June 2017 - FreeIPA-devel - Fedora mailing-lists

[freeipa PR#893][opened] smard card advises fixes + general improvements
by martbab 04 Jul '17

04 Jul '17

URL: https://github.com/freeipa/freeipa/pull/893 Author: martbab Title: #893: smard card advises fixes + general improvements Action: opened PR body: """ Add some missing operations to the client/server smart card advises and fix issues. Also provide more transparent generators of Bash control flow branches and loops. https://pagure.io/freeipa/issue/7036 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/893/head:pr893 git checkout pr893

2 1

[bind-dyndb-ldap PR#18][opened] Update to BIND 9.11.1
by tomaskrizek 03 Jul '17

03 Jul '17

URL: https://github.com/freeipa/bind-dyndb-ldap/pull/18 Author: tomaskrizek Title: #18: Update to BIND 9.11.1 Action: opened PR body: """ Bump BIND version to 9.11.1 --- Add empty callback for getsize BIND introduced getsize method in db.h. This is related to CVE-2016-6170 and allows to set restriction of zone size limit. """ To pull the PR as Git branch: git remote add ghbind-dyndb-ldap https://github.com/freeipa/bind-dyndb-ldap git fetch ghbind-dyndb-ldap pull/18/head:pr18 git checkout pr18

1 1

[freeipa PR#891][opened] Add SKI and AKI to CA certs in ca-less integration test
by frasertweedale 28 Jun '17

28 Jun '17

URL: https://github.com/freeipa/freeipa/pull/891 Author: frasertweedale Title: #891: Add SKI and AKI to CA certs in ca-less integration test Action: opened PR body: """ The IPA installer now checks that CA certs include the Subject Key Identifier extension (which is required by Dogtag and RFC 5280). But this broke our integration tests, which were not adding the extension. Update the caless-create-pki script to add these extensions. The Subject Key Identifier and Authority Key Identifier values are randomly chosen for each CA, and propagated down to the 'gen_cert()' subroutine so that profiles have access to them. Each profile can choose how to use it. For now, only the 'ca' profile uses them, but for maximum correctness the 'server' profile (i.e. for leaf certificates) could be updated to add the CA's SKI to the AKI extension. This is left for a later commit. Fixes: https://pagure.io/freeipa/issue/7030 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/891/head:pr891 git checkout pr891

1 1

[freeipa PR#882][opened] Py3 fixes
by MartinBasti 28 Jun '17

28 Jun '17

URL: https://github.com/freeipa/freeipa/pull/882 Author: MartinBasti Title: #882: Py3 fixes Action: opened PR body: """ """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/882/head:pr882 git checkout pr882

1 1

[freeipa PR#623][closed] client install: do not assume /etc/krb5.conf.d exists
by martbab 28 Jun '17

28 Jun '17

URL: https://github.com/freeipa/freeipa/pull/623 Author: HonzaCholasta Title: #623: client install: do not assume /etc/krb5.conf.d exists Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/623/head:pr623 git checkout pr623

1 0

[freeipa PR#705][closed] [WIP] ipatests: Add krbpasswordexpiration tests
by redhatrises 27 Jun '17

27 Jun '17

URL: https://github.com/freeipa/freeipa/pull/705 Author: redhatrises Title: #705: [WIP] ipatests: Add krbpasswordexpiration tests Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/705/head:pr705 git checkout pr705

1 0

[freeipa PR#896][opened] [py3] wsgi fixes
by stlaz 27 Jun '17

27 Jun '17

URL: https://github.com/freeipa/freeipa/pull/896 Author: stlaz Title: #896: [py3] wsgi fixes Action: opened PR body: """ These patches fix WebUI for FreeIPA when using python3-mod_wsgi. To get it working, however, one also needs to run Fedora 26 with python3-pyldap with the following fixes: https://github.com/pyldap/pyldap/pull/104 https://github.com/pyldap/pyldap/commit/60801268c56784f86847caa400dc0aad169… """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/896/head:pr896 git checkout pr896

2 1

[freeipa PR#863][opened] Add CommonNameToSANDefault to default cert profile
by frasertweedale 27 Jun '17

27 Jun '17

URL: https://github.com/freeipa/freeipa/pull/863 Author: frasertweedale Title: #863: Add CommonNameToSANDefault to default cert profile Action: opened PR body: """ The CommonNameToSANDefault component was added to Dogtag 10.4. When a profile is configured to use it, this profile copies the CN in the certificate to the Subject Alternative Name extension as a dNSName (if and only if it does look like a DNS name). It is desirable that the default service profile use this component. Add it to the default profile, for new installations only. For existing installations, until a proper profile update mechanism is implemented, administrators who wish to use it must configure it via the 'certprofile-mod' command. Part of: https://pagure.io/freeipa/issue/4970 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/863/head:pr863 git checkout pr863

2 3

[freeipa PR#859][opened] Add CommonNameToSANDefault to default cert profile
by frasertweedale 27 Jun '17

27 Jun '17

URL: https://github.com/freeipa/freeipa/pull/859 Author: frasertweedale Title: #859: Add CommonNameToSANDefault to default cert profile Action: opened PR body: """ The CommonNameToSANDefault component was added to Dogtag 10.4. When a profile is configured to use it, this profile copies the CN in the certificate to the Subjet Alternative Name extension as a dNSName (if and only if it does look like a DNS name). It is desirable that the default service profile use this component. Add it to the default profile, for new installations only. For existing installations, until a proper profile update mechanism is implemented, administrators who wish to use it must configure it via the 'certprofile-mod' command. Part of: https://pagure.io/freeipa/issue/4970 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/859/head:pr859 git checkout pr859

4 10

[freeipa PR#872][opened] Add IPA-specific bind unit file
by stlaz 26 Jun '17

26 Jun '17

URL: https://github.com/freeipa/freeipa/pull/872 Author: stlaz Title: #872: Add IPA-specific bind unit file Action: opened PR body: """ During upgrade of Fedora 25 to 26, when FreeIPA is installed with DNS, bind attempts to start before KDC which leads to a failed start because it requires a ticket to connect to LDAP. Add an own unit file with a dependency which sets bind to start after the KDC service. https://pagure.io/freeipa/issue/7018 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/872/head:pr872 git checkout pr872

2 7

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-devel June 2017