February 2019 - FreeIPA-devel - Fedora Mailing-Lists

[freeipa PR#2817][opened] [Backport][ipa-4-7] Web UI tests: Get rid of *_cert_path and *_csr_path config variables

by serg-cymbaluk

URL: https://github.com/freeipa/freeipa/pull/2817 Author: serg-cymbaluk Title: #2817: [Backport][ipa-4-7] Web UI tests: Get rid of *_cert_path and *_csr_path config variables Action: opened PR body: """ Manual backport of PR #2775 Web UI tests now don't require additional configuration to test certificates. https://pagure.io/freeipa/issue/7843 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2817/head:pr2817 git checkout pr2817

5 years, 2 months

1
1
0 / 0

[freeipa PR#2820][opened] Remove ZERO_STRUCT() call

by tiran

URL: https://github.com/freeipa/freeipa/pull/2820 Author: tiran Title: #2820: Remove ZERO_STRUCT() call Action: opened PR body: """ ipa_sam uses Samba's macro ZERO_STRUCT() to safely zero out a block in memory. On F30 ZERO_STRUCT() is currently broken, because it uses the undefined C11 function memset_s(). During investigation of the bug, it turned out that ZERO_STRUCT(td->security_identifier) is not needed. The whole td struct is allocated with talloc_zero(), so td->security_identifier is already zeroed. See: https://bugzilla.redhat.com/show_bug.cgi?id=1672231 Signed-off-by: Christian Heimes <cheimes(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2820/head:pr2820 git checkout pr2820

5 years, 2 months

1
1
0 / 0

[freeipa PR#2819][opened] Update build requirements on twine

by tiran

URL: https://github.com/freeipa/freeipa/pull/2819 Author: tiran Title: #2819: Update build requirements on twine Action: opened PR body: """ On Fedora >= 29 the command 'twine' is provied by the twine package. On F28 it's in python3-twine. F30 no longer has python3-twine. Signed-off-by: Christian Heimes <cheimes(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2819/head:pr2819 git checkout pr2819

5 years, 2 months

1
1
0 / 0

[freeipa PR#2816][opened] Compile IPA modules with C11 extensions

by tiran

URL: https://github.com/freeipa/freeipa/pull/2816 Author: tiran Title: #2816: Compile IPA modules with C11 extensions Action: opened PR body: """ - define __STDC_WANT_LIB_EXT1__ to get C11 extensions like memset_s() for Samba's ZERO_STRUCT() macro, see https://en.cppreference.com/w/c/string/byte/memset - _DEFAULT_SOURCE enables features like htole16() from endian.h, see http://man7.org/linux/man-pages/man3/endian.3.html - _POSIX_C_SOURCE >= 200809 enables features like strndup() from string.h, see http://man7.org/linux/man-pages/man3/strndup.3.html - time_t is no longer implicitly defined, include time.h - typeof() is only available as GNU extension. Use explicit types instead of generic __typeof__(). Fixes: https://pagure.io/freeipa/issue/7858 Signed-off-by: Christian Heimes <cheimes(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2816/head:pr2816 git checkout pr2816

5 years, 2 months

1
1
0 / 0

[freeipa PR#2811][opened] [testing_master] Nightly PR

by freeipa-pr-ci

URL: https://github.com/freeipa/freeipa/pull/2811 Author: freeipa-pr-ci Title: #2811: [testing_master] Nightly PR Action: opened PR body: """ None """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2811/head:pr2811 git checkout pr2811

5 years, 2 months

1
1
0 / 0

[freeipa PR#2814][opened] Tests: fix option name for dsctl

by flo-renaud

URL: https://github.com/freeipa/freeipa/pull/2814 Author: flo-renaud Title: #2814: Tests: fix option name for dsctl Action: opened PR body: """ 389-ds-base has modified one option name in dsctl, and our test `test_uninstallation.py::TestUninstallBase::()::test_failed_uninstall` is still using the old option (--doit) instead of the new one (--do-it). Fixes: https://pagure.io/freeipa/issue/7856 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2814/head:pr2814 git checkout pr2814

