August 2018 - FreeIPA-devel - Fedora mailing-lists

[freeipa PR#2106][opened] ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
by abbra 23 Mar '20

23 Mar '20

URL: https://github.com/freeipa/freeipa/pull/2106 Author: abbra Title: #2106: ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager Action: opened PR body: """ Password changes performed by cn=Directory Manager are excluded from password policy checks according to [1]. This is correctly handled by ipa-pwd-extop in case of a normal Kerberos principal in IPA. However, non-kerberos accounts were not excluded from the check. As result, password updates for PKI CA admin account in o=ipaca were failing if a password policy does not allow a password reuse. We are re-setting the password for PKI CA admin in ipa-replica-prepare in case the original directory manager's password was updated since creation of `cacert.p12`. Do password policy check for non-Kerberos accounts only if it was set by a regular user or admin. Changes performed by a cn=Directory Manager and passsync managers should be excluded from the policy check. Fixes: https://pagure.io/freeipa/issue/7181 Signed-off-by: Alexander Bokovoy <abokovoy(a)redhat.com> [1] https://access.redhat.com/documentation/en-us/red_hat_directory_server/10/h… """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2106/head:pr2106 git checkout pr2106

2 1

[freeipa PR#2065][opened] BZ1339129 - Automate ipa vault-archive overwrites an existing value without warning
by menonsudhir 21 Aug '19

21 Aug '19

URL: https://github.com/freeipa/freeipa/pull/2065 Author: menonsudhir Title: #2065: BZ1339129 - Automate ipa vault-archive overwrites an existing value without warning Action: opened PR body: """ """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2065/head:pr2065 git checkout pr2065

1 1

[freeipa PR#2147][opened] Add a skeleton kdcpolicy plugin
by frozencemetery 19 Aug '19

19 Aug '19

URL: https://github.com/freeipa/freeipa/pull/2147 Author: frozencemetery Title: #2147: Add a skeleton kdcpolicy plugin Action: opened PR body: """ Signed-off-by: Robbie Harwood <rharwood(a)redhat.com> Back in krb5-1.16 (and in RHEL-7.5), I added the [kdcpolicy plugin](http://web.mit.edu/kerberos/krb5-devel/doc/plugindev/kdcpolicy.html) to krb5. This interface allows a module to hook all AS and TGS requests, potentially reject them, and manipulate ticket lifetimes. This PR is a basic implementation of the interface, with all the plumbing IPA needs to get it loaded and installed. There are two use cases I had in mind, though of course many more are possible (this is a very powerful place to have a hook into the KDC): - Reduced ticket lifetimes based on [auth indicator](http://web.mit.edu/kerberos/krb5-devel/doc/admin/auth_indicator.… - Adding (well, subtracting) random jitter from certain principal lifetimes to reduce contention from groups of tickets all needing renewal simultaneously Since presumably we don't want any of that to be hardcoded behavior, the difficult part is now making it all configurable. (As well as figuring out any behavior we want to control at the moment). Per IRC conversation, I'm opening this PR so that we have something to look at while we discuss that. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2147/head:pr2147 git checkout pr2147

1 1

[freeipa PR#2307][opened] Use pki config file template
by tiran 19 Aug '19

19 Aug '19

URL: https://github.com/freeipa/freeipa/pull/2307 Author: tiran Title: #2307: Use pki config file template Action: opened PR body: """ WIP For HSM support and more flexible options. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2307/head:pr2307 git checkout pr2307

1 1

[freeipa PR#1441][opened] Removing ipaCert Private key & certificate after ipa upgrade
by amitkumar50 08 Jul '19

08 Jul '19

URL: https://github.com/freeipa/freeipa/pull/1441 Author: amitkumar50 Title: #1441: Removing ipaCert Private key & certificate after ipa upgrade Action: opened PR body: """ `# yum install ipa-server -y {IPA 4.4}` `# ipa-server-install` `#yum update ipa-* -y` `# ls -ltr /etc/httpd/alias` Presently "-D" option only removes Cert. **`certutil ... -D -n ipaCert`** Using '-F' option to remove Private key and cert both **`certutil ... -F -n ipaCert`** Resolves: https://pagure.io/freeipa/issue/7329 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1441/head:pr1441 git checkout pr1441

2 1

[freeipa PR#919][opened] client.py: Using Augeas to configure krb5.conf
by Tiboris 02 Jul '19

02 Jul '19

URL: https://github.com/freeipa/freeipa/pull/919 Author: Tiboris Title: #919: client.py: Using Augeas to configure krb5.conf Action: opened PR body: """ Using Augeas should avoid issues like https://pagure.io/freeipa/issue/5912. Resolves: https://pagure.io/freeipa/issue/5913 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/919/head:pr919 git checkout pr919

1 1

[freeipa PR#2291][opened] Update CA signing certificate default key size to 4096
by abbra 26 Apr '19

26 Apr '19

URL: https://github.com/freeipa/freeipa/pull/2291 Author: abbra Title: #2291: Update CA signing certificate default key size to 4096 Action: opened PR body: """ """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2291/head:pr2291 git checkout pr2291

1 1

[freeipa PR#1726][opened] [RFE] IPA server installation with successful message
by amitkumar50 29 Mar '19

29 Mar '19

URL: https://github.com/freeipa/freeipa/pull/1726 Author: amitkumar50 Title: #1726: [RFE] IPA server installation with successful message Action: opened PR body: """ This PR updates IPA success installation message as this: ============================================= IPA server installation successful You can access Web UI using https://ipaserver1.testrelm.test/ipa/ui Obtain a Kerberos Ticket for issuing IPA command 'kinit admin' Server is installed with following roles : * Directory Server * Kerbeors Server * Httpd Server * CA Server * DNS Server For troubleshooting and errors : Please visit : https://www.redhat.com/en For documentation : Please visit : https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/ht… Resolves: https://pagure.io/freeipa/issue/6355 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1726/head:pr1726 git checkout pr1726

2 1

[freeipa PR#2163][opened] Make ipaclient.csrgen optional
by tiran 27 Mar '19

27 Mar '19

URL: https://github.com/freeipa/freeipa/pull/2163 Author: tiran Title: #2163: Make ipaclient.csrgen optional Action: opened PR body: """ ipaclient's csrgen plugin has been turned into an optional dependency. The ipaclient plugin, helper modules like ipaclient.csrgen and templates are shipped conditionally. The ipaclient cert plugin and ipatests handle missing csrgen gracefully. Signed-off-by: Christian Heimes <cheimes(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2163/head:pr2163 git checkout pr2163

1 1

[freeipa PR#1843][opened] Allow issuing certificates with IP addresses in subjectAltName (ftweedal)
by frasertweedale 04 Mar '19

04 Mar '19

URL: https://github.com/freeipa/freeipa/pull/1843 Author: frasertweedale Title: #1843: Allow issuing certificates with IP addresses in subjectAltName (ftweedal) Action: opened PR body: """ Continuation of https://github.com/freeipa/freeipa/pull/1700 by @ipilcher, adding commits by @ftweedal. Please keep both PRs open for the time being. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1843/head:pr1843 git checkout pr1843

2 1

[freeipa PR#1883][opened] ipactl: Correction of named to named-pkcs11
by amitkumar50 21 Feb '19

21 Feb '19

URL: https://github.com/freeipa/freeipa/pull/1883 Author: amitkumar50 Title: #1883: ipactl: Correction of named to named-pkcs11 Action: opened PR body: """ Whenever ipactl status is run it returned: Directory Service: RUNNING krb5kdc Service: RUNNING kadmin Service: RUNNING named Service: RUNNING ... This PR changes ipactl o/p to: Directory Service: RUNNING krb5kdc Service: RUNNING kadmin Service: RUNNING named-pkcs11 Service: RUNNING Resolves: https://pagure.io/freeipa/issue/7446 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1883/head:pr1883 git checkout pr1883

2 1

[freeipa PR#2306][opened] Test package installation suggetion being prompt
by mrizwan93 06 Dec '18

06 Dec '18

URL: https://github.com/freeipa/freeipa/pull/2306 Author: mrizwan93 Title: #2306: Test package installation suggetion being prompt Action: opened PR body: """ In order to work with IPA and Yubikey, libyubikey is required. Before the fix, if yubikey added without having packages, it used to result in traceback. Now it prompt error suggeting to install 'libyubikey' and 'libusb' packages. related ticket : https://pagure.io/freeipa/issue/6979 Signed-off-by: Mohammad Rizwan Yusuf <myusuf(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2306/head:pr2306 git checkout pr2306

2 1

[freeipa PR#2144][opened] [WIP] Find active servers
by tiran 21 Nov '18

21 Nov '18

URL: https://github.com/freeipa/freeipa/pull/2144 Author: tiran Title: #2144: [WIP] Find active servers Action: opened PR body: """ Prototype, work in progress Refactor and improve selection of servers for CA and KRA. Signed-off-by: Christian Heimes <cheimes(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2144/head:pr2144 git checkout pr2144

1 1

[freeipa PR#2312][opened] Support the 1.4.x 389-DS Python installer
by tiran 13 Nov '18

13 Nov '18

URL: https://github.com/freeipa/freeipa/pull/2312 Author: tiran Title: #2312: Support the 1.4.x 389-DS Python installer Action: opened PR body: """ """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2312/head:pr2312 git checkout pr2312

1 1

[freeipa PR#2214][opened] Genrate CSR dynamically for UI tests
by mrizwan93 01 Oct '18

01 Oct '18

URL: https://github.com/freeipa/freeipa/pull/2214 Author: mrizwan93 Title: #2214: Genrate CSR dynamically for UI tests Action: opened PR body: """ There were hardcoded csr in test_cert.py. 'host_csr_path' and 'service_csr_path' needs to be generated before executing UI tests. This fix removes the hardcoded values as well as need of generating csr before executing UI testsuit. Signed-off-by: Mohammad Rizwan Yusuf <myusuf(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2214/head:pr2214 git checkout pr2214

1 1

[freeipa PR#2266][opened] Fix the uninstall test, execute in the nightly runs
by rcritten 21 Sep '18

21 Sep '18

URL: https://github.com/freeipa/freeipa/pull/2266 Author: rcritten Title: #2266: Fix the uninstall test, execute in the nightly runs Action: opened PR body: """ I'm not sure what changed that caused the test to start failing. We didn't notice until now because the test wasn't executed in the nightlies. Rather than only trying to stop dirsrv when it was running just brute-force always try to shut it down. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2266/head:pr2266 git checkout pr2266

2 1

[freeipa PR#2303][opened] Use $(hostname -f) to determine hostname in mod_ssl password script
by rcritten 19 Sep '18

19 Sep '18

URL: https://github.com/freeipa/freeipa/pull/2303 Author: rcritten Title: #2303: Use $(hostname -f) to determine hostname in mod_ssl password script Action: opened PR body: """ https://pagure.io/freeipa/issue/7528 Signed-off-by: Rob Crittenden <rcritten(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2303/head:pr2303 git checkout pr2303

