[Freeipa-devel] [freeipa PR#4892][closed] [Backport][ipa-4-6] Test that override_gid is working for subdomain

2020-07-07 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/4892 Author: amore17 Title: #4892: [Backport][ipa-4-6] Test that override_gid is working for subdomain Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/4892/head:pr489

[Freeipa-devel] [freeipa PR#4891][closed] [Backport][ipa-4-8] Test that override_gid is working for subdomain

2020-07-07 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/4891 Author: amore17 Title: #4891: [Backport][ipa-4-8] Test that override_gid is working for subdomain Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/4891/head:pr4

[Freeipa-devel] [freeipa PR#4909][opened] Add unauthenticated nsupdate

2020-07-10 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/4909 Author: fcami Title: #4909: Add unauthenticated nsupdate Action: opened PR body: """ ipa-client-install: update sssd.conf if nsupdate requires -g If dynamic DNS updates are selected, sssd will use GSS-TSIG by default for nsupda

[Freeipa-devel] [freeipa PR#4913][opened] vault.py: flush the certificate after renaming

2020-07-10 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/4913 Author: fcami Title: #4913: vault.py: flush the certificate after renaming Action: opened PR body: """ store_cert() does f.write, flush_sync, f.close, os.rename(f.name) in that order. The directory is not flushed. * get rid of f.close as this i

[Freeipa-devel] [freeipa PR#4935][opened] ipatests: xfail TestIpaClientAutomountFileRestore's final test

2020-07-21 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/4935 Author: fcami Title: #4935: ipatests: xfail TestIpaClientAutomountFileRestore's final test Action: opened PR body: """ Due to a change in authselect, rolling back the installation does not produce the same nsswitch.conf as on a clean install. M

[Freeipa-devel] [freeipa PR#4937][opened] ipatests.test_commands.test_ssh_key_connection: paramiko=>ssh2

2020-07-23 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/4937 Author: fcami Title: #4937: ipatests.test_commands.test_ssh_key_connection: paramiko=>ssh2 Action: opened PR body: """ Paramiko is not compatible with FIPS. Migrate test_ssh_key_connection to ssh2. Fixes: https://pagure.io/freeipa/issue/8129 S

[Freeipa-devel] [freeipa PR#4937][closed] ipatests.test_commands.test_ssh_key_connection: paramiko=>ssh2

2020-07-23 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/4937 Author: fcami Title: #4937: ipatests.test_commands.test_ssh_key_connection: paramiko=>ssh2 Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/4937/head:pr4937 git ch

[Freeipa-devel] [freeipa PR#4938][opened] ipatests.test_commands.test_ssh_key_connection: Paramiko=>OpenSSH

2020-07-23 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/4938 Author: fcami Title: #4938: ipatests.test_commands.test_ssh_key_connection: Paramiko=>OpenSSH Action: opened PR body: """ [WIP] Paramiko is not compatible with FIPS. Migrate test_ssh_key_connection to the OpenSSH CLI SSH(1). Rationale: this is

[Freeipa-devel] [freeipa PR#4935][closed] ipatests: xfail TestIpaClientAutomountFileRestore's final test

2020-07-23 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/4935 Author: fcami Title: #4935: ipatests: xfail TestIpaClientAutomountFileRestore's final test Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/4935/head:pr4935 git ch

[Freeipa-devel] [freeipa PR#4939][opened] ipatests: xfail TestIpaClientAutomountFileRestore's final test

2020-07-23 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/4939 Author: fcami Title: #4939: ipatests: xfail TestIpaClientAutomountFileRestore's final test Action: opened PR body: """ Due to a change in authselect, rolling back the installation does not produce the same nsswitch.conf as on a clean install. M

[Freeipa-devel] [freeipa PR#4945][opened] re-enable test_sss_ssh_authorizedkeys

2020-07-27 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/4945 Author: fcami Title: #4945: re-enable test_sss_ssh_authorizedkeys Action: opened PR body: """ test_sss_ssh_authorizedkeys was disabled but recent test runs show it is working properly. Run in multiple times to see if it works. """ To pull the

[Freeipa-devel] [freeipa PR#4947][opened] ipatests: test_commands: test_login_wrong_password: look farther in time

2020-07-27 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/4947 Author: fcami Title: #4947: ipatests: test_commands: test_login_wrong_password: look farther in time Action: opened PR body: """ Sometimes test_login_wrong_password fails because the log window the string message is searched in is too narrow.

