January 2019 - FreeIPA-devel - Fedora mailing-lists

[freeipa PR#1843][opened] Allow issuing certificates with IP addresses in subjectAltName (ftweedal)
by frasertweedale 04 Mar '19

04 Mar '19

URL: https://github.com/freeipa/freeipa/pull/1843 Author: frasertweedale Title: #1843: Allow issuing certificates with IP addresses in subjectAltName (ftweedal) Action: opened PR body: """ Continuation of https://github.com/freeipa/freeipa/pull/1700 by @ipilcher, adding commits by @ftweedal. Please keep both PRs open for the time being. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1843/head:pr1843 git checkout pr1843

2 1

[freeipa PR#1883][opened] ipactl: Correction of named to named-pkcs11
by amitkumar50 21 Feb '19

21 Feb '19

URL: https://github.com/freeipa/freeipa/pull/1883 Author: amitkumar50 Title: #1883: ipactl: Correction of named to named-pkcs11 Action: opened PR body: """ Whenever ipactl status is run it returned: Directory Service: RUNNING krb5kdc Service: RUNNING kadmin Service: RUNNING named Service: RUNNING ... This PR changes ipactl o/p to: Directory Service: RUNNING krb5kdc Service: RUNNING kadmin Service: RUNNING named-pkcs11 Service: RUNNING Resolves: https://pagure.io/freeipa/issue/7446 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1883/head:pr1883 git checkout pr1883

2 1

[freeipa PR#2796][opened] prci_definitions: Add nightly flow for pki dependency testing
by f-trivino 12 Feb '19

12 Feb '19

URL: https://github.com/freeipa/freeipa/pull/2796 Author: f-trivino Title: #2796: prci_definitions: Add nightly flow for pki dependency testing Action: opened PR body: """ This commit adds PKI nightly flow definition. It executes relevant freeipa tests in order to catch PKI regressions. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2796/head:pr2796 git checkout pr2796

2 1

[freeipa PR#2791][opened] [Backport][ipa-4-7] Split Web UI test suite in nightly PR CI configuration (IPA 4.7)
by serg-cymbaluk 08 Feb '19

08 Feb '19

URL: https://github.com/freeipa/freeipa/pull/2791 Author: serg-cymbaluk Title: #2791: [Backport][ipa-4-7] Split Web UI test suite in nightly PR CI configuration (IPA 4.7) Action: opened PR body: """ **Manually** apply changes from PRs: https://github.com/freeipa/freeipa/pull/2538 https://github.com/freeipa/freeipa/pull/2774 WebUI test suite configuration is split to 11 bunches of tests to avoid unexpected timeouts. test_webui/test_host.py runs standalone because it is unstable and heaviest one. Original task: https://pagure.io/freeipa/issue/7756 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2791/head:pr2791 git checkout pr2791

1 1

[freeipa PR#2801][opened] [Backport][ipa-4-7] Remove tests which install KRA on replica w/o KRA on master
by wladich 07 Feb '19

07 Feb '19

URL: https://github.com/freeipa/freeipa/pull/2801 Author: wladich Title: #2801: [Backport][ipa-4-7] Remove tests which install KRA on replica w/o KRA on master Action: opened PR body: """ This is a manual backport of #2449 The KRA installation code explicity quits if trying to install a KRA during a replica installation if there is not already a KRA in the topology. A KRA can be added afterward. https://pagure.io/freeipa/issue/7651 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2801/head:pr2801 git checkout pr2801

1 1

[freeipa PR#2775][opened] Web UI tests: Get rid of *_cert_path and *_csr_path config variables
by serg-cymbaluk 06 Feb '19

06 Feb '19

URL: https://github.com/freeipa/freeipa/pull/2775 Author: serg-cymbaluk Title: #2775: Web UI tests: Get rid of *_cert_path and *_csr_path config variables Action: opened PR body: """ Web UI tests now don't require additional configuration to test certificates. https://pagure.io/freeipa/issue/7843 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2775/head:pr2775 git checkout pr2775

