URL: https://github.com/freeipa/freeipa/pull/4061
Author: RichardKalinec
Title: #4061: doc/designs: Add a design page for application-specific passwords
Action: opened
PR body:
"""
This design page describes a new enhancement: application-specific
passwords and permissions management for them. Users will be able to
have additional passwords besides the primary one, and set permissions
for them specifying what systems and services will each
application-specific password have access to. Application-specific
passwords will also be usable with other authentication mechanisms
incorporating passwords, namely otp, radius and hardened. They will
also be supported by ipa-kdb for Kerberos authentication.
https://pagure.io/freeipa/issue/4510
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4061/head:pr4061
git checkout pr4061
URL: https://github.com/freeipa/freeipa/pull/3275
Author: marcus2376
Title: #3275: Issue 7975 - Accept 389-ds JSON replication status messages
Action: opened
PR body:
"""
Description:
389-ds now stores a replication agreement status message in a JSON string in a new attribute:
replicaLastInitStatusJSON
replicaLastUpdateStatusJSON
The original status attributes' values are not changing at this time, but there are plans to do so eventually as the old status format is confusing.
http://www.port389.org/docs/389ds/design/repl-agmt-status-design.htmlhttps://pagure.io/freeipa/issue/7975
Reviewed by: ?
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/3275/head:pr3275
git checkout pr3275
URL: https://github.com/freeipa/freeipa/pull/3774
Author: stanislavlevin
Title: #3774: [DNSSEC] WIP Allow using of a custom OpenSSL engine for BIND
Action: opened
PR body:
"""
For now Debian, Fedora, RHEL, etc. build BIND with 'native PKCS11'
support. Till recently, that was the strict requirement of DNSSEC.
The problem is that this restricts cross-platform features of FreeIPA.
With the help of libp11, which provides `pkcs11` engine plugin for
the OpenSSL library for accessing PKCS11 modules in a semi-
transparent way, FreeIPA could utilize OpenSSL version of BIND.
BIND in turn provides ability to specify the OpenSSL engine on the
command line of `named` and all the BIND `dnssec-*` tools by using
the `-E engine_name`.
Currently, this PR implements just an abstract ability.
Actual configuration and tests results could be seen in my fork Azure Pipelines:
https://dev.azure.com/slev0400/slev/_build/results?buildId=627&view=logs&j=…https://dev.azure.com/slev0400/slev/_build/results?buildId=627&view=logs&j=…
Related: https://pagure.io/freeipa/issue/8094
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/3774/head:pr3774
git checkout pr3774
URL: https://github.com/freeipa/freeipa/pull/3544
Author: mulatinho
Title: #3544: [WIP] ipa-join: allowing call with jsonrpc into freeipa API
Action: opened
PR body:
"""
- Adding JSON-C and LibCURL library into configure.ac and Makefile.am
- Creating a API call with option '-j' or '--jsonrpc' to make host join on FreeIPA with JSONRPC and libCURL.
TODO: unenroll process with JSONRPC.
To test the call:
# kinit admin
# ipa-join -s server.freeipa.ipadomain -j
Debug:
# ipa-join -s server.freeipa.ipadomain -j -d
Related: https://pagure.io/freeipa/issue/7966
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/3544/head:pr3544
git checkout pr3544
URL: https://github.com/freeipa/freeipa/pull/4102
Author: yrro
Title: #4102: [WIP] Debian: write out only one CA certificate per file
Action: opened
PR body:
"""
ca-certificates populates /etc/ssl/certs with symlinks to its input
files and then runs 'openssl rehash' to create the symlinks that libssl
uses to look up a CA certificate to see if it is trused.
'openssl rehash' ignores any files that contain more than one
certificate: <https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=945274>.
With this change, we write out trusted CA certificates to
/usr/local/share/ipa-ca, one certificate per file.
Fixes: https://pagure.io/freeipa/issue/8106
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4102/head:pr4102
git checkout pr4102
URL: https://github.com/freeipa/freeipa/pull/3924
Author: wladich
Title: #3924: ipatests: add test for sssd behavior with disabled trustdomains
Action: opened
PR body:
"""
When a trusted subdomain is disabled in ipa, users from this domain should not be able to access resources ipa resources.
Related to: https://pagure.io/SSSD/sssd/issue/4078
This PR also adds
* utility function for getting sssd version on remore host
* a context manager for declaring part of test as xfail
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/3924/head:pr3924
git checkout pr3924
URL: https://github.com/freeipa/freeipa/pull/4193
Author: frasertweedale
Title: #4193: [ACME] Add ipa-ca.$DOMAIN alias to IPA server HTTP certificates
Action: opened
PR body:
"""
First PR for the ACME effort. This is needed so ACME clients can reach IPA
ACME service via the ``ipa-ca.$DOMAIN`` DNS name (ACME requires TLS).
This change is also reasonable, independent of the ACME effort.
https://pagure.io/freeipa/issue/8186
```
83a5a3aa6 (Fraser Tweedale, 11 hours ago)
upgrade: add ipa-ca.$DOMAIN alias to HTTP certificate
If the HTTP certificate does not have the ipa-ca.$DOMAIN dNSName, resubmit
the certificate request to add the name. This action is performed after
the tracking request has already been updated.
Note: due to https://pagure.io/certmonger/issue/143 the resubmitted
request, if it does not immediately succeed and if the notAfter date of the
current certificate is still far off, the request could get stuck in state
CA_UNREACHABLE until a Certmonger restart. There is not much we can do
about that in the middle of ipa-server-upgrade.
Part of: https://pagure.io/freeipa/issue/8186
efe071539 (Fraser Tweedale, 12 hours ago)
httpinstance: add ipa-ca.$DOMAIN alias in initial request
For new server/replica installation, issue the HTTP server certificate with
the 'ipa-ca.$DOMAIN' SAN dNSName. This is accomplished by adding the name
to the Certmonger tracking request.
