May 2018 - FreeIPA-devel - Fedora mailing-lists

[freeipa PR#1969][opened] [Backport][ipa-4-6] Add test case for allow-retrieve-keytab
by tiran 27 Jun '18

27 Jun '18

URL: https://github.com/freeipa/freeipa/pull/1969 Author: tiran Title: #1969: [Backport][ipa-4-6] Add test case for allow-retrieve-keytab Action: opened PR body: """ This PR was opened automatically because PR #1964 was pushed to master and backport to ipa-4-6 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1969/head:pr1969 git checkout pr1969

1 1

[freeipa PR#1979][opened] WebUI: Extend password policy tests with more scenarios
by varunmylaraiah 27 Jun '18

27 Jun '18

URL: https://github.com/freeipa/freeipa/pull/1979 Author: varunmylaraiah Title: #1979: WebUI: Extend password policy tests with more scenarios Action: opened PR body: """ Extend WebUI test_pwpolicy suite with the following test cases Added tests: krbpwdminlength: lower range integer krbmaxpwdlife: non-integer, abc krbmaxpwdlife: upper range integer,2147483648 krbmaxpwdlife: lower range integer,-1 krbminpwdlife: non-integer,edf krbminpwdlife: upper range integer,2147483648 krbminpwdlife: lower range integer,-1 krbpwdhistorylength: non-integer,HIJ krbpwdhistorylength: upper range integer,2147483648 krbpwdhistorylength: lower range integer,-1 krbpwdmindiffchars: noon-integer,3lm krbpwdmindiffchars: upper range integer,2147483648 krbpwdmindiffchars: lower range integer, -1 krbpwdminlength: non-integer, n0p krbpwdminlength: upper range integer,2147483648 krbpwdminlength: lower range integer, -1 cospriority: non-integer, abc cospriority: upper range integer,2147483648 cospriority: lower range integer,-1 krbpwdmaxfailure: non-integer krbpwdmaxfailure: upper range integer krbpwdmaxfailure: lower range integer krbpwdfailurecountinterval: non-integer krbpwdfailurecountinterval: upper range integer krbpwdfailurecountinterval: lower range integer krbpwdlockoutduration: non-integer krbpwdlockoutduration: upper range integer krbpwdlockoutduration: lower range integer deletePolicy_with various scenario MeasurementUnitAdded_Bug798363 Delete global password policy add_Policy_adder_dialog_bug910463 delete_Policy_deleter_dialog_bug910463 test field: cospriority modifyPolicy(undo/refresh/reset) empty policy name upper bound of data range lower bound of data range non integer for policy priority Details in the ticket https://pagure.io/freeipa/issue/7574 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1979/head:pr1979 git checkout pr1979

2 1

[freeipa PR#1559][opened] test_dnssec: re-add named-pkcs11 workarounds
by tiran 21 Jun '18

21 Jun '18

URL: https://github.com/freeipa/freeipa/pull/1559 Author: tiran Title: #1559: test_dnssec: re-add named-pkcs11 workarounds Action: opened PR body: """ DNSSEC tests starrted to fail again, probably due to a bug in some underlaying component. This reverts commit 8bc677512296a7e94c29edd0c1a96aa7273f352a and makes the xfail test check less strict - it will no longer mark the test suite red if it passes. Related https://pagure.io/freeipa/issue/5348 Clone of @tomaskrizek PR #973 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1559/head:pr1559 git checkout pr1559

1 1

[freeipa PR#1793][opened] [WIP] ipa tests: Set default TTL for the IPA zone to 1 second
by abbra 21 Jun '18

21 Jun '18

URL: https://github.com/freeipa/freeipa/pull/1793 Author: abbra Title: #1793: [WIP] ipa tests: Set default TTL for the IPA zone to 1 second Action: opened PR body: """ When running IPA tests, a default TTL for the zone should be set very low to allow get rid of timeouts in the tests. Zone updates should be propagated to the clients as soon as possible. This is not something that should be used in production so the change is done purely at install time within the tests. As zone information is replicated, we only modify it when creating a master with integrated DNS. This change should fix a number of DNSSEC-related tests where default TTL is longer than what a test expects and a change of DNSSEC keys never gets noticed by the BIND. As result, DNSSEC tests never match their expected output with what they received from the BIND. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1793/head:pr1793 git checkout pr1793

