URL: https://github.com/freeipa/freeipa/pull/5939
Author: fcami
Title: #5939: ipaserver: disable resolved' stub resolver
Action: opened
PR body:
"""
Disable systemd-resolved stub resolver at install time.
Use systemd-resolved' maintained list of upstream DNS servers instead.
Rationale: systemd-resolved always resolves the FQDN to the local IP
and vice-versa. This breaks DNS zone detection and especially reverse
zone detection. This results in --auto-reverse being broken.
On systemd-resolved enabled systems, there are four ways to
configure resolv.conf:
* a symlink to /run/systemd/resolve/stub-resolv.conf
This is the default and uses both the 127.0.0.53 DNS stub plus
the search domains.
* a symlink to /usr/lib/systemd/resolv.conf
This only contains the 127.0.0.53 DNS stub.
* a symlink to /run/systemd/resolve/resolv.conf
This contains the upstream DNS IPs and bypasses systemd-resolved.
* Create and maintain /etc/resolv.conf directly.
Solutions #1 and #2 break DNS zone detection.
Solution #4 is not straightforward.
Combine Solution3 and 4: copy the file containing the upstream DNS IPs
so that it is properly maintained by NetworkManager after installation.
Fixes: https://pagure.io/freeipa/issue/8700
Signed-off-by: François Cami <fcami(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5939/head:pr5939
git checkout pr5939
URL: https://github.com/freeipa/freeipa/pull/5845
Author: pfandl
Title: #5845: component: Fix installation on hosts withouc /proc/1/sched.
Action: opened
PR body:
"""
My host does not have `/proc/1/sched` and this patch fixes the installation exception.
I have not tested the other code path where `ìs_hidepid` is `True`.
best regards
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5845/head:pr5845
git checkout pr5845
URL: https://github.com/freeipa/freeipa/pull/6049
Author: rcritten
Title: #6049: Make the schema cache TTL user-configurable
Action: opened
PR body:
"""
The API schema is not checked for changes until after a TTL
is expired. A one-hour TTL was hardcoded which makes development
tedious because the only way to force a schema update is to
remember to remove files between invocations.
This adds a new environment variable, schema_ttl, to configure
the TTL returned by the server to schema() calls. This can be
set low to ensure a frequent refresh during development.
If the client is in compat mode, that is if client is working
against a server that doesn't support the schema() command,
then use the client's schema_ttl instead so that the user still
has control.
https://pagure.io/freeipa/issue/8492
Signed-off-by: Rob Crittenden <rcritten(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/6049/head:pr6049
git checkout pr6049
URL: https://github.com/freeipa/freeipa/pull/6045
Author: flo-renaud
Title: #6045: Integrate SID configuration into base IPA installers
Action: opened
PR body:
"""
Implementation of the design available in PR #6033
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/6045/head:pr6045
git checkout pr6045
URL: https://github.com/freeipa/freeipa/pull/6063
Author: rcritten
Title: #6063: [Backport][ipa-4-9] ipatests: TestMultipleExternalCA: Create tempfiles on remote host
Action: opened
PR body:
"""
This PR was opened automatically because PR #6054 was pushed to master and backport to ipa-4-9 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/6063/head:pr6063
git checkout pr6063
URL: https://github.com/freeipa/freeipa/pull/6062
Author: rcritten
Title: #6062: [Backport][ipa-4-9] On redhat-based platforms rely on authselect to enable sudo
Action: opened
PR body:
"""
This PR was opened automatically because PR #6047 was pushed to master and backport to ipa-4-9 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/6062/head:pr6062
git checkout pr6062
URL: https://github.com/freeipa/freeipa/pull/6046
Author: ssidhaye
Title: #6046: Test to check ipa ca-show <authority ID> error handling
Action: opened
PR body:
"""
Test to verify if the case of a request for /ca/rest/authority/{id}/c…ert (or .../chain)
where {id} is an unknown authority ID.
Test Steps:
1. Setup a freeipa server and a replica
2. Stop ipa-custodia service on replica
3. Create a LWCA on the replica
4. Verify LWCA is recognized on the server
5. Run `ipa ca-show <LWCA>`
Signed-off-by: Sumedh Sidhaye <ssidhaye(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/6046/head:pr6046
git checkout pr6046
URL: https://github.com/freeipa/freeipa/pull/6061
Author: wladich
Title: #6061: ipatests: use AD domain name from config instead of hardcoded value
Action: opened
PR body:
"""
The test fails when test config contains AD domain value other than one hardcoded in the test code.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/6061/head:pr6061
git checkout pr6061
URL: https://github.com/freeipa/freeipa/pull/6054
Author: stanislavlevin
Title: #6054: ipatests: TestMultipleExternalCA: Create tempfiles on remote host
Action: opened
PR body:
"""
Previously, `test_master_install_ca1` and `test_master_install_ca2`
attempt to create tempdirs on local host and later write some
content into the returned paths on remote host. This fails if
a remote host is a local one.
