URL:
https://github.com/freeipa/freeipa/pull/3977
Author: flo-renaud
Title: #3977: trust upgrade: ensure that host is member of adtrust agents
Action: opened
PR body:
"""
After an upgrade, the group cn=adtrust agents may be missing some members.
Each ad trust controller must appear twice as member:
- krbprincipalname=cifs/hostname@realm,cn=services,cn=accounts,basedn
- fqdn=hostname,cn=computers,cn=accounts,basedn
Add an upgrade plugin that builds a list of hostnames from the cifs
principals and adds if needed fqdn=hostname...
Fixes:
https://bugzilla.redhat.com/show_bug.cgi?id=1778777
"""
To pull the PR as Git branch:
git remote add ghfreeipa
https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/3977/head:pr3977
git checkout pr3977