1 1

[freeipa PR#2109][opened] Fix reset_password page translations
by stanislavlevin 12 Sep '18

12 Sep '18

URL: https://github.com/freeipa/freeipa/pull/2109 Author: stanislavlevin Title: #2109: Fix reset_password page translations Action: opened PR body: """ As for now ```/ipa/ui/reset_password.html``` uses standalone JS file ```reset_password.js```, which is out of IPA Web framework and not designed to use translations from server. At the same time LoginScreen widget has a similar functionality. Thus, the usage of that plugin let one advantages of entire framework, including translations. Fixes: https://pagure.io/freeipa/issue/7619 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2109/head:pr2109 git checkout pr2109

2 1

[freeipa PR#2151][opened] Fix translation of "unauthorized" and "ssbrowser" WebUI pages
by stanislavlevin 12 Sep '18

12 Sep '18

URL: https://github.com/freeipa/freeipa/pull/2151 Author: stanislavlevin Title: #2151: Fix translation of "unauthorized" and "ssbrowser" WebUI pages Action: opened PR body: """ This is a simple fix for https://pagure.io/freeipa/issue/7640. But it depends on PR #2072 . """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2151/head:pr2151 git checkout pr2151

2 1

[freeipa PR#2020][opened] [WIP] Remove Python 2 support and packages
by tiran 06 Sep '18

06 Sep '18

URL: https://github.com/freeipa/freeipa/pull/2020 Author: tiran Title: #2020: [WIP] Remove Python 2 support and packages Action: opened PR body: """ Remove Python 2 related code and configuration from spec file, autoconf and CI infrastructure. Fixes: https://pagure.io/freeipa/issue/7568 Signed-off-by: Christian Heimes <cheimes(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2020/head:pr2020 git checkout pr2020

1 1

[freeipa PR#2287][opened] Integration test for sssd_ssh leaks
by Rezney 06 Sep '18

06 Sep '18

URL: https://github.com/freeipa/freeipa/pull/2287 Author: Rezney Title: #2287: Integration test for sssd_ssh leaks Action: opened PR body: """ Integration test for sssd_ssh leaks https://pagure.io/SSSD/sssd/issue/3794 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2287/head:pr2287 git checkout pr2287

2 1

[freeipa PR#2270][opened] Fix render validation items on keypress event at login form
by stanislavlevin 06 Sep '18

06 Sep '18

URL: https://github.com/freeipa/freeipa/pull/2270 Author: stanislavlevin Title: #2270: Fix render validation items on keypress event at login form Action: opened PR body: """ There are many no needed render callings which are performed on each "keypress" event at login form. It is enough to update validation items on "CapsLock" state change. Fixes: https://pagure.io/freeipa/issue/7679 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2270/head:pr2270 git checkout pr2270

2 1

[freeipa PR#2308][opened] Delete empty keytab during client installation
by netoarmando 05 Sep '18

05 Sep '18

URL: https://github.com/freeipa/freeipa/pull/2308 Author: netoarmando Title: #2308: Delete empty keytab during client installation Action: opened PR body: """ Client installation fails if '/etc/krb5.keytab' exists as a zero-length file. Deleting empty keytab before proceeding with the installation fixes the problem. https://pagure.io/freeipa/issue/7625 Signed-off-by: Armando Neto <abiagion(a)redhat.com> **Note to reviewers:** Function implemented instead of an in-place solution, so it could be easily tested, if this solution is overkill I don't mind to remove the test case and move the check-and-delete procedure to where the function is being called. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2308/head:pr2308 git checkout pr2308

2 1

[freeipa PR#2319][opened] [testing_master] Nightly PR
by freeipa-pr-ci 04 Sep '18

04 Sep '18

URL: https://github.com/freeipa/freeipa/pull/2319 Author: freeipa-pr-ci Title: #2319: [testing_master] Nightly PR Action: opened PR body: """ None """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2319/head:pr2319 git checkout pr2319

1 1

[freeipa PR#1563][opened] Support the 1.4.x python installer tools in 389-ds
by stlaz 03 Sep '18

03 Sep '18

URL: https://github.com/freeipa/freeipa/pull/1563 Author: stlaz Title: #1563: Support the 1.4.x python installer tools in 389-ds Action: opened PR body: """ Opened on behalf of https://github.com/Firstyear """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1563/head:pr1563 git checkout pr1563

2 1

[freeipa PR#2310][opened] ipa-server-install: do not perform forwarder validation with --no-dnssec-validation
by flo-renaud 03 Sep '18

03 Sep '18

URL: https://github.com/freeipa/freeipa/pull/2310 Author: flo-renaud Title: #2310: ipa-server-install: do not perform forwarder validation with --no-dnssec-validation Action: opened PR body: """ When ipa-server-install is called -with --forwarder, it checks if the forwarder supports DNSSEC and: - exits if the forwarder is not reachable or does not answer to a query for . SOA - prints a warning if the forwarder does not support DNSSEC. When the --no-dnssec-validation option is provided, the installer should not perform the check. The commit also adds a test that simulates a non-responding forwarder. It would have been too complex to setup a forwarder without DNSSEC support (i.e. a machine with BIND service and /etc/named.conf containing `dnssec-enable no; dnssec-validation no;`). """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2310/head:pr2310 git checkout pr2310

2 1

[freeipa PR#2314][opened] bump PRCI template version to 0.1.8
by Rezney 03 Sep '18

03 Sep '18

URL: https://github.com/freeipa/freeipa/pull/2314 Author: Rezney Title: #2314: bump PRCI template version to 0.1.8 Action: opened PR body: """ """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2314/head:pr2314 git checkout pr2314

2 1

[freeipa PR#2313][opened] [Backport] Prevent installation with single label domains
by serg-cymbaluk 03 Sep '18

03 Sep '18

URL: https://github.com/freeipa/freeipa/pull/2313 Author: serg-cymbaluk Title: #2313: [Backport] Prevent installation with single label domains Action: opened PR body: """ Adds validation to prevent user to install ipa with single label domain. https://pagure.io/freeipa/issue/7207 Reviewed-By: Florence Blanc-Renaud <frenaud(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2313/head:pr2313 git checkout pr2313

2 1

[freeipa PR#2315][opened] [Backport] ui_tests: fix test_config::test_size_limits
by serg-cymbaluk 03 Sep '18

03 Sep '18

URL: https://github.com/freeipa/freeipa/pull/2315 Author: serg-cymbaluk Title: #2315: [Backport] ui_tests: fix test_config::test_size_limits Action: opened PR body: """ Fix a regression caused by: https://pagure.io/freeipa/issue/7606 Signed-off-by: Armando Neto <abiagion(a)redhat.com> Reviewed-By: Pavel Picka <ppicka(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2315/head:pr2315 git checkout pr2315

1 1

[freeipa PR#2318][opened] [Backport][ipa-4-7] Clear next field when returnining list elements in queue.c
by flo-renaud 03 Sep '18

03 Sep '18

URL: https://github.com/freeipa/freeipa/pull/2318 Author: flo-renaud Title: #2318: [Backport][ipa-4-7] Clear next field when returnining list elements in queue.c Action: opened PR body: """ This PR was opened automatically because PR #2283 was pushed to master and backport to ipa-4-7 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2318/head:pr2318 git checkout pr2318

1 1

[freeipa PR#2317][opened] [Backport][ipa-4-6] Clear next field when returnining list elements in queue.c
by flo-renaud 03 Sep '18

03 Sep '18

URL: https://github.com/freeipa/freeipa/pull/2317 Author: flo-renaud Title: #2317: [Backport][ipa-4-6] Clear next field when returnining list elements in queue.c Action: opened PR body: """ This PR was opened automatically because PR #2283 was pushed to master and backport to ipa-4-6 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2317/head:pr2317 git checkout pr2317

1 1

[freeipa PR#2316][opened] [Backport][ipa-4-5] Clear next field when returnining list elements in queue.c
by flo-renaud 03 Sep '18

03 Sep '18

URL: https://github.com/freeipa/freeipa/pull/2316 Author: flo-renaud Title: #2316: [Backport][ipa-4-5] Clear next field when returnining list elements in queue.c Action: opened PR body: """ This PR was opened automatically because PR #2283 was pushed to master and backport to ipa-4-5 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2316/head:pr2316 git checkout pr2316

1 1

[freeipa PR#2304][opened] [testing_master] Nightly PR
by freeipa-pr-ci 01 Sep '18

01 Sep '18

URL: https://github.com/freeipa/freeipa/pull/2304 Author: freeipa-pr-ci Title: #2304: [testing_master] Nightly PR Action: opened PR body: """ None """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2304/head:pr2304 git checkout pr2304

1 1

[freeipa PR#2283][opened] Clear next field when returnining list elements in queue.c
by frozencemetery 31 Aug '18

31 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2283 Author: frozencemetery Title: #2283: Clear next field when returnining list elements in queue.c Action: opened PR body: """ The ipa-otpd code occasionally removes elements from one queue, inspects and modifies them, and then inserts them into another (possibly identical, possibly different) queue. When the next pointer isn't cleared, this can result in element membership in both queues, leading to double frees, or even self-referential elements, causing infinite loops at traversal time. Rather than eliminating the pattern, make it safe by clearing the next field any time an element enters or exits a queue. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2283/head:pr2283 git checkout pr2283

2 1

[freeipa PR#2311][opened] [Backport][ipa-4-7] Add "389-ds-base-legacy-tools" to requires.
by Tiboris 31 Aug '18

31 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2311 Author: Tiboris Title: #2311: [Backport][ipa-4-7] Add "389-ds-base-legacy-tools" to requires. Action: opened PR body: """ This PR was opened automatically because PR #2309 was pushed to master and backport to ipa-4-7 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2311/head:pr2311 git checkout pr2311

1 1

[freeipa PR#2309][opened] Add "389-ds-base-legacy-tools" to requires.
by Rezney 31 Aug '18

31 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2309 Author: Rezney Title: #2309: Add "389-ds-base-legacy-tools" to requires. Action: opened PR body: """ "389-ds-base-legacy-tools" needs to be added to requires until the switch to python installer is completed. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2309/head:pr2309 git checkout pr2309

2 1

[freeipa PR#2305][opened] [Backport][ipa-4-7] Fix SELinux violation in fedora-domainname.service detection
by Tiboris 30 Aug '18

30 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2305 Author: Tiboris Title: #2305: [Backport][ipa-4-7] Fix SELinux violation in fedora-domainname.service detection Action: opened PR body: """ This PR was opened automatically because PR #2301 was pushed to master and backport to ipa-4-7 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2305/head:pr2305 git checkout pr2305

1 1

[freeipa PR#2301][opened] Fix SELinux violation in fedora-domainname.service detection
by tiran 30 Aug '18

