URL: https://github.com/freeipa/freeipa/pull/950
Author: felipevolpone
Title: #950: Changing idoverrideuser-* to treat objectClass case insensitively
Action: opened
PR body:
"""
This is import to avoid problems when migrating from olders
versions of IPA and using idoverrideuser-* commands.
https://pagure.io/freeipa/issue/7074
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/950/head:pr950
git checkout pr950
URL: https://github.com/freeipa/freeipa/pull/1005
Author: felipevolpone
Title: #1005: Fixing how sssd.conf is updated when promoting a client to replica
Action: opened
PR body:
"""
When promoting a client to a replica we have to change sssd.conf, deleting _srv_ part from 'ipa_server' property and setting 'ipa_server_mode' to true.
Previously, the wrong domain could be updated since the ipa_domain variable was not being used properly.
https://bugzilla.redhat.com/show_bug.cgi?id=1478251
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1005/head:pr1005
git checkout pr1005
URL: https://github.com/freeipa/freeipa/pull/902
Author: felipevolpone
Title: #902: Improving replica promotion tests
Action: opened
PR body:
"""
Adding two new test cases in replica promotion scenario:
* Testing not interactive mode: Install client; kinit as admin;
then ipa-replica-install (without prompting a password)
* Testing interactive mode: only the admin password should be prompted
https://pagure.io/freeipa/issue/6554
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/902/head:pr902
git checkout pr902
URL: https://github.com/freeipa/freeipa/pull/992
Author: stlaz
Title: #992: Pylint fixes
Action: opened
PR body:
"""
Pylint check on Fedora 26 fails horribly with multitude of errors. This PR tries to fix that. Notice that to successfully run `pylint` on Fedora 26 with `make lint`, you need to have `python2-pylint` installed.
Fixes: https://pagure.io/freeipa/issue/6874
This PR should also unblock having Travis CI running in F26 container once https://bugzilla.redhat.com/show_bug.cgi?id=1483869 is fixed.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/992/head:pr992
git checkout pr992
URL: https://github.com/freeipa/freeipa/pull/1023
Author: flo-renaud
Title: #1023: Backport PR 1008 to ipa-4-5
Action: opened
PR body:
"""
Fix ipa-server-upgrade: This entry already exists
ipa-server-upgrade fails when running the ipaload_cacrt plugin. The plugin
finds all CA certificates in /etc/httpd/alias and uploads them in LDAP
below cn=certificates,cn=ipa,cn=etc,$BASEDN.
The issue happens because there is already an entry in LDAP for IPA CA, but
with a different DN. The nickname in /etc/httpd/alias can differ from
$DOMAIN IPA CA.
To avoid the issue:
1/ during upgrade, run a new plugin that removes duplicates and restarts ldap
(to make sure that uniqueness attr plugin is working after the new plugin)
2/ modify upload_cacert plugin so that it is using $DOMAIN IPA CA instead of
cn=$nickname,cn=ipa,cn=etc,$BASEDN when uploading IPA CA.
https://pagure.io/freeipa/issue/7125
Reviewed-By: Fraser Tweedale <ftweedal(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1023/head:pr1023
git checkout pr1023
URL: https://github.com/freeipa/freeipa/pull/1021
Author: flo-renaud
Title: #1021: Backport PR 988 to ipa-4-5
Action: opened
PR body:
"""
Fix Certificate renewal (with ext ca)
Fix certificate renewal scripts that use IPACertificate object:
- renew_ca_cert adds the C flag to the trust flags and needs to
be adapted to IPACertificate object
- ipa-cacert-manage: fix python3 encoding issue
https://pagure.io/freeipa/issue/7106
Reviewed-By: Fraser Tweedale <ftweedal(a)redhat.com>
Reviewed-By: Stanislav Laznicka <slaznick(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1021/head:pr1021
git checkout pr1021
Hi all,
The first version of a new design document is available at
https://www.freeipa.org/page/V4/ClientInstallationWithAnsible
The feature will allow to deploy IPA clients using Ansible. Please feel
free to send your comments, suggestions or concerns.
Thanks,
Flo