Part of: https://pagure.io/freeipa/issue/8186
feea49420 (Fraser Tweedale, 3 days ago)
cert-request: allow ipa-ca.$DOMAIN dNSName for IPA servers
ACME support requires TLS and we want ACME clients to access the service
via the ipa-ca.$DOMAIN DNS name. So we need to add the ipa-ca.$DOMAIN
dNSName to IPA servers' HTTP certificates. To facilitiate this, add a
special case to the cert-request command processing. The rule is:
- if the dnsName being validated is "ipa-ca.$DOMAIN"
- and the subject principal is an "HTTP/..." service
- and the subject principal's hostname is an IPA server
Then that name (i.e. "ipa-ca.$DOMAIN") is immediately allowed. Otherwise
continue with the usual dnsName validation.
Part of: https://pagure.io/freeipa/issue/8186
62129a44a (Fraser Tweedale, 3 days ago)
httpinstance: add fqdn and ipa-ca alias to Certmonger request
When (re-)tracking the HTTP certificate, explicitly add the server FQDN and
ipa-ca.$DOMAIN DNS names to the Certmonger tracking request.
Part of: https://pagure.io/freeipa/issue/8186
fe3489cf4 (Fraser Tweedale, 4 days ago)
certmonger: support dnsname as request search criterion
We need to be able to filter Certmonger tracking requests by the DNS names
defined for the request. The goal is to add the
'ipa-ca.$DOMAIN' alias to the HTTP certificate tracking requests, so we
will use that name as a search criterion. Implement support for this.
As a result of this commit it will be easy to add support for subset match
of other Certmonger request list properties. Just add the property name to
the ARRAY_PROPERTIES list (and update the
'criteria' description in the module docstring!)
Part of: https://pagure.io/freeipa/issue/8186
ea6d31bdf (Fraser Tweedale, 4 days ago)
certmonger: move 'criteria' description to module docstring
The 'criteria' parameter is used by several subroutines in the
ipalib.install.certmonger module. It has incomplete documentation spread
across several of these subroutines. Move the documentation to the module
docstring and reference it where appropriate.
Part of: https://pagure.io/freeipa/issue/8186
aa7b88ad6 (Fraser Tweedale, 4 days ago)
certmonger: avoid mutable default argument
certmonger._get_requests has a mutable default argument. Although at the
present time it is never modified, this is an antipattern to be avoided.
Part of: https://pagure.io/freeipa/issue/8186
```
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4193/head:pr4193
git checkout pr4193
URL: https://github.com/freeipa/freeipa/pull/4158
Author: tiran
Title: #4158: Add pytest OpenSSH transport with password
Action: opened
PR body:
"""
The pytest_multihost transport does not provide password-based
authentication for OpenSSH transport. The OpenSSH command line tool has
no API to pass in a password securely.
The patch implements a custom transport that uses sshpass hack. It is
not recommended for production but good enough for testing.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4158/head:pr4158
git checkout pr4158
URL: https://github.com/freeipa/freeipa/pull/2106
Author: abbra
Title: #2106: ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
Action: opened
PR body:
"""
Password changes performed by cn=Directory Manager are excluded from
password policy checks according to [1]. This is correctly handled by
ipa-pwd-extop in case of a normal Kerberos principal in IPA. However,
non-kerberos accounts were not excluded from the check.
As result, password updates for PKI CA admin account in o=ipaca were
failing if a password policy does not allow a password reuse. We are
re-setting the password for PKI CA admin in ipa-replica-prepare in case
the original directory manager's password was updated since creation of
`cacert.p12`.
Do password policy check for non-Kerberos accounts only if it was set by
a regular user or admin. Changes performed by a cn=Directory Manager and
passsync managers should be excluded from the policy check.
Fixes: https://pagure.io/freeipa/issue/7181
Signed-off-by: Alexander Bokovoy <abokovoy(a)redhat.com>
[1] https://access.redhat.com/documentation/en-us/red_hat_directory_server/10/h…
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2106/head:pr2106
git checkout pr2106
URL: https://github.com/freeipa/freeipa/pull/4211
Author: wladich
Title: #4211: [Backport][ipa-4-7] ipatests: add test_trust suite to nightly runs
Action: opened
PR body:
"""
This is a manual backport of #4208
The test suite test_trust was missing in nightly definitions
because PR-CI was not able to provision multi-AD topology.
Now that PR-CI is updated, we can start executing this test suite.
It is not reasonable to add it to gating as this suite is
time consuming like other tests requiring provisioning of AD instances.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4211/head:pr4211
git checkout pr4211
URL: https://github.com/freeipa/freeipa/pull/4000
Author: mrizwan93
Title: #4000: ipatests: Test if ipa-backup throws error if /var/lib/ipa/ runs out of space
Action: opened
PR body:
"""
ipa-backup throws error when /var/lib/ipa runs out of space. Earlier
the error was not so clear. Fix mentions about insufficient space.
related : https://pagure.io/freeipa/issue/7647
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4000/head:pr4000
git checkout pr4000
URL: https://github.com/freeipa/freeipa/pull/3955
Author: wladich
Title: #3955: ipatests: add test for SSSD updating expired cache items
Action: opened
PR body:
"""
**Patch 1:**
New test checks that sssd updates expired cahce values both for IPA domain and trusted AD domain.
