November 2017 - FreeIPA-devel - Fedora mailing-lists

[freeipa PR#1297][opened] Remove Custodia keys on uninstall
by tiran 16 Nov '17

16 Nov '17

URL: https://github.com/freeipa/freeipa/pull/1297 Author: tiran Title: #1297: Remove Custodia keys on uninstall Action: opened PR body: """ Keys are removed from disk and LDAP https://pagure.io/freeipa/issue/7253 Signed-off-by: Christian Heimes <cheimes(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1297/head:pr1297 git checkout pr1297

1 0

[freeipa PR#1179][opened] adtrust: filter out subdomains when defining our topology to AD
by abbra 16 Nov '17

16 Nov '17

URL: https://github.com/freeipa/freeipa/pull/1179 Author: abbra Title: #1179: adtrust: filter out subdomains when defining our topology to AD Action: opened PR body: """ When definining a topology of a forest to be visible over a cross-forest trust, we set *.<forest name> as all-catch top level name already. This means that all DNS subdomains of the forest will already be matched by this TLN. If we add more TLNs for subdomains, Active Directory will respond with NT_STATUS_INVALID_PARAMETER. Filter out all subdomains of the forest root domain. All other realm domains will be added with explicit TLN records. Fixes https://pagure.io/freeipa/issue/6666 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1179/head:pr1179 git checkout pr1179

1 1

[freeipa PR#1292][closed] [Backport][ipa-4-6] Test script for ipa-custodia
by tiran 16 Nov '17

16 Nov '17

URL: https://github.com/freeipa/freeipa/pull/1292 Author: tiran Title: #1292: [Backport][ipa-4-6] Test script for ipa-custodia Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1292/head:pr1292 git checkout pr1292

1 0

[freeipa PR#1254][opened] [WIP] Support sqlite NSSDB
by tiran 16 Nov '17

16 Nov '17

URL: https://github.com/freeipa/freeipa/pull/1254 Author: tiran Title: #1254: [WIP] Support sqlite NSSDB Action: opened PR body: """ Prepare CertDB and NSSDatabase to support sqlite DB format. https://pagure.io/freeipa/issue/7049 Signed-off-by: Christian Heimes <cheimes(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1254/head:pr1254 git checkout pr1254

1 1

[freeipa PR#1290][opened] [Backport][ipa-4-6] test_caless: fix fix http.p12 is not valid and provide domain_level for replica tests
by Rezney 16 Nov '17

16 Nov '17

URL: https://github.com/freeipa/freeipa/pull/1290 Author: Rezney Title: #1290: [Backport][ipa-4-6] test_caless: fix fix http.p12 is not valid and provide domain_level for replica tests Action: opened PR body: """ This PR was opened automatically because PR #1266 was pushed to master and backport to ipa-4-6 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1290/head:pr1290 git checkout pr1290

1 1

[freeipa PR#1284][opened] Py3: Fix vault tests
by tiran 15 Nov '17

15 Nov '17

URL: https://github.com/freeipa/freeipa/pull/1284 Author: tiran Title: #1284: Py3: Fix vault tests Action: opened PR body: """ * Bump PKI to 10.5.1-2, which fixes an issue with KRA under Python 3 * Correct encoding of secret https://pagure.io/freeipa/issue/7033 Obsoletes: #1261 Signed-off-by: Christian Heimes <cheimes(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1284/head:pr1284 git checkout pr1284

1 1

[freeipa PR#948][opened] Test script for ipa-custodia
by tiran 15 Nov '17

15 Nov '17

URL: https://github.com/freeipa/freeipa/pull/948 Author: tiran Title: #948: Test script for ipa-custodia Action: opened PR body: """ You may find my test script for ipa-custodia useful for testing and debugging issues like https://bugzilla.redhat.com/show_bug.cgi?id=1476150 Signed-off-by: Christian Heimes <cheimes(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/948/head:pr948 git checkout pr948

1 1

[freeipa PR#732][closed] ipa-custodia: use Dogtag's alias/pwdfile.txt
by tiran 15 Nov '17

15 Nov '17

URL: https://github.com/freeipa/freeipa/pull/732 Author: tiran Title: #732: ipa-custodia: use Dogtag's alias/pwdfile.txt Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/732/head:pr732 git checkout pr732

1 0

FreeIPA wiki migration to OpenShift v3
by Martin Kosek 15 Nov '17

15 Nov '17

Hello all, I would like to start a discussion regarding the migration of current FreeIPA services that are running on OpenShift v2 that was obsoleted [1] and will go soon EOL (the ultimate cut-off date is Dec 31, 2017). After a short discussion I had with several FreeIPA developers, the preference remained with keeping this application on OpenShift (v3 generation), as it will let us easily maintain it on a PaaS, without having to care about maintaining our own infra. It will be also easy to delegate maintenance powers to more people. Given above, I have now set up a Pro account with OpenShift v3 and migrated the base FreeIPA wiki as an application there, with today snapshot of data and images. When the POC deployment is ready and approved on this list, I can switch the current wiki to readonly and request change of "www.freeipa.org" DNS records to get it to production. The POC wiki is running in [2], with OpenShift application sources being stored in a public git repo [3]. Eventually, the OpenShift could be configured to rebuild the wiki after a git push to [3], to enable easy changes to wiki to it's maintainers. Let me know if there are any concerns about having the wiki sources public. The secrets and keys are of course not in the repo, but configured via OpenShift environment variable. The POC now runs pretty well, the only issue I found so far is linking the wiki user authentication with Fedora auth. The problem is that the current OpenID plugin [4] is deprecated and does not run with modern PHP version and I could not get the new OpenID Connect one [5] to work reliably with our wiki and Fedora OIDC service. I either received authentication errors or later problems with linking the authenticated user to current account. So for now I gave up and enabled simple password auth by password again. Feedback welcome! Thanks, Martin [1] https://blog.openshift.com/migrate-to-v3-v2-eol/ [2] https://freeipa-org-wiki-freeipa.b9ad.pro-us-east-1.openshiftapps.com [3] https://github.com/freeipa/freeipa-wiki [4] https://www.mediawiki.org/wiki/Extension:OpenID [5] https://www.mediawiki.org/wiki/Extension:OpenID_Connect -- Martin Kosek <mkosek(a)redhat.com> Manager, Software Engineering - Identity Management Team Red Hat, Inc.

3 4

[freeipa PR#1287][opened] [4.5] - ipatests: Fix interactive prompt in ca_less tests
by Rezney 15 Nov '17

15 Nov '17

URL: https://github.com/freeipa/freeipa/pull/1287 Author: Rezney Title: #1287: [4.5] - ipatests: Fix interactive prompt in ca_less tests Action: opened PR body: """ This fix adds additional prompt which was missing previously in test_interactive_missing_ds_pkcs_password and test_interactive_missing_http_pkcs_password under CA-less integration testsuite. Fixes: https://pagure.io/freeipa/issue/7182 Signed-off-by: Abhijeet Kasurde <akasurde(a)redhat.com> Reviewed-By: Michal Reznik <mreznik(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1287/head:pr1287 git checkout pr1287

1 1

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-devel November 2017