30 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2301 Author: tiran Title: #2301: Fix SELinux violation in fedora-domainname.service detection Action: opened PR body: """ ## Refactor os-release and platform information Move the /etc/os-release parser and platform detection code out of the private _importhook module. The ipaplatform module now contains an osinfo module that provides distribution, os, and vendor information. See: https://www.freedesktop.org/software/systemd/man/os-release.html See: https://pagure.io/freeipa/issue/7661 ## Don't check for systemd service ipaplatform no longer checks for the presence of a systemd service file to detect the name of the domainname service. Instead it uses osinfo's version to use the old name on Fedora 28 and the new name on Fedora 29. This fixes a SELinux violation that prevented httpd from listing systemd service files. Fixes: https://pagure.io/freeipa/issue/7661 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2301/head:pr2301 git checkout pr2301

2 1

[freeipa PR#2292][opened] [testing_master] Nightly PR
by freeipa-pr-ci 30 Aug '18

30 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2292 Author: freeipa-pr-ci Title: #2292: [testing_master] Nightly PR Action: opened PR body: """ None """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2292/head:pr2292 git checkout pr2292

1 1

[freeipa PR#2302][opened] Fix external CA next step example output
by roman-mueller 29 Aug '18

29 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2302 Author: roman-mueller Title: #2302: Fix external CA next step example output Action: opened PR body: """ Currently it displays the option `--external-cert-file` twice. The option should be `--external_cert_file` but only once and the second option should be `--external_ca_file`. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2302/head:pr2302 git checkout pr2302

1 1

[freeipa PR#2300][opened] [Backport][ipa-4-7] Retrieve certificate subject base directly instead of ipa-join
by Tiboris 29 Aug '18

29 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2300 Author: Tiboris Title: #2300: [Backport][ipa-4-7] Retrieve certificate subject base directly instead of ipa-join Action: opened PR body: """ This PR was opened automatically because PR #2299 was pushed to master and backport to ipa-4-7 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2300/head:pr2300 git checkout pr2300

2 1

[freeipa PR#2296][opened] [Backport][ipa-4-6] Test if WSGI worker process count is set to 4
by mrizwan93 29 Aug '18

29 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2296 Author: mrizwan93 Title: #2296: [Backport][ipa-4-6] Test if WSGI worker process count is set to 4 Action: opened PR body: """ related ticket : https://pagure.io/freeipa/issue/7587 Signed-off-by: Mohammad Rizwan Yusuf <myusuf(a)redhat.com> Reviewed-By: Tibor Dudlak <tdudlak(a)redhat.com> Reviewed-By: Rob Crittenden <rcritten(a)redhat.com> Reviewed-By: Christian Heimes <cheimes(a)redhat.com> Reviewed-By: Florence Blanc-Renaud <frenaud(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2296/head:pr2296 git checkout pr2296

2 1

[freeipa PR#2299][opened] Retrieve certificate subject base directly instead of ipa-join
by rcritten 29 Aug '18

29 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2299 Author: rcritten Title: #2299: Retrieve certificate subject base directly instead of ipa-join Action: opened PR body: """ The subject base is used as a fallback to find the available CA certificates during client enrollment if the LDAP connection fails (e.g. due to new client connecting to very old server) and for constructing the subject if a certificate is requested. raw=True is passed to config-show in order to avoid parsing the server roles which will fail because the services aren't marked as enabled until after the client installation is successful on a master. ipa-join providing the subject base via stderr was fragile and would cause client enrollment to fail if any other output was included in stderr. https://pagure.io/freeipa/issue/7674 Testing is handled by existing integration tests, both in plain installations and --request-cert to ensure there is a subject base. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2299/head:pr2299 git checkout pr2299

2 1

[freeipa PR#2286][opened] [Backport][ipa-4-6] Test for ipa-replica-install fails with PIN error for CA-less env.
by mrizwan93 28 Aug '18

28 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2286 Author: mrizwan93 Title: #2286: [Backport][ipa-4-6] Test for ipa-replica-install fails with PIN error for CA-less env. Action: opened PR body: """ Signed-off-by: Anuja More <amore(a)redhat.com> Reviewed-By: Florence Blanc-Renaud <frenaud(a)redhat.com> Reviewed-By: Aleksei Slaikovskii <aslaikov(a)redhat.com> Reviewed-By: Stanislav Laznicka <slaznick(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2286/head:pr2286 git checkout pr2286

2 1

[freeipa PR#2298][opened] [Backport][ipa-4-6] Fix ipa-replica-install when key not protected by PIN
by flo-renaud 28 Aug '18

28 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2298 Author: flo-renaud Title: #2298: [Backport][ipa-4-6] Fix ipa-replica-install when key not protected by PIN Action: opened PR body: """ Manual backport because PR #1315 was pushed to master and backport to ipa-4-6 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2298/head:pr2298 git checkout pr2298

2 1

[freeipa PR#2297][opened] [Backport][ipa-4-7] Fix js error on reset view
by serg-cymbaluk 28 Aug '18

28 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2297 Author: serg-cymbaluk Title: #2297: [Backport][ipa-4-7] Fix js error on reset view Action: opened PR body: """ This PR was opened automatically because PR #2269 was pushed to master and backport to ipa-4-7 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2297/head:pr2297 git checkout pr2297

1 1

[freeipa PR#2293][opened] [Backport][ipa-4-7] Do not set ca_host when --setup-ca is used.
by Tiboris 28 Aug '18

28 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2293 Author: Tiboris Title: #2293: [Backport][ipa-4-7] Do not set ca_host when --setup-ca is used. Action: opened PR body: """ This PR was opened automatically because PR #2185 was pushed to master and backport to ipa-4-7 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2293/head:pr2293 git checkout pr2293

1 1

[freeipa PR#2295][opened] [Backport][ipa-4-5] Do not set ca_host when --setup-ca is used.
by Tiboris 28 Aug '18

28 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2295 Author: Tiboris Title: #2295: [Backport][ipa-4-5] Do not set ca_host when --setup-ca is used. Action: opened PR body: """ This PR was opened automatically because PR #2185 was pushed to master and backport to ipa-4-5 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2295/head:pr2295 git checkout pr2295

1 1

[freeipa PR#2130][opened] Server-del test suite fix
by pavelpicka 28 Aug '18

28 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2130 Author: pavelpicka Title: #2130: Server-del test suite fix Action: opened PR body: """ Install topology manually as do not need uninstall from annotated methods and remove replica manually """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2130/head:pr2130 git checkout pr2130

1 1

[freeipa PR#2294][opened] [Backport][ipa-4-6] Do not set ca_host when --setup-ca is used.
by Tiboris 28 Aug '18

28 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2294 Author: Tiboris Title: #2294: [Backport][ipa-4-6] Do not set ca_host when --setup-ca is used. Action: opened PR body: """ This PR was opened automatically because PR #2185 was pushed to master and backport to ipa-4-6 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2294/head:pr2294 git checkout pr2294

1 1

[freeipa PR#2180][opened] Prci nightly fix
by pavelpicka 28 Aug '18

28 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2180 Author: pavelpicka Title: #2180: Prci nightly fix Action: opened PR body: """ test_installation.py - ticket 7008 closed so removing xfail - TestInstallWithCA1 - TestInstallWithCA - TestInstallWithCA_DNS1 - TestInstallWithCA_DNS2 test_replica_promotion - added override of install method """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2180/head:pr2180 git checkout pr2180

2 1

[freeipa PR#2269][opened] Fix js error on reset view
by stanislavlevin 28 Aug '18

28 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2269 Author: stanislavlevin Title: #2269: Fix js error on reset view Action: opened PR body: """ Fix for https://pagure.io/freeipa/issue/7678 : 1) "get_key_index" returns -1 in mismatching case; 2) reindex "key_indicies" after item remove. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2269/head:pr2269 git checkout pr2269

2 1

[freeipa PR#2185][opened] Do not set ca_host when --setup-ca is used.
by Tiboris 28 Aug '18

28 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2185 Author: Tiboris Title: #2185: Do not set ca_host when --setup-ca is used. Action: opened PR body: """ Setting ca_host caused replication failures on DL0 because it was trying to connect to wrong CA host. Trying to avoid corner-case in ipaserver/plugins/dogtag.py when api.env.host nor api.env.ca_host had not CA configured and there was ca_host set to api.env.ca_host variable. Reverts: https://github.com/freeipa/freeipa/pull/2048 See: https://pagure.io/freeipa/issue/7566 Resolves: https://pagure.io/freeipa/issue/7629 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2185/head:pr2185 git checkout pr2185

1 1

[freeipa PR#2289][opened] [Backport][ipa-4-7] Test if WSGI worker process count is set to 4
by rcritten 28 Aug '18

28 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2289 Author: rcritten Title: #2289: [Backport][ipa-4-7] Test if WSGI worker process count is set to 4 Action: opened PR body: """ This PR was opened automatically because PR #2246 was pushed to master and backport to ipa-4-7 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2289/head:pr2289 git checkout pr2289

2 1

[freeipa PR#2288][opened] [Backport][ipa-4-7] Fix translation of migration pages
by serg-cymbaluk 28 Aug '18

28 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2288 Author: serg-cymbaluk Title: #2288: [Backport][ipa-4-7] Fix translation of migration pages Action: opened PR body: """ This PR was opened automatically because PR #2157 was pushed to master and backport to ipa-4-7 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2288/head:pr2288 git checkout pr2288

2 1

[freeipa PR#2285][opened] [testing_master] Nightly PR
by freeipa-pr-ci 28 Aug '18

28 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2285 Author: freeipa-pr-ci Title: #2285: [testing_master] Nightly PR Action: opened PR body: """ None """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2285/head:pr2285 git checkout pr2285

1 1

[freeipa PR#2290][opened] Use 4096 RSA key by default for CA signing certificate
by abbra 27 Aug '18

27 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2290 Author: abbra Title: #2290: Use 4096 RSA key by default for CA signing certificate Action: opened PR body: """ Note that we are not making the choice of CA key size configurable yet, only changing it to a resonable default for 2018. Related: https://pagure.io/freeipa/issue/6790 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2290/head:pr2290 git checkout pr2290

1 1

[freeipa PR#2246][opened] Test if WSGI worker process count is set to 4
by mrizwan93 27 Aug '18

27 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2246 Author: mrizwan93 Title: #2246: Test if WSGI worker process count is set to 4 Action: opened PR body: """ Test if WSGI worker process count is set to 4 in /etc/httpd/conf.d/ipa.conf cat /etc/httpd/conf.d/ipa.conf | grep processes WSGIDaemonProcess ipa processes=4 threads=1 maximum-requests=500 \ [root@vm-idm-027 ~]# related ticket : https://pagure.io/freeipa/issue/7587 Signed-off-by: Mohammad Rizwan Yusuf <myusuf(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2246/head:pr2246 git checkout pr2246

2 1

[freeipa PR#2157][opened] Fix translation of migration pages
by stanislavlevin 27 Aug '18

