June 2021 - FreeIPA-devel - Fedora mailing-lists

[freeipa PR#5862][opened] [Backport][ipa-4-9] plugins: Don't treat keys of API as bytes
by abbra 28 Jun '21

28 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5862 Author: abbra Title: #5862: [Backport][ipa-4-9] plugins: Don't treat keys of API as bytes Action: opened PR body: """ This PR was opened automatically because PR #5857 was pushed to master and backport to ipa-4-9 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5862/head:pr5862 git checkout pr5862

1 1

[freeipa PR#5856][opened] Increase timeout for test_commands.py
by menonsudhir 28 Jun '21

28 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5856 Author: menonsudhir Title: #5856: Increase timeout for test_commands.py Action: opened PR body: """ test_commands.py testsuite is failing with the error 'RunPytest timed out after 4800s' Hence the timeout has been increased from 4800 to 5400 Ref: https://github.com/freeipa-pr-ci2/freeipa/pull/996 Signed-off-by: Sudhir Menon <sumenon(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5856/head:pr5856 git checkout pr5856

2 1

[freeipa PR#5857][opened] plugins: Don't treat keys of API as bytes
by stanislavlevin 28 Jun '21

28 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5857 Author: stanislavlevin Title: #5857: plugins: Don't treat keys of API as bytes Action: opened PR body: """ The plugin `plugins` iterates over the keys of API instance, __iter__ of which is a generator of class.__name__ from (Command, Object, Method, Backend, Updater). So, the allowed type is str, not bytes. - fixed `plugins` plugin - added tests for `plugins` plugin - added tests for `env` plugin Fixes: https://pagure.io/freeipa/issue/8898 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5857/head:pr5857 git checkout pr5857

2 1

[freeipa PR#4909][opened] Add unauthenticated nsupdate
by fcami 28 Jun '21

28 Jun '21

URL: https://github.com/freeipa/freeipa/pull/4909 Author: fcami Title: #4909: Add unauthenticated nsupdate Action: opened PR body: """ ipa-client-install: update sssd.conf if nsupdate requires -g If dynamic DNS updates are selected, sssd will use GSS-TSIG by default for nsupdate. When ipa-client-install notices that plain nsupdate is required, switch sssd to use no authentication for dynamic updates too. Fixes: https://pagure.io/freeipa/issue/8402 + ipa-client-install: invoke nsupdate twice (GSS-TSIG, plain) ipa-client-install invokes nsupdate with GSS-TSIG at client enrollment time. If that fails, no retry is done. Change that behavior to try again without GSS-TSIG. Fixes: https://pagure.io/freeipa/issue/8402 #### This is purely WIP: - it needs a proper test - there are more nsupdate calls that should be adapted. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/4909/head:pr4909 git checkout pr4909

2 1

[freeipa PR#5859][opened] [Backport][ipa-4-9] WebUI: Fix certificate serial number representation
by serg-cymbaluk 25 Jun '21

25 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5859 Author: serg-cymbaluk Title: #5859: [Backport][ipa-4-9] WebUI: Fix certificate serial number representation Action: opened PR body: """ This PR was opened automatically because PR #5844 was pushed to master and backport to ipa-4-9 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5859/head:pr5859 git checkout pr5859

1 1

[freeipa PR#5854][opened] [Backport][ipa-4-9] ipatests: healthcheck: Update IPAHostKeytab assumptions
by rcritten 25 Jun '21

25 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5854 Author: rcritten Title: #5854: [Backport][ipa-4-9] ipatests: healthcheck: Update IPAHostKeytab assumptions Action: opened PR body: """ This PR was opened automatically because PR #5850 was pushed to master and backport to ipa-4-9 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5854/head:pr5854 git checkout pr5854

1 1

[freeipa PR#5844][opened] WebUI: Fix certificate serial number representation
by serg-cymbaluk 25 Jun '21

