March 2020 - FreeIPA-devel - Fedora mailing-lists

[freeipa PR#4061][opened] doc/designs: Add a design page for application-specific passwords
by RichardKalinec 07 Mar '21

07 Mar '21

URL: https://github.com/freeipa/freeipa/pull/4061 Author: RichardKalinec Title: #4061: doc/designs: Add a design page for application-specific passwords Action: opened PR body: """ This design page describes a new enhancement: application-specific passwords and permissions management for them. Users will be able to have additional passwords besides the primary one, and set permissions for them specifying what systems and services will each application-specific password have access to. Application-specific passwords will also be usable with other authentication mechanisms incorporating passwords, namely otp, radius and hardened. They will also be supported by ipa-kdb for Kerberos authentication. https://pagure.io/freeipa/issue/4510 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/4061/head:pr4061 git checkout pr4061

2 1

[freeipa PR#3275][opened] Issue 7975 - Accept 389-ds JSON replication status messages
by marcus2376 01 Dec '20

01 Dec '20

URL: https://github.com/freeipa/freeipa/pull/3275 Author: marcus2376 Title: #3275: Issue 7975 - Accept 389-ds JSON replication status messages Action: opened PR body: """ Description: 389-ds now stores a replication agreement status message in a JSON string in a new attribute: replicaLastInitStatusJSON replicaLastUpdateStatusJSON The original status attributes' values are not changing at this time, but there are plans to do so eventually as the old status format is confusing. http://www.port389.org/docs/389ds/design/repl-agmt-status-design.html https://pagure.io/freeipa/issue/7975 Reviewed by: ? """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3275/head:pr3275 git checkout pr3275

3 2

[freeipa PR#3774][opened] [DNSSEC] WIP Allow using of a custom OpenSSL engine for BIND
by stanislavlevin 31 Aug '20

31 Aug '20

URL: https://github.com/freeipa/freeipa/pull/3774 Author: stanislavlevin Title: #3774: [DNSSEC] WIP Allow using of a custom OpenSSL engine for BIND Action: opened PR body: """ For now Debian, Fedora, RHEL, etc. build BIND with 'native PKCS11' support. Till recently, that was the strict requirement of DNSSEC. The problem is that this restricts cross-platform features of FreeIPA. With the help of libp11, which provides `pkcs11` engine plugin for the OpenSSL library for accessing PKCS11 modules in a semi- transparent way, FreeIPA could utilize OpenSSL version of BIND. BIND in turn provides ability to specify the OpenSSL engine on the command line of `named` and all the BIND `dnssec-*` tools by using the `-E engine_name`. Currently, this PR implements just an abstract ability. Actual configuration and tests results could be seen in my fork Azure Pipelines: https://dev.azure.com/slev0400/slev/_build/results?buildId=627&view=logs&j=… https://dev.azure.com/slev0400/slev/_build/results?buildId=627&view=logs&j=… Related: https://pagure.io/freeipa/issue/8094 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3774/head:pr3774 git checkout pr3774

2 1

[freeipa PR#3544][opened] [WIP] ipa-join: allowing call with jsonrpc into freeipa API
by mulatinho 09 Jul '20

09 Jul '20

URL: https://github.com/freeipa/freeipa/pull/3544 Author: mulatinho Title: #3544: [WIP] ipa-join: allowing call with jsonrpc into freeipa API Action: opened PR body: """ - Adding JSON-C and LibCURL library into configure.ac and Makefile.am - Creating a API call with option '-j' or '--jsonrpc' to make host join on FreeIPA with JSONRPC and libCURL. TODO: unenroll process with JSONRPC. To test the call: # kinit admin # ipa-join -s server.freeipa.ipadomain -j Debug: # ipa-join -s server.freeipa.ipadomain -j -d Related: https://pagure.io/freeipa/issue/7966 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3544/head:pr3544 git checkout pr3544

2 1

[freeipa PR#3832][opened] [WIP][PoC] Web UI: Use system jQuery bundle
by serg-cymbaluk 20 Apr '20

20 Apr '20

URL: https://github.com/freeipa/freeipa/pull/3832 Author: serg-cymbaluk Title: #3832: [WIP][PoC] Web UI: Use system jQuery bundle Action: opened PR body: """ """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3832/head:pr3832 git checkout pr3832

1 1

[freeipa PR#4303][opened] Test for healthcheck being run on replica with stopped master
by miskopo 17 Apr '20

17 Apr '20

URL: https://github.com/freeipa/freeipa/pull/4303 Author: miskopo Title: #4303: Test for healthcheck being run on replica with stopped master Action: opened PR body: """ Test checks whether healthcheck completes successfully from replica even when IPA services on master are stopped. Automates: 693fcf36e087e34ebd8cd20fcdb959329c9eb221 Automates: 158bfadfef85dd66f9645b0b6bd4f1cb8a56b53e Automates: 1fedf08a6de405b87897c4b7ed30f62cae88cd47 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/4303/head:pr4303 git checkout pr4303

2 1

[freeipa PR#4102][opened] [WIP] Debian: write out only one CA certificate per file
by yrro 08 Apr '20

08 Apr '20

URL: https://github.com/freeipa/freeipa/pull/4102 Author: yrro Title: #4102: [WIP] Debian: write out only one CA certificate per file Action: opened PR body: """ ca-certificates populates /etc/ssl/certs with symlinks to its input files and then runs 'openssl rehash' to create the symlinks that libssl uses to look up a CA certificate to see if it is trused. 'openssl rehash' ignores any files that contain more than one certificate: <https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=945274>. With this change, we write out trusted CA certificates to /usr/local/share/ipa-ca, one certificate per file. Fixes: https://pagure.io/freeipa/issue/8106 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/4102/head:pr4102 git checkout pr4102

2 1

[freeipa PR#4415][opened] ipatests: add missing tests to nightly run for ipa-4-6
by wladich 08 Apr '20

08 Apr '20

URL: https://github.com/freeipa/freeipa/pull/4415 Author: wladich Title: #4415: ipatests: add missing tests to nightly run for ipa-4-6 Action: opened PR body: """ The following test suites were missing in nightly_ipa-4-6.yaml: - test_integration/test_crlgen_manage.py - test_integration/test_nfs.py - test_integration/test_server_del.py """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/4415/head:pr4415 git checkout pr4415

1 1

[freeipa PR#4472][opened] [WIP] Test softhsm 2.6.0
by abbra 08 Apr '20

08 Apr '20

URL: https://github.com/freeipa/freeipa/pull/4472 Author: abbra Title: #4472: [WIP] Test softhsm 2.6.0 Action: opened PR body: """ Test whole DNSSEC testsuite against new softhsm version from abbra/opendnssec COPR repository """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/4472/head:pr4472 git checkout pr4472

1 1

[freeipa PR#4350][opened] [Backport][ipa-4-6] ipatests: add test for SSSD updating expired cache items
by wladich 07 Apr '20

07 Apr '20

URL: https://github.com/freeipa/freeipa/pull/4350 Author: wladich Title: #4350: [Backport][ipa-4-6] ipatests: add test for SSSD updating expired cache items Action: opened PR body: """ This is a manual backport of #3955 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/4350/head:pr4350 git checkout pr4350

1 1

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-devel March 2020