July 2021 - FreeIPA-devel - Fedora mailing-lists

[freeipa PR#5926][opened] ipatests: verify that getcert output includes the issued date
by rcritten 03 Aug '21

03 Aug '21

URL: https://github.com/freeipa/freeipa/pull/5926 Author: rcritten Title: #5926: ipatests: verify that getcert output includes the issued date Action: opened PR body: """ certmonger 0.79.14 included a new feature that provides the NotBefore (or issued) date to the certificate list output. Verify that it is present in the output. https://bugzilla.redhat.com/show_bug.cgi?id=1940261 Signed-off-by: Rob Crittenden <rcritten(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5926/head:pr5926 git checkout pr5926

1 1

[freeipa PR#5923][opened] ipa-advise: if p11-kit provides opensc, don't add to NSS db
by rcritten 03 Aug '21

03 Aug '21

URL: https://github.com/freeipa/freeipa/pull/5923 Author: rcritten Title: #5923: ipa-advise: if p11-kit provides opensc, don't add to NSS db Action: opened PR body: """ p11-kit-proxy in newer distributions handles loading the OpenSC PKCS#11 library so don't try to add it to the NSS database in /etc/pki/nssdb if it is already available in order to avoid a potentially confusing error message. https://pagure.io/freeipa/issue/8934 Signed-off-by: Rob Crittenden <rcritten(a)redhat.com> NOTE: 1. A second patch fixes script error I noticed while working on the ticket. 2. There are no tests because it relies completely on the OS release and state of the client and we don't have that capacity in CI. I propose manual tests. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5923/head:pr5923 git checkout pr5923

1 1

[freeipa PR#5934][opened] ipa-getkeytab: add option to discover servers using DNS SRV
by rcritten 03 Aug '21

03 Aug '21

URL: https://github.com/freeipa/freeipa/pull/5934 Author: rcritten Title: #5934: ipa-getkeytab: add option to discover servers using DNS SRV Action: opened PR body: """ Manual backport. The test did not merge cleanly. The basic flow is: If server is provided by the user then use it If server the magic value '_srv', check for _ldap._tcp SRV records for the domain in /etc/ipa/default.conf If no servers are found use the server from default.conf https://pagure.io/freeipa/issue/8478 Signed-off-by: Rob Crittenden rcritten(a)redhat.com """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5934/head:pr5934 git checkout pr5934

2 1

[freeipa PR#5918][opened] ipatests: ipa-otpd should not fail when dirsrv is restarted with OTP login.
by amore17 03 Aug '21

03 Aug '21

URL: https://github.com/freeipa/freeipa/pull/5918 Author: amore17 Title: #5918: ipatests: ipa-otpd should not fail when dirsrv is restarted with OTP login. Action: opened PR body: """ Added test to verify ipa-otpd is not failing when there is login with OTP and dirsrv is restarted. Related : https://pagure.io/freeipa/issue/6587 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5918/head:pr5918 git checkout pr5918

2 1

[freeipa PR#5931][opened] freeipa.spec.in: remove python3-pexpect from Requires
by fcami 02 Aug '21

02 Aug '21

URL: https://github.com/freeipa/freeipa/pull/5931 Author: fcami Title: #5931: freeipa.spec.in: remove python3-pexpect from Requires Action: opened PR body: """ python3-pexpect will be removed in RHEL9. Update BuildRequires/Requires accordingly. Fixes: https://pagure.io/freeipa/issue/8938 Signed-off-by: François Cami <fcami(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5931/head:pr5931 git checkout pr5931

1 1

[freeipa PR#5936][opened] Provide more information in ipa-certupdate on ccache failure
by rcritten 02 Aug '21

02 Aug '21

URL: https://github.com/freeipa/freeipa/pull/5936 Author: rcritten Title: #5936: Provide more information in ipa-certupdate on ccache failure Action: opened PR body: """ ipa-certupdate obtains host credentials to operate. If this fails with a ccache error this can be confusing if the user executing it already has admin credentails. Include the principal being retrieved and the keytab being used. This basically intercepts the exception to log additional information and lets the exception be handled at a higher level. https://pagure.io/freeipa/issue/8257 Signed-off-by: Rob Crittenden <rcritten(a)redhat.com> I've only reproduced this with contrived use-cases but when I did run into it during development debugging the root cause was difficult so providing this information can be useful. As for test automation, I think it's overkill. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5936/head:pr5936 git checkout pr5936

1 1

[freeipa PR#5927][opened] Fix ldapupdate.get_sub_dict() for missing named user
by tiran 30 Jul '21

30 Jul '21

URL: https://github.com/freeipa/freeipa/pull/5927 Author: tiran Title: #5927: Fix ldapupdate.get_sub_dict() for missing named user Action: opened PR body: """ The named user may not be present when ipa-server-dns and bind are not installed. NAMED_UID and NAMED_GID constants are only used with local DNS support. Fixes: https://pagure.io/freeipa/issue/8936 Signed-off-by: Christian Heimes <cheimes(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5927/head:pr5927 git checkout pr5927

2 1

[freeipa PR#5905][opened] ipa-getkeytab: add option to discover servers using DNS SRV
by rcritten 30 Jul '21

30 Jul '21

URL: https://github.com/freeipa/freeipa/pull/5905 Author: rcritten Title: #5905: ipa-getkeytab: add option to discover servers using DNS SRV Action: opened PR body: """ The basic flow is: - If server is provided by the user then use it - If server the magic value '_srv', check for _ldap._tcp SRV records for the domain in /etc/ipa/default.conf - If no servers are found use the server from default.conf https://pagure.io/freeipa/issue/8478 Signed-off-by: Rob Crittenden <rcritten(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5905/head:pr5905 git checkout pr5905

1 1

[freeipa PR#5929][opened] ipatests: test removing BIND and the named user
by fcami 28 Jul '21

28 Jul '21

URL: https://github.com/freeipa/freeipa/pull/5929 Author: fcami Title: #5929: ipatests: test removing BIND and the named user Action: opened PR body: """ Test that FreeIPA can be installed if the named user does not exist. Related: https://github.com/freeipa/freeipa/pull/5927 Signed-off-by: François Cami <fcami(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5929/head:pr5929 git checkout pr5929

1 3

[freeipa PR#5930][opened] Azure: re-enable tests using forwarders
by fcami 28 Jul '21

28 Jul '21

URL: https://github.com/freeipa/freeipa/pull/5930 Author: fcami Title: #5930: Azure: re-enable tests using forwarders Action: opened PR body: """ Since BIND was updated in Fedora, revert: b71009b31a1d4dc76af3052a1e826e0306525410 Related: https://pagure.io/freeipa/issue/8864 Signed-off-by: François Cami <fcami(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5930/head:pr5930 git checkout pr5930

1 0

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-devel July 2021