November 2018 - FreeIPA-devel - Fedora Mailing-Lists

[freeipa PR#2464][opened] Support interactive prompt for ntp options

by Tiboris

URL: https://github.com/freeipa/freeipa/pull/2464 Author: Tiboris Title: #2464: Support interactive prompt for ntp options Action: opened PR body: """ FreeIPA will now ask user for NTP source server or pool address in interactive mode if there is no server nor pool specified and autodiscovery has not found any NTP source in DNS records. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2464/head:pr2464 git checkout pr2464

4 years, 8 months

2
1
0 / 0

[freeipa PR#1726][opened] [RFE] IPA server installation with successful message

by amitkumar50

URL: https://github.com/freeipa/freeipa/pull/1726 Author: amitkumar50 Title: #1726: [RFE] IPA server installation with successful message Action: opened PR body: """ This PR updates IPA success installation message as this: ============================================= IPA server installation successful You can access Web UI using https://ipaserver1.testrelm.test/ipa/ui Obtain a Kerberos Ticket for issuing IPA command 'kinit admin' Server is installed with following roles : * Directory Server * Kerbeors Server * Httpd Server * CA Server * DNS Server For troubleshooting and errors : Please visit : https://www.redhat.com/en For documentation : Please visit : https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/... Resolves: https://pagure.io/freeipa/issue/6355 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1726/head:pr1726 git checkout pr1726

4 years, 8 months

2
1
0 / 0

[freeipa PR#2584][opened] ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager

by tiran

URL: https://github.com/freeipa/freeipa/pull/2584 Author: tiran Title: #2584: ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager Action: opened PR body: """ The PR was originally PR @abbra's PR https://github.com/freeipa/freeipa/pull/2106. PR-CI was broken for that PR. I also squashed some intermediate commits. ## Original PR message Password changes performed by cn=Directory Manager are excluded from password policy checks according to [1]. This is correctly handled by ipa-pwd-extop in case of a normal Kerberos principal in IPA. However, non-kerberos accounts were not excluded from the check. As result, password updates for PKI CA admin account in o=ipaca were failing if a password policy does not allow a password reuse. We are re-setting the password for PKI CA admin in ipa-replica-prepare in case the original directory manager's password was updated since creation of `cacert.p12`. Do password policy check for non-Kerberos accounts only if it was set by a regular user or admin. Changes performed by a cn=Directory Manager and passsync managers should be excluded from the policy check. Fixes: https://pagure.io/freeipa/issue/7181 Signed-off-by: Alexander Bokovoy <abokovoy(a)redhat.com> [1] https://access.redhat.com/documentation/en-us/red_hat_directory_server/10... """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2584/head:pr2584 git checkout pr2584

4 years, 8 months

1
1
0 / 0

[freeipa PR#2163][opened] Make ipaclient.csrgen optional

by tiran

URL: https://github.com/freeipa/freeipa/pull/2163 Author: tiran Title: #2163: Make ipaclient.csrgen optional Action: opened PR body: """ ipaclient's csrgen plugin has been turned into an optional dependency. The ipaclient plugin, helper modules like ipaclient.csrgen and templates are shipped conditionally. The ipaclient cert plugin and ipatests handle missing csrgen gracefully. Signed-off-by: Christian Heimes <cheimes(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2163/head:pr2163 git checkout pr2163

4 years, 8 months

1
1
0 / 0

[freeipa PR#1843][opened] Allow issuing certificates with IP addresses in subjectAltName (ftweedal)

by frasertweedale

URL: https://github.com/freeipa/freeipa/pull/1843 Author: frasertweedale Title: #1843: Allow issuing certificates with IP addresses in subjectAltName (ftweedal) Action: opened PR body: """ Continuation of https://github.com/freeipa/freeipa/pull/1700 by @ipilcher, adding commits by @ftweedal. Please keep both PRs open for the time being. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1843/head:pr1843 git checkout pr1843

4 years, 9 months

2
1
0 / 0

[freeipa PR#1883][opened] ipactl: Correction of named to named-pkcs11

by amitkumar50

URL: https://github.com/freeipa/freeipa/pull/1883 Author: amitkumar50 Title: #1883: ipactl: Correction of named to named-pkcs11 Action: opened PR body: """ Whenever ipactl status is run it returned: Directory Service: RUNNING krb5kdc Service: RUNNING kadmin Service: RUNNING named Service: RUNNING ... This PR changes ipactl o/p to: Directory Service: RUNNING krb5kdc Service: RUNNING kadmin Service: RUNNING named-pkcs11 Service: RUNNING Resolves: https://pagure.io/freeipa/issue/7446 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1883/head:pr1883 git checkout pr1883

4 years, 9 months

2
1
0 / 0

[freeipa PR#2628][opened] [WIP] Refactor LDAPClient

by tiran

URL: https://github.com/freeipa/freeipa/pull/2628 Author: tiran Title: #2628: [WIP] Refactor LDAPClient Action: opened PR body: """ **WIP** Simplify LDAPClient construction and ensure that LDAP connections are always secure (LDAP + STARTTLS, LDAPI, LDAPS) unless explicitly stated otherwise. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2628/head:pr2628 git checkout pr2628

4 years, 10 months

1
1
0 / 0

[freeipa PR#2591][opened] [Backport][ipa-4-7] Unify and simplify LDAP service discovery

by tiran

URL: https://github.com/freeipa/freeipa/pull/2591 Author: tiran Title: #2591: [Backport][ipa-4-7] Unify and simplify LDAP service discovery Action: opened PR body: """ This PR was opened automatically because PR #2144 was pushed to master and backport to ipa-4-7 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2591/head:pr2591 git checkout pr2591

4 years, 11 months

2
1
0 / 0

[freeipa PR#2580][opened] Issue #7744: Use api.env.server for config.ca_host_name

by jaredledvina

URL: https://github.com/freeipa/freeipa/pull/2580 Author: jaredledvina Title: #2580: Issue #7744: Use api.env.server for config.ca_host_name Action: opened PR body: """ Bug: https://pagure.io/freeipa/issue/7744 This is a really quick attempt to fix this bug. Currently, the CA server is always chosen from LDAP. As a result, when installing the CA but, passing in `--server`, the replica install will use the server passed in but the CA install can replicate from another. This leads to lots of confusion when reviewing the replication topology and can lead to replicating the entire CA domain from a high latency link. This really bites us in production where new replicas will replicate initially from a server on the other side of the world and that link has high latency causing failures midway through the install. I think this change will work and am happy to test it out. I'd love to see this back ported to 4.5.4 but, understand if that's not possible. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2580/head:pr2580 git checkout pr2580

4 years, 11 months

1
1
0 / 0

[freeipa PR#2576][opened] Allow Apache user to access SSSD IFP for smart card auth

by tiran

URL: https://github.com/freeipa/freeipa/pull/2576 Author: tiran Title: #2576: Allow Apache user to access SSSD IFP for smart card auth Action: opened PR body: """ * Remove dead code * Allow HTTPd user to access SSSD IFP * Smart card auth advise: Allow Apache user See: https://pagure.io/freeipa/issue/7751 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2576/head:pr2576 git checkout pr2576

4 years, 12 months

1
1
0 / 0

2023

2022

2021

2020

2019

2018

2017

FreeIPA-devel November 2018