URL: https://github.com/freeipa/freeipa/pull/5552
Author: abbra
Title: #5552: [Backport][ipa-4-9] sudocmd: ensure command doesn't contain trailing dot before adding it
Action: opened
PR body:
"""
This PR was opened automatically because PR #5538 was pushed to master and backport to ipa-4-9 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5552/head:pr5552
git checkout pr5552
URL: https://github.com/freeipa/freeipa/pull/5550
Author: abbra
Title: #5550: [Backport][ipa-4-9] [ipatests][Azure Pipelines] Populate containers with self-AAAA records
Action: opened
PR body:
"""
This PR was opened automatically because PR #5486 was pushed to master and backport to ipa-4-9 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5550/head:pr5550
git checkout pr5550
URL: https://github.com/freeipa/freeipa/pull/5551
Author: abbra
Title: #5551: [Backport][ipa-4-9] Set the ACME baseURL in order to pin a client to a single IPA server
Action: opened
PR body:
"""
This PR was opened automatically because PR #5531 was pushed to master and backport to ipa-4-9 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5551/head:pr5551
git checkout pr5551
URL: https://github.com/freeipa/freeipa/pull/5546
Author: rcritten
Title: #5546: [Backport][ipa-4-9] WebUI: change FreeIPA naming to IPA in About dialog
Action: opened
PR body:
"""
This PR was opened automatically because PR #5540 was pushed to master and backport to ipa-4-9 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5546/head:pr5546
git checkout pr5546
URL: https://github.com/freeipa/freeipa/pull/5545
Author: flo-renaud
Title: #5545: [Backport][ipa-4-9] ipa cert-remove-hold <invalid_cert_id> returns an incorrect error message
Action: opened
PR body:
"""
This PR was opened automatically because PR #5541 was pushed to master and backport to ipa-4-9 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5545/head:pr5545
git checkout pr5545
URL: https://github.com/freeipa/freeipa/pull/5538
Author: antoniotorresm
Title: #5538: sudocmd: ensure command doesn't contain trailing dot before adding it
Action: opened
PR body:
"""
Trailing dots aren't permitted in sudo commands, as
enforced explicitly in `get_dn`. Performing this check
before adding the command prevents the user from
entering invalid commands, which would otherwise trigger
errors when accessing them afterwards.
Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1925410
Signed-off-by: Antonio Torres <antorres(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5538/head:pr5538
git checkout pr5538
URL: https://github.com/freeipa/freeipa/pull/5531
Author: rcritten
Title: #5531: Set the ACME baseURL in order to pin a client to a single IPA server
Action: opened
PR body:
"""
ACME uses nonce values to prevent replay attacks. Since the
ipa-ca name can go to any of the IPA servers in order to verify the
nonce the servers need to know the value that was set which
relies on replication. Sometimes the client is faster than
replication so a request can fail.
This change returns the baseURL to the client as the name of the
ACME server during discovery which should pin all requests to this
one IPA server and alleviate the replication issue.
Signed-off-by: Rob Crittenden <rcritten(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5531/head:pr5531
git checkout pr5531
URL: https://github.com/freeipa/freeipa/pull/5486
Author: stanislavlevin
Title: #5486: [ipatests][Azure Pipelines] Populate containers with self-AAAA records
Action: opened
PR body:
"""
- IPA server's AAAA records at embedded DNS mode depend on result of `get_server_ip_address` function(`ipaserver.install.installutils`), which in turn, relies on NSS. In case of Azure Pipelines, there are neither IPv6 records in '/etc/hosts' nor external DNS, which may provide such. This leads to the missing AAAA records for master and missing AAAA records for `ipa-ca` pointing to master in embedded DNS. In particular, tests `test_ipa_healthcheck_no_errors`, `test_ipa_dns_systemrecords_check` fail with:
```
[
{
"source": "ipahealthcheck.ipa.idns",
"check": "IPADNSSystemRecordsCheck",
"result": "WARNING",
"uuid": "b979a88a-6373-4990-bc83-ce724e9730b4",
"when": "20210120055054Z",
"duration": "0.032740",
"kw": {
"msg": "Got {count} ipa-ca AAAA records, expected {expected}",
"count": 1,
"expected": 2
}
}
]
```
where `ipa-ca` record exists only for replica.
Note: since the most of the code in setup_containers was touched it has been reformatted.
- Handle AAAA records in test_ipa_dns_systemrecords_check
Fixes: https://pagure.io/freeipa/issue/8683
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5486/head:pr5486
git checkout pr5486