automember-rebuild, automember-add, host-add and
more commands could fail.
A new command has been added to the ipa tool:
ipa automember-find-orphans --type={hostgroup,group} [--remove]
This command retuns the list of orphan automember rules in the same way as
automember-find. With the --remove option the orphan rules are also removed.
Using ideas from a patch by: Rob Crittenden <rcritten(a)redhat.com>
See: https://pagure.io/freeipa/issue/6476
Signed-off-by: Thomas Woerner <twoerner(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2413/head:pr2413
git checkout pr2413
5 years, 7 months