October 2019 - FreeIPA-devel - Fedora mailing-lists

[freeipa PR#3783][opened] Migrate xunit-style setups to fixtures
by stanislavlevin 12 Feb '20

12 Feb '20

URL: https://github.com/freeipa/freeipa/pull/3783 Author: stanislavlevin Title: #3783: Migrate xunit-style setups to fixtures Action: opened PR body: """ This converts `setup*`/`teardown*` functions/methods to the powerfull pytest fixtures: ``` The purpose of test fixtures is to provide a fixed baseline upon which tests can reliably and repeatedly execute. pytest fixtures offer dramatic improvements over the classic xUnit style of setup/teardown functions: - fixtures have explicit names and are activated by declaring their use from test functions, modules, classes or whole projects. - fixtures are implemented in a modular manner, as each fixture name triggers a fixture function which can itself use other fixtures. - fixture management scales from simple unit to complex functional testing, allowing to parametrize fixtures and tests according to configuration and component options, or to re-use fixtures across function, class, module or whole test session scopes. ``` One of the transition patterns is as follows: ```diff class TestFooBar(XMLRPC_test): - @classmethod - def setup_class(cls): - super(TestFooBar, cls).setup_class() + @pytest.fixture(autouse=True, scope="class") + def foo_bar_setup(self, request, xmlrpc_setup): + cls = request.cls cls.beforemethod() - @classmethod - def teardown_class(cls): - cls.aftermethod() - super(TestFooBar, cls).teardown_class() + def fin(): + cls.aftermethod() + request.addfinalizer(fin) ``` To achieve predictable results for initialization and destroy of Pytest fixtures, ones have to employ the fixtures' interdependencies. This is the first part of the work to remove the mixing of test idioms in the IPA test suite. Related: https://pagure.io/freeipa/issue/7989 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3783/head:pr3783 git checkout pr3783

2 1

[freeipa PR#3349][opened] ipatests: filter_users should be applied correctly if SSSD starts offline
by amore17 16 Dec '19

16 Dec '19

URL: https://github.com/freeipa/freeipa/pull/3349 Author: amore17 Title: #3349: ipatests: filter_users should be applied correctly if SSSD starts offline Action: opened PR body: """ Added tests which validates that filter_users is applied correctly when SSSD starts in offline mode, which checks that no look up should be in data provider and NCE/USER/ipa_domain/user should be added to negative cache. Related Tickets: https://pagure.io/SSSD/sssd/issue/3983 https://pagure.io/SSSD/sssd/issue/3978 Signed-off-by: Anuja More <amore(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3349/head:pr3349 git checkout pr3349

2 1

[freeipa PR#3491][opened] temp test - ignore
by fcami 13 Dec '19

13 Dec '19

URL: https://github.com/freeipa/freeipa/pull/3491 Author: fcami Title: #3491: temp test - ignore Action: opened PR body: """ """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3491/head:pr3491 git checkout pr3491

1 1

[freeipa PR#3811][opened] ipatests: 'sss_ssh_authorizedkeys user' should return ssh key
by amore17 06 Dec '19

06 Dec '19

URL: https://github.com/freeipa/freeipa/pull/3811 Author: amore17 Title: #3811: ipatests: 'sss_ssh_authorizedkeys user' should return ssh key Action: opened PR body: """ Added regression tests which validates that when there is ssh key and certificate is added for IPA user then 'sss_ssh_authorizedkeys user' should return ssh key. Related Ticket: https://pagure.io/SSSD/sssd/issue/3937 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3811/head:pr3811 git checkout pr3811

2 1

[freeipa PR#3183][opened] Require a SASL SSF of >= 56 on client side
by tiran 26 Nov '19

