August 2017 - FreeIPA-devel - Fedora mailing-lists

[freeipa PR#919][opened] client.py: Using Augeas to configure krb5.conf
by Tiboris 02 Jul '19

02 Jul '19

URL: https://github.com/freeipa/freeipa/pull/919 Author: Tiboris Title: #919: client.py: Using Augeas to configure krb5.conf Action: opened PR body: """ Using Augeas should avoid issues like https://pagure.io/freeipa/issue/5912. Resolves: https://pagure.io/freeipa/issue/5913 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/919/head:pr919 git checkout pr919

1 1

[freeipa PR#920][opened] fix ods-ksmutil for 2.0.x
by tduehr 15 May '18

15 May '18

URL: https://github.com/freeipa/freeipa/pull/920 Author: tduehr Title: #920: fix ods-ksmutil for 2.0.x Action: opened PR body: """ It became ods-enforcer and its behavior changed. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/920/head:pr920 git checkout pr920

2 3

[freeipa PR#953][opened] [master] WebUI: Turn on pagination on certificate page
by pvomacka 22 Mar '18

22 Mar '18

URL: https://github.com/freeipa/freeipa/pull/953 Author: pvomacka Title: #953: [master] WebUI: Turn on pagination on certificate page Action: opened PR body: """ Almost all other search tables use pagination. Only this one does not. This change makes WebUI more consistent. https://pagure.io/freeipa/issue/6079 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/953/head:pr953 git checkout pr953

2 1

[freeipa PR#1024][opened] py3: turn all shebangs to python3
by stlaz 15 Feb '18

15 Feb '18

URL: https://github.com/freeipa/freeipa/pull/1024 Author: stlaz Title: #1024: py3: turn all shebangs to python3 Action: opened PR body: """ This patchset turns all shebangs in IPA scripts to Python 3. Note that this may seem like going against what we agreed on some two months ago but the outcome to turn everything to `/usr/bin/python` to use default python version would be a setback in the Fedora planning: https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 and there is no reason not to use the up-till-now long running Python 3 effort. This also required to regenerate the `API.txt` file so that our checks don't fail to validate for python2/3 type discrepancies. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1024/head:pr1024 git checkout pr1024

2 1

[freeipa PR#973][opened] test_dnssec: re-add named-pkcs11 workarounds
by tomaskrizek 09 Feb '18

09 Feb '18

URL: https://github.com/freeipa/freeipa/pull/973 Author: tomaskrizek Title: #973: test_dnssec: re-add named-pkcs11 workarounds Action: opened PR body: """ DNSSEC tests starrted to fail again, probably due to a bug in some underlaying component. This reverts commit 8bc677512296a7e94c29edd0c1a96aa7273f352a and makes the xfail test check less strict - it will no longer mark the test suite red if it passes. Related https://pagure.io/freeipa/issue/5348 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/973/head:pr973 git checkout pr973

2 1

[freeipa PR#980][opened] [WIP][tests] Replica Promotion improvements
by Akasurde 08 Feb '18

08 Feb '18

URL: https://github.com/freeipa/freeipa/pull/980 Author: Akasurde Title: #980: [WIP][tests] Replica Promotion improvements Action: opened PR body: """ * Change string check in replica install at domain level 0 Fixes: https://pagure.io/freeipa/issue/7104 Signed-off-by: Abhijeet Kasurde <akasurde(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/980/head:pr980 git checkout pr980

2 3

[freeipa PR#927][opened] WebUI: Cockpit integration
by pvomacka 07 Feb '18

07 Feb '18

URL: https://github.com/freeipa/freeipa/pull/927 Author: pvomacka Title: #927: WebUI: Cockpit integration Action: opened PR body: """ Link to the cockpit is placed to each host details page in case the Cockpit is installed on the server. Showing or hiding cockpit link is possible because of Cockpit's API which provides public URL for check whether Cockpit is the software which listen on given port. https://pagure.io/freeipa/issue/4891 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/927/head:pr927 git checkout pr927

2 1

[freeipa PR#837][opened] ca-add: fix permission issue
by frasertweedale 05 Feb '18

05 Feb '18

URL: https://github.com/freeipa/freeipa/pull/837 Author: frasertweedale Title: #837: ca-add: fix permission issue Action: opened PR body: """ The ca-add command pre_callback uses ldap.can_add() to check whether the user has permission to add CAs. Alas, the GetEffectiveRights control used by ldap.can_add() doesn't correctly interpret ACIs with 'targetfilter' constraints, and returns a false-negative for non-admin users, even when they have the 'System: Add CA' permission. To work around this, add the CA object to FreeIPA before attempting to create the CA in Dogtag. If the CA creation in Dogtag succeds, the user then updates the FreeIPA object with the Authority ID and other authoritative data returned by Dogtag. If the CA creation in Dogtag fails, the user cleans up by deleting the newly-created CA object from FreeIPA. This modified procedure ensures that the user certainly has the 'System: Add CA' permission before the CA creation in Dogtag is attempted. But it also means that the user must have 'write' and 'delete' permission on 'ipaca' objects in FreeIPA, so that it can complete the object after CA creation in Dogtag, or clean up if that step fails. Therefore, update the 'System: Add CA' permission to confer 'write' and 'delete' access on 'ipaca' objects, as well as 'add' access. Fixes: https://pagure.io/freeipa/issue/6609 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/837/head:pr837 git checkout pr837

2 7

[freeipa PR#1011][opened] py3: dnssec
by tomaskrizek 12 Dec '17

12 Dec '17

URL: https://github.com/freeipa/freeipa/pull/1011 Author: tomaskrizek Title: #1011: py3: dnssec Action: opened PR body: """ This PR is a partial fix that should allow DNSSEC installation for master. Keys will not be distributed to replicas. With my limited DNSSEC/IPA knowledge, I wasn't able to verify the data stored in LDAP are actually correct. In case they are not, this would prevent installation of DNSSEC replicas in the future. Our DNSSEC tests are not passing, thus we can't use them to verify this PR. Given these circumstances, I propose to officially discourage DNSSEC installation in 4.6.0. This PR supersedes #898. For review, it is highly recommended to rebase on #999. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1011/head:pr1011 git checkout pr1011

3 3

[freeipa PR#846][opened] Travis: Add tox tests
by MartinBasti 20 Nov '17

20 Nov '17

URL: https://github.com/freeipa/freeipa/pull/846 Author: MartinBasti Title: #846: Travis: Add tox tests Action: opened PR body: """ Tox tests contain various testcases for PyPI wheel builds """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/846/head:pr846 git checkout pr846

4 7

[freeipa PR#948][opened] Test script for ipa-custodia
by tiran 16 Nov '17

16 Nov '17

URL: https://github.com/freeipa/freeipa/pull/948 Author: tiran Title: #948: Test script for ipa-custodia Action: opened PR body: """ You may find my test script for ipa-custodia useful for testing and debugging issues like https://bugzilla.redhat.com/show_bug.cgi?id=1476150 Signed-off-by: Christian Heimes <cheimes(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/948/head:pr948 git checkout pr948

1 1

[freeipa PR#903][opened] Warning the user when using a loopback IP as forwarder
by felipevolpone 09 Nov '17

09 Nov '17

URL: https://github.com/freeipa/freeipa/pull/903 Author: felipevolpone Title: #903: Warning the user when using a loopback IP as forwarder Action: opened PR body: """ Now, the user can pass a loopback IP in the --forwarder option. Previously, an error would be raised, now we just show a warning message. Fixes: https://pagure.io/freeipa/issue/5801 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/903/head:pr903 git checkout pr903

1 1

[freeipa PR#1027][opened] prci: add external_ca test
by tomaskrizek 06 Nov '17

06 Nov '17

URL: https://github.com/freeipa/freeipa/pull/1027 Author: tomaskrizek Title: #1027: prci: add external_ca test Action: opened PR body: """ Add external_ca to the PR CI test suite. Signed-off-by: Tomas Krizek <tkrizek(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1027/head:pr1027 git checkout pr1027

1 1

[freeipa PR#960][opened] tests: Add LDAP URI to ldappasswd explicitelly
by davidkupka 13 Oct '17

13 Oct '17

URL: https://github.com/freeipa/freeipa/pull/960 Author: davidkupka Title: #960: tests: Add LDAP URI to ldappasswd explicitelly Action: opened PR body: """ https://fedorahosted.org/freeipa/ticket/6622 This PR replaces PR #404 which is orphaned and I'm no longer able to push into it. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/960/head:pr960 git checkout pr960

2 1

[freeipa PR#930][opened] install: allow specifying external CA template
by frasertweedale 04 Oct '17

04 Oct '17

URL: https://github.com/freeipa/freeipa/pull/930 Author: frasertweedale Title: #930: install: allow specifying external CA template Action: opened PR body: """ This PR allow an admin to specify an AD-CS target certificate template by name or OID, via the new option --external-ca-profile. The profile may be specified by name (string) or OID + version + optional minor version. https://pagure.io/freeipa/issue/6858 The approach is: 1. preliminary refactor to the IPAOptionParser to allow easily specifying a custom data constructor (this is used for the data type that holds the template specifier). 2. refactor to reduce duplication of external CA type enum values. 3. the main thing: - add data type for template specifier - add ipa-server-install `--external-ca-profile` CLI option - update CA installation to add the appropriate *pkispawn* config based on the template specifier - update *ipa-server-install* man page 4. add the `external-ca-profile` option to *ipa-ca-install* and update man page. **NOTE FOR TESTERS** *python-cryptography* has a bug parsing long OIDs. It is fixed as of v1.9 (f27). AD-CS creates and uses OIDs long enough to trigger the bug as a matter of course. Apply the following small diff to your *python-cryptography* lib to avoid the bug: https://github.com/frasertweedale/cryptography/blob/effeb600057a93f7cb95df1… **HOW TO TEST** 1. Install AD-CS in a Windows machine and create a custom profile by copying the *SubCA* profile. 2. Two-step external CA ipa-server-install: ``` $ ipa-server-install \ --external-ca --external-ca-type=ms-cs \ --external-ca-profile=1.3.6.1.4.1.311.21.8.8950086.10656446.2706058.12775672.480128.147.7130143.4405632:1 ``` (Use the actual OID of the custom profile). If everything works, hooray! 3. Start over with ca-less deployment. Then add CA via ``ipa-ca-install --external-ca-... # as before``. If everything works, hooray. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/930/head:pr930 git checkout pr930

2 1

[freeipa PR#894][opened] Fixing ipa-replica-install --setup-kra if it's the first KRA in topology
by felipevolpone 02 Oct '17

