Hi team,
There are some bugs in python3-pyldap; the version in f25 and f26 is
affected (not sure about f27/rawhide but the problems have been
fixed upstream[1]). In FreeIPA the `json_metadata' command is affected
(at least), which breaks the Web UI.
If you hit this, here (below) is a patch you can apply locally to
get past the issues:
Cheers,
Fraser
[1] https://github.com/pyldap/pyldap
(epilogue: I see Stanislav is responsible for at least one of the
upstream fixes so some folks knew about it already ^_^)
--- /usr/lib64/python3.5/site-packages/ldap/schema/subentry.py 2017-08-25 19:20:27.890073294 +1000
+++ /root/pyldap-new 2017-08-25 19:20:14.542084650 +1000
@@ -296,7 +296,7 @@
if oc_se and oc_se.kind==0:
struct_ocs[oc_se.oid] = None
result = None
- struct_oc_list = struct_ocs.keys()
+ struct_oc_list = list(struct_ocs)
while struct_oc_list:
oid = struct_oc_list.pop()
for child_oid in oc_tree[oid]:
@@ -419,14 +419,14 @@
# Remove all mandantory attribute types from
# optional attribute type list
- for a in r_may.keys():
+ for a in list(r_may.keys()):
if a in r_must:
del r_may[a]
# Apply attr_type_filter to results
if attr_type_filter:
for l in [r_must,r_may]:
- for a in l.keys():
+ for a in list(l.keys()):
for afk,afv in attr_type_filter:
try:
schema_attr_type = self.sed[AttributeType][a]
URL: https://github.com/freeipa/freeipa/pull/997
Author: stlaz
Title: #997: Uninstall: fix BytesWarning exception
Action: opened
PR body:
"""
When uninstalling, if server does not have all roles, exception
is thrown as the role is not found. `member_principal` variable
has to be string here, otherwise we're using str on bytes.
https://pagure.io/freeipa/issue/4985
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/997/head:pr997
git checkout pr997
URL: https://github.com/freeipa/freeipa/pull/998
Author: stlaz
Title: #998: Unify storing certificates in LDAP
Action: opened
PR body:
"""
Recent certificate refactoring left the system in a state where
the certificates are somewhere converted to DER format, somewhere
directly sent to ipaldap as IPACertificate objects. The latter
is the desirable way, make sure it's the one commonly used.
https://pagure.io/freeipa/issue/4985
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/998/head:pr998
git checkout pr998
URL: https://github.com/freeipa/freeipa/pull/991
Author: pvomacka
Title: #991: [ipa-4-5] WebUI: Add hyphenate versions of Host(Role) Based strings
Action: opened
PR body:
"""
The hyphenated forms are less ambiguous and easier to read.
(For more grammar background, see for example
"Hyphenate Complex Adjectives" in http://stylepedia.net/
Grammar-Hyphenation )
https://pagure.io/freeipa/issue/6582
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/991/head:pr991
git checkout pr991
URL: https://github.com/freeipa/freeipa/pull/985
Author: stlaz
Title: #985: py3: fix caless to CA promotion on replica
Action: opened
PR body:
"""
https://pagure.io/freeipa/issue/4985
---------
Encountered this problem when trying to promote CA-less replica to CA-full, may happen on CA-less master as well although I did not investigate that.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/985/head:pr985
git checkout pr985
On 2017-08-23 21:25, Felipe Volpone wrote:
> @felipevolpone <https://github.com/felipevolpone> pushed 1 commit.
>
> * 2ddaa6e <https://github.com/freeipa/freeipa/commit/2ddaa6e> Removing
> part of circular dependency of ipalib in ipaplaform
Why did you remove os.path.basename() from systemd-tmpfiles call? My
example included it on purpose. The tool does the right thing and
locates the correct config file on its own. A basename takes
customization into account, too.
Christian
--
Christian Heimes
Senior Software Engineer, Identity Management and Platform Security
Red Hat GmbH, http://www.de.redhat.com/, Registered seat: Grasbrunn,
Commercial register: Amtsgericht Muenchen, HRB 153243,
Managing Directors: Charles Cachera, Michael Cunningham, Michael
O'Neill, Eric Shander
URL: https://github.com/freeipa/freeipa/pull/918
Author: abbra
Title: #918: [WIP] dcerpc: support Python 3
Action: opened
PR body:
"""
Make 'ipa trust-add' work under Python 3. One needs patches from
https://lists.samba.org/archive/samba-technical/2017-July/121746.html
to Samba too.
Marked as WIP until Samba patches are released as part of 4.7.0-RC2.
Since we haven't switched whole ipa server environment to Python 3 yet,
following packages need to be installed to make trust code working under
Python 3:
- python3-libsss_nss_idmap
- python3-sss
- python3-samba
- python3-mod_wsgi
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/918/head:pr918
git checkout pr918