August 2021 - FreeIPA-devel - Fedora mailing-lists

[freeipa PR#5994][opened] selinux policy: allow custodia to access /proc/cpuinfo
by flo-renaud 31 Aug '21

31 Aug '21

URL: https://github.com/freeipa/freeipa/pull/5994 Author: flo-renaud Title: #5994: selinux policy: allow custodia to access /proc/cpuinfo Action: opened PR body: """ On aarch64, custodia creates AVC when accessing /proc/cpuinfo. According to gcrypt manual (https://gnupg.org/documentation/manuals/gcrypt/Configuration.html) /proc/cpuinfo is used on ARM architecture to read the hardware capabilities of the CPU. This explains why the issue happens only on aarch64. audit2allow suggests to add the following: allow ipa_custodia_t proc_t:file { getattr open read }; but this policy would be too broad. Instead, the patch is using the interface kernel_read_system_state. Fixes: https://pagure.io/freeipa/issue/8972 Signed-off-by: Florence Blanc-Renaud <flo(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5994/head:pr5994 git checkout pr5994

1 1

[freeipa PR#5993][opened] Avoid double encryption of LDAP connections
by tiran 27 Aug '21

27 Aug '21

URL: https://github.com/freeipa/freeipa/pull/5993 Author: tiran Title: #5993: Avoid double encryption of LDAP connections Action: opened PR body: """ The default settings of FreeIPA and OpenLDAP's libldap result in double encryption of LDAPS and StartTLS connections. The outer layer is TLS and the inner layer is SASL data security layer with GSSAPI encryption. Double encryption is a waste of resources and can impact performance. libldap does not install the SASL data security layer when a connection uses a minimum and maximum security strength factor of 0. Fixes: https://pagure.io/freeipa/issue/8970 Signed-off-by: Christian Heimes <cheimes(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5993/head:pr5993 git checkout pr5993

1 0

[freeipa PR#5992][opened] [Backport][ipa-4-9] Specify PKI installation log paths
by fcami 27 Aug '21

27 Aug '21

URL: https://github.com/freeipa/freeipa/pull/5992 Author: fcami Title: #5992: [Backport][ipa-4-9] Specify PKI installation log paths Action: opened PR body: """ This PR was opened automatically because PR #5973 was pushed to master and backport to ipa-4-9 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5992/head:pr5992 git checkout pr5992

2 1

[freeipa PR#5973][opened] Specify PKI installation log paths
by edewata 26 Aug '21

26 Aug '21

URL: https://github.com/freeipa/freeipa/pull/5973 Author: edewata Title: #5973: Specify PKI installation log paths Action: opened PR body: """ The `DogtagInstance.spawn_instance()` and `uninstall()` have been modified to specify the paths of PKI installation logs using `--log-file` option. This way IPA has a full control over the log files instead of relying on PKI's default log files. The `--log-file` option is available since PKI 11.0.0-alpha2 on Fedora 35 or later: * https://koji.fedoraproject.org/koji/buildinfo?buildID=1818019 * https://koji.fedoraproject.org/koji/buildinfo?buildID=1817974 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5973/head:pr5973 git checkout pr5973

2 1

[freeipa PR#5982][opened] [Backport][ipa-4-9] schema plugin: Generate stable fingerprint
by flo-renaud 25 Aug '21

25 Aug '21

URL: https://github.com/freeipa/freeipa/pull/5982 Author: flo-renaud Title: #5982: [Backport][ipa-4-9] schema plugin: Generate stable fingerprint Action: opened PR body: """ This PR was opened automatically because PR #5979 was pushed to master and backport to ipa-4-9 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5982/head:pr5982 git checkout pr5982

1 1

[freeipa PR#5989][opened] [Backport][ipa-4-9] ipatests: use whole date for journalctl --since
by fcami 25 Aug '21

25 Aug '21

URL: https://github.com/freeipa/freeipa/pull/5989 Author: fcami Title: #5989: [Backport][ipa-4-9] ipatests: use whole date for journalctl --since Action: opened PR body: """ This PR was opened automatically because PR #5984 was pushed to master and backport to ipa-4-9 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5989/head:pr5989 git checkout pr5989

2 1

[freeipa PR#5984][opened] ipatests: use whole date for journalctl --since
by flo-renaud 25 Aug '21

25 Aug '21

URL: https://github.com/freeipa/freeipa/pull/5984 Author: flo-renaud Title: #5984: ipatests: use whole date for journalctl --since Action: opened PR body: """ When a test is executed around midnight and is checking the journal content with --since=date, it needs to specify the whole date (with day and time) to avoid missing entries. If for instance --since=23:59:00 is used and the current time is now 00:01:00, --since=23:59:00 would refer to a date in the future and no journal entry will be found. Fixes: https://pagure.io/freeipa/issue/8953 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5984/head:pr5984 git checkout pr5984

2 1

[freeipa PR#5988][opened] [Backport][ipa-4-9] Azure: Run pycodestyle check in Lint job
by fcami 25 Aug '21

25 Aug '21

URL: https://github.com/freeipa/freeipa/pull/5988 Author: fcami Title: #5988: [Backport][ipa-4-9] Azure: Run pycodestyle check in Lint job Action: opened PR body: """ This PR was opened automatically because PR #5983 was pushed to master and backport to ipa-4-9 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5988/head:pr5988 git checkout pr5988

1 1

[freeipa PR#5983][opened] Azure: Run pycodestyle check in Lint job
by stanislavlevin 24 Aug '21

24 Aug '21

URL: https://github.com/freeipa/freeipa/pull/5983 Author: stanislavlevin Title: #5983: Azure: Run pycodestyle check in Lint job Action: opened PR body: """ - previously, fastlint make's target includes both the Pylint task and pycodestyle one. The purpose of this target is a fast checking only for changed Python files. This makes sense for pycodestyle, but limits Pylint due to a context(file) checking. The clients which call the code being linted are not checked at all. In Azure Pylint (for the whole codebase) is run in the Lint task, this makes fastlint extra for Azure. - `Quick code style check` task used distro's Pylint, while `Lint` task PyPI's one. This may cause different results and confuse a user. - `Build` task takes time longer than `Lint` one, so this change doesn't lead to increased CI time. - all Azure tests depend on Build and Lint tasks. Mostly it's no need to run tests due to a probably broken code. Fixes: https://pagure.io/freeipa/issue/8961 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5983/head:pr5983 git checkout pr5983

2 1

[freeipa PR#5724][opened] [Backport][ipa-4-9] ipatests: test to renew certs on replica using ipa-cert-fix
by flo-renaud 20 Aug '21

20 Aug '21

URL: https://github.com/freeipa/freeipa/pull/5724 Author: flo-renaud Title: #5724: [Backport][ipa-4-9] ipatests: test to renew certs on replica using ipa-cert-fix Action: opened PR body: """ This PR was opened automatically because PR #5653 was pushed to master and backport to ipa-4-9 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5724/head:pr5724 git checkout pr5724

1 1

2025

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-devel August 2021