Related to: https://pagure.io/SSSD/sssd/issue/4012
**Patch 2:**
ipatests: refactor sssd tests for cached_auth_timeout option
No changes in test scenarios or coverage. Changes:
* Renamed parameter user => user_origin for consistency with new tests
* evaluate user name once per testcase to reduce copy-pastes
* evauate wait time in a more natural way
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/3955/head:pr3955
git checkout pr3955
URL: https://github.com/freeipa/freeipa/pull/4277
Author: flo-renaud
Title: #4277: ipa-adtrust-install: run remote configuration for new agents
Action: opened
PR body:
"""
### ipa-adtrust-install: run remote configuration for new agents
When ipa-adtrust-install is run, the tool detects masters that are
not enabled as trust agents and propose to configure them. With the
current code, the Schema Compat plugin is not enabled on these new
trust agents and a manual restart of LDAP server + SSSD is required.
With this commit, ipa-adtrust-install now calls remote code on the new
agents through JSON RPC api, in order to configure the missing parts.
On the remote agent, the command is using DBus and oddjob to launch
a new command,
/usr/sbin/ipa-trust-enable-agent [--enable-compat]
This command configures the Schema Compat plugin if --enable-compat is
provided, then restarts LDAP server and SSSD.
If the remote agent is an older version and does not support remote
enablement, or if the remote server is not responding, the tool
ipa-adtrust-install prints a WARNING explaining the steps that need
to be manually executed in order to complete the installation, and
exits successfully (keeping the current behavior).
Fixes: https://pagure.io/freeipa/issue/7600
### ipatests: add test for ipa-adtrust-install --add-agents
Add tests checking the behavior of ipa-adtrust-install when
adding trust agents:
- try adding a trust agent when the remote node is stopped.
The installer must detect that he's not able to run the remote
commands and print a WARNING.
- try adding a trust agent when the remote node is running.
The WARNING must not be printed as the remote configuration is done.
- try adding a trust agent with --enable-compat.
The WARNING must not be printed and the Schema Compatibility plugin
must be enabled (the entries
cn=users/groups,cn=Schema Compatibility,cn=plugins,cn=config
must contain a new attribute schema-compat-lookup-nsswitch
(=user/group).
Notes:
- this PR will have to be rebased after PR #4260 is merged as it's modifying the same test suite
- TBD: add a SELinux policy rule allowing to call the remote command when #4251 is merged
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4277/head:pr4277
git checkout pr4277
URL: https://github.com/freeipa/freeipa/pull/4260
Author: wladich
Title: #4260: ipatests: add test for warning text displayed after AD trust agents setup
Action: opened
PR body:
"""
This PR created new suite for testing ipa-adtrust-install utility.
It adds test for proper warning text after setting up AD trust agents and moves one existing from test_commands test suite.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4260/head:pr4260
git checkout pr4260
URL: https://github.com/freeipa/freeipa/pull/3509
Author: frasertweedale
Title: #3509: [Backport][ipa-4-7] Profile-based system cert renewal
Action: opened
PR body:
"""
Manual backport of #3316 to ipa-4-7. We
may need to backport this change all the way to ipa-4-6 to allow us to change
the IPA RA certificate profile on older releases.
See also https://github.com/freeipa/freeipa/pull/3508 which is the ipa-4-7 backport PR.
There were some trivial conflicts. There were substantive conflicts for two patches,
but these were due to the switch from mod_nss to mod_ssl, and from NSSDB-based
IPA RA cert to PEM files. Those patches were not relevant, and were dropped.
https://pagure.io/freeipa/issue/7991
Do not rely on CI only; I will have to test this change myself so I'll add WIP
label, and remove it when I'm satisfied.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/3509/head:pr3509
git checkout pr3509
URL: https://github.com/freeipa/freeipa/pull/3508
Author: frasertweedale
Title: #3508: [Backport][ipa-4-7] Profile-based system cert renewal
Action: opened
PR body:
"""
Manual backport of https://github.com/freeipa/freeipa/pull/3316 to ipa-4-7. We
may need to backport this change all the way to ipa-4-6 to allow us to change
the IPA RA certificate profile on older releases. Currently this change is on
master and ipa-4-8, so ipa-4-7 is the next step.
There were some trivial conflicts. The only substantive conflicts were in
`dogtaginstance.py`. These were resolved by cherry-picking
8686cd3b4b69f725aee05c9cdd3034d7436055d3 ahead of the original patchset.
https://pagure.io/freeipa/issue/7991
Do not rely on CI only; I will have to test this change myself so I'll add WIP
label, and remove it when I'm satisfied.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/3508/head:pr3508
git checkout pr3508
URL: https://github.com/freeipa/freeipa/pull/4283
Author: rcritten
Title: #4283: [Backport][ipa-4-8] Fix divide-by-zero when svc weight is 0 for all masters in location
Action: opened
PR body:
"""
This PR was opened automatically because PR #4278 was pushed to master and backport to ipa-4-8 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4283/head:pr4283
git checkout pr4283
URL: https://github.com/freeipa/freeipa/pull/3976
Author: fcami
Title: #3976: locations.py: fix divide by 0
Action: opened
PR body:
"""
If all IPA servers (or the first server) of a location have
service weights == 0, the sum of the weights is zero leading
to a division by zero in relative weight calculation.
Detect the situation and set relative weight to 0 in this case.
Fixes: https://pagure.io/freeipa/issue/8135
Signed-off-by: François Cami <fcami(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/3976/head:pr3976
git checkout pr3976
URL: https://github.com/freeipa/freeipa/pull/4278
Author: rcritten
Title: #4278: Fix divide-by-zero when svc weight is 0 for all masters in location
Action: opened
PR body:
"""
Fix div-by-zero when svc weight is 0 for all masters in location
The relative service weight output tries to show the relative
chance that any given master in a locaiton will be picked. This
didn't account for all masters having a weight of 0 which would
result in a divide-by-zero error.
Implement the following rules:
1. If all masters have weight == 0 then all are equally
weighted.
