July 2021 - FreeIPA-devel - Fedora mailing-lists

[freeipa PR#5845][opened] component: Fix installation on hosts withouc /proc/1/sched.
by pfandl 09 Nov '21

09 Nov '21

URL: https://github.com/freeipa/freeipa/pull/5845 Author: pfandl Title: #5845: component: Fix installation on hosts withouc /proc/1/sched. Action: opened PR body: """ My host does not have `/proc/1/sched` and this patch fixes the installation exception. I have not tested the other code path where `ìs_hidepid` is `True`. best regards """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5845/head:pr5845 git checkout pr5845

1 1

[freeipa PR#5724][opened] [Backport][ipa-4-9] ipatests: test to renew certs on replica using ipa-cert-fix
by flo-renaud 20 Aug '21

20 Aug '21

URL: https://github.com/freeipa/freeipa/pull/5724 Author: flo-renaud Title: #5724: [Backport][ipa-4-9] ipatests: test to renew certs on replica using ipa-cert-fix Action: opened PR body: """ This PR was opened automatically because PR #5653 was pushed to master and backport to ipa-4-9 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5724/head:pr5724 git checkout pr5724

1 1

[freeipa PR#5738][opened] ipatests: wait while http/ldap/pkinit cert get renew on replica
by mrizwan93 19 Aug '21

19 Aug '21

URL: https://github.com/freeipa/freeipa/pull/5738 Author: mrizwan93 Title: #5738: ipatests: wait while http/ldap/pkinit cert get renew on replica Action: opened PR body: """ LDAP/HTTP/PKINIT certificates should be renewed on replica after moving system date. Test was failing because ipa-cert-fix ran while these cert was not renewed and it tried to fix it. Fixes: https://pagure.io/freeipa/issue/8815 Signed-off-by: Mohammad Rizwan <myusuf(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5738/head:pr5738 git checkout pr5738

2 1

[freeipa PR#5829][opened] WSGI: Control passed environment variables
by stanislavlevin 16 Aug '21

16 Aug '21

URL: https://github.com/freeipa/freeipa/pull/5829 Author: stanislavlevin Title: #5829: WSGI: Control passed environment variables Action: opened PR body: """ It's common practice to care about input environment variables and to produce a minimal and safe set of such. Fixes: https://pagure.io/freeipa/issue/8881 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5829/head:pr5829 git checkout pr5829

1 1

[freeipa PR#5915][opened] Clean up the PKI securitydomain when removing a server
by rcritten 16 Aug '21

16 Aug '21

URL: https://github.com/freeipa/freeipa/pull/5915 Author: rcritten Title: #5915: Clean up the PKI securitydomain when removing a server Action: opened PR body: """ PKI has its own internal knowledge of servers and services in its securitydomain. This has not been cleaned up in the past but is becoming more of an issue as PKI now relies on its securitydomain for more things, and it has a healthcheck that reports inconsistencies. Removing entries is straightforward using the PKI REST API. In order to operate on the API access is needed. There was an unused Security Domain Administrators group that I've added to the resourceACLS we created for managing the securitydomain. The ipara user is added as a member of this group. The REST API binds to the CA using the IPA RA certificate. Related commits are b3c2197b7e4ed18a7febe3efa6396c2272ebccca and ba4df6449aaa0843ab43a1a2b3cb1df8bb022c24. These resourceACLS were originally created as a backwards compatibility mechanism for dogtag v9 and later only created when a replica was installed purportedly to save a restart. I don't see any reason to not have these defined. They are apparently needed due to the PKI database upgrade issues. In any case if the purpose was to suppress these ACLS it failed because as soon as a replica with a CA was installed they were as well, and we need this ACL in order to manage the securitydomain. https://pagure.io/freeipa/issue/8930 Signed-off-by: Rob Crittenden <rcritten(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5915/head:pr5915 git checkout pr5915

2 1

[freeipa PR#5917][opened] WIP: ipatests: Test ldapsearch with base scope works for compat tree.
by amore17 09 Aug '21

