June 2021 - FreeIPA-devel - Fedora mailing-lists

[freeipa PR#5838][opened] host: try to resolve FQDN before command execution
by antoniotorresm 18 Jun '21

18 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5838 Author: antoniotorresm Title: #5838: host: try to resolve FQDN before command execution Action: opened PR body: """ Trying to resolve the FQDN before command execution (during pre-callback) helps detect cases where the host specified by the user does not exist, saving execution time. Aside from this, resolving the FQDN is useful when only the shortname of the host is passed, as this would cause issues when trying to update the DNS records during modification of the entry. Fixes: https://pagure.io/freeipa/issue/8726 Fixes: https://pagure.io/freeipa/issue/8884 Signed-off-by: Antonio Torres <antorres(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5838/head:pr5838 git checkout pr5838

2 1

[freeipa PR#5843][opened] [Backport][ipa-4-9] Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
by rcritten 18 Jun '21

18 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5843 Author: rcritten Title: #5843: [Backport][ipa-4-9] Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server Action: opened PR body: """ This PR was opened automatically because PR #5832 was pushed to master and backport to ipa-4-9 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5843/head:pr5843 git checkout pr5843

1 1

[freeipa PR#5842][opened] [Backport][ipa-4-6] Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
by rcritten 18 Jun '21

18 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5842 Author: rcritten Title: #5842: [Backport][ipa-4-6] Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server Action: opened PR body: """ This PR was opened automatically because PR #5832 was pushed to master and backport to ipa-4-6 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5842/head:pr5842 git checkout pr5842

1 1

[freeipa PR#5832][opened] Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server
by antoniotorresm 17 Jun '21

17 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5832 Author: antoniotorresm Title: #5832: Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server Action: opened PR body: """ When upgrading from a server with IPA CA before PKINIT was introduced (4.5), PKINIT would not be enabled and there wasn't any way to enable it since upgrade code only issues self-signed certificates when certificates are missing. With these change there is a way to enable PKINIT when coming from a IPA server with a pre-PKINIT version (4.4 and before). Fixes: https://pagure.io/freeipa/issue/8532 Signed-off-by: Antonio Torres <antorres(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5832/head:pr5832 git checkout pr5832

2 1

[freeipa PR#5839][opened] [Backport][ipa-4-9] Incorporate custodia into IPA
by rcritten 17 Jun '21

17 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5839 Author: rcritten Title: #5839: [Backport][ipa-4-9] Incorporate custodia into IPA Action: opened PR body: """ This PR was opened automatically because PR #5831 was pushed to master and backport to ipa-4-9 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5839/head:pr5839 git checkout pr5839

2 1

[freeipa PR#5840][opened] [Backport][ipa-4-9] CA-less install: non-ASCII chars in CA cert subject
by rcritten 17 Jun '21

17 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5840 Author: rcritten Title: #5840: [Backport][ipa-4-9] CA-less install: non-ASCII chars in CA cert subject Action: opened PR body: """ This PR was opened automatically because PR #5823 was pushed to master and backport to ipa-4-9 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5840/head:pr5840 git checkout pr5840

2 1

[freeipa PR#5823][opened] CA-less install: non-ASCII chars in CA cert subject
by flo-renaud 16 Jun '21

16 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5823 Author: flo-renaud Title: #5823: CA-less install: non-ASCII chars in CA cert subject Action: opened PR body: """ ### CA-less install: non-ASCII chars in CA cert subject In a CA-less install, if the CA cert subject contains non-ascii characters, ipa-server-install fails when configuring SSL for httpd. The issue happens when calling ipautil.run to extract the keys from a p12file. The code is using the raw output of the command and doesn't need to specify capture_output=True, as this option breaks if the output contains non-ascii characters. The raw_output contains bytes, the output is a str built by decoding the raw_output and may fail if non-ascii characters are present. Fixes: https://pagure.io/freeipa/issue/8880 ### ipatests: use non-ascii chars in CA-less install The CA-less installation creates an external CA with the subject CN=CA,O=Example Organization. In order to test non-ascii subjects, use CN=CA,O=Example Organization España instead. Related: https://pagure.io/freeipa/issue/8880 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5823/head:pr5823 git checkout pr5823

2 1

[freeipa PR#5831][opened] Incorporate custodia into IPA
by tiran 16 Jun '21

16 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5831 Author: tiran Title: #5831: Incorporate custodia into IPA Action: opened PR body: """ """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5831/head:pr5831 git checkout pr5831

2 1

[freeipa PR#5837][opened] [Backport][ipa-4-9] When loading certificates verify that it is X.509 v3
by rcritten 15 Jun '21

15 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5837 Author: rcritten Title: #5837: [Backport][ipa-4-9] When loading certificates verify that it is X.509 v3 Action: opened PR body: """ This PR was opened automatically because PR #5833 was pushed to master and backport to ipa-4-9 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5837/head:pr5837 git checkout pr5837

1 1

[freeipa PR#5826][opened] host: provide a better error message with updatedns when FQDN is not provided
by antoniotorresm 15 Jun '21

15 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5826 Author: antoniotorresm Title: #5826: host: provide a better error message with updatedns when FQDN is not provided Action: opened PR body: """ The --updatedns option for host-mod requires the FQDN to be passed, otherwise an obscure error message is shown since the domain cannot be found. Fixes: https://pagure.io/freeipa/issue/8726 Signed-off-by: Antonio Torres <antorres(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5826/head:pr5826 git checkout pr5826

1 1

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-devel June 2021