URL: https://github.com/freeipa/freeipa/pull/5518
Author: wladich
Title: #5518: [Backport][ipa-4-8] ipatests: use pexpect for controlling interactive command line utilities
Action: opened
PR body:
"""
This is a manual backport of #5460.
Link to pagure ticket was added to commit messages.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5518/head:pr5518
git checkout pr5518
URL: https://github.com/freeipa/freeipa/pull/5593
Author: wladich
Title: #5593: [Backport][ipa-4-9] ipatests: test Samba mount with NTLM authentication
Action: opened
PR body:
"""
This PR was opened automatically because PR #5570 was pushed to master and backport to ipa-4-9 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5593/head:pr5593
git checkout pr5593
URL: https://github.com/freeipa/freeipa/pull/5590
Author: frasertweedale
Title: #5590: [Backport][ipa-4-9] ipa-cert-fix: improve handling of 'pki-server cert-fix' failure
Action: opened
PR body:
"""
This PR was opened automatically because PR #5579 was pushed to master and backport to ipa-4-9 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5590/head:pr5590
git checkout pr5590
URL: https://github.com/freeipa/freeipa/pull/5579
Author: frasertweedale
Title: #5579: ipa-cert-fix: improve handling of 'pki-server cert-fix' failure
Action: opened
PR body:
"""
'pki-server cert-fix' has a known and expected failure when the DS
certificate is expired. 'ipa-cert-fix' handles this by
optimistically ignore the CalledProcessError and continuing when the
DS certificate was up for renewal.
This heuristic is a bit too optimistic. If 'pki-server cert-fix'
fails due and returns nonzero due to some other, more serious error
(as has been seen in the wild[1]), 'ipa-cert-fix' continues then
fails later with a more confusing error, for example:
[Errno 2] No such file or directory:
'/etc/pki/pki-tomcat/certs/27-renewed.crt'
[1] https://bugzilla.redhat.com/show_bug.cgi?id=1930586
Improve the heuristic by also checking whether output files
corresponding ot all of the "extra" certificate that we asked
'ipa-cert-fix' to renew, do indeed exist and are X.509 certificates.
Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1779984
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5579/head:pr5579
git checkout pr5579