26 Nov '19

URL: https://github.com/freeipa/freeipa/pull/3183 Author: tiran Title: #3183: Require a SASL SSF of >= 56 on client side Action: opened PR body: """ SSF_MINX 56 level ensures data integrity and confidentiality for SASL GSSAPI and SASL GSS SPNEGO connections. Although at least AES128 is enforced pretty much everywhere, 56 is required. The origianl commit 350954589774499d99bf87cb5631c664bb0707c4 added minimum SSF on LDAP client and LDAP server. Some LDAP consumers like realmd are not compatible with strong SSF yet. Related: https://pagure.io/freeipa/issue/7140 Related: https://pagure.io/freeipa/issue/4580 Signed-off-by: Christian Heimes <cheimes(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3183/head:pr3183 git checkout pr3183

1 1

[freeipa PR#2812][opened] Require secure-binds for password login
by tiran 26 Nov '19

26 Nov '19

URL: https://github.com/freeipa/freeipa/pull/2812 Author: tiran Title: #2812: Require secure-binds for password login Action: opened PR body: """ nsslapd-require-secure-binds restricts password based simple binds to secure connections. It does not prevent a careless user from transmitting a password in plain text. But it makes it obvious that he did something bad. Password based bind attempts over an insecure connections are refused with: Confidentiality required: Operation requires a secure connection Secure connections are: * LDAP connections on port 389 with STARTTLS * LDAPS connections in port 636 * LDAPI connections to a local Unix sockets Anonymous bind (simple_bind with empty DN and password) and GSSAPI bind operations are not affected. nsslapd-require-secure-binds is enabled after 389-DS is configured for TLS/SSL. Signed-off-by: Christian Heimes <cheimes(a)redhat.com> **NOTE** The change may cause compatibility issues with applications that don't perform secure binds. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2812/head:pr2812 git checkout pr2812

1 1

[freeipa PR#3672][opened] Make sure to have storage space for tag
by simo5 26 Nov '19

26 Nov '19

URL: https://github.com/freeipa/freeipa/pull/3672 Author: simo5 Title: #3672: Make sure to have storage space for tag Action: opened PR body: """ ber_scanf expects a pointer to a ber_tag_t to return the tag pointed at by "t", if that is not provided the pointer will be store in whatever memory location is pointed by the stack at that time causeing a crash. Note that this is effectively unused code because in ipa-kdb the only party that can write a key_data structure to be stored is te kdb_driver itself and we never encode these s2kparam data. But we need to handle this for future proofing. Fixes #8071 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3672/head:pr3672 git checkout pr3672

2 1

[freeipa PR#3825][opened] DSU: add Design for Disable Stale Users
by fcami 22 Nov '19

22 Nov '19

URL: https://github.com/freeipa/freeipa/pull/3825 Author: fcami Title: #3825: DSU: add Design for Disable Stale Users Action: opened PR body: """ Add disable-stale-users.md: feature document for the upcoming DSU feature. Fixes: https://pagure.io/freeipa/issue/8104 Signed-off-by: François Cami <fcami(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3825/head:pr3825 git checkout pr3825

1 1

[freeipa PR#3641][opened] Add Authentication Indicator Kerberos ticket policy options
by abbra 21 Nov '19

21 Nov '19

URL: https://github.com/freeipa/freeipa/pull/3641 Author: abbra Title: #3641: Add Authentication Indicator Kerberos ticket policy options Action: opened PR body: """ See discussion in https://github.com/freeipa/freeipa/pull/3358#issuecomment-528796956 Related: https://pagure.io/freeipa/issue/8001 Signed-off-by: Alexander Bokovoy <abokovoy(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3641/head:pr3641 git checkout pr3641

2 1

[freeipa PR#3236][opened] Enable TLS 1.3 post handshake auth
by tiran 15 Nov '19

15 Nov '19

URL: https://github.com/freeipa/freeipa/pull/3236 Author: tiran Title: #3236: Enable TLS 1.3 post handshake auth Action: opened PR body: """ """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3236/head:pr3236 git checkout pr3236

1 1

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-devel October 2019