December 2017 - FreeIPA-devel - Fedora mailing-lists

[freeipa PR#1416][opened] Do not allow users delete their last otp token
by felipevolpone 14 Feb '18

14 Feb '18

URL: https://github.com/freeipa/freeipa/pull/1416 Author: felipevolpone Title: #1416: Do not allow users delete their last otp token Action: opened PR body: """ This adds a new verification on the ipa_otp_lasttoken 389 plugin, in order to do not allow users delete their last otp token. The verification is done checking if the global configuration is set to otp in `cn=ipaConfig,cn=etc` Fixes: [7012](https://pagure.io/freeipa/issue/7012) """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1416/head:pr1416 git checkout pr1416

2 1

[freeipa PR#973][opened] test_dnssec: re-add named-pkcs11 workarounds
by tomaskrizek 09 Feb '18

09 Feb '18

URL: https://github.com/freeipa/freeipa/pull/973 Author: tomaskrizek Title: #973: test_dnssec: re-add named-pkcs11 workarounds Action: opened PR body: """ DNSSEC tests starrted to fail again, probably due to a bug in some underlaying component. This reverts commit 8bc677512296a7e94c29edd0c1a96aa7273f352a and makes the xfail test check less strict - it will no longer mark the test suite red if it passes. Related https://pagure.io/freeipa/issue/5348 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/973/head:pr973 git checkout pr973

2 1

[freeipa PR#980][opened] [WIP][tests] Replica Promotion improvements
by Akasurde 08 Feb '18

08 Feb '18

URL: https://github.com/freeipa/freeipa/pull/980 Author: Akasurde Title: #980: [WIP][tests] Replica Promotion improvements Action: opened PR body: """ * Change string check in replica install at domain level 0 Fixes: https://pagure.io/freeipa/issue/7104 Signed-off-by: Abhijeet Kasurde <akasurde(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/980/head:pr980 git checkout pr980

2 3

[freeipa PR#1289][opened] Python 3 support for DNSSEC
by tiran 07 Feb '18

07 Feb '18

URL: https://github.com/freeipa/freeipa/pull/1289 Author: tiran Title: #1289: Python 3 support for DNSSEC Action: opened PR body: """ https://pagure.io/freeipa/issue/4985 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1289/head:pr1289 git checkout pr1289

1 1

[freeipa PR#1420][opened] Fix python-ldap byte warnings
by tiran 07 Feb '18

07 Feb '18

URL: https://github.com/freeipa/freeipa/pull/1420 Author: tiran Title: #1420: Fix python-ldap byte warnings Action: opened PR body: """ Signed-off-by: Christian Heimes <cheimes(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1420/head:pr1420 git checkout pr1420

1 1

[freeipa PR#927][opened] WebUI: Cockpit integration
by pvomacka 07 Feb '18

07 Feb '18

URL: https://github.com/freeipa/freeipa/pull/927 Author: pvomacka Title: #927: WebUI: Cockpit integration Action: opened PR body: """ Link to the cockpit is placed to each host details page in case the Cockpit is installed on the server. Showing or hiding cockpit link is possible because of Cockpit's API which provides public URL for check whether Cockpit is the software which listen on given port. https://pagure.io/freeipa/issue/4891 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/927/head:pr927 git checkout pr927

2 1

[freeipa PR#1339][opened] Bump 389-ds-base to 1.3.7.8-1
by stlaz 07 Feb '18

07 Feb '18

URL: https://github.com/freeipa/freeipa/pull/1339 Author: stlaz Title: #1339: Bump 389-ds-base to 1.3.7.8-1 Action: opened PR body: """ Bump 389-ds-version due to problems with replication and connections not being closed. https://pagure.io/freeipa/issue/7165 https://pagure.io/freeipa/issue/7228 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1339/head:pr1339 git checkout pr1339

2 1

[freeipa PR#837][opened] ca-add: fix permission issue
by frasertweedale 05 Feb '18

