May 2017 - FreeIPA-devel - Fedora Mailing-Lists

[freeipa PR#774][synchronized] Deprecate pkinit-anonymous command

by stlaz

URL: https://github.com/freeipa/freeipa/pull/774 Author: stlaz Title: #774: Deprecate pkinit-anonymous command Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/774/head:pr774 git checkout pr774

6 years, 11 months

1
0
0 / 0

[freeipa PR#774][comment] Deprecate pkinit-anonymous command

by abbra

URL: https://github.com/freeipa/freeipa/pull/774 Title: #774: Deprecate pkinit-anonymous command abbra commented: """ Just remove the command completely. FreeIPA prior to 4.5 never supported PKINIT operations and never allowed using anonymous PKINIT. Disabling/enabling it was left for admins that knew what they wanted. However, with FreeIPA 4.5 we require anonymous PKINIT to be enabled all time -- be it with a local self-signed cert or with some other certificate issued by a proper CA. An anonymous principal can only be used to create a FAST channel, nothing else. """ See the full comment at https://github.com/freeipa/freeipa/pull/774#issuecomment-303363619

6 years, 11 months

1
0
0 / 0

[freeipa PR#792][opened] named.conf template: add modification warning

by tomaskrizek

URL: https://github.com/freeipa/freeipa/pull/792 Author: tomaskrizek Title: #792: named.conf template: add modification warning Action: opened PR body: """ Based on our discussion with Brian Atkinsson, I think we should add some warning about making undocumented changes to the config files. --- Warn the user some modifications may break IPA setup or upgrade. All changes the user makes should be explicitly supported and mentioned in the documentation. Undocumented and unsupported changes, such as renaming dyndb part from "ipa" will break IPA. Signed-off-by: Tomas Krizek <tkrizek(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/792/head:pr792 git checkout pr792

6 years, 11 months

3
10
0 / 0

[freeipa PR#774][synchronized] Deprecate pkinit-anonymous command

by stlaz

URL: https://github.com/freeipa/freeipa/pull/774 Author: stlaz Title: #774: Deprecate pkinit-anonymous command Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/774/head:pr774 git checkout pr774

6 years, 11 months

1
0
0 / 0

[freeipa PR#623][comment] client install: do not assume /etc/krb5.conf.d exists

by HonzaCholasta

URL: https://github.com/freeipa/freeipa/pull/623 Title: #623: client install: do not assume /etc/krb5.conf.d exists HonzaCholasta commented: """ @frozencemetery, this is *not* for the sake of Debian. We will still have to worry about this for operating systems which are not Fedora- or Debian-based. """ See the full comment at https://github.com/freeipa/freeipa/pull/623#issuecomment-303298156

6 years, 11 months

1
0
0 / 0

[freeipa PR#760][comment] [4.4] Run ipa-custodia under Python 2

by lslebodn

URL: https://github.com/freeipa/freeipa/pull/760 Title: #760: [4.4] Run ipa-custodia under Python 2 lslebodn commented: """ @tiran Do you plan to release custodia-0.2 in fedora 25? Because this patch broke building of ipa-4.4 on fedora 25. If you do not plan to upgrade custodia in f25 then this patch should be (partially) reverted """ See the full comment at https://github.com/freeipa/freeipa/pull/760#issuecomment-303130820

6 years, 11 months

1
0
0 / 0

[freeipa PR#623][comment] client install: do not assume /etc/krb5.conf.d exists

by frozencemetery

URL: https://github.com/freeipa/freeipa/pull/623 Title: #623: client install: do not assume /etc/krb5.conf.d exists frozencemetery commented: """ Adding on to my previous comment: I've talked with the Debian maintainers, and they plan to add the same `includedir` after the Stretch release. So, eventually (for some values of eventually) we won't have to worry about this. """ See the full comment at https://github.com/freeipa/freeipa/pull/623#issuecomment-303124429

6 years, 11 months

1
0
0 / 0

[freeipa PR#771][comment] cert-show: check if certificate_out is in options

by martbab

URL: https://github.com/freeipa/freeipa/pull/771 Title: #771: cert-show: check if certificate_out is in options martbab commented: """ @frasertweedale @HonzaCholasta can you please continue review of this PR? """ See the full comment at https://github.com/freeipa/freeipa/pull/771#issuecomment-303075665

6 years, 11 months

1
0
0 / 0

[freeipa PR#794][opened] ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt

by flo-renaud

URL: https://github.com/freeipa/freeipa/pull/794 Author: flo-renaud Title: #794: ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt Action: opened PR body: """ ipa-ca-install currently overwrites /etc/ipa/ca.crt with the CA chain retrieved from Dogtag. It should instead append the new certs, otherwise the CA that signed dirsrv and httpd certificates is removed and ipa tools fail. A consequence is that ipa-kra-install fails. This is a regression introduced by 5ab85b36. https://pagure.io/freeipa/issue/6925 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/794/head:pr794 git checkout pr794

6 years, 11 months

4
10
0 / 0

[freeipa PR#623][synchronized] client install: do not assume /etc/krb5.conf.d exists

by HonzaCholasta

URL: https://github.com/freeipa/freeipa/pull/623 Author: HonzaCholasta Title: #623: client install: do not assume /etc/krb5.conf.d exists Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/623/head:pr623 git checkout pr623

6 years, 11 months

1
0
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-devel May 2017