Hi devs,
This is at least the second time recently that people needing to
renew service certificates used ``ipa-cacert-manage renew`` (the
wrong command) and either didn't solve the problem or got into a
deeper mess.
Clearly we have a usability problem here.
The ipa-cacert-manage(1) man page is
URL: https://github.com/freeipa/freeipa/pull/877
Author: seriv
Title: #877: LDAP ObjectClasses are case-insensitive
Action: closed
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/877/head:pr877
git checkout pr877
__
URL: https://github.com/freeipa/freeipa/pull/950
Author: felipevolpone
Title: #950: Changing idoverrideuser-* to treat objectClass case insensitively
Action: opened
PR body:
"""
This is import to avoid problems when migrating from olders
versions of IPA and using idoverrideuser-* commands.
ht
URL: https://github.com/freeipa/freeipa/pull/949
Author: stlaz
Title: #949: host, service: fix adding host/svc with a cert
Action: opened
PR body:
"""
ipaldap.LDAPEntry expects that entry attributes, if multi-valued,
are lists.
The recent cert refactoring made it possible to pass certificate
URL: https://github.com/freeipa/freeipa/pull/948
Author: tiran
Title: #948: Test script for ipa-custodia
Action: opened
PR body:
"""
You may find my test script for ipa-custodia useful for testing and debugging
issues like https://bugzilla.redhat.com/show_bug.cgi?id=1476150
Signed-off-by: Ch
URL: https://github.com/freeipa/freeipa/pull/947
Author: Rezney
Title: #947: test_caless: add SAN dNSName extensions for wildcard tests
Action: opened
PR body:
"""
It may happen that FQDN does not match with the domain mapped to
the host. In this case we add wildcard for both domains.
"""
To