[freeipa PR#2919][opened] Add ipa-cert-fix tool
by frasertweedale
URL: https://github.com/freeipa/freeipa/pull/2919
Author: frasertweedale
Title: #2919: Add ipa-cert-fix tool
Action: opened
PR body:
"""
The ipa-cert-fix tool wraps `pki-server cert-fix`, performing additional
certificate requests for non-Dogtag IPA certificates and performing
additional actions. In particular:
- Run cert-fix with arguments particular to the IPA deployment.
- Update IPA RA certificate in the ipara user entry (if renewed).
- Add shared certificates (if renewed) to the ca_renewal LDAP
container for replication.
- Become the CA renewal master if shared certificates were renewed.
This ensures other CA replicas, including the previous CA renewal
master if not the current host, pick up those new certificates
when Certmonger attempts to renew them.
Fixes: https://pagure.io/freeipa/issue/7885
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2919/head:pr2919
git checkout pr2919
5 years
[freeipa PR#2756][opened] Add test case for configure_openldap_conf
by tiran
URL: https://github.com/freeipa/freeipa/pull/2756
Author: tiran
Title: #2756: Add test case for configure_openldap_conf
Action: opened
PR body:
"""
New test case is failing with:
```
======================================================================= test session starts ========================================================================
platform linux -- Python 3.7.2, pytest-3.6.4, py-1.5.4, pluggy-0.6.0 -- /usr/bin/python3
cachedir: ipatests/.pytest_cache
rootdir: /home/heimes/redhat/freeipa/ipatests, inifile:
plugins: sourceorder-0.5, multihost-3.0
collected 1 item
ipatests/test_ipaclient/test_ldapconf.py::test_configure_openldap_conf FAILED [100%]
============================================================================= FAILURES =============================================================================
___________________________________________________________________ test_configure_openldap_conf ___________________________________________________________________
def test_configure_openldap_conf():
text, settings = ldap_conf("")
assert '# File modified by ipa-client-install' in text
assert settings == {
'BASE': ['cn=ipa,cn=example'],
'URI': ['ldaps://ldap.ipa.example'],
'TLS_CACERT': ['/etc/ipa/ca.crt'],
'SASL_MECH': ['GSSAPI']
}
text, settings = ldap_conf(LDAP_CONF)
assert '# File modified by ipa-client-install' in text
> assert settings == {
'BASE': ['dc=example,dc=com'],
'URI': ['ldaps://ldap.ipa.example'],
'SASL_NOCANON': ['on'],
'TLS_CACERT': ['/etc/ipa/ca.crt'],
'SASL_MECH': ['GSSAPI']
}
E AssertionError: assert {'BASE': ['dc...ca.crt'], ...} == {'BASE': ['dc=...ca.crt'], ...}
E Omitting 4 identical items, use -vv to show
E Differing items:
E {'URI': ['ldap://ldap.example.com ldap://ldap-master.example.com:666', 'ldaps://ldap.ipa.example']} != {'URI': ['ldaps://ldap.ipa.example']}
E Full diff:
E {'BASE': ['dc=example,dc=com'],
E 'SASL_MECH': ['GSSAPI'],
E 'SASL_NOCANON': ['on'],...
E
E ...Full output truncated (7 lines hidden), use '-vv' to show
ipatests/test_ipaclient/test_ldapconf.py:67: AssertionError
```
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2756/head:pr2756
git checkout pr2756
5 years
[freeipa PR#2857][opened] Fix installation when CA subject DN has escapes
by frasertweedale
URL: https://github.com/freeipa/freeipa/pull/2857
Author: frasertweedale
Title: #2857: Fix installation when CA subject DN has escapes
Action: opened
PR body:
"""
There were several bugs across several projects preventing
installation when the CA subject DN contains characters that need
escaping in the string representation, e.g.
CN=Certificate Authority,O=Acme\, Inc.,ST=Massachusetts,C=US
The package versions containing relevant fixes are:
- 389-ds-base 1.4.0.20 (we already require >= 1.4.0.21)
- pki-core 10.5.5 (we already require >= 10.6.8)
- certmonger 0.79.7 (this commit bumps the dependency)
With this change, installation will now work. Integration tests are
left for a subsequent commit.
Fixes: https://pagure.io/freeipa/issue/7347
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2857/head:pr2857
git checkout pr2857
5 years