URL: https://github.com/freeipa/freeipa/pull/5780
Author: stanislavlevin
Title: #5780: ipatests: dnssec: Add alternative approach for checking chain of trust
Action: opened
PR body:
"""
drill is currently broken on F34. Fortunately, there are another tools for checking DNSSEC trust. One of them is `delv`:
delv is a tool for sending DNS queries and validating the results,
using the same internal resolver and validator logic as named.
delv sends to a specified name server all queries needed to fetch and
validate the requested data; this includes the original requested query,
subsequent queries to follow CNAME or DNAME chains, queries for DNSKEY,
and DS records to establish a chain of trust for DNSSEC validation. It
does not perform iterative resolution, but simulates the behavior of a
name server configured for DNSSEC validating and forwarding.
- mark as XFAIL `test_chain_of_trust_drill` on F34
- conditionally skip `test_chain_of_trust_delv` (requires delv > 9.15.4 for `+yaml`)
Related: https://pagure.io/freeipa/issue/8793
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5780/head:pr5780
git checkout pr5780
URL: https://github.com/freeipa/freeipa/pull/5790
Author: stanislavlevin
Title: #5790: azure: bump F32->F34
Action: opened
PR body:
"""
Bundle of changes required for F34 on Azure.
Shuffling of tests between envs may still be required (under testing for stability).
Fixes: https://pagure.io/freeipa/issue/8848
Opened here for preview.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5790/head:pr5790
git checkout pr5790
URL: https://github.com/freeipa/freeipa/pull/5789
Author: flo-renaud
Title: #5789: [Backport][ipa-4-9] ipatests: kinit on server for test_proxycommand_invalid_shell
Action: opened
PR body:
"""
This PR was opened automatically because PR #5767 was pushed to master and backport to ipa-4-9 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5789/head:pr5789
git checkout pr5789
URL: https://github.com/freeipa/freeipa/pull/5785
Author: rcritten
Title: #5785: [Backport][ipa-4-9] Add argument for --entry option in ipa-managed-entries.1
Action: opened
PR body:
"""
This PR was opened automatically because PR #5783 was pushed to master and backport to ipa-4-9 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5785/head:pr5785
git checkout pr5785
URL: https://github.com/freeipa/freeipa/pull/5786
Author: rcritten
Title: #5786: [Backport][ipa-4-9] Remove -s option from ipa-ldap-updater usage
Action: opened
PR body:
"""
This PR was opened automatically because PR #5782 was pushed to master and backport to ipa-4-9 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5786/head:pr5786
git checkout pr5786
URL: https://github.com/freeipa/freeipa/pull/5787
Author: rcritten
Title: #5787: [Backport][ipa-4-9] Add ability to search on certificate revocation status
Action: opened
PR body:
"""
This is a manual backport of one commit from PR https://github.com/freeipa/freeipa/pull/5701
This adds the ability to search for certificates based on status.
The other commit from that PR is in the process of being reverted.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5787/head:pr5787
git checkout pr5787
URL: https://github.com/freeipa/freeipa/pull/5767
Author: rcritten
Title: #5767: ipatests: kinit on server for test_proxycommand_invalid_shell
Action: opened
PR body:
"""
We've seen some intermittent failures of this test with warnings
about passwords about to expire. We suspect there may be a time
difference between the client and server so set the passwords
on the server instead to be sure that time is correct.
https://pagure.io/freeipa/issue/8785
Signed-off-by: Rob Crittenden <rcritten(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5767/head:pr5767
git checkout pr5767
URL: https://github.com/freeipa/freeipa/pull/5788
Author: frozencemetery
Title: #5788: WIP: Bronze Bit KDB fixes
Action: opened
PR body:
"""
A WIP PR for this branch as requested. It is expected to not pass CI, which is for two reasons. First, it needs the [krb5 branch](https://github.com/krb5/krb5/pull/1159). Second, because the krb5 branch isn't all tested good - RBCD doesn't work right, and I'm still trying to get testing against local AD working. (If anyone is up for providing feedback on that, it would be appreciated.) And if I'm being honest, this code is probably buggy too, so that's three reasons.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5788/head:pr5788
git checkout pr5788
URL: https://github.com/freeipa/freeipa/pull/5784
Author: rcritten
Title: #5784: Revert "Only request VALID certs when revoking certs for a host/service"
Action: opened
PR body:
"""
This reverts commit aa1350384ad6a7d6b2f6056d99fbb43c5c5a6be7.
The search for certificates is a complex, three-step process,
which filters results in subsequent searches. This filters out
non-relevant certificates when deleting a host or service.
This patch breaks that so deleting one service of a host will
revoke *all* certificates for that host.
Another attempt will be made separately to implement this.
https://pagure.io/freeipa/issue/7835
Signed-off-by: Rob Crittenden rcritten(a)redhat.com
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5784/head:pr5784
git checkout pr5784
URL: https://github.com/freeipa/freeipa/pull/5723
Author: flo-renaud
Title: #5723: [Backport][ipa-4-9] Only request VALID certs when revoking certs for a host/service
Action: opened
PR body:
"""
This PR was opened automatically because PR #5701 was pushed to master and backport to ipa-4-9 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5723/head:pr5723
git checkout pr5723