URL: https://github.com/freeipa/freeipa/pull/1966
Author: tiran
Title: #1966: [Backport][ipa-4-6] Don't try to set Kerberos extradata when there is no principal
Action: opened
PR body:
"""
This was causing ns-slapd to segfault in the password plugin.
https://pagure.io/freeipa/issue/7561
Signed-off-by: Rob Crittenden <rcritten(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1966/head:pr1966
git checkout pr1966
URL: https://github.com/freeipa/freeipa/pull/1967
Author: tiran
Title: #1967: [Backport][ipa-4-5] Don't try to set Kerberos extradata when there is no principal
Action: opened
PR body:
"""
This was causing ns-slapd to segfault in the password plugin.
https://pagure.io/freeipa/issue/7561
Signed-off-by: Rob Crittenden <rcritten(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1967/head:pr1967
git checkout pr1967
URL: https://github.com/freeipa/freeipa/pull/1952
Author: flo-renaud
Title: #1952: ipa-server-install: publish complete cert chain in /usr/share/ipa/html/ca.crt
Action: opened
PR body:
"""
When IPA is installed with an externally signed CA, the master installer does not publish the whole cert chain in /usr/share/ipa/html/ca.crt (but /etc/ipa/ca.crt contains the full chain).
If a client is installed with a One-Time Password and without the --ca-cert-file option, the client installer downloads the cert chain from http://master.example.com/ipa/config/ca.crt (=/usr/share/ipa/html/ca.crt). The client installation then fails. Note that when the client is installed by providing admin/password, installation succeeds because the cert chain is read from the LDAP server.
Implements the fix and associated integration test.
https://pagure.io/freeipa/issue/7526
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1952/head:pr1952
git checkout pr1952
URL: https://github.com/freeipa/freeipa/pull/1956
Author: rcritten
Title: #1956: Don't try to set Kerberos extradata when there is no principal
Action: opened
PR body:
"""
This was causing ns-slapd to segfault in the password plugin.
https://pagure.io/freeipa/issue/7561
Signed-off-by: Rob Crittenden <rcritten(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1956/head:pr1956
git checkout pr1956
URL: https://github.com/freeipa/freeipa/pull/1954
Author: tiran
Title: #1954: Use GnuPG 2 rather than old GnuPG 1.4
Action: opened
PR body:
"""
The /usr/bin/gpg command is old, legacy GnuPG 1.4 version. The
recommended version is GnuPG 2 provided by /usr/bin/gpg2. For our simple
uses-cases, gpg2 is a drop-in replacement for gpg.
Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1566019
Signed-off-by: Christian Heimes <cheimes(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1954/head:pr1954
git checkout pr1954