December 2017 - FreeIPA-devel - Fedora mailing-lists

[freeipa PR#1372][opened] Test self-signed > external CA > self-signed test case.
by Rezney 09 Jan '18

09 Jan '18

URL: https://github.com/freeipa/freeipa/pull/1372 Author: Rezney Title: #1372: Test self-signed > external CA > self-signed test case. Action: opened PR body: """ Various changes are being done in this PR: 1. In order to avoid boilerplate code we add a function for signing a CA. 2. We add self-signed > external CA > self-signed test case itself + introduce two new constants. 3. We move create_caless_pki.py and create_external_ca.py modules to pytest_plugins. Details: Till now both create_caless_pki.py and create_external_ca.py were stored in test_integration folder. However when trying to import e.g. "from create_external_ca import ExternalCA" from tasks.py where all other integration test`s support functions lives we get "AttributeError: module 'pytest' has no attribute 'config' as pytest was not completely initialized at the moment of the import. Backtrace from the issue: ` File "/usr/lib/python3.6/site-packages/_pytest/config.py", line 421, in consider_module self._import_plugin_specs(getattr(mod, 'pytest_plugins', [])) File "/usr/lib/python3.6/site-packages/_pytest/config.py", line 426, in _import_plugin_specs self.import_plugin(import_spec) File "/usr/lib/python3.6/site-packages/_pytest/config.py", line 443, in import_plugin __import__(importspec) File "/usr/lib/python3.6/site-packages/ipatests/pytest_plugins/integration/__init__.py", line 37, in <module> from . import tasks File "<frozen importlib._bootstrap>", line 961, in _find_and_load File "<frozen importlib._bootstrap>", line 950, in _find_and_load_unlocked File "<frozen importlib._bootstrap>", line 646, in _load_unlocked File "<frozen importlib._bootstrap>", line 616, in _load_backward_compatible File "/usr/lib/python3.6/site-packages/_pytest/assertion/rewrite.py", line 212, in load_module py.builtin.exec_(co, mod.__dict__) File "/usr/lib/python3.6/site-packages/ipatests/pytest_plugins/integration/tasks.py", line 47, in <module> from ipatests.test_integration.create_external_ca import ExternalCA File "/usr/lib/python3.6/site-packages/ipatests/test_integration/__init__.py", line 22, in <module> ipatests.util.check_ipaclient_unittests() File "/usr/lib/python3.6/site-packages/ipatests/util.py", line 71, in check_ipaclient_unittests if pytest.config.getoption('ipaclient_unittests', False): AttributeError: module 'pytest' has no attribute 'config' ` """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1372/head:pr1372 git checkout pr1372

2 1

[freeipa PR#1396][opened] test_renewal_master: add ipa csreplica-manage test
by Rezney 09 Jan '18

09 Jan '18

URL: https://github.com/freeipa/freeipa/pull/1396 Author: Rezney Title: #1396: test_renewal_master: add ipa csreplica-manage test Action: opened PR body: """ Add test case for setting renewal master using command ipa-csreplica-manage. Automation related to upstream ticket #7120. Testing using config-mod already covered. https://pagure.io/freeipa/issue/7321 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1396/head:pr1396 git checkout pr1396

2 1

[freeipa PR#1354][opened] test_backup_and_restore.py AssertionError fix
by slaykovsky 09 Jan '18

09 Jan '18

URL: https://github.com/freeipa/freeipa/pull/1354 Author: slaykovsky Title: #1354: test_backup_and_restore.py AssertionError fix Action: opened PR body: """ prefix in the backup function expects output to have 'ipa.ipaserver.install.ipa_backup.Backup:' and it's wrong. The right one is 'ipaserver.install.ipa_backup:'. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1354/head:pr1354 git checkout pr1354

2 1

[freeipa PR#1422][opened] remove nsslapd-sasl-max-buffer-size override from 10-config.update
by fcami 04 Jan '18

04 Jan '18

URL: https://github.com/freeipa/freeipa/pull/1422 Author: fcami Title: #1422: remove nsslapd-sasl-max-buffer-size override from 10-config.update Action: opened PR body: """ Since https://pagure.io/389-ds-base/issue/47457 was fixed directly in 389 Directory Server, overriding nsslapd-sasl-max-buffer-size at install time is not necessary anymore and it breaks overriding its value with --dirsrv-config-file. The patch addresses: https://bugzilla.redhat.com/show_bug.cgi?id=1527020 "nsslapd-sasl-max-buffer-size is hardcoded to '2097152' during install even if another value was provided in an LDIF ( --dirsrv-config-file )" Tested against RHEL 7.4, the nsslapd-sasl-max-buffer-size parameter is still 2097152 after this change and the change allows overriding its value using --dirsrv-config-file properly. Fix suggested by Florence Blanc-Renaud. Signed-off-by: François Cami <fcami(a)fedoraproject.org> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1422/head:pr1422 git checkout pr1422

