November 2020 - FreeIPA-devel - Fedora Mailing-Lists

[freeipa PR#5280][opened] [ipa-4-9] ipatests: Update PR-CI definitions for ipa-4-9

by netoarmando

URL: https://github.com/freeipa/freeipa/pull/5280 Author: netoarmando Title: #5280: [ipa-4-9] ipatests: Update PR-CI definitions for ipa-4-9 Action: opened PR body: """ Adding PR-CI definitions for gating and "latest" nightly runs. Not including a definition for previous release, this must be done when updating from 32 to 33. Signed-off-by: Armando Neto <abiagion(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5280/head:pr5280 git checkout pr5280

1 week

2
1
0 / 0

[freeipa PR#5264][opened] [ipatests] Raise log level of 389-ds replication

by stanislavlevin

URL: https://github.com/freeipa/freeipa/pull/5264 Author: stanislavlevin Title: #5264: [ipatests] Raise log level of 389-ds replication Action: opened PR body: """ - change log level for replication debugging According to the docs: ``` default level of logging(16384) used for critical errors and other messages that are always written to the error log. Messages at this level are always included in the error log, regardless of the log level setting. ``` - always flush the access logs to filesystem During the testing access logs may be written with a significant delay, this results in logs are not collected by this test node, but for example, the next one. - as of now, the changes on `cn=config` are made after the installation of a server or replica. If an error occurs during these stages, then the actual log level will be the default and not as expected. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5264/head:pr5264 git checkout pr5264

1 week

2
1
0 / 0

[freeipa PR#5188][opened] [ipa-4-8] ipatests: update PR-CI templates to Fedora 33

by netoarmando

URL: https://github.com/freeipa/freeipa/pull/5188 Author: netoarmando Title: #5188: [ipa-4-8] ipatests: update PR-CI templates to Fedora 33 Action: opened PR body: """ "previous" updated to Fedora 32 "latest" updated to Fedora 33 Fedora 33 is not released yet, therefore templates were based on nightly composes. Signed-off-by: Armando Neto <abiagion(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5188/head:pr5188 git checkout pr5188

2 weeks, 1 day

1
1
0 / 0

[freeipa PR#5187][opened] [master] ipatests: update PR-CI templates to Fedora 33

by netoarmando

URL: https://github.com/freeipa/freeipa/pull/5187 Author: netoarmando Title: #5187: [master] ipatests: update PR-CI templates to Fedora 33 Action: opened PR body: """ "previous" updated to Fedora 32 "latest" updated to Fedora 33 "rawhide" based on Fedora 34 389ds, testing and pki definitions updated to Fedora 33 Fedora 33 is not released yet, therefore templates were based on nightly composes. Signed-off-by: Armando Neto <abiagion(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5187/head:pr5187 git checkout pr5187

2 weeks, 1 day

1
1
0 / 0

[freeipa PR#5253][opened] ipatests: Test for IPATrustControllerPrincipalCheck

by menonsudhir

URL: https://github.com/freeipa/freeipa/pull/5253 Author: menonsudhir Title: #5253: ipatests: Test for IPATrustControllerPrincipalCheck Action: opened PR body: """ This testcase checks when trust between IPA-AD is established successfully, IPATrustControllerPrincipalCheck displays result as SUCCESS """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5253/head:pr5253 git checkout pr5253

2 weeks, 6 days

2
1
0 / 0

[freeipa PR#5288][opened] ipa-kdb: handle dates up to 2106-01-01 00:00

by ptrNine

URL: https://github.com/freeipa/freeipa/pull/5288 Author: ptrNine Title: #5288: ipa-kdb: handle dates up to 2106-01-01 00:00 Action: opened PR body: """ krb5 uses negative part of `krb5_timestamp` to store time values after 2038 https://k5wiki.kerberos.org/wiki/Projects/Timestamps_after_2038 In other words, krb5 uses `krb5_timestamp` (signed int) with unsigned arithmetic for expanding of the timestamp time range. This commit: - adds some helper functions for working with `krb5_timestamp` as unsigned (actually copied from the link above) - replaces operations with `krb5_timestamp`'s by these new functions - sets `IPAPWD_END_OF_TIME` to `4291747200L` (1 Jan 2106, 00:00 GMT) """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5288/head:pr5288 git checkout pr5288

