3:42 a.m.
Hi,
I am planning to do FreeIPA 4.9.4 release, hopefully, this week.
As usual, current release notes draft is at
https://vda.li/drafts/freeipa-4.9.4-release-notes-final.html
We have around 30 tickets resolved:
#2575 (rhbz#952756) [RFE] Installer wizard should prompt for DNS
#2692 (rhbz#817071) ipa-server-install ignores --hostname
#4011 (rhbz#1026434) ipa-server-install crashes when AD subpackage is not installed
#4166 (rhbz#1059135) Backup CS.cfg before modifying it
#4751 (rhbz#1851835) Implement ACME certificate enrolment
#6587 ipa-otpd: systemctl reports "degraded" for "is-system-running"
after todays CentOS updates
#7835 (rhbz#1658280) Cert revocation for services and hosts is inefficient
#8203 (rhbz#1835853) User page on WebUi only has half the information in CA-less install
#8361 Add support for managing subuids and subgids in FreeIPA
#8534 Nightly test failure in
test_integration/test_replica_promotion.py::TestHiddenReplicaPromotion::test_hidden_replica_promote
#8582 Nightly test failure in
test_replica_promotion.py::TestHiddenReplicaPromotion::test_ipahealthcheck_hidden_replica
- ClonesConnectivyAndDataCheck
#8632 [CA-less] user fails to login via WebUI in case of `--no-pkinit`
#8641 Random failure in test_webui/test_user.py::TestLifeCycles::test_life_cycles
#8676 (rhbz#1955440) [Tracker] Multiple nightly test failure in
test_integration/test_ntp_options/TestNTPoptions
#8738 (rhbz#1934991) ACME fails to generate a cert on migrated RHEL8.4 server
#8767 (rhbz#1943151) ipa-server-install displays debug output when --debug output is not
specified.
#8784 RFE: Reduce number of LDAP operations during hbacrule-del
#8785 Nightly test failure in
test_integration/test_commands.py/TestIPACommand/test_proxycommand_invalid_shell
#8787 Add pkey_only to the service_find calls in the host plugin
#8792 Random nightly test failure in
test_replica_promotion.py::TestRenewalMaster::test_automatic_renewal_master_transfer_ondelete
#8794 (rhbz#1948034) Failure to deploy FreeIPA domain controller in Rawhide with
systemd-resolved 248-1.fc35
#8797 Cache the value of ca_is_enabled in the request context
#8798 (rhbz#1953656) RFE: Cache LDAP data within a request
#8801 user-mod requires two searches for a user entry
#8802 IPA test failing with long serial numbers
#8807 (rhbz#1688267) [RFE] IPA to allow setting a new range type.
#8809 RFE: A tool to collect and analyze etimes from IPA logs
#8814 Use Dogtag's CryptographyCryptoProvider instead of NSSCryptoProvider for
KRAClient()
#8818 new pylint 2.8 and astroid 2.5.5
#8830 [azure] performance instability
#8831 update_dna_shared_config may not update all entries
#8832 (rhbz#1957768) ipa-server-upgrade is failing while upgrading rhel8.3 to rhel8.4
I would wait for F34 Azure CI patches but this is not strictly necessary, we can
do another release once they are ready.