02 Oct '17

URL: https://github.com/freeipa/freeipa/pull/894 Author: felipevolpone Title: #894: Fixing ipa-replica-install --setup-kra if it's the first KRA in topology Action: opened PR body: """ I'm trying to fix the ticket, but I'm not quite sure of how to do it. Until now, I removed the exception and called the api in kra to install it. However, I'm getting an exception: ``` bash-4.3$ sudo python /usr/sbin/ipa-replica-install -r DOM-116.ABC.IDM.LAB.ENG.BRQ.REDHAT.COM --setup-kra --setup-ca WARNING: conflicting time&date synchronization service 'chronyd' will be disabled in favor of ntpd IPA client is already configured on this system, ignoring the --domain, --server, --realm, --hostname, --password and --keytab options. Your system may be partly configured. Run /usr/sbin/ipa-server-install --uninstall to clean up. ipa.ipapython.install.cli.install_tool(CompatServerReplicaInstall): ERROR Timed out trying to obtain keys. ipa.ipapython.install.cli.install_tool(CompatServerReplicaInstall): ERROR The ipa-replica-install command failed. See /var/log/ipareplica-install.log for more information ``` from /var/log/ipareplica-install.log ``` 2017-06-23T18:38:44Z DEBUG stderr= 2017-06-23T18:38:44Z DEBUG Destroyed connection context.ldap2_140135237350736 2017-06-23T18:38:44Z DEBUG Created connection context.ldap2_140135237350736 2017-06-23T18:38:44Z DEBUG raw: hostgroup_show(u'ipaservers', rights=True, all=True, version=u'2.228') 2017-06-23T18:38:44Z DEBUG hostgroup_show(u'ipaservers', rights=True, all=True, raw=False, version=u'2.228', no_members=False) 2017-06-23T18:38:44Z DEBUG flushing ldaps://vm-116.abc.idm.lab.eng.brq.redhat.com from SchemaCache 2017-06-23T18:38:44Z DEBUG retrieving schema for SchemaCache url=ldaps://vm-116.abc.idm.lab.eng.brq.redhat.com conn=<ldap.ldapobject.SimpleLDAPObject instance at 0x7f73c6769f38> 2017-06-23T18:38:44Z DEBUG Destroyed connection context.ldap2_140135237350736 2017-06-23T18:38:44Z DEBUG Created connection context.ldap2_140135237350736 2017-06-23T18:38:44Z DEBUG flushing ldaps://vm-116.abc.idm.lab.eng.brq.redhat.com from SchemaCache 2017-06-23T18:38:44Z DEBUG retrieving schema for SchemaCache url=ldaps://vm-116.abc.idm.lab.eng.brq.redhat.com conn=<ldap.ldapobject.SimpleLDAPObject instance at 0x7f73c6769c20> 2017-06-23T18:38:44Z DEBUG No IPA DNS servers, skipping forward/reverse resolution check 2017-06-23T18:38:44Z DEBUG Initializing principal host/vm-058-064.abc.idm.lab.eng.brq.redhat.com(a)DOM-116.ABC.IDM.LAB.ENG.BRQ.REDHAT.COM using keytab /etc/krb5.keytab 2017-06-23T18:38:44Z DEBUG using ccache /tmp/krbcc9omA2g/ccache 2017-06-23T18:38:44Z DEBUG Attempt 1/1: success 2017-06-23T18:38:44Z DEBUG Loading StateFile from '/var/lib/ipa/sysrestore/sysrestore.state' 2017-06-23T18:38:44Z DEBUG Loading Index file from '/var/lib/ipa/sysrestore/sysrestore.index' 2017-06-23T18:38:44Z INFO Waiting up to 300 seconds to see our keys appear on host: None 2017-06-23T18:38:45Z DEBUG Transient error getting keys: '{'desc': "Can't contact LDAP server"}' 2017-06-23T18:43:45Z DEBUG Destroyed connection context.ldap2_140135237350736 2017-06-23T18:43:45Z DEBUG File "/usr/lib/python2.7/site-packages/ipapython/admintool.py", line 172, in execute return_value = self.run() File "/usr/lib/python2.7/site-packages/ipapython/install/cli.py", line 333, in run cfgr.run() File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 366, in run self.validate() File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 375, in validate for _nothing in self._validator(): File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 434, in __runner exc_handler(exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 458, in _handle_validate_exception self._handle_exception(exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 453, in _handle_exception six.reraise(*exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 424, in __runner step() File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 421, in <lambda> step = lambda: next(self.__gen) File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 81, in run_generator_with_yield_from six.reraise(*exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 59, in run_generator_with_yield_from value = gen.send(prev_value) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 636, in _configure next(validator) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 434, in __runner exc_handler(exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 458, in _handle_validate_exception self._handle_exception(exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 521, in _handle_exception self.__parent._handle_exception(exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 453, in _handle_exception six.reraise(*exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 518, in _handle_exception super(ComponentBase, self)._handle_exception(exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 453, in _handle_exception six.reraise(*exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 424, in __runner step() File "/usr/lib/python2.7/site-packages/ipapython/install/core.py", line 421, in <lambda> step = lambda: next(self.__gen) File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 81, in run_generator_with_yield_from six.reraise(*exc_info) File "/usr/lib/python2.7/site-packages/ipapython/install/util.py", line 59, in run_generator_with_yield_from value = gen.send(prev_value) File "/usr/lib/python2.7/site-packages/ipapython/install/common.py", line 63, in _install for _nothing in self._installer(self.parent): File "/usr/lib/python2.7/site-packages/ipaserver/install/server/__init__.py", line 613, in main replica_promote_check(self) File "/usr/lib/python2.7/site-packages/ipaserver/install/server/replicainstall.py", line 386, in decorated func(installer) File "/usr/lib/python2.7/site-packages/ipaserver/install/server/replicainstall.py", line 408, in decorated func(installer) File "/usr/lib/python2.7/site-packages/ipaserver/install/server/replicainstall.py", line 1270, in promote_check raise ScriptError(e) 2017-06-23T18:43:45Z DEBUG The ipa-replica-install command failed, exception: ScriptError: Timed out trying to obtain keys. 2017-06-23T18:43:45Z ERROR Timed out trying to obtain keys. 2017-06-23T18:43:45Z ERROR The ipa-replica-install command failed. See /var/log/ipareplica-install.log for more information ``` There is a high chance that I'm getting the wrong path here, so if there is someone able to help me (pointing to some docs or explaining more details of it), it would be great. Ticket https://pagure.io/freeipa/issue/7008 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/894/head:pr894 git checkout pr894

2 1

[freeipa PR#937][opened] Configuring log handlers during the input parameters validation phase
by felipevolpone 02 Oct '17

02 Oct '17

URL: https://github.com/freeipa/freeipa/pull/937 Author: felipevolpone Title: #937: Configuring log handlers during the input parameters validation phase Action: opened PR body: """ Previously, a log handler would be configured only after all the input parameters be validated, as can be checked in `ipapython/admintool.py::AdminTool::main`. So, any call to `logger.[warning,info,error,debug]`, during that phase, doesn't work and it also raises an exception. Now, log handlers are setup before the input parameters validation phase. Fixes: https://pagure.io/freeipa/issue/7071 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/937/head:pr937 git checkout pr937

2 1

[freeipa PR#933][opened] Checks if Directory Server is installed and running before installation
by felipevolpone 21 Sep '17

21 Sep '17

URL: https://github.com/freeipa/freeipa/pull/933 Author: felipevolpone Title: #933: Checks if Directory Server is installed and running before installation Action: opened PR body: """ In cases when IPA is installed in two steps (external CA), it's necessary to check (in the second step) if Directory Server is running and if it's installed before continue with the IPA installation. Fixes: https://pagure.io/freeipa/issue/6611 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/933/head:pr933 git checkout pr933

2 1

[freeipa PR#1018][opened] Python3: Fix winsync replication agreement
by flo-renaud 15 Sep '17

15 Sep '17

URL: https://github.com/freeipa/freeipa/pull/1018 Author: flo-renaud Title: #1018: Python3: Fix winsync replication agreement Action: opened PR body: """ When configuring a winsync replication agreement, the tool performs a search on AD for defaultNamingContext. The entry contains the value as a bytes, it needs to be decoded otherwise subsequent calls to DN(WIN_USER_CONTAINER, self.ad_suffix) will fail. https://pagure.io/freeipa/issue/4985 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1018/head:pr1018 git checkout pr1018

2 1

[freeipa PR#996][opened] ipa-pki-retrieve-key: ensure we do not crash
by frasertweedale 13 Sep '17

13 Sep '17

URL: https://github.com/freeipa/freeipa/pull/996 Author: frasertweedale Title: #996: ipa-pki-retrieve-key: ensure we do not crash Action: opened PR body: """ If ipa-pki-retrieve-key fails for some reason (which may be a "legitimate" reason, e.g. the server it is attempting to contact being offline), the program terminates with an uncaught exception, resulting in crash report. Catch all exceptions; if an exception gets raised, report the traceback and exit with nonzero status. Fixes: https://pagure.io/freeipa/issue/7115 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/996/head:pr996 git checkout pr996

2 1

[freeipa PR#950][opened] Changing idoverrideuser-* to treat objectClass case insensitively
by felipevolpone 12 Sep '17

12 Sep '17

URL: https://github.com/freeipa/freeipa/pull/950 Author: felipevolpone Title: #950: Changing idoverrideuser-* to treat objectClass case insensitively Action: opened PR body: """ This is import to avoid problems when migrating from olders versions of IPA and using idoverrideuser-* commands. https://pagure.io/freeipa/issue/7074 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/950/head:pr950 git checkout pr950

2 1

[freeipa PR#1029][opened] pkinit: don't try to sort dicts
by stlaz 12 Sep '17

12 Sep '17

URL: https://github.com/freeipa/freeipa/pull/1029 Author: stlaz Title: #1029: pkinit: don't try to sort dicts Action: opened PR body: """ Python 3 won't allow this. https://pagure.io/freeipa/issue/4985 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1029/head:pr1029 git checkout pr1029

1 1

[freeipa PR#1005][opened] Fixing how sssd.conf is updated when promoting a client to replica
by felipevolpone 12 Sep '17

12 Sep '17

URL: https://github.com/freeipa/freeipa/pull/1005 Author: felipevolpone Title: #1005: Fixing how sssd.conf is updated when promoting a client to replica Action: opened PR body: """ When promoting a client to a replica we have to change sssd.conf, deleting _srv_ part from 'ipa_server' property and setting 'ipa_server_mode' to true. Previously, the wrong domain could be updated since the ipa_domain variable was not being used properly. https://bugzilla.redhat.com/show_bug.cgi?id=1478251 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1005/head:pr1005 git checkout pr1005

