March 2021 - FreeIPA-devel - Fedora Mailing-Lists

[freeipa PR#5681][opened] Implement simple LDAP cache layer

by rcritten

URL: https://github.com/freeipa/freeipa/pull/5681 Author: rcritten Title: #5681: Implement simple LDAP cache layer Action: opened PR body: """ Pretty straightforward caching except for the attribute handling. We probably won't want to cache the entire entry since that could be expensive (userCertificate, ssh keys, etc) but not storing it could lead to multiple requests for the same thing. Also, requesting * vs a set of attributes may not return all a plugin needs, as it will skip operational attributes. Still, this saves 20-50% of queries in my limited testing. Mar 29: initial implementation works about 80% of the time. I guarantee the xmlrpc tests will fail. We'll see about the integration tests. There are still corner cases to find and the member modlist stuff is a mess. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5681/head:pr5681 git checkout pr5681

2 years, 11 months

1
1
0 / 0

[freeipa PR#5689][opened] hbacrule: reduce number of LDAP searches during deletion

by antoniotorresm

URL: https://github.com/freeipa/freeipa/pull/5689 Author: antoniotorresm Title: #5689: hbacrule: reduce number of LDAP searches during deletion Action: opened PR body: """ The `hbacrule` module performs a call to `selinuxusermap-find` during entry deletion. This can be optimized by performing a direct LDAP search instead. Related: https://pagure.io/freeipa/issue/8784 Signed-off-by: Antonio Torres <antorres(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5689/head:pr5689 git checkout pr5689

2 years, 11 months

2
1
0 / 0

[freeipa PR#5610][opened] ipatests: test_installation: add install test scenarios

by miskopo

URL: https://github.com/freeipa/freeipa/pull/5610 Author: miskopo Title: #5610: ipatests: test_installation: add install test scenarios Action: opened PR body: """ - test_hostname_parameter: Test for #2692 ipa-server-install ignores --hostname - check whether hostname provided in `--hostname` parameter is being taken into account and set as new hostname without prompting for it again - test_ad_subpackage_dependency: Test for #4011 ipa-server-install crashes when AD subpackage is not installed - test if ipa-server installation succeeds without `freeipa-ipa-server-trust-ad` installed - test_backup_of_cs_cfg_should_be_created: Test for #4166 Backup CS.cfg before modifying it - test if ipa-server installer backs up CS.cfg before modifying it - test_update_krb5_conf_template_with_keyring_default_ccache_name: Test for #4013 Update krb5.conf.template to support KEYRING default_ccache_name - test if krb5.conf is updated with permanent ccache after installation Related: https://pagure.io/freeipa/issue/2692 Related: https://pagure.io/freeipa/issue/4011 Related: https://pagure.io/freeipa/issue/4166 Related: https://pagure.io/freeipa/issue/4013 Signed-off-by: Michal Polovka <mpolovka(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5610/head:pr5610 git checkout pr5610

2 years, 11 months

1
1
0 / 0

[freeipa PR#5557][opened] ipatests: Test if ACME renews the issued cert with cerbot

by mrizwan93

URL: https://github.com/freeipa/freeipa/pull/5557 Author: mrizwan93 Title: #5557: ipatests: Test if ACME renews the issued cert with cerbot Action: opened PR body: """ This test is to check if ACME certificate renews upon reaching expiry related: https://pagure.io/freeipa/issue/4751 Signed-off-by: Mohammad Rizwan <myusuf(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5557/head:pr5557 git checkout pr5557

2 years, 12 months

2
1
0 / 0

[freeipa PR#5653][opened] ipatests: test to renew certs on replica using ipa-cert-fix

by mrizwan93

URL: https://github.com/freeipa/freeipa/pull/5653 Author: mrizwan93 Title: #5653: ipatests: test to renew certs on replica using ipa-cert-fix Action: opened PR body: """ This test checks if ipa-cert-fix renews the certs on replica after cert renewal on master. related: https://pagure.io/freeipa/issue/7885 Signed-off-by: Mohammad Rizwan <myusuf(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5653/head:pr5653 git checkout pr5653

