August 2021 - FreeIPA-devel - Fedora Mailing-Lists

[freeipa PR#5915][opened] Clean up the PKI securitydomain when removing a server

by rcritten

URL: https://github.com/freeipa/freeipa/pull/5915 Author: rcritten Title: #5915: Clean up the PKI securitydomain when removing a server Action: opened PR body: """ PKI has its own internal knowledge of servers and services in its securitydomain. This has not been cleaned up in the past but is becoming more of an issue as PKI now relies on its securitydomain for more things, and it has a healthcheck that reports inconsistencies. Removing entries is straightforward using the PKI REST API. In order to operate on the API access is needed. There was an unused Security Domain Administrators group that I've added to the resourceACLS we created for managing the securitydomain. The ipara user is added as a member of this group. The REST API binds to the CA using the IPA RA certificate. Related commits are b3c2197b7e4ed18a7febe3efa6396c2272ebccca and ba4df6449aaa0843ab43a1a2b3cb1df8bb022c24. These resourceACLS were originally created as a backwards compatibility mechanism for dogtag v9 and later only created when a replica was installed purportedly to save a restart. I don't see any reason to not have these defined. They are apparently needed due to the PKI database upgrade issues. In any case if the purpose was to suppress these ACLS it failed because as soon as a replica with a CA was installed they were as well, and we need this ACL in order to manage the securitydomain. https://pagure.io/freeipa/issue/8930 Signed-off-by: Rob Crittenden <rcritten(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5915/head:pr5915 git checkout pr5915

2 years, 8 months

2
1
0 / 0

[freeipa PR#5974][opened] [Backport][ipa-4-9] ipatests: test_ipahealthcheck: Verify permissions for /var/log/ files

by miskopo

URL: https://github.com/freeipa/freeipa/pull/5974 Author: miskopo Title: #5974: [Backport][ipa-4-9] ipatests: test_ipahealthcheck: Verify permissions for /var/log/ files Action: opened PR body: """ This PR was opened automatically because PR #5969 was pushed to master and backport to ipa-4-9 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5974/head:pr5974 git checkout pr5974

2 years, 8 months

1
1
0 / 0

[freeipa PR#5969][opened] ipatests: test_ipahealthcheck: Verify permissions for /var/log/ files

by miskopo

URL: https://github.com/freeipa/freeipa/pull/5969 Author: miskopo Title: #5969: ipatests: test_ipahealthcheck: Verify permissions for /var/log/ files Action: opened PR body: """ Test if files in /var/log are being checked with ipahealthcheck.ipa.files source. Resolves: https://pagure.io/freeipa/issue/8949 Signed-off-by: Michal Polovka <mpolovka(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5969/head:pr5969 git checkout pr5969

2 years, 8 months

1
1
0 / 0

[freeipa PR#5971][opened] [Backport][ipa-4-9] ipatests: Fix TestAJPSecretUpgrade tests on systems without pkiuser

by rcritten

URL: https://github.com/freeipa/freeipa/pull/5971 Author: rcritten Title: #5971: [Backport][ipa-4-9] ipatests: Fix TestAJPSecretUpgrade tests on systems without pkiuser Action: opened PR body: """ This PR was opened automatically because PR #5964 was pushed to master and backport to ipa-4-9 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5971/head:pr5971 git checkout pr5971

2 years, 8 months

2
1
0 / 0

[freeipa PR#5972][opened] [Backport][ipa-4-9] ipatests: Test unsecure nsupdate.

by rcritten

URL: https://github.com/freeipa/freeipa/pull/5972 Author: rcritten Title: #5972: [Backport][ipa-4-9] ipatests: Test unsecure nsupdate. Action: opened PR body: """ This PR was opened automatically because PR #5968 was pushed to master and backport to ipa-4-9 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5972/head:pr5972 git checkout pr5972

2 years, 8 months

2
1
0 / 0

[freeipa PR#5968][opened] ipatests: Test secure nsupdate failed, then try unsecure nsupdate..

by amore17

URL: https://github.com/freeipa/freeipa/pull/5968 Author: amore17 Title: #5968: ipatests: Test secure nsupdate failed, then try unsecure nsupdate.. Action: opened PR body: """ Test to verify when bind is configured with dynamic update policy, and during client-install 'nsupdate -g' fails then it should run with second call using unauthenticated nsupdate. Related : https://pagure.io/freeipa/issue/8402 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5968/head:pr5968 git checkout pr5968

2 years, 8 months

2
1
0 / 0

[freeipa PR#5964][opened] ipatests: Fix TestAJPSecretUpgrade tests on systems without pkiuser

by stanislavlevin

URL: https://github.com/freeipa/freeipa/pull/5964 Author: stanislavlevin Title: #5964: ipatests: Fix TestAJPSecretUpgrade tests on systems without pkiuser Action: opened PR body: """ Tests in `test_ipaserver.test_secure_ajp_connector' assume that there is pkiuser in OS, but this is not always true (for example, in systems having minimum installed dependencies, in particular, without pki-server RPM package). Since the tests already use the mock and pkiuser entity is not the subject of testing the pwd.getpwnam has been mocked. Fixes: https://pagure.io/freeipa/issue/8942 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5964/head:pr5964 git checkout pr5964

2 years, 8 months

2
1
0 / 0

[freeipa PR#5970][opened] ipatests: test_ipahealthcheck: Test if check for FIPS is present

by miskopo

URL: https://github.com/freeipa/freeipa/pull/5970 Author: miskopo Title: #5970: ipatests: test_ipahealthcheck: Test if check for FIPS is present Action: opened PR body: """ Test if the check for FIPS mode status is present in ipahealthcheck.meta.core Resolves: https://pagure.io/freeipa/issue/8951 Signed-off-by: Michal Polovka <mpolovka(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5970/head:pr5970 git checkout pr5970

2 years, 8 months

1
0
0 / 0

[freeipa PR#5967][opened] [Backport][ipa-4-8] ipatests: Refactor test_check_otpd_after_idle_timeout

by flo-renaud

URL: https://github.com/freeipa/freeipa/pull/5967 Author: flo-renaud Title: #5967: [Backport][ipa-4-8] ipatests: Refactor test_check_otpd_after_idle_timeout Action: opened PR body: """ This PR was opened automatically because PR #5952 was pushed to master and backport to ipa-4-8 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5967/head:pr5967 git checkout pr5967

2 years, 8 months

1
1
0 / 0

[freeipa PR#5965][opened] [Backport][ipa-4-9] ipatests: Refactor test_check_otpd_after_idle_timeout

by flo-renaud

URL: https://github.com/freeipa/freeipa/pull/5965 Author: flo-renaud Title: #5965: [Backport][ipa-4-9] ipatests: Refactor test_check_otpd_after_idle_timeout Action: opened PR body: """ This PR was opened automatically because PR #5952 was pushed to master and backport to ipa-4-9 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5965/head:pr5965 git checkout pr5965

2 years, 8 months

1
1
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-devel August 2021