[Freeipa-devel] [freeipa PR#4947][closed] ipatests: test_commands: test_login_wrong_password: look farther in time

2020-07-28 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/4947 Author: fcami Title: #4947: ipatests: test_commands: test_login_wrong_password: look farther in time Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/4947/head:pr

[Freeipa-devel] [freeipa PR#4950][opened] [Backport][ipa-4-8] ipatests: test_commands: test_login_wrong_password: look farther in time

2020-07-28 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/4950 Author: fcami Title: #4950: [Backport][ipa-4-8] ipatests: test_commands: test_login_wrong_password: look farther in time Action: opened PR body: """ Sometimes test_login_wrong_password fails because the log window the string message is searche

[Freeipa-devel] [freeipa PR#4951][opened] [Backport][ipa-4-6] ipatests: test_commands: test_login_wrong_password: look farther in time

2020-07-28 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/4951 Author: fcami Title: #4951: [Backport][ipa-4-6] ipatests: test_commands: test_login_wrong_password: look farther in time Action: opened PR body: """ Sometimes test_login_wrong_password fails because the log window the string message is searche

[Freeipa-devel] [freeipa PR#4945][closed] re-enable test_sss_ssh_authorizedkeys

2020-07-29 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/4945 Author: fcami Title: #4945: re-enable test_sss_ssh_authorizedkeys Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/4945/head:pr4945 git checkout pr4945 ___

[Freeipa-devel] [freeipa PR#4952][opened] [Backport][ipa-4-8] re-enable test_sss_ssh_authorizedkeys

2020-07-29 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/4952 Author: fcami Title: #4952: [Backport][ipa-4-8] re-enable test_sss_ssh_authorizedkeys Action: opened PR body: """ test_sss_ssh_authorizedkeys was disabled but recent test runs show it might be working properly. Run in multiple times to see if

[Freeipa-devel] [freeipa PR#4938][closed] Remove paramiko usage from ipatests

2020-07-29 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/4938 Author: fcami Title: #4938: Remove paramiko usage from ipatests Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/4938/head:pr4938 git checkout pr4938 _

[Freeipa-devel] [freeipa PR#4964][opened] Remove paramiko usage from ipatests

2020-07-30 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/4964 Author: fcami Title: #4964: Remove paramiko usage from ipatests Action: opened PR body: """ MANUAL BACKPORT Paramiko is not compatible with FIPS. Migrate all tests using paramiko to the OpenSSH CLI SSH(1). Fixes: https://pagure.io/freeipa/iss

[Freeipa-devel] [freeipa PR#4970][opened] ipatests: test_epn: enhance CLI testing

2020-07-31 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/4970 Author: fcami Title: #4970: ipatests: test_epn: enhance CLI testing Action: opened PR body: """ Enhance test_EPN_nbdays so that it checks: * that no emails get sent when using --dry-run * that --from-nbdays implies --dry-run * that --to-nbd

[Freeipa-devel] [freeipa PR#4991][opened] IPA-EPN: enhance input validation

2020-08-05 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/4991 Author: fcami Title: #4991: IPA-EPN: enhance input validation Action: opened PR body: """ Enhance input validation: * make sure --from-nbdays and --to-nbdays are integer * make sure --from-nbdays < --to-nbdays Fixes: https://pagure.io/freeipa/

[Freeipa-devel] [freeipa PR#5006][opened] IPA-EPN: use entry.get() to retrieve attributes

2020-08-06 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5006 Author: fcami Title: #5006: IPA-EPN: use entry.get() to retrieve attributes Action: opened PR body: """ Use entry.get() to retrieve attributes to avoid tripping on missing attrs. Fixes: TBD Signed-off-by: François Cami """ To pull the PR as

[Freeipa-devel] [freeipa PR#5006][closed] IPA-EPN: use entry.get() to retrieve attributes

2020-08-06 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5006 Author: fcami Title: #5006: IPA-EPN: use entry.get() to retrieve attributes Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5006/head:pr5006 git checkout pr5006 _

[Freeipa-devel] [freeipa PR#5010][opened] ipatests: test_epn: add test_EPN_connection_refused

2020-08-06 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5010 Author: fcami Title: #5010: ipatests: test_epn: add test_EPN_connection_refused Action: opened PR body: """ Add a test for EPN behavior when the configured SMTP does not accept connections. Fixes: https://pagure.io/freeipa/issue/8445 Signed-of

