July 2021 - FreeIPA-devel - Fedora mailing-lists

[freeipa PR#5887][opened] [Backport][ipa-4-9] ipatests: use whole date when calling journalctl --since
by flo-renaud 12 Jul '21

12 Jul '21

URL: https://github.com/freeipa/freeipa/pull/5887 Author: flo-renaud Title: #5887: [Backport][ipa-4-9] ipatests: use whole date when calling journalctl --since Action: opened PR body: """ This PR was opened automatically because PR #5885 was pushed to master and backport to ipa-4-9 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5887/head:pr5887 git checkout pr5887

1 1

[freeipa PR#5885][opened] ipatests: use whole date when calling journalctl --since
by flo-renaud 12 Jul '21

12 Jul '21

URL: https://github.com/freeipa/freeipa/pull/5885 Author: flo-renaud Title: #5885: ipatests: use whole date when calling journalctl --since Action: opened PR body: """ The test TestSelfExternalSelf::test_switch_back_to_self_signed is checking the content of the journal using journalctl --since ... but provides only the time, not the whole date with year-month-day. As a consequence, if the test is executed around midnight it may find nothing in the journal because it's looking for logs after 11:50PM, which is a date in the future. Fixes: https://pagure.io/freeipa/issue/8918 Signed-off-by: Florence Blanc-Renaud <flo(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5885/head:pr5885 git checkout pr5885

1 1

[freeipa PR#5883][opened] ipatests: Fix for test_source_ipahealthcheck_ipa_host_check_ipahostkeytab
by menonsudhir 12 Jul '21

12 Jul '21

URL: https://github.com/freeipa/freeipa/pull/5883 Author: menonsudhir Title: #5883: ipatests: Fix for test_source_ipahealthcheck_ipa_host_check_ipahostkeytab Action: opened PR body: """ Expected error message has been modified for test_source_ipahealthcheck_ipa_host_check_ipahostkeytab """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5883/head:pr5883 git checkout pr5883

2 1

[freeipa PR#5884][opened] [Backport][ipa-4-9] Add SHA384withRSA as a certificate signing algorithm
by rcritten 12 Jul '21

12 Jul '21

URL: https://github.com/freeipa/freeipa/pull/5884 Author: rcritten Title: #5884: [Backport][ipa-4-9] Add SHA384withRSA as a certificate signing algorithm Action: opened PR body: """ This PR was opened automatically because PR #5868 was pushed to master and backport to ipa-4-9 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5884/head:pr5884 git checkout pr5884

2 1

[freeipa PR#5868][opened] Add SHA384withRSA as a certificate signing algorithm
by rcritten 09 Jul '21

09 Jul '21

URL: https://github.com/freeipa/freeipa/pull/5868 Author: rcritten Title: #5868: Add SHA384withRSA as a certificate signing algorithm Action: opened PR body: """ It required support in dogtag which was added in 10.5.0. This is only easily configurable during installation because it will set ca.signing.defaultSigningAlgorithm to the selected algorithm in CS.cfg The certificate profiles will generally by default set default.params.signingAlg=- which means use the CA default. So while an existing installation will technically allow SHA384withRSA it will require profile changes and/or changing the defaultSigningAlgorithm in CS.cfg and restarting (completely untested). And that won't affect already issued-certificates. https://pagure.io/freeipa/issue/8906 Signed-off-by: Rob Crittenden <rcritten(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5868/head:pr5868 git checkout pr5868

1 1

[freeipa PR#5713][opened] Add support subordinate user/group ids as separate entries
by tiran 09 Jul '21

09 Jul '21

URL: https://github.com/freeipa/freeipa/pull/5713 Author: tiran Title: #5713: Add support subordinate user/group ids as separate entries Action: opened PR body: """ """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5713/head:pr5713 git checkout pr5713

2 1

[freeipa PR#5869][opened] ipatests: Fix for test_source_ipahealthcheck_ipa_host_check_ipahostkeytab
by menonsudhir 09 Jul '21

09 Jul '21

URL: https://github.com/freeipa/freeipa/pull/5869 Author: menonsudhir Title: #5869: ipatests: Fix for test_source_ipahealthcheck_ipa_host_check_ipahostkeytab Action: opened PR body: """ Expected error message has changed for test_source_ipahealthcheck_ipa_host_check_ipahostkeytab as below. Failed to obtain host TGT: Major (458752): No credentials were supplied, or the credentials were unavailable or inaccessible, Minor (2529639107): No credentials cache found --- Failed to obtain host TGT: Major (851968): Unspecified GSS failure. Minor code may provide more information, Minor (2529639107): No credentials cache found """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5869/head:pr5869 git checkout pr5869

2 1

[freeipa PR#5876][opened] [ipa-4-6] Switch to external ca: fix certmonger script
by flo-renaud 09 Jul '21

09 Jul '21

URL: https://github.com/freeipa/freeipa/pull/5876 Author: flo-renaud Title: #5876: [ipa-4-6] Switch to external ca: fix certmonger script Action: opened PR body: """ The script renew_ca_cert produces a Traceback when switching from self-signed to external CA: Traceback (most recent call last): File "/usr/libexec/ipa/certmonger/renew_ca_cert", line 224, in <module> main() File "/usr/libexec/ipa/certmonger/renew_ca_cert", line 218, in main _main() File "/usr/libexec/ipa/certmonger/renew_ca_cert", line 184, in _main ca_flags = dict(cc[1:] for cc in ca_certs)[ca_nick] KeyError: 'CN=Cert Auth,O=FloAuth. It is trying to find a cert in a dict using a str as key, while the keys are bytes. Related: https://pagure.io/freeipa/issue/8879 Fixes: https://pagure.io/freeipa/issue/8893 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5876/head:pr5876 git checkout pr5876

1 1

[freeipa PR#5863][opened] [Backport][ipa-4-8] plugins: Don't treat keys of API as bytes
by abbra 09 Jul '21

09 Jul '21

URL: https://github.com/freeipa/freeipa/pull/5863 Author: abbra Title: #5863: [Backport][ipa-4-8] plugins: Don't treat keys of API as bytes Action: opened PR body: """ This PR was opened automatically because PR #5857 was pushed to master and backport to ipa-4-8 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5863/head:pr5863 git checkout pr5863

2 1

[freeipa PR#5882][opened] [Backport][ipa-4-9] Server install: do not use unchecked ip addr for ipa-ca record
by flo-renaud 08 Jul '21

08 Jul '21

URL: https://github.com/freeipa/freeipa/pull/5882 Author: flo-renaud Title: #5882: [Backport][ipa-4-9] Server install: do not use unchecked ip addr for ipa-ca record Action: opened PR body: """ This PR was opened automatically because PR #5880 was pushed to master and backport to ipa-4-9 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5882/head:pr5882 git checkout pr5882

1 1

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-devel July 2021