We need to figure out what else is worth waiting for. Right now
following PRs have ipa-4-9 label:
5769 WebUI: Add support of 'ipaautoprivategroups' LDAP WebUI ipa-4-9 needs
review https://github.com/freeipa/freeipa/pull/5769
5749 pkispawn: override the AJP
address ipa-4-9 https://github.com/freeipa/freeipa/pull/5749
5733 Revert the way hosts/services certs are searched f WIP ipa-4-9 needs
rebase https://github.com/freeipa/freeipa/pull/5733
5662 ipatests: add test for login with FAST armoring en ipa-4-8
ipa-4-9 https://github.com/freeipa/freeipa/pull/5662
5656 [ipatests] Add basic support for remote ipaplatfor ipa-4-9 needs
review https://github.com/freeipa/freeipa/pull/5656
5637 ipatests: Test to check that ResponseNotReady erro ipa-4-9 needs
review https://github.com/freeipa/freeipa/pull/5637
5617 Add checks to prevent adding auth indicators to
in ipa-4-9 https://github.com/freeipa/freeipa/pull/5617
5387 Raise RuntimeError when kinit_armor fails ipa-4-9
stale https://github.com/freeipa/freeipa/pull/5387
4909 Add unauthenticated nsupdate ipa-4-9 needs
review https://github.com/freeipa/freeipa/pull/4909
389-ds did rename Multimaster replication plugin to Multisupplier and we
need to be able to install with both old and new plugin names. May be
someone could pick up the work Mark Reynolds did in
https://github.com/freeipa/freeipa/pull/5739 and add support for both
ways?
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland
7:51 a.m.
On ma, 24 touko 2021, Alexander Bokovoy via FreeIPA-devel wrote:
Hi,
I am planning to do FreeIPA 4.9.4 release, hopefully, this week.
As usual, current release notes draft is at
https://vda.li/drafts/freeipa-4.9.4-release-notes-final.html
We have around 30 tickets resolved:
#2575 (rhbz#952756) [RFE] Installer wizard should prompt for DNS
#2692 (rhbz#817071) ipa-server-install ignores --hostname
#4011 (rhbz#1026434) ipa-server-install crashes when AD subpackage is not installed
#4166 (rhbz#1059135) Backup CS.cfg before modifying it
#4751 (rhbz#1851835) Implement ACME certificate enrolment
#6587 ipa-otpd: systemctl reports "degraded" for "is-system-running"
after todays CentOS updates
#7835 (rhbz#1658280) Cert revocation for services and hosts is inefficient
#8203 (rhbz#1835853) User page on WebUi only has half the information in CA-less install
#8361 Add support for managing subuids and subgids in FreeIPA
#8534 Nightly test failure in
test_integration/test_replica_promotion.py::TestHiddenReplicaPromotion::test_hidden_replica_promote
#8582 Nightly test failure in
test_replica_promotion.py::TestHiddenReplicaPromotion::test_ipahealthcheck_hidden_replica
- ClonesConnectivyAndDataCheck
#8632 [CA-less] user fails to login via WebUI in case of `--no-pkinit`
#8641 Random failure in test_webui/test_user.py::TestLifeCycles::test_life_cycles
#8676 (rhbz#1955440) [Tracker] Multiple nightly test failure in
test_integration/test_ntp_options/TestNTPoptions
#8738 (rhbz#1934991) ACME fails to generate a cert on migrated RHEL8.4 server
#8767 (rhbz#1943151) ipa-server-install displays debug output when --debug output is not
specified.
#8784 RFE: Reduce number of LDAP operations during hbacrule-del
#8785 Nightly test failure in
test_integration/test_commands.py/TestIPACommand/test_proxycommand_invalid_shell
#8787 Add pkey_only to the service_find calls in the host plugin
#8792 Random nightly test failure in
test_replica_promotion.py::TestRenewalMaster::test_automatic_renewal_master_transfer_ondelete
#8794 (rhbz#1948034) Failure to deploy FreeIPA domain controller in Rawhide with
systemd-resolved 248-1.fc35
#8797 Cache the value of ca_is_enabled in the request context
#8798 (rhbz#1953656) RFE: Cache LDAP data within a request
#8801 user-mod requires two searches for a user entry
#8802 IPA test failing with long serial numbers
#8807 (rhbz#1688267) [RFE] IPA to allow setting a new range type.
#8809 RFE: A tool to collect and analyze etimes from IPA logs
#8814 Use Dogtag's CryptographyCryptoProvider instead of NSSCryptoProvider for
KRAClient()
#8818 new pylint 2.8 and astroid 2.5.5
#8830 [azure] performance instability
#8831 update_dna_shared_config may not update all entries
#8832 (rhbz#1957768) ipa-server-upgrade is failing while upgrading rhel8.3 to rhel8.4
I would wait for F34 Azure CI patches but this is not strictly necessary, we can
do another release once they are ready.