[Freeipa-devel] [freeipa PR#5012][opened] Test for pr5008

2020-08-07 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5012 Author: fcami Title: #5012: Test for pr5008 Action: opened PR body: """ """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5012/head:pr5012 git checkout pr5012 From 65b758470

[Freeipa-devel] [freeipa PR#5071][opened] 389-DS BDB: switch deadlock behavior to DB_LOCK_MINWRITE

2020-08-31 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5071 Author: fcami Title: #5071: 389-DS BDB: switch deadlock behavior to DB_LOCK_MINWRITE Action: opened PR body: """ Some IPA updates are expensive in term of processing and #page hit. The likelihood to generate a DS Berkeley DB database deadlock c

[Freeipa-devel] [freeipa PR#5083][opened] test_replica_promotion::TestSubCAkeyReplication: set SELinux to Enforcing

2020-09-08 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5083 Author: fcami Title: #5083: test_replica_promotion::TestSubCAkeyReplication: set SELinux to Enforcing Action: opened PR body: """ Test run with SELinux set to Enforcing """ To pull the PR as Git branch: git remote add ghfreeipa https://github

[Freeipa-devel] [freeipa PR#5087][closed] [Backport][ipa-4-8] SELinux Policy: let custodia replicate keys

2020-09-10 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5087 Author: rcritten Title: #5087: [Backport][ipa-4-8] SELinux Policy: let custodia replicate keys Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5087/head:pr5087 gi

[Freeipa-devel] [freeipa PR#5109][opened] [WIP] ipatests: enhance TestSubCAkeyReplication

2020-09-15 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5109 Author: fcami Title: #5109: [WIP] ipatests: enhance TestSubCAkeyReplication Action: opened PR body: """ """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5109/head:pr5109 gi

[Freeipa-devel] [freeipa PR#5113][opened] dogtaginstance.py: add --debug to pkispawn

2020-09-16 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5113 Author: fcami Title: #5113: dogtaginstance.py: add --debug to pkispawn Action: opened PR body: """ """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5113/head:pr5113 git che

[Freeipa-devel] [freeipa PR#5113][closed] dogtaginstance.py: add --debug to pkispawn

2020-09-17 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5113 Author: fcami Title: #5113: dogtaginstance.py: add --debug to pkispawn Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5113/head:pr5113 git checkout pr5113 __

[Freeipa-devel] [freeipa PR#5115][opened] [Backport][ipa-4-8] dogtaginstance.py: add --debug to pkispawn

2020-09-17 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5115 Author: fcami Title: #5115: [Backport][ipa-4-8] dogtaginstance.py: add --debug to pkispawn Action: opened PR body: """ MANUAL cherry-pick of https://github.com/freeipa/freeipa/pull/5113 Since commits: dogtagpki/pki@0102d83 dogtagpki/pki@de2175

[Freeipa-devel] [freeipa PR#5115][closed] [Backport][ipa-4-8] dogtaginstance.py: add --debug to pkispawn

2020-09-17 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5115 Author: fcami Title: #5115: [Backport][ipa-4-8] dogtaginstance.py: add --debug to pkispawn Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5115/head:pr5115 git ch

[Freeipa-devel] [freeipa PR#5120][opened] [Test PR] ipatests: enhance TestSubCAkeyReplication

2020-09-18 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5120 Author: fcami Title: #5120: [Test PR] ipatests: enhance TestSubCAkeyReplication Action: opened PR body: """ enhance the test suite so that it covers: - deleting subCAs (disabling them first) - checking what happens when creating a d

[Freeipa-devel] [freeipa PR#5120][closed] [Test PR] ipatests: enhance TestSubCAkeyReplication

2020-09-18 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5120 Author: fcami Title: #5120: [Test PR] ipatests: enhance TestSubCAkeyReplication Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5120/head:pr5120 git checkout pr51

[Freeipa-devel] [freeipa PR#5109][closed] SELinux: add dedicated policy for ipa-pki-retrieve-key + ipatests: enhance TestSubCAkeyReplication for better coverage

2020-09-22 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5109 Author: fcami Title: #5109: SELinux: add dedicated policy for ipa-pki-retrieve-key + ipatests: enhance TestSubCAkeyReplication for better coverage Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa

[Freeipa-devel] [freeipa PR#5127][opened] [Backport][ipa-4-8] SELinux: add dedicated policy for ipa-pki-retrieve-key + ipatests: enhance TestSubCAkeyReplication for better coverage