2 1

[freeipa PR#902][opened] Improving replica promotion tests
by felipevolpone 12 Sep '17

12 Sep '17

URL: https://github.com/freeipa/freeipa/pull/902 Author: felipevolpone Title: #902: Improving replica promotion tests Action: opened PR body: """ Adding two new test cases in replica promotion scenario: * Testing not interactive mode: Install client; kinit as admin; then ipa-replica-install (without prompting a password) * Testing interactive mode: only the admin password should be prompted https://pagure.io/freeipa/issue/6554 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/902/head:pr902 git checkout pr902

2 1

[freeipa PR#976][opened] prci: use f26 template for master
by tomaskrizek 12 Sep '17

12 Sep '17

URL: https://github.com/freeipa/freeipa/pull/976 Author: tomaskrizek Title: #976: prci: use f26 template for master Action: opened PR body: """ Switch PR CI testing of master branch to Fedora 26. Signed-off-by: Tomas Krizek <tkrizek(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/976/head:pr976 git checkout pr976

2 1

[freeipa PR#916][opened] Py3 adtrust
by MartinBasti 11 Sep '17

11 Sep '17

URL: https://github.com/freeipa/freeipa/pull/916 Author: MartinBasti Title: #916: Py3 adtrust Action: opened PR body: """ """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/916/head:pr916 git checkout pr916

2 3

[freeipa PR#992][opened] Pylint fixes
by stlaz 08 Sep '17

08 Sep '17

URL: https://github.com/freeipa/freeipa/pull/992 Author: stlaz Title: #992: Pylint fixes Action: opened PR body: """ Pylint check on Fedora 26 fails horribly with multitude of errors. This PR tries to fix that. Notice that to successfully run `pylint` on Fedora 26 with `make lint`, you need to have `python2-pylint` installed. Fixes: https://pagure.io/freeipa/issue/6874 This PR should also unblock having Travis CI running in F26 container once https://bugzilla.redhat.com/show_bug.cgi?id=1483869 is fixed. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/992/head:pr992 git checkout pr992

1 1

[freeipa PR#1023][opened] Backport PR 1008 to ipa-4-5
by flo-renaud 08 Sep '17

08 Sep '17

URL: https://github.com/freeipa/freeipa/pull/1023 Author: flo-renaud Title: #1023: Backport PR 1008 to ipa-4-5 Action: opened PR body: """ Fix ipa-server-upgrade: This entry already exists ipa-server-upgrade fails when running the ipaload_cacrt plugin. The plugin finds all CA certificates in /etc/httpd/alias and uploads them in LDAP below cn=certificates,cn=ipa,cn=etc,$BASEDN. The issue happens because there is already an entry in LDAP for IPA CA, but with a different DN. The nickname in /etc/httpd/alias can differ from $DOMAIN IPA CA. To avoid the issue: 1/ during upgrade, run a new plugin that removes duplicates and restarts ldap (to make sure that uniqueness attr plugin is working after the new plugin) 2/ modify upload_cacert plugin so that it is using $DOMAIN IPA CA instead of cn=$nickname,cn=ipa,cn=etc,$BASEDN when uploading IPA CA. https://pagure.io/freeipa/issue/7125 Reviewed-By: Fraser Tweedale <ftweedal(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1023/head:pr1023 git checkout pr1023

2 1

[freeipa PR#1021][opened] Backport PR 988 to ipa-4-5
by flo-renaud 08 Sep '17

08 Sep '17

URL: https://github.com/freeipa/freeipa/pull/1021 Author: flo-renaud Title: #1021: Backport PR 988 to ipa-4-5 Action: opened PR body: """ Fix Certificate renewal (with ext ca) Fix certificate renewal scripts that use IPACertificate object: - renew_ca_cert adds the C flag to the trust flags and needs to be adapted to IPACertificate object - ipa-cacert-manage: fix python3 encoding issue https://pagure.io/freeipa/issue/7106 Reviewed-By: Fraser Tweedale <ftweedal(a)redhat.com> Reviewed-By: Stanislav Laznicka <slaznick(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1021/head:pr1021 git checkout pr1021

2 1

[DESIGN DRAFT] IPA client installation with Ansible
by Florence Blanc-Renaud 07 Sep '17

07 Sep '17

Hi all, The first version of a new design document is available at https://www.freeipa.org/page/V4/ClientInstallationWithAnsible The feature will allow to deploy IPA clients using Ansible. Please feel free to send your comments, suggestions or concerns. Thanks, Flo

6 7

[freeipa PR#1001][opened] Fix ipa config-mod --ca-renewal-master
by flo-renaud 05 Sep '17

05 Sep '17

URL: https://github.com/freeipa/freeipa/pull/1001 Author: flo-renaud Title: #1001: Fix ipa config-mod --ca-renewal-master Action: opened PR body: """ commit bddb90f38a3505a2768862d2f814c5e749a7dcde added the support for multivalued server attributes (for pkinit_server_server), but this introduced an API change where the setter and getter of ServerAttribute are expecting list of values. When a SingleValuedServerAttribute is used, we need to convert one elem into a list containing this elem and vice-versa, so that the ipa config-mod and ipa config_show APIs are not modified. https://pagure.io/freeipa/issue/7120 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1001/head:pr1001 git checkout pr1001

2 1

[freeipa PR#1010][opened] Adds whoami DS plugin in case that plugin is missing
by pvomacka 05 Sep '17

05 Sep '17

URL: https://github.com/freeipa/freeipa/pull/1010 Author: pvomacka Title: #1010: Adds whoami DS plugin in case that plugin is missing Action: opened PR body: """ When first installation of IPA has been done when whoami plugin was not enabled in DS by default and then IPA was upgraded to newer versions, then after upgrade to IPA 4.5 WebUI stops working. This is caused by new requirement on whoami DS plugin which is used to obtain information about logged in entity. This fix adds check whether the plugin is enabled and if not then IPA enables the plugin during upgrade. https://pagure.io/freeipa/issue/7126 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1010/head:pr1010 git checkout pr1010

2 1

[freeipa PR#1013][opened] schema: Fix internal error in param-{find, show} with nonexistent object
by davidkupka 01 Sep '17

01 Sep '17

URL: https://github.com/freeipa/freeipa/pull/1013 Author: davidkupka Title: #1013: schema: Fix internal error in param-{find,show} with nonexistent object Action: opened PR body: """ """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1013/head:pr1013 git checkout pr1013

2 1

[freeipa PR#1014][opened] dnssec: keep dnssec daemons in Python2
by tomaskrizek 01 Sep '17

01 Sep '17

URL: https://github.com/freeipa/freeipa/pull/1014 Author: tomaskrizek Title: #1014: dnssec: keep dnssec daemons in Python2 Action: opened PR body: """ Until DNSSEC is ready for Python3, we should run DNSSEC with Python 2. Signed-off-by: Tomas Krizek <tkrizek(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1014/head:pr1014 git checkout pr1014

1 1

[freeipa PR#1002][opened] Fix external renewal for CA with non-default subject DN
by frasertweedale 01 Sep '17

01 Sep '17

URL: https://github.com/freeipa/freeipa/pull/1002 Author: frasertweedale Title: #1002: Fix external renewal for CA with non-default subject DN Action: opened PR body: """ When running ``ipa-cacert-manage renew --external-ca`` with an IPA CA having a subject DN that does not correspond to ``CN=Certificate Authority, {subject-base}``, the CSR for submission to the external CA does not generated. dogtag-ipa-ca-renew-agent-submit is wrongly assuming the default form of the CA subject DN. Update dogtag-ipa-ca-renew-agent-submit to look up the actual subject DN. Fixes: https://pagure.io/freeipa/issue/7123 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1002/head:pr1002 git checkout pr1002

2 1

[freeipa PR#908][opened] WebUI: Actions array in search facet spec does not have 'undefined' value anymore
by pvomacka 01 Sep '17

01 Sep '17

URL: https://github.com/freeipa/freeipa/pull/908 Author: pvomacka Title: #908: WebUI: Actions array in search facet spec does not have 'undefined' value anymore Action: opened PR body: """ In case that there are no actions specified in spec object, the concatenation of arrays causes that 'undefined' item is added into the array. https://pagure.io/freeipa/issue/7052 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/908/head:pr908 git checkout pr908

2 1

[freeipa PR#884][opened] ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
by npmccallum 01 Sep '17

01 Sep '17

URL: https://github.com/freeipa/freeipa/pull/884 Author: npmccallum Title: #884: ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace Action: opened PR body: """ For some unknown reason, when I wrote the ipa-otptoken-import script I used bad input data which had the PBKDF2 parameters in the wrong XML namespace. I have corrected this input data to match RFC 6030. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/884/head:pr884 git checkout pr884

2 1

[freeipa PR#1028][opened] Remove unused variable
by stlaz 01 Sep '17

01 Sep '17

URL: https://github.com/freeipa/freeipa/pull/1028 Author: stlaz Title: #1028: Remove unused variable Action: opened PR body: """ """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1028/head:pr1028 git checkout pr1028

2 1

[freeipa PR#1026][opened] Backport PR 1025 to ipa-4-5
by tomaskrizek 31 Aug '17

31 Aug '17

URL: https://github.com/freeipa/freeipa/pull/1026 Author: tomaskrizek Title: #1026: Backport PR 1025 to ipa-4-5 Action: opened PR body: """ This PR was opened automatically because PR #1025 was pushed to master and backport to ipa-4-5 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1026/head:pr1026 git checkout pr1026

1 1

[freeipa PR#1022][opened] Backport PR 989 to ipa-4-5
by felipevolpone 31 Aug '17

31 Aug '17

URL: https://github.com/freeipa/freeipa/pull/1022 Author: felipevolpone Title: #1022: Backport PR 989 to ipa-4-5 Action: opened PR body: """ This PR was opened automatically because PR #989 was pushed to master and backport to ipa-4-5 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1022/head:pr1022 git checkout pr1022

2 1

[freeipa PR#1019][opened] Backport PR 999 to ipa-4-5
by tomaskrizek 31 Aug '17

31 Aug '17

URL: https://github.com/freeipa/freeipa/pull/1019 Author: tomaskrizek Title: #1019: Backport PR 999 to ipa-4-5 Action: opened PR body: """ This PR was opened automatically because PR #999 was pushed to master and backport to ipa-4-5 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1019/head:pr1019 git checkout pr1019

1 1

[freeipa PR#1012][opened] csrgen: support openssl 1.0 and 1.1
by abbra 31 Aug '17

