URL: https://github.com/freeipa/freeipa/pull/2749
Author: t-woerner
Title: #2749: Enable firewall in the tests for PR CI
Action: opened
PR body:
"""
The firewall has not been enabled in the tests for PR CI so far. With these
steps this is done now:
install_packages: Install firewalld, enable and start firewalld service.
install_server: Enable firewalld services freeipa-ldap freeipa-ldaps and
dns after server installation.
run_tests: Disable firewalld services freeipa-ldap freeipa-ldaps and dns
after server uninstallation.
Related-to: https://pagure.io/freeipa/issue/7755
Signed-off-by: Thomas Woerner <twoerner(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2749/head:pr2749
git checkout pr2749
URL: https://github.com/freeipa/freeipa/pull/2751
Author: tiran
Title: #2751: [Backport][ipa-4-6] Create systemd-user HBAC service and rule
Action: opened
PR body:
"""
Manual backport of PR #2746
authselect changed pam_systemd session from optional to required. When
the HBAC rule allow_all is disabled and replaced with more fine grained
rules, loginsi now to fail, because systemd's user@.service is able to
create a systemd session.
Add systemd-user HBAC service and a HBAC rule that allows systemd-user
to run on all hosts for all users by default. ipa-server-upgrade creates
the service and rule, too. In case the service already exists, no
attempt is made to create the rule. This allows admins to delete the
rule permanently.
See: https://bugzilla.redhat.com/show_bug.cgi?id=1643928
Fixes: https://pagure.io/freeipa/issue/7831
Signed-off-by: Christian Heimes <cheimes(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2751/head:pr2751
git checkout pr2751
URL: https://github.com/freeipa/freeipa/pull/2750
Author: tiran
Title: #2750: [Backport][ipa-4-7] Create systemd-user HBAC service and rule
Action: opened
PR body:
"""
This PR was opened automatically because PR #2746 was pushed to master and backport to ipa-4-7 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2750/head:pr2750
git checkout pr2750
URL: https://github.com/freeipa/freeipa/pull/2747
Author: tiran
Title: #2747: [Backport][ipa-4-7] Require krb5 with fix for CVE-2018-20217
Action: opened
PR body:
"""
This PR was opened automatically because PR #2737 was pushed to master and backport to ipa-4-7 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2747/head:pr2747
git checkout pr2747