February 2018 - FreeIPA-devel - Fedora Mailing-Lists

by Amit

Hello, In installed IPA Server successfully with following command: # ipa-server-install --ca-cert-file /root/ca-hierarchy/rootCA.crt --dirsrv-cert-file /root/ca-hierarchy/dirsrv.crt --dirsrv-cert-file /root/ca-hierarchy/dirsrv.key --dirsrv-pin amit --http-cert-file /root/ca-hierarchy/http.crt --http-cert-file /root/ca-hierarchy/http.key --http-pin amit --no-pkinit Now when I tried installing replica using this process: 1. scp http.key, http.crt, dirsrv.key, dirsrv.crt to replica 2. Made replica as IPA client: # vim /etc/hosts <ipa-server-ip> <ipa-server-domain> # ntpdate <ipa-ip-address> # ipa-client-install --domain <ipa-server-domain-name> --server <ipa-server-fdqn> # kinit admin # getent passwd admin; id admin; //Works 3. # ipa-replica-install --dirsrv-cert-file /root/dirsrv.crt --dirsrv-cert-file /root/dirsrv.key --dirsrv-pin amit --http-cert-file /root/http.crt --http-cert-file /root/http.key --http-pin amit --no-pkinit WARNING: conflicting time&date synchronization service 'chronyd' will be disabled in favor of ntpd Your system may be partly configured. Run /usr/sbin/ipa-server-install --uninstall to clean up. ipa.ipapython.install.cli.install_tool(CompatServerReplicaInstall): ERROR The full certificate chain is not present in /root/http.crt, /root/http.key ipa.ipapython.install.cli.install_tool(CompatServerReplicaInstall): ERROR The ipa-replica-install command failed. See /var/log/ipareplica-install.log for more information [root@rhel7u4-7 site-packages]# Attached ipareplica-install.log Huge Thanks In Advance Amit

6 years, 2 months

2
5
0 / 0

[freeipa PR#1505][closed] Remove special characters in host_add random OTP generation

by rcritten

URL: https://github.com/freeipa/freeipa/pull/1505 Author: johnclarson Title: #1505: Remove special characters in host_add random OTP generation Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1505/head:pr1505 git checkout pr1505

6 years, 2 months

1
0
0 / 0

[freeipa PR#1600][opened] [Backport][ipa-4-6] fastcheck: do not test context in pycodestyle

by Tiboris

URL: https://github.com/freeipa/freeipa/pull/1600 Author: Tiboris Title: #1600: [Backport][ipa-4-6] fastcheck: do not test context in pycodestyle Action: opened PR body: """ `git diff` shows also context lines by default. When passed to pycodestyle it can produce errors unrelated to changed lines. It prevents running of subsequent checks. Limiting context to 0 lines by `git diff -U0` enables to test only the modified lines and allows to run subsequent checks. Reviewed-By: Christian Heimes <cheimes(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1600/head:pr1600 git checkout pr1600

6 years, 2 months

1
1
0 / 0

[freeipa PR#1426][opened] ACI: grant access to admins group instead of admin user

by flo-renaud

URL: https://github.com/freeipa/freeipa/pull/1426 Author: flo-renaud Title: #1426: ACI: grant access to admins group instead of admin user Action: opened PR body: """ The ACI needed for staged users and deleted users were granted only to the uid=admin user. They should rather be granted to cn=admins group, to make sure that all members of the admins group are able to call the command ipa user-del --preserve. https://pagure.io/freeipa/issue/7342 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1426/head:pr1426 git checkout pr1426

6 years, 2 months

2
1
0 / 0

[freeipa PR#1598][opened] fastcheck: do not test context in pycodestyle

by pvoborni

URL: https://github.com/freeipa/freeipa/pull/1598 Author: pvoborni Title: #1598: fastcheck: do not test context in pycodestyle Action: opened PR body: """ `git diff` shows also context lines by default. When passed to pycodestyle it can produce errors unrelated to changed lines. It prevents running of subsequent checks. Limiting context to 0 lines by `git diff -U0` enables to test only the modified lines and allows to run subsequent checks. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1598/head:pr1598 git checkout pr1598