2. If any masters have weight == 0 then they have an
extremely small chance of being chosen, percentage is
0.1.
3. Otherwise it's percentage change is based on the sum of
the weights of non-zero masters.
https://pagure.io/freeipa/issue/8135
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4278/head:pr4278
git checkout pr4278
URL: https://github.com/freeipa/freeipa/pull/4265
Author: amore17
Title: #4265: [Backport][ipa-4-6] ipatests: SSSD should fetch external groups without any limit.
Action: opened
PR body:
"""
This is manual back-port of : #4077
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4265/head:pr4265
git checkout pr4265
URL: https://github.com/freeipa/freeipa/pull/4257
Author: amore17
Title: #4257: [Backport][ipa-4-7] ipatests: SSSD should fetch external groups without any limit.
Action: opened
PR body:
"""
This is manual back-port of : #4077
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4257/head:pr4257
git checkout pr4257
URL: https://github.com/freeipa/freeipa/pull/4276
Author: flo-renaud
Title: #4276: [Backport][ipa-4-8] Fix regression in test_webui/test_translation.py
Action: opened
PR body:
"""
This PR was opened automatically because PR #4264 was pushed to master and backport to ipa-4-8 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4276/head:pr4276
git checkout pr4276
URL: https://github.com/freeipa/freeipa/pull/4281
Author: ssidhaye
Title: #4281: [Backport][ipa-4-6] Added a test to check if ipa host-find --pkey-only does not return SSH public key
Action: opened
PR body:
"""
Manual backport of PR 4181
as the automated backport (PR 4222) failed to strings passed to
host5.update were not unicode.
Pagure Link : https://pagure.io/freeipa/issue/8029
Signed-off-by: Sumedh Sidhaye <ssidhaye(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4281/head:pr4281
git checkout pr4281
URL: https://github.com/freeipa/freeipa/pull/4275
Author: flo-renaud
Title: #4275: [Backport][ipa-4-8] ipaserver/plugins/hbacrule: Add HBAC to memberservice_hbacsvc* labels
Action: opened
PR body:
"""
This PR was opened automatically because PR #3849 was pushed to master and backport to ipa-4-8 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4275/head:pr4275
git checkout pr4275
URL: https://github.com/freeipa/freeipa/pull/4261
Author: stanislavlevin
Title: #4261: [Azure] Add support for multi-envs tests
Action: opened
PR body:
"""
- Allow running integration tests
- Make it possible to configure distro-specific stuff
- Add support for testing multi-IPA environments
Fixes: https://pagure.io/freeipa/issue/8202
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4261/head:pr4261
git checkout pr4261
URL: https://github.com/freeipa/freeipa/pull/4273
Author: rcritten
Title: #4273: [Backport][ipa-4-8] ipatest: Test if certmonger reads the token in HSM
Action: opened
PR body:
"""
This PR was opened automatically because PR #4150 was pushed to master and backport to ipa-4-8 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4273/head:pr4273
git checkout pr4273
URL: https://github.com/freeipa/freeipa/pull/3849
Author: t-woerner
Title: #3849: ipaserver/plugins/hbacrule: Add HBAC to memberservice_hbacsvc* labels
Action: opened
PR body:
"""
The labels for memberservice_hbacsvc and memberservice_hbacsvcgroup are
only "Services" and "Service Groups" but they should be "HBAC Services"
and "HBAC Service Groups".
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/3849/head:pr3849
git checkout pr3849
URL: https://github.com/freeipa/freeipa/pull/4150
Author: mrizwan93
Title: #4150: ipatest: Test if certmonger reads the token in HSM
Action: opened
PR body:
"""
This is to ensure added HSM support for FreeIPA. This test adds
certificate with sofhsm token and checks if certmonger is tracking
it.
related : https://pagure.io/certmonger/issue/125
Signed-off-by: Mohammad Rizwan Yusuf <myusuf(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4150/head:pr4150
git checkout pr4150
URL: https://github.com/freeipa/freeipa/pull/4266
Author: rcritten
Title: #4266: [Backport][ipa-4-8] ipatests: Test AES SHA 256 and 384 Kerberos enctypes enabled
Action: opened
PR body:
"""
This PR was opened automatically because PR #4220 was pushed to master and backport to ipa-4-8 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4266/head:pr4266
git checkout pr4266
URL: https://github.com/freeipa/freeipa/pull/4264
Author: flo-renaud
Title: #4264: Fix regression in test_webui/test_translation.py
Action: opened
PR body:
"""
Nightly failure detected in test_webui/test_translation.py (see PR #[4263](https://github.com/freeipa/freeipa/pull/4263)) was introduced by commit e4966f9 which fixed a string in ssbrowser.html.
The content of the page https://master.example.com/ipa/config/ssbrowser.html is taken from ssbrowser.html when javascript is disabled, but from ipaserver/plugins/internal.py when javascript is enabled.
Need to update internal.py to be consistent.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4264/head:pr4264
git checkout pr4264
URL: https://github.com/freeipa/freeipa/pull/4255
Author: amore17
Title: #4255: [Backport][ipa-4-6] ipatests: Test for ipa-extdom-extop plugin should allow @ in group name.
Action: opened
PR body:
"""
This is manual back-port of : #4191
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4255/head:pr4255
git checkout pr4255
URL: https://github.com/freeipa/freeipa/pull/4259
Author: rcritten
Title: #4259: [Backport][ipa-4-8] Don't fully quality the FQDN in ssbrowser.html for Chrome
Action: opened
PR body:
"""
This PR was opened automatically because PR #4252 was pushed to master and backport to ipa-4-8 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4259/head:pr4259
git checkout pr4259
URL: https://github.com/freeipa/freeipa/pull/4244
Author: amore17
Title: #4244: [Backport][ipa-4-7] ipatests: Test for ipa-extdom-extop plugin should allow @ in group name.