25 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5844 Author: serg-cymbaluk Title: #5844: WebUI: Fix certificate serial number representation Action: opened PR body: """ Big numbers are automatically translated to scientific notation in JavaScript. It causes an issue with some certificate serial numbers. The fix normalizes the notation base on original value from serial_number_hex. The implementation works only for browsers that support BigInt. It would not work for old browsers like Internet Explorer. Ticket: https://pagure.io/freeipa/issue/8754 Signed-off-by: Serhii Tsymbaliuk <stsymbal(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5844/head:pr5844 git checkout pr5844

1 1

[freeipa PR#5850][opened] ipatests: healthcheck: Update IPAHostKeytab assumptions
by stanislavlevin 23 Jun '21

23 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5850 Author: stanislavlevin Title: #5850: ipatests: healthcheck: Update IPAHostKeytab assumptions Action: opened PR body: """ As of 0.9 freeipa-healthcheck requires running `dirsrv` service for `IPAHostKeytab` check. So, previous assumption about the triggering the GSSAPI error no longer works. For example, this can be achieved by deletion of host's keytab. Fixes: https://pagure.io/freeipa/issue/8889 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5850/head:pr5850 git checkout pr5850

2 1

[freeipa PR#5851][opened] [Backport][ipa-4-9] ipatests: Test to check that ResponseNotReady error is not displayed when user session cache is deleted #5637
by menonsudhir 23 Jun '21

23 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5851 Author: menonsudhir Title: #5851: [Backport][ipa-4-9] ipatests: Test to check that ResponseNotReady error is not displayed when user session cache is deleted #5637 Action: opened PR body: """ This testcase checks that http.client.ResponseNotReady error is not displayed when user session cache is deleted. https://pagure.io/freeipa/issue/7752 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5851/head:pr5851 git checkout pr5851

2 1

[freeipa PR#5637][opened] ipatests: Test to check that ResponseNotReady error is not displayed when user session cache is deleted
by menonsudhir 22 Jun '21

22 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5637 Author: menonsudhir Title: #5637: ipatests: Test to check that ResponseNotReady error is not displayed when user session cache is deleted Action: opened PR body: """ This testcase checks that http.client.ResponseNotReady error is not displayed when user session cache is deleted. https://pagure.io/freeipa/issue/7752 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5637/head:pr5637 git checkout pr5637

2 1

[freeipa PR#5849][opened] [Backport][ipa-4-9] Convert repl plugin name to single-value string on upgrades
by rcritten 22 Jun '21

22 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5849 Author: rcritten Title: #5849: [Backport][ipa-4-9] Convert repl plugin name to single-value string on upgrades Action: opened PR body: """ Manual backport of PR #5836 because a backport of ipa-4-9 is required. The merged conflict was in the new subuid code only in master. Adding the ack since this change is so minor: ``` diff --cc ipaserver/install/ldapupdate.py index 15c0ccb50,e7eb6c68f..000000000 --- a/ipaserver/install/ldapupdate.py +++ b/ipaserver/install/ldapupdate.py @@@ -296,6 -341,10 +311,13 @@@ class LDAPUpdate SELINUX_USERMAP_DEFAULT=platformconstants.SELINUX_USERMAP_DEFAULT, SELINUX_USERMAP_ORDER=platformconstants.SELINUX_USERMAP_ORDER, FIPS="#" if tasks.is_fips_enabled() else "", ++<<<<<<< HEAD ++======= + # uid / gid for autobind + NAMED_UID=platformconstants.NAMED_USER.uid, + NAMED_GID=platformconstants.NAMED_GROUP.gid, + REPLICATION_PLUGIN=replication_plugin, ++>>>>>>> 922357b74 (Use get_replication_plugin_name in LDAP updater) ) for k, v in default_sub.items(): self.sub_dict.setdefault(k, v) ``` """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5849/head:pr5849 git checkout pr5849

2 1

[freeipa PR#5848][opened] ipatests: Bump PR-CI rawhide template
by netoarmando 21 Jun '21