2020-09-22 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5127 Author: fcami Title: #5127: [Backport][ipa-4-8] SELinux: add dedicated policy for ipa-pki-retrieve-key + ipatests: enhance TestSubCAkeyReplication for better coverage Action: opened PR body: """ MANUAL CHERRY PICK of commits in https://github

[Freeipa-devel] [freeipa PR#5128][opened] ipatests: kinit_as_user: collect kdcinfo.REALM on failure

2020-09-22 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5128 Author: fcami Title: #5128: ipatests: kinit_as_user: collect kdcinfo.REALM on failure Action: opened PR body: """ When requesting a tgt fails after a password reset, collecting: /var/lib/sss/pubconf/kdcinfo.$REALM will help determine how SSSD w

[Freeipa-devel] [freeipa PR#5127][closed] [Backport][ipa-4-8] SELinux: add dedicated policy for ipa-pki-retrieve-key + ipatests: enhance TestSubCAkeyReplication for better coverage

2020-09-22 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5127 Author: fcami Title: #5127: [Backport][ipa-4-8] SELinux: add dedicated policy for ipa-pki-retrieve-key + ipatests: enhance TestSubCAkeyReplication for better coverage Action: closed To pull the PR as Git branch: git remote add ghfreeipa https

[Freeipa-devel] [freeipa PR#5133][opened] SELinux: do not double-define node_t and pki_tomcat_cert_t

2020-09-23 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5133 Author: fcami Title: #5133: SELinux: do not double-define node_t and pki_tomcat_cert_t Action: opened PR body: """ node_t and pki_tomcat_cert_t are defined in other modules. Do not double-define them. Fixes: https://pagure.io/freeipa/issue/851

[Freeipa-devel] [freeipa PR#5136][closed] [Backport][ipa-4-8] SELinux: do not double-define node_t and pki_tomcat_cert_t

2020-09-23 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5136 Author: tiran Title: #5136: [Backport][ipa-4-8] SELinux: do not double-define node_t and pki_tomcat_cert_t Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5136/h

[Freeipa-devel] [freeipa PR#5140][closed] [Backport][ipa-4-8] Add ipa_pki_retrieve_key_exec() interface

2020-09-23 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5140 Author: tiran Title: #5140: [Backport][ipa-4-8] Add ipa_pki_retrieve_key_exec() interface Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5140/head:pr5140 git che

[Freeipa-devel] [freeipa PR#5151][opened] IPA-EPN: Make ipa-epn.timer a configuration file

2020-09-25 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5151 Author: fcami Title: #5151: IPA-EPN: Make ipa-epn.timer a configuration file Action: opened PR body: """ The time at which ipa-epn runs using the timer should be configurable. Currently, ipa-epn.timer is not marked as a config file, resulting i

[Freeipa-devel] [freeipa PR#5151][closed] IPA-EPN: Make ipa-epn.timer a configuration file

2020-09-25 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5151 Author: fcami Title: #5151: IPA-EPN: Make ipa-epn.timer a configuration file Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5151/head:pr5151 git checkout pr5151

[Freeipa-devel] [freeipa PR#5176][opened] freeipa.spec.in: depend on libsss_sudo

2020-10-06 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5176 Author: fcami Title: #5176: freeipa.spec.in: depend on libsss_sudo Action: opened PR body: """ On 10.10+ releases od Dogtag, the PKI installer will not depend on sudo anymore. This opens the possibility of creating IPA servers without a properl

[Freeipa-devel] [freeipa PR#5183][opened] ipatests: various enhancement to hidden replica tests

2020-10-08 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5183 Author: fcami Title: #5183: ipatests: various enhancement to hidden replica tests Action: opened PR body: """ ipatests: hidden replica: misc fixes Split a test in two and add additional fixes. ipatests: run freeipa-healt

[Freeipa-devel] [freeipa PR#5184][opened] ipatests: run freeipa-healthcheck on hidden replica

2020-10-08 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5184 Author: fcami Title: #5184: ipatests: run freeipa-healthcheck on hidden replica Action: opened PR body: """ Make sure freeipa-healthcheck can run on FreeIPA clusters with hidden replica. Fixes: https://pagure.io/freeipa/issue/8536 """ To

[Freeipa-devel] [freeipa PR#5196][opened] ipatests: invoke JRE with -Djava.security.debug=access:failure

