URL: https://github.com/freeipa/freeipa/pull/5812
Author: flo-renaud
Title: #5812: ipatests: set selinux context for fips mode
Action: opened
PR body:
"""
In order to test FIPS mode, the test is faking a user-space
FIPS environment by creating a file /var/tmp/userspace-fips
and bind-mounting this file as /proc/sys/crypto/fips_enabled
The security context needs to be properly set otherwise
/proc/sys/crypto/fips_enabled inherits the security context
unconfined_u:object_r:user_tmp_t:s0 and cannot be read,
resulting in the test seeing fips_mode=false.
Fixes: https://pagure.io/freeipa/issue/8868
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5812/head:pr5812
git checkout pr5812
URL: https://github.com/freeipa/freeipa/pull/5739
Author: mreynolds389
Title: #5739: Replace DS replication plugin name
Action: opened
PR body:
"""
In efforts to remove problematic language, like master and slave,
DS is replacing "master" with "supplier" in the replication plugin
entry under cn=config.
DS should be able handle upgrades correctly as well.
relates: https://pagure.io/freeipa/issue/8799
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5739/head:pr5739
git checkout pr5739
URL: https://github.com/freeipa/freeipa/pull/5722
Author: netoarmando
Title: #5722: workshop: Use default fedora cloud image
Action: opened
PR body:
"""
Use publicly available Fedora cloud box, removing the necessity of building custom boxes with preinstalled packages.
This removes the burden of maintaining boxes up-to-date, in the other hand one must fetch the packages for all hosts in the topology before starting the curriculum.
Signed-off-by: Armando Neto <abiagion(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5722/head:pr5722
git checkout pr5722
URL: https://github.com/freeipa/freeipa/pull/5811
Author: pbrezina
Title: #5811: otpd: forward Access-Challenge
Action: opened
PR body:
"""
Radius server can reply with Access-Challenge response which may
ask for more information in Reply-Message attribute. The request
is identified with the State attribute.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5811/head:pr5811
git checkout pr5811
URL: https://github.com/freeipa/freeipa/pull/5810
Author: abbra
Title: #5810: [Backport][ipa-4-9] Catch ValueError when trying to retrieve existing credentials
Action: opened
PR body:
"""
This PR was opened automatically because PR #5808 was pushed to master and backport to ipa-4-9 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5810/head:pr5810
git checkout pr5810
URL: https://github.com/freeipa/freeipa/pull/5808
Author: rcritten
Title: #5808: Catch ValueError when trying to retrieve existing credentials
Action: opened
PR body:
"""
For WebUI users, catch ValueError from get_credentials_if_valid()
if their associated credentials cache is expired or missing.
This will in turn return an HTTP 401 so they can re-authenticate.
This was an uncaught exception due to changes made to sweep up
expired ccaches (https://pagure.io/freeipa/issue/8589)
https://pagure.io/freeipa/issue/8873
Signed-off-by: Rob Crittenden <rcritten(a)redhat.com>
It's putting the cart before the horse but https://github.com/freeipa/freeipa/pull/5637 will eventually exercise this.
For reviewers: I did the least possible change. We could also not play with a creds variable and do the returns directly inside the exception but I found the current code easier to follow. YMMV.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5808/head:pr5808
git checkout pr5808