February 2021 - FreeIPA-devel - Fedora mailing-lists

[freeipa PR#5573][opened] WIP: Exercise the healthcheck tests to check for DBusError
by rcritten 26 Mar '21

26 Mar '21

URL: https://github.com/freeipa/freeipa/pull/5573 Author: rcritten Title: #5573: WIP: Exercise the healthcheck tests to check for DBusError Action: opened PR body: """ We saw the DBusError.NoReply failure in a downstream test. Exercise it a bit. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5573/head:pr5573 git checkout pr5573

2 3

[freeipa PR#5256][opened] Handle multiple AJP adapters during upgrade
by cipherboy 25 Mar '21

25 Mar '21

URL: https://github.com/freeipa/freeipa/pull/5256 Author: cipherboy Title: #5256: Handle multiple AJP adapters during upgrade Action: opened PR body: """ In this patch, we ensure we upgrade all AJP adapters with the same secret value if any are missing. This ensures that both IPv4 and IPv6 adapters have the same secret value, so whichever httpd connects to will be in sync. This is consistent with what Dogtag does when provisioning them. Notably missing from this patch is handling of multiple unrelated AJP adapters. In an IPA scenario (and default PKI scenario) this shouldn't be necessary. However, with external load balancing, this might happen. This patch benefits IPA in the scenario when: 1. `pkispawn` runs on an older PKI version (pre-AJP secret, so ~8.2?) 2. pki gets upgraded to 10.10.1 before IPA can provision a secret, resulting in split IPv4/IPv6 adapters -- this would only happen on a direct migration from 8.2 -> 8.4 3. ipa upgrade script then runs to provision an AJP secret value for use with both Dogtag and IPA. Without this patch, only the first (IPv4) adapter would have a secret value provisioned in the above scenario. `Signed-off-by: Alexander Scheel <ascheel(a)redhat.com>` --- Is this scenario likely? Or will IPA have provisioned a secret anyway on older PKI versions? I do not know. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5256/head:pr5256 git checkout pr5256

2 1

[freeipa PR#5562][opened] ipatests: Enable certbot test on rhel
by mrizwan93 23 Mar '21

23 Mar '21

URL: https://github.com/freeipa/freeipa/pull/5562 Author: mrizwan93 Title: #5562: ipatests: Enable certbot test on rhel Action: opened PR body: """ With this change, certbot test will be running on rhel. certbot is not avilable on rhel through repository or epel. Plan is to install certbot using pip on rhel and increase the test coverage on rhel Signed-off-by: Mohammad Rizwan <myusuf(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5562/head:pr5562 git checkout pr5562

2 1

[freeipa PR#5555][opened] [Backport][ipa-4-8] [ipatests][Azure Pipelines] Populate containers with self-AAAA records
by stanislavlevin 23 Mar '21

23 Mar '21

URL: https://github.com/freeipa/freeipa/pull/5555 Author: stanislavlevin Title: #5555: [Backport][ipa-4-8] [ipatests][Azure Pipelines] Populate containers with self-AAAA records Action: opened PR body: """ This PR was opened manually because PR #5486 was pushed to master and backport to ipa-4-8 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5555/head:pr5555 git checkout pr5555

2 1

[freeipa PR#5438][opened] [PoC] Add support for subuid and subgid
by tiran 19 Mar '21

19 Mar '21

URL: https://github.com/freeipa/freeipa/pull/5438 Author: tiran Title: #5438: [PoC] Add support for subuid and subgid Action: opened PR body: """ See: https://pagure.io/freeipa/issue/8361 Signed-off-by: Christian Heimes <cheimes(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5438/head:pr5438 git checkout pr5438

1 1

[freeipa PR#5589][opened] freeipa.spec: synchronize with Fedora for 389-ds and PKI versions
by abbra 10 Mar '21

10 Mar '21

URL: https://github.com/freeipa/freeipa/pull/5589 Author: abbra Title: #5589: freeipa.spec: synchronize with Fedora for 389-ds and PKI versions Action: opened PR body: """ - 389-ds fixes an information disclosure during unsuccessful LDAP BIND operation, CVE-2020-35518, https://github.com/389ds/389-ds-base/issues/4609 - Dogtag PKI adopted to work with 389-ds with the fix, https://github.com/dogtagpki/pki/issues/3458 FreeIPA needs to require new Dogtag and 389-ds versions on all Fedora and RHEL versions. I am leaving RHEL 8 version intact yet for 389-ds because it wasn't updated yet but Dogtag PKI version was already built. In order to avoid excessive %if/%endif conditionals in the spec file, I have added a short Lua table with 389-ds versions for F32-33. F34 and Rawhide will fallback to the same newer 389-ds 2.0.3 version. We do not support building on F31 or older Fedora anymore as they are EOLed already. Fixes: https://pagure.io/freeipa/issue/8705 Signed-off-by: Alexander Bokovoy <abokovoy(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5589/head:pr5589 git checkout pr5589

1 1

[freeipa PR#4923][opened] Add support for app passwords
by RichardKalinec 07 Mar '21

07 Mar '21

URL: https://github.com/freeipa/freeipa/pull/4923 Author: RichardKalinec Title: #4923: Add support for app passwords Action: opened PR body: """ Users will be able to have additional passwords besides the primary one - app passwords. They will be usable for accessing all systems and services that his/her FreeIPA account is used for, but not to manage the account (including configuring the app passwords). Resolves: https://pagure.io/freeipa/issue/4510 Design page and its discussion: https://github.com/freeipa/freeipa/pull/4061 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/4923/head:pr4923 git checkout pr4923

2 1

[freeipa PR#4061][opened] doc/designs: Add a design page for application-specific passwords
by RichardKalinec 07 Mar '21

07 Mar '21

URL: https://github.com/freeipa/freeipa/pull/4061 Author: RichardKalinec Title: #4061: doc/designs: Add a design page for application-specific passwords Action: opened PR body: """ This design page describes a new enhancement: application-specific passwords and permissions management for them. Users will be able to have additional passwords besides the primary one, and set permissions for them specifying what systems and services will each application-specific password have access to. Application-specific passwords will also be usable with other authentication mechanisms incorporating passwords, namely otp, radius and hardened. They will also be supported by ipa-kdb for Kerberos authentication. https://pagure.io/freeipa/issue/4510 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/4061/head:pr4061 git checkout pr4061

2 1

[freeipa PR#5456][opened] ipatests: Test to check sosreport collects healthcheck.log file
by menonsudhir 05 Mar '21

05 Mar '21

URL: https://github.com/freeipa/freeipa/pull/5456 Author: menonsudhir Title: #5456: ipatests: Test to check sosreport collects healthcheck.log file Action: opened PR body: """ This test creates healthcheck.log file in /var/log/ipa/healthcheck/ directory if its not present and then checks that when sosreport command is run it collects the healthcheck log file by checking the console log """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5456/head:pr5456 git checkout pr5456

2 1

[freeipa PR#5561][opened] Test #5474 with nightly tests on Fedora 33
by wladich 04 Mar '21

04 Mar '21

URL: https://github.com/freeipa/freeipa/pull/5561 Author: wladich Title: #5561: Test #5474 with nightly tests on Fedora 33 Action: opened PR body: """ """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5561/head:pr5561 git checkout pr5561

1 1

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-devel February 2021