27 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2157 Author: stanislavlevin Title: #2157: Fix translation of migration pages Action: opened PR body: """ Here is a fix for https://pagure.io/freeipa/issue/7641 1) new MigrateScreen widget and corresponding plugin were added; 2) switch to using of "migrate" plugin in migration Web page; 3) clean up unused error/invalid web pages. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2157/head:pr2157 git checkout pr2157

2 1

[freeipa PR#2278][opened] [Backport][ipa-4-6] uninstall -v: remove Tracebacks
by flo-renaud 27 Aug '18

27 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2278 Author: flo-renaud Title: #2278: [Backport][ipa-4-6] uninstall -v: remove Tracebacks Action: opened PR body: """ This PR is a manual backport of PR #2265 to ipa-4-6. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2278/head:pr2278 git checkout pr2278

2 1

[freeipa PR#2284][opened] [Backport][ipa-4-5]DS replication settings: fix regression with <3.3 master
by flo-renaud 27 Aug '18

27 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2284 Author: flo-renaud Title: #2284: [Backport][ipa-4-5]DS replication settings: fix regression with <3.3 master Action: opened PR body: """ This is a manual backport of PR #2263 on ipa-4-5 branch. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2284/head:pr2284 git checkout pr2284

2 1

[freeipa PR#2282][opened] [Backport][ipa-4-7] DS replication settings: fix regression with <3.3 master
by flo-renaud 27 Aug '18

27 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2282 Author: flo-renaud Title: #2282: [Backport][ipa-4-7] DS replication settings: fix regression with <3.3 master Action: opened PR body: """ This PR was opened automatically because PR #2263 was pushed to master and backport to ipa-4-7 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2282/head:pr2282 git checkout pr2282

1 1

[freeipa PR#2281][opened] [Backport][ipa-4-6] DS replication settings: fix regression with <3.3 master
by flo-renaud 27 Aug '18

27 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2281 Author: flo-renaud Title: #2281: [Backport][ipa-4-6] DS replication settings: fix regression with <3.3 master Action: opened PR body: """ This PR was opened automatically because PR #2263 was pushed to master and backport to ipa-4-6 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2281/head:pr2281 git checkout pr2281

1 1

[freeipa PR#2271][opened] [testing_master] Nightly PR
by freeipa-pr-ci 25 Aug '18

25 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2271 Author: freeipa-pr-ci Title: #2271: [testing_master] Nightly PR Action: opened PR body: """ None """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2271/head:pr2271 git checkout pr2271

1 1

[freeipa PR#2263][opened] DS replication settings: fix regression with <3.3 master
by flo-renaud 24 Aug '18

24 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2263 Author: flo-renaud Title: #2263: DS replication settings: fix regression with <3.3 master Action: opened PR body: """ Commit 811b0fdb4620938963f1a29d3fdd22257327562c introduced a regression when configuring replication with a master < 3.3 Even if 389-ds schema is extended with nsds5ReplicaReleaseTimeout, nsds5ReplicaBackoffMax and nsDS5ReplicaBindDnGroupCheckInterval attributes, it will return UNWILLING_TO_PERFORM when a mod operation is performed on the cn=replica entry. This patch ignores the error and logs a debug msg. See: https://pagure.io/freeipa/issue/7617 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2263/head:pr2263 git checkout pr2263

1 1

[freeipa PR#2280][opened] [Backport][ipa-4-7] Generate Python shebang lines from configure and make
by tiran 24 Aug '18

24 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2280 Author: tiran Title: #2280: [Backport][ipa-4-7] Generate Python shebang lines from configure and make Action: opened PR body: """ This PR was opened automatically because PR #2267 was pushed to master and backport to ipa-4-7 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2280/head:pr2280 git checkout pr2280

1 1

[freeipa PR#2279][opened] [Backport][ipa-4-5] ipa commands: print 'IPA is not configured' when ipa is not setup
by flo-renaud 24 Aug '18

24 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2279 Author: flo-renaud Title: #2279: [Backport][ipa-4-5] ipa commands: print 'IPA is not configured' when ipa is not setup Action: opened PR body: """ This is a manual backport of PR #2268 to ipa-4-5. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2279/head:pr2279 git checkout pr2279

1 1

[freeipa PR#2276][opened] [Backport][ipa-4-6] ipa commands: print 'IPA is not configured' when ipa is not setup
by tiran 24 Aug '18

24 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2276 Author: tiran Title: #2276: [Backport][ipa-4-6] ipa commands: print 'IPA is not configured' when ipa is not setup Action: opened PR body: """ This PR was opened automatically because PR #2268 was pushed to master and backport to ipa-4-6 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2276/head:pr2276 git checkout pr2276

2 1

[freeipa PR#1353][opened] Add script to regenerate Custodia keys and config
by tiran 23 Aug '18

23 Aug '18

URL: https://github.com/freeipa/freeipa/pull/1353 Author: tiran Title: #1353: Add script to regenerate Custodia keys and config Action: opened PR body: """ /usr/libexec/ipa/ipa-custodia-regen can be used to recover from broken ipa-custodia keys and configuration. It removes existing config and server key files, regenerates new files and uploads the new public keys to LDAP. https://pagure.io/freeipa/issue/6893 Signed-off-by: Christian Heimes <cheimes(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1353/head:pr1353 git checkout pr1353

1 1

[freeipa PR#2267][opened] Generate Python shebang lines from configure and make
by tiran 23 Aug '18

23 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2267 Author: tiran Title: #2267: Generate Python shebang lines from configure and make Action: opened PR body: """ The shebang lines are no longer hard-coded but auto-generated with autoconf and make. configure is now able to detect a platform Python interpreter. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2267/head:pr2267 git checkout pr2267

1 1

[freeipa PR#2277][opened] [Backport][ipa-4-7] ipa commands: print 'IPA is not configured' when ipa is not setup
by tiran 23 Aug '18

23 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2277 Author: tiran Title: #2277: [Backport][ipa-4-7] ipa commands: print 'IPA is not configured' when ipa is not setup Action: opened PR body: """ This PR was opened automatically because PR #2268 was pushed to master and backport to ipa-4-7 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2277/head:pr2277 git checkout pr2277

1 1

[freeipa PR#2275][opened] [Backport][ipa-4-7] uninstall -v: remove Tracebacks
by tiran 23 Aug '18

23 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2275 Author: tiran Title: #2275: [Backport][ipa-4-7] uninstall -v: remove Tracebacks Action: opened PR body: """ This PR was opened automatically because PR #2265 was pushed to master and backport to ipa-4-7 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2275/head:pr2275 git checkout pr2275

1 1

[freeipa PR#2274][opened] [Backport][ipa-4-7] Honor no-host-dns when creating client host in replica install
by tiran 23 Aug '18

23 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2274 Author: tiran Title: #2274: [Backport][ipa-4-7] Honor no-host-dns when creating client host in replica install Action: opened PR body: """ This PR was opened automatically because PR #2189 was pushed to master and backport to ipa-4-7 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2274/head:pr2274 git checkout pr2274

1 1

[freeipa PR#2268][opened] ipa commands: print 'IPA is not configured' when ipa is not setup
by flo-renaud 23 Aug '18

23 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2268 Author: flo-renaud Title: #2268: ipa commands: print 'IPA is not configured' when ipa is not setup Action: opened PR body: """ Some commands print tracebacks or unclear error message when they are called on a machine where ipa packages are installed but IPA is not configured. Consistently report 'IPA is not configured on this system' in this case. Also add a test. Related to https://pagure.io/freeipa/issue/6261 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2268/head:pr2268 git checkout pr2268

2 1

[freeipa PR#2265][opened] uninstall -v: remove Tracebacks
by flo-renaud 23 Aug '18

23 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2265 Author: flo-renaud Title: #2265: uninstall -v: remove Tracebacks Action: opened PR body: """ ipa-server-install --uninstall -v -U prints Traceback in its log file. This issue happens because it calls subprocess.Popen with close_fds=True (which closes all file descriptors in the child process) but it is trying to use the file logger in the child process (preexec_fn is called in the child just before the child is executed). The fix is using the logger only in the parent process. Related to https://bugzilla.redhat.com/show_bug.cgi?id=1480502 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2265/head:pr2265 git checkout pr2265

2 1

[freeipa PR#2273][opened] [Backport][ipa-4-7] test: client uninstall fails when installed using non-existing hostname
by Tiboris 23 Aug '18

23 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2273 Author: Tiboris Title: #2273: [Backport][ipa-4-7] test: client uninstall fails when installed using non-existing hostname Action: opened PR body: """ This PR was opened automatically because PR #2247 was pushed to master and backport to ipa-4-7 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2273/head:pr2273 git checkout pr2273

2 1

[freeipa PR#2272][opened] [Backport][ipa-4-6] test: client uninstall fails when installed using non-existing hostname
by Tiboris 23 Aug '18

23 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2272 Author: Tiboris Title: #2272: [Backport][ipa-4-6] test: client uninstall fails when installed using non-existing hostname Action: opened PR body: """ This PR was opened automatically because PR #2247 was pushed to master and backport to ipa-4-6 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2272/head:pr2272 git checkout pr2272

2 1

[freeipa PR#2189][opened] Honor no-host-dns when creating client host in replica install
by rcritten 23 Aug '18

23 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2189 Author: rcritten Title: #2189: Honor no-host-dns when creating client host in replica install Action: opened PR body: """ --no-host-dns is supposed to avoid all DNS lookups so pass this as the force value when creating the host in a replica installation. https://pagure.io/freeipa/issue/7656 Signed-off-by: Rob Crittenden <rcritten(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2189/head:pr2189 git checkout pr2189

2 1

[freeipa PR#2247][opened] test: client uninstall fails when installed using non-existing hostname
by Rezney 23 Aug '18

23 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2247 Author: Rezney Title: #2247: test: client uninstall fails when installed using non-existing hostname Action: opened PR body: """ test: client uninstall fails when installed using non-existing hostname https://pagure.io/freeipa/issue/7620 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2247/head:pr2247 git checkout pr2247

