URL: https://github.com/freeipa/freeipa/pull/4810
Author: frasertweedale
Title: #4810: fix iPAddress cert issuance for >1 host/service
Action: opened
PR body:
"""
The 'cert_request' command accumulates DNS names from the CSR,
before checking that all IP addresses in the CSR are reachable from
those DNS names. Before adding a DNS name to the set, we check that
that it corresponds to the FQDN of a known host/service principal
(including principal aliases). When a DNS name maps to a
"alternative" principal (i.e. not the one given via the 'principal'
argument), this check was not being performed correctly.
Specifically, we were looking for the 'krbprincipalname' field on
the RPC response object directly, instead of its 'result' field.
To resolve the issue, dereference the RPC response to its 'result'
field before invoking the '_dns_name_matches_principal' subroutine.
Fixes: https://pagure.io/freeipa/issue/8368
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4810/head:pr4810
git checkout pr4810
URL: https://github.com/freeipa/freeipa/pull/4785
Author: abbra
Title: #4785: [Backport][ipa-4-8] libotp: Replace NSS with OpenSSL HMAC
Action: opened
PR body:
"""
This PR was opened automatically because PR #4780 was pushed to master and backport to ipa-4-8 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4785/head:pr4785
git checkout pr4785
URL: https://github.com/freeipa/freeipa/pull/4776
Author: abbra
Title: #4776: [Backport][ipa-4-8] Fix design bug in named ipa-ext.conf
Action: opened
PR body:
"""
This PR was opened automatically because PR #4715 was pushed to master and backport to ipa-4-8 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4776/head:pr4776
git checkout pr4776
URL: https://github.com/freeipa/freeipa/pull/4779
Author: seocam
Title: #4779: [Backport][ipa-4-6] Add test for sssd ad trust lookup with dn in certmaprule
Action: opened
PR body:
"""
Backport of #4588 to ipa-4-6 branch.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4779/head:pr4779
git checkout pr4779
URL: https://github.com/freeipa/freeipa/pull/4778
Author: seocam
Title: #4778: [Backport][ipa-4-6] Add test for sssd ad trust lookup with dn in certmaprule
Action: closed
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4778/head:pr4778
git checkout pr4778