URL: https://github.com/freeipa/freeipa/pull/2493
Author: tiran
Title: #2493: [Backport][ipa-4-7] Fix misleading errors during client install rollback
Action: opened
PR body:
"""
This PR was opened automatically because PR #2446 was pushed to master and backport to ipa-4-7 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2493/head:pr2493
git checkout pr2493
URL: https://github.com/freeipa/freeipa/pull/2446
Author: rcritten
Title: #2446: Fix misleading errors during client install rollback
Action: opened
PR body:
"""
Some incorrect errors are possible if a client installation
fails and a configuration rollback is required.
These include:
1. Unconfigured automount client failed: CalledProcessError(Command
['/usr/sbin/ipa-client-automount', '--uninstall', '--debug']
returned non-zero exit status 1: '')
Caused by check_client_configuration() not returning the correct
return value (2).
2. WARNING: Unable to revert to the pre-installation state ('authconfig'
tool has been deprecated in favor of 'authselect'). The default sssd
profile will be used instead.
The authconfig arguments would have been: authconfig --disableldap
--disablekrb5 --disablesssdauth --disablemkhomedir
If installation fails before SSSD is configured there is no state
to roll back to. Detect this condition.
3. An error occurred while removing SSSD's cache.Please remove the
cache manually by executing sssctl cache-remove -o.
Again, if SSSD is not configured yet then there is no cache to
remove. Also correct the missing space after the period.
https://pagure.io/freeipa/issue/7729
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2446/head:pr2446
git checkout pr2446
URL: https://github.com/freeipa/freeipa/pull/2491
Author: tiran
Title: #2491: Require Dogtag 10.6.7 with KRA DL1 fix
Action: opened
PR body:
"""
Dogtag PKI >= 10.6.7 comes with a fix for number range depletion when
multiple clones created from same master.
pki-ca-10.6.7 updates are pending. For the time being, FreeIPA's master
COPR has builds.
See: https://pagure.io/freeipa/issue/7654
See: https://pagure.io/dogtagpki/issue/3055
Signed-off-by: Christian Heimes <cheimes(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2491/head:pr2491
git checkout pr2491
URL: https://github.com/freeipa/freeipa/pull/2488
Author: tiran
Title: #2488: [Backport][ipa-4-7] Replace hard-coded interpreter with sys.executable
Action: opened
PR body:
"""
This PR was opened automatically because PR #2485 was pushed to master and backport to ipa-4-7 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2488/head:pr2488
git checkout pr2488
I wanted to float the idea of bumping DNS to a top level Menu Item in IdM.
Here is how it looks right now:
https://admiyo.fedorapeople.org/ipa/IPA-Netsvc-screenshot.png
Note that I had to know to click "Network services" in order to find DNS.
DNS is a much more important Use case than Automount, and those two use
cases do not really have anything to do with each other.
I see DNS management as one of the primary uses of IdM. The integration of
naming and certificates is a powerful story. Having DNS as anything less
than a top level menu item buries it. It makes DNS seem like an
afterthought when it should be a major driving factor.
Automount and DNS have nothing to do with each other.
Automount is an end user type workflow. It seems almost like it should be
near the user/host side of things. It really is not a network service, so
much as an autoprovisioning tool.
We can easily move DNS up one level, and leave Automount in "network
services" or, even better, rename it to "Automount" without confusing
users. Yeah, Automount does not deserve its own top level menu item, but
it is kindof a homeless waif right now. Its not like we are running out of
space on the menu.
URL: https://github.com/freeipa/freeipa/pull/2475
Author: tiran
Title: #2475: Add Coverity Scan target
Action: opened
PR body:
"""
Add "make cov-scan" to automate Coverity scan builds. cov-build requires
extra quirks to work with recent versions of GCC on Fedora.
The make target requires a token and Coverity's build chain. Both are
available for privileged project owners on
https://scan.coverity.com/projects/freeipa-freeipa .
Signed-off-by: Christian Heimes <cheimes(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2475/head:pr2475
git checkout pr2475
URL: https://github.com/freeipa/freeipa/pull/2487
Author: tiran
Title: #2487: [Backport][ipa-4-7] Fix misc issues in C code
Action: opened
PR body:
"""
This PR was opened automatically because PR #2482 was pushed to master and backport to ipa-4-7 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2487/head:pr2487
git checkout pr2487
URL: https://github.com/freeipa/freeipa/pull/2485
Author: tiran
Title: #2485: Replace hard-coded interpreter with sys.executable
Action: opened
PR body:
"""
Instead of hard-coding python3, the smart card advise script now uses
the current executable path from sys.executable as interpreter.
Fixes: https://pagure.io/freeipa/issue/7741
Signed-off-by: Christian Heimes <cheimes(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2485/head:pr2485
git checkout pr2485
URL: https://github.com/freeipa/freeipa/pull/2486
Author: tiran
Title: #2486: [Backport][ipa-4-6] Fix misc issues in C code
Action: opened
PR body:
"""
This PR was opened automatically because PR #2482 was pushed to master and backport to ipa-4-6 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2486/head:pr2486
git checkout pr2486