[freeipa PR#2373][opened] Support Samba 4.9
by abbra
URL: https://github.com/freeipa/freeipa/pull/2373
Author: abbra
Title: #2373: Support Samba 4.9
Action: opened
PR body:
"""
Samba 4.9 became a bit more strict about creating a local NT token and a
failure to resolve or create BUILTIN\Guests group will cause a rejection
of the connection for a successfully authenticated one.
Add a default mapping of the nobody group to BUILTIN\Guests.
BUILTIN\Guests is a special group SID that is added to the NT token for
authenticated users.
For real guests there is 'guest account' option in smb.conf which
defaults to 'nobody' user.
This was implicit behavior before as 'guest account = nobody' by
default would pick up 'nobody' group as well.
Fixes: https://pagure.io/freeipa/issue/7705
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2373/head:pr2373
git checkout pr2373
5 years, 7 months
[freeipa PR#2371][opened] Fix translation of 'Remove' dialog for 'Association' facet
by stanislavlevin
URL: https://github.com/freeipa/freeipa/pull/2371
Author: stanislavlevin
Title: #2371: Fix translation of 'Remove' dialog for 'Association' facet
Action: opened
PR body:
"""
As for now the default title of remove dialogs, which are initialized from 'association' facet, is set to something like
```javascript
Remove ${other_entity} from ${entity} ${primary_key}
```
where 'other_entity' and 'entity' are also translatable texts.
This construction is used via the method 'show_remove_dialog' of 'association' facet for the all 'Delete' actions within the details of entities.
Such concatenation leads to a bad quality translation and should be changed to an entire sentence.
From now a mentioned title is taken from a spec and should be specified explicitly.
Fixes: https://pagure.io/freeipa/issue/7702
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2371/head:pr2371
git checkout pr2371
5 years, 7 months
[freeipa PR#2376][opened] ipa-advise: fix script for smart card preparation
by flo-renaud
URL: https://github.com/freeipa/freeipa/pull/2376
Author: flo-renaud
Title: #2376: ipa-advise: fix script for smart card preparation
Action: opened
PR body:
"""
The script has 2 issues:
- if the http nickname contains spaces (like `"CN=host,O=Example Org"`, which can happen when the http cert is provided by an external CA), the extraction of the nick from /etc/httpd/conf.d/nss.conf fails.
The nick name is build using
`grep NSSNickname /etc/httpd/conf.d/nss.conf | cut -f 2 -d ' '`
which results in `"CN=host,O=Example`
(note the end is missing).
The script should rather use `cut -f 2- -d ' '` in order to extract the whole nickname.
- when the http nickname is enclosed in single quote, the script should remove them, otherwise the shell tries to escape them and fails to find the cert in /etc/httpd/alias.
The fix is using `sed "s/^'\(.*\)'$/\1/"` in order to remove leading and trailing single quote, if present.
Fixes: https://pagure.io/freeipa/issue/7706
**Important note**: ipa-4-7 and master use mod_ssl instead of mod_nss and do not see this issue. The fix is required on ipa-4-6 branch only.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2376/head:pr2376
git checkout pr2376
5 years, 7 months