[freeipa PR#3289][opened] stageuser-find: fix search with non-posix user
by flo-renaud
URL: https://github.com/freeipa/freeipa/pull/3289
Author: flo-renaud
Title: #3289: stageuser-find: fix search with non-posix user
Action: opened
PR body:
"""
### stageuser-find: fix search with non-posix user
`ipa stageuser-find` fails to return a staged user if it does not contain the posixaccount objectclass.
The code is replacing the search filter (objectclass=posixaccount) with (|(objectclass=posixaccount)(objectclass=inetorgperson)) so it should work in theory.
The issue is that on python2 the filter has been hexlified before reaching the stageuser plugin, hence filter.replace does not recognize the pattern (objectclass=posixaccount).
The fix consists in creating the filter with a call to ldap.make_filter_from_attr() that will hexlify too, if needed.
Fixes: https://pagure.io/freeipa/issue/7983
### ipatests: add a test for stageuser-find with non-posix account
Add a new XMLRPC test with the following scenario:
- ldapadd a user without the posixaccount objectclass
- call ipa stageuser-find <user>
- check that 1 entry is returned
Related: https://pagure.io/freeipa/issue/7983
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/3289/head:pr3289
git checkout pr3289
4 years, 2 months
[freeipa PR#3304][opened] Make use of `named` well-known service
by stanislavlevin
URL: https://github.com/freeipa/freeipa/pull/3304
Author: stanislavlevin
Title: #3304: Make use of `named` well-known service
Action: opened
PR body:
"""
The systemd unit name of `named`(which is actually used) is platform-dependent:
debian - bind9-pkcs11.service
fedora - named-pkcs11.service
redhat - named-pkcs11.service
Other systems may have their own name of `bind` service.
But the default one (`named-pkcs11`) is assumed in many tests.
Of course, these tests fail on such platforms.
This can be easily fixed.
All platforms define well-known service `named`, which is linked to
the actually utilized one.
Fixes: https://pagure.io/freeipa/issue/7990
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/3304/head:pr3304
git checkout pr3304
4 years, 2 months