The existent `create_temp_file` function has been extended to
support `suffix` option of `mktemp`.
Fixes: https://pagure.io/freeipa/issue/9013
Signed-off-by: Stanislav Levin <slev(a)altlinux.org>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/6054/head:pr6054
git checkout pr6054
URL: https://github.com/freeipa/freeipa/pull/6047
Author: rcritten
Title: #6047: On redhat-based platforms rely on authselect to enable sudo
Action: opened
PR body:
"""
The default platform task enable_sssd_sudo() writes directly
to nsswitch.conf to enable sudo. This isn't necessary to do on
systems with authselect where we already pass in with-sudo as a
profile option.
Override the default function with does a direct write with a no-op.
https://pagure.io/freeipa/issue/8755
Signed-off-by: Rob Crittenden <rcritten(a)redhat.com>
I think the existing tests will exercise whether the client is configured properly and sudo works.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/6047/head:pr6047
git checkout pr6047
URL: https://github.com/freeipa/freeipa/pull/6059
Author: flo-renaud
Title: #6059: [Backport][ipa-4-9] ipa-client-samba uninstall: remove tdb files
Action: opened
PR body:
"""
This PR was opened automatically because PR #6056 was pushed to master and backport to ipa-4-9 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/6059/head:pr6059
git checkout pr6059
URL: https://github.com/freeipa/freeipa/pull/6056
Author: flo-renaud
Title: #6056: ipa-client-samba uninstall: remove tdb files
Action: opened
PR body:
"""
ipa-client-samba uninstaller must remove samba *.tdb files
in /var/lib/samba. The current code calls rm on the relative
path filename instead of building an absolute path filename,
resulting in failure to remove the tdb files.
Fixes: https://pagure.io/freeipa/issue/8687
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/6056/head:pr6056
git checkout pr6056
URL: https://github.com/freeipa/freeipa/pull/6058
Author: miskopo
Title: #6058: [Backport][ipa-4-9] ipatests: webui: Specify configuration loader
Action: opened
PR body:
"""
This PR was opened automatically because PR #6050 was pushed to master and backport to ipa-4-9 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/6058/head:pr6058
git checkout pr6058
URL: https://github.com/freeipa/freeipa/pull/6057
Author: flo-renaud
Title: #6057: [Backport][ipa-4-9] azure: Don't customize pip's builddir
Action: opened
PR body:
"""
This PR was opened automatically because PR #6053 was pushed to master and backport to ipa-4-9 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/6057/head:pr6057
git checkout pr6057
URL: https://github.com/freeipa/freeipa/pull/6055
Author: stanislavlevin
Title: #6055: [Backport][ipa-4-8] ipatests: Update the subca used in TestIPACommand::test_cacert_manage
Action: opened
PR body:
"""
This PR was opened manually because PR #6043 was pushed to master and backport to ipa-4-8 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/6055/head:pr6055
git checkout pr6055
URL: https://github.com/freeipa/freeipa/pull/6053
Author: stanislavlevin
Title: #6053: azure: Don't customize pip's builddir
Action: opened
PR body:
"""
As of 21.3 pip:
> Remove the --build-dir option and aliases, one last time. (pypa/pip#10485)
https://pip.pypa.io/en/stable/news/#v21-3
Previous versions warn about deprecation.
The builddir is provided to pip via env variable PIP_BUILD in Tox task.
The purpose of changing of default builddir was noexec mount option for
/tmp in Travis (see 17d571c961). Since Travis is no longer used and
Azure lacks this issue the PIP_BUILD can be safely removed.
Note: pip 21.3 just ignores this env variable, which is more than can be
said for the command line option. It's better to clean it up, since the
behaviour may be changed in future.