5 years, 2 months

2
1
0 / 0

[freeipa PR#2775][opened] Web UI tests: Get rid of *_cert_path and *_csr_path config variables

by serg-cymbaluk

URL: https://github.com/freeipa/freeipa/pull/2775 Author: serg-cymbaluk Title: #2775: Web UI tests: Get rid of *_cert_path and *_csr_path config variables Action: opened PR body: """ Web UI tests now don't require additional configuration to test certificates. https://pagure.io/freeipa/issue/7843 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2775/head:pr2775 git checkout pr2775

5 years, 2 months

1
1
0 / 0

[freeipa PR#2802][opened] [testing_f28] Nightly PR

by freeipa-pr-ci

URL: https://github.com/freeipa/freeipa/pull/2802 Author: freeipa-pr-ci Title: #2802: [testing_f28] Nightly PR Action: opened PR body: """ None """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2802/head:pr2802 git checkout pr2802

5 years, 2 months

1
1
0 / 0

[freeipa PR#2628][opened] [WIP] Refactor LDAPClient

by tiran

URL: https://github.com/freeipa/freeipa/pull/2628 Author: tiran Title: #2628: [WIP] Refactor LDAPClient Action: opened PR body: """ **WIP** Simplify LDAPClient construction and ensure that LDAP connections are always secure (LDAP + STARTTLS, LDAPI, LDAPS) unless explicitly stated otherwise. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2628/head:pr2628 git checkout pr2628

5 years, 2 months

1
1
0 / 0

[freeipa PR#2697][opened] LDAPClient: Prefer LDAPI connections in installer and simplify API

by tiran

URL: https://github.com/freeipa/freeipa/pull/2697 Author: tiran Title: #2697: LDAPClient: Prefer LDAPI connections in installer and simplify API Action: opened PR body: """ On several occasions the installer uses LDAP + simple_bind rather than LDAPI with EXTERNAL bind. LDAPI (LDAP over Unix socket) is more secure, a tiny bit faster, and is immune to some network/DNS related issues. The changeset simplifies the LDAPClient API by introducing additional constructors. The new constructors are not only easier to use but also prevent some common pitfalls like LDAP connection without StartTSL. Several code paths now use ``LDAPClient.from_realm(realm_name)`` with external bind as root instead of LDAP with DM password. ### Add constructors to ldap client Add LDAPClient.from_realm(), LDAPClient.from_hostname_secure(), and LDAPClient.from_hostname_plain() constructors. The simple_bind() method now also refuses to transmit a password over a plain, unencrypted line. LDAPClient.from_hostname_secure() uses start_tls and FreeIPA's CA cert by default. The constructor also automatically disables start_tls for ldaps and ldapi connections. ### Use new LDAPClient constructors Replace get_ldap_uri() + LDAPClient() with new LDAPClient constructors like LDAPClient.from_realm(). Some places now use LDAPI with external bind instead of LDAP with simple bind. Although the FQDN *should* resolve to 127.0.0.1 / [::1], there is no hard guarantee. The draft tools.ietf.org/html/draft-west-let-localhost-be-localhost-04#section-5.1 specifies that applications must verify that the resulting IP is a loopback API. LDAPI is always local and a bit more efficient, too. The simple_bind() method also prevents the caller from sending a password over an insecure line. ### Use LDAPS when installing CA on replica On a replica, 389-DS is already configured for secure connections when the CA is installed. ### Move realm_to_serverid/ldap_uri to ipaldap The helper function realm_to_serverid() and realm_to_ldap_uri() are useful outside the server installation framework. They are now in ipapython.ipaldap along other helpers for LDAP handling in FreeIPA. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2697/head:pr2697 git checkout pr2697

5 years, 2 months

2
1
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-devel February 2019