URL: https://github.com/freeipa/freeipa/pull/5866
Author: abbra
Title: #5866: [Backport][ipa-4-9] Don't return more attributes than requested from LDAP cache
Action: opened
PR body:
"""
This PR was opened automatically because PR #5860 was pushed to master and backport to ipa-4-9 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5866/head:pr5866
git checkout pr5866
URL: https://github.com/freeipa/freeipa/pull/5860
Author: rcritten
Title: #5860: Don't return more attributes than requested from LDAP cache
Action: opened
PR body:
"""
On a hit in the LDAP cache the entire cached entry was returned.
This caused problems because more attributes could be returned
than requested.
The automember condition add/remove calls only request the
inclusive/exclusive rule attributes and loop over the returned
values to look for duplicates. This was failing because the queried
entry contains attributes that the candidate entry does not contain.
The automember code is:
old_entry = ldap.get_entry(dn, [attr])
for regex in old_entry.keys():
if not isinstance(entry_attrs[regex], (list, tuple)):
old_entry, returned from the cache, contained objectclass, cn,
description, etc. which don't exist in the candidate entry so
entry_attrs[regex] threw a KeyError.
Instead generate a new entry from the cache consisting of the
requested attributes only if all of the requested attributes are
cached.
Also be more careful when storing the attribbutes in the cache entry.
The returned attributes may not match the requested. So store the
attributes we actually have.
This issue was exposed by Ansible which maintains a larger and
longer-lived cache because commands are executed in the server context
one after another, giving the cache a chance to build up.
https://pagure.io/freeipa/issue/8897
Signed-off-by: Rob Crittenden <rcritten(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5860/head:pr5860
git checkout pr5860
URL: https://github.com/freeipa/freeipa/pull/5864
Author: menonsudhir
Title: #5864: [Backport][ipa-4-9]: Increase timeout for test_commands.py #5856
Action: opened
PR body:
"""
test_commands.py testsuite is failing due to
'RunPytest timed out after 4800s'
Hence the timeout has been increased from 4800 to 5400
Signed-off-by: Sudhir Menon <sumenon(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5864/head:pr5864
git checkout pr5864
URL: https://github.com/freeipa/freeipa/pull/5861
Author: abbra
Title: #5861: [Backport][ipa-4-9] Add unauthenticated nsupdate
Action: opened
PR body:
"""
This PR was opened automatically because PR #4909 was pushed to master and backport to ipa-4-9 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5861/head:pr5861
git checkout pr5861
URL: https://github.com/freeipa/freeipa/pull/5862
Author: abbra
Title: #5862: [Backport][ipa-4-9] plugins: Don't treat keys of API as bytes
Action: opened
PR body:
"""
This PR was opened automatically because PR #5857 was pushed to master and backport to ipa-4-9 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5862/head:pr5862
git checkout pr5862
URL: https://github.com/freeipa/freeipa/pull/5856
Author: menonsudhir
Title: #5856: Increase timeout for test_commands.py
Action: opened
PR body:
"""
test_commands.py testsuite is failing with the error 'RunPytest timed out after 4800s'
Hence the timeout has been increased from 4800 to 5400
Ref: https://github.com/freeipa-pr-ci2/freeipa/pull/996
Signed-off-by: Sudhir Menon <sumenon(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5856/head:pr5856
git checkout pr5856
URL: https://github.com/freeipa/freeipa/pull/5857
Author: stanislavlevin
Title: #5857: plugins: Don't treat keys of API as bytes
Action: opened
PR body:
"""
The plugin `plugins` iterates over the keys of API instance, __iter__ of which is a generator of class.__name__ from
(Command, Object, Method, Backend, Updater). So, the allowed type is str, not bytes.
- fixed `plugins` plugin
- added tests for `plugins` plugin
- added tests for `env` plugin
Fixes: https://pagure.io/freeipa/issue/8898
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5857/head:pr5857
git checkout pr5857
URL: https://github.com/freeipa/freeipa/pull/4909
Author: fcami
Title: #4909: Add unauthenticated nsupdate
Action: opened
PR body:
"""
ipa-client-install: update sssd.conf if nsupdate requires -g
If dynamic DNS updates are selected, sssd will use GSS-TSIG
by default for nsupdate.
When ipa-client-install notices that plain nsupdate is required,
switch sssd to use no authentication for dynamic updates too.
Fixes: https://pagure.io/freeipa/issue/8402
+
ipa-client-install: invoke nsupdate twice (GSS-TSIG, plain)
ipa-client-install invokes nsupdate with GSS-TSIG at client
enrollment time. If that fails, no retry is done.
Change that behavior to try again without GSS-TSIG.
Fixes: https://pagure.io/freeipa/issue/8402
####
This is purely WIP:
- it needs a proper test
- there are more nsupdate calls that should be adapted.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4909/head:pr4909
git checkout pr4909
URL: https://github.com/freeipa/freeipa/pull/5859
Author: serg-cymbaluk
Title: #5859: [Backport][ipa-4-9] WebUI: Fix certificate serial number representation
Action: opened
PR body:
"""
This PR was opened automatically because PR #5844 was pushed to master and backport to ipa-4-9 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5859/head:pr5859
git checkout pr5859