URL: https://github.com/freeipa/freeipa/pull/5939
Author: fcami
Title: #5939: ipaserver: disable resolved' stub resolver
Action: opened
PR body:
"""
Disable systemd-resolved stub resolver at install time.
Use systemd-resolved' maintained list of upstream DNS servers instead.
Rationale: systemd-resolved always resolves the FQDN to the local IP
and vice-versa. This breaks DNS zone detection and especially reverse
zone detection. This results in --auto-reverse being broken.
On systemd-resolved enabled systems, there are four ways to
configure resolv.conf:
* a symlink to /run/systemd/resolve/stub-resolv.conf
This is the default and uses both the 127.0.0.53 DNS stub plus
the search domains.
* a symlink to /usr/lib/systemd/resolv.conf
This only contains the 127.0.0.53 DNS stub.
* a symlink to /run/systemd/resolve/resolv.conf
This contains the upstream DNS IPs and bypasses systemd-resolved.
* Create and maintain /etc/resolv.conf directly.
Solutions #1 and #2 break DNS zone detection.
Solution #4 is not straightforward.
Combine Solution3 and 4: copy the file containing the upstream DNS IPs
so that it is properly maintained by NetworkManager after installation.
Fixes: https://pagure.io/freeipa/issue/8700
Signed-off-by: François Cami <fcami(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5939/head:pr5939
git checkout pr5939
URL: https://github.com/freeipa/freeipa/pull/5845
Author: pfandl
Title: #5845: component: Fix installation on hosts withouc /proc/1/sched.
Action: opened
PR body:
"""
My host does not have `/proc/1/sched` and this patch fixes the installation exception.
I have not tested the other code path where `ìs_hidepid` is `True`.
best regards
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5845/head:pr5845
git checkout pr5845
URL: https://github.com/freeipa/freeipa/pull/6049
Author: rcritten
Title: #6049: Make the schema cache TTL user-configurable
Action: opened
PR body:
"""
The API schema is not checked for changes until after a TTL
is expired. A one-hour TTL was hardcoded which makes development
tedious because the only way to force a schema update is to
remember to remove files between invocations.
This adds a new environment variable, schema_ttl, to configure
the TTL returned by the server to schema() calls. This can be
set low to ensure a frequent refresh during development.
If the client is in compat mode, that is if client is working
against a server that doesn't support the schema() command,
then use the client's schema_ttl instead so that the user still
has control.
https://pagure.io/freeipa/issue/8492
Signed-off-by: Rob Crittenden <rcritten(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/6049/head:pr6049
git checkout pr6049
URL: https://github.com/freeipa/freeipa/pull/6045
Author: flo-renaud
Title: #6045: Integrate SID configuration into base IPA installers
Action: opened
PR body:
"""
Implementation of the design available in PR #6033
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/6045/head:pr6045
git checkout pr6045
URL: https://github.com/freeipa/freeipa/pull/6063
Author: rcritten
Title: #6063: [Backport][ipa-4-9] ipatests: TestMultipleExternalCA: Create tempfiles on remote host
Action: opened
PR body:
"""
This PR was opened automatically because PR #6054 was pushed to master and backport to ipa-4-9 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/6063/head:pr6063
git checkout pr6063
URL: https://github.com/freeipa/freeipa/pull/6062
Author: rcritten
Title: #6062: [Backport][ipa-4-9] On redhat-based platforms rely on authselect to enable sudo
Action: opened
PR body:
"""
This PR was opened automatically because PR #6047 was pushed to master and backport to ipa-4-9 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/6062/head:pr6062
git checkout pr6062
URL: https://github.com/freeipa/freeipa/pull/6046
Author: ssidhaye
Title: #6046: Test to check ipa ca-show <authority ID> error handling
Action: opened
PR body:
"""
Test to verify if the case of a request for /ca/rest/authority/{id}/c…ert (or .../chain)
where {id} is an unknown authority ID.
Test Steps:
1. Setup a freeipa server and a replica
2. Stop ipa-custodia service on replica
3. Create a LWCA on the replica
4. Verify LWCA is recognized on the server
5. Run `ipa ca-show <LWCA>`
Signed-off-by: Sumedh Sidhaye <ssidhaye(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/6046/head:pr6046
git checkout pr6046
URL: https://github.com/freeipa/freeipa/pull/6061
Author: wladich
Title: #6061: ipatests: use AD domain name from config instead of hardcoded value
Action: opened
PR body:
"""
The test fails when test config contains AD domain value other than one hardcoded in the test code.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/6061/head:pr6061
git checkout pr6061