We need to figure out what else is worth waiting for. Right now
following PRs have ipa-4-9 label:
5769 WebUI: Add support of 'ipaautoprivategroups' LDAP WebUI ipa-4-9 needs
review https://github.com/freeipa/freeipa/pull/5769
5749 pkispawn: override the AJP
address ipa-4-9 https://github.com/freeipa/freeipa/pull/5749
5733 Revert the way hosts/services certs are searched f WIP ipa-4-9 needs
rebase https://github.com/freeipa/freeipa/pull/5733
5662 ipatests: add test for login with FAST armoring en ipa-4-8
ipa-4-9 https://github.com/freeipa/freeipa/pull/5662
5656 [ipatests] Add basic support for remote ipaplatfor ipa-4-9 needs
review https://github.com/freeipa/freeipa/pull/5656
5637 ipatests: Test to check that ResponseNotReady erro ipa-4-9 needs
review https://github.com/freeipa/freeipa/pull/5637
5617 Add checks to prevent adding auth indicators to
in ipa-4-9 https://github.com/freeipa/freeipa/pull/5617
5387 Raise RuntimeError when kinit_armor fails ipa-4-9
stale https://github.com/freeipa/freeipa/pull/5387
4909 Add unauthenticated nsupdate ipa-4-9 needs
review https://github.com/freeipa/freeipa/pull/4909
389-ds did rename Multimaster replication plugin to Multisupplier and we
need to be able to install with both old and new plugin names. May be
someone could pick up the work Mark Reynolds did in
https://github.com/freeipa/freeipa/pull/5739 and add support for both
ways?
Since 389-ds released 2.0.5 and updated F34/Rawhide, they are failiing
now to install with FreeIPA 4.9.3. I am working on a combined fix that
would allow to install with earlier 389-ds as well as with 2.0.5
version. This is tracked in PR
https://github.com/freeipa/freeipa/pull/5798.
Once it is solved, we can release 4.9.4.
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland
6:23 a.m.
On ma, 31 touko 2021, Alexander Bokovoy via FreeIPA-devel wrote:
On ma, 24 touko 2021, Alexander Bokovoy via FreeIPA-devel wrote:
>Hi,
>
>I am planning to do FreeIPA 4.9.4 release, hopefully, this week.
>As usual, current release notes draft is at
>https://vda.li/drafts/freeipa-4.9.4-release-notes-final.html
>
>We have around 30 tickets resolved:
>
>#2575 (rhbz#952756) [RFE] Installer wizard should prompt for DNS
>#2692 (rhbz#817071) ipa-server-install ignores --hostname
>#4011 (rhbz#1026434) ipa-server-install crashes when AD subpackage is not installed
>#4166 (rhbz#1059135) Backup CS.cfg before modifying it
>#4751 (rhbz#1851835) Implement ACME certificate enrolment
>#6587 ipa-otpd: systemctl reports "degraded" for
"is-system-running" after todays CentOS updates
>#7835 (rhbz#1658280) Cert revocation for services and hosts is inefficient
>#8203 (rhbz#1835853) User page on WebUi only has half the information in CA-less
install
>#8361 Add support for managing subuids and subgids in FreeIPA
>#8534 Nightly test failure in
test_integration/test_replica_promotion.py::TestHiddenReplicaPromotion::test_hidden_replica_promote
>#8582 Nightly test failure in
test_replica_promotion.py::TestHiddenReplicaPromotion::test_ipahealthcheck_hidden_replica
- ClonesConnectivyAndDataCheck
>#8632 [CA-less] user fails to login via WebUI in case of `--no-pkinit`
>#8641 Random failure in test_webui/test_user.py::TestLifeCycles::test_life_cycles
>#8676 (rhbz#1955440) [Tracker] Multiple nightly test failure in
test_integration/test_ntp_options/TestNTPoptions
>#8738 (rhbz#1934991) ACME fails to generate a cert on migrated RHEL8.4 server
>#8767 (rhbz#1943151) ipa-server-install displays debug output when --debug output is
not specified.