2020-10-13 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5196 Author: fcami Title: #5196: ipatests: invoke JRE with -Djava.security.debug=access:failure Action: opened PR body: """ ipatests: invoke JRE with -Djava.security.debug=access:failure DO NOT MERGE. https://github.com/dogtagpki/pki/issues/329

[Freeipa-devel] [freeipa PR#5198][opened] tox.ini: Extend max-line-length from 80 to 88+

2020-10-15 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5198 Author: fcami Title: #5198: tox.ini: Extend max-line-length from 80 to 88+ Action: opened PR body: """ Change tox.ini's 80c character limit to 88. - 88 is the limit for a font size of 14 on a FHD (1920x1200) screen with two editors side-by-si

[Freeipa-devel] [freeipa PR#5313][opened] Gracefully handle Nsds5replicalastupdateend's absence

2020-12-02 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5313 Author: fcami Title: #5313: Gracefully handle Nsds5replicalastupdateend's absence Action: opened PR body: """ https://pagure.io/freeipa/issue/8605 ipa-replica-manage: handle missing attributes If nsds5replicalastupdateend is not yet pr

[Freeipa-devel] [freeipa PR#5196][closed] ipatests: invoke JRE with -Djava.security.debug=access:failure

2020-12-10 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5196 Author: fcami Title: #5196: ipatests: invoke JRE with -Djava.security.debug=access:failure Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5196/head:pr5196 git ch

[Freeipa-devel] [freeipa PR#5341][opened] ipa-client-install: unilaterally set dns_lookup_kdc to True

2020-12-15 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5341 Author: fcami Title: #5341: ipa-client-install: unilaterally set dns_lookup_kdc to True Action: opened PR body: """ Previously, dns_lookup_kdc was only set to True if DNS discovery worked or if the KDC was not specified on the command-line. Se

[Freeipa-devel] [freeipa PR#5343][opened] PR-CI templates: add test_integration/test_installation_client.py

2020-12-15 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5343 Author: fcami Title: #5343: PR-CI templates: add test_integration/test_installation_client.py Action: opened PR body: """ Fixes: https://pagure.io/freeipa/issue/8082 Signed-off-by: François Cami """ To pull the PR as Git branch: git remote ad

[Freeipa-devel] [freeipa PR#5343][closed] PR-CI templates: add test_integration/test_installation_client.py

2020-12-16 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5343 Author: fcami Title: #5343: PR-CI templates: add test_integration/test_installation_client.py Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5343/head:pr5343 git

[Freeipa-devel] [freeipa PR#5366][opened] set SELinux back to Permissive in gating.xml

2020-12-18 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5366 Author: fcami Title: #5366: set SELinux back to Permissive in gating.xml Action: opened PR body: """ https://github.com/freeipa/freeipa/pull/5362 was merged with a commit meant to test the changes with gating in Enforcing mode, not to be merge

[Freeipa-devel] [freeipa PR#5408][opened] upgrade.py: restart CS for 30 seconds until it is up

2021-01-07 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5408 Author: fcami Title: #5408: upgrade.py: restart CS for 30 seconds until it is up Action: opened PR body: """ Restart CS as many times as necessary within a 30-second window to wait for DS to be ready. Fixes: https://pagure.io/freeipa/issue

[Freeipa-devel] [freeipa PR#5451][opened] ipatests: test_ipahealthcheck: fix division

2021-01-19 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5451 Author: fcami Title: #5451: ipatests: test_ipahealthcheck: fix division Action: opened PR body: """ df uses 1024 bytes as its default display value, but this can be tweaked by environment variables or a CLI knob. Force the output unit to 1024 b

[Freeipa-devel] [freeipa PR#5472][opened] Manual backport of 9f0ec27e9f13ed40b8e58162d99bf9b0e8b4afd5.