2 1

SoftHSM and certmonger
by Alexander Bokovoy 23 Aug '18

23 Aug '18

Hi Rob, I was trying to set up a configuration where certmonger would generate and track a key in an NSS database with an HSM token. I used SoftHSMv2 for the token. The script roughly describing what I did is attached. You need to put SELinux in permissive as it would be messing up on certmonger's access. On Rawhide it creates a private key in the HSM but unable to store a public key of the certificate there. Rawhide has p11-kit proxy active and that complicates things because any NSS db gets p11-kit-proxy.so PKCS11 module injected via crypto-policy: # cat /etc/crypto-policies/back-ends/nss.config library= name=Policy NSS=flags=policyOnly,moduleDB config="disallow=ALL allow=HMAC-SHA256:HMAC-SHA1:HMAC-SHA384:HMAC-SHA512:SECP256R1:SECP384R1:SECP521R1:aes256-gcm:chacha20-poly1305:aes256-cbc:camellia256-cbc:aes128-gcm:aes128-cbc:camellia128-cbc:SHA256:SHA384:SHA512:SHA1:ECDHE-RSA:ECDHE-ECDSA:RSA:DHE-RSA:tls-version-min=tls1.0:dtls-version-min=dtls1.0:DH-MIN=1023:DSA-MIN=2048:RSA-MIN=2048" name=p11-kit-proxy library=p11-kit-proxy.so when p11-kit-proxy.so is injected, it makes all configured PKCS11 modules available in all NSS databases. Even if my script tries to insert an explicit PKCS11 module into the database used for a certificate generation, I can skip that on Rawhide as p11-kit-proxy does it for me: # certutil -d sql:my-token -U slot: NSS User Private Key and Certificate Services token: NSS Certificate DB uri: pkcs11:token=NSS%20Certificate%20DB;manufacturer=Mozilla%20Foundation;serial=0000000000000000;model=NSS%203 slot: NSS Internal Cryptographic Services token: NSS Generic Crypto Services uri: pkcs11:token=NSS%20Generic%20Crypto%20Services;manufacturer=Mozilla%20Foundation;serial=0000000000000000;model=NSS%203 slot: SoftHSM slot ID 0x5489b984 token: HSM uri: pkcs11:token=HSM;manufacturer=SoftHSM%20project;serial=396d3e3c5489b984;model=SoftHSM%20v2 slot: SoftHSM slot ID 0x1cf72acc token: my-token uri: pkcs11:token=my-token;manufacturer=SoftHSM%20project;serial=77cb41421cf72acc;model=SoftHSM%20v2 Anyway, even if I disable this injection with NSS_IGNORE_SYSTEM_POLICY=1, it doesn't help because the environment variable has to be specified for certmonger process too. I tried that as well and it doesn't help, so there seems to be a bug with certmonger's processing of PKCS11 modules in nss and p11-kit proxying is not really changing that. Certmonger is confused when it doesn't succeed in unlocking a token even if it is a wrong token: # certmonger -S -p /var/run/certmonger.pid -n -d 2 2018-08-21 17:42:15 [26673] Changing to root directory. 2018-08-21 17:42:15 [26673] Obtaining system lock. 2018-08-21 17:42:15 [26677] Token is named "NSS Generic Crypto Services", not "NSS Certificate DB", skipping. 2018-08-21 17:42:15 [26677] Token is named "HSM", not "NSS Certificate DB", skipping. 2018-08-21 17:42:15 [26677] Token is named "my-token", not "NSS Certificate DB", skipping. 2018-08-21 17:42:15 [26678] Error authenticating to token "HSM". 2018-08-21 17:42:15 [26679] Error authenticating to cert db. 2018-08-21 17:42:15 [26679] Error authenticating to cert db. 2018-08-21 17:42:15 [26679] Error locating certificate. 2018-08-21 17:42:15 [26680] Token is named "NSS Certificate DB", not "my-token", skipping. 2018-08-21 17:42:15 [26680] Token is named "HSM", not "my-token", skipping. 2018-08-21 17:42:15 [26681] Token is named "NSS Certificate DB", not "my-token", skipping. 2018-08-21 17:42:15 [26681] Token is named "NSS Generic Crypto Services", not "my-token", skipping. 2018-08-21 17:42:15 [26681] Token is named "HSM", not "my-token", skipping. 2018-08-21 17:42:15 [26681] Error locating certificate. 2018-08-21 17:42:17 [26733] Certificate "Local Signing Authority" valid for 29682906s. 2018-08-21 17:42:17 [26731] Error authenticating to token "HSM". 2018-08-21 17:42:20 [26673] No hooks set for pre-save command. 2018-08-21 17:42:21 [26750] PIN was not needed to auth to key store, though one was provided. Treating this as an error. 2018-08-21 17:42:21 [26750] Error shutting down NSS. Somehow, it doesn't see my token at all but still manages to store the private key there. It then leaves the request in a state NEED_CERTSAVE_PIN: # getcert list -i 20180821173352 Number of certificates and requests being tracked: 4. Request ID '20180821173352': status: NEED_CERTSAVE_PIN stuck: yes key pair storage: type=NSSDB,location='sql:/root/test-token/my-token',nickname='my-cert',token='my-token',pin set certificate: type=NSSDB,location='sql:/root/test-token/my-token',nickname='my-cert',token='my-token' CA: SelfSign issuer: subject: expires: unknown pre-save command: post-save command: track: yes auto-renew: yes If I look at the SoftHSMv2 token directly (via pkcs11-tool), I can see that the key and the cert are both there: # pkcs11-tool --module /usr/lib64/pkcs11/libsofthsm2.so --token-label my-token -l -p Test1234 -O Public Key Object; RSA 2048 bits label: ID: f9119ce98a883f7f75a72fb32faed0125b1b31a3 Usage: encrypt, verify, wrap Private Key Object; RSA label: my-cert ID: f9119ce98a883f7f75a72fb32faed0125b1b31a3 Usage: decrypt, sign, unwrap Using certutil I can also see the private key but not the public one there: # certutil -d sql:my-token -L -h my-token Certificate Nickname Trust Attributes SSL,S/MIME,JAR/XPI Enter Password or Pin for "my-token": [root@ho-2 test-token]# certutil -d sql:my-token -K -h my-token certutil: Checking token "my-token" in slot "SoftHSM slot ID 0x1cf72acc" Enter Password or Pin for "my-token": < 0> rsa f9119ce98a883f7f75a72fb32faed0125b1b31a3 my-cert -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland

2 3

[freeipa PR#2262][opened] [testing_master] Nightly PR
by freeipa-pr-ci 23 Aug '18

23 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2262 Author: freeipa-pr-ci Title: #2262: [testing_master] Nightly PR Action: opened PR body: """ None """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2262/head:pr2262 git checkout pr2262

1 1

[freeipa PR#2264][opened] [Backport][ipa-4-7] Replace old login screen logo with new one
by flo-renaud 22 Aug '18

22 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2264 Author: flo-renaud Title: #2264: [Backport][ipa-4-7] Replace old login screen logo with new one Action: opened PR body: """ This PR was opened automatically because PR #2255 was pushed to master and backport to ipa-4-7 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2264/head:pr2264 git checkout pr2264

1 1

[freeipa PR#2255][opened] Replace old login screen logo with new one
by serg-cymbaluk 21 Aug '18

21 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2255 Author: serg-cymbaluk Title: #2255: Replace old login screen logo with new one Action: opened PR body: """ Replace old login screen logo with new one Related: https://pagure.io/freeipa/issue/7362 This pull request has been opened on behalf https://github.com/freeipa/freeipa/pull/2253 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2255/head:pr2255 git checkout pr2255

2 1

[freeipa PR#2258][opened] [Backport][ipa-4-7] Check if user permssions and umask 0022 is set after ipa-restore
by Tiboris 21 Aug '18

21 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2258 Author: Tiboris Title: #2258: [Backport][ipa-4-7] Check if user permssions and umask 0022 is set after ipa-restore Action: opened PR body: """ This PR was opened automatically because PR #2194 was pushed to master and backport to ipa-4-7 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2258/head:pr2258 git checkout pr2258

2 1

[freeipa PR#2259][opened] [Backport][ipa-4-6] Check if user permssions and umask 0022 is set after ipa-restore
by mrizwan93 21 Aug '18

21 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2259 Author: mrizwan93 Title: #2259: [Backport][ipa-4-6] Check if user permssions and umask 0022 is set after ipa-restore Action: opened PR body: """ This test checks if the access rights for user/group is set to 644 on /var/lib/dirsrv/slapd-TESTRELM-TEST/ldif/* and umask 0022 set while restoring. related ticket: https://pagure.io/freeipa/issue/6844 Signed-off-by: Mohammad Rizwan Yusuf <myusuf(a)redhat.com> Reviewed-By: Florence Blanc-Renaud <frenaud(a)redhat.com> Reviewed-By: Rob Crittenden <rcritten(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2259/head:pr2259 git checkout pr2259

2 1

[freeipa PR#2261][opened] [testing_master] Nightly PR
by freeipa-pr-ci 21 Aug '18

21 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2261 Author: freeipa-pr-ci Title: #2261: [testing_master] Nightly PR Action: opened PR body: """ None """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2261/head:pr2261 git checkout pr2261

1 1

[freeipa PR#2260][opened] Simple doc string additions
by cipherboy 20 Aug '18

20 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2260 Author: cipherboy Title: #2260: Simple doc string additions Action: opened PR body: """ This is my first PR to FreeIPA; I think I need to create an issue associated with this in Pagure, but I'm not entirely sure. Feedback on process much appreciated. :) I've added docstrings for three functions in `ipapython`: - `verify_kdc_cert_validity` - `get_persistent_key` - `is_persistent_keyring_supported` """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2260/head:pr2260 git checkout pr2260

2 1

2018-08-20 @ 16:00 UTC - Fedora 29 Blocker Review Meeting
by Adam Williamson 19 Aug '18

19 Aug '18

# F29 Blocker Review meeting # Date: 2018-08-20 # Time: 16:00 UTC # Location: #fedora-blocker-review on irc.freenode.net Hi folks! We have 8 proposed Beta blockers and 1 proposed Beta freeze exception to review, so let's have a review meeting tomorrow. If you have time this weekend, you can take a look at the proposed or accepted blockers before the meeting - the full lists can be found here: https://qa.fedoraproject.org/blockerbugs/ . We'll be evaluating these bugs to see if they violate any of the Release Criteria and warrant the blocking of a release if they're not fixed. Information on the release criteria for F29 can be found on the wiki [0]. For more information about the Blocker and Freeze exception process, check out these links: - https://fedoraproject.org/wiki/QA:SOP_blocker_bug_process - https://fedoraproject.org/wiki/QA:SOP_freeze_exception_bug_process And for those of you who are curious how a Blocker Review Meeting works - or how it's supposed to go and you want to run one - check out the SOP on the wiki: - https://fedoraproject.org/wiki/QA:SOP_Blocker_Bug_Meeting Have a good night and see you tomorrow! [0] https://fedoraproject.org/wiki/Fedora_Release_Criteria -- Adam Williamson Fedora QA Community Monkey IRC: adamw | Twitter: AdamW_Fedora | identi.ca: adamwfedora http://www.happyassassin.net

1 0

[freeipa PR#2254][opened] [testing_master] Nightly PR
by freeipa-pr-ci 18 Aug '18

18 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2254 Author: freeipa-pr-ci Title: #2254: [testing_master] Nightly PR Action: opened PR body: """ None """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2254/head:pr2254 git checkout pr2254

1 1

[freeipa PR#2257][opened] [Backport][ipa-4-7] Re-open the ldif file to prevent error message
by flo-renaud 16 Aug '18

16 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2257 Author: flo-renaud Title: #2257: [Backport][ipa-4-7] Re-open the ldif file to prevent error message Action: opened PR body: """ This PR was opened automatically because PR #2222 was pushed to master and backport to ipa-4-7 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2257/head:pr2257 git checkout pr2257