3 years

2
1
0 / 0

[freeipa PR#5690][opened] Add pkey_only to the service_find calls in the host plugin

by rcritten

URL: https://github.com/freeipa/freeipa/pull/5690 Author: rcritten Title: #5690: Add pkey_only to the service_find calls in the host plugin Action: opened PR body: """ This limits the amount of data and post-processing done in when host_del and host_disable call service_find. This also saves a presence query for host_keytab. https://pagure.io/freeipa/issue/8787 Signed-off-by: Rob Crittenden <rcritten(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5690/head:pr5690 git checkout pr5690

3 years

1
1
0 / 0

[freeipa PR#5566][opened] WebUI: test_user_caless: test if user is enabled

by miskopo

URL: https://github.com/freeipa/freeipa/pull/5566 Author: miskopo Title: #5566: WebUI: test_user_caless: test if user is enabled Action: opened PR body: """ Test checks if the user is enabled, able to reset their password and authentication types in CA-less environment. Related: https://pagure.io/freeipa/issue/8203 Signed-off-by: Michal Polovka <mpolovka(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5566/head:pr5566 git checkout pr5566

3 years

1
1
0 / 0

[freeipa PR#5652][opened] Add basic support for subordinate user/group ids

by tiran

URL: https://github.com/freeipa/freeipa/pull/5652 Author: tiran Title: #5652: Add basic support for subordinate user/group ids Action: opened PR body: """ New LDAP object class "ipaUserSubordinate" with four new fields: - ipasubuidnumber / ipasubuidcount - ipasubgidnumber / ipasgbuidcount New self-service permission to add subids. New command user-auto-subid to auto-assign subid The code hard-codes counts to 65536, sets subgid equal to subuid, and does not allow removal of subids. There is also a hack that emulates a DNA plugin with step interval 65536 for testing. See: https://pagure.io/freeipa/issue/8361 Signed-off-by: Christian Heimes <cheimes(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5652/head:pr5652 git checkout pr5652

3 years

1
1
0 / 0

[freeipa PR#5388][opened] Better mod_wsgi configuration

by tiran

URL: https://github.com/freeipa/freeipa/pull/5388 Author: tiran Title: #5388: Better mod_wsgi configuration Action: opened PR body: """ * Remove WSGIImportScript * Configure process-group in WSGIScriptAlias * Run WSGI app in main interpreter of daemon script * move WSGI app code to main code base so it can be used with other WSGI servers that expect a Python package. * populate LDAP schema early to speed up first request by ~200ms * gc.collect() and gc.freeze() to improve memory handling and GC See: https://github.com/GrahamDumpleton/mod_wsgi/issues/642#issuecomment-74949... Signed-off-by: Christian Heimes <cheimes(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5388/head:pr5388 git checkout pr5388

3 years

2
1
0 / 0

[freeipa PR#5556][opened] ipatests: various enhancement to hidden replica tests

by fcami

URL: https://github.com/freeipa/freeipa/pull/5556 Author: fcami Title: #5556: ipatests: various enhancement to hidden replica tests Action: opened PR body: """ https://github.com/freeipa/freeipa/pull/5183 redux. I cannot reopen the original PR because the branch was force-pushed. + ipatests: add wait_for_ipa_to_start wait_for_ipa_to_start(host) waits for ipactl to return RUNNING for all IPA services on the specified host. Related: https://pagure.io/freeipa/issue/8534 + ipatests: hiddenreplica: use wait_for_ipa_to_start after restore Use wait_for_ipa_to_start to wait until the restored replica is online. Related: https://pagure.io/freeipa/issue/8534 + ipatests: use wait_for_replication for hidden replica checks Previously, hidden replica checks were run without waiting for replication to complete, potentially leading to unstable behavior. Use wait_for_replication. Fixes: https://pagure.io/freeipa/issue/8534 + ipatests: hidden replica: misc fixes Split a test in two and add additional fixes. Related: https://pagure.io/freeipa/issue/8534 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5556/head:pr5556 git checkout pr5556

3 years

2
1
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-devel March 2021