2021-01-22 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5472 Author: fcami Title: #5472: Manual backport of 9f0ec27e9f13ed40b8e58162d99bf9b0e8b4afd5. Action: opened PR body: """ Manual backport of 9f0ec27e9f13ed40b8e58162d99bf9b0e8b4afd5. Original commit message: *

[Freeipa-devel] [freeipa PR#5533][opened] [Backport][ipa-4-9] freeipa.spec.in: client: depend on libsss_sudo

2021-02-08 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5533 Author: fcami Title: #5533: [Backport][ipa-4-9] freeipa.spec.in: client: depend on libsss_sudo Action: opened PR body: """ MANUAL BACKPORT of https://github.com/freeipa/freeipa/pull/5176 On 10.10+ releases of Dogtag, the PKI installer will no

[Freeipa-devel] [freeipa PR#5556][opened] ipatests: various enhancement to hidden replica tests

2021-02-15 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5556 Author: fcami Title: #5556: ipatests: various enhancement to hidden replica tests Action: opened PR body: """ https://github.com/freeipa/freeipa/pull/5183 redux. I cannot reopen the original PR because the branch was force-pushed. + ipate

[Freeipa-devel] [freeipa PR#5408][closed] upgrade.py: restart CS for 30 seconds until it is up

2021-02-18 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5408 Author: fcami Title: #5408: upgrade.py: restart CS for 30 seconds until it is up Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5408/head:pr5408 git checkout pr5

[Freeipa-devel] [freeipa PR#5607][opened] ipatests: fix nightly_latest_testing_selinux template

2021-03-05 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5607 Author: fcami Title: #5607: ipatests: fix nightly_latest_testing_selinux template Action: opened PR body: """ The TestInstallWithoutSudo entry referenced fedora-latest instead of testing-fedora for its build dependency. Fix it. Fixes: https://

[Freeipa-devel] [freeipa PR#5636][opened] ipa-client-install: output a warning if sudo is not present

2021-03-15 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5636 Author: fcami Title: #5636: ipa-client-install: output a warning if sudo is not present Action: opened PR body: """ Fixes: https://pagure.io/freeipa/issue/8530 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freei

[Freeipa-devel] [freeipa PR#5638][closed] [Backport][ipa-4-9] ipa-client-install: output a warning if sudo is not present

2021-03-17 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5638 Author: rcritten Title: #5638: [Backport][ipa-4-9] ipa-client-install: output a warning if sudo is not present Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/56

[Freeipa-devel] [freeipa PR#5852][opened] rpcserver.py: perf_counter_ns is Python 3.7+

2021-06-22 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5852 Author: fcami Title: #5852: rpcserver.py: perf_counter_ns is Python 3.7+ Action: opened PR body: """ perf_counter_ns is only available in Python 3.7 and later. Define a lambda for 3.6 and lower. Fixes: TBD Signed-off-by: François Cami """ To

[Freeipa-devel] [freeipa PR#5907][opened] ipatests: smbclient "-k" => "--use-kerberos=required"

2021-07-19 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5907 Author: fcami Title: #5907: ipatests: smbclient "-k" => "--use-kerberos=required" Action: opened PR body: """ As of Samba 4.15rc1, smbclient does not accept -k anymore. The -k|--kerberos option ("Try to authenticate with kerberos." has been rep

[Freeipa-devel] [freeipa PR#5907][closed] ipatests: smbclient "-k" => "--use-kerberos=required"

2021-07-20 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5907 Author: fcami Title: #5907: ipatests: smbclient "-k" => "--use-kerberos=required" Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5907/head:pr5907 git checkout pr

[Freeipa-devel] [freeipa PR#5909][opened] [Backport][ipa-4-9] ipatests: smbclient "-k" => "--use-kerberos=desired"

2021-07-20 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5909 Author: fcami Title: #5909: [Backport][ipa-4-9] ipatests: smbclient "-k" => "--use-kerberos=desired" Action: opened PR body: """ Change documentation: https://download.samba.org/pub/samba/rc/samba-4.15.0rc1.WHATSNEW.txt As of Samba 4.15rc1, s

[Freeipa-devel] [freeipa PR#5909][closed] [Backport][ipa-4-9] ipatests: smbclient "-k" => "--use-kerberos=desired"

2021-07-20 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5909 Author: fcami Title: #5909: [Backport][ipa-4-9] ipatests: smbclient "-k" => "--use-kerberos=desired" Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5909/head:pr

[Freeipa-devel] [freeipa PR#5910][opened] test_acme: make password renewal more robust

2021-07-20 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5910 Author: fcami Title: #5910: test_acme: make password renewal more robust Action: opened PR body: """ Fixes: https://pagure.io/freeipa/issue/8929 Signed-off-by: François Cami """ To pull the PR as Git branch: git remote add ghfreeipa https://

[Freeipa-devel] [freeipa PR#5911][opened] tasks.py: fix flake8-reported issues

2021-07-20 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5911 Author: fcami Title: #5911: tasks.py: fix flake8-reported issues Action: opened PR body: """ Fixes: https://pagure.io/freeipa/issue/8931 Signed-off-by: François Cami """ To pull the PR as Git branch: git remote add ghfreeipa https://github.co