1 1

[freeipa PR#2225][opened] [testing master] Nightly run
by Tiboris 16 Aug '18

16 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2225 Author: Tiboris Title: #2225: [testing master] Nightly run Action: opened PR body: """ Running FreeIPA nightly test suite. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2225/head:pr2225 git checkout pr2225

2 1

[freeipa PR#2194][opened] Check if user permssions and umask 0022 is set after ipa-restore
by mrizwan93 16 Aug '18

16 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2194 Author: mrizwan93 Title: #2194: Check if user permssions and umask 0022 is set after ipa-restore Action: opened PR body: """ This test checks if the access rights for user/group is set to 644 on /var/lib/dirsrv/slapd-TESTRELM-TEST/ldif/* and umask 0022 set while restoring. related ticket: https://pagure.io/freeipa/issue/6844 Signed-off-by: Mohammad Rizwan Yusuf <myusuf(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2194/head:pr2194 git checkout pr2194

2 1

[freeipa PR#2256][opened] [Backport][ipa-4-6] Re-open the ldif file to prevent error message
by flo-renaud 16 Aug '18

16 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2256 Author: flo-renaud Title: #2256: [Backport][ipa-4-6] Re-open the ldif file to prevent error message Action: opened PR body: """ This PR was opened automatically because PR #2222 was pushed to master and backport to ipa-4-6 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2256/head:pr2256 git checkout pr2256

1 1

[freeipa PR#2222][opened] Seek to begining of the file while re-reading ldif
by Tiboris 16 Aug '18

16 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2222 Author: Tiboris Title: #2222: Seek to begining of the file while re-reading ldif Action: opened PR body: """ There was an issue with ipa-server-upgrade and it was showing an error while upgrading: DN... does not exists or haven't been updated. Resolves: https://pagure.io/freeipa/issue/7644 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2222/head:pr2222 git checkout pr2222

2 1

[freeipa PR#2253][opened] Remove obsolete login screen logo and all references
by serg-cymbaluk 16 Aug '18

16 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2253 Author: serg-cymbaluk Title: #2253: Remove obsolete login screen logo and all references Action: opened PR body: """ Remove obsolete login screen logo and all references. [Mentioned there](https://github.com/freeipa/freeipa/pull/2237#issuecomment-412505489). Related: https://pagure.io/freeipa/issue/7362 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2253/head:pr2253 git checkout pr2253

1 1

[freeipa PR#2250][opened] [testing_master] Nightly PR
by freeipa-pr-ci 16 Aug '18

16 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2250 Author: freeipa-pr-ci Title: #2250: [testing_master] Nightly PR Action: opened PR body: """ None """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2250/head:pr2250 git checkout pr2250

1 1

[freeipa PR#2252][opened] [Backport][ipa-4-7] Convert members into types in sudorule-*-option
by serg-cymbaluk 15 Aug '18

15 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2252 Author: serg-cymbaluk Title: #2252: [Backport][ipa-4-7] Convert members into types in sudorule-*-option Action: opened PR body: """ This PR was opened automatically because PR #2190 was pushed to master and backport to ipa-4-7 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2252/head:pr2252 git checkout pr2252

2 1

[freeipa PR#2190][opened] Convert members into types in sudorule-*-option
by rcritten 15 Aug '18

15 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2190 Author: rcritten Title: #2190: Convert members into types in sudorule-*-option Action: opened PR body: """ The indirect members need to be calculated and the member attributes converted. This is normally done in baseldap::LDAPRetrieve but these methods provide their own execute() in order to handle the option values. Update sudorule_add|remove_option tests to include check that converted user/group exists in the proper format. https://pagure.io/freeipa/issue/7649 Signed-off-by: Rob Crittenden <rcritten(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2190/head:pr2190 git checkout pr2190

2 1

[freeipa PR#2251][opened] [Backport][ipa-4-7] Fix sync_otp page translation
by serg-cymbaluk 15 Aug '18

15 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2251 Author: serg-cymbaluk Title: #2251: [Backport][ipa-4-7] Fix sync_otp page translation Action: opened PR body: """ This PR was opened manualy because PR #2110 was pushed to master and backport to ipa-4-7 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2251/head:pr2251 git checkout pr2251

2 1

[freeipa PR#2110][opened] Fix sync_otp page translation
by stanislavlevin 14 Aug '18

14 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2110 Author: stanislavlevin Title: #2110: Fix sync_otp page translation Action: opened PR body: """ Easy fix for: https://pagure.io/freeipa/issue/7621 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2110/head:pr2110 git checkout pr2110

2 1

[freeipa PR#2248][opened] Fix ipa-restore: create /var/run/ipa files
by flo-renaud 14 Aug '18

14 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2248 Author: flo-renaud Title: #2248: Fix ipa-restore: create /var/run/ipa files Action: opened PR body: """ In ipa 4.5.4, ipa-restore fails because the file /etc/tmpfiles.d/ipa.conf is not restored => /var/run/ipa and /var/run/ipa/ccaches directories are not created. The fix creates these directories in ipa-restore and creates ipa.conf. With this approach, the fix allows to restore a backup done with 4.5.4 prior to the fix. Note: the fix is specific to ipa-4-5, in ipa-4-6 and above version the file /etc/tmpfiles.d/ipa.conf is created at package install time and not at ipa server install time. Fixes: https://pagure.io/freeipa/issue/7571 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2248/head:pr2248 git checkout pr2248

2 1

[freeipa PR#2249][opened] [Backport][ipa-4-5] Check if replication agreement exist before enable/disable it
by flo-renaud 14 Aug '18

14 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2249 Author: flo-renaud Title: #2249: [Backport][ipa-4-5] Check if replication agreement exist before enable/disable it Action: opened PR body: """ If the replication agreement does not exist, a custom exception is raised explaining the problem. https://pagure.io/freeipa/issue/7201 Reviewed-By: Rob Crittenden <rcritten(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2249/head:pr2249 git checkout pr2249

2 1

[freeipa PR#2240][opened] [testing_master] Nightly PR
by freeipa-pr-ci 14 Aug '18

14 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2240 Author: freeipa-pr-ci Title: #2240: [testing_master] Nightly PR Action: opened PR body: """ None """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2240/head:pr2240 git checkout pr2240

1 1

[freeipa PR#2234][opened] Disable DL0 specific tests
by tiran 13 Aug '18

13 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2234 Author: tiran Title: #2234: Disable DL0 specific tests Action: opened PR body: """ Disable tests that use domain level 0. Fail early to catch additional tests that depend on DL0. See: https://pagure.io/freeipa/issue/7669 Signed-off-by: Christian Heimes <cheimes(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2234/head:pr2234 git checkout pr2234

2 1

[freeipa PR#2243][opened] [Backport][ipa-4-7] Replace logo images with new one (version 4.7)
by Tiboris 13 Aug '18

13 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2243 Author: Tiboris Title: #2243: [Backport][ipa-4-7] Replace logo images with new one (version 4.7) Action: opened PR body: """ This PR was opened automatically because PR #2237 was pushed to master and backport to ipa-4-7 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2243/head:pr2243 git checkout pr2243

1 1

[freeipa PR#2245][opened] [Backport][ipa-4-6] do not use RC4 in FIPS mode
by Tiboris 13 Aug '18

13 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2245 Author: Tiboris Title: #2245: [Backport][ipa-4-6] do not use RC4 in FIPS mode Action: opened PR body: """ This PR was opened automatically because PR #2228 was pushed to master and backport to ipa-4-6 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2245/head:pr2245 git checkout pr2245

1 1

[freeipa PR#2244][opened] [Backport][ipa-4-7] do not use RC4 in FIPS mode
by Tiboris 13 Aug '18

13 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2244 Author: Tiboris Title: #2244: [Backport][ipa-4-7] do not use RC4 in FIPS mode Action: opened PR body: """ This PR was opened automatically because PR #2228 was pushed to master and backport to ipa-4-7 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2244/head:pr2244 git checkout pr2244

1 1

[freeipa PR#2242][opened] [Backport][ipa-4-7] ipa-extdom-extop: Update licenses to GPLv3 or later with exceptions
by Tiboris 13 Aug '18

13 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2242 Author: Tiboris Title: #2242: [Backport][ipa-4-7] ipa-extdom-extop: Update licenses to GPLv3 or later with exceptions Action: opened PR body: """ This PR was opened automatically because PR #2236 was pushed to master and backport to ipa-4-7 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2242/head:pr2242 git checkout pr2242

1 1

[freeipa PR#2228][opened] do not use RC4 in FIPS mode
by abbra 13 Aug '18

13 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2228 Author: abbra Title: #2228: do not use RC4 in FIPS mode Action: opened PR body: """ ipasam: do not use RC4 in FIPS mode When creating Kerberos keys for trusted domain object account, ipasam module requests to generate keys using a series of well-known encryption types. In FIPS mode it is not possible to generate RC4-HMAC key: MIT Kerberos is using openssl crypto backend and openssl does not allow use of RC4 in FIPS mode. Thus, we have to filter out RC4-HMAC encryption type when running in FIPS mode. A side-effect is that a trust to Active Directory running with Windows Server 2003 will not be possible anymore in FIPS mode. Resolves: https://pagure.io/freeipa/issue/7659 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2228/head:pr2228 git checkout pr2228

2 1

[freeipa PR#2237][opened] Replace logo images with new one (version 4.7)
by serg-cymbaluk 13 Aug '18

13 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2237 Author: serg-cymbaluk Title: #2237: Replace logo images with new one (version 4.7) Action: opened PR body: """ Replace logo images with new one (version 4.7) """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2237/head:pr2237 git checkout pr2237

2 1

[freeipa PR#2239][opened] [Backport][ipa-4-6] ipa_tests: test ssh keys login
by Tiboris 13 Aug '18

13 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2239 Author: Tiboris Title: #2239: [Backport][ipa-4-6] ipa_tests: test ssh keys login Action: opened PR body: """ This PR was opened automatically because PR #2195 was pushed to master and backport to ipa-4-6 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2239/head:pr2239 git checkout pr2239

1 1

[freeipa PR#2238][opened] [Backport][ipa-4-7] ipa_tests: test ssh keys login
by Tiboris 13 Aug '18

13 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2238 Author: Tiboris Title: #2238: [Backport][ipa-4-7] ipa_tests: test ssh keys login Action: opened PR body: """ This PR was opened automatically because PR #2195 was pushed to master and backport to ipa-4-7 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2238/head:pr2238 git checkout pr2238

1 1

[freeipa PR#2236][opened] ipa-extdom-extop: Update licenses to GPLv3 or later with exceptions
by abbra 13 Aug '18

13 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2236 Author: abbra Title: #2236: ipa-extdom-extop: Update licenses to GPLv3 or later with exceptions Action: opened PR body: """ The code in question was supposed to have the same license as the rest of the plugin. Fix it by updating the comment header. Signed-off-by: Alexander Bokovoy <abokovoy(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2236/head:pr2236 git checkout pr2236