31 Aug '17

URL: https://github.com/freeipa/freeipa/pull/1012 Author: abbra Title: #1012: csrgen: support openssl 1.0 and 1.1 Action: opened PR body: """ Support both openssl 1.0 and 1.1 APIs where sk_* functions got prefixed with OPENSSL_ in the latter version. Since referencing a symbol from a dynamically loaded library generates exception, use the AttributeError exception to catch it and fall back to the older method. Fixes https://pagure.io/freeipa/issue/7110 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1012/head:pr1012 git checkout pr1012

2 1

[freeipa PR#1025][opened] ipatests: collect log after ipa-ca-install
by tomaskrizek 31 Aug '17

31 Aug '17

URL: https://github.com/freeipa/freeipa/pull/1025 Author: tomaskrizek Title: #1025: ipatests: collect log after ipa-ca-install Action: opened PR body: """ Make sure logs are collected after calling ipa-ca-install command. Related: https://pagure.io/freeipa/issue/7060 Signed-off-by: Tomas Krizek <tkrizek(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1025/head:pr1025 git checkout pr1025

1 1

[freeipa PR#907][opened] WebUI: fix WebUI unit tests
by pvomacka 31 Aug '17

31 Aug '17

URL: https://github.com/freeipa/freeipa/pull/907 Author: pvomacka Title: #907: WebUI: fix WebUI unit tests Action: opened PR body: """ This pull request fixes WebUI unit tests. And there are also commits from PR #628 which should be removed once the PR #628 will be pushed. But they are necessary for this PR. https://pagure.io/freeipa/issue/6974 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/907/head:pr907 git checkout pr907

1 1

[freeipa PR#1020][opened] Backport PR 628 to ipa-4-5
by pvomacka 31 Aug '17

31 Aug '17

URL: https://github.com/freeipa/freeipa/pull/1020 Author: pvomacka Title: #1020: Backport PR 628 to ipa-4-5 Action: opened PR body: """ This PR was opened automatically because PR #628 was pushed to master and backport to ipa-4-5 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1020/head:pr1020 git checkout pr1020

1 1

[freeipa PR#628][closed] WebUI: Remove offline version of WebUI
by pvomacka 30 Aug '17

30 Aug '17

URL: https://github.com/freeipa/freeipa/pull/628 Author: pvomacka Title: #628: WebUI: Remove offline version of WebUI Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/628/head:pr628 git checkout pr628

1 0

[freeipa PR#999][opened] dnssec: fix localhsm.py utility script
by tomaskrizek 30 Aug '17

30 Aug '17

URL: https://github.com/freeipa/freeipa/pull/999 Author: tomaskrizek Title: #999: dnssec: fix localhsm.py utility script Action: opened PR body: """ See e6b2ed6b68589ff7ee39b95559836af54f39e2de for details. Fixes https://pagure.io/freeipa/issue/7116 Signed-off-by: Tomas Krizek <tkrizek(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/999/head:pr999 git checkout pr999

1 1

[freeipa PR#1017][opened] Backport PR 945 to ipa-4-5
by stlaz 30 Aug '17

30 Aug '17

URL: https://github.com/freeipa/freeipa/pull/1017 Author: stlaz Title: #1017: Backport PR 945 to ipa-4-5 Action: opened PR body: """ This PR was opened automatically because PR #945 was pushed to master and backport to ipa-4-5 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1017/head:pr1017 git checkout pr1017

2 1

[freeipa PR#989][opened] Removing part of circular dependency of ipaplatformin ipalib
by felipevolpone 30 Aug '17

30 Aug '17

URL: https://github.com/freeipa/freeipa/pull/989 Author: felipevolpone Title: #989: Removing part of circular dependency of ipaplatformin ipalib Action: opened PR body: """ After commit cac3475a0454b730d6e5b2093c2e63d395acd387, ipa-backup is broken due to circular dependencies. This fixes it, removing circular dependency of ipalib. The ipalib.constants.IPAAPI_USER is now passed as parameter to the functions that use it. https://pagure.io/freeipa/issue/7108 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/989/head:pr989 git checkout pr989

2 1

[freeipa PR#915][opened] [master only] Move tmpfiles.d configuration handling back to spec file
by martbab 30 Aug '17

30 Aug '17

URL: https://github.com/freeipa/freeipa/pull/915 Author: martbab Title: #915: [master only] Move tmpfiles.d configuration handling back to spec file Action: opened PR body: """ Since ipaapi user is now created during RPM install and not in runtime, we may switch back to shipping tmpfiles.d configuration directly in RPMs and not create it in runtime, which is a preferred way to handle drop-in configuration anyway. This also means that the drop-in config will be shipped in /usr/lib instead of /etc according to Fedora packaging guidelines. This partially reverts commit 38c66896de1769077cd5b057133606ec5eeaf62b. https://pagure.io/freeipa/issue/7053 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/915/head:pr915 git checkout pr915

2 1

[freeipa PR#945][opened] DNS update: reduce timeout for CA records
by MartinBasti 30 Aug '17

30 Aug '17

URL: https://github.com/freeipa/freeipa/pull/945 Author: MartinBasti Title: #945: DNS update: reduce timeout for CA records Action: opened PR body: """ Timeout 120 seconds is quite long and it makes uninstallation too long for. Given that this is non critical operation and may be executed manually later, waiting 120 seconds is too much. Usually waiting longer will not help at all to resolve missing record. 30 seconds is long enough 🕯 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/945/head:pr945 git checkout pr945

2 1

[freeipa PR#988][opened] component: Certificate renewal
by flo-renaud 30 Aug '17

30 Aug '17

URL: https://github.com/freeipa/freeipa/pull/988 Author: flo-renaud Title: #988: component: Certificate renewal Action: opened PR body: """ Fix certificate renewal scripts that use IPACertificate object: - dogtag-ipa-ca-renew-agent-submit must print the renewed cert in the stdout for certmonger to pick it - renew_ca_cert adds the C flag to the trust flags and needs to be adapted to IPACertificate object https://pagure.io/freeipa/issue/4985 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/988/head:pr988 git checkout pr988

2 1

[freeipa PR#993][opened] certmonger: remove temporary workaround
by stlaz 30 Aug '17

30 Aug '17

URL: https://github.com/freeipa/freeipa/pull/993 Author: stlaz Title: #993: certmonger: remove temporary workaround Action: opened PR body: """ During recent refactoring, a workaround was added to make it possible for OpenSSL backend of python-cryptography to read PEM certificates returned by dogtag-ipa-renew-agent-submit. This was fixed in latest certmonger version. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/993/head:pr993 git checkout pr993

1 1

[freeipa PR#1016][opened] prci: add caless tests
by tomaskrizek 30 Aug '17

30 Aug '17

URL: https://github.com/freeipa/freeipa/pull/1016 Author: tomaskrizek Title: #1016: prci: add caless tests Action: opened PR body: """ Add TestServerReplicaCALessToCAFull to PR CI test suite. Signed-off-by: Tomas Krizek <tkrizek(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1016/head:pr1016 git checkout pr1016

2 1

[freeipa PR#1015][opened] prci: add caless tests
by tomaskrizek 30 Aug '17

30 Aug '17

URL: https://github.com/freeipa/freeipa/pull/1015 Author: tomaskrizek Title: #1015: prci: add caless tests Action: opened PR body: """ Add TestServerReplicaCALessToCAFull to PR CI test suite. Signed-off-by: Tomas Krizek <tkrizek(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1015/head:pr1015 git checkout pr1015

2 1

[freeipa PR#1008][opened] Fix ipa-server-upgrade: This entry already exists
by flo-renaud 30 Aug '17

30 Aug '17

URL: https://github.com/freeipa/freeipa/pull/1008 Author: flo-renaud Title: #1008: Fix ipa-server-upgrade: This entry already exists Action: opened PR body: """ ipa-server-upgrade fails when running the ipaload_cacrt plugin. The plugin finds all CA certificates in /etc/httpd/alias and uploads them in LDAP below cn=certificates,cn=ipa,cn=etc,$BASEDN. The issue happens because there is already an entry in LDAP for IPA CA, but with a different DN. The nickname in /etc/httpd/alias can differ from $DOMAIN IPA CA. To avoid the issue: 1/ during upgrade, run a new plugin that removes duplicates and restarts ldap (to make sure that uniqueness attr plugin is working after the new plugin) 2/ modify upload_cacert plugin so that it is using $DOMAIN IPA CA instead of cn=$nickname,cn=ipa,cn=etc,$BASEDN when uploading IPA CA. https://pagure.io/freeipa/issue/7125 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1008/head:pr1008 git checkout pr1008

2 1

[freeipa PR#1007][opened] py3: minor fixes
by stlaz 30 Aug '17

30 Aug '17

URL: https://github.com/freeipa/freeipa/pull/1007 Author: stlaz Title: #1007: py3: minor fixes Action: opened PR body: """ These are some bugs that were introduced by an accident and showed while testing with RHEL 6.9 client. https://pagure.io/freeipa/issue/4985 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1007/head:pr1007 git checkout pr1007

1 1

[freeipa PR#1009][opened] [4.5] - CAless - CAfull tests
by Rezney 29 Aug '17

29 Aug '17

URL: https://github.com/freeipa/freeipa/pull/1009 Author: Rezney Title: #1009: [4.5] - CAless - CAfull tests Action: opened PR body: """ This is separate PR for CAless - CAfull test suite as it was not possible to merge from original PR due to certificate generation refactoring. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1009/head:pr1009 git checkout pr1009

2 1

[freeipa PR#379][reopened] Packaging: Add IPA commands package
by tiran 29 Aug '17

29 Aug '17

URL: https://github.com/freeipa/freeipa/pull/379 Author: tiran Title: #379: Packaging: Add IPA commands package Action: reopened To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/379/head:pr379 git checkout pr379

1 0

[freeipa PR#995][opened] py3: handle bytes in schema response
by frasertweedale 29 Aug '17

29 Aug '17

URL: https://github.com/freeipa/freeipa/pull/995 Author: frasertweedale Title: #995: py3: handle bytes in schema response Action: opened PR body: """ If a server is running under py2 it could return a bytes value for the 'topic_topic' field in the schema response. A py3 client fails to handle this (in one place it applies 'str' to it, which raises BytesWarning; in other places it tries to serialise the schema to JSON which fails because of the bytes value). Handle the case where 'topic_topic' is not unicode, and handle bytes values when serialising the schema to JSON. Part of: https://pagure.io/freeipa/issue/4985 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/995/head:pr995 git checkout pr995

2 1

[freeipa PR#1006][opened] py3: fix vault public key decoding
by frasertweedale 29 Aug '17

