URL: https://github.com/freeipa/freeipa/pull/2994
Author: tiran
Title: #2994: [Backport][ipa-4-7] Verify external CA's basic constraint pathlen
Action: opened
PR body:
"""
Manual backport of PR #7877
IPA no verifies that intermediate certs of external CAs have a basic
constraint path len of at least 1 and increasing.
Fixes: https://pagure.io/freeipa/issue/7877
Signed-off-by: Christian Heimes <cheimes(a)redhat.com>
Reviewed-By: Fraser Tweedale <ftweedal(a)redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2994/head:pr2994
git checkout pr2994
URL: https://github.com/freeipa/freeipa/pull/2989
Author: tiran
Title: #2989: Verify external CA's basic constraint pathlen
Action: opened
PR body:
"""
IPA no verifies that intermediate certs of external CAs have a basic constraint path len of at least 1 and increasing.
Fixes: https://pagure.io/freeipa/issue/7877
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2989/head:pr2989
git checkout pr2989
URL: https://github.com/freeipa/freeipa/pull/2813
Author: tiran
Title: #2813: Require a minimum SASL security factor of 56
Action: opened
PR body:
"""
SSF_MINX 56 level ensures data integrity and confidentiality for SASL
GSSAPI and SASL GSS SPNEGO connections.
Although at least AES128 is enforced pretty much everywhere, 56 is required
for backwards compatibility with systems that announce wrong SSF.
Signed-off-by: Christian Heimes <cheimes(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2813/head:pr2813
git checkout pr2813
URL: https://github.com/freeipa/freeipa/pull/2988
Author: abbra
Title: #2988: Samba 4.9 related backport to ipa-4-6
Action: opened
PR body:
"""
When backporting Samba related patches for ticket https://pagure.io/freeipa/issue/7705, we missed two patches on top of those in ipa-4-6 backport.
As result, FreeIPA 4.6.5 does not work with Samba 4.9 because we aren't able to set up group mapping for BUILTIN\Guests properly.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2988/head:pr2988
git checkout pr2988
URL: https://github.com/freeipa/freeipa/pull/2981
Author: flo-renaud
Title: #2981: [Backport][ipa-4-6] Fix uninstallation test, use different method to stop dirsrv
Action: opened
PR body:
"""
This is a manual backport of PR #2266.
I cherry-picked only the first commit: 2064c72 Fix uninstallation test, use different method to stop dirsrv
and left out 11b3cdf Add uninstallation tests to night master and rawhide
because there is currently no nightly tests on ipa-4-6 branch
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2981/head:pr2981
git checkout pr2981