URL: https://github.com/freeipa/freeipa/pull/4341
Author: abbra
Title: #4341: [Backport][ipa-4-7] Add secret to ajp connector
Action: opened
PR body:
"""
This PR was opened automatically because PR #4337 was pushed to master and backport to ipa-4-7 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4341/head:pr4341
git checkout pr4341
URL: https://github.com/freeipa/freeipa/pull/4340
Author: flo-renaud
Title: #4340: [Backport][ipa-4-8] Add secret to ajp connector
Action: opened
PR body:
"""
This PR was opened automatically because PR #4337 was pushed to master and backport to ipa-4-8 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4340/head:pr4340
git checkout pr4340
URL: https://github.com/freeipa/freeipa/pull/4339
Author: tiran
Title: #4339: Cleanup SELinux policy
Action: opened
PR body:
"""
* Remove FC for /usr/libexec/ipa/com.redhat.idm.trust-fetch-domains. The
file has been moved to oddjobs/ subdirectory a long time ago.
* Simplify FC for oddjob scripts. All com.redhat.idm.* and org.freeipa.*
scripts are labeled as ipa_helper_exec_t.
* use miscfiles_read_generic_certs() instead of deprecated
miscfiles_read_certs() to address the warning:
```
Warning: miscfiles_read_certs() has been deprecated, please use miscfiles_read_generic_certs() instead.
```
(Also add org.freeipa.server.trust-enable-agent to .gitignore)
Related: https://pagure.io/freeipa/issue/6891
Signed-off-by: Christian Heimes <cheimes(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4339/head:pr4339
git checkout pr4339
URL: https://github.com/freeipa/freeipa/pull/3955
Author: wladich
Title: #3955: ipatests: add test for SSSD updating expired cache items
Action: opened
PR body:
"""
**Patch 1:**
New test checks that sssd updates expired cahce values both for IPA domain and trusted AD domain.
Related to: https://pagure.io/SSSD/sssd/issue/4012
**Patch 2:**
ipatests: refactor sssd tests for cached_auth_timeout option
No changes in test scenarios or coverage. Changes:
* Renamed parameter user => user_origin for consistency with new tests
* evaluate user name once per testcase to reduce copy-pastes
* evauate wait time in a more natural way
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/3955/head:pr3955
git checkout pr3955
URL: https://github.com/freeipa/freeipa/pull/4302
Author: mrizwan93
Title: #4302: ipatest:Test if getcert creates cacert file with -F option
Action: opened
PR body:
"""
It took longer to create the cacert file in older version.
restarting the certmonger service creates the file at the location
specified by -F option. This fix is to check that cacert file
creates immediately after certificate goes into MONITORING state.
related: https://pagure.io/freeipa/issue/8105
Signed-off-by: Mohammad Rizwan Yusuf <myusuf(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4302/head:pr4302
git checkout pr4302
URL: https://github.com/freeipa/freeipa/pull/4343
Author: fcami
Title: #4343: certstore.get_ca_certs(): order CA certs
Action: opened
PR body:
"""
Currently, get_ca_certs() returns a non-ordered list of CA
certificates. ipa-certupdate then writes that list to ca.crt.
However, ldapsearch and other tools expect the first certificate
in ca.crt to be valid. This is not the case if the first
cACertificate attribute contains an expired certificate.
get_ca_certs() will now insert in front of the list the current
certificates, and append the ones which are either not yet valid
or not valid anymore, making sure the first certificate in front
of the list is current.
Fixes: https://pagure.io/freeipa/issue/8223
Signed-off-by: François Cami <fcami(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4343/head:pr4343
git checkout pr4343