August 2017 - FreeIPA-devel - Fedora Mailing-Lists

by Fraser Tweedale

Hi team, There are some bugs in python3-pyldap; the version in f25 and f26 is affected (not sure about f27/rawhide but the problems have been fixed upstream[1]). In FreeIPA the `json_metadata' command is affected (at least), which breaks the Web UI. If you hit this, here (below) is a patch you can apply locally to get past the issues: Cheers, Fraser [1] https://github.com/pyldap/pyldap (epilogue: I see Stanislav is responsible for at least one of the upstream fixes so some folks knew about it already ^_^) --- /usr/lib64/python3.5/site-packages/ldap/schema/subentry.py 2017-08-25 19:20:27.890073294 +1000 +++ /root/pyldap-new 2017-08-25 19:20:14.542084650 +1000 @@ -296,7 +296,7 @@ if oc_se and oc_se.kind==0: struct_ocs[oc_se.oid] = None result = None - struct_oc_list = struct_ocs.keys() + struct_oc_list = list(struct_ocs) while struct_oc_list: oid = struct_oc_list.pop() for child_oid in oc_tree[oid]: @@ -419,14 +419,14 @@ # Remove all mandantory attribute types from # optional attribute type list - for a in r_may.keys(): + for a in list(r_may.keys()): if a in r_must: del r_may[a] # Apply attr_type_filter to results if attr_type_filter: for l in [r_must,r_may]: - for a in l.keys(): + for a in list(l.keys()): for afk,afv in attr_type_filter: try: schema_attr_type = self.sed[AttributeType][a]

6 years, 7 months

1
0
0 / 0

[freeipa PR#1000][opened] Fix CA-less installation

by frasertweedale

URL: https://github.com/freeipa/freeipa/pull/1000 Author: frasertweedale Title: #1000: Fix CA-less installation Action: opened PR body: """ Fix CA-less installation failure due to an incorrect use of with statement. Fixes: https://pagure.io/freeipa/issue/7118 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1000/head:pr1000 git checkout pr1000

6 years, 7 months

2
1
0 / 0

[freeipa PR#997][opened] Uninstall: fix BytesWarning exception

by stlaz

URL: https://github.com/freeipa/freeipa/pull/997 Author: stlaz Title: #997: Uninstall: fix BytesWarning exception Action: opened PR body: """ When uninstalling, if server does not have all roles, exception is thrown as the role is not found. `member_principal` variable has to be string here, otherwise we're using str on bytes. https://pagure.io/freeipa/issue/4985 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/997/head:pr997 git checkout pr997

6 years, 7 months

2
1
0 / 0

[freeipa PR#998][opened] Unify storing certificates in LDAP

by stlaz

URL: https://github.com/freeipa/freeipa/pull/998 Author: stlaz Title: #998: Unify storing certificates in LDAP Action: opened PR body: """ Recent certificate refactoring left the system in a state where the certificates are somewhere converted to DER format, somewhere directly sent to ipaldap as IPACertificate objects. The latter is the desirable way, make sure it's the one commonly used. https://pagure.io/freeipa/issue/4985 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/998/head:pr998 git checkout pr998

6 years, 7 months

2
1
0 / 0

[freeipa PR#991][opened] [ipa-4-5] WebUI: Add hyphenate versions of Host(Role) Based strings

by pvomacka

URL: https://github.com/freeipa/freeipa/pull/991 Author: pvomacka Title: #991: [ipa-4-5] WebUI: Add hyphenate versions of Host(Role) Based strings Action: opened PR body: """ The hyphenated forms are less ambiguous and easier to read. (For more grammar background, see for example "Hyphenate Complex Adjectives" in http://stylepedia.net/ Grammar-Hyphenation ) https://pagure.io/freeipa/issue/6582 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/991/head:pr991 git checkout pr991

6 years, 7 months

1
1
0 / 0

[freeipa PR#985][opened] py3: fix caless to CA promotion on replica

by stlaz

URL: https://github.com/freeipa/freeipa/pull/985 Author: stlaz Title: #985: py3: fix caless to CA promotion on replica Action: opened PR body: """ https://pagure.io/freeipa/issue/4985 --------- Encountered this problem when trying to promote CA-less replica to CA-full, may happen on CA-less master as well although I did not investigate that. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/985/head:pr985 git checkout pr985

6 years, 7 months

2
1
0 / 0

[freeipa PR#970][opened] backport #6999 to ipa-4-5

by pvoborni

URL: https://github.com/freeipa/freeipa/pull/970 Author: pvoborni Title: #970: backport #6999 to ipa-4-5 Action: opened PR body: """ Such simple fix should be in stabilization release. https://pagure.io/freeipa/issue/7092 or https://pagure.io/freeipa/issue/6999 one needs to be opened on push. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/970/head:pr970 git checkout pr970

6 years, 7 months

2
1
0 / 0

Re: [freeipa/freeipa] Removing part of circular dependency of ipalib in ipaplatform (#989)

by Christian Heimes

On 2017-08-23 21:25, Felipe Volpone wrote: > @felipevolpone <https://github.com/felipevolpone> pushed 1 commit. > > * 2ddaa6e <https://github.com/freeipa/freeipa/commit/2ddaa6e> Removing > part of circular dependency of ipalib in ipaplaform Why did you remove os.path.basename() from systemd-tmpfiles call? My example included it on purpose. The tool does the right thing and locates the correct config file on its own. A basename takes customization into account, too. Christian -- Christian Heimes Senior Software Engineer, Identity Management and Platform Security Red Hat GmbH, http://www.de.redhat.com/, Registered seat: Grasbrunn, Commercial register: Amtsgericht Muenchen, HRB 153243, Managing Directors: Charles Cachera, Michael Cunningham, Michael O'Neill, Eric Shander

6 years, 7 months

2
1
0 / 0

[freeipa PR#918][opened] [WIP] dcerpc: support Python 3

by abbra

URL: https://github.com/freeipa/freeipa/pull/918 Author: abbra Title: #918: [WIP] dcerpc: support Python 3 Action: opened PR body: """ Make 'ipa trust-add' work under Python 3. One needs patches from https://lists.samba.org/archive/samba-technical/2017-July/121746.html to Samba too. Marked as WIP until Samba patches are released as part of 4.7.0-RC2. Since we haven't switched whole ipa server environment to Python 3 yet, following packages need to be installed to make trust code working under Python 3: - python3-libsss_nss_idmap - python3-sss - python3-samba - python3-mod_wsgi """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/918/head:pr918 git checkout pr918

6 years, 8 months

2
1
0 / 0

[freeipa PR#979][opened] cacert_manage: fix CA cert renewal

by stlaz

URL: https://github.com/freeipa/freeipa/pull/979 Author: stlaz Title: #979: cacert_manage: fix CA cert renewal Action: opened PR body: """ Since IPACertificate object is passed to CAInstance's update_people_entry() and update_authority_entry(), these are not be able to load this object as a certificate again and thus would fail. This commit fixes that. https://pagure.io/freeipa/issue/4985 Depends on https://github.com/freeipa/freeipa/pull/978 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/979/head:pr979 git checkout pr979

6 years, 8 months

2
1
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-devel August 2017