2 1

[freeipa PR#2223][opened] DL0 removal: 1st step hide DL0 specific options and programs
by t-woerner 13 Aug '18

13 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2223 Author: t-woerner Title: #2223: DL0 removal: 1st step hide DL0 specific options and programs Action: opened PR body: """ This is the first step of the DL0 removal: Hide domain level 0 specific options and programs: - Remove `ipa-replica-prepare` (script and man page) from freeipa.spec.in and Makefile.am in install/tools and install/tools/man - Remove replica_file support from ipa-ca-install and ipa-kra-install (script and man page) - Add new error "Domain level 0 is not supported anymore" for remainaing args after parsing - Remove all "DOMAIN LEVEL 0" and "DOMAIN LEVEL 1" prefixes form the man pages. - Add new error "Domain level 0 is not supported anymore" to ipaserver/install/server/_init.py if not promotion mode to ServerInstallInterface.init_ and to ServerReplicaInstall.main if replica_file is set. - Deprecate replica_file Knob in ipalib/install/service.py - Increase MIN_DOMAIN_LEVEL to DOMAIN_LEVEL_1 in ipalib/constants.py """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2223/head:pr2223 git checkout pr2223

2 3

[freeipa PR#2235][opened] ipaclient: Remove --no-sssd and --no-ac options
by t-woerner 13 Aug '18

13 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2235 Author: t-woerner Title: #2235: ipaclient: Remove --no-sssd and --no-ac options Action: opened PR body: """ Client installation with --no-sssd option has already beeen deprecated with https://pagure.io/freeipa/issue/5860. Authconfig support has been removed, therefore --no-ac option can be removed also. ipatests/test_integration/test_authselect.py: Skip no_sssd and no_ac tests. See: https://pagure.io/freeipa/issue/7671 Signed-off-by: Thomas Woerner <twoerner(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2235/head:pr2235 git checkout pr2235

2 1

[freeipa PR#2241][opened] ipa-otptoken-import: support import from CSV file
by abbra 11 Aug '18

11 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2241 Author: abbra Title: #2241: ipa-otptoken-import: support import from CSV file Action: opened PR body: """ Allow import from a CSV file where fields have a fixed meaning: "serial", "key", "type", "digits", "interval" Fixes: https://pagure.io/freeipa/issue/7673 Pair-programmed-with: Nathaniel McCallum <npmccallum(a)redhat.com> Signed-off-by: Alexander Bokovoy <abokovoy(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2241/head:pr2241 git checkout pr2241

1 0

[freeipa PR#2233][opened] [testing_master] Nightly PR
by freeipa-pr-ci 11 Aug '18

11 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2233 Author: freeipa-pr-ci Title: #2233: [testing_master] Nightly PR Action: opened PR body: """ None """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2233/head:pr2233 git checkout pr2233

1 1

[freeipa PR#2195][opened] ipa_tests: test ssh keys login
by Rezney 10 Aug '18

10 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2195 Author: Rezney Title: #2195: ipa_tests: test ssh keys login Action: opened PR body: """ Integration test for: https://pagure.io/SSSD/sssd/issue/3747 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2195/head:pr2195 git checkout pr2195

2 1

[freeipa PR#2218][opened] [Backport][ipa-4-5] Tests: add integration test for password changes by dir mgr
by flo-renaud 10 Aug '18

10 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2218 Author: flo-renaud Title: #2218: [Backport][ipa-4-5] Tests: add integration test for password changes by dir mgr Action: opened PR body: """ Manual backport of PR #2200 to ipa-4-5. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2218/head:pr2218 git checkout pr2218

1 1

[freeipa PR#2206][opened] [Backport][ipa-4-5] In IPA 4.4 when updating userpassword with ldapmodify does not update…
by Tiboris 09 Aug '18

09 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2206 Author: Tiboris Title: #2206: [Backport][ipa-4-5] In IPA 4.4 when updating userpassword with ldapmodify does not update… Action: opened PR body: """ This PR was opened automatically because PR #2181 was pushed to master and backport to ipa-4-5 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2206/head:pr2206 git checkout pr2206

2 1

[freeipa PR#2231][opened] [Backport][ipa-4-5] PRCI: extend timeouts for gating
by Tiboris 09 Aug '18

09 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2231 Author: Tiboris Title: #2231: [Backport][ipa-4-5] PRCI: extend timeouts for gating Action: opened PR body: """ This PR was opened manually because PR #2227 was pushed to master and backport to ipa-4-5 is required. Some tests have been identified as frequently failing on timeouts. While we are investigating PRCI potential issues, increase the timeouts to make PRCI usable. The rule is to add 30min if the test involves CA/KRA installation or 20min otherwise for the most problematic tests. external_ca: from 1h to 1h20 Reviewed-By: Tibor Dudlak <tdudlak(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2231/head:pr2231 git checkout pr2231

2 1

[freeipa PR#2217][opened] [Backport][ipa-4-6] Tests: add integration test for 7601
by Tiboris 09 Aug '18

09 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2217 Author: Tiboris Title: #2217: [Backport][ipa-4-6] Tests: add integration test for 7601 Action: opened PR body: """ This PR was opened automatically because PR #2200 was pushed to master and backport to ipa-4-6 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2217/head:pr2217 git checkout pr2217

2 1

[freeipa PR#2221][opened] Test: fix definition of template for dnssec
by flo-renaud 09 Aug '18

09 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2221 Author: flo-renaud Title: #2221: Test: fix definition of template for dnssec Action: opened PR body: """ The template used for dnssec does not exist, the test should use ci-ipa-4-5-f26 instead of ci-master-f26 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2221/head:pr2221 git checkout pr2221

2 1

[freeipa PR#2230][opened] [Backport][ipa-4-6] PRCI: extend timeouts for gating
by Tiboris 09 Aug '18

09 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2230 Author: Tiboris Title: #2230: [Backport][ipa-4-6] PRCI: extend timeouts for gating Action: opened PR body: """ This PR was opened manually because PR #2227 was pushed to master and backport to ipa-4-6 is required. Some tests have been identified as frequently failing on timeouts. While we are investigating PRCI potential issues, increase the timeouts to make PRCI usable. The rule is to add 30min if the test involves CA/KRA installation or 20min otherwise for the most problematic tests. external_ca: from 1h to 1h20 Reviewed-By: Tibor Dudlak <tdudlak(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2230/head:pr2230 git checkout pr2230

1 1

[freeipa PR#2229][opened] [Backport][ipa-4-7] PRCI: extend timeouts for gating
by Tiboris 09 Aug '18

09 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2229 Author: Tiboris Title: #2229: [Backport][ipa-4-7] PRCI: extend timeouts for gating Action: opened PR body: """ This PR was opened automatically because PR #2227 was pushed to master and backport to ipa-4-7 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2229/head:pr2229 git checkout pr2229

1 1

[freeipa PR#2232][opened] [testing_master] Nightly PR
by freeipa-pr-ci 09 Aug '18

09 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2232 Author: freeipa-pr-ci Title: #2232: [testing_master] Nightly PR Action: opened PR body: """ None """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2232/head:pr2232 git checkout pr2232

1 1

[freeipa PR#2226][opened] [testing_master] Nightly PR
by freeipa-pr-ci 09 Aug '18

09 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2226 Author: freeipa-pr-ci Title: #2226: [testing_master] Nightly PR Action: opened PR body: """ None """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2226/head:pr2226 git checkout pr2226

1 1

[freeipa PR#2227][opened] PRCI: extend timeouts for gating
by flo-renaud 08 Aug '18

08 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2227 Author: flo-renaud Title: #2227: PRCI: extend timeouts for gating Action: opened PR body: """ Some tests have been identified as frequently failing on timeouts. While we are investigating PRCI potential issues, increase the timeouts to make PRCI usable. The rule is to add 30min if the test involves CA/KRA installation or 20min otherwise for the most problematic tests. test_forced_client_enrolment: from 1h to 1h20 test_vault: from 1h15 to 1h45 external_ca_1: from 1h to 1h20 test_sudo: from 1h to 1h20 test_authconfig: from 1h to 1h20 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2227/head:pr2227 git checkout pr2227

2 1

[freeipa PR#2219][opened] [testing_master] Nightly PR
by freeipa-pr-ci 07 Aug '18

07 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2219 Author: freeipa-pr-ci Title: #2219: [testing_master] Nightly PR Action: opened PR body: """ None """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2219/head:pr2219 git checkout pr2219

2 1

[freeipa PR#2224][opened] PR-CI extend timeouts
by Rezney 07 Aug '18

07 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2224 Author: Rezney Title: #2224: PR-CI extend timeouts Action: opened PR body: """ extend timeout with one hour as timed out many times in PRCI nightly - test_dnssec - test_replication_layouts_TestLineTopologyWithCA - test_replication_layouts_TestLineTopologyWithCAKRA - test_replication_layouts_TestStarTopologyWithCAKRA - test_server_del - test_webui Signed-off-by: Pavel Picka <ppicka(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2224/head:pr2224 git checkout pr2224

2 1

[freeipa PR#2220][opened] [Backport][ipa-4-6] ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
by Tiboris 07 Aug '18

07 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2220 Author: Tiboris Title: #2220: [Backport][ipa-4-6] ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound Action: opened PR body: """ This PR is manual backport of https://github.com/freeipa/freeipa/pull/2187 please wait for CI before pushing and do not forget about backport to branches specified with labels. In case of questions or problems contact @t-woerner who is author of the original PR. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2220/head:pr2220 git checkout pr2220

1 1

[freeipa PR#2196][opened] Webui fix - stabilize webui tests
by pavelpicka 07 Aug '18

07 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2196 Author: pavelpicka Title: #2196: Webui fix - stabilize webui tests Action: opened PR body: """ add wait close notification """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2196/head:pr2196 git checkout pr2196

2 1

[freeipa PR#2213][opened] [Backport][ipa-4.7] Restore SELinux context of session_dir /etc/httpd/alias and template_dir /var/log/dirsrv/slapd-X
by t-woerner 07 Aug '18

07 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2213 Author: t-woerner Title: #2213: [Backport][ipa-4.7] Restore SELinux context of session_dir /etc/httpd/alias and template_dir /var/log/dirsrv/slapd-X Action: opened PR body: """ This PR is manual backport of #2198 please wait for CI before pushing and do not forget about backport to branches specified with labels. In case of questions or problems contact @t-woerner who is author of the original PR. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2213/head:pr2213 git checkout pr2213

2 1

[freeipa PR#2216][opened] [Backport][ipa-4-7] Tests: add integration test for 7601
by Tiboris 07 Aug '18

07 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2216 Author: Tiboris Title: #2216: [Backport][ipa-4-7] Tests: add integration test for 7601 Action: opened PR body: """ This PR was opened automatically because PR #2200 was pushed to master and backport to ipa-4-7 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2216/head:pr2216 git checkout pr2216

1 1

[freeipa PR#2208][opened] [Backport][ipa-4-5] ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
by Tiboris 07 Aug '18