05 Feb '18

URL: https://github.com/freeipa/freeipa/pull/837 Author: frasertweedale Title: #837: ca-add: fix permission issue Action: opened PR body: """ The ca-add command pre_callback uses ldap.can_add() to check whether the user has permission to add CAs. Alas, the GetEffectiveRights control used by ldap.can_add() doesn't correctly interpret ACIs with 'targetfilter' constraints, and returns a false-negative for non-admin users, even when they have the 'System: Add CA' permission. To work around this, add the CA object to FreeIPA before attempting to create the CA in Dogtag. If the CA creation in Dogtag succeds, the user then updates the FreeIPA object with the Authority ID and other authoritative data returned by Dogtag. If the CA creation in Dogtag fails, the user cleans up by deleting the newly-created CA object from FreeIPA. This modified procedure ensures that the user certainly has the 'System: Add CA' permission before the CA creation in Dogtag is attempted. But it also means that the user must have 'write' and 'delete' permission on 'ipaca' objects in FreeIPA, so that it can complete the object after CA creation in Dogtag, or clean up if that step fails. Therefore, update the 'System: Add CA' permission to confer 'write' and 'delete' access on 'ipaca' objects, as well as 'add' access. Fixes: https://pagure.io/freeipa/issue/6609 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/837/head:pr837 git checkout pr837

2 7

[freeipa PR#1326][opened] [WIP] Fixing translation problems
by slaykovsky 24 Jan '18

24 Jan '18

URL: https://github.com/freeipa/freeipa/pull/1326 Author: slaykovsky Title: #1326: [WIP] Fixing translation problems Action: opened PR body: """ Hello guys! So I'm having some progress with this weird translation related bug and I already achieved the following behaviour: ``` # LANG=de_DE.UTF-8 ipa user-find admin -------------- 1 user matched -------------- Anmeldename: admin Nachname: Administrator Home-Verzeichnis: /home/admin Anmeldeshell: /bin/bash Principal alias: admin(a)DOM-023.ABC.IDM.LAB.ENG.BRQ.REDHAT.COM UID: 1026200000 Gruppen-ID: 1026200000 Konto ist deaktiviert: False ------------------------------------- Anzahl der zurückgegebenen Einträge 1 ------------------------------------- # LANG=zh_CN.UTF-8 ipa user-find admin -------------- 1 user matched -------------- 用户登录名: admin 姓: Administrator 主目录: /home/admin 登录shell: /bin/bash 主体别名: admin(a)DOM-023.ABC.IDM.LAB.ENG.BRQ.REDHAT.COM UID: 1026200000 GID: 1026200000 禁用账户: False -------- 返回的条目数 1 -------- # LANG=en_US.UTF-8 ipa user-find admin -------------- 1 user matched -------------- User login: admin Last name: Administrator Home directory: /home/admin Login shell: /bin/bash Principal alias: admin(a)DOM-023.ABC.IDM.LAB.ENG.BRQ.REDHAT.COM UID: 1026200000 GID: 1026200000 Account disabled: False ---------------------------- Number of entries returned 1 ---------------------------- ``` As you can see now I don't need as a user to clean `~/.cache/ipa` to get the information in my native locale. But, there is this summary (in this case it's `1 user matched`) which is getting generated on the server and I'm kind of struggling with it now as I removed this `LANG` changing piece of code from rpcserver. Any help, review and comment are needed and very appreciated. :) pagure: https://pagure.io/freeipa/issue/7238 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1326/head:pr1326 git checkout pr1326

1 1

[freeipa PR#1423][opened] IntegrationTests now collects logs from all test methods
by felipevolpone 12 Jan '18

12 Jan '18

URL: https://github.com/freeipa/freeipa/pull/1423 Author: felipevolpone Title: #1423: IntegrationTests now collects logs from all test methods Action: opened PR body: """ It was missing the configuration and the proper use of the logfile_dir. Also, the dict of logs to be collected should not be cleared. Now, all logs from all test methods will be collected. It's useful to say that it doesn't mean that all methods are changing the environment or installing/reinstalling freeIPA. So, it's possible that some logs in different methods would be the same. Fixes: #7310 and #7335 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1423/head:pr1423 git checkout pr1423

1 1

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-devel December 2017