March 2021 - FreeIPA-devel - Fedora Mailing-Lists

[freeipa PR#5628][opened] [Backport][ipa-4-6] ipatests: use proper template for TestMaskInstall

by wladich

URL: https://github.com/freeipa/freeipa/pull/5628 Author: wladich Title: #5628: [Backport][ipa-4-6] ipatests: use proper template for TestMaskInstall Action: opened PR body: """ This is a manual backport of #5620 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5628/head:pr5628 git checkout pr5628

3 years, 1 month

2
1
0 / 0

[freeipa PR#5623][opened] [Backport][ipa-4-6] PR 5581 manual backport

by abbra

URL: https://github.com/freeipa/freeipa/pull/5623 Author: abbra Title: #5623: [Backport][ipa-4-6] PR 5581 manual backport Action: opened PR body: """ """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5623/head:pr5623 git checkout pr5623

3 years, 1 month

1
1
0 / 0

[freeipa PR#5622][opened] [Backport][ipa-4-8] Manual backport of PR 5581

by abbra

URL: https://github.com/freeipa/freeipa/pull/5622 Author: abbra Title: #5622: [Backport][ipa-4-8] Manual backport of PR 5581 Action: opened PR body: """ """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5622/head:pr5622 git checkout pr5622

3 years, 1 month

1
1
0 / 0

[freeipa PR#5624][opened] [Backport][ipa-4-8] DNSSEC key synchronization issues

by flo-renaud

URL: https://github.com/freeipa/freeipa/pull/5624 Author: flo-renaud Title: #5624: [Backport][ipa-4-8] DNSSEC key synchronization issues Action: opened PR body: """ This PR was opened automatically because PR #5612 was pushed to master and backport to ipa-4-8 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5624/head:pr5624 git checkout pr5624

3 years, 1 month

2
1
0 / 0

[freeipa PR#5625][opened] [Backport][ipa-4-9] DNSSEC key synchronization issues

by flo-renaud

URL: https://github.com/freeipa/freeipa/pull/5625 Author: flo-renaud Title: #5625: [Backport][ipa-4-9] DNSSEC key synchronization issues Action: opened PR body: """ This PR was opened automatically because PR #5612 was pushed to master and backport to ipa-4-9 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5625/head:pr5625 git checkout pr5625

3 years, 1 month

2
1
0 / 0

[freeipa PR#5615][opened] Update 10-ssh-key-management.rst

by tscherf

URL: https://github.com/freeipa/freeipa/pull/5615 Author: tscherf Title: #5615: Update 10-ssh-key-management.rst Action: opened PR body: """ Removing conclusion statement since we now have more than 10 units. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5615/head:pr5615 git checkout pr5615

3 years, 1 month

2
1
0 / 0

[freeipa PR#5589][opened] freeipa.spec: synchronize with Fedora for 389-ds and PKI versions

by abbra

URL: https://github.com/freeipa/freeipa/pull/5589 Author: abbra Title: #5589: freeipa.spec: synchronize with Fedora for 389-ds and PKI versions Action: opened PR body: """ - 389-ds fixes an information disclosure during unsuccessful LDAP BIND operation, CVE-2020-35518, https://github.com/389ds/389-ds-base/issues/4609 - Dogtag PKI adopted to work with 389-ds with the fix, https://github.com/dogtagpki/pki/issues/3458 FreeIPA needs to require new Dogtag and 389-ds versions on all Fedora and RHEL versions. I am leaving RHEL 8 version intact yet for 389-ds because it wasn't updated yet but Dogtag PKI version was already built. In order to avoid excessive %if/%endif conditionals in the spec file, I have added a short Lua table with 389-ds versions for F32-33. F34 and Rawhide will fallback to the same newer 389-ds 2.0.3 version. We do not support building on F31 or older Fedora anymore as they are EOLed already. Fixes: https://pagure.io/freeipa/issue/8705 Signed-off-by: Alexander Bokovoy <abokovoy(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5589/head:pr5589 git checkout pr5589

3 years, 1 month

1
1
0 / 0

[freeipa PR#5620][opened] ipatests: use proper template for TestMaskInstall

by wladich

URL: https://github.com/freeipa/freeipa/pull/5620 Author: wladich Title: #5620: ipatests: use proper template for TestMaskInstall Action: opened PR body: """ TestMaskInstall is a usual integration tests and should install freeipa server during test run. "ipaserver" template provides pre-install freeipa server and is intended for use with webui and xmlrpc tests. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5620/head:pr5620 git checkout pr5620

3 years, 1 month

1
1
0 / 0

[freeipa PR#5612][opened] DNSSEC key synchronization issues

by flo-renaud

URL: https://github.com/freeipa/freeipa/pull/5612 Author: flo-renaud Title: #5612: DNSSEC key synchronization issues Action: opened PR body: """ ### dnssec: fix ipa-ods-exporter crash when master key missing When a master key is missing from the local HSM, ipa-ods-exporter crashes. This can happen when the DNSSEC master role is moved from one node to another with the following scenario: - install server1 with dns + dnssec - install server2 without dns - disable dnssec from server1 - install dns + dnssec on server2 With the above scenario, server2 never had the opportunity to get the master key (this happens only when the replica is already configured as DNS server and has put its public replica key in LDAP + the current DNSSEC master wraps its master key with the replica key). ipa-ods-exporter can only log an error instead of crashing. Related: https://pagure.io/freeipa/issue/8654 ### dnssec: concurrency issue when disabling old replica key When dnssec role is removed from the local node, the uninstaller creates a new replica key and marks the older replica keys as disabled (both in the local HSM and in LDAP). If ipa-ods-exporter runs in the middle of this operation, the old replica key may be disabled in the local HSM but not yet in LDAP and ipa-ods-exporter believes that it is a new replica key that needs to be imported from LDAP to local hsm. The op fails as there is already the key in the local HSM. The error can be ignored, ipa-ods-exporter simply needs to log a warning. Fixes: https://pagure.io/freeipa/issue/8654 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5612/head:pr5612 git checkout pr5612

3 years, 1 month

1
1
0 / 0

[freeipa PR#5616][opened] [Backport][ipa-4-9] Fix lgtm file classification

by flo-renaud

URL: https://github.com/freeipa/freeipa/pull/5616 Author: flo-renaud Title: #5616: [Backport][ipa-4-9] Fix lgtm file classification Action: opened PR body: """ This PR was opened automatically because PR #5614 was pushed to master and backport to ipa-4-9 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5616/head:pr5616 git checkout pr5616

3 years, 1 month

1
1
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-devel March 2021