November 2019 - FreeIPA-devel - Fedora mailing-lists

[freeipa PR#3275][opened] Issue 7975 - Accept 389-ds JSON replication status messages
by marcus2376 01 Dec '20

01 Dec '20

URL: https://github.com/freeipa/freeipa/pull/3275 Author: marcus2376 Title: #3275: Issue 7975 - Accept 389-ds JSON replication status messages Action: opened PR body: """ Description: 389-ds now stores a replication agreement status message in a JSON string in a new attribute: replicaLastInitStatusJSON replicaLastUpdateStatusJSON The original status attributes' values are not changing at this time, but there are plans to do so eventually as the old status format is confusing. http://www.port389.org/docs/389ds/design/repl-agmt-status-design.html https://pagure.io/freeipa/issue/7975 Reviewed by: ? """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3275/head:pr3275 git checkout pr3275

3 2

[freeipa PR#3774][opened] [DNSSEC] WIP Allow using of a custom OpenSSL engine for BIND
by stanislavlevin 31 Aug '20

31 Aug '20

URL: https://github.com/freeipa/freeipa/pull/3774 Author: stanislavlevin Title: #3774: [DNSSEC] WIP Allow using of a custom OpenSSL engine for BIND Action: opened PR body: """ For now Debian, Fedora, RHEL, etc. build BIND with 'native PKCS11' support. Till recently, that was the strict requirement of DNSSEC. The problem is that this restricts cross-platform features of FreeIPA. With the help of libp11, which provides `pkcs11` engine plugin for the OpenSSL library for accessing PKCS11 modules in a semi- transparent way, FreeIPA could utilize OpenSSL version of BIND. BIND in turn provides ability to specify the OpenSSL engine on the command line of `named` and all the BIND `dnssec-*` tools by using the `-E engine_name`. Currently, this PR implements just an abstract ability. Actual configuration and tests results could be seen in my fork Azure Pipelines: https://dev.azure.com/slev0400/slev/_build/results?buildId=627&view=logs&j=… https://dev.azure.com/slev0400/slev/_build/results?buildId=627&view=logs&j=… Related: https://pagure.io/freeipa/issue/8094 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3774/head:pr3774 git checkout pr3774

2 1

[freeipa PR#3544][opened] [WIP] ipa-join: allowing call with jsonrpc into freeipa API
by mulatinho 09 Jul '20

09 Jul '20

URL: https://github.com/freeipa/freeipa/pull/3544 Author: mulatinho Title: #3544: [WIP] ipa-join: allowing call with jsonrpc into freeipa API Action: opened PR body: """ - Adding JSON-C and LibCURL library into configure.ac and Makefile.am - Creating a API call with option '-j' or '--jsonrpc' to make host join on FreeIPA with JSONRPC and libCURL. TODO: unenroll process with JSONRPC. To test the call: # kinit admin # ipa-join -s server.freeipa.ipadomain -j Debug: # ipa-join -s server.freeipa.ipadomain -j -d Related: https://pagure.io/freeipa/issue/7966 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3544/head:pr3544 git checkout pr3544

2 1

[freeipa PR#3832][opened] [WIP][PoC] Web UI: Use system jQuery bundle
by serg-cymbaluk 20 Apr '20

20 Apr '20

URL: https://github.com/freeipa/freeipa/pull/3832 Author: serg-cymbaluk Title: #3832: [WIP][PoC] Web UI: Use system jQuery bundle Action: opened PR body: """ """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3832/head:pr3832 git checkout pr3832

1 1

[freeipa PR#3924][opened] ipatests: add test for sssd behavior with disabled trustdomains
by wladich 03 Apr '20

03 Apr '20

URL: https://github.com/freeipa/freeipa/pull/3924 Author: wladich Title: #3924: ipatests: add test for sssd behavior with disabled trustdomains Action: opened PR body: """ When a trusted subdomain is disabled in ipa, users from this domain should not be able to access resources ipa resources. Related to: https://pagure.io/SSSD/sssd/issue/4078 This PR also adds * utility function for getting sssd version on remore host * a context manager for declaring part of test as xfail """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3924/head:pr3924 git checkout pr3924