Action: opened
PR body:
"""
This is manual back-port of : #4191
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4244/head:pr4244
git checkout pr4244
URL: https://github.com/freeipa/freeipa/pull/4243
Author: amore17
Title: #4243: [Backport][ipa-4-8] ipatests: Test for ipa-extdom-extop plugin should allow @ in group name.
Action: opened
PR body:
"""
This is manual back-port of : #4191
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4243/head:pr4243
git checkout pr4243
URL: https://github.com/freeipa/freeipa/pull/4250
Author: abbra
Title: #4250: [Backport][ipa-4-8] kdb: make sure audit_as_req callback signature change is preserved
Action: opened
PR body:
"""
This PR was opened automatically because PR #4249 was pushed to master and backport to ipa-4-8 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4250/head:pr4250
git checkout pr4250
URL: https://github.com/freeipa/freeipa/pull/4249
Author: abbra
Title: #4249: kdb: make sure audit_as_req callback signature change is preserved
Action: opened
PR body:
"""
audit_as_req() callback has changed its signature with MIT krb5 commit
20991d55efbe1f987c1dbc1065f2d58c8f34031b in 2017, we should preserve the
change for any newer DAL versions. Otherwise audit_as_req() callback
would reference wrong data and we might crash.
Fixes: https://pagure.io/freeipa/issue/8200
Signed-off-by: Alexander Bokovoy <abokovoy(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4249/head:pr4249
git checkout pr4249
URL: https://github.com/freeipa/freeipa/pull/4242
Author: abbra
Title: #4242: [Backport][ipa-4-8] dnsrecord: Treat empty list arguments correctly
Action: opened
PR body:
"""
This PR was opened automatically because PR #4234 was pushed to master and backport to ipa-4-8 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4242/head:pr4242
git checkout pr4242
URL: https://github.com/freeipa/freeipa/pull/4241
Author: abbra
Title: #4241: [Backport][ipa-4-8] Remove dependency on custodia package
Action: opened
PR body:
"""
This PR was opened automatically because PR #4235 was pushed to master and backport to ipa-4-8 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4241/head:pr4241
git checkout pr4241
URL: https://github.com/freeipa/freeipa/pull/4239
Author: abbra
Title: #4239: [Backport][ipa-4-8] ipatests: Allow zero-length arguments
Action: opened
PR body:
"""
This PR was opened automatically because PR #4149 was pushed to master and backport to ipa-4-8 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4239/head:pr4239
git checkout pr4239
URL: https://github.com/freeipa/freeipa/pull/4240
Author: abbra
Title: #4240: [Backport][ipa-4-8] ipa-client-automount: call save_domain() for each change
Action: opened
PR body:
"""
This PR was opened automatically because PR #4212 was pushed to master and backport to ipa-4-8 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4240/head:pr4240
git checkout pr4240
URL: https://github.com/freeipa/freeipa/pull/4222
Author: flo-renaud
Title: #4222: [Backport][ipa-4-6] Added a test to check if ipa host-find --pkey-only does not return SSH public key
Action: opened
PR body:
"""
This PR was opened automatically because PR #4181 was pushed to master and backport to ipa-4-6 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4222/head:pr4222
git checkout pr4222
URL: https://github.com/freeipa/freeipa/pull/4208
Author: wladich
Title: #4208: ipatests: add test_trust suite to nightly runs
Action: opened
PR body:
"""
The test suite test_trust was missing in nightly definitions
because PR-CI was not able to provision multi-AD topology.
Now that PR-CI is updated, we can start executing this test suite.
It is not reasonable to add it to gating as this suite is
time consuming like other tests requiring provisioning of AD instances.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4208/head:pr4208
git checkout pr4208
URL: https://github.com/freeipa/freeipa/pull/3999
Author: smartsammler
Title: #3999: Fix typo in idrange.py docstring
Action: opened
PR body:
"""
In my opinion the sentence makes more sense if one replaces this `id` with a `is`.
If this is not what was meant, then I would be pleased if the sentence could be rephrased, so that I get it right. Thank you.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/3999/head:pr3999
git checkout pr3999
URL: https://github.com/freeipa/freeipa/pull/4234
Author: tiran
Title: #4234: dnsrecord: Treat empty list arguments correctly
Action: opened
PR body:
"""
dnsrecord_del fails when one of the record arguments is an empty list:
AttrValueNotFound("AAAA record does not contain 'None'",)
The problem is caused by the fact that LDAPEntry.__getitem__ returns None
for empty lists. The code in the plugin considers None as a single entry
and maps it to vals = [None].
The patch maps None to empty list.
Fixes: https://pagure.io/freeipa/issue/8196
Signed-off-by: Christian Heimes <cheimes(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4234/head:pr4234
git checkout pr4234
URL: https://github.com/freeipa/freeipa/pull/4235
Author: tiran
Title: #4235: Remove dependency on custodia package
Action: opened
PR body:
"""
ipa-server no longer use any files and features from the custodia
package. The python3-custodia package provides all Custodia features for
ipa-custodia.service.
Signed-off-by: Christian Heimes <cheimes(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4235/head:pr4235
git checkout pr4235
URL: https://github.com/freeipa/freeipa/pull/4212
Author: fcami
Title: #4212: ipa-client-automount: call save_domain() for each change
Action: opened
PR body:
"""
Call sssdconfig.save_domain(domain) after each configuration
change during ipa-client-automount --uninstall.
Previously, sssdconfig.save_domain(domain) was called only
outside of the domain detection loop which changed the domain
configuration. This introduced issues as this method's behavior
is only consistent when configuration items are removed in a
certain order: https://pagure.io/SSSD/sssd/issue/4149
Plus, it is more correct to save the configuration from within
the loop if ever we support multiple domains.