Fixes: https://pagure.io/freeipa/issue/9011
Signed-off-by: Stanislav Levin <slev(a)altlinux.org>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/6053/head:pr6053
git checkout pr6053
URL: https://github.com/freeipa/freeipa/pull/6052
Author: flo-renaud
Title: #6052: [Backport][ipa-4-9] seccomp profile: Default to ENOSYS instead of EPERM
Action: opened
PR body:
"""
This PR was opened automatically because PR #6048 was pushed to master and backport to ipa-4-9 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/6052/head:pr6052
git checkout pr6052
URL: https://github.com/freeipa/freeipa/pull/6044
Author: flo-renaud
Title: #6044: [Backport][ipa-4-9] ipatests: Update the subca used in TestIPACommand::test_cacert_manage
Action: opened
PR body:
"""
This PR was opened automatically because PR #6043 was pushed to master and backport to ipa-4-9 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/6044/head:pr6044
git checkout pr6044
URL: https://github.com/freeipa/freeipa/pull/6031
Author: rcritten
Title: #6031: Improve sudooption docs, make the option multi-value
Action: opened
PR body:
"""
I don't know why this wasn't always multi-value but if one wanted
to set multiple options they needed to call add-option multiple
times. The LDAP attribute is already multi-value.
This shouldn't cause API issues as it understood the attribute as
multi-value just didn't expose it. Client output on the CLI will
look a bit different:
Added option "('one', 'two')" to Sudo Rule "test"
or
Added option "(u'one', u'Two')" to Sudo Rule "test"
instead of with this change:
Added option "one,two" to Sudo Rule "test"
https://pagure.io/freeipa/issue/2278
Signed-off-by: Rob Crittenden <rcritten(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/6031/head:pr6031
git checkout pr6031
URL: https://github.com/freeipa/freeipa/pull/6042
Author: flo-renaud
Title: #6042: [Backport][ipa-4-9] Make Dogtag return XML for ipa cert-find
Action: opened
PR body:
"""
This PR was opened automatically because PR #6014 was pushed to master and backport to ipa-4-9 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/6042/head:pr6042
git checkout pr6042
URL: https://github.com/freeipa/freeipa/pull/6043
Author: flo-renaud
Title: #6043: ipatests: Update the subca used in TestIPACommand::test_cacert_manage
Action: opened
PR body:
"""
The above test is installing 2 Let's Encrypt certificates:
the root ISRG Root X1 and a subca. The subca expired Oct 6 and needs to
be replaced with a valid one, otherwise ipa-cacert-manage install
refuses to install it.
Fixes: https://pagure.io/freeipa/issue/9006
Signed-off-by: Florence Blanc-Renaud <flo(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/6043/head:pr6043
git checkout pr6043
URL: https://github.com/freeipa/freeipa/pull/6040
Author: wladich
Title: #6040: [Backport][ipa-4-9] ipatests: fix failure in test_trust/test_extdom_plugin
Action: opened
PR body:
"""
This PR was opened automatically because PR #6022 was pushed to master and backport to ipa-4-9 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/6040/head:pr6040
git checkout pr6040
URL: https://github.com/freeipa/freeipa/pull/6041
Author: wladich
Title: #6041: [Backport][ipa-4-6] ipatests: fix failure in test_trust/test_extdom_plugin
Action: opened
PR body:
"""
This PR was opened automatically because PR #6022 was pushed to master and backport to ipa-4-6 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/6041/head:pr6041
git checkout pr6041
URL: https://github.com/freeipa/freeipa/pull/6039
Author: rcritten
Title: #6039: [Backport][ipa-4-9] webui test: close notification after selinux user map update
Action: opened
PR body:
"""
This PR was opened automatically because PR #6037 was pushed to master and backport to ipa-4-9 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/6039/head:pr6039
git checkout pr6039
URL: https://github.com/freeipa/freeipa/pull/6037
Author: flo-renaud
Title: #6037: webui test: close notification after selinux user map update
Action: opened
PR body:
"""
The test test_undo_refresh_reset_update_cancel is sometimes
failing because a notification obscures the selinuxmap record.
After saving the modification on the record, close any notification
to make sure the test succeeds.
Fixes: https://pagure.io/freeipa/issue/8846
Signed-off-by: Florence Blanc-Renaud <flo(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/6037/head:pr6037
git checkout pr6037
URL: https://github.com/freeipa/freeipa/pull/6038
Author: frozencemetery
Title: #6038: PoC: support new KDB version for Bronze Bit changes
Action: opened
PR body:
"""
(#5788 again as requested)
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/6038/head:pr6038
git checkout pr6038
URL: https://github.com/freeipa/freeipa/pull/6036
Author: wladich
Title: #6036: WIP: check fix for failure in test_extdom_plugin in ipa-4-6
Action: opened
PR body:
"""
This PR is only to run tests for #6022 in ipa-4-6 branch
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/6036/head:pr6036
git checkout pr6036