[Freeipa-devel] Re: [Freeipa-users] Re: Renewing /etc/httpd/alias certs

2017-08-01 Thread Fraser Tweedale via FreeIPA-devel
Hi devs, This is at least the second time recently that people needing to renew service certificates used ``ipa-cacert-manage renew`` (the wrong command) and either didn't solve the problem or got into a deeper mess. Clearly we have a usability problem here. The ipa-cacert-manage(1) man page is

[Freeipa-devel] [freeipa PR#877][closed] LDAP ObjectClasses are case-insensitive

2017-08-01 Thread felipevolpone via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/877 Author: seriv Title: #877: LDAP ObjectClasses are case-insensitive Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/877/head:pr877 git checkout pr877 __

[Freeipa-devel] [freeipa PR#950][opened] Changing idoverrideuser-* to treat objectClass case insensitively

2017-08-01 Thread felipevolpone via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/950 Author: felipevolpone Title: #950: Changing idoverrideuser-* to treat objectClass case insensitively Action: opened PR body: """ This is import to avoid problems when migrating from olders versions of IPA and using idoverrideuser-* commands. ht

[Freeipa-devel] [freeipa PR#949][opened] host, service: fix adding host/svc with a cert

2017-08-01 Thread stlaz via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/949 Author: stlaz Title: #949: host, service: fix adding host/svc with a cert Action: opened PR body: """ ipaldap.LDAPEntry expects that entry attributes, if multi-valued, are lists. The recent cert refactoring made it possible to pass certificate

[Freeipa-devel] [freeipa PR#948][opened] Test script for ipa-custodia

2017-08-01 Thread tiran via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/948 Author: tiran Title: #948: Test script for ipa-custodia Action: opened PR body: """ You may find my test script for ipa-custodia useful for testing and debugging issues like https://bugzilla.redhat.com/show_bug.cgi?id=1476150 Signed-off-by: Ch

[Freeipa-devel] [freeipa PR#947][opened] test_caless: add SAN dNSName extensions for wildcard tests

2017-08-01 Thread Rezney via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/947 Author: Rezney Title: #947: test_caless: add SAN dNSName extensions for wildcard tests Action: opened PR body: """ It may happen that FQDN does not match with the domain mapped to the host. In this case we add wildcard for both domains. """ To