6 years, 2 months

2
1
0 / 0

[freeipa PR#1599][opened] Fix FileStore.backup_file() not to backup same file

by stlaz

URL: https://github.com/freeipa/freeipa/pull/1599 Author: stlaz Title: #1599: Fix FileStore.backup_file() not to backup same file Action: opened PR body: """ FileStore.backup_file() docstring claimed not to store a copy of the same file but the behavior of the method did not match this description. This commit makes the backed-up file filename derivation deterministic by hashing its content by SHA-256, thus it should not back up two files with the same filename and content. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1599/head:pr1599 git checkout pr1599

6 years, 2 months

1
1
0 / 0

Re: authconfig replacement design

by Alexander Bokovoy

On Thu, 15 Feb 2018, Alexander Koksharov wrote: >Hello, > >I would like to confirm whether we do want to completelly drop --no-sssd >option. >"no-sssd" configuration is not supported by authselect - there is not such >profile available. >If we drop dependency on authconfig there will be a need to do code cleanup >and also to rewrite related parts. And if we agreed on rewriting some parts >there wont be any problems replacing multiple calls to authconfig with a >single one to outhselect. I think we should make sure authselect does support non-sssd profile. Otherwise it is not a real replacement for authconfig in Fedora. > > > > >Alexander > >On Wed, Feb 14, 2018 at 10:00 AM, Alexander Bokovoy <abokovoy(a)redhat.com> >wrote: > >> On ke, 14 helmi 2018, Alexander Koksharov via FreeIPA-devel wrote: >> >>> Hello, >>> >>> Please take a look on a design page here: >>> https://www.freeipa.org/page/V4/Authselect_migration >>> I would like to >>> ??? ??? >>> hear you critics and suggessions. >>> >> Thanks! >> >> One note I have is about authconfig arguments. We gather them together >> and launch only one authconfig command. There is, I believe, a >> conceptual difference when you run authconfig with all options in a >> single line and as separate executions so you'd get different >> configurations. >> >> This may be subtle on a first view but we need to ensure that an >> authselect replacement would continue to provide the same configuration >> in the end. >> >> >> I assume you are going to add actual authselect part later. >> -- >> / Alexander Bokovoy >> -- / Alexander Bokovoy

6 years, 2 months

5
16
0 / 0

[freeipa PR#1595][opened] [Backport][ipa-4-6] freeipa-server no longer supports i686 arch on F28

by tiran

URL: https://github.com/freeipa/freeipa/pull/1595 Author: tiran Title: #1595: [Backport][ipa-4-6] freeipa-server no longer supports i686 arch on F28 Action: opened PR body: """ This PR was opened automatically because PR #1564 was pushed to master and backport to ipa-4-6 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1595/head:pr1595 git checkout pr1595

6 years, 2 months

1
1
0 / 0

[freeipa PR#1564][opened] freeipa-server no longer supports i686 arch on F28

by tiran

URL: https://github.com/freeipa/freeipa/pull/1564 Author: tiran Title: #1564: freeipa-server no longer supports i686 arch on F28 Action: opened PR body: """ 389-ds-base 1.4 is going to drop 32bit i686 arch support in Fedora 28, https://bugzilla.redhat.com/show_bug.cgi?id=1530832 . Add ExcludeArch to add freeipa-server related packages (freeipa-server, python[23]-ipaserver, freeipa-server-common, freeipa-server-dns, freeipa-server-trust-ad). Fixes: https://pagure.io/freeipa/issue/7400 Signed-off-by: Christian Heimes <cheimes(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1564/head:pr1564 git checkout pr1564

6 years, 2 months

1
1
0 / 0

[freeipa PR#1418][opened] Support out-of-tree builds

by tiran

URL: https://github.com/freeipa/freeipa/pull/1418 Author: tiran Title: #1418: Support out-of-tree builds Action: opened PR body: """ """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1418/head:pr1418 git checkout pr1418

6 years, 2 months

1
1
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-devel February 2018