21 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5848 Author: netoarmando Title: #5848: ipatests: Bump PR-CI rawhide template Action: opened PR body: """ Update system's Python to 3.10 Issue: https://github.com/freeipa/freeipa-pr-ci/issues/435 --- Testing template with `automember`: https://github.com/freeipa-pr-ci2/freeipa/pull/989 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5848/head:pr5848 git checkout pr5848

2 1

[freeipa PR#5836][opened] Convert repl plugin name to single-value string on upgrades
by rcritten 21 Jun '21

21 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5836 Author: rcritten Title: #5836: Convert repl plugin name to single-value string on upgrades Action: opened PR body: """ The value was being returned as a list with one value consisting of bytes. Grab the first element and convert it to a string to avoid this error on updates: Add failure missing required attribute "objectclass" Because the entry wasn't found the update to add nsslapd-pluginbetxn to the entry tries to add an entirely new entry which consists only of dn and nsslapd-pluginbetxn, hence the objectclass error. https://pagure.io/freeipa/issue/8885 Signed-off-by: Rob Crittenden <rcritten(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5836/head:pr5836 git checkout pr5836

2 1

[freeipa PR#5846][opened] [Backport][ipa-4-9] host: try to resolve FQDN before command execution
by rcritten 21 Jun '21

21 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5846 Author: rcritten Title: #5846: [Backport][ipa-4-9] host: try to resolve FQDN before command execution Action: opened PR body: """ This PR was opened automatically because PR #5838 was pushed to master and backport to ipa-4-9 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5846/head:pr5846 git checkout pr5846

2 1

[freeipa PR#5821][opened] ipatest: Test ipa-cert-fix fails when startup directive is missing from CS.cfg
by mrizwan93 18 Jun '21

18 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5821 Author: mrizwan93 Title: #5821: ipatest: Test ipa-cert-fix fails when startup directive is missing from CS.cfg Action: opened PR body: """ This test checks that if 'selftests.container.order.startup' directive is missing from CS.cfg, ipa-cert-fix fails and throw proper error message. It also checks that underlying command 'pki-server cert-fix' should fail to renew the cert. related: https://pagure.io/freeipa/issue/8721 Signed-off-by: Mohammad Rizwan <myusuf(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5821/head:pr5821 git checkout pr5821

2 1

[freeipa PR#5838][opened] host: try to resolve FQDN before command execution
by antoniotorresm 18 Jun '21

18 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5838 Author: antoniotorresm Title: #5838: host: try to resolve FQDN before command execution Action: opened PR body: """ Trying to resolve the FQDN before command execution (during pre-callback) helps detect cases where the host specified by the user does not exist, saving execution time. Aside from this, resolving the FQDN is useful when only the shortname of the host is passed, as this would cause issues when trying to update the DNS records during modification of the entry. Fixes: https://pagure.io/freeipa/issue/8726 Fixes: https://pagure.io/freeipa/issue/8884 Signed-off-by: Antonio Torres <antorres(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5838/head:pr5838 git checkout pr5838

2 1

[freeipa PR#5843][opened] [Backport][ipa-4-9] Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
by rcritten 18 Jun '21

18 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5843 Author: rcritten Title: #5843: [Backport][ipa-4-9] Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server Action: opened PR body: """ This PR was opened automatically because PR #5832 was pushed to master and backport to ipa-4-9 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5843/head:pr5843 git checkout pr5843

1 1

[freeipa PR#5842][opened] [Backport][ipa-4-6] Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
by rcritten 18 Jun '21

18 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5842 Author: rcritten Title: #5842: [Backport][ipa-4-6] Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server Action: opened PR body: """ This PR was opened automatically because PR #5832 was pushed to master and backport to ipa-4-6 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5842/head:pr5842 git checkout pr5842

1 1

[freeipa PR#5832][opened] Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
by antoniotorresm 17 Jun '21