29 Aug '17

URL: https://github.com/freeipa/freeipa/pull/1006 Author: frasertweedale Title: #1006: py3: fix vault public key decoding Action: opened PR body: """ Part of: https://pagure.io/freeipa/issue/7033 This commit fixes one issue in FreeIPA related to vault. It does not fully resolve #7033 because there are changes needed in Dogtag too. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1006/head:pr1006 git checkout pr1006

2 1

[freeipa PR#1004][opened] cert: fix application of 'str' to bytes when formatting otherName
by frasertweedale 29 Aug '17

29 Aug '17

URL: https://github.com/freeipa/freeipa/pull/1004 Author: frasertweedale Title: #1004: cert: fix application of 'str' to bytes when formatting otherName Action: opened PR body: """ Part of: https://pagure.io/freeipa/issue/4985 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1004/head:pr1004 git checkout pr1004

2 1

[freeipa PR#1003][opened] py3: Fix searching for yubikeys
by stlaz 29 Aug '17

29 Aug '17

URL: https://github.com/freeipa/freeipa/pull/1003 Author: stlaz Title: #1003: py3: Fix searching for yubikeys Action: opened PR body: """ Bumping the requirements for the python-yubikey package. This is unfortunately most probably fixed only in Fedora because there was no upstream release for about a year and a half now. That also means bumping the version in ipasetup.py.in would be pointless. https://pagure.io/freeipa/issue/7121 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1003/head:pr1003 git checkout pr1003

2 1

[freeipa PR#994][opened] py3: fix schema response for py2 server with py3 client
by frasertweedale 29 Aug '17

29 Aug '17

URL: https://github.com/freeipa/freeipa/pull/994 Author: frasertweedale Title: #994: py3: fix schema response for py2 server with py3 client Action: opened PR body: """ The schema RPC response can include a bytes value for the 'topic_topic' field (when the server is running in Python 2). In this case, a Python 3 client fails to initialise the API when a schema fetch is required, because it cannot serialise the bytes values in the schema object to JSON. Ensure the 'topic_topic' value is unicode. Part of: https://pagure.io/freeipa/issue/4985 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/994/head:pr994 git checkout pr994

2 1

[freeipa PR#990][opened] Remove e.message and a relative import
by stlaz 29 Aug '17

29 Aug '17

URL: https://github.com/freeipa/freeipa/pull/990 Author: stlaz Title: #990: Remove e.message and a relative import Action: opened PR body: """ Partially fixes: - https://pagure.io/freeipa/issue/4985 - https://pagure.io/freeipa/issue/6874 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/990/head:pr990 git checkout pr990

2 1

[freeipa PR#599][closed] CONFIGURE: Improve error messages for optional dependencies
by tomaskrizek 29 Aug '17

29 Aug '17

URL: https://github.com/freeipa/freeipa/pull/599 Author: lslebodn Title: #599: CONFIGURE: Improve error messages for optional dependencies Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/599/head:pr599 git checkout pr599

1 0

[freeipa PR#590][closed] Validate user input for cert-get-requestdata
by tomaskrizek 29 Aug '17

29 Aug '17

URL: https://github.com/freeipa/freeipa/pull/590 Author: Akasurde Title: #590: Validate user input for cert-get-requestdata Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/590/head:pr590 git checkout pr590

1 0

[freeipa PR#503][closed] [WIP] Update testcase for cert plugin
by tomaskrizek 29 Aug '17

29 Aug '17

URL: https://github.com/freeipa/freeipa/pull/503 Author: Akasurde Title: #503: [WIP] Update testcase for cert plugin Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/503/head:pr503 git checkout pr503

1 0

[freeipa PR#379][closed] Packaging: Add IPA commands package
by tomaskrizek 29 Aug '17

29 Aug '17

URL: https://github.com/freeipa/freeipa/pull/379 Author: tiran Title: #379: Packaging: Add IPA commands package Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/379/head:pr379 git checkout pr379

1 0

[freeipa PR#898][opened] py3: ipa-dnskeysyncd: fix bytes issues
by MartinBasti 28 Aug '17

28 Aug '17

URL: https://github.com/freeipa/freeipa/pull/898 Author: MartinBasti Title: #898: py3: ipa-dnskeysyncd: fix bytes issues Action: opened PR body: """ LDAP client returns values as bytes, thus ipa-dnskeysyncd must work with bytes properly. https://pagure.io/freeipa/issue/4985 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/898/head:pr898 git checkout pr898

2 1

python3-pyldap python 3 bugs
by Fraser Tweedale 25 Aug '17

25 Aug '17

Hi team, There are some bugs in python3-pyldap; the version in f25 and f26 is affected (not sure about f27/rawhide but the problems have been fixed upstream[1]). In FreeIPA the `json_metadata' command is affected (at least), which breaks the Web UI. If you hit this, here (below) is a patch you can apply locally to get past the issues: Cheers, Fraser [1] https://github.com/pyldap/pyldap (epilogue: I see Stanislav is responsible for at least one of the upstream fixes so some folks knew about it already ^_^) --- /usr/lib64/python3.5/site-packages/ldap/schema/subentry.py 2017-08-25 19:20:27.890073294 +1000 +++ /root/pyldap-new 2017-08-25 19:20:14.542084650 +1000 @@ -296,7 +296,7 @@ if oc_se and oc_se.kind==0: struct_ocs[oc_se.oid] = None result = None - struct_oc_list = struct_ocs.keys() + struct_oc_list = list(struct_ocs) while struct_oc_list: oid = struct_oc_list.pop() for child_oid in oc_tree[oid]: @@ -419,14 +419,14 @@ # Remove all mandantory attribute types from # optional attribute type list - for a in r_may.keys(): + for a in list(r_may.keys()): if a in r_must: del r_may[a] # Apply attr_type_filter to results if attr_type_filter: for l in [r_must,r_may]: - for a in l.keys(): + for a in list(l.keys()): for afk,afv in attr_type_filter: try: schema_attr_type = self.sed[AttributeType][a]

1 0

[freeipa PR#1000][opened] Fix CA-less installation
by frasertweedale 25 Aug '17

25 Aug '17

URL: https://github.com/freeipa/freeipa/pull/1000 Author: frasertweedale Title: #1000: Fix CA-less installation Action: opened PR body: """ Fix CA-less installation failure due to an incorrect use of with statement. Fixes: https://pagure.io/freeipa/issue/7118 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1000/head:pr1000 git checkout pr1000

2 1

[freeipa PR#997][opened] Uninstall: fix BytesWarning exception
by stlaz 25 Aug '17

25 Aug '17

URL: https://github.com/freeipa/freeipa/pull/997 Author: stlaz Title: #997: Uninstall: fix BytesWarning exception Action: opened PR body: """ When uninstalling, if server does not have all roles, exception is thrown as the role is not found. `member_principal` variable has to be string here, otherwise we're using str on bytes. https://pagure.io/freeipa/issue/4985 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/997/head:pr997 git checkout pr997

2 1

[freeipa PR#998][opened] Unify storing certificates in LDAP
by stlaz 25 Aug '17

25 Aug '17

URL: https://github.com/freeipa/freeipa/pull/998 Author: stlaz Title: #998: Unify storing certificates in LDAP Action: opened PR body: """ Recent certificate refactoring left the system in a state where the certificates are somewhere converted to DER format, somewhere directly sent to ipaldap as IPACertificate objects. The latter is the desirable way, make sure it's the one commonly used. https://pagure.io/freeipa/issue/4985 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/998/head:pr998 git checkout pr998

2 1

[freeipa PR#991][opened] [ipa-4-5] WebUI: Add hyphenate versions of Host(Role) Based strings
by pvomacka 25 Aug '17

25 Aug '17

URL: https://github.com/freeipa/freeipa/pull/991 Author: pvomacka Title: #991: [ipa-4-5] WebUI: Add hyphenate versions of Host(Role) Based strings Action: opened PR body: """ The hyphenated forms are less ambiguous and easier to read. (For more grammar background, see for example "Hyphenate Complex Adjectives" in http://stylepedia.net/ Grammar-Hyphenation ) https://pagure.io/freeipa/issue/6582 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/991/head:pr991 git checkout pr991

1 1

[freeipa PR#985][opened] py3: fix caless to CA promotion on replica
by stlaz 25 Aug '17

25 Aug '17

URL: https://github.com/freeipa/freeipa/pull/985 Author: stlaz Title: #985: py3: fix caless to CA promotion on replica Action: opened PR body: """ https://pagure.io/freeipa/issue/4985 --------- Encountered this problem when trying to promote CA-less replica to CA-full, may happen on CA-less master as well although I did not investigate that. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/985/head:pr985 git checkout pr985

2 1

[freeipa PR#970][opened] backport #6999 to ipa-4-5
by pvoborni 25 Aug '17

25 Aug '17

URL: https://github.com/freeipa/freeipa/pull/970 Author: pvoborni Title: #970: backport #6999 to ipa-4-5 Action: opened PR body: """ Such simple fix should be in stabilization release. https://pagure.io/freeipa/issue/7092 or https://pagure.io/freeipa/issue/6999 one needs to be opened on push. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/970/head:pr970 git checkout pr970

2 1

Re: [freeipa/freeipa] Removing part of circular dependency of ipalib in ipaplatform (#989)
by Christian Heimes 24 Aug '17

24 Aug '17

On 2017-08-23 21:25, Felipe Volpone wrote: > @felipevolpone <https://github.com/felipevolpone> pushed 1 commit. > > * 2ddaa6e <https://github.com/freeipa/freeipa/commit/2ddaa6e> Removing > part of circular dependency of ipalib in ipaplaform Why did you remove os.path.basename() from systemd-tmpfiles call? My example included it on purpose. The tool does the right thing and locates the correct config file on its own. A basename takes customization into account, too. Christian -- Christian Heimes Senior Software Engineer, Identity Management and Platform Security Red Hat GmbH, http://www.de.redhat.com/, Registered seat: Grasbrunn, Commercial register: Amtsgericht Muenchen, HRB 153243, Managing Directors: Charles Cachera, Michael Cunningham, Michael O'Neill, Eric Shander

2 1

[freeipa PR#918][opened] [WIP] dcerpc: support Python 3
by abbra 23 Aug '17

23 Aug '17

URL: https://github.com/freeipa/freeipa/pull/918 Author: abbra Title: #918: [WIP] dcerpc: support Python 3 Action: opened PR body: """ Make 'ipa trust-add' work under Python 3. One needs patches from https://lists.samba.org/archive/samba-technical/2017-July/121746.html to Samba too. Marked as WIP until Samba patches are released as part of 4.7.0-RC2. Since we haven't switched whole ipa server environment to Python 3 yet, following packages need to be installed to make trust code working under Python 3: - python3-libsss_nss_idmap - python3-sss - python3-samba - python3-mod_wsgi """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/918/head:pr918 git checkout pr918