1 1

[freeipa PR#2802][opened] [testing_f28] Nightly PR
by freeipa-pr-ci 05 Feb '19

05 Feb '19

URL: https://github.com/freeipa/freeipa/pull/2802 Author: freeipa-pr-ci Title: #2802: [testing_f28] Nightly PR Action: opened PR body: """ None """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2802/head:pr2802 git checkout pr2802

1 1

[freeipa PR#2628][opened] [WIP] Refactor LDAPClient
by tiran 05 Feb '19

05 Feb '19

URL: https://github.com/freeipa/freeipa/pull/2628 Author: tiran Title: #2628: [WIP] Refactor LDAPClient Action: opened PR body: """ **WIP** Simplify LDAPClient construction and ensure that LDAP connections are always secure (LDAP + STARTTLS, LDAPI, LDAPS) unless explicitly stated otherwise. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2628/head:pr2628 git checkout pr2628

1 1

[freeipa PR#2697][opened] LDAPClient: Prefer LDAPI connections in installer and simplify API
by tiran 05 Feb '19

05 Feb '19

URL: https://github.com/freeipa/freeipa/pull/2697 Author: tiran Title: #2697: LDAPClient: Prefer LDAPI connections in installer and simplify API Action: opened PR body: """ On several occasions the installer uses LDAP + simple_bind rather than LDAPI with EXTERNAL bind. LDAPI (LDAP over Unix socket) is more secure, a tiny bit faster, and is immune to some network/DNS related issues. The changeset simplifies the LDAPClient API by introducing additional constructors. The new constructors are not only easier to use but also prevent some common pitfalls like LDAP connection without StartTSL. Several code paths now use ``LDAPClient.from_realm(realm_name)`` with external bind as root instead of LDAP with DM password. ### Add constructors to ldap client Add LDAPClient.from_realm(), LDAPClient.from_hostname_secure(), and LDAPClient.from_hostname_plain() constructors. The simple_bind() method now also refuses to transmit a password over a plain, unencrypted line. LDAPClient.from_hostname_secure() uses start_tls and FreeIPA's CA cert by default. The constructor also automatically disables start_tls for ldaps and ldapi connections. ### Use new LDAPClient constructors Replace get_ldap_uri() + LDAPClient() with new LDAPClient constructors like LDAPClient.from_realm(). Some places now use LDAPI with external bind instead of LDAP with simple bind. Although the FQDN *should* resolve to 127.0.0.1 / [::1], there is no hard guarantee. The draft tools.ietf.org/html/draft-west-let-localhost-be-localhost-04#section-5.1 specifies that applications must verify that the resulting IP is a loopback API. LDAPI is always local and a bit more efficient, too. The simple_bind() method also prevents the caller from sending a password over an insecure line. ### Use LDAPS when installing CA on replica On a replica, 389-DS is already configured for secure connections when the CA is installed. ### Move realm_to_serverid/ldap_uri to ipaldap The helper function realm_to_serverid() and realm_to_ldap_uri() are useful outside the server installation framework. They are now in ipapython.ipaldap along other helpers for LDAP handling in FreeIPA. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2697/head:pr2697 git checkout pr2697

2 1

[freeipa PR#2800][opened] [Backport][ipa-4-7] PRCI failures fix
by wladich 05 Feb '19

05 Feb '19

URL: https://github.com/freeipa/freeipa/pull/2800 Author: wladich Title: #2800: [Backport][ipa-4-7] PRCI failures fix Action: opened PR body: """ This is a manual backport of #2180, which seems does not have a corresponding Pagure issue test_installation.py - ticket 7008 closed so removing xfail - TestInstallWithCA1 - TestInstallWithCA - TestInstallWithCA_DNS1 - TestInstallWithCA_DNS2 nightly_master - test_backup_and_restore_TestUser[r>R]ootFilesOwnership[Permission] Signed-off-by: Pavel Picka <ppicka(a)redhat.com> Reviewed-By: Michal Reznik <mreznik(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2800/head:pr2800 git checkout pr2800

2 1

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-devel January 2019