17 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5832 Author: antoniotorresm Title: #5832: Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server Action: opened PR body: """ When upgrading from a server with IPA CA before PKINIT was introduced (4.5), PKINIT would not be enabled and there wasn't any way to enable it since upgrade code only issues self-signed certificates when certificates are missing. With these change there is a way to enable PKINIT when coming from a IPA server with a pre-PKINIT version (4.4 and before). Fixes: https://pagure.io/freeipa/issue/8532 Signed-off-by: Antonio Torres <antorres(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5832/head:pr5832 git checkout pr5832

2 1

[freeipa PR#5839][opened] [Backport][ipa-4-9] Incorporate custodia into IPA
by rcritten 17 Jun '21

17 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5839 Author: rcritten Title: #5839: [Backport][ipa-4-9] Incorporate custodia into IPA Action: opened PR body: """ This PR was opened automatically because PR #5831 was pushed to master and backport to ipa-4-9 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5839/head:pr5839 git checkout pr5839

2 1

[freeipa PR#5840][opened] [Backport][ipa-4-9] CA-less install: non-ASCII chars in CA cert subject
by rcritten 17 Jun '21

17 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5840 Author: rcritten Title: #5840: [Backport][ipa-4-9] CA-less install: non-ASCII chars in CA cert subject Action: opened PR body: """ This PR was opened automatically because PR #5823 was pushed to master and backport to ipa-4-9 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5840/head:pr5840 git checkout pr5840

2 1

[freeipa PR#5823][opened] CA-less install: non-ASCII chars in CA cert subject
by flo-renaud 16 Jun '21

16 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5823 Author: flo-renaud Title: #5823: CA-less install: non-ASCII chars in CA cert subject Action: opened PR body: """ ### CA-less install: non-ASCII chars in CA cert subject In a CA-less install, if the CA cert subject contains non-ascii characters, ipa-server-install fails when configuring SSL for httpd. The issue happens when calling ipautil.run to extract the keys from a p12file. The code is using the raw output of the command and doesn't need to specify capture_output=True, as this option breaks if the output contains non-ascii characters. The raw_output contains bytes, the output is a str built by decoding the raw_output and may fail if non-ascii characters are present. Fixes: https://pagure.io/freeipa/issue/8880 ### ipatests: use non-ascii chars in CA-less install The CA-less installation creates an external CA with the subject CN=CA,O=Example Organization. In order to test non-ascii subjects, use CN=CA,O=Example Organization España instead. Related: https://pagure.io/freeipa/issue/8880 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5823/head:pr5823 git checkout pr5823

2 1

[freeipa PR#5831][opened] Incorporate custodia into IPA
by tiran 16 Jun '21

16 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5831 Author: tiran Title: #5831: Incorporate custodia into IPA Action: opened PR body: """ """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5831/head:pr5831 git checkout pr5831

2 1

[freeipa PR#5837][opened] [Backport][ipa-4-9] When loading certificates verify that it is X.509 v3
by rcritten 15 Jun '21

15 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5837 Author: rcritten Title: #5837: [Backport][ipa-4-9] When loading certificates verify that it is X.509 v3 Action: opened PR body: """ This PR was opened automatically because PR #5833 was pushed to master and backport to ipa-4-9 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5837/head:pr5837 git checkout pr5837

1 1

[freeipa PR#5826][opened] host: provide a better error message with updatedns when FQDN is not provided
by antoniotorresm 15 Jun '21

15 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5826 Author: antoniotorresm Title: #5826: host: provide a better error message with updatedns when FQDN is not provided Action: opened PR body: """ The --updatedns option for host-mod requires the FQDN to be passed, otherwise an obscure error message is shown since the domain cannot be found. Fixes: https://pagure.io/freeipa/issue/8726 Signed-off-by: Antonio Torres <antorres(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5826/head:pr5826 git checkout pr5826

1 1

2025

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-devel June 2021