November 2018 - FreeIPA-devel - Fedora Mailing-Lists

[freeipa PR#2514][opened] [Backport][ipa-4-5] ipaldap: avoid invalid modlist when attribute encoding differs

by tiran

URL: https://github.com/freeipa/freeipa/pull/2514 Author: tiran Title: #2514: [Backport][ipa-4-5] ipaldap: avoid invalid modlist when attribute encoding differs Action: opened PR body: """ This PR was opened automatically because PR #2511 was pushed to master and backport to ipa-4-5 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2514/head:pr2514 git checkout pr2514

5 years

1
1
0 / 0

[freeipa PR#2513][opened] [Backport][ipa-4-6] ipaldap: avoid invalid modlist when attribute encoding differs

by tiran

URL: https://github.com/freeipa/freeipa/pull/2513 Author: tiran Title: #2513: [Backport][ipa-4-6] ipaldap: avoid invalid modlist when attribute encoding differs Action: opened PR body: """ This PR was opened automatically because PR #2511 was pushed to master and backport to ipa-4-6 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2513/head:pr2513 git checkout pr2513

5 years

1
1
0 / 0

[freeipa PR#2506][opened] [Backport][ipa-4-7] Display succesful install message when ipa-replica-install completes

by tiran

URL: https://github.com/freeipa/freeipa/pull/2506 Author: tiran Title: #2506: [Backport][ipa-4-7] Display succesful install message when ipa-replica-install completes Action: opened PR body: """ This PR was opened automatically because PR #2503 was pushed to master and backport to ipa-4-7 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2506/head:pr2506 git checkout pr2506

5 years

1
1
0 / 0

[freeipa PR#2508][opened] [Backport][ipa-4-6] Fixes for more issues found by coverity

by tiran

URL: https://github.com/freeipa/freeipa/pull/2508 Author: tiran Title: #2508: [Backport][ipa-4-6] Fixes for more issues found by coverity Action: opened PR body: """ This PR was opened automatically because PR #2505 was pushed to master and backport to ipa-4-6 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2508/head:pr2508 git checkout pr2508

5 years

1
1
0 / 0

[freeipa PR#2511][opened] ipaldap: avoid invalid modlist when attribute encoding differs

by frasertweedale

URL: https://github.com/freeipa/freeipa/pull/2511 Author: frasertweedale Title: #2511: ipaldap: avoid invalid modlist when attribute encoding differs Action: opened PR body: """ ipaldap does not take into account the possibility of the attribute encoding returned by python-ldap differing from the attribute encoding produced by FreeIPA. In particular this can occur with DNs with special characters that require escaping. For example, python-ldap (or the underlying LDAP library) escapes special characters using hex encoding: ``` CN=Test Sub-CA 201604041620,OU=ftweedal,O=Red Hat\2C Inc.,L=Brisbane,C=AU ``` Whereas FreeIPA, when encoding the DN, escapes the character directly: ``` CN=Test Sub-CA 201604041620,OU=ftweedal,O=Red Hat\, Inc.,L=Brisbane,C=AU ``` Therefore it is possible to generate an invalid modlist. For example, during external CA certificate renewal, if the issuer DN includes a comma in one of the attribute values (as above), an invalid modlist will be generated: ``` [ (ldap.MOD_ADD, 'ipacaissuerdn', [b'CN=Test Sub-CA 201604041620,OU=ftweedal,O=Red Hat\, Inc.,L=Brisbane,C=AU']) , (ldap.MOD_DELETE, 'ipacaissuerdn', [b'CN=Test Sub-CA 201604041620,OU=ftweedal,O=Red Hat\2C Inc.,L=Brisbane,C=AU']) ] ``` Although encoded differently, these are the same value. If this modification is applied to the object, attributeOrValueExists (error 20) occurs. To avoid the issue, put deletes before adds in the modlist. If a value is present (with different encodings) as both an addition and a deletion, it must be because the original object contained the value with a different encoding. Therefore it is safe to delete it, then add it back. Note that the modlist is not optimal. In the simplest case (like above example), there should be no modification to perform. It is considerably more complex (and more computation) to implement this because the raw attribute values must be decoded before comparison. Fixes: https://pagure.io/freeipa/issue/7750 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2511/head:pr2511 git checkout pr2511

5 years

2
1
0 / 0

[freeipa PR#2509][opened] [testing_master] Nightly PR

by freeipa-pr-ci

URL: https://github.com/freeipa/freeipa/pull/2509 Author: freeipa-pr-ci Title: #2509: [testing_master] Nightly PR Action: opened PR body: """ None """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2509/head:pr2509 git checkout pr2509

5 years

1
1
0 / 0

[freeipa PR#2504][opened] [testing_master] Nightly PR

by freeipa-pr-ci

URL: https://github.com/freeipa/freeipa/pull/2504 Author: freeipa-pr-ci Title: #2504: [testing_master] Nightly PR Action: opened PR body: """ None """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2504/head:pr2504 git checkout pr2504

5 years

1
1
0 / 0

Ticket cleanup

by Rob Crittenden

You may notice that over the next few weeks a LOT of issues on https://pagure.io/freeipa will close. Most of them fall into one or buckets: * seems like a good idea but we'll never get to it due to other priorities * is a great idea but is incredibly complex and we'll never get to it * was a fantastic idea and we fixed it in a duplicate issue * a bug that no longer applies or is against an unsupported version * a small percentage will be something else If we close one in error then please don't hesitate to comment in the issue. The goal is to get the number of issues down to a size we actually have a capacity to address. regards rob

5 years

1
0
0 / 0

[freeipa PR#2505][opened] Fixes for more issues found by coverity

by tiran

URL: https://github.com/freeipa/freeipa/pull/2505 Author: tiran Title: #2505: Fixes for more issues found by coverity Action: opened PR body: """ * ipa_krb5_free_key_data: avoid double free * ipadb_mspac_get_trusted_domains: NULL ptr deref * ipapwd_pre_mod: NULL ptr deref See https://pagure.io/freeipa/issue/7738 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2505/head:pr2505 git checkout pr2505

5 years

1
1
0 / 0

[freeipa PR#2503][opened] Display succesful install message when ipa-replica-install completes

by rcritten

URL: https://github.com/freeipa/freeipa/pull/2503 Author: rcritten Title: #2503: Display succesful install message when ipa-replica-install completes Action: opened PR body: """ Commit b96906156be37a7b29ee74423b82f04070c84e22 enabled better output logging for ipa-server-install. This includes displaying at the end: The ipa-server-install command was successful Do the same for ipa-replica-install This also contains a fix for an issue hidden by the previous logging configuration. https://pagure.io/freeipa/issue/7408 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2503/head:pr2503 git checkout pr2503

5 years

2
1
0 / 0

2023

2022

2021

2020

2019

2018

2017

FreeIPA-devel November 2018