URL: https://github.com/freeipa/freeipa/pull/5071
Author: fcami
Title: #5071: 389-DS BDB: switch deadlock behavior to DB_LOCK_MINWRITE
Action: opened
PR body:
"""
Some IPA updates are expensive in term of processing and #page hit.
The likelihood to generate a DS Berkeley DB database deadlock can be high
for some common operations.
When a deadlock is detected one deadlocking thread needs to be
rejected to let the other(s) complete.
DB_LOCK_YOUNGEST (9) is the DS default: it means the most recent operation
fails in favor to the oldest one.
DB_LOCK_MINWRITE (6) means the reader(s) are rejected in favor
of the writers even if the reader(s) are older.
Switch the default for FreeIPA to DB_LOCK_MINWRITE for new installs and
also existing installs at update time.
This depends on the backend redesign (https://pagure.io/389-ds-base/issue/49476)
and therefore is valid on 389-DS 1.4.2.3 and higher.
Explanation provided by Thierry Bordaz.
Fixes: https://pagure.io/freeipa/issue/8479
Signed-off-by: François Cami <fcami(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5071/head:pr5071
git checkout pr5071
URL: https://github.com/freeipa/freeipa/pull/5540
Author: antoniotorresm
Title: #5540: WebUI: change FreeIPA naming to IPA in About dialog
Action: opened
PR body:
"""
As part of the effort for reducing differences between
upstream and dowmstream releases, product naming in WebUI
About dialog is changed from FreeIPA to IPA.
Related: https://pagure.io/freeipa/issue/8669
Signed-off-by: Antonio Torres <antorres(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5540/head:pr5540
git checkout pr5540
URL: https://github.com/freeipa/freeipa/pull/5541
Author: flo-renaud
Title: #5541: ipa cert-remove-hold <invalid_cert_id> returns an incorrect error message
Action: opened
PR body:
"""
### cert plugin: propagate the error for non-existent cert
ipa cert-show, ipa cert-revoke and ipa cert-remove-hold do not
print meaningful info when called on a non-existent cert id:
Certificate operation cannot be completed: Unable to communicate
with CMS
Propagate the reason from the HTTP message in order to print
'Certificate ID 0x.. not found'
Fixes: https://pagure.io/freeipa/issue/8704
### xmlrpc tests: add a test for cert-remove-hold
Add tests for the ipa cert-remove-hold command.
Scenario 1:
add host entry, request cert, revoke cert with "hold" reason, remove hold
Scenario 2:
call ipa cert-move-hold with a non-existent cert ID and ensure that
the exception mentions 'Certificate ID .. not found'
Related: https://pagure.io/freeipa/issue/8704
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5541/head:pr5541
git checkout pr5541
URL: https://github.com/freeipa/freeipa/pull/5539
Author: flo-renaud
Title: #5539: [Backport][ipa-4-9] test_installutils: run gpg-agent under a specific SELinux context
Action: opened
PR body:
"""
This PR was opened automatically because PR #5535 was pushed to master and backport to ipa-4-9 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5539/head:pr5539
git checkout pr5539
URL: https://github.com/freeipa/freeipa/pull/5535
Author: abbra
Title: #5535: test_installutils: run gpg-agent under a specific SELinux context
Action: opened
PR body:
"""
system_u:system_r:init_t:s0 cannot execute gpg=agent when SELinux is in
enforcing mode. Use SELinux context that allows this execution:
system_u:system_r:initrc_t:s0
Fixes: https://pagure.io/freeipa/issue/8699
Signed-off-by: Alexander Bokovoy <abokovoy(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5535/head:pr5535
git checkout pr5535
URL: https://github.com/freeipa/freeipa/pull/5536
Author: rcritten
Title: #5536: [Backport][ipa-4-9] configure: ipaplatform falls back to ID_LIKE
Action: opened
PR body:
"""
This PR was opened automatically because PR #5516 was pushed to master and backport to ipa-4-9 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5536/head:pr5536
git checkout pr5536
URL: https://github.com/freeipa/freeipa/pull/5537
Author: rcritten
Title: #5537: [Backport][ipa-4-9] Add RHEL 9 UI branding patch reference
Action: opened
PR body:
"""
This PR was opened automatically because PR #5534 was pushed to master and backport to ipa-4-9 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5537/head:pr5537
git checkout pr5537
URL: https://github.com/freeipa/freeipa/pull/5534
Author: rcritten
Title: #5534: Add RHEL 9 UI branding patch reference
Action: opened
PR body:
"""
The UI in RHEL has a different set of logos and different
background colors. Some direct adjustments were made that
are not buildable so apply them as a patch.
https://pagure.io/freeipa/issue/8669
Signed-off-by: Rob Crittenden <rcritten(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5534/head:pr5534
git checkout pr5534