URL: https://github.com/freeipa/freeipa/pull/3070
Author: rcritten
Title: #3070: [Backport][ipa-4-7] Update samba configuration defaults
Action: opened
PR body:
"""
This PR was opened automatically because PR #3068 was pushed to master and backport to ipa-4-7 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/3070/head:pr3070
git checkout pr3070
URL: https://github.com/freeipa/freeipa/pull/3062
Author: tiran
Title: #3062: Disable global p11-kit configuration for NSS
Action: opened
PR body:
"""
The p11-kit configuration injects p11-kit-proxy into all NSS databases.
Amongst other p11-kit loads SoftHSM2 PKCS#11 provider. This interferes
with 389-DS, certmonger, Dogtag and other services. For example certmonger
tries to open OpenDNSSEC's SoftHSM2 token, although it doesn't use it at
all. It also breaks Dogtag HSM support testing with SoftHSM2.
IPA server does neither need nor use p11-kit.
Related: https://pagure.io/freeipa/issue/7810
Signed-off-by: Christian Heimes <cheimes(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/3062/head:pr3062
git checkout pr3062
URL: https://github.com/freeipa/freeipa/pull/3069
Author: rcritten
Title: #3069: [Backport][ipa-4-6] Update samba configuration defaults
Action: opened
PR body:
"""
This PR was opened automatically because PR #3068 was pushed to master and backport to ipa-4-6 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/3069/head:pr3069
git checkout pr3069
URL: https://github.com/freeipa/freeipa/pull/3068
Author: abbra
Title: #3068: Update samba configuration defaults
Action: opened
PR body:
"""
Long overdue, we need to fix Samba configuration to follow testparm recommendations.
A second fix is to make sure smbd by default is limited in its capability to handle concurrent client requests to prevent SMBLoris attack.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/3068/head:pr3068
git checkout pr3068
URL: https://github.com/freeipa/freeipa/pull/3053
Author: tiran
Title: #3053: Deprecate ipa-client-install --request-cert
Action: opened
PR body:
"""
Mark the --request-cert option for ipa-client-install as deprecated.
Users are encouraged to request a PEM certificate with certmonger
instead. The option and /etc/ipa/nssdb will be removed in a future
version.
Related: https://pagure.io/freeipa/issue/7492
Signed-off-by: Christian Heimes <cheimes(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/3053/head:pr3053
git checkout pr3053
URL: https://github.com/freeipa/freeipa/pull/3048
Author: tiran
Title: #3048: Upstream various fixes from Ubuntu package
Action: opened
PR body:
"""
* use lesscpy.__main__ instead of hard-coded name for py3-lesscpy
* skip authselect migration on Debian
* add font paths for open-sans and font-awesome
* Fixes for OpenDNSSEC 2.0 on Debian
* Use different paths for KDC cert and key
The gzip patch is no longer required thanks to 5ecede781b4eba11a537afd104fc9df9518958c4
@tjaalton please take a look.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/3048/head:pr3048
git checkout pr3048
URL: https://github.com/freeipa/freeipa/pull/3061
Author: abbra
Title: #3061: [ipa-4-7] Update translations from zanata
Action: opened
PR body:
"""
Update of translations for 4.7 branch
Update of contributors in 4.7 branch
Update of a mailmap to be on par with git master
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/3061/head:pr3061
git checkout pr3061
URL: https://github.com/freeipa/freeipa/pull/3060
Author: tiran
Title: #3060: [Backport][ipa-4-7] Add ExecStartPost hook to wait for Dogtag PKI
Action: opened
PR body:
"""
Manual backport of PR #3047
cherry-picking did not result in any conflict.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/3060/head:pr3060
git checkout pr3060