2 1

[freeipa PR#1899][opened] Clean up Uninstall output
by rcritten 20 Jun '18

20 Jun '18

URL: https://github.com/freeipa/freeipa/pull/1899 Author: rcritten Title: #1899: Clean up Uninstall output Action: opened PR body: """ ipa-server-install did not configure a console logger. This caused odd output because ipa-client-install does and a normal server uninstall would end with "ipa-client-install command was successful" Because there was no console logger there were print statements in a lot of places. Those were dropped because the equivalent logging statement was already there. A number of info loggers were converted to debug to suppress their output. They were never shown in the past for the most part with the exception of the client installer and Forwarding and trying statements. Adding the logger exposed two additional issues: 1. When deleting the last server the server-del command threw an LDAP error trying to write an empty attribute 2. Two ACI parsing issues related to subtypes """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1899/head:pr1899 git checkout pr1899

2 1

[freeipa PR#1700][opened] Allow issuing certificates with IP addresses in subjectAltName
by ipilcher 19 Jun '18

19 Jun '18

URL: https://github.com/freeipa/freeipa/pull/1700 Author: ipilcher Title: #1700: Allow issuing certificates with IP addresses in subjectAltName Action: opened PR body: """ Allow issuing certificates with IP addresses in the subject alternative name (SAN), if all of the following are true. * One of the DNS names in the SAN resolves to the IP address (possibly through a CNAME). * All of the DNS entries in the resolution chain are managed by this IPA instance. * The IP address has a (correct) reverse DNS entry that is managed by this IPA instance """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1700/head:pr1700 git checkout pr1700

2 1

[freeipa PR#1975][opened] Start to deprecate Python 2 support
by tiran 19 Jun '18

19 Jun '18

URL: https://github.com/freeipa/freeipa/pull/1975 Author: tiran Title: #1975: Start to deprecate Python 2 support Action: opened PR body: """ Python 2 will reach EOL in 18 months. Start to issue deprecation warnings on Python 2. No longer claim support for Python 3.5. Python 3.5 is untested. Fixes: https://pagure.io/freeipa/issue/7568 Signed-off-by: Christian Heimes <cheimes(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1975/head:pr1975 git checkout pr1975

2 1

[freeipa PR#1961][opened] Extended UI test for Certificates
by mrizwan93 19 Jun '18

19 Jun '18

URL: https://github.com/freeipa/freeipa/pull/1961 Author: mrizwan93 Title: #1961: Extended UI test for Certificates Action: opened PR body: """ UI test for certificates Signed-off-by: Mohammad Rizwan Yusuf <myusuf(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1961/head:pr1961 git checkout pr1961

2 1

[freeipa PR#1976][opened] Make Python 2 build dependency optional
by tiran 11 Jun '18

11 Jun '18

URL: https://github.com/freeipa/freeipa/pull/1976 Author: tiran Title: #1976: Make Python 2 build dependency optional Action: opened PR body: """ The specfile now uses three variables to determinate how to handle Python support. with_python2: build python2-ipa* packages with_python3: build python3-ipa* packages with_default_python: use Python 3 or 2 for commands and packages "with_default_python=3" is the default build flavor. "with_python3=1" implies "with_default_python=2". Python 2 packages are still built on Fedora by default. The patch also cleans up and fixes additional issues: * makeapi/makeaci require Python 3 * remove checks for unsupported distros like F27 * sort dependencies and remove duplicates * remove python3-memcached dependency * remove svrcore-devel dependency * don't assume that gcc, make, and pkgconfig are provided by default * fix packaging bug with ipa-test-* commands. Unversioned ipa-run-test were packages with Python 2 RPMs although they had a Python 3 shebang. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1565263 Fixes: https://pagure.io/freeipa/issue/7500 Signed-off-by: Christian Heimes <cheimes(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1976/head:pr1976 git checkout pr1976

2 1

[Design draft] Promoting replica to CRL master
by Standa Laznicka 08 Jun '18

08 Jun '18

Hello people of the freeipa-devel channel, Let me share a design that proposes a way of automating the way FreeIPA replicas would be promoted to become a CRL master. Since the configuration cannot be dynamically altered by modifying an entry in the LDAP database, the proposal is to create an ipa-advise extension that could handle this operation instead for now. Read all about it in the attachement. Looking forward to your comments, Stanislav Láznička -- Standa Láznička A Red Hat person PGP: 8B00 620A 713B 714E B4CB 4767 C98C 4149 36B1 A7F3

4 12

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-devel May 2018