September 2020 - FreeIPA-devel - Fedora Mailing-Lists

[freeipa PR#5072][opened] ipatests: Bump PR-CI templates

by netoarmando

URL: https://github.com/freeipa/freeipa/pull/5072 Author: netoarmando Title: #5072: ipatests: Bump PR-CI templates Action: opened PR body: """ New templates with a previously working version of `geckodriver`. Issue: https://pagure.io/freeipa/issue/8473 Signed-off-by: Armando Neto <abiagion(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5072/head:pr5072 git checkout pr5072

3 years, 7 months

2
1
0 / 0

[freeipa PR#5086][opened] ipa-kdb: support getprincs request in kadmin.local

by abbra

URL: https://github.com/freeipa/freeipa/pull/5086 Author: abbra Title: #5086: ipa-kdb: support getprincs request in kadmin.local Action: opened PR body: """ kadmin.local getprincs command results in passing '*' as a principal to KDB driver function that looks up the principals. The whole filter looks like this ``` (&(| (objectclass=krbprincipalaux) (objectclass=krbprincipal) (objectclass=ipakrbprincipal)) (|(ipakrbprincipalalias=*) (krbprincipalname:caseIgnoreIA5Match:=*))) ``` There are two parts of the LDAP filter we use to look up principals, the part with 'krbprincipalname' uses extensible filter syntax of RFC 4515 section 3: ``` extensible = ( attr [dnattrs] [matchingrule] COLON EQUALS assertionvalue ) / ( [dnattrs] matchingrule COLON EQUALS assertionvalue ) ``` In case we've got a principal name as '*' we have to follow RFC 4515 section 3 and reencode it using <valueencoding> rule from RFC 4511 section 4.1.6 but only to the part of the filter that does use assertion value. Fixes: https://pagure.io/freeipa/issue/8490 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5086/head:pr5086 git checkout pr5086

3 years, 7 months

2
1
0 / 0

[freeipa PR#5089][opened] [Backport][ipa-4-8] Set the certmonger subject with a string, not an object

by flo-renaud

URL: https://github.com/freeipa/freeipa/pull/5089 Author: flo-renaud Title: #5089: [Backport][ipa-4-8] Set the certmonger subject with a string, not an object Action: opened PR body: """ This PR was opened automatically because PR #5084 was pushed to master and backport to ipa-4-8 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5089/head:pr5089 git checkout pr5089

3 years, 7 months

1
1
0 / 0

[freeipa PR#5088][opened] [Backport][ipa-4-8] dnsforwardzone-add: support dnspython 2.0

by flo-renaud

URL: https://github.com/freeipa/freeipa/pull/5088 Author: flo-renaud Title: #5088: [Backport][ipa-4-8] dnsforwardzone-add: support dnspython 2.0 Action: opened PR body: """ This PR was opened automatically because PR #5085 was pushed to master and backport to ipa-4-8 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5088/head:pr5088 git checkout pr5088

3 years, 7 months

1
1
0 / 0

[freeipa PR#5084][opened] Set the certmonger subject with a string, not an object

by rcritten

URL: https://github.com/freeipa/freeipa/pull/5084 Author: rcritten Title: #5084: Set the certmonger subject with a string, not an object Action: opened PR body: """ ipa-server-certinstall goes through a slightly different code path if the replacement certificate is issued by IPA. This was setting the subject using cert.subject which is a Name object and not the string representation of that object. This was failing in the dbus call to certmonger. https://pagure.io/freeipa/issue/8204 Signed-off-by: Rob Crittenden <rcritten(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5084/head:pr5084 git checkout pr5084

3 years, 7 months

2
1
0 / 0

[freeipa PR#5085][opened] dnsforwardzone-add: support dnspython 2.0

by flo-renaud

URL: https://github.com/freeipa/freeipa/pull/5085 Author: flo-renaud Title: #5085: dnsforwardzone-add: support dnspython 2.0 Action: opened PR body: """ The command dnsforwardzone-add is assuming that the dns.rrset.RRset type stores "items" as a list. With dnspython 2.0 this is not true as a dict is used instead. As a consequence, in order to get the first record, it is not possible to use items[0]. As dict and list are both iterables, next(iter(items)) can be used in order to be compatible with dnspython 1.16 and 2.0. Fixes: https://pagure.io/freeipa/issue/8481 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5085/head:pr5085 git checkout pr5085

3 years, 7 months

1
1
0 / 0

[freeipa PR#5087][opened] [Backport][ipa-4-8] SELinux Policy: let custodia replicate keys

by rcritten

URL: https://github.com/freeipa/freeipa/pull/5087 Author: rcritten Title: #5087: [Backport][ipa-4-8] SELinux Policy: let custodia replicate keys Action: opened PR body: """ This PR was opened automatically because PR #5083 was pushed to master and backport to ipa-4-8 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5087/head:pr5087 git checkout pr5087

3 years, 7 months

2
1
0 / 0

[freeipa PR#5083][opened] test_replica_promotion::TestSubCAkeyReplication: set SELinux to Enforcing

by fcami

URL: https://github.com/freeipa/freeipa/pull/5083 Author: fcami Title: #5083: test_replica_promotion::TestSubCAkeyReplication: set SELinux to Enforcing Action: opened PR body: """ Test run with SELinux set to Enforcing """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5083/head:pr5083 git checkout pr5083

3 years, 7 months

2
1
0 / 0

[freeipa PR#5082][opened] Run KDC as non-privileged user

by tiran

URL: https://github.com/freeipa/freeipa/pull/5082 Author: tiran Title: #5082: Run KDC as non-privileged user Action: opened PR body: """ Signed-off-by: Christian Heimes <cheimes(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5082/head:pr5082 git checkout pr5082

3 years, 7 months

1
0
0 / 0

[freeipa PR#5080][opened] ipatests: fix bind service name

by flo-renaud

URL: https://github.com/freeipa/freeipa/pull/5080 Author: flo-renaud Title: #5080: ipatests: fix bind service name Action: opened PR body: """ With the commit 721435c the service name for bind is now 'named' instead of 'named-pkcs11' on fedora. The ipa-healthcheck test was hardcoding the service name but it should instead use the name stored in knownservices.named.systemd_name as it varies depending on the OS. Fixes: https://pagure.io/freeipa/issue/8482 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5080/head:pr5080 git checkout pr5080

3 years, 7 months

1
1
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-devel September 2020