URL: https://github.com/freeipa/freeipa/pull/3509
Author: frasertweedale
Title: #3509: [Backport][ipa-4-7] Profile-based system cert renewal
Action: opened
PR body:
"""
Manual backport of #3316 to ipa-4-7. We
may need to backport this change all the way to ipa-4-6 to allow us to change
the IPA RA certificate profile on older releases.
See also https://github.com/freeipa/freeipa/pull/3508 which is the ipa-4-7 backport PR.
There were some trivial conflicts. There were substantive conflicts for two patches,
but these were due to the switch from mod_nss to mod_ssl, and from NSSDB-based
IPA RA cert to PEM files. Those patches were not relevant, and were dropped.
https://pagure.io/freeipa/issue/7991
Do not rely on CI only; I will have to test this change myself so I'll add WIP
label, and remove it when I'm satisfied.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/3509/head:pr3509
git checkout pr3509
URL: https://github.com/freeipa/freeipa/pull/3508
Author: frasertweedale
Title: #3508: [Backport][ipa-4-7] Profile-based system cert renewal
Action: opened
PR body:
"""
Manual backport of https://github.com/freeipa/freeipa/pull/3316 to ipa-4-7. We
may need to backport this change all the way to ipa-4-6 to allow us to change
the IPA RA certificate profile on older releases. Currently this change is on
master and ipa-4-8, so ipa-4-7 is the next step.
There were some trivial conflicts. The only substantive conflicts were in
`dogtaginstance.py`. These were resolved by cherry-picking
8686cd3b4b69f725aee05c9cdd3034d7436055d3 ahead of the original patchset.
https://pagure.io/freeipa/issue/7991
Do not rely on CI only; I will have to test this change myself so I'll add WIP
label, and remove it when I'm satisfied.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/3508/head:pr3508
git checkout pr3508
URL: https://github.com/freeipa/freeipa/pull/4283
Author: rcritten
Title: #4283: [Backport][ipa-4-8] Fix divide-by-zero when svc weight is 0 for all masters in location
Action: opened
PR body:
"""
This PR was opened automatically because PR #4278 was pushed to master and backport to ipa-4-8 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4283/head:pr4283
git checkout pr4283
URL: https://github.com/freeipa/freeipa/pull/3976
Author: fcami
Title: #3976: locations.py: fix divide by 0
Action: opened
PR body:
"""
If all IPA servers (or the first server) of a location have
service weights == 0, the sum of the weights is zero leading
to a division by zero in relative weight calculation.
Detect the situation and set relative weight to 0 in this case.
Fixes: https://pagure.io/freeipa/issue/8135
Signed-off-by: François Cami <fcami(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/3976/head:pr3976
git checkout pr3976
URL: https://github.com/freeipa/freeipa/pull/4278
Author: rcritten
Title: #4278: Fix divide-by-zero when svc weight is 0 for all masters in location
Action: opened
PR body:
"""
Fix div-by-zero when svc weight is 0 for all masters in location
The relative service weight output tries to show the relative
chance that any given master in a locaiton will be picked. This
didn't account for all masters having a weight of 0 which would
result in a divide-by-zero error.
Implement the following rules:
1. If all masters have weight == 0 then all are equally
weighted.
2. If any masters have weight == 0 then they have an
extremely small chance of being chosen, percentage is
0.1.
3. Otherwise it's percentage change is based on the sum of
the weights of non-zero masters.
https://pagure.io/freeipa/issue/8135
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4278/head:pr4278
git checkout pr4278
URL: https://github.com/freeipa/freeipa/pull/4265
Author: amore17
Title: #4265: [Backport][ipa-4-6] ipatests: SSSD should fetch external groups without any limit.
Action: opened
PR body:
"""
This is manual back-port of : #4077
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4265/head:pr4265
git checkout pr4265
URL: https://github.com/freeipa/freeipa/pull/4257
Author: amore17
Title: #4257: [Backport][ipa-4-7] ipatests: SSSD should fetch external groups without any limit.
Action: opened
PR body:
"""
This is manual back-port of : #4077
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4257/head:pr4257
git checkout pr4257