[freeipa PR#1886][opened] group-del: add a warning to logs when password policy could not be re…
by abbra
URL: https://github.com/freeipa/freeipa/pull/1886
Author: abbra
Title: #1886: group-del: add a warning to logs when password policy could not be re…
Action: opened
PR body:
"""
…moved
When a user with sufficient permissions creates a group using ipa
group-add and then deletes it again with group-del ipa gives an
Insufficient access error, but still deletes the group.
This is due to a need to remove an associaed password policy for the
group. However, a password policy might be inaccessible to the user
(created by a more powerful admin) and there is no way to check that it
exists with current privileges other than trying to remove it.
Seeing a Python exceptions in the Apache log without explanation is
confusing to many users, so add a warning message that explains what
happens here.
Fixes: https://pagure.io/freeipa/issue/6884
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1886/head:pr1886
git checkout pr1886
4 years, 11 months
[freeipa PR#1896][opened] Make ipatests' create_external_ca a script
by tiran
URL: https://github.com/freeipa/freeipa/pull/1896
Author: tiran
Title: #1896: Make ipatests' create_external_ca a script
Action: opened
PR body:
"""
The test helper create_external_ca is useful to create an external root
CA and sign ipa.csr for external CA testing. I also moved the file into
ipatests top package to make the import shorter and to avoid an import
warning.
Usage:
ipa-server-install --external-ca ...
python3 -m ipatests.create_external_ca
ipa-server-install --external-cert-file=/tmp/rootca.pem \
--external-cert-file=/tmp/ipaca.pem
Signed-off-by: Christian Heimes <cheimes(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1896/head:pr1896
git checkout pr1896
4 years, 11 months