Fixes: https://pagure.io/freeipa/issue/8190
Signed-off-by: François Cami <fcami(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4212/head:pr4212
git checkout pr4212
URL: https://github.com/freeipa/freeipa/pull/4149
Author: stanislavlevin
Title: #4149: ipatests: Allow zero-length arguments
Action: opened
PR body:
"""
Currently, such arguments are eaten by 'ipa-run-tests' script as they
are not quoted.
For example, ```running ipa-run-tests -k ''```
results in the actual invocation would be like as:
```
['/bin/sh',
'--norc',
'--noprofile',
'-c',
'--',
"/usr/bin/python3 -c 'import sys,pytest;sys.exit(pytest.main())' -o "
'cache_dir=/tmp/pytest-of-root/pytest-12/test_ipa_run_tests_empty_expression0/.pytest_cache '
'--confcutdir=/usr/lib64/python3/site-packages/ipatests -k ']
```
Note: expressions or marks could be empty as a result of the building
of command line args by more high-level tools, scripts, etc.
So, a short-termed solution is the quotting of zero-length arguments.
Fixes: https://pagure.io/freeipa/issue/8173
Signed-off-by: Stanislav Levin <slev(a)altlinux.org>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4149/head:pr4149
git checkout pr4149
URL: https://github.com/freeipa/freeipa/pull/4210
Author: wladich
Title: #4210: [Backport][ipa-4-7] ipatests: add test_trust suite to nightly runs
Action: opened
PR body:
"""
This is a manual backport of #4208
The test suite test_trust was missing in nightly definitions
because PR-CI was not able to provision multi-AD topology.
Now that PR-CI is updated, we can start executing this test suite.
It is not reasonable to add it to gating as this suite is
time consuming like other tests requiring provisioning of AD instances.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4210/head:pr4210
git checkout pr4210
URL: https://github.com/freeipa/freeipa/pull/4209
Author: wladich
Title: #4209: [Backport][ipa-4-8] ipatests: add test_trust suite to nightly runs
Action: opened
PR body:
"""
This is a manual backport of #4208
The test suite test_trust was missing in nightly definitions
because PR-CI was not able to provision multi-AD topology.
Now that PR-CI is updated, we can start executing this test suite.
It is not reasonable to add it to gating as this suite is
time consuming like other tests requiring provisioning of AD instances.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4209/head:pr4209
git checkout pr4209
URL: https://github.com/freeipa/freeipa/pull/4237
Author: abbra
Title: #4237: [Backport][ipa-4-8] adtrust: print DNS records for external DNS case after role is enabled
Action: opened
PR body:
"""
This PR was opened automatically because PR #4221 was pushed to master and backport to ipa-4-8 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4237/head:pr4237
git checkout pr4237
URL: https://github.com/freeipa/freeipa/pull/4221
Author: abbra
Title: #4221: adtrust: print DNS records for external DNS case after role is enabled
Action: opened
PR body:
"""
We cannot gather information about required DNS records before "ADTrust
Controller" role is enabled on this server. As result, we need to call
the step to add DNS records after the role was enabled.
Fixes: https://pagure.io/freeipa/issue/8192
Signed-off-by: Alexander Bokovoy <abokovoy(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4221/head:pr4221
git checkout pr4221
URL: https://github.com/freeipa/freeipa/pull/4236
Author: netoarmando
Title: #4236: [Backport][ipa-4-8] Migrate xunit/unittest/nose tests to Pytest
Action: opened
PR body:
"""
This PR was opened automatically because PR #3783 was pushed to master and backport to ipa-4-8 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4236/head:pr4236
git checkout pr4236
URL: https://github.com/freeipa/freeipa/pull/4224
Author: flo-renaud
Title: #4224: [Backport][ipa-4-7] Added a test to check if ipa host-find --pkey-only does not return SSH public key
Action: opened
PR body:
"""
This PR was opened automatically because PR #4181 was pushed to master and backport to ipa-4-7 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4224/head:pr4224
git checkout pr4224
URL: https://github.com/freeipa/freeipa/pull/4223
Author: flo-renaud
Title: #4223: [Backport][ipa-4-8] Added a test to check if ipa host-find --pkey-only does not return SSH public key
Action: opened
PR body:
"""
This PR was opened automatically because PR #4181 was pushed to master and backport to ipa-4-8 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4223/head:pr4223
git checkout pr4223
URL: https://github.com/freeipa/freeipa/pull/3783
Author: stanislavlevin
Title: #3783: Migrate xunit-style setups to fixtures
Action: opened
PR body:
"""
This converts `setup*`/`teardown*` functions/methods to the
powerfull pytest fixtures:
```
The purpose of test fixtures is to provide a fixed baseline upon
which tests can reliably and repeatedly execute. pytest fixtures
offer dramatic improvements over the classic xUnit style of
setup/teardown functions:
- fixtures have explicit names and are activated by declaring their
use from test functions, modules, classes or whole projects.
- fixtures are implemented in a modular manner, as each fixture name
triggers a fixture function which can itself use other fixtures.
- fixture management scales from simple unit to complex functional
testing, allowing to parametrize fixtures and tests according to
configuration and component options, or to re-use fixtures across
function, class, module or whole test session scopes.
```
One of the transition patterns is as follows:
```diff
class TestFooBar(XMLRPC_test):
- @classmethod
- def setup_class(cls):
- super(TestFooBar, cls).setup_class()
+ @pytest.fixture(autouse=True, scope="class")
+ def foo_bar_setup(self, request, xmlrpc_setup):
+ cls = request.cls
cls.beforemethod()
- @classmethod
- def teardown_class(cls):
- cls.aftermethod()
- super(TestFooBar, cls).teardown_class()
+ def fin():
+ cls.aftermethod()
+ request.addfinalizer(fin)
```
To achieve predictable results for initialization and destroy of
Pytest fixtures, ones have to employ the fixtures' interdependencies.
