March 2020 - FreeIPA-devel - Fedora Mailing-Lists

[freeipa PR#4309][opened] [Backport][ipa-4-8] ipatests: fix TestSubCAkeyReplication

by flo-renaud

URL: https://github.com/freeipa/freeipa/pull/4309 Author: flo-renaud Title: #4309: [Backport][ipa-4-8] ipatests: fix TestSubCAkeyReplication Action: opened PR body: """ This PR was opened automatically because PR #4301 was pushed to master and backport to ipa-4-8 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/4309/head:pr4309 git checkout pr4309

4 years, 1 month

2
1
0 / 0

[freeipa PR#4310][opened] [Backport][ipa-4-6] ipatests: fix TestSubCAkeyReplication

by flo-renaud

URL: https://github.com/freeipa/freeipa/pull/4310 Author: flo-renaud Title: #4310: [Backport][ipa-4-6] ipatests: fix TestSubCAkeyReplication Action: opened PR body: """ This PR was opened manually because PR #4301 was pushed to master and backport to ipa-4-6 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/4310/head:pr4310 git checkout pr4310

4 years, 1 month

2
1
0 / 0

[freeipa PR#4311][opened] [Backport][ipa-4-8] Add freeipa-selinux subpackage

by tiran

URL: https://github.com/freeipa/freeipa/pull/4311 Author: tiran Title: #4311: [Backport][ipa-4-8] Add freeipa-selinux subpackage Action: opened PR body: """ This PR was opened automatically because PR #4251 was pushed to master and backport to ipa-4-8 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/4311/head:pr4311 git checkout pr4311

4 years, 1 month

2
1
0 / 0

[freeipa PR#4312][opened] [Backport][ipa-4-8] ipa-adtrust-install: run remote configuration for new agents

by flo-renaud

URL: https://github.com/freeipa/freeipa/pull/4312 Author: flo-renaud Title: #4312: [Backport][ipa-4-8] ipa-adtrust-install: run remote configuration for new agents Action: opened PR body: """ This is a manual backport of PR #4277 to ipa-4-8. The backport conflict was created by the nightly PRCI definitions. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/4312/head:pr4312 git checkout pr4312

4 years, 1 month

2
1
0 / 0

[freeipa PR#4300][opened] [testing_master_previous] Nightly PR

by freeipa-pr-ci

URL: https://github.com/freeipa/freeipa/pull/4300 Author: freeipa-pr-ci Title: #4300: [testing_master_previous] Nightly PR Action: opened PR body: """ None """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/4300/head:pr4300 git checkout pr4300

4 years, 1 month

1
1
0 / 0

[freeipa PR#4277][opened] ipa-adtrust-install: run remote configuration for new agents

by flo-renaud

URL: https://github.com/freeipa/freeipa/pull/4277 Author: flo-renaud Title: #4277: ipa-adtrust-install: run remote configuration for new agents Action: opened PR body: """ ### ipa-adtrust-install: run remote configuration for new agents When ipa-adtrust-install is run, the tool detects masters that are not enabled as trust agents and propose to configure them. With the current code, the Schema Compat plugin is not enabled on these new trust agents and a manual restart of LDAP server + SSSD is required. With this commit, ipa-adtrust-install now calls remote code on the new agents through JSON RPC api, in order to configure the missing parts. On the remote agent, the command is using DBus and oddjob to launch a new command, /usr/sbin/ipa-trust-enable-agent [--enable-compat] This command configures the Schema Compat plugin if --enable-compat is provided, then restarts LDAP server and SSSD. If the remote agent is an older version and does not support remote enablement, or if the remote server is not responding, the tool ipa-adtrust-install prints a WARNING explaining the steps that need to be manually executed in order to complete the installation, and exits successfully (keeping the current behavior). Fixes: https://pagure.io/freeipa/issue/7600 ### ipatests: add test for ipa-adtrust-install --add-agents Add tests checking the behavior of ipa-adtrust-install when adding trust agents: - try adding a trust agent when the remote node is stopped. The installer must detect that he's not able to run the remote commands and print a WARNING. - try adding a trust agent when the remote node is running. The WARNING must not be printed as the remote configuration is done. - try adding a trust agent with --enable-compat. The WARNING must not be printed and the Schema Compatibility plugin must be enabled (the entries cn=users/groups,cn=Schema Compatibility,cn=plugins,cn=config must contain a new attribute schema-compat-lookup-nsswitch (=user/group). Notes: - this PR will have to be rebased after PR #4260 is merged as it's modifying the same test suite - TBD: add a SELinux policy rule allowing to call the remote command when #4251 is merged """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/4277/head:pr4277 git checkout pr4277

4 years, 1 month

1
1
0 / 0

[freeipa PR#4251][opened] Add freeipa-selinux subpackage

by vmojzis

URL: https://github.com/freeipa/freeipa/pull/4251 Author: vmojzis Title: #4251: Add freeipa-selinux subpackage Action: opened PR body: """ Add freeipa-selinux subpackage containing selinux policy for FreeIPA server. This policy module will override the distribution policy. Policy files where extracted from https://github.com/fedora-selinux/selinux-policy See Independent policy project guidelines for more details about shipping custom SELinux policy. https://fedoraproject.org/wiki/SELinux/IndependentPolicy """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/4251/head:pr4251 git checkout pr4251

4 years, 1 month

2
1
0 / 0

[freeipa PR#4307][opened] [ipa-4-7] Travis: Enable IPv6 support for Docker

by netoarmando

URL: https://github.com/freeipa/freeipa/pull/4307 Author: netoarmando Title: #4307: [ipa-4-7] Travis: Enable IPv6 support for Docker Action: opened PR body: """ Environment variable `TRAVIS` is not accessible inside the container anymore, passing it to the container didn't have the same effect expected by the hack this commit removes. However, enabling IPv6, as described in https://github.com/travis-ci/travis-ci/issues/8891, was effective to execute the tests. Issue: https://pagure.io/freeipa/issue/8213 Signed-off-by: Armando Neto <abiagion(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/4307/head:pr4307 git checkout pr4307

4 years, 1 month

2
1
0 / 0

[freeipa PR#4306][opened] [ipa-4-6] Travis: Enable IPv6 support for Docker

by netoarmando

URL: https://github.com/freeipa/freeipa/pull/4306 Author: netoarmando Title: #4306: [ipa-4-6] Travis: Enable IPv6 support for Docker Action: opened PR body: """ Environment variable `TRAVIS` is not accessible inside the container anymore, passing it to the container didn't have the same effect expected by the hack this commit removes. However, enabling IPv6, as described in https://github.com/travis-ci/travis-ci/issues/8891, was effective to execute the tests. Issue: https://pagure.io/freeipa/issue/8213 Signed-off-by: Armando Neto <abiagion(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/4306/head:pr4306 git checkout pr4306

4 years, 1 month

2
1
0 / 0

[freeipa PR#4301][opened] ipatests: fix TestSubCAkeyReplication

by flo-renaud

URL: https://github.com/freeipa/freeipa/pull/4301 Author: flo-renaud Title: #4301: ipatests: fix TestSubCAkeyReplication Action: opened PR body: """ The test is using the output of openssl to compare the SubCA issuer name with the expected value. Depending on the version of openssl, the issuer can be displayed differently (with/without space around the = character). On RHEL 7.x, there is no space by default while on Fedora the space is used. Calling openssl with -nameopt space_eq forces a consistent output, always adding space around =. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/4301/head:pr4301 git checkout pr4301

4 years, 1 month

1
1
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-devel March 2020