1 1

[freeipa PR#3487][opened] Allow rename of a host group
by abbra 31 Mar '20

31 Mar '20

URL: https://github.com/freeipa/freeipa/pull/3487 Author: abbra Title: #3487: Allow rename of a host group Action: opened PR body: """ Fixes: https://pagure.io/freeipa/issue/6783 Signed-off-by: Alexander Bokovoy <abokovoy(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3487/head:pr3487 git checkout pr3487

1 1

[freeipa PR#2106][opened] ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
by abbra 23 Mar '20

23 Mar '20

URL: https://github.com/freeipa/freeipa/pull/2106 Author: abbra Title: #2106: ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager Action: opened PR body: """ Password changes performed by cn=Directory Manager are excluded from password policy checks according to [1]. This is correctly handled by ipa-pwd-extop in case of a normal Kerberos principal in IPA. However, non-kerberos accounts were not excluded from the check. As result, password updates for PKI CA admin account in o=ipaca were failing if a password policy does not allow a password reuse. We are re-setting the password for PKI CA admin in ipa-replica-prepare in case the original directory manager's password was updated since creation of `cacert.p12`. Do password policy check for non-Kerberos accounts only if it was set by a regular user or admin. Changes performed by a cn=Directory Manager and passsync managers should be excluded from the policy check. Fixes: https://pagure.io/freeipa/issue/7181 Signed-off-by: Alexander Bokovoy <abokovoy(a)redhat.com> [1] https://access.redhat.com/documentation/en-us/red_hat_directory_server/10/h… """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2106/head:pr2106 git checkout pr2106

2 1

[freeipa PR#3724][opened] ipatests: Added testcase to check /var/log/ipahealthcheck directory contains healthcheck.log file
by menonsudhir 20 Mar '20

20 Mar '20

URL: https://github.com/freeipa/freeipa/pull/3724 Author: menonsudhir Title: #3724: ipatests: Added testcase to check /var/log/ipahealthcheck directory contains healthcheck.log file Action: opened PR body: """ ipatests: Added testcase to check /var/log/ipahealthcheck directory contains healthcheck.log file Issue: freeipa/freeipa-healthcheck#35 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3724/head:pr3724 git checkout pr3724

2 1

[freeipa PR#3645][opened] ipatests: Added testcase to check that ipa-healthcheck tool displays warning if no range is set
by menonsudhir 12 Mar '20

12 Mar '20

URL: https://github.com/freeipa/freeipa/pull/3645 Author: menonsudhir Title: #3645: ipatests: Added testcase to check that ipa-healthcheck tool displays warning if no range is set Action: opened PR body: """ ipatests: Added testcase to check that ipa-healthcheck tool displays warning if no range is set. Issue: https://github.com/freeipa/freeipa-healthcheck/issues/60 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3645/head:pr3645 git checkout pr3645

2 3

[freeipa PR#3955][opened] ipatests: add test for SSSD updating expired cache items
by wladich 12 Mar '20

12 Mar '20

URL: https://github.com/freeipa/freeipa/pull/3955 Author: wladich Title: #3955: ipatests: add test for SSSD updating expired cache items Action: opened PR body: """ **Patch 1:** New test checks that sssd updates expired cahce values both for IPA domain and trusted AD domain. Related to: https://pagure.io/SSSD/sssd/issue/4012 **Patch 2:** ipatests: refactor sssd tests for cached_auth_timeout option No changes in test scenarios or coverage. Changes: * Renamed parameter user => user_origin for consistency with new tests * evaluate user name once per testcase to reduce copy-pastes * evauate wait time in a more natural way """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3955/head:pr3955 git checkout pr3955

2 1

2025

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-devel November 2019