URL: https://github.com/freeipa/freeipa/pull/1732
Author: abbra
Title: #1732: [backport ipa-4-6] upgrade: Run configuration upgrade under empty ccache collection
Action: opened
PR body:
"""
Manual backport for ipa-4-6 as KCM is also a default ccache type in Fedora 27
Use temporary empty DIR-based ccache collection to prevent upgrade
failures in case KCM: or KEYRING: ccache type is used by default in
krb5.conf and is not available. We don't need any user credentials
during upgrade procedure but kadmin.local would attempt to resolve
default ccache and if that's not available, kadmin.local will fail.
Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1558818
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1732/head:pr1732
git checkout pr1732
URL: https://github.com/freeipa/freeipa/pull/1725
Author: abbra
Title: #1725: upgrade: Run configuration upgrade under empty ccache collection
Action: opened
PR body:
"""
Use temporary empty DIR-based ccache collection to prevent upgrade
failures in case KCM: or KEYRING: ccache type is used by default in
krb5.conf and is not available. We don't need any user credentials
during upgrade procedure but kadmin.local would attempt to resolve
default ccache and if that's not available, kadmin.local will fail.
This approach was successfully tested with OpenQA tests that upgrade from F27 to F28.
Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1558818
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1725/head:pr1725
git checkout pr1725
URL: https://github.com/freeipa/freeipa/pull/1729
Author: tiran
Title: #1729: Fix compatibility with latest pytest
Action: opened
PR body:
"""
pytest removed copy() method from its Namespace class. Use the copy
module to make a copy of early options.
Signed-off-by: Christian Heimes <cheimes(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1729/head:pr1729
git checkout pr1729
URL: https://github.com/freeipa/freeipa/pull/1635
Author: stlaz
Title: #1635: Encrypt httpd key stored on disk
Action: opened
PR body:
"""
This commit adds configuration for HTTPD to encrypt/decrypt its
key which we currently store in clear on the disc.
A password-reading script is added for mod_ssl. This script is
extensible for the future use of directory server with the
expectation that key encryption/decription will be handled
similarly by its configuration.
https://pagure.io/freeipa/issue/7421
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1635/head:pr1635
git checkout pr1635
URL: https://github.com/freeipa/freeipa/pull/1717
Author: stlaz
Title: #1717: Dogtag configs: rename deprecated options
Action: opened
PR body:
"""
ipa-{server,kra}-install logs have been showing warnings about
deprecation of some Dogtag configuration options. Follow
the warnings' advice and rename these options to their newer
form.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1717/head:pr1717
git checkout pr1717