09 Aug '21

URL: https://github.com/freeipa/freeipa/pull/5917 Author: amore17 Title: #5917: WIP: ipatests: Test ldapsearch with base scope works for compat tree. Action: opened PR body: """ Related: https://bugzilla.redhat.com/show_bug.cgi?id=1958909 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5917/head:pr5917 git checkout pr5917

2 1

[freeipa PR#5932][opened] Parse getStatus as JSON not XML
by ckelleyRH 06 Aug '21

06 Aug '21

URL: https://github.com/freeipa/freeipa/pull/5932 Author: ckelleyRH Title: #5932: Parse getStatus as JSON not XML Action: opened PR body: """ On `dogtagpki/pki` master XML is being replaced by JSON, getStatus will return JSON in PKI 11.0+. The PR for `dogtagpki/pki` that makes this change necessary is: https://github.com/dogtagpki/pki/pull/3674 To test, I forked the nightly copr build of `freeipa` and added in this patch. I then ran the `dogtagpki/pki` CI against my copr fork instead of the nightly freeipa copr. `dogtagpki/pki` CI fails against the nightly `freeipa` build, but succeeds with my patched build. This is my first PR to this repo (hello everyone!) so if I need to do anything in addition, like bump a version or document that there is a breaking API change, then I would be grateful if someone could point me in the right direction! """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5932/head:pr5932 git checkout pr5932

2 1

[freeipa PR#5935][opened] Don't assume that plugin attributes and objectclasses are lowercase
by rcritten 05 Aug '21

05 Aug '21

URL: https://github.com/freeipa/freeipa/pull/5935 Author: rcritten Title: #5935: Don't assume that plugin attributes and objectclasses are lowercase Action: opened PR body: """ Don't assume that plugin attributes and objectclasses are lowercase A user wrote their own plugin to add custom attributes which was failing with an incorrect error that the attribute wasn't allowed. It wasn't allowed because it wasn't being treated as case-insensitive so wasn't being found in the schema. https://pagure.io/freeipa/issue/8415 Signed-off-by: Rob Crittenden <rcritten(a)redhat.com> **NOTE**: the new test file is not yet integrated into PR-CI. I think this is fine testing as part of the nightlies and not as gating but I'm open to suggestions. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5935/head:pr5935 git checkout pr5935

2 1

[freeipa PR#5933][opened] Add index for sudoorder
by rcritten 04 Aug '21

04 Aug '21

URL: https://github.com/freeipa/freeipa/pull/5933 Author: rcritten Title: #5933: Add index for sudoorder Action: opened PR body: """ sudorule-mod <rule> --order=<num> does a search for an existing order and this search is unindexed. https://pagure.io/freeipa/issue/8939 Signed-off-by: Rob Crittenden <rcritten(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5933/head:pr5933 git checkout pr5933

2 1

[freeipa PR#5841][opened] dnszone-add: deprecate option for setting SOA serial
by antoniotorresm 04 Aug '21

04 Aug '21

URL: https://github.com/freeipa/freeipa/pull/5841 Author: antoniotorresm Title: #5841: dnszone-add: deprecate option for setting SOA serial Action: opened PR body: """ Since IPA 3 [1] SOA serial is managed automatically via autoincrement, and the option of disabling this behavior was deprecated in IPA 3.3.3 [2]. As a result, the option `--serial` during DNS zone addition would be ignored as it is set during the creation. This commit adds a deprecation warning if this option is used. Setting the SOA serial manually would still be useful in certain scenarios, so the option of doing it with dnszone-mod is kept. [1] https://www.freeipa.org/page/V3/DNS_SOA_serial_auto-incrementation [2] https://www.freeipa.org/page/Releases/3.3.3 Fixes: https://pagure.io/freeipa/issue/8227 Signed-off-by: Antonio Torres <antorres(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5841/head:pr5841 git checkout pr5841

1 1

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-devel July 2021