April 2021 - FreeIPA-devel - Fedora mailing-lists

[freeipa PR#5724][opened] [Backport][ipa-4-9] ipatests: test to renew certs on replica using ipa-cert-fix
by flo-renaud 20 Aug '21

20 Aug '21

URL: https://github.com/freeipa/freeipa/pull/5724 Author: flo-renaud Title: #5724: [Backport][ipa-4-9] ipatests: test to renew certs on replica using ipa-cert-fix Action: opened PR body: """ This PR was opened automatically because PR #5653 was pushed to master and backport to ipa-4-9 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5724/head:pr5724 git checkout pr5724

1 1

[freeipa PR#5738][opened] ipatests: wait while http/ldap/pkinit cert get renew on replica
by mrizwan93 19 Aug '21

19 Aug '21

URL: https://github.com/freeipa/freeipa/pull/5738 Author: mrizwan93 Title: #5738: ipatests: wait while http/ldap/pkinit cert get renew on replica Action: opened PR body: """ LDAP/HTTP/PKINIT certificates should be renewed on replica after moving system date. Test was failing because ipa-cert-fix ran while these cert was not renewed and it tried to fix it. Fixes: https://pagure.io/freeipa/issue/8815 Signed-off-by: Mohammad Rizwan <myusuf(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5738/head:pr5738 git checkout pr5738

2 1

[freeipa PR#5613][opened] ipa-kra-install: exit if ca_host is overriden
by antoniotorresm 27 Jul '21

27 Jul '21

URL: https://github.com/freeipa/freeipa/pull/5613 Author: antoniotorresm Title: #5613: ipa-kra-install: exit if ca_host is overriden Action: opened PR body: """ `ipa-kra-install` should exit if `ca_host` line is present in `/etc/ipa/default.conf`, as it may lead to a misconfigured setup. Fixes: https://pagure.io/freeipa/issue/8245 Signed-off-by: Antonio Torres <antorres(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5613/head:pr5613 git checkout pr5613

1 1

[freeipa PR#5733][opened] Revert the way hosts/services certs are searched for
by rcritten 20 Jul '21

20 Jul '21

URL: https://github.com/freeipa/freeipa/pull/5733 Author: rcritten Title: #5733: Revert the way hosts/services certs are searched for Action: opened PR body: """ Revert the way hosts/services certs are searched for This reverts a change that caused all service certs to be revoked if any other service was deleted. There is special handling when passing in host, service or user into cert_find. The _ldap_search method creates filters for the object which later in cert_find removes unrelated certificates. https://pagure.io/freeipa/issue/7835 Signed-off-by: Rob Crittenden <rcritten(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5733/head:pr5733 git checkout pr5733

1 1

[freeipa PR#5713][opened] Add support subordinate user/group ids as separate entries
by tiran 09 Jul '21

09 Jul '21

URL: https://github.com/freeipa/freeipa/pull/5713 Author: tiran Title: #5713: Add support subordinate user/group ids as separate entries Action: opened PR body: """ """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5713/head:pr5713 git checkout pr5713

2 1

[freeipa PR#5391][opened] Translations update from Weblate
by weblate 07 Jul '21

07 Jul '21

URL: https://github.com/freeipa/freeipa/pull/5391 Author: weblate Title: #5391: Translations update from Weblate Action: opened PR body: """ Translations update from [Weblate](https://translate.fedoraproject.org/projects/freeipa/ipa-4-8/) for freeipa/ipa-4-8. Current translation status: ![Weblate translation status](https://translate.fedoraproject.org/widgets/freeipa/-/ipa-4-8/horiz… """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5391/head:pr5391 git checkout pr5391

2 1

[freeipa PR#5617][opened] Add checks to prevent adding auth indicators to internal IPA services
by antoniotorresm 05 Jul '21

05 Jul '21

URL: https://github.com/freeipa/freeipa/pull/5617 Author: antoniotorresm Title: #5617: Add checks to prevent adding auth indicators to internal IPA services Action: opened PR body: """ Authentication indicators should not be enforced against internal IPA services, since not all users of those servers are able to produce Kerberos tickets with all the auth indicator options. This includes `host`, `ldap`, `HTTP` and `cifs` in IPA server and `host` and `cifs` in IPA clients. Fixes: https://pagure.io/freeipa/issue/8206 Signed-off-by: Antonio Torres <antorres(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5617/head:pr5617 git checkout pr5617

2 1

[freeipa PR#4909][opened] Add unauthenticated nsupdate
by fcami 28 Jun '21

28 Jun '21

URL: https://github.com/freeipa/freeipa/pull/4909 Author: fcami Title: #4909: Add unauthenticated nsupdate Action: opened PR body: """ ipa-client-install: update sssd.conf if nsupdate requires -g If dynamic DNS updates are selected, sssd will use GSS-TSIG by default for nsupdate. When ipa-client-install notices that plain nsupdate is required, switch sssd to use no authentication for dynamic updates too. Fixes: https://pagure.io/freeipa/issue/8402 + ipa-client-install: invoke nsupdate twice (GSS-TSIG, plain) ipa-client-install invokes nsupdate with GSS-TSIG at client enrollment time. If that fails, no retry is done. Change that behavior to try again without GSS-TSIG. Fixes: https://pagure.io/freeipa/issue/8402 #### This is purely WIP: - it needs a proper test - there are more nsupdate calls that should be adapted. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/4909/head:pr4909 git checkout pr4909

2 1

[freeipa PR#5637][opened] ipatests: Test to check that ResponseNotReady error is not displayed when user session cache is deleted
by menonsudhir 22 Jun '21

22 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5637 Author: menonsudhir Title: #5637: ipatests: Test to check that ResponseNotReady error is not displayed when user session cache is deleted Action: opened PR body: """ This testcase checks that http.client.ResponseNotReady error is not displayed when user session cache is deleted. https://pagure.io/freeipa/issue/7752 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5637/head:pr5637 git checkout pr5637

2 1

[freeipa PR#5325][opened] LDAP autobind authenticateAsDN for BIND named
by tiran 15 Jun '21

15 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5325 Author: tiran Title: #5325: LDAP autobind authenticateAsDN for BIND named Action: opened PR body: """ Use new nsslapd-ldapiautoauthdnattr feature to switch BIND named from GSSAPI bind to EXTERNAL LDAPI bind. Requires 389-DS build https://copr.fedorainfracloud.org/coprs/build/1811023 - [ ] Requires new build of 389-DS - [ ] Add new OIDs to FreeIPA's OID registry Fixes: https://pagure.io/freeipa/issue/8544 See: https://github.com/389ds/389-ds-base/issues/4381 Signed-off-by: Christian Heimes <cheimes(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5325/head:pr5325 git checkout pr5325

2 1

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-devel April 2021