[freeipa PR#4909][opened] Add unauthenticated nsupdate
by fcami
URL: https://github.com/freeipa/freeipa/pull/4909
Author: fcami
Title: #4909: Add unauthenticated nsupdate
Action: opened
PR body:
"""
ipa-client-install: update sssd.conf if nsupdate requires -g
If dynamic DNS updates are selected, sssd will use GSS-TSIG
by default for nsupdate.
When ipa-client-install notices that plain nsupdate is required,
switch sssd to use no authentication for dynamic updates too.
Fixes: https://pagure.io/freeipa/issue/8402
+
ipa-client-install: invoke nsupdate twice (GSS-TSIG, plain)
ipa-client-install invokes nsupdate with GSS-TSIG at client
enrollment time. If that fails, no retry is done.
Change that behavior to try again without GSS-TSIG.
Fixes: https://pagure.io/freeipa/issue/8402
####
This is purely WIP:
- it needs a proper test
- there are more nsupdate calls that should be adapted.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4909/head:pr4909
git checkout pr4909
2 years, 3 months
[freeipa PR#4895][opened] Simplify and make more reliable the server and client installation checks
by rcritten
URL: https://github.com/freeipa/freeipa/pull/4895
Author: rcritten
Title: #4895: Simplify and make more reliable the server and client installation checks
Action: opened
PR body:
"""
Rather than relying on file existence and whether the installer backed up files actually set a value when the installation is complete for the client and server and use that.
For the server this can be reliable moving forward because we can detect the missing state and fix it on upgrades. On the client we're stuck so use it but leave the old method as a fallback. Also remove the requirement to pass in the filestore to the client check as that makes it more complex as a fact.
Both can be checked fairly easily with:
```
python -c 'from ipaclient.install.client import is_ipa_client_installed; print ("%s" % is_ipa_client_installed())'
python -c 'from ipaserver.install.installutils import is_ipa_configured; print("%s" % is_ipa_configured())'
```
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4895/head:pr4895
git checkout pr4895
3 years, 1 month