FreeIPA-devel July 2017

freeipa-devel@lists.fedorahosted.org

11 participants
86 discussions

[freeipa PR#922][opened] logging: make sure logging level is set to proper value
by tomaskrizek 26 Jul '17

26 Jul '17

URL: https://github.com/freeipa/freeipa/pull/922 Author: tomaskrizek Title: #922: logging: make sure logging level is set to proper value Action: opened PR body: """ During py.test initialization, the value 'debug' is passed instead of logging.DEBUG. Signed-off-by: Tomas Krizek <tkrizek(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/922/head:pr922 git checkout pr922

2 1

Help with BZ 1409786
by Felipe Barreto Volpone 25 Jul '17

25 Jul '17

Hi list, I'm working on BZ https://bugzilla.redhat.com/show_bug.cgi?id=1409786 and I need some help to understand what is going here. The main problem is: to check if dirsrv is running before calling ca.install(). So, in order to do that I added the lines in ca install_check: if services.knownservices.dirsrv.is_installed() and not services.knownservices.dirsrv.is_running(): raise ScriptError('Directory Server is not running') is_running returns True, however, the method is_installed always returns False. The method checks if "dirsrv(a)EXAMPLE-TEST.service" is in the output of "systemctl list-unit-files --full", which do not happen. If I run "systemctl | grep running", dirsrv(a)EXAMPLE-TEST.service is in the ouput. What I'm missing here? Thanks, Felipe

2 1

[freeipa PR#809][opened] Support specifying external CA template (preliminary refactors)
by frasertweedale 25 Jul '17

25 Jul '17

URL: https://github.com/freeipa/freeipa/pull/809 Author: frasertweedale Title: #809: Support specifying external CA template (preliminary refactors) Action: opened PR body: """ This PR contains a couple of refactorings, as groundwork for upcoming support for specifying the external CA profile/template during install / ca-install / cacert-manage renew / etc. https://pagure.io/freeipa/issue/6858 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/809/head:pr809 git checkout pr809

1 1

[freeipa PR#928][opened] WebUI: fix jslint error
by pvomacka 24 Jul '17

24 Jul '17

URL: https://github.com/freeipa/freeipa/pull/928 Author: pvomacka Title: #928: WebUI: fix jslint error Action: opened PR body: """ jslint warned about parsing string to integer without explicit radix. This error was introduced in commit 7f10a51. The PR is without ticket as it is only one liner. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/928/head:pr928 git checkout pr928

2 1

[freeipa PR#929][opened] Correct typo estabilish->establish in the install scripts
by lewiseason 24 Jul '17

24 Jul '17

URL: https://github.com/freeipa/freeipa/pull/929 Author: lewiseason Title: #929: Correct typo estabilish->establish in the install scripts Action: opened PR body: """ As the title says. I noticed this during a recent install and it affects: * `ipaserver/install/adtrust.py` * `ipaserver/install/server/install.py` """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/929/head:pr929 git checkout pr929

2 1

[freeipa PR#897][opened] install: replica: Show message about key synchronization
by dkupka 24 Jul '17

24 Jul '17

URL: https://github.com/freeipa/freeipa/pull/897 Author: dkupka Title: #897: install: replica: Show message about key synchronization Action: opened PR body: """ https://pagure.io/freeipa/issue/6940 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/897/head:pr897 git checkout pr897

2 1

[freeipa PR#885][opened] NULL LDAP context in call to ldap_search_ext_s during search
by tbordaz 24 Jul '17

24 Jul '17

URL: https://github.com/freeipa/freeipa/pull/885 Author: tbordaz Title: #885: NULL LDAP context in call to ldap_search_ext_s during search Action: opened PR body: """ KDC crashes on quite random interval while trying to reach LDAP https://pagure.io/freeipa/issue/7017 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/885/head:pr885 git checkout pr885

