November 2017 - FreeIPA-devel - Fedora mailing-lists

[freeipa PR#1350][opened] [Backport][ipa-4-6] Update builddep command to install Python 3 and tox deps
by tiran 30 Nov '17

30 Nov '17

URL: https://github.com/freeipa/freeipa/pull/1350 Author: tiran Title: #1350: [Backport][ipa-4-6] Update builddep command to install Python 3 and tox deps Action: opened PR body: """ This PR was opened automatically because PR #1341 was pushed to master and backport to ipa-4-6 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1350/head:pr1350 git checkout pr1350

1 1

[freeipa PR#1351][opened] NSSDB: use preferred convert command
by tiran 30 Nov '17

30 Nov '17

URL: https://github.com/freeipa/freeipa/pull/1351 Author: tiran Title: #1351: NSSDB: use preferred convert command Action: opened PR body: """ After further testing, Kai Engert proposed to use -N with -f -@ to convert a NSSDB from DBM to SQL format. https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql#Upgrade.2Fco… https://pagure.io/freeipa/issue/7049 Signed-off-by: Christian Heimes <cheimes(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1351/head:pr1351 git checkout pr1351

1 0

[freeipa PR#1341][opened] Update builddep command to install Python 3 and tox deps
by tiran 30 Nov '17

30 Nov '17

URL: https://github.com/freeipa/freeipa/pull/1341 Author: tiran Title: #1341: Update builddep command to install Python 3 and tox deps Action: opened PR body: """ Signed-off-by: Christian Heimes <cheimes(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1341/head:pr1341 git checkout pr1341

1 1

[freeipa PR#1349][opened] [Backport][ipa-4-5] ipa-extdom-extop: refactor nsswitch operations
by abbra 30 Nov '17

30 Nov '17

URL: https://github.com/freeipa/freeipa/pull/1349 Author: abbra Title: #1349: [Backport][ipa-4-5] ipa-extdom-extop: refactor nsswitch operations Action: opened PR body: """ This PR was opened automatically because PR #1302 was pushed to master and backport to ipa-4-5 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1349/head:pr1349 git checkout pr1349

1 1

[freeipa PR#1348][opened] [Backport][ipa-4-6] ipa-extdom-extop: refactor nsswitch operations
by abbra 30 Nov '17

30 Nov '17

URL: https://github.com/freeipa/freeipa/pull/1348 Author: abbra Title: #1348: [Backport][ipa-4-6] ipa-extdom-extop: refactor nsswitch operations Action: opened PR body: """ This PR was opened automatically because PR #1302 was pushed to master and backport to ipa-4-6 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1348/head:pr1348 git checkout pr1348

1 1

[freeipa PR#1302][opened] ipa-extdom-extop: refactor nsswitch operations
by abbra 30 Nov '17

30 Nov '17

URL: https://github.com/freeipa/freeipa/pull/1302 Author: abbra Title: #1302: ipa-extdom-extop: refactor nsswitch operations Action: opened PR body: """ Refactor nsswitch operations in ipa-extdom-extop plugin to allow use of timeout-enabled nsswitch calls provided by libsss_nss_idmap. Standard POSIX nsswitch API has no way to cancel requests which may cause ipa-extdom-extop requests to hang far too long and potentially exhaust LDAP server workers. In addition, glibc nsswitch API iterates through all nsswitch modules one by one and with multiple parallel requests a lock up may happen in an unrelated nsswitch module like nss_files.so.2. A solution to the latter issue is to directly load nss_sss.so.2 plugin and utilize it. This, however, does not solve a problem with lack of cancellable API. With SSSD 1.16.1, libsss_nss_idmap provides a timeout-enabled variant of nsswitch API that is directly integrated with SSSD client side machinery used by nss_sss.so.2. As result, this API can be used instead of loading nss_sss.so.2 directly. To support older SSSD version, both direct loading of nss_sss.so.2 and new timeout-enabled API are supported by this changeset. An API to abstract both is designed to be a mix between internal glibc nsswitch API and external nsswitch API that libsss_nss_idmap mimics. API does not expose per-call timeout. Instead, it allows to set a timeout per nsswitch operation context to reduce requirements on information a caller has to maintain. A choice which API to use is made at configure time. In order to test the API, a cmocka test is updated to explicitly load nss_files.so.2 as a backend. Since use of nss_sss.so.2 would always depend on availablility of SSSD, predictable testing would not be possible without it otherwise. Also, cmocka test does not use nss_wrapper anymore because nss_wrapper overrides higher level glibc nsswitch API while we are loading an individual nsswitch module directly. As result, cmocka test overrides fopen() call used by nss_files.so.2 to load /etc/passwd and /etc/group. An overridden version changes paths to /etc/passwd and /etc/group to a local test_data/passwd and test_data/group. This way we can continue testing a backend API for ipa-extdom-extop with the same data as with nss_wrapper. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1302/head:pr1302 git checkout pr1302

1 1

[freeipa PR#1346][opened] [Backport][ipa-4-6] Fix build for travis-ci
by abbra 29 Nov '17

29 Nov '17

URL: https://github.com/freeipa/freeipa/pull/1346 Author: abbra Title: #1346: [Backport][ipa-4-6] Fix build for travis-ci Action: opened PR body: """ This PR was opened automatically because PR #1344 was pushed to master and backport to ipa-4-6 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1346/head:pr1346 git checkout pr1346

1 1

[DESIGN] switch from mod_nss to mod_ssl
by Rob Crittenden 29 Nov '17

29 Nov '17

I started a design document at https://www.freeipa.org/page/V4/mod_nss_to_mod_ssl to cover the conversion from mod_nss to mod_ssl. Have at it. rob

1 0

[freeipa PR#1344][opened] Fix build for travis-ci
by abbra 29 Nov '17

29 Nov '17

URL: https://github.com/freeipa/freeipa/pull/1344 Author: abbra Title: #1344: Fix build for travis-ci Action: opened PR body: """ These commits are from PR#1302, already tested. @tiran asked to submit them as a separate PR. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1344/head:pr1344 git checkout pr1344

1 1

[freeipa PR#1342][opened] [Backport][ipa-4-6] Add workaround for pytest 3.3.0 bug
by tiran 28 Nov '17

28 Nov '17

URL: https://github.com/freeipa/freeipa/pull/1342 Author: tiran Title: #1342: [Backport][ipa-4-6] Add workaround for pytest 3.3.0 bug Action: opened PR body: """ Backport of #1340 pytest is setting an env var PYTEST_CURRENT_TEST to the test name + test parameters. If parameters happen to contain NULL bytes, the putenv() call fails with "ValueError: embedded null byte". The workaround uses repr() of test parameters as parameter id. See https://github.com/pytest-dev/pytest/issues/2957 Signed-off-by: Christian Heimes <cheimes(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1342/head:pr1342 git checkout pr1342

1 1

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-devel November 2017