2 1

[freeipa PR#979][opened] cacert_manage: fix CA cert renewal
by stlaz 23 Aug '17

23 Aug '17

URL: https://github.com/freeipa/freeipa/pull/979 Author: stlaz Title: #979: cacert_manage: fix CA cert renewal Action: opened PR body: """ Since IPACertificate object is passed to CAInstance's update_people_entry() and update_authority_entry(), these are not be able to load this object as a certificate again and thus would fail. This commit fixes that. https://pagure.io/freeipa/issue/4985 Depends on https://github.com/freeipa/freeipa/pull/978 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/979/head:pr979 git checkout pr979

2 1

[freeipa PR#963][opened] Include the CA basic constraint in CSRs when renewing a CA
by rcritten 22 Aug '17

22 Aug '17

URL: https://github.com/freeipa/freeipa/pull/963 Author: rcritten Title: #963: Include the CA basic constraint in CSRs when renewing a CA Action: opened PR body: """ The CSR generated by `ipa-cacert-manage renew --external-ca` did not include the CA basic constraint: X509v3 Basic Constraints: critical CA:TRUE Add a flag to certmonger::resubmit_request to specify that a CA is being requested. Note that this also sets pathlen to -1 which means an unlimited pathlen. Leave it up to the issuing CA to set this. https://pagure.io/freeipa/issue/7088 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/963/head:pr963 git checkout pr963

2 1

[freeipa PR#978][opened] Fixing and porting dogtag-ipa-ca-renew-agent-submit
by stlaz 22 Aug '17

22 Aug '17

URL: https://github.com/freeipa/freeipa/pull/978 Author: stlaz Title: #978: Fixing and porting dogtag-ipa-ca-renew-agent-submit Action: opened PR body: """ This PR fixes several issues with the `dogtag-ipa-ca-renew-agent-submit` script that were introduced in the recent certificate refactoring and eventually ports the script and its scriptlets to Python 3. https://pagure.io/freeipa/issue/4985 To properly test the port, you will need https://github.com/freeipa/freeipa/pull/975 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/978/head:pr978 git checkout pr978

2 1

[freeipa PR#971][opened] [master] WebUI: Add hyphenate versions of Host(Role) Based strings
by pvomacka 22 Aug '17

22 Aug '17

URL: https://github.com/freeipa/freeipa/pull/971 Author: pvomacka Title: #971: [master] WebUI: Add hyphenate versions of Host(Role) Based strings Action: opened PR body: """ The hyphenated forms are less ambiguous and easier to read. (For more grammar background, see for example "Hyphenate Complex Adjectives" in http://stylepedia.net/ Grammar-Hyphenation ) https://pagure.io/freeipa/issue/6582 This PR will need rebase to 4.5. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/971/head:pr971 git checkout pr971

1 1

[freeipa PR#975][opened] Make most of the stuff run in Python 3 by default
by stlaz 21 Aug '17

21 Aug '17

URL: https://github.com/freeipa/freeipa/pull/975 Author: stlaz Title: #975: Make most of the stuff run in Python 3 by default Action: opened PR body: """ commit ee17a770965d5a3ab02ba4c6c593678c3be1ae47 (HEAD -> py3_team_test, private/py3_team_test) Author: Stanislav Laznicka <slaznick(a)redhat.com> Date: Tue Aug 15 14:14:09 2017 +0200 Make the IPA server run under Python 3 by default Set python3-mod_wsgi as a requirement for FreeIPA in the spec file so that httpd runs IPA server under Python 3. https://pagure.io/freeipa/issue/4985 commit 86f0cf3da55a25e526966b8cf30fad9b7013ae5a Author: Stanislav Laznicka <slaznick(a)redhat.com> Date: Tue Aug 15 14:10:27 2017 +0200 Turn IPA scripts to python3 -bb for testing This is a commit which expands current scripts being run under python3 by default. We set the -bb option so that any Bytes/Str error breaks execution. This commit shall be reverted before reaching production. https://pagure.io/freeipa/issue/4985 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/975/head:pr975 git checkout pr975

2 1

[freeipa PR#986][opened] py3: Depend on newer pyldap for server-upgrade
by stlaz 21 Aug '17

21 Aug '17

URL: https://github.com/freeipa/freeipa/pull/986 Author: stlaz Title: #986: py3: Depend on newer pyldap for server-upgrade Action: opened PR body: """ https://pagure.io/freeipa/issue/4985 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/986/head:pr986 git checkout pr986

2 1

[freeipa PR#987][opened] Backport PR 974 to ipa-4-5
by tomaskrizek 18 Aug '17

18 Aug '17

URL: https://github.com/freeipa/freeipa/pull/987 Author: tomaskrizek Title: #987: Backport PR 974 to ipa-4-5 Action: opened PR body: """ This PR was opened automatically because PR #974 was pushed to master and backport to ipa-4-5 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/987/head:pr987 git checkout pr987

1 1

[freeipa PR#984][opened] ipautil: port host_port_open() to python 3
by stlaz 18 Aug '17

18 Aug '17

URL: https://github.com/freeipa/freeipa/pull/984 Author: stlaz Title: #984: ipautil: port host_port_open() to python 3 Action: opened PR body: """ socket.send() expects `Bytes` instance, not string https://pagure.io/freeipa/issue/4985 This causes issues with `ipa-replica-conncheck` when installing a replica. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/984/head:pr984 git checkout pr984

2 1

[freeipa PR#983][opened] makerpms.sh: make git checkout optional
by tomaskrizek 18 Aug '17

18 Aug '17

URL: https://github.com/freeipa/freeipa/pull/983 Author: tomaskrizek Title: #983: makerpms.sh: make git checkout optional Action: opened PR body: """ In case someone is using the script from tarball, outside of git, the git checkout command shouldn't fail the script. Related https://pagure.io/freeipa/issue/6605 Signed-off-by: Tomas Krizek <tkrizek(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/983/head:pr983 git checkout pr983

1 1

[freeipa PR#982][opened] [ipa-4-5] build: checkout *.po files at the end of makerpms.sh
by tomaskrizek 18 Aug '17

18 Aug '17

URL: https://github.com/freeipa/freeipa/pull/982 Author: tomaskrizek Title: #982: [ipa-4-5] build: checkout *.po files at the end of makerpms.sh Action: opened PR body: """ Original PR: https://github.com/freeipa/freeipa/pull/972 *.po are re-generated during build. These changes shouldn't be comitted to git unless translation have been updated (during release). Fixes https://pagure.io/freeipa/issue/6605 Signed-off-by: Tomas Krizek <tkrizek(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/982/head:pr982 git checkout pr982

1 1

[freeipa PR#981][opened] [ipa-4-5] WebUI: fix incorrectly shown links in association tables
by pvomacka 18 Aug '17

18 Aug '17

URL: https://github.com/freeipa/freeipa/pull/981 Author: pvomacka Title: #981: [ipa-4-5] WebUI: fix incorrectly shown links in association tables Action: opened PR body: """ Previously all columns was shown as links, that was caused by setting link attribute of each column to true. This true value was there because of possibility to turn off links in whole table on self-service pages. Now only column which is primary key is set to be shown as link. https://pagure.io/freeipa/issue/7066 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/981/head:pr981 git checkout pr981

2 1

[freeipa PR#974][opened] Test for Certificate Identity Mapping
by davidkupka 18 Aug '17

18 Aug '17

URL: https://github.com/freeipa/freeipa/pull/974 Author: davidkupka Title: #974: Test for Certificate Identity Mapping Action: opened PR body: """ This PR replaces #399 which is orphaned and I'm no longer able to push into it. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/974/head:pr974 git checkout pr974

2 1

[freeipa PR#957][opened] Detect the backend crypto library that curl uses
by rcritten 18 Aug '17

18 Aug '17

URL: https://github.com/freeipa/freeipa/pull/957 Author: rcritten Title: #957: Detect the backend crypto library that curl uses Action: opened PR body: """ In Fedora 27 curl is proposing to switch to using OpenSSL as the crypto backend instead of NSS. This requires a new set of arguments to certmonger to bootstrap fetching the IPA RA cert. Debian/Ubuntu are still currently using an NSS-backed curl so support both methods for now. https://pagure.io/freeipa/issue/7076 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/957/head:pr957 git checkout pr957

2 1

[freeipa PR#977][opened] WebUI: fix incorrectly shown links in association tables
by pvomacka 17 Aug '17

17 Aug '17

URL: https://github.com/freeipa/freeipa/pull/977 Author: pvomacka Title: #977: WebUI: fix incorrectly shown links in association tables Action: opened PR body: """ Previously all columns was shown as links, that was caused by setting link attribute of each column to true. This true value was there because of possibility to turn off links in whole table on self-service pages. Now only column which is primary key is set to be shown as link. https://pagure.io/freeipa/issue/7066 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/977/head:pr977 git checkout pr977

1 1

[freeipa PR#972][opened] build: checkout *.po files at the end of makerpms.sh
by tomaskrizek 17 Aug '17

17 Aug '17

URL: https://github.com/freeipa/freeipa/pull/972 Author: tomaskrizek Title: #972: build: checkout *.po files at the end of makerpms.sh Action: opened PR body: """ *.po are re-generated during build. These changes shouldn't be comitted to git unless translation have been updated (during release). Fixes https://pagure.io/freeipa/issue/6605 Signed-off-by: Tomas Krizek <tkrizek(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/972/head:pr972 git checkout pr972

2 1

[freeipa PR#969][opened] [ipa-4-5] Changing how commands handles error when it can't connect to IPA server
by felipevolpone 17 Aug '17

17 Aug '17

URL: https://github.com/freeipa/freeipa/pull/969 Author: felipevolpone Title: #969: [ipa-4-5] Changing how commands handles error when it can't connect to IPA server Action: opened PR body: """ Creating a method to check if ipa client is configured. Also, changing scripts to use it instead of duplicating the check. https://pagure.io/freeipa/issue/6261 Reviewed-By: Florence Blanc-Renaud <frenaud(a)redhat.com> Backport of PR #939 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/969/head:pr969 git checkout pr969

2 1

[freeipa PR#954][opened] py3 conncheck + service plugin fixes
by stlaz 17 Aug '17