2 1

Announcing FreeIPA 4.5.3
by Tomas Krizek 21 Jul '17

21 Jul '17

The FreeIPA team would like to announce FreeIPA 4.5.3 release! It can be downloaded from http://www.freeipa.org/page/Downloads. Builds for Fedora 25 and 26 will be available in the official COPR repository https://copr.fedorainfracloud.org/coprs/g/freeipa/freeipa-4-5/ . == Highlights in 4.5.3 == === Known Issues === * When ipa-server-upgrade is executed during dnf system-upgrade, network should come online and the ipa-server-upgrade should finish successfully. If ipa-server-upgrade fails during system-upgrade, please run it manually once network is online. === Bug fixes === FreeIPA 4.5.3 is a stabilization release for the features delivered as a part of 4.5. There are more than 10 bug-fixes details of which can be seen in the list of resolved tickets below. == Upgrading == Upgrade instructions are available on page: https://www.freeipa.org/page/Upgrade == Feedback == Please provide comments, bugs and other feedback via the freeipa-users mailing list (https://lists.fedoraproject.org/archives/list/freeipa-users@lists.fedorahos…) or #freeipa channel on Freenode. == Resolved tickets == * 7039 FreeIPA upgrade script requires network to be up, but network is not up during upgrade when using dnf system-upgrade * 7037 Replica installation grants HTTP principal access in WebUI * 7036 Advice plugins for smart card configuration produce scripts that configure the feature incompletely * 7029 Fix inconsistent reporting of server roles/attributes in *config-show commands * 7026 ipaserver installation fails in FIPS mode: OpenSSL internal error, assertion failed: Digest MD4 forbidden in FIPS mode! * 7021 ipa-server-install failure on checking matching interfaces - invalid format of netmas * 7007 Use CommonNameToSANDefault in default profile (new installs only) * 6877 ipasam needs changes for Samba 4.7 * 6838 [ipa-replica-install] - 406 Client Error: Failed to validate message: Incorrect number of results (0) searching forpublic key for host * 4317 Allow --ip-address even when not present in local interface == Detailed changelog since 4.5.2 == === Alexander Bokovoy (2) === * ipa-sam: use smbldap_set_bind_callback for Samba 4.7 or later * ipa-sam: use own private structure, not ldapsam_privates === Fraser Tweedale (1) === * Add CommonNameToSANDefault to default cert profile === Martin Babinsky (15) === * replica install: drop-in IPA specific config to tmpfiles.d * Do not remove the old masters when setting the attribute fails * *config-show: Do not show empty roles/attributes * smart-card-advises: ensure that krb5-pkinit is installed on client * smart card advise: use password when changing trust flags on HTTP cert * smart card advises: use a wrapper around Bash `for` loops * Use the compound statement formatting API for configuring PKINIT * Fix indentation of statements in Smart card advises * delegate formatting of compound Bash statements to dedicated classes * advise: add an infrastructure for formatting Bash compound statements * delegate the indentation handling in advises to dedicated class * add a class that tracks the indentation in the generated advises * Allow to pass in multiple CA cert paths to the smart card advises * smart-card advises: add steps to store smart card signing CA cert * smart-card advises: configure systemwide NSS DB also on master === Martin Basti (8) === * python-netifaces: update to reflect upstream changes * Remove network and broadcast address warnings * replica install: add missing check for non-local IP address * Remove ip_netmask from option parser * CheckedIPAddress: remove match_local param * refactor CheckedIPAddress class * ipa-dns-install: remove check for local ip address * Fix local IP address validation === Sumit Bose (2) === * ipa_pwd_extop: do not generate NT hashes in FIPS mode * ipa-sam: replace encode_nt_key() with E_md4hash() === Simo Sorce (2) === * Always check peer has keys before connecting * Make sure we check ccaches in all rpcserver paths === Stanislav Laznicka (1) === * Ensure network is online prior to an upgrade === Tibor Dudlák (1) === * topology.py: Removes error message from dictionary. === Tomas Krizek (3) === * Become IPA 4.5.3 * Update translations * 4.5 set back to git snapshot -- Tomas Krizek PGP: 4A8B A48C 2AED 933B D495 C509 A1FB A5F7 EF8C 4869

1 0

[copr freeipa-master] sssd-1.15.3-0.beta.5.fc27 and libldb-1.2.0-1.fc27 removed
by Tomas Krizek 21 Jul '17

21 Jul '17

Hi, builds sssd-1.15.3-0.beta.5.fc27 and libldb-1.2.0-1.fc27 caused a segfault when starting sssd service. I removed these builds from copr. Instead, I added libldb-1.1.31-1.fc27, which is required by samba. If you've already installed these packages from freeipa-master copr and have encountered this issue, please downgrade them. -- Tomas Krizek PGP: 4A8B A48C 2AED 933B D495 C509 A1FB A5F7 EF8C 4869

3 4

[freeipa PR#899][opened] test_caless: introduce new python makepki + fix SKI extension issue
by Rezney 21 Jul '17

21 Jul '17

URL: https://github.com/freeipa/freeipa/pull/899 Author: Rezney Title: #899: test_caless: introduce new python makepki + fix SKI extension issue Action: opened PR body: """ Change makepki.sh for new makepki.py which should be more readable, maintainable and extendable than the old script. In this test we use it as a module and import create_pki(). The new makepki adds SKI and AKI extensions for correct cert validation. Other minor changes needed as we do not use NSS to store our certificates on the test controller. https://pagure.io/freeipa/issue/7030 Signed-off-by: Michal Reznik <mreznik(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/899/head:pr899 git checkout pr899

2 1

← Newer
1
2
3
4
5
6
7
8
9
Older →

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-devel July 2017