FreeIPA-devel November 2019

freeipa-devel@lists.fedorahosted.org

8 participants
169 discussions

[freeipa PR#3949][opened] [Backport][ipa-4-6] Make sure to have storage space for tag
by tiran 26 Nov '19

26 Nov '19

URL: https://github.com/freeipa/freeipa/pull/3949 Author: tiran Title: #3949: [Backport][ipa-4-6] Make sure to have storage space for tag Action: opened PR body: """ This PR was opened automatically because PR #3672 was pushed to master and backport to ipa-4-6 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3949/head:pr3949 git checkout pr3949

1 1

[freeipa PR#3948][opened] [Backport][ipa-4-8] Make sure to have storage space for tag
by tiran 26 Nov '19

26 Nov '19

URL: https://github.com/freeipa/freeipa/pull/3948 Author: tiran Title: #3948: [Backport][ipa-4-8] Make sure to have storage space for tag Action: opened PR body: """ This PR was opened automatically because PR #3672 was pushed to master and backport to ipa-4-8 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3948/head:pr3948 git checkout pr3948

1 1

[freeipa PR#3946][opened] [Backport][ipa-4-7] ipatests: add check that ipa-adtrust-install generates sane smb.conf
by wladich 26 Nov '19

26 Nov '19

URL: https://github.com/freeipa/freeipa/pull/3946 Author: wladich Title: #3946: [Backport][ipa-4-7] ipatests: add check that ipa-adtrust-install generates sane smb.conf Action: opened PR body: """ This PR was opened automatically because PR #3930 was pushed to master and backport to ipa-4-7 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3946/head:pr3946 git checkout pr3946

1 1

[freeipa PR#3945][opened] [Backport][ipa-4-6] ipatests: add check that ipa-adtrust-install generates sane smb.conf
by wladich 26 Nov '19

26 Nov '19

URL: https://github.com/freeipa/freeipa/pull/3945 Author: wladich Title: #3945: [Backport][ipa-4-6] ipatests: add check that ipa-adtrust-install generates sane smb.conf Action: opened PR body: """ This PR was opened automatically because PR #3930 was pushed to master and backport to ipa-4-6 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3945/head:pr3945 git checkout pr3945

1 1

[freeipa PR#3944][opened] [Backport][ipa-4-8] ipatests: add check that ipa-adtrust-install generates sane smb.conf
by wladich 26 Nov '19

26 Nov '19

URL: https://github.com/freeipa/freeipa/pull/3944 Author: wladich Title: #3944: [Backport][ipa-4-8] ipatests: add check that ipa-adtrust-install generates sane smb.conf Action: opened PR body: """ This PR was opened automatically because PR #3930 was pushed to master and backport to ipa-4-8 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3944/head:pr3944 git checkout pr3944

1 1

[freeipa PR#3947][opened] [Backport][ipa-4-7] Make sure to have storage space for tag
by tiran 26 Nov '19

26 Nov '19

URL: https://github.com/freeipa/freeipa/pull/3947 Author: tiran Title: #3947: [Backport][ipa-4-7] Make sure to have storage space for tag Action: opened PR body: """ This PR was opened automatically because PR #3672 was pushed to master and backport to ipa-4-7 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3947/head:pr3947 git checkout pr3947

1 1

[freeipa PR#3183][opened] Require a SASL SSF of >= 56 on client side
by tiran 26 Nov '19

26 Nov '19

URL: https://github.com/freeipa/freeipa/pull/3183 Author: tiran Title: #3183: Require a SASL SSF of >= 56 on client side Action: opened PR body: """ SSF_MINX 56 level ensures data integrity and confidentiality for SASL GSSAPI and SASL GSS SPNEGO connections. Although at least AES128 is enforced pretty much everywhere, 56 is required. The origianl commit 350954589774499d99bf87cb5631c664bb0707c4 added minimum SSF on LDAP client and LDAP server. Some LDAP consumers like realmd are not compatible with strong SSF yet. Related: https://pagure.io/freeipa/issue/7140 Related: https://pagure.io/freeipa/issue/4580 Signed-off-by: Christian Heimes <cheimes(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3183/head:pr3183 git checkout pr3183

1 1

[freeipa PR#2812][opened] Require secure-binds for password login
by tiran 26 Nov '19

26 Nov '19

URL: https://github.com/freeipa/freeipa/pull/2812 Author: tiran Title: #2812: Require secure-binds for password login Action: opened PR body: """ nsslapd-require-secure-binds restricts password based simple binds to secure connections. It does not prevent a careless user from transmitting a password in plain text. But it makes it obvious that he did something bad. Password based bind attempts over an insecure connections are refused with: Confidentiality required: Operation requires a secure connection Secure connections are: * LDAP connections on port 389 with STARTTLS * LDAPS connections in port 636 * LDAPI connections to a local Unix sockets Anonymous bind (simple_bind with empty DN and password) and GSSAPI bind operations are not affected. nsslapd-require-secure-binds is enabled after 389-DS is configured for TLS/SSL. Signed-off-by: Christian Heimes <cheimes(a)redhat.com> **NOTE** The change may cause compatibility issues with applications that don't perform secure binds. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2812/head:pr2812 git checkout pr2812

1 1

[freeipa PR#3672][opened] Make sure to have storage space for tag
by simo5 26 Nov '19

26 Nov '19

URL: https://github.com/freeipa/freeipa/pull/3672 Author: simo5 Title: #3672: Make sure to have storage space for tag Action: opened PR body: """ ber_scanf expects a pointer to a ber_tag_t to return the tag pointed at by "t", if that is not provided the pointer will be store in whatever memory location is pointed by the stack at that time causeing a crash. Note that this is effectively unused code because in ipa-kdb the only party that can write a key_data structure to be stored is te kdb_driver itself and we never encode these s2kparam data. But we need to handle this for future proofing. Fixes #8071 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3672/head:pr3672 git checkout pr3672

2 1

[freeipa PR#3930][opened] ipatests: add check that ipa-adtrust-install generates sane smb.conf file
by wladich 26 Nov '19

26 Nov '19

URL: https://github.com/freeipa/freeipa/pull/3930 Author: wladich Title: #3930: ipatests: add check that ipa-adtrust-install generates sane smb.conf file Action: opened PR body: """ Related to: https://pagure.io/freeipa/issue/6951 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/3930/head:pr3930 git checkout pr3930

1 1

← Newer
1
2
3
4
5
6
7
8
9
...
17
Older →

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-devel November 2019