1 month, 1 week

2
1
0 / 0

[freeipa PR#5302][opened] Allow leading/trailing whitespaces in passwords

by antoniotorresm

URL: https://github.com/freeipa/freeipa/pull/5302 Author: antoniotorresm Title: #5302: Allow leading/trailing whitespaces in passwords Action: opened PR body: """ Since PR #4709 was stale and closed, this PR fixes the issue taking into account comments from that PR. kwargs is redefined to Data.kwargs, which doesn't contain the restriction of no leading/trailing whitespaces from the Str class. Fixes: https://pagure.io/freeipa/issue/7599 Signed-off-by: Antonio Torres Moríñigo <atorresm(a)protonmail.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5302/head:pr5302 git checkout pr5302

1 month, 1 week

2
1
0 / 0

Preparing for FreeIPA 4.9.0 release candidate

by Alexander Bokovoy

Hi, we are close to get FreeIPA 4.9.0 release candidate out. Draft release notes: https://vda.li/drafts/freeipa-4.9.0-release-notes.html They include difference between 4.8.10 and current git master. Note that since many things were backported to 4.8 in separate commits that referenced the same FreeIPA tickets, they appear in the release notes too even though you might have seen them in release notes for FreeIPA 4.8 releases. Currently, in nightly tests https://github.com/freeipa-pr-ci2/freeipa/pull/525 we have 126 successful testsuites and 6 failures, out of which four have known failures: - test_adtrust_install, test_cert, test_ipahealthcheck_nodns_extca_file failure already reported in FreeIPA#8533 - test_installation_TestInstallWithCA2 failure already reported in FreeIPA#8477 - test_webui_general failure already reported in FreeIPA#8570 - test_webui_users failure already reported in FreeIPA#8569 The latter two issues will most likely be irrelevant for FreeIPA release as they track behavior change in Fedora FAS plugin and we simply need to install that plugin in a confined environment, to avoid overlapping with our tests. FAS behavior is specific to Fedora/CentOS AAA deployment and should not be a problem for anything else, it is simply a design choice in FAS plugin. This makes us down to two known and two not-yet-investigated failures. On top of that we have a worrying behavior of the Azure CI with regards to DNSSEC that waits for investigation. One major part not exercised in the nightlies is an upgrade code. My plan is to do FreeIPA 4.9.0 release candidate this week -- I planned it to do last week but things slipped due to various failures and load at other projects. I think for a release candidate this state is quite good. -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland

1 month, 1 week

4
14
0 / 0

[freeipa PR#5228][opened] ipatests: Test for IPATrustDomainsCheck with external trust to AD

by menonsudhir

URL: https://github.com/freeipa/freeipa/pull/5228 Author: menonsudhir Title: #5228: ipatests: Test for IPATrustDomainsCheck with external trust to AD Action: opened PR body: """ This testcase checks that when external trust is configured between IPA and AD subdomain, IPATrustDomainsCheck doesnot display ERROR. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5228/head:pr5228 git checkout pr5228

1 month, 1 week

2
1
0 / 0

[freeipa PR#5196][opened] ipatests: invoke JRE with -Djava.security.debug=access:failure

by fcami

URL: https://github.com/freeipa/freeipa/pull/5196 Author: fcami Title: #5196: ipatests: invoke JRE with -Djava.security.debug=access:failure Action: opened PR body: """ ipatests: invoke JRE with -Djava.security.debug=access:failure DO NOT MERGE. https://github.com/dogtagpki/pki/issues/3299 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5196/head:pr5196 git checkout pr5196

1 month, 2 weeks

1
1
0 / 0

2021

2020

2019

2018

2017

FreeIPA-devel November 2020