[freeipa PR#2857][opened] Fix installation when CA subject DN has escapes
by frasertweedale
URL: https://github.com/freeipa/freeipa/pull/2857
Author: frasertweedale
Title: #2857: Fix installation when CA subject DN has escapes
Action: opened
PR body:
"""
There were several bugs across several projects preventing
installation when the CA subject DN contains characters that need
escaping in the string representation, e.g.
CN=Certificate Authority,O=Acme\, Inc.,ST=Massachusetts,C=US
The package versions containing relevant fixes are:
- 389-ds-base 1.4.0.20 (we already require >= 1.4.0.21)
- pki-core 10.5.5 (we already require >= 10.6.8)
- certmonger 0.79.7 (this commit bumps the dependency)
With this change, installation will now work. Integration tests are
left for a subsequent commit.
Fixes: https://pagure.io/freeipa/issue/7347
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2857/head:pr2857
git checkout pr2857
5 years
[freeipa PR#2858][opened] [Backport][ipa-4-6] Processing of server roles should ignore errors.EmptyResult
by rcritten
URL: https://github.com/freeipa/freeipa/pull/2858
Author: rcritten
Title: #2858: [Backport][ipa-4-6] Processing of server roles should ignore errors.EmptyResult
Action: opened
PR body:
"""
MANUAL BACKPORT.
This was not backported when the original PR was pushed. The milestone was pushed back afterward.
ipa-4-6 still defines:
WSGI_PROCESSES=constants.WSGI_PROCESSES,
---------
When non-admin user issues a command that utilizes
api.Object.config.show_servroles_attributes(), some server roles might
return errors.EmptyResult, indicating that a role is not visible to this
identity.
Most of the callers to api.Object.config.show_servroles_attributes() do
not process errors.EmptyResult so it goes up to an API caller. In case
of Web UI it breaks retrieval of the initial configuration due to ipa
config-show failing completely rather than avoiding to show available
server roles.
Fixes: https://pagure.io/freeipa/issue/7452
Signed-off-by: Alexander Bokovoy abokovoy(a)redhat.com
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2858/head:pr2858
git checkout pr2858
5 years