December 2020 - FreeIPA-devel - Fedora mailing-lists

[freeipa PR#5339][opened] tentative fix: topology init uses monotonic clock
by flo-renaud 15 Jan '21

15 Jan '21

URL: https://github.com/freeipa/freeipa/pull/5339 Author: flo-renaud Title: #5339: tentative fix: topology init uses monotonic clock Action: opened PR body: """ """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5339/head:pr5339 git checkout pr5339

1 1

[freeipa PR#5386][opened] Fix ACME installation with pki-core 10.9
by abbra 15 Jan '21

15 Jan '21

URL: https://github.com/freeipa/freeipa/pull/5386 Author: abbra Title: #5386: Fix ACME installation with pki-core 10.9 Action: opened PR body: """ pki-core 10.9 uses different location for ACME LDAP content sources. As a result, provisioning CA fails on CentOS 8 Stream. Use any of the known locations for ACME LDAP schema, the correct location will be fixed up in the ipa-server-upgrade run afterwards. Fixes: https://pagure.io/freeipa/issue/8634 Signed-off-by: Alexander Bokovoy <abokovoy(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5386/head:pr5386 git checkout pr5386

1 1

[freeipa PR#5188][opened] [ipa-4-8] ipatests: update PR-CI templates to Fedora 33
by netoarmando 11 Jan '21

11 Jan '21

URL: https://github.com/freeipa/freeipa/pull/5188 Author: netoarmando Title: #5188: [ipa-4-8] ipatests: update PR-CI templates to Fedora 33 Action: opened PR body: """ "previous" updated to Fedora 32 "latest" updated to Fedora 33 Fedora 33 is not released yet, therefore templates were based on nightly composes. Signed-off-by: Armando Neto <abiagion(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5188/head:pr5188 git checkout pr5188

1 1

[freeipa PR#5187][opened] [master] ipatests: update PR-CI templates to Fedora 33
by netoarmando 11 Jan '21

11 Jan '21

URL: https://github.com/freeipa/freeipa/pull/5187 Author: netoarmando Title: #5187: [master] ipatests: update PR-CI templates to Fedora 33 Action: opened PR body: """ "previous" updated to Fedora 32 "latest" updated to Fedora 33 "rawhide" based on Fedora 34 389ds, testing and pki definitions updated to Fedora 33 Fedora 33 is not released yet, therefore templates were based on nightly composes. Signed-off-by: Armando Neto <abiagion(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5187/head:pr5187 git checkout pr5187

1 1

[freeipa PR#5385][opened] selinux: modify policy to allow one-way trust
by flo-renaud 09 Jan '21

09 Jan '21

URL: https://github.com/freeipa/freeipa/pull/5385 Author: flo-renaud Title: #5385: selinux: modify policy to allow one-way trust Action: opened PR body: """ In selinux enforcing mode, the command ipa trust-add fails to establish a one-way trust, during the step fetching the remote domains. This step calls a script over DBus and oddjob, that is executed with oddjob_t context. The policy must allow noatsecure. Currently the optional_policy is defined in selinux-policy repo but is ineffective as ipa_helper_noatsecure is not defined in this repo. When the optional_policy is defined in our own module, it is taken into account and ipa trust-add succeeds. Fixes: https://pagure.io/freeipa/issue/8508 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5385/head:pr5385 git checkout pr5385

1 1

[freeipa PR#5338][opened] ipa-cert-fix: do not fail when CSR is missing from CS.cfg
by flo-renaud 07 Jan '21

07 Jan '21

URL: https://github.com/freeipa/freeipa/pull/5338 Author: flo-renaud Title: #5338: ipa-cert-fix: do not fail when CSR is missing from CS.cfg Action: opened PR body: """ ### ipa-cert-fix: do not fail when CSR is missing from CS.cfg When the CSR for an expired cert is not found in /etc/pki/pki-tomcat/{ca|kra}/CS.cfg, ipa-cert-fix fails to renew the certificate and repair the installation. The CSR can be found using certmonger as it is stored in /var/lib/certmonger/requests/<ID> in the "csr" attribute. Prior to calling pki-server cert-fix, make sure that the CSR is present in CS.cfg, or update CS.cfg with the content found using certmonger. Fixes: https://pagure.io/freeipa/issue/8618 ### ipatests: add a test for ipa-cert-fix Add a new test for ipa-cert-fix issue 8618. When the CSR for one of the certs to be renewed is missing from /etc/pki/pki-tomcat/{ca|kra}/CS.cfg ipa-cert-fix fails to renew the certificates. Test scenario: move the date in the future to expire PKI system certificates (+3 years) delete the directive ca.sslserver.certreq from CS.cfg call ipa-cert-fix and ensure that the CSR was found Related: https://pagure.io/freeipa/issue/8618 ### ipatests: add test_ipa_cert_fix to the nightly definitions Add the new test test_integration/test_ipa_cert_fix.py to the nightly definitions. Related: https://pagure.io/freeipa/issue/8618 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5338/head:pr5338 git checkout pr5338

1 1

[freeipa PR#5350][opened] [WIP] ipatests: clear initgroups cache in clear_sssd_cache
by flo-renaud 06 Jan '21

06 Jan '21

URL: https://github.com/freeipa/freeipa/pull/5350 Author: flo-renaud Title: #5350: [WIP] ipatests: clear initgroups cache in clear_sssd_cache Action: opened PR body: """ The tasks module provides a method to clear sssd cache, but the method does not remove the file /var/lib/sss/mc/initgroups. Update the method to also remove this file. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5350/head:pr5350 git checkout pr5350

1 1

[freeipa PR#5344][opened] ipatests: ipahealthcheck remove test skipped in pytest run
by menonsudhir 06 Jan '21

06 Jan '21

URL: https://github.com/freeipa/freeipa/pull/5344 Author: menonsudhir Title: #5344: ipatests: ipahealthcheck remove test skipped in pytest run Action: opened PR body: """ TestIpaHealthCLI::test_input_file test was skipped due to bz1866558. Removed the below statement so that the test can now run as the bug is fixed. @pytest.mark.xfail(reason='BZ 1866558', strict=False) """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5344/head:pr5344 git checkout pr5344

2 1

[freeipa PR#5329][opened] [Backport][ipa-4-6] Improve PKI subsystem detection
by flo-renaud 06 Jan '21

06 Jan '21

URL: https://github.com/freeipa/freeipa/pull/5329 Author: flo-renaud Title: #5329: [Backport][ipa-4-6] Improve PKI subsystem detection Action: opened PR body: """ This is a manual backport of PR #5290 to ipa-4-6 branch. Cherry-pick had issues with the tests commit (missing imports, line length). """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5329/head:pr5329 git checkout pr5329

1 3

[freeipa PR#5253][opened] ipatests: Test for IPATrustControllerPrincipalCheck
by menonsudhir 06 Jan '21

06 Jan '21

URL: https://github.com/freeipa/freeipa/pull/5253 Author: menonsudhir Title: #5253: ipatests: Test for IPATrustControllerPrincipalCheck Action: opened PR body: """ This testcase checks when trust between IPA-AD is established successfully, IPATrustControllerPrincipalCheck displays result as SUCCESS """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5253/head:pr5253 git checkout pr5253

2 1

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-devel December 2020