URL: https://github.com/freeipa/freeipa/pull/5588
Author: flo-renaud
Title: #5588: [Backport][ipa-4-9] ipaserver: don't ignore zonemgr option on install
Action: opened
PR body:
"""
This PR was opened automatically because PR #5567 was pushed to master and backport to ipa-4-9 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5588/head:pr5588
git checkout pr5588
URL: https://github.com/freeipa/freeipa/pull/5313
Author: fcami
Title: #5313: Gracefully handle Nsds5replicalastupdateend's absence
Action: opened
PR body:
"""
https://pagure.io/freeipa/issue/8605
ipa-replica-manage: handle missing attributes
If nsds5replicalastupdateend is not yet present,
ipa-replica-manage will backtrace as it tries to retrieve that
attribute unconditionally.
Gracefully handle that situation.
ipa-replica-manage: always display nsds5replicalastinitstatus
If nsds5replicalastinitstatus is none, the status is not displayed.
Always displaying the last init status is more useful to the end-user.
ipalib/util.py: add print_replication_status
ipa-csreplica-manage, ipa-replica-manage: refactor
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5313/head:pr5313
git checkout pr5313
URL: https://github.com/freeipa/freeipa/pull/5581
Author: abbra
Title: #5581: ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
Action: opened
PR body:
"""
Calling to ipadb_get_connection() will remove LDAP context if any error
happens. This means upper layers must always verify that LDAP context
exists after such calls.
ipadb_get_user_auth() may re-read global configuration and that may fail
and cause IPA context to have NULL LDAP context.
Fixes: https://pagure.io/freeipa/issue/8681
Signed-off-by: Alexander Bokovoy <abokovoy(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5581/head:pr5581
git checkout pr5581
URL: https://github.com/freeipa/freeipa/pull/5518
Author: wladich
Title: #5518: [Backport][ipa-4-8] ipatests: use pexpect for controlling interactive command line utilities
Action: opened
PR body:
"""
This is a manual backport of #5460.
Link to pagure ticket was added to commit messages.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5518/head:pr5518
git checkout pr5518
URL: https://github.com/freeipa/freeipa/pull/5579
Author: frasertweedale
Title: #5579: ipa-cert-fix: improve handling of 'pki-server cert-fix' failure
Action: opened
PR body:
"""
'pki-server cert-fix' has a known and expected failure when the DS
certificate is expired. 'ipa-cert-fix' handles this by
optimistically ignore the CalledProcessError and continuing when the
DS certificate was up for renewal.
This heuristic is a bit too optimistic. If 'pki-server cert-fix'
fails due and returns nonzero due to some other, more serious error
(as has been seen in the wild[1]), 'ipa-cert-fix' continues then
fails later with a more confusing error, for example:
[Errno 2] No such file or directory:
'/etc/pki/pki-tomcat/certs/27-renewed.crt'
[1] https://bugzilla.redhat.com/show_bug.cgi?id=1930586
Improve the heuristic by also checking whether output files
corresponding ot all of the "extra" certificate that we asked
'ipa-cert-fix' to renew, do indeed exist and are X.509 certificates.
Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1779984
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5579/head:pr5579
git checkout pr5579
URL: https://github.com/freeipa/freeipa/pull/5586
Author: flo-renaud
Title: #5586: [Backport][ipa-4-9] freeipa.spec: bump the required version of 389ds
Action: opened
PR body:
"""
This PR was opened automatically because PR #5571 was pushed to master and backport to ipa-4-9 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5586/head:pr5586
git checkout pr5586