2 1

[freeipa PR#1282][opened] Log contents of config files when updating/writing them
by rcritten 04 Jan '18

04 Jan '18

URL: https://github.com/freeipa/freeipa/pull/1282 Author: rcritten Title: #1282: Log contents of config files when updating/writing them Action: opened PR body: """ This was originally going to be a PR to log the contents of default.conf for debugging purposes, mostly for replicas where in DL1 it gets written several times. Given that other config files like nsswitch.conf also use the same functions we get even more output as an extra benefit. The file sizes are currently not that big so it doesn't bloat the logs too much IMHO. One patch adds the logging and the other patch changes the server installer to use the configuration writing too rather than manually creating the file. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1282/head:pr1282 git checkout pr1282

2 1

[freeipa PR#1419][opened] test_cert_plugin: check if SAN is added with default profile
by Rezney 04 Jan '18

04 Jan '18

URL: https://github.com/freeipa/freeipa/pull/1419 Author: Rezney Title: #1419: test_cert_plugin: check if SAN is added with default profile Action: opened PR body: """ This test case addresses upstream case #7007. https://pagure.io/freeipa/issue/7334 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1419/head:pr1419 git checkout pr1419

2 1

[freeipa PR#1402][opened] WebUI: make keytab tables on service and host pages writable
by pvomacka 04 Jan '18

04 Jan '18

URL: https://github.com/freeipa/freeipa/pull/1402 Author: pvomacka Title: #1402: WebUI: make keytab tables on service and host pages writable Action: opened PR body: """ There is no object class before adding the first item into tables, therefore there are no ACI and WebUI is not able to figure out whether table is writable or not. Adding flag 'w_if_no_aci' tells "make it writable even if we have not ACIs and try to do the API call. https://pagure.io/freeipa/issue/7111 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1402/head:pr1402 git checkout pr1402

2 1

freeIPA certificate with Let’s Encrypt
by paride.buetti＠blackpoints.ch 03 Jan '18

03 Jan '18

Here the procedure to use Let’s Encrypt certificate with freeIPA Download isrgrootx1 certificate: # wget https://letsencrypt.org/certs/isrgrootx1.pem.txt # mv isrgrootx1.pem.txt isrgrootx1.pem Download letsencryptauthorityx3 certificate: # wget https://letsencrypt.org/certs/letsencryptauthorityx3.pem.txt # mv letsencryptauthorityx3.pem.txt letsencryptauthorityx3.pem Install CA to freeIPA # ipa-cacert-manage install isrgrootx1.pem -n ISRGRootX1 -t ,, # ipa-cacert-manage install letsencryptauthorityx3.pem -n letsencryptx3 -t C,, I added DSTRootCAX3 certificate, but I'm not sure if it's necessary # crete a file DSTRootCAX3.pem with the content of https://www.identrust.com/certificates/trustid/root-download-x3.html # ipa-cacert-manage install DSTRootCAX3.pem -n DSTRootCAX3 -t ,, Update certificates # kinit admin # ipa-certupdate Install Let’s Encrypt certificate (I used a DNS-01 challenge: http://letsencrypt.readthedocs.io/en/latest/challenges.html) # ipa-server-certinstall -w -d /etc/letsencrypt/live/your.doma.in/privkey.pem /etc/letsencrypt/live/your.doma.in/fullchain.pem --pin= Restart the system # systemctl restart httpd.service # systemctl restart dirsrv(a)BLACKPOINTS-CH.service or # ipactl restart That's all

3 4

[freeipa PR#1424][opened] Fixing how to parse the backup dir in test_backup_and_restore
by felipevolpone 02 Jan '18

02 Jan '18

URL: https://github.com/freeipa/freeipa/pull/1424 Author: felipevolpone Title: #1424: Fixing how to parse the backup dir in test_backup_and_restore Action: opened PR body: """ Fixing how the test_backup_and_restore.py suite parses the output from the `ipa-backup -v` command in order to get the backup directory. Fixes: [#7339](https://pagure.io/freeipa/issue/7339) """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1424/head:pr1424 git checkout pr1424

2 1

[freeipa PR#1135][opened] [Backport][ipa-4-6] tests_py3: decode get_file_contents() result
by stlaz 24 Dec '17

24 Dec '17

URL: https://github.com/freeipa/freeipa/pull/1135 Author: stlaz Title: #1135: [Backport][ipa-4-6] tests_py3: decode get_file_contents() result Action: opened PR body: """ This PR was opened automatically because PR #1118 was pushed to master and backport to ipa-4-6 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1135/head:pr1135 git checkout pr1135

1 1

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-devel December 2017