URL: https://github.com/freeipa/freeipa/pull/2935
Author: tbordaz
Title: #2935: Switch nsslapd-unhashed-pw-switch to nolog
Action: opened
PR body:
"""
389-ds will change the default value of nsslapd-unhashed-pw-switch from 'on' to 'off'
For new IPA instance this attribute is set to 'nolog'.
For upgraded IPA instance, it replaces 'off' with 'nolog'.
In case of winsync deployement:
For new IPA instance where the attribute have been set to 'nolog', it is changed to 'on'
when a replication agreement is created toward AD.
For upgrade IPA instance, the attribute was already set to 'on'. Upgrade does not change it
https://pagure.io/freeipa/issue/4812
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2935/head:pr2935
git checkout pr2935
URL: https://github.com/freeipa/freeipa/pull/2797
Author: tiran
Title: #2797: Move Custodia secrets handler to scripts
Action: opened
PR body:
"""
Implement the import and export handlers for Custodia keys as external
scripts. It's a prerequisite to drop DAC override permission and proper
SELinux rules for ipa-custodia.
Fixes: https://pagure.io/freeipa/issue/6888
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2797/head:pr2797
git checkout pr2797
URL: https://github.com/freeipa/freeipa/pull/2888
Author: fcami
Title: #2888: [WIP] ipatests: add a NFS test
Action: opened
PR body:
"""
With the latest NFS changes:
- systemd NFS-related unit files
- configuration from /etc/sysconfig/nfs to /etc/nfs.conf
testing the client configuration code is becoming paramount.
There is no need to run the NFS tests on every PR, a nightly
run on the latest Fedora release and on rawhide should be enough.
Fixes: https://pagure.io/freeipa/issue/7805
Signed-off-by: François Cami <fcami(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2888/head:pr2888
git checkout pr2888
URL: https://github.com/freeipa/freeipa/pull/2411
Author: onkarkarale
Title: #2411: Test ipa-server-install when mandatory params not specified.
Action: opened
PR body:
"""
When installing ipa-server in unattended mode (i.e -U option),
some manadatory params should be specified with the install
commands like -p, -r and -a etc. If we don't specify these
params, installation will fail.
Signed-off-by: Onkar Karale <karaleonkar19(a)gmail.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2411/head:pr2411
git checkout pr2411
URL: https://github.com/freeipa/freeipa/pull/2464
Author: Tiboris
Title: #2464: Support interactive prompt for ntp options
Action: opened
PR body:
"""
FreeIPA will now ask user for NTP source server
or pool address in interactive mode if there is
no server nor pool specified and autodiscovery
has not found any NTP source in DNS records.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2464/head:pr2464
git checkout pr2464
URL: https://github.com/freeipa/freeipa/pull/2813
Author: tiran
Title: #2813: Require a minimum SASL security factor of 56
Action: opened
PR body:
"""
SSF_MINX 56 level ensures data integrity and confidentiality for SASL
GSSAPI and SASL GSS SPNEGO connections.
Although at least AES128 is enforced pretty much everywhere, 56 is required
for backwards compatibility with systems that announce wrong SSF.
Signed-off-by: Christian Heimes <cheimes(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2813/head:pr2813
git checkout pr2813