This is the first part of the work to remove the mixing of test idioms in the
IPA test suite.
Related: https://pagure.io/freeipa/issue/7989
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/3783/head:pr3783
git checkout pr3783
URL: https://github.com/freeipa/freeipa/pull/4232
Author: abbra
Title: #4232: [Backport][ipa-4-6] install/updates: move external members past schema compat update
Action: opened
PR body:
"""
There is an ordering discrepancy because the base compat tree
configuration is in install/updates/80-schema_compat.update so it is ran
after 50-externalmembers.update. And since at that point
cn=groups,cn=Schema ... does not exist yet, external members
configuration is not applied.
Move it around to make sure it is applied after Schema Compatibility
plugin configuration is created.
Fixes: https://pagure.io/freeipa/issue/8193
Signed-off-by: Alexander Bokovoy <abokovoy(a)redhat.com>
Reviewed-By: Florence Blanc-Renaud <flo(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4232/head:pr4232
git checkout pr4232
URL: https://github.com/freeipa/freeipa/pull/4231
Author: abbra
Title: #4231: [backport 4.7] install/updates: move external members past schema compat update
Action: opened
PR body:
"""
There is an ordering discrepancy because the base compat tree
configuration is in install/updates/80-schema_compat.update so it is ran
after 50-externalmembers.update. And since at that point
cn=groups,cn=Schema ... does not exist yet, external members
configuration is not applied.
Move it around to make sure it is applied after Schema Compatibility
plugin configuration is created.
Fixes: https://pagure.io/freeipa/issue/8193
Signed-off-by: Alexander Bokovoy <abokovoy(a)redhat.com>
Reviewed-By: Florence Blanc-Renaud <flo(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4231/head:pr4231
git checkout pr4231
URL: https://github.com/freeipa/freeipa/pull/4230
Author: flo-renaud
Title: #4230: [Backport][ipa-4-8] install/updates: move external members past schema compat update
Action: opened
PR body:
"""
This PR was opened automatically because PR #4229 was pushed to master and backport to ipa-4-8 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4230/head:pr4230
git checkout pr4230
URL: https://github.com/freeipa/freeipa/pull/4229
Author: abbra
Title: #4229: install/updates: move external members past schema compat update
Action: opened
PR body:
"""
There is an ordering discrepancy because the base compat tree
configuration is in install/updates/80-schema_compat.update so it is ran
after 50-externalmembers.update. And since at that point
cn=groups,cn=Schema ... does not exist yet, external members
configuration is not applied.
Move it around to make sure it is applied after Schema Compatibility
plugin configuration is created.
Fixes: https://pagure.io/freeipa/issue/8193
Signed-off-by: Alexander Bokovoy <abokovoy(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4229/head:pr4229
git checkout pr4229
URL: https://github.com/freeipa/freeipa/pull/4225
Author: flo-renaud
Title: #4225: [Backport][ipa-4-6] ipatests: fix modify_sssd_conf()
Action: opened
PR body:
"""
This PR was opened automatically because PR #4217 was pushed to master and backport to ipa-4-6 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4225/head:pr4225
git checkout pr4225
URL: https://github.com/freeipa/freeipa/pull/4226
Author: flo-renaud
Title: #4226: [Backport][ipa-4-7] ipatests: fix modify_sssd_conf()
Action: opened
PR body:
"""
This PR was opened automatically because PR #4217 was pushed to master and backport to ipa-4-7 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4226/head:pr4226
git checkout pr4226
URL: https://github.com/freeipa/freeipa/pull/4227
Author: flo-renaud
Title: #4227: [Backport][ipa-4-8] ipatests: fix modify_sssd_conf()
Action: opened
PR body:
"""
This PR was opened automatically because PR #4217 was pushed to master and backport to ipa-4-8 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4227/head:pr4227
git checkout pr4227
URL: https://github.com/freeipa/freeipa/pull/4217
Author: flo-renaud
Title: #4217: ipatests: fix modify_sssd_conf()
Action: opened
PR body:
"""
The method modify_sssd_conf() is copying a remote sssd.conf file
to the test controller then uses sssd python API to modify the
config file.
When the test controller does not have sssd-common package installed,
SSSDConfig() call fails because the API needs sssd schema in order
to properly parse the config file, and the schema files are provided
by sssd-common pkg.
The fix also downloads the files representing sssd schema and calls
SSSDConfig() with those files.
Note: we currently don't see any issue in the nightly tests because
the test controller is installed with sssd-common package but if you
run the tests as specified in https://www.freeipa.org/page/Testing
with a controller missing sssd-common, you will see the issue.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4217/head:pr4217
git checkout pr4217
URL: https://github.com/freeipa/freeipa/pull/4181
Author: ssidhaye
Title: #4181: Added a test to check if ipa host-find --pkey-only does not return SSH public key
Action: closed
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4181/head:pr4181
git checkout pr4181
URL: https://github.com/freeipa/freeipa/pull/4179
Author: flo-renaud
Title: #4179: ipatests: update packages for rawhide and updates-testing nightlies
Action: opened
PR body:
"""
The nightly tests for rawhide and updates_testing are expected
to set
update_packages: True
in all the job definitions to make sure that dnf/yum update is called
before starting the tests.
