[freeipa PR#1378][opened] test_server_del: Added automation for bugzilla bz1506188.
by ndehadrai
URL: https://github.com/freeipa/freeipa/pull/1378
Author: ndehadrai
Title: #1378: test_server_del: Added automation for bugzilla bz1506188.
Action: opened
PR body:
"""
Patch1:
1) Added automation for verification steps for bz1506188.
2) The code setusp up IPA-Master/ Replica and then checks for
deletion of Replica using 'ipa server-del' command.
3) It also checks for verification of 'ipa dnsserver-find' command
output once the replica server details are removed.
Patch2:
1) Removed unsed assert statement inside code.
2) Realigned code for doc-string information within
80 character limit length.
Signed-off-by: Nikhil Dehadrai <ndehadra(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1378/head:pr1378
git checkout pr1378
5 years, 11 months
[freeipa PR#1831][opened] Fixing test_topology tests
by felipevolpone
URL: https://github.com/freeipa/freeipa/pull/1831
Author: felipevolpone
Title: #1831: Fixing test_topology tests
Action: opened
PR body:
"""
#### Fixing TestCASpecificRUVs::test_replica_uninstall_deletes_ruvs
This test will setup a master and a replica, uninstall replica and check
for the replica RUVs on the master. It was missing the step of running
ipa-replica-manage del <replica hostname> to properly remove the RUVs.
#### Fixing tests on TestReplicaManageDel
This commit fixes the tests on class TestReplicaManageDel:
- test_replica_managed_del_domlevel1
- test_clean_dangling_ruv_multi_ca
- test_replica_managed_del_domlevel0
Given that domain level 0 doest not have autodiscovery, we need to
configure /etc/resolv.conf with the master data (search <domain> and
nameserver <master_ip>) in order to ipa-replica-install succeed.
---
**Atention**: This patch should not be pushed until PR #1748 get merged.
As usual, as soon as we have an ack, I'll rebase the PR and remove the temp commit.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1831/head:pr1831
git checkout pr1831
5 years, 11 months
[freeipa PR#1866][opened] Allow more flexible services
by abbra
URL: https://github.com/freeipa/freeipa/pull/1866
Author: abbra
Title: #1866: Allow more flexible services
Action: opened
PR body:
"""
This patchset makes service objects more usable in dynamic environments like Kubernetes. Kubernetes hosts could create service objects that have no corresponding host object in IPA and need to be able to retrieve keytabs for them.
Such keytabs would be used for client authentication against other resources in the same IPA realm. As such, applications running in containers on a Kubernetes host would not need to accept any Kerberos authentication from their users but instead they would use own keytabs to talk to database or file servers (or anything else). Since in Kerberos for client authentication there is no real requirement that a service name has a corresponding host (it just a string with one or more / in it), we can allow to skip a host object check when creating the service.
As result, Web UI needs to be changed to also allow editing a host part of the service name when adding a service. We considered making a more dynamic handling of the UI but that would require a complete re-factor of the entity_select widget to allow dynamic change of the contained input widgets.
A second patch adds services as members of groups. This would allow to add services to groups and, in turn, use groups to grant ability for services to retrieve keytabs of other services. This approach reduces substantially amount of changes needed to support services as first class objects.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1866/head:pr1866
git checkout pr1866
5 years, 11 months