17 Aug '17

URL: https://github.com/freeipa/freeipa/pull/954 Author: stlaz Title: #954: py3 conncheck + service plugin fixes Action: opened PR body: """ commit 09942d0268f02ed15df5f7f3aad3220196c5a41c (HEAD -> py3-conncheck, private/py3-conncheck) Author: Stanislav Laznicka <slaznick(a)redhat.com> Date: Wed Aug 2 16:05:16 2017 +0200 conncheck: fix progression on failure traceback.format_exc() does not take exception object as an argument. This made Python 3 get stuck amid ipa-replica-conncheck, probably because it was waiting for a thread to finish. https://pagure.io/freeipa/issue/4985 commit fe820cbc1f3469150ab90af401b119d5d316f3ab Author: Stanislav Laznicka <slaznick(a)redhat.com> Date: Wed Aug 2 15:59:39 2017 +0200 kerberos: fix sorting Principal objects When service-find was issued under Python 3, the command fails because it tried to sort a list of Principal objects which was not possible. https://pagure.io/freeipa/issue/4985 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/954/head:pr954 git checkout pr954

2 1

[freeipa PR#399][closed] Certificate mapping test
by davidkupka 15 Aug '17

15 Aug '17

URL: https://github.com/freeipa/freeipa/pull/399 Author: davidkupka Title: #399: Certificate mapping test Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/399/head:pr399 git checkout pr399

1 0

[freeipa PR#965][opened] [ipa-4-5] Restore old version of caIPAserviceCert for upgrade only
by frasertweedale 14 Aug '17

14 Aug '17

URL: https://github.com/freeipa/freeipa/pull/965 Author: frasertweedale Title: #965: [ipa-4-5] Restore old version of caIPAserviceCert for upgrade only Action: opened PR body: """ The latest version of caIPAserviceCert profile includes a feature that is not available before Dogtag 10.4, and this version of the profile is intended for new installs only (otherwise, problems will arise in topologies containing CA replicas at an earlier version). But IPA versions before v4.2 did not use LDAP-based profiles, so the new version of the profile gets imported when upgrading from pre-v4.2 to v4.5 or later. We do not yet have a proper version- and topology-aware profile update mechanism, so to resolve this issue, ship the older version of the profile alongside the newer version, and make sure we use the older version when importing the profile in an upgrade context. https://pagure.io/freeipa/issue/7097 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/965/head:pr965 git checkout pr965

2 1

[freeipa PR#964][opened] Restore old version of caIPAserviceCert for upgrade only
by frasertweedale 14 Aug '17

14 Aug '17

URL: https://github.com/freeipa/freeipa/pull/964 Author: frasertweedale Title: #964: Restore old version of caIPAserviceCert for upgrade only Action: opened PR body: """ The latest version of caIPAserviceCert profile includes a feature that is not available before Dogtag 10.4, and this version of the profile is intended for new installs only (otherwise, problems will arise in topologies containing CA replicas at an earlier version). But IPA versions before v4.2 did not use LDAP-based profiles, so the new version of the profile gets imported when upgrading from pre-v4.2 to v4.5 or later. We do not yet have a proper version- and topology-aware profile update mechanism, so to resolve this issue, ship the older version of the profile alongside the newer version, and make sure we use the older version when importing the profile in an upgrade context. https://pagure.io/freeipa/issue/7097 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/964/head:pr964 git checkout pr964

2 1

Running FreeIPA under Python 3
by Stanislav Láznička 11 Aug '17

11 Aug '17

Hi all, Python 3 porting of FreeIPA is almost finishing. If you want to try and help development of FreeIPA in Python 3, feel free to do the following: 1) run installation (or the 'ipa') scripts with Python 3 like so: `python3 -bb /path/to/script`. You can find most if not all installation scripts in /usr/sbin directory. The "-bb" switch allows detection of using string/bytes instances incorrectly (for details, see help/man). 2) run the server in Python 3. To do that, you just simply install python3-mod_wsgi on your system and then restart the httpd service (if you've previously installed IPA, otherwise you should be fine to just install it without restarting anything). You want to be doing this on at least Fedora 26 since it contains the latest version of python-ldap. Please report any issues you might encounter. Happy hacking, Standa

2 1

[freeipa PR#939][opened] Changing how commands handles error when it can't connect to IPA server
by felipevolpone 11 Aug '17

11 Aug '17

URL: https://github.com/freeipa/freeipa/pull/939 Author: felipevolpone Title: #939: Changing how commands handles error when it can't connect to IPA server Action: opened PR body: """ Checking if env has the server attribute. If it doesn't, it means that an IPA server was not configured. https://pagure.io/freeipa/issue/6261 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/939/head:pr939 git checkout pr939

2 1

[freeipa PR#947][opened] test_caless: add SAN dNSName extensions for wildcard tests
by Rezney 11 Aug '17

11 Aug '17

URL: https://github.com/freeipa/freeipa/pull/947 Author: Rezney Title: #947: test_caless: add SAN dNSName extensions for wildcard tests Action: opened PR body: """ It may happen that FQDN does not match with the domain mapped to the host. In this case we add wildcard for both domains. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/947/head:pr947 git checkout pr947

2 1

[freeipa PR#942][opened] otptoken_yubikey.py: Removed traceback when package missing.
by Tiboris 11 Aug '17

11 Aug '17

URL: https://github.com/freeipa/freeipa/pull/942 Author: Tiboris Title: #942: otptoken_yubikey.py: Removed traceback when package missing. Action: opened PR body: """ IPA should suggest user to install dependent packages instad of throwing traceback. To work with IPA and Yubikey, packages libyubikey(not in official RHEL repo) and libusb are required. Resolves: https://pagure.io/freeipa/issue/6979 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/942/head:pr942 git checkout pr942

2 1

[freeipa PR#946][opened] Misc Python 3 fixes for ipaserver.secrets
by tiran 11 Aug '17

11 Aug '17

URL: https://github.com/freeipa/freeipa/pull/946 Author: tiran Title: #946: Misc Python 3 fixes for ipaserver.secrets Action: opened PR body: """ bytes/str fixes for LDAP data, JSON encoding and temp files. Related to https://bugzilla.redhat.com/show_bug.cgi?id=1476150 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/946/head:pr946 git checkout pr946

2 1

[freeipa PR#956][opened] og progress of wait_for_open_ports
by pvoborni 11 Aug '17

11 Aug '17

URL: https://github.com/freeipa/freeipa/pull/956 Author: pvoborni Title: #956: og progress of wait_for_open_ports Action: opened PR body: """ ### control logging of host_port_open from caller host_port_open copied logging behavior of ipa-replica-conncheck utility which doesn't make it much reusable. Now log level can be controlled from caller so other callers might use other logging level without host_port_open guessing what was the intention. ### log progress of wait_for_open_ports To know what to focus on when some check fail. E.g. to detect that IPv6 address or its resolution for localhost is misconfigured. Also gradually increases wait time so that it won't log 600 same messages when wait time is 600. https://pagure.io/freeipa/issue/7083 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/956/head:pr956 git checkout pr956

2 1

[freeipa PR#966][opened] [ipa-4-5] tests: fix external_ca test suite failing due to missing SKI
by tomaskrizek 11 Aug '17

11 Aug '17

URL: https://github.com/freeipa/freeipa/pull/966 Author: tomaskrizek Title: #966: [ipa-4-5] tests: fix external_ca test suite failing due to missing SKI Action: opened PR body: """ external_ca test suite is failing during installation due to missing SKI extension. https://pagure.io/freeipa/issue/7099 Original PR: #962 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/966/head:pr966 git checkout pr966

1 1

[freeipa PR#968][opened] Backport PR 961 to ipa-4-5
by tomaskrizek 11 Aug '17

11 Aug '17

URL: https://github.com/freeipa/freeipa/pull/968 Author: tomaskrizek Title: #968: Backport PR 961 to ipa-4-5 Action: opened PR body: """ This PR was opened automatically because PR #961 was pushed to master and backport to ipa-4-5 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/968/head:pr968 git checkout pr968

1 1

[freeipa PR#967][opened] Backport PR 958 to ipa-4-5
by tomaskrizek 11 Aug '17

11 Aug '17

URL: https://github.com/freeipa/freeipa/pull/967 Author: tomaskrizek Title: #967: Backport PR 958 to ipa-4-5 Action: opened PR body: """ This PR was opened automatically because PR #958 was pushed to master and backport to ipa-4-5 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/967/head:pr967 git checkout pr967

1 1

[freeipa PR#961][opened] [WIP] Vault testcase improvement
by Akasurde 11 Aug '17

11 Aug '17

URL: https://github.com/freeipa/freeipa/pull/961 Author: Akasurde Title: #961: [WIP] Vault testcase improvement Action: opened PR body: """ * Collect logs for install KRA fixes: #7098 Signed-off-by: Abhijeet Kasurde <akasurde(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/961/head:pr961 git checkout pr961

2 1

[freeipa PR#949][opened] host, service: fix adding host/svc with a cert
by stlaz 11 Aug '17

11 Aug '17

URL: https://github.com/freeipa/freeipa/pull/949 Author: stlaz Title: #949: host, service: fix adding host/svc with a cert Action: opened PR body: """ ipaldap.LDAPEntry expects that entry attributes, if multi-valued, are lists. The recent cert refactoring made it possible to pass certificate values from options directly to LDAPEntry instance but options store multi-values as tuples. This caused crashes since the whole tuple was stuck in a list instead of the values of the tuples to be extracted in the list. https://pagure.io/freeipa/issue/7077 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/949/head:pr949 git checkout pr949

2 1

[freeipa PR#958][opened] [ipatests] - Add caless > cafull tests
by Rezney 11 Aug '17

11 Aug '17

URL: https://github.com/freeipa/freeipa/pull/958 Author: Rezney Title: #958: [ipatests] - Add caless > cafull tests Action: opened PR body: """ This PR provides test coverage for caless > cafull conversion. Also covers: https://pagure.io/freeipa/issue/6207 https://pagure.io/freeipa/issue/6226 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/958/head:pr958 git checkout pr958

2 1

[freeipa PR#962][opened] tests: fix external_ca test suite failing due to missing SKI
by Rezney 11 Aug '17

11 Aug '17

URL: https://github.com/freeipa/freeipa/pull/962 Author: Rezney Title: #962: tests: fix external_ca test suite failing due to missing SKI Action: opened PR body: """ external_ca test suite is failing during installation due to missing SKI extension. https://pagure.io/freeipa/issue/7099 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/962/head:pr962 git checkout pr962