07 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2208 Author: Tiboris Title: #2208: [Backport][ipa-4-5] ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound Action: opened PR body: """ This PR is manual backport of https://github.com/freeipa/freeipa/pull/2187 please wait for CI before pushing and do not forget about backport to branches specified with labels. In case of questions or problems contact @t-woerner who is author of the original PR. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2208/head:pr2208 git checkout pr2208

1 1

[freeipa PR#2215][opened] ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
by Tiboris 07 Aug '18

07 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2215 Author: Tiboris Title: #2215: ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound Action: opened PR body: """ This PR is manual backport of https://github.com/freeipa/freeipa/pull/2187 please wait for CI before pushing and do not forget about backport to branches specified with labels. In case of questions or problems contact @t-woerner who is author of the original PR. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2215/head:pr2215 git checkout pr2215

1 1

[freeipa PR#2205][opened] [Backport][ipa-4-6] In IPA 4.4 when updating userpassword with ldapmodify does not update…
by Tiboris 07 Aug '18

07 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2205 Author: Tiboris Title: #2205: [Backport][ipa-4-6] In IPA 4.4 when updating userpassword with ldapmodify does not update… Action: opened PR body: """ This PR was opened automatically because PR #2181 was pushed to master and backport to ipa-4-6 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2205/head:pr2205 git checkout pr2205

1 1

[freeipa PR#2211][opened] [testing_master] Nightly PR
by freeipa-pr-ci 07 Aug '18

07 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2211 Author: freeipa-pr-ci Title: #2211: [testing_master] Nightly PR Action: opened PR body: """ None """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2211/head:pr2211 git checkout pr2211

1 1

[freeipa PR#2200][opened] Tests: add integration test for 7601
by flo-renaud 06 Aug '18

06 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2200 Author: flo-renaud Title: #2200: Tests: add integration test for 7601 Action: opened PR body: """ Add a test for issue 7601: - add a user, perform kinit user to modify the password, read krblastpwdchange and krbpasswordexpiration. - perform a ldapmodify on the password as dir mgr - make sure that krblastpwdchange and krbpasswordexpiration have been modified Related to: https://pagure.io/freeipa/issue/7601 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2200/head:pr2200 git checkout pr2200

2 1

[freeipa PR#2204][opened] [Backport][ipa-4-7] In IPA 4.4 when updating userpassword with ldapmodify does not update…
by Tiboris 06 Aug '18

06 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2204 Author: Tiboris Title: #2204: [Backport][ipa-4-7] In IPA 4.4 when updating userpassword with ldapmodify does not update… Action: opened PR body: """ This PR was opened automatically because PR #2181 was pushed to master and backport to ipa-4-7 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2204/head:pr2204 git checkout pr2204

1 1

[freeipa PR#2207][opened] [Backport][ipa-4-7] prci_definitions: fix wrong indentation in the nightly yaml
by Tiboris 06 Aug '18

06 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2207 Author: Tiboris Title: #2207: [Backport][ipa-4-7] prci_definitions: fix wrong indentation in the nightly yaml Action: opened PR body: """ This PR was opened automatically because PR #2188 was pushed to master and backport to ipa-4-7 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2207/head:pr2207 git checkout pr2207

1 1

[freeipa PR#2212][opened] [Backport][ipa-4.7] Restore SELinux context of session_dir /etc/httpd/alias and template_dir /var/log/dirsrv/slapd-X
by t-woerner 06 Aug '18

06 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2212 Author: t-woerner Title: #2212: [Backport][ipa-4.7] Restore SELinux context of session_dir /etc/httpd/alias and template_dir /var/log/dirsrv/slapd-X Action: opened PR body: """ This PR is manual backport of #2198 please wait for CI before pushing and do not forget about backport to branches specified with labels. In case of questions or problems contact @t-woerner who is author of the original PR. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2212/head:pr2212 git checkout pr2212

1 1

[freeipa PR#2197][opened] [Backport][ipa-4-6] Allow anonymous access to parentID attribute
by flo-renaud 06 Aug '18

06 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2197 Author: flo-renaud Title: #2197: [Backport][ipa-4-6] Allow anonymous access to parentID attribute Action: opened PR body: """ Manual backport to ipa-4-6 of PR #1752 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2197/head:pr2197 git checkout pr2197

1 1

[freeipa PR#2210][opened] [testing_master] Nightly PR
by freeipa-pr-ci 06 Aug '18

06 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2210 Author: freeipa-pr-ci Title: #2210: [testing_master] Nightly PR Action: opened PR body: """ None """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2210/head:pr2210 git checkout pr2210

1 1

[freeipa PR#2209][opened] [testing_master] Nightly PR
by freeipa-pr-ci 05 Aug '18

05 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2209 Author: freeipa-pr-ci Title: #2209: [testing_master] Nightly PR Action: opened PR body: """ None """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2209/head:pr2209 git checkout pr2209

1 1

[freeipa PR#2192][opened] [testing_master] Nightly PR
by freeipa-pr-ci 04 Aug '18

04 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2192 Author: freeipa-pr-ci Title: #2192: [testing_master] Nightly PR Action: opened PR body: """ None """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2192/head:pr2192 git checkout pr2192

1 1

[freeipa PR#2193][opened] [Backport][ipa-4-7] ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
by Tiboris 03 Aug '18

03 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2193 Author: Tiboris Title: #2193: [Backport][ipa-4-7] ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound Action: opened PR body: """ This PR is manual backport of https://github.com/freeipa/freeipa/pull/2187 please wait for CI before pushing and do not forget about backport to branches specified with labels. In case of questions or problems contact @t-woerner who is author of the original PR. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2193/head:pr2193 git checkout pr2193

2 1

[freeipa PR#2188][opened] prci_definitions: fix wrong indentation in the nightly yaml
by Rezney 03 Aug '18

03 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2188 Author: Rezney Title: #2188: prci_definitions: fix wrong indentation in the nightly yaml Action: opened PR body: """ TestLineTopologyWithoutCA definition has wrong indentation. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2188/head:pr2188 git checkout pr2188

2 1

[freeipa PR#2181][opened] In IPA 4.4 when updating userpassword with ldapmodify does not update…
by tbordaz 03 Aug '18

03 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2181 Author: tbordaz Title: #2181: In IPA 4.4 when updating userpassword with ldapmodify does not update… Action: opened PR body: """ … krbPasswordExpiration nor krbLastPwdChange When making ipa-pwd-extop TXN aware, some callbacks are call twice. Particularily ipapwd_pre_add is called during PRE_ADD and TXN_PRE_ADD ipapwd_pre_mod is called during PRE_MOD and TXN_PRE_MOD ipapwd_post_modadd is called during POST_ADD and TXN_POST_ADD ipapwd_post_modadd is called during POST_MOD and TXN_POST_MOD It is not the expected behavior and it results on some skipped updates krbPasswordExpiration and krbLastPwdChange https://pagure.io/freeipa/issue/7601 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2181/head:pr2181 git checkout pr2181

2 1

[freeipa PR#2202][opened] [Backport][ipa-4-6] Rename pytest_plugins to ipatests.pytest_ipa
by Tiboris 03 Aug '18

03 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2202 Author: Tiboris Title: #2202: [Backport][ipa-4-6] Rename pytest_plugins to ipatests.pytest_ipa Action: opened PR body: """ This backport PR was opened manually because PR #2199 was pushed to master and backport to ipa-4-7 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2202/head:pr2202 git checkout pr2202

1 1

[freeipa PR#2198][opened] Restore SELinux context of session_dir /etc/httpd/alias and template_dir /var/log/dirsrv/slapd-X
by t-woerner 03 Aug '18

03 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2198 Author: t-woerner Title: #2198: Restore SELinux context of session_dir /etc/httpd/alias and template_dir /var/log/dirsrv/slapd-X Action: opened PR body: """ ## Restore SELinux context of session_dir /etc/httpd/alias and template_dir /var/log/dirsrv/slapd-X: ### httpinstance: Restore SELinux context of session_dir /etc/httpd/alias The session directory /etc/httpd/alias/ could be created with the wrong SELinux context. Therefore httpd was not able to write to this directory. Fixes: https://pagure.io/freeipa/issue/7662 Related-to: 49b4a057f1b0459331bcec2c8d760627d00e4571 (Create missing /etc/httpd/alias for ipasession.key) ### ipa_restore: Restore SELinux context of template_dir /var/log/dirsrv/slapd-X The template directory /var/log/dirsrv/slapd-X could be created with the wrong SELinux context. Related to: https://pagure.io/freeipa/issue/7662 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2198/head:pr2198 git checkout pr2198

1 1

[freeipa PR#2201][opened] [Backport][ipa-4-7] Rename pytest_plugins to ipatests.pytest_ipa
by Tiboris 03 Aug '18

03 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2201 Author: Tiboris Title: #2201: [Backport][ipa-4-7] Rename pytest_plugins to ipatests.pytest_ipa Action: opened PR body: """ This PR was opened automatically because PR #2199 was pushed to master and backport to ipa-4-7 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2201/head:pr2201 git checkout pr2201

1 1

[freeipa PR#2203][opened] [Backport][ipa-4-6] Do not check deleted files with `make fastlint`
by Tiboris 03 Aug '18

03 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2203 Author: Tiboris Title: #2203: [Backport][ipa-4-6] Do not check deleted files with `make fastlint` Action: opened PR body: """ when any file from FreeIPA tree has been deleted there was a failure like: pylint ------ ************* Module ipaserver/install/ntpinstance.py ipaserver/install/ntpinstance.py:1: [F0001(fatal), ] No module named ipaserver/install/ntpinstance.py) Adding --diff-filter to fastlint will not list deleted files in git diff --names-only output to not include not existing files to checklist. Reviewed-By: Stanislav Laznicka <slaznick(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2203/head:pr2203 git checkout pr2203

1 1

FreeIPA.org wiki updated
by Martin Kosek 03 Aug '18

03 Aug '18

Hi all, I updated FreeIPA.org wiki to the current stable Mediawiki version - 1.31 (along with couple minor deployment improvements). The updated sources are in the standard place [1]. If you see some regression with the updated wiki, please let me know! Martin [1] https://github.com/freeipa/freeipa-wiki

1 0

[freeipa PR#2199][opened] Rename pytest_plugins to ipatests.pytest_ipa
by tiran 02 Aug '18

02 Aug '18

URL: https://github.com/freeipa/freeipa/pull/2199 Author: tiran Title: #2199: Rename pytest_plugins to ipatests.pytest_ipa Action: opened PR body: """ pytest 3.7.0 doesn't like ipatests.pytest_plugins package. The string "pytest_plugins" is used as marker to load plugins. By populare vote and to avoid future conflicts, we decided to rename the directory to pytest_ipa. Fixes: https://pagure.io/freeipa/issue/7663 Signed-off-by: Christian Heimes <cheimes(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2199/head:pr2199 git checkout pr2199

2 1

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-devel August 2018