This tag was missing for some jobs, this commit fixes the issue.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4179/head:pr4179
git checkout pr4179
URL: https://github.com/freeipa/freeipa/pull/4205
Author: serg-cymbaluk
Title: #4205: [Backport][ipa-4-8] WebUI tests: Fix broken reference to parent facet in table record check
Action: opened
PR body:
"""
This PR was opened automatically because PR #4192 was pushed to master and backport to ipa-4-8 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4205/head:pr4205
git checkout pr4205
URL: https://github.com/freeipa/freeipa/pull/4192
Author: serg-cymbaluk
Title: #4192: WebUI tests: Fix broken reference to parent facet in table record check
Action: opened
PR body:
"""
Add decorator to has_record method which repeats the check when an active facet is changed (catch StaleElementReferenceException).
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4192/head:pr4192
git checkout pr4192
URL: https://github.com/freeipa/freeipa/pull/4196
Author: netoarmando
Title: #4196: [ipa-4-7] prci: Bump template version
Action: opened
PR body:
"""
This new image has SELinux enabled in permissive mode. After
this all tests skipped because SELinux was disabled will be
executed again.
Signed-off-by: Armando Neto <abiagion(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4196/head:pr4196
git checkout pr4196
URL: https://github.com/freeipa/freeipa/pull/4195
Author: netoarmando
Title: #4195: prci: Bump template version
Action: opened
PR body:
"""
This new image has SELinux enabled in permissive mode. After this all tests skipped because SELinux was disabled will be executed again.
Signed-off-by: Armando Neto <abiagion(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4195/head:pr4195
git checkout pr4195
URL: https://github.com/freeipa/freeipa/pull/4194
Author: netoarmando
Title: #4194: prci: Bump version of all templates
Action: opened
PR body:
"""
These new images have SELinux enabled in permissive mode. After this all tests skipped because SELinux was disabled will be executed again.
Signed-off-by: Armando Neto <abiagion(a)redhat.com>
Manual backports required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4194/head:pr4194
git checkout pr4194
URL: https://github.com/freeipa/freeipa/pull/4202
Author: serg-cymbaluk
Title: #4202: [Backport][ipa-4-7] WebUI tests: Fix 'Button is not displayed' exception
Action: opened
PR body:
"""
This PR was opened automatically because PR #4189 was pushed to master and backport to ipa-4-7 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4202/head:pr4202
git checkout pr4202
URL: https://github.com/freeipa/freeipa/pull/4203
Author: serg-cymbaluk
Title: #4203: [Backport][ipa-4-8] WebUI tests: Fix 'Button is not displayed' exception
Action: opened
PR body:
"""
This PR was opened automatically because PR #4189 was pushed to master and backport to ipa-4-8 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4203/head:pr4203
git checkout pr4203
URL: https://github.com/freeipa/freeipa/pull/4189
Author: serg-cymbaluk
Title: #4189: WebUI tests: Fix 'Button is not displayed' exception
Action: opened
PR body:
"""
Add a small timeout (up to 1 second) which allows to prevent exceptions when
WebDriver attempts to click a button before it is rendered.
Ticket: https://pagure.io/freeipa/issue/8169
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4189/head:pr4189
git checkout pr4189
URL: https://github.com/freeipa/freeipa/pull/4201
Author: menonsudhir
Title: #4201: Adding back temp config definition removed
Action: opened
PR body:
"""
fedora-latest/temp_commit section was removed from
temp_commit.yaml file while working with PR4108, adding it back.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4201/head:pr4201
git checkout pr4201
URL: https://github.com/freeipa/freeipa/pull/4198
Author: flo-renaud
Title: #4198: [Backport][ipa-4-8] "Unspecified GSS failure" should not be in log when directory is mounted.
Action: opened
PR body:
"""
This PR was opened automatically because PR #4178 was pushed to master and backport to ipa-4-8 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4198/head:pr4198
git checkout pr4198
URL: https://github.com/freeipa/freeipa/pull/4190
Author: edewata
Title: #4190: Removed hard-coded default profile subsystem class name
Action: opened
PR body:
"""
Previously in order to enable the LDAP profile subsystem
the ca_enable_ldap_profile_subsystem() would check the
current value of the profile subsystem class parameter in
CS.cfg. If the parameter was still set to the default value
(i.e. ProfileSubsystem), the code would change it to
LDAPProfileSubsystem.
There is a effort in PKI to clean up the profile subsystem
classes which may require changing the default value for
this parameter. However, this improvement is blocked since
the ca_enable_ldap_profile_subsystem() is implicitly assuming
that the default value will always be ProfileSubsystem.
This patch updated the code such that instead of checking
for a specific value that needs to be changed, it will check
whether it has the desired value already. This mechanism
will reduce potential conflicts with future PKI improvements.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4190/head:pr4190
git checkout pr4190
URL: https://github.com/freeipa/freeipa/pull/4178
Author: amore17
Title: #4178: "Unspecified GSS failure" should not be in log when mounted with krb5.
Action: opened
PR body:
"""
This is an integration test:
When there is directory mounted on the ipa-client with sec=krb5
Then no "Unspecified GSS failure" should be in logs.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4178/head:pr4178
git checkout pr4178
Hi,
An important part of our FreeIPA infrastructure is down due to
maintenance issues. We are working on recovering all PR-CI runners ASAP.
I'll send another email once our infra is fully up & running.
-Triviño.
URL: https://github.com/freeipa/freeipa/pull/4186
Author: abbra
Title: #4186: [Backport][ipa-4-8] DAL v8 fixups
Action: opened
PR body:
"""
This PR was opened automatically because PR #4184 was pushed to master and backport to ipa-4-8 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4186/head:pr4186
git checkout pr4186
URL: https://github.com/freeipa/freeipa/pull/4183
Author: flo-renaud
Title: #4183: [Backport][ipa-4-8] Support KDB DAL version 8.0
Action: opened
PR body:
"""
This PR was opened automatically because PR #4126 was pushed to master and backport to ipa-4-8 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4183/head:pr4183
git checkout pr4183