>#8784 RFE: Reduce number of LDAP operations during hbacrule-del
>#8785 Nightly test failure in
test_integration/test_commands.py/TestIPACommand/test_proxycommand_invalid_shell
>#8787 Add pkey_only to the service_find calls in the host plugin
>#8792 Random nightly test failure in
test_replica_promotion.py::TestRenewalMaster::test_automatic_renewal_master_transfer_ondelete
>#8794 (rhbz#1948034) Failure to deploy FreeIPA domain controller in Rawhide with
systemd-resolved 248-1.fc35
>#8797 Cache the value of ca_is_enabled in the request context
>#8798 (rhbz#1953656) RFE: Cache LDAP data within a request
>#8801 user-mod requires two searches for a user entry
>#8802 IPA test failing with long serial numbers
>#8807 (rhbz#1688267) [RFE] IPA to allow setting a new range type.
>#8809 RFE: A tool to collect and analyze etimes from IPA logs
>#8814 Use Dogtag's CryptographyCryptoProvider instead of NSSCryptoProvider for
KRAClient()
>#8818 new pylint 2.8 and astroid 2.5.5
>#8830 [azure] performance instability
>#8831 update_dna_shared_config may not update all entries
>#8832 (rhbz#1957768) ipa-server-upgrade is failing while upgrading rhel8.3 to rhel8.4
>
>I would wait for F34 Azure CI patches but this is not strictly necessary, we can
>do another release once they are ready.
>
>We need to figure out what else is worth waiting for. Right now
>following PRs have ipa-4-9 label:
>
>5769 WebUI: Add support of 'ipaautoprivategroups' LDAP WebUI ipa-4-9 needs
review https://github.com/freeipa/freeipa/pull/5769
>5749 pkispawn: override the AJP
address ipa-4-9 https://github.com/freeipa/freeipa/pull/5749
>5733 Revert the way hosts/services certs are searched f WIP ipa-4-9 needs
rebase https://github.com/freeipa/freeipa/pull/5733
>5662 ipatests: add test for login with FAST armoring en ipa-4-8
ipa-4-9 https://github.com/freeipa/freeipa/pull/5662
>5656 [ipatests] Add basic support for remote ipaplatfor ipa-4-9 needs
review https://github.com/freeipa/freeipa/pull/5656
>5637 ipatests: Test to check that ResponseNotReady erro ipa-4-9 needs
review https://github.com/freeipa/freeipa/pull/5637
>5617 Add checks to prevent adding auth indicators to
in ipa-4-9 https://github.com/freeipa/freeipa/pull/5617
>5387 Raise RuntimeError when kinit_armor fails ipa-4-9
stale https://github.com/freeipa/freeipa/pull/5387
>4909 Add unauthenticated nsupdate ipa-4-9 needs
review https://github.com/freeipa/freeipa/pull/4909
>
>389-ds did rename Multimaster replication plugin to Multisupplier and we
>need to be able to install with both old and new plugin names. May be
>someone could pick up the work Mark Reynolds did in
>https://github.com/freeipa/freeipa/pull/5739 and add support for both
>ways?
Since 389-ds released 2.0.5 and updated F34/Rawhide, they are failiing
now to install with FreeIPA 4.9.3. I am working on a combined fix that
would allow to install with earlier 389-ds as well as with 2.0.5
version. This is tracked in PR
https://github.com/freeipa/freeipa/pull/5798.
Once it is solved, we can release 4.9.4.
The release process is in place.
I am working on merging translation updates (last done in March). I
managed to update master branch with new translations and currently
working on ipa-4-9 but it has more merge conflicts than master.
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland
1095
days inactive
1104
days old
freeipa-devel@lists.fedorahosted.org
2 comments
1 participants
participants (1)
-
Alexander Bokovoy