May 2019 - FreeIPA-devel - Fedora mailing-lists

[freeipa PR#3176][opened] [testing_master] Nightly PR
by freeipa-pr-ci 25 May '19

25 May '19

URL: https://github.com/freeipa/freeipa/pull/3176 Author: freeipa-pr-ci Title: #3176: [testing_master] Nightly PR Action: opened PR body: """ None """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3176/head:pr3176 git checkout pr3176

1 1

[freeipa PR#3157][opened] NSSDatabase: fix get_trust_chain
by flo-renaud 24 May '19

24 May '19

URL: https://github.com/freeipa/freeipa/pull/3157 Author: flo-renaud Title: #3157: NSSDatabase: fix get_trust_chain Action: opened PR body: """ In the get_trust_chain method, use certutil -O with the option --simple-self-signed to make sure that self-signed certs properly get processed. Note: this option has been introduced in nss 3.38 and our spec file already requires nss >= 3.41. Scenario: when IPA CA is switched from self-signed to externally-signed, then back to self-signed, the same nickname can be used in /etc/pki/pki-tomcat/alias for the initial cert and the renewed certs. If the original and renewed certs are present in the NSS db, running $ certutil -O -n <IPA CA alias> produces a complex output like the following (this command is used to find the trust chain): "CN=Cert Auth,O=ExtAuth" [CN=Cert Auth,O=ExtAuth] "caSigningCert cert-pki-ca" [CN=Certificate Authority,O=DOMAIN.COM] "caSigningCert cert-pki-ca" [CN=Certificate Authority,O=DOMAIN.COM] The renewal code is disturbed by this output. If, on the contrary, certutil -O --simple-self-signed -n <IPA CA alias> is used to extract the trust chain, the output is as expected for a self-signed cert: "caSigningCert cert-pki-ca" [CN=Certificate Authority,O=DOMAIN.COM] As a result, the scenario self-signed > externally signed > self-signed works. Fixes: https://pagure.io/freeipa/issue/7926 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3157/head:pr3157 git checkout pr3157

2 1

[freeipa PR#3182][opened] [Backport][ipa-4-7] Switch nsslapd-unhashed-pw-switch to nolog
by flo-renaud 24 May '19

24 May '19

URL: https://github.com/freeipa/freeipa/pull/3182 Author: flo-renaud Title: #3182: [Backport][ipa-4-7] Switch nsslapd-unhashed-pw-switch to nolog Action: opened PR body: """ This PR was opened automatically because PR #2935 was pushed to master and backport to ipa-4-7 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3182/head:pr3182 git checkout pr3182

1 1

[freeipa PR#3181][opened] [Backport][ipa-4-6] Switch nsslapd-unhashed-pw-switch to nolog
by flo-renaud 24 May '19

24 May '19

URL: https://github.com/freeipa/freeipa/pull/3181 Author: flo-renaud Title: #3181: [Backport][ipa-4-6] Switch nsslapd-unhashed-pw-switch to nolog Action: opened PR body: """ This PR was opened automatically because PR #2935 was pushed to master and backport to ipa-4-6 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3181/head:pr3181 git checkout pr3181

1 1

[freeipa PR#2935][opened] Switch nsslapd-unhashed-pw-switch to nolog
by tbordaz 24 May '19

24 May '19

URL: https://github.com/freeipa/freeipa/pull/2935 Author: tbordaz Title: #2935: Switch nsslapd-unhashed-pw-switch to nolog Action: opened PR body: """ 389-ds will change the default value of nsslapd-unhashed-pw-switch from 'on' to 'off' For new IPA instance this attribute is set to 'nolog'. For upgraded IPA instance, it replaces 'off' with 'nolog'. In case of winsync deployement: For new IPA instance where the attribute have been set to 'nolog', it is changed to 'on' when a replication agreement is created toward AD. For upgrade IPA instance, the attribute was already set to 'on'. Upgrade does not change it https://pagure.io/freeipa/issue/4812 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2935/head:pr2935 git checkout pr2935

2 1

[freeipa PR#3170][opened] [testing_f28] Nightly PR
by freeipa-pr-ci 24 May '19

24 May '19

URL: https://github.com/freeipa/freeipa/pull/3170 Author: freeipa-pr-ci Title: #3170: [testing_f28] Nightly PR Action: opened PR body: """ None """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3170/head:pr3170 git checkout pr3170

1 1

[freeipa PR#3142][opened] check test_installation
by wladich 23 May '19

23 May '19

URL: https://github.com/freeipa/freeipa/pull/3142 Author: wladich Title: #3142: check test_installation Action: opened PR body: """ """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3142/head:pr3142 git checkout pr3142

1 1

[freeipa PR#3177][opened] [Backport][ipa-4-7] Order of master and replica corrected in logger.info
by flo-renaud 23 May '19

23 May '19

URL: https://github.com/freeipa/freeipa/pull/3177 Author: flo-renaud Title: #3177: [Backport][ipa-4-7] Order of master and replica corrected in logger.info Action: opened PR body: """ This PR was opened automatically because PR #3171 was pushed to master and backport to ipa-4-7 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3177/head:pr3177 git checkout pr3177

1 1

[freeipa PR#3171][opened] Order of master and replica corrected in logger.info
by kaleemsiddiqu 23 May '19

23 May '19

URL: https://github.com/freeipa/freeipa/pull/3171 Author: kaleemsiddiqu Title: #3171: Order of master and replica corrected in logger.info Action: opened PR body: """ Order of master/replica was incorect which has been corrected Signed-off-by: Kaleemullah Siddiqui <ksiddiqu(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3171/head:pr3171 git checkout pr3171

2 1

[freeipa PR#3175][opened] [Backport][ipa-4-6] CA: set ipaconfigstring:compatCA in cn=DOMAIN IPA CA
by flo-renaud 23 May '19

23 May '19

URL: https://github.com/freeipa/freeipa/pull/3175 Author: flo-renaud Title: #3175: [Backport][ipa-4-6] CA: set ipaconfigstring:compatCA in cn=DOMAIN IPA CA Action: opened PR body: """ Manual backport of PR #3169 to ipa-4-6 branch. Cherry-pick without any merge issue. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3175/head:pr3175 git checkout pr3175

1 1

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-devel May 2019