URL: https://github.com/freeipa/freeipa/pull/5939
Author: fcami
Title: #5939: ipaserver: disable resolved' stub resolver
Action: opened
PR body:
"""
Disable systemd-resolved stub resolver at install time.
Use systemd-resolved' maintained list of upstream DNS servers instead.
Rationale: systemd-resolved always resolves the FQDN to the local IP
and vice-versa. This breaks DNS zone detection and especially reverse
zone detection. This results in --auto-reverse being broken.
On systemd-resolved enabled systems, there are four ways to
configure resolv.conf:
* a symlink to /run/systemd/resolve/stub-resolv.conf
This is the default and uses both the 127.0.0.53 DNS stub plus
the search domains.
* a symlink to /usr/lib/systemd/resolv.conf
This only contains the 127.0.0.53 DNS stub.
* a symlink to /run/systemd/resolve/resolv.conf
This contains the upstream DNS IPs and bypasses systemd-resolved.
* Create and maintain /etc/resolv.conf directly.
Solutions #1 and #2 break DNS zone detection.
Solution #4 is not straightforward.
Combine Solution3 and 4: copy the file containing the upstream DNS IPs
so that it is properly maintained by NetworkManager after installation.
Fixes: https://pagure.io/freeipa/issue/8700
Signed-off-by: François Cami <fcami(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5939/head:pr5939
git checkout pr5939
URL: https://github.com/freeipa/freeipa/pull/5845
Author: pfandl
Title: #5845: component: Fix installation on hosts withouc /proc/1/sched.
Action: opened
PR body:
"""
My host does not have `/proc/1/sched` and this patch fixes the installation exception.
I have not tested the other code path where `ìs_hidepid` is `True`.
best regards
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5845/head:pr5845
git checkout pr5845
URL: https://github.com/freeipa/freeipa/pull/6031
Author: rcritten
Title: #6031: Improve sudooption docs, make the option multi-value
Action: opened
PR body:
"""
I don't know why this wasn't always multi-value but if one wanted
to set multiple options they needed to call add-option multiple
times. The LDAP attribute is already multi-value.
This shouldn't cause API issues as it understood the attribute as
multi-value just didn't expose it. Client output on the CLI will
look a bit different:
Added option "('one', 'two')" to Sudo Rule "test"
or
Added option "(u'one', u'Two')" to Sudo Rule "test"
instead of with this change:
Added option "one,two" to Sudo Rule "test"
https://pagure.io/freeipa/issue/2278
Signed-off-by: Rob Crittenden <rcritten(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/6031/head:pr6031
git checkout pr6031
URL: https://github.com/freeipa/freeipa/pull/6034
Author: flo-renaud
Title: #6034: [Backport][ipa-4-9] ipatests: increase sosreport verbosity
Action: opened
PR body:
"""
This PR was opened automatically because PR #6032 was pushed to master and backport to ipa-4-9 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/6034/head:pr6034
git checkout pr6034
URL: https://github.com/freeipa/freeipa/pull/6035
Author: flo-renaud
Title: #6035: [Backport][ipa-4-9] ipatests: update expected error message for openssl verify
Action: opened
PR body:
"""
This PR was opened automatically because PR #6030 was pushed to master and backport to ipa-4-9 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/6035/head:pr6035
git checkout pr6035
URL: https://github.com/freeipa/freeipa/pull/6030
Author: flo-renaud
Title: #6030: ipatests: update expected error message for openssl verify
Action: opened
PR body:
"""
The test TestIpaHealthCheckWithExternalCA::test_ipahealthcheck_ipaopensslchainvalidation
needs to be adapted with the new error message returned by
openssl verify when the provided certificate file does not exist.
The message changed with openssl3.
Fixes: https://pagure.io/freeipa/issue/8999
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/6030/head:pr6030
git checkout pr6030