2 1

[RFC] Static type checking for FreeIPA (Mypy)
by Fraser Tweedale 10 Aug '17

10 Aug '17

Hi team, At PyCon Australia on the weekend I was reminded of PEP-484 type hinting** and the Mypy type checker for Python. With focus of FreeIPA project shifting more towards stability, quality and maintainability, and with Python 3 porting work nearly wrapped up, now is the time to think about how we can get more confidence in our code not just from tests, but from the code itself. Static checking of annotated types can help us there, and Mypy can let us begin to do this when writing new code or refactoring old code. Furthermore there is a benefit for IDE-users where plugins can use type annotations to provide better completion suggestions, etc. For an overview of Mypy please see the PyCon AU talk[1] or the docs[2]. [1] https://www.youtube.com/watch?v=mXfsMDM3LwQ [2] http://mypy.readthedocs.io/en/latest/index.html So, what's the plan? Alongside my other tasks, I'm going to start looking at how we could use Mypy in FreeIPA CI, and see what it is like using types in some of the areas I'm familiar with e.g. ipalib.x509. Based on my findings I'll update the team on the wins and challenges and we can decide how to proceed from there. Cheers, Fraser

3 6

[freeipa PR#404][closed] tests: Add LDAP URI to ldappasswd explicitly
by davidkupka 09 Aug '17

09 Aug '17

URL: https://github.com/freeipa/freeipa/pull/404 Author: davidkupka Title: #404: tests: Add LDAP URI to ldappasswd explicitly Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/404/head:pr404 git checkout pr404

1 0

[freeipa PR#959][opened] schema cache: Generate help after fetching schema from server
by davidkupka 08 Aug '17

08 Aug '17

URL: https://github.com/freeipa/freeipa/pull/959 Author: davidkupka Title: #959: schema cache: Generate help after fetching schema from server Action: opened PR body: """ When schema is not in cache and is fetched from server help must be generated otherwise `ipa help` call fails with traceback. https://pagure.io/freeipa/issue/7092 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/959/head:pr959 git checkout pr959

1 1

[freeipa PR#955][opened] host_port_open: revert to old behavior where one iface is sufficient
by pvoborni 03 Aug '17

03 Aug '17

URL: https://github.com/freeipa/freeipa/pull/955 Author: pvoborni Title: #955: host_port_open: revert to old behavior where one iface is sufficient Action: opened PR body: """ Commit a24cd01304aaef77b66d0e178585c9ec8bbce9b5 Changed behavior of host_port_open to require all discovered interfaces to listed on the port. But usage of host_port_open function in wait_for_open_ports function which is indirectly used from service.start might be still ok with only one interface. Requiring all interfaces might then cause issue(waiting till timeout) in IPA upgrader in specific DNS or network setups. https://pagure.io/freeipa/issue/7083 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/955/head:pr955 git checkout pr955

1 1

[freeipa PR#951][opened] server plugin: pass bytes to ldap.modify_s
by stlaz 03 Aug '17

03 Aug '17

URL: https://github.com/freeipa/freeipa/pull/951 Author: stlaz Title: #951: server plugin: pass bytes to ldap.modify_s Action: opened PR body: """ The server-del command passes str instance instead of bytes to ldap.modify_s which results in the target server not being removed properly. https://pagure.io/freeipa/issue/4985 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/951/head:pr951 git checkout pr951

2 1

[freeipa PR#940][opened] replica: fix SetuptoolsVersion compariosn
by stlaz 03 Aug '17

03 Aug '17

URL: https://github.com/freeipa/freeipa/pull/940 Author: stlaz Title: #940: replica: fix SetuptoolsVersion compariosn Action: opened PR body: """ Python 3 does not allow comparing SetuptoolsVersion and str instances. https://pagure.io/freeipa/issue/4985 ----------------------- Note that this does not allow full ipa-replica-install completion since that's now blocked by Custodia: https://bugzilla.redhat.com/show_bug.cgi?id=1476150 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/940/head:pr940 git checkout pr940

2 1

Re: [Freeipa-users] Re: Renewing /etc/httpd/alias certs
by Fraser Tweedale 03 Aug '17

03 Aug '17

Hi devs, This is at least the second time recently that people needing to renew service certificates used ``ipa-cacert-manage renew`` (the wrong command) and either didn't solve the problem or got into a deeper mess. Clearly we have a usability problem here. The ipa-cacert-manage(1) man page is clear, but perhaps could use a prominent statement that it doesn't renew service certs and if that's all the user needs to do, to use `getcert resubmit` instead. But I think better would be to enhance `ipa-cacert-manage renew` to inspect the current CA certificate and if it has, say, more than 75% of its validity period still to go, to PROMPT the user to confirm that renewing the *CA* certificate is really what they wanted to do. What do others think of this idea? Cheers, Fraser On Tue, Aug 01, 2017 at 05:22:53PM +0200, Florence Blanc-Renaud via FreeIPA-users wrote: > On 08/01/2017 03:50 PM, Jason B. Nance via FreeIPA-users wrote: > > Hello everyone, > > > > I'm running FreeIPA 4.4 (as shipped with current CentOS 7). I had a series of unfortunate events which resulted in the entire cluster being offline for a matter of a couple weeks during which the certificate in /etc/httpd/alias expired. I rolled back the clocks on all of the servers in the cluster and started them successfully, however, the certificates in /etc/httpd/alias did not get renewed. Is there a process that automatically handles this or was I supposed to be maintaining that? > > > > Additionally, based on: > > > > https://www.freeipa.org/page/Howto/CA_Certificate_Renewal > > > > ...I ran "ipa-cacert-manage renew" on my CA in a hope that that would trigger renewals across the boards, but now it appears that only the CA was updated as none of the server certificates were re-issued and are now all untrusted (I can't do "kinit admin" any longer as my realm is now down). Is there any chance of rolling that back or issuing new certs to get things going again? > > > Hi, > > ipa-cacert-manage will only renew IPA CA certificate, not the LDAP or HTTP > server certificates. > When IPA is using an embedded CA, the LDAP and HTTP server certificates > should be automatically renewed thanks to certmonger. If the automatic > renewal did not happen, you can check: > - if the certificates are indeed tracked by certmonger > sudo getcert list -n Server-Cert > The tool should output one cert for HTTP (in /etc/httpd/alias) and one for > LDAP (in /etc/dirsrv/slapd-DOM...). If the certs are not tracked, you need > to use getcert start-tracking to track them. > - if they are tracked but not renewed, check the journal for certmonger > messages. Certmonger should log a message when a certificate is nearing its > expiration, and another message when the renewal succeeded. > > When the certificates are expired, the method is to stop ntpd, go back in > time to a date where the certs were still valid, then manually trigger the > renewal using getcert resubmit -i <ID>. In case of errors, examine the > journal logs and try to fix the issue, then relaunch getcert resubmit. Once > the renewal succeeds, getcert list shows the cert status as MONITORING and > you can restart ntpd. > > This blog [1] provides a few examples of issues and their resolution > > HTH, > Flo > > [1] https://floblanc.wordpress.com/2016/12/19/troubleshooting-certmonger-issues… > > > If I have to start over, that is certainly an option. I'm just trying to get a better understanding of what I should have been doing to avoid this situation in the first place. > > > > Thanks, > > > > j > > _______________________________________________ > > FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org > > To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org > > > _______________________________________________ > FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org > To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org

3 4

FreeIPA Pull-Request CI is live!
by Tomas Krizek 02 Aug '17

02 Aug '17

Hi! We'd like to announce our pull-request CI infrastructure is live. Similarly to Travis CI, it picks up pull request and runs some tests on the code. You can see the result directly in the pull-request. If the test run fails, you can click 'Details' and check the logs. You can inspect the runner.log which has all the high-level information. For pytest, there's also report.html. Other relevant logs are also collected during builds and test runs. *Important changes for contributors* - If you're fixing a bug for an older release which requires a fix in multiple branches, make a separate pull-request for each branch. - Please re-base your current pull-request to trigger the PR CI. - If you're not on the white-list [1], a reviewer will have to trigger the test run manually with the 're-run' label. *Notice for people with commit rights* - Please make sure PR CI jobs were executed before giving the 'ack' label. - Do not push a single pull-request into multiple branches. *Reporting issues* As of now, please consider the PR CI a tech preview. If a test run fails, especially during the provisioning phase, issue a re-run. If it fails consistently and you don't think the issue is on your side, please report it to github issues [2]. We're currently working on resolving some pressing issues. Once the most urgent ones are addressed and the system is more stable and usable, you can expect a demo for contributors, describing the work-flow, logs etc. [1] - https://github.com/freeipa/freeipa-pr-ci/blob/master/whitelist.yml [2] - https://github.com/freeipa/freeipa-pr-ci/issues -- Tomas Krizek PGP: 4A8B A48C 2AED 933B D495 C509 A1FB A5F7 EF8C 4869

1 1

[freeipa PR#952][opened] tasks: remove str on bytes
by stlaz 02 Aug '17

02 Aug '17

URL: https://github.com/freeipa/freeipa/pull/952 Author: stlaz Title: #952: tasks: remove str on bytes Action: opened PR body: """ This enables ipa-certupdate to be run in Python 3 https://pagure.io/freeipa/issue/4985 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/952/head:pr952 git checkout pr952

1 1

[freeipa PR#941][opened] Enable replica installation on DL0
by stlaz 02 Aug '17

02 Aug '17

URL: https://github.com/freeipa/freeipa/pull/941 Author: stlaz Title: #941: Enable replica installation on DL0 Action: opened PR body: """ This patchset fixes the `ipa-replica-prepare` script and thus enables running `ipa-replica-install` in DL0 successfully. It then makes `ipa-replica-prepare` to be run in DL0 by default. https://pagure.io/freeipa/issue/4985 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/941/head:pr941 git checkout pr941

2 1

[freeipa PR#938][opened] client: make ipa-client-install py3 compatible
by stlaz 02 Aug '17

02 Aug '17

URL: https://github.com/freeipa/freeipa/pull/938 Author: stlaz Title: #938: client: make ipa-client-install py3 compatible Action: opened PR body: """ This commit enables ipa-client-install to be installable in Python 3 and makes it run in Python 3 by default. https://pagure.io/freeipa/issue/4985 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/938/head:pr938 git checkout pr938

2 1

[freeipa PR#877][opened] LDAP ObjectClasses are case-insensitive
by seriv 01 Aug '17

01 Aug '17

URL: https://github.com/freeipa/freeipa/pull/877 Author: seriv Title: #877: LDAP ObjectClasses are case-insensitive Action: opened PR body: """ In the IPA servers of the previous versions new users were created with objectClass capitalizations like 'posixAccount'. They should be treated as matching 'posixaccount'. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/877/head:pr877 git checkout pr877

3 2

2025

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-devel August 2017