[Freeipa-devel] [freeipa PR#5911][closed] tasks.py: fix flake8-reported issues

2021-07-21 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5911 Author: fcami Title: #5911: tasks.py: fix flake8-reported issues Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5911/head:pr5911 git checkout pr5911

[Freeipa-devel] [freeipa PR#5912][opened] [Backport][ipa-4-9] tasks.py: fix flake8-reported issues

2021-07-21 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5912 Author: fcami Title: #5912: [Backport][ipa-4-9] tasks.py: fix flake8-reported issues Action: opened PR body: """ This PR was opened automatically because PR #5911 was pushed to master and backport to ipa-4-9 is required. """ To pull the PR as

[Freeipa-devel] [freeipa PR#5910][closed] test_acme: make password renewal more robust

2021-07-21 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5910 Author: fcami Title: #5910: test_acme: make password renewal more robust Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5910/head:pr5910 git checkout pr5910

[Freeipa-devel] [freeipa PR#5913][opened] [Backport][ipa-4-9] test_acme: make password renewal more robust

2021-07-21 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5913 Author: fcami Title: #5913: [Backport][ipa-4-9] test_acme: make password renewal more robust Action: opened PR body: """ This PR was opened automatically because PR #5910 was pushed to master and backport to ipa-4-9 is required. """ To pull t

[Freeipa-devel] [freeipa PR#5914][opened] ipatests: refactor test_ipa_cert_fix with tasks

2021-07-21 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5914 Author: fcami Title: #5914: ipatests: refactor test_ipa_cert_fix with tasks Action: opened PR body: """ Fixes: https://pagure.io/freeipa/issue/8932 Signed-off-by: François Cami """ To pull the PR as Git branch: git remote add ghfreeipa https:

[Freeipa-devel] [freeipa PR#5916][opened] Azure: temporarily disable problematic tests

2021-07-21 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5916 Author: fcami Title: #5916: Azure: temporarily disable problematic tests Action: opened PR body: """ test_installation.TestInstallMaster and test_advise rely on DNS forwarders and hit a known BIND bug quite often. Disable these tests in gating

[Freeipa-devel] [freeipa PR#5916][closed] Azure: temporarily disable problematic tests

2021-07-23 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5916 Author: fcami Title: #5916: Azure: temporarily disable problematic tests Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5916/head:pr5916 git checkout pr5916

[Freeipa-devel] [freeipa PR#5921][opened] [Backport][ipa-4-9] Azure: temporarily disable problematic tests #5916

2021-07-23 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5921 Author: fcami Title: #5921: [Backport][ipa-4-9] Azure: temporarily disable problematic tests #5916 Action: opened PR body: """ Manual backport of https://github.com/freeipa/freeipa/pull/5916 The PR-CI template required a cherry-pick. """ To

[Freeipa-devel] [freeipa PR#5914][closed] ipatests: refactor test_ipa_cert_fix with tasks

2021-07-27 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5914 Author: fcami Title: #5914: ipatests: refactor test_ipa_cert_fix with tasks Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5914/head:pr5914 git checkout pr5914 _

[Freeipa-devel] [freeipa PR#5925][closed] [ipa-4-9] ipatests: bump prci boxes + move gating to f34

2021-07-27 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5925 Author: netoarmando Title: #5925: [ipa-4-9] ipatests: bump prci boxes + move gating to f34 Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5925/head:pr5925 git ch

[Freeipa-devel] [freeipa PR#5924][closed] [master] ipatests: bump prci boxes + move gating to f34

2021-07-27 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5924 Author: netoarmando Title: #5924: [master] ipatests: bump prci boxes + move gating to f34 Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5924/head:pr5924 git che

[Freeipa-devel] [freeipa PR#5929][opened] ipatests: test removing BIND and the named user

2021-07-27 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5929 Author: fcami Title: #5929: ipatests: test removing BIND and the named user Action: opened PR body: """ Test that FreeIPA can be installed if the named user does not exist. Related: https://github.com/freeipa/freeipa/pull/5927 Signed-off-by: F

[Freeipa-devel] [freeipa PR#5929][closed] ipatests: test removing BIND and the named user

2021-07-27 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5929 Author: fcami Title: #5929: ipatests: test removing BIND and the named user Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5