URL: https://github.com/freeipa/freeipa/pull/1910
Author: tiran
Title: #1910: [Backport][ipa-4-6] Revert "Validate the Directory Manager password"
Action: opened
PR body:
"""
This PR was opened automatically because PR #1909 was pushed to master and backport to ipa-4-6 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1910/head:pr1910
git checkout pr1910
I'm not sure where the travis code comes from but I've got a PR failing
because both mod_nss and mod_ssl are installed for some reason when
building on the ipa-4-6 branch.
The PR is https://github.com/freeipa/freeipa/pull/1876
All of the travis run-tests have failed.
If you pull the log tarball and look into the journal you'll see
something like:
May 07 18:06:15 master.ipa.test httpd[2889]: AH00526: Syntax error on
line 5 of /etc/httpd/conf.d/ssl.conf
Line 5 is Listen 443 and mod_nss would have the same so httpd dies.
If you look in ci_results_ipa-4-6.log then mod_ssl is installed as part of
dnf builddep -y -D "with_lint 1" -D "with_wheels 1" --spec
freeipa.spec.in --best --allowerasing
mod_nss is subsequently installed because the packages require it.
It sure seems like the builddep is being done on the master branch but I
don't see anything in the logs where it is switching to ipa-4-6.
rob
URL: https://github.com/freeipa/freeipa/pull/1905
Author: tiran
Title: #1905: Create missing /etc/httpd/alias for ipasession.key
Action: opened
PR body:
"""
The director /etc/httpd/alias was created by mod_nss. Since FreeIPA no
longer depends on mod_nss, the directory is no longer created on fresh
systems.
Note: At first I wanted to move the file to /var/lib/ipa/private/ or
/var/lib/httpd/. SELinux prevents write of httpd_t to ipa_var_lib_t. I'm
going to move the file after a new SELinux policy is available.
See: https://pagure.io/freeipa/issue/7529
Signed-off-by: Christian Heimes <cheimes(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1905/head:pr1905
git checkout pr1905
URL: https://github.com/freeipa/freeipa/pull/1908
Author: tiran
Title: #1908: Pass ca.crt from backup to replication manager
Action: opened
PR body:
"""
0653d2a17e67a32c9adcca8145afa231f228b855 broke ipa_restore. It uses the
replication manager to verify the Directory Manager password. The
replication manager class expects /etc/ipa/ca.crt to be present. The
file is not available.
The patch extracts ca.crt from the backup and pass it to the replication
manager.
See: https://pagure.io/freeipa/issue/7136
Fixes: https://pagure.io/freeipa/issue/7535
Signed-off-by: Christian Heimes <cheimes(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1908/head:pr1908
git checkout pr1908
URL: https://github.com/freeipa/freeipa/pull/1748
Author: rcritten
Title: #1748: Fix certificate retrieval in ipa-replica-prepare for DL0
Action: opened
PR body:
"""
The NSSDatabase attrs for the NSS database were NULL because the database hadn't been created yet.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1748/head:pr1748
git checkout pr1748