[freeipa PR#1294][opened] Trust avoid mitkrb trust
by abbra
URL: https://github.com/freeipa/freeipa/pull/1294
Author: abbra
Title: #1294: Trust avoid mitkrb trust
Action: opened
PR body:
"""
Quite often users choose wrong type of trust on Active Directory side
when setting up a trust to freeIPA. The trust type supported by freeIPA
is just a normal forest trust to another Active Directory. However,
some people follow old internet recipes that force using a trust to MIT
Kerberos realm.
This is a wrong type of trust. Unfortunately, when someone used MIT
Kerberos realm trust, there is no way to programmatically remote the
trust from freeIPA side. As result, we have to detect such situation and
report an error.
To do proper reporting, we need reuse some constants and trust type
names we use in IPA CLI/Web UI. These common components were moved to
a separate ipaserver/dcerpc_common.py module that is imported by both
ipaserver/plugins/trust.py and ipaserver/dcerpc.py.
Fixes https://pagure.io/freeipa/issue/7264
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1294/head:pr1294
git checkout pr1294
6 years, 4 months
[freeipa PR#1366][opened] Re-enable some KRA installation tests
by frasertweedale
URL: https://github.com/freeipa/freeipa/pull/1366
Author: frasertweedale
Title: #1366: Re-enable some KRA installation tests
Action: opened
PR body:
"""
Some KRA installation tests were disabled due to failures caused by
security domain session replication lag. This problem has been
addressed in Dogtag by introducing a default 5 second sleep after
security domain login, to give more time for session data to be
replicated to other hosts. There is still a possibility for this
kind of failure, but the delay minimises it.
FreeIPA depends on the version of Dogtag that contains this change,
so remove the failing-test annotations.
Fixes: https://pagure.io/freeipa/issue/7220
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1366/head:pr1366
git checkout pr1366
6 years, 4 months