November 2020 - FreeIPA-devel - Fedora Mailing-Lists

[freeipa PR#5250][opened] ipatests: Tests for 'NssCheck' in ipahealthcheck.ds.nss_ssl

by menonsudhir

URL: https://github.com/freeipa/freeipa/pull/5250 Author: menonsudhir Title: #5250: ipatests: Tests for 'NssCheck' in ipahealthcheck.ds.nss_ssl Action: opened PR body: """ The Server-Cert in IPA is valid for 2 year time. This patch changes the system year on which IPA is installed by using the 'date -s +-2/3 Years' so that we simulate the expiry or about to expire scenario of the Server-Cert. The modified year of the IPA server is reverted back to the actual year and ipa service is restarted using two different fixtures so that the system is healthy again. This patch also checks that the 'ipahealthcheck.ds.nss_ssl' check in healthcheck tool reports the correct status for the "Server-Cert" about to expire and already expired respectively. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5250/head:pr5250 git checkout pr5250

4 months, 4 weeks

2
1
0 / 0

[freeipa PR#5276][opened] [Backport][ipa-4-9] util: Fix client-only build

by abbra

URL: https://github.com/freeipa/freeipa/pull/5276 Author: abbra Title: #5276: [Backport][ipa-4-9] util: Fix client-only build Action: opened PR body: """ This PR was opened automatically because PR #5273 was pushed to master and backport to ipa-4-9 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5276/head:pr5276 git checkout pr5276

5 months

2
1
0 / 0

[freeipa PR#5275][opened] [Backport][ipa-4-8] util: Fix client-only build

by abbra

URL: https://github.com/freeipa/freeipa/pull/5275 Author: abbra Title: #5275: [Backport][ipa-4-8] util: Fix client-only build Action: opened PR body: """ This PR was opened automatically because PR #5273 was pushed to master and backport to ipa-4-8 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5275/head:pr5275 git checkout pr5275

5 months

2
1
0 / 0

[freeipa PR#5259][opened] WIP: Clone of 5228

by rcritten

URL: https://github.com/freeipa/freeipa/pull/5259 Author: rcritten Title: #5259: WIP: Clone of 5228 Action: opened PR body: """ Clone of PR https://github.com/freeipa/freeipa/pull/5228 so I can see what is going on under the hood of healthcheck and work on a fix. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5259/head:pr5259 git checkout pr5259

5 months

1
1
0 / 0

[freeipa PR#5278][opened] [Backport][ipa-4-8] Use host keytab to obtain credentials needed for ipa-certupdate

by abbra

URL: https://github.com/freeipa/freeipa/pull/5278 Author: abbra Title: #5278: [Backport][ipa-4-8] Use host keytab to obtain credentials needed for ipa-certupdate Action: opened PR body: """ This PR was opened automatically because PR #5246 was pushed to master and backport to ipa-4-8 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5278/head:pr5278 git checkout pr5278

5 months

2
1
0 / 0

[freeipa PR#5277][opened] [Backport][ipa-4-9] Use host keytab to obtain credentials needed for ipa-certupdate

by abbra

URL: https://github.com/freeipa/freeipa/pull/5277 Author: abbra Title: #5277: [Backport][ipa-4-9] Use host keytab to obtain credentials needed for ipa-certupdate Action: opened PR body: """ This PR was opened automatically because PR #5246 was pushed to master and backport to ipa-4-9 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5277/head:pr5277 git checkout pr5277

5 months

2
1
0 / 0

[freeipa PR#5274][opened] [Backport][ipa-4-9] ipatests: Test certmonger IPA responder switched to JSONRPC

by rcritten

URL: https://github.com/freeipa/freeipa/pull/5274 Author: rcritten Title: #5274: [Backport][ipa-4-9] ipatests: Test certmonger IPA responder switched to JSONRPC Action: opened PR body: """ This PR was opened automatically because PR #5231 was pushed to master and backport to ipa-4-9 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5274/head:pr5274 git checkout pr5274

5 months

1
1
0 / 0

[freeipa PR#5262][opened] Fix TLS/SSL related issues in EPN

by tiran

URL: https://github.com/freeipa/freeipa/pull/5262 Author: tiran Title: #5262: Fix TLS/SSL related issues in EPN Action: opened PR body: """ Prevent downgrade attack when admin requests STARTTLS but server does not return STARTTLS in EHLO message. The SMTP.starttls() methods checks for has_extn("starttls") and fails with SMTPNotSupportedError when the extension is not available. SMTPNotSupportedError is a subclass of SMTPException. Verify cert chain and hostname in starttls() and SMTP_SSL. The smtplib module defaults to unverified connection. Fixes: https://pagure.io/freeipa/issue/8578 Fixes: https://pagure.io/freeipa/issue/8579 Signed-off-by: Christian Heimes <cheimes(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5262/head:pr5262 git checkout pr5262

5 months

2
1
0 / 0

[freeipa PR#5272][opened] [Backport][ipa-4-8] WebUI: Fix topology graph navigation crash

by serg-cymbaluk

URL: https://github.com/freeipa/freeipa/pull/5272 Author: serg-cymbaluk Title: #5272: [Backport][ipa-4-8] WebUI: Fix topology graph navigation crash Action: opened PR body: """ This is a manual backport of #5251 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5272/head:pr5272 git checkout pr5272

5 months

2
1
0 / 0

[freeipa PR#5246][opened] Use host keytab to obtain credentials needed for ipa-certupdate

by rcritten

URL: https://github.com/freeipa/freeipa/pull/5246 Author: rcritten Title: #5246: Use host keytab to obtain credentials needed for ipa-certupdate Action: opened PR body: """ This command doesn't require any permissions that a host doesn't already have and it simplifies overall credential handling. It also corrects the case where the server API cache is out of date and there are no credentials available to refresh it which can lead to a confusing error message. Also switch to MEMORY-based ccache rather than file to avoid having to clean up the filesystem. https://pagure.io/freeipa/issue/8531 Signed-off-by: Rob Crittenden <rcritten(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5246/head:pr5246 git checkout pr5246

5 months

2
1
0 / 0

2021

2020

2019

2018

2017

FreeIPA-devel November 2020