March 2021 - FreeIPA-devel - Fedora mailing-lists

[freeipa PR#5613][opened] ipa-kra-install: exit if ca_host is overriden
by antoniotorresm 27 Jul '21

27 Jul '21

URL: https://github.com/freeipa/freeipa/pull/5613 Author: antoniotorresm Title: #5613: ipa-kra-install: exit if ca_host is overriden Action: opened PR body: """ `ipa-kra-install` should exit if `ca_host` line is present in `/etc/ipa/default.conf`, as it may lead to a misconfigured setup. Fixes: https://pagure.io/freeipa/issue/8245 Signed-off-by: Antonio Torres <antorres(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5613/head:pr5613 git checkout pr5613

1 1

[freeipa PR#5391][opened] Translations update from Weblate
by weblate 07 Jul '21

07 Jul '21

URL: https://github.com/freeipa/freeipa/pull/5391 Author: weblate Title: #5391: Translations update from Weblate Action: opened PR body: """ Translations update from [Weblate](https://translate.fedoraproject.org/projects/freeipa/ipa-4-8/) for freeipa/ipa-4-8. Current translation status: ![Weblate translation status](https://translate.fedoraproject.org/widgets/freeipa/-/ipa-4-8/horiz… """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5391/head:pr5391 git checkout pr5391

2 1

[freeipa PR#5617][opened] Add checks to prevent adding auth indicators to internal IPA services
by antoniotorresm 05 Jul '21

05 Jul '21

URL: https://github.com/freeipa/freeipa/pull/5617 Author: antoniotorresm Title: #5617: Add checks to prevent adding auth indicators to internal IPA services Action: opened PR body: """ Authentication indicators should not be enforced against internal IPA services, since not all users of those servers are able to produce Kerberos tickets with all the auth indicator options. This includes `host`, `ldap`, `HTTP` and `cifs` in IPA server and `host` and `cifs` in IPA clients. Fixes: https://pagure.io/freeipa/issue/8206 Signed-off-by: Antonio Torres <antorres(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5617/head:pr5617 git checkout pr5617

2 1

[freeipa PR#4909][opened] Add unauthenticated nsupdate
by fcami 28 Jun '21

28 Jun '21

URL: https://github.com/freeipa/freeipa/pull/4909 Author: fcami Title: #4909: Add unauthenticated nsupdate Action: opened PR body: """ ipa-client-install: update sssd.conf if nsupdate requires -g If dynamic DNS updates are selected, sssd will use GSS-TSIG by default for nsupdate. When ipa-client-install notices that plain nsupdate is required, switch sssd to use no authentication for dynamic updates too. Fixes: https://pagure.io/freeipa/issue/8402 + ipa-client-install: invoke nsupdate twice (GSS-TSIG, plain) ipa-client-install invokes nsupdate with GSS-TSIG at client enrollment time. If that fails, no retry is done. Change that behavior to try again without GSS-TSIG. Fixes: https://pagure.io/freeipa/issue/8402 #### This is purely WIP: - it needs a proper test - there are more nsupdate calls that should be adapted. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/4909/head:pr4909 git checkout pr4909

2 1

[freeipa PR#5637][opened] ipatests: Test to check that ResponseNotReady error is not displayed when user session cache is deleted
by menonsudhir 22 Jun '21

22 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5637 Author: menonsudhir Title: #5637: ipatests: Test to check that ResponseNotReady error is not displayed when user session cache is deleted Action: opened PR body: """ This testcase checks that http.client.ResponseNotReady error is not displayed when user session cache is deleted. https://pagure.io/freeipa/issue/7752 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5637/head:pr5637 git checkout pr5637

2 1

[freeipa PR#5325][opened] LDAP autobind authenticateAsDN for BIND named
by tiran 15 Jun '21

15 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5325 Author: tiran Title: #5325: LDAP autobind authenticateAsDN for BIND named Action: opened PR body: """ Use new nsslapd-ldapiautoauthdnattr feature to switch BIND named from GSSAPI bind to EXTERNAL LDAPI bind. Requires 389-DS build https://copr.fedorainfracloud.org/coprs/build/1811023 - [ ] Requires new build of 389-DS - [ ] Add new OIDs to FreeIPA's OID registry Fixes: https://pagure.io/freeipa/issue/8544 See: https://github.com/389ds/389-ds-base/issues/4381 Signed-off-by: Christian Heimes <cheimes(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5325/head:pr5325 git checkout pr5325

2 1

[freeipa PR#5631][opened] azure: use Fedora 34 as a baseline
by abbra 25 May '21

25 May '21

URL: https://github.com/freeipa/freeipa/pull/5631 Author: abbra Title: #5631: azure: use Fedora 34 as a baseline Action: opened PR body: """ """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5631/head:pr5631 git checkout pr5631

1 1

[freeipa PR#5504][opened] Test on Fedora 33
by tiran 25 May '21

25 May '21

URL: https://github.com/freeipa/freeipa/pull/5504 Author: tiran Title: #5504: Test on Fedora 33 Action: opened PR body: """ 389-DS on Fedora 32 does not have new DS feature. Update to temmplate 0.0.5 with updated DS. Signed-off-by: Christian Heimes <cheimes(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5504/head:pr5504 git checkout pr5504

1 1

[freeipa PR#5605][opened] Add ACME profile on replica install in non-ACME environment
by rcritten 18 May '21

18 May '21

URL: https://github.com/freeipa/freeipa/pull/5605 Author: rcritten Title: #5605: Add ACME profile on replica install in non-ACME environment Action: opened PR body: """ Always import the default certificate profiles The default certificate profiles were not imported for in a promoted client installation. This could lead to missing profiles, as was seen in the ACME case, while upgrading from older versions. The sequence was: 1. Install a non-ACME IPA server 2. Install an ipa client 3. On the client promote to a server with a build that supports ACME. The resulting installation is missing the acmeIPAServerCert profile because it is provided in INCLUDED_PROFILES which isn't loaded during promotions. There is already handling to handle issues if the profile already exists so it is safe to call this on every installation. https://pagure.io/freeipa/issue/8738 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5605/head:pr5605 git checkout pr5605

2 1

[freeipa PR#5647][opened] WIP: check on some performance changes
by rcritten 12 May '21

12 May '21

URL: https://github.com/freeipa/freeipa/pull/5647 Author: rcritten Title: #5647: WIP: check on some performance changes Action: opened PR body: """ Exercise some changes that should reduce the number of queries performed for some operations, mostly host and user related. The execution time patches will be replaced by Antonio's patch at some point. Running in CI to see if anything is terribly broken. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5647/head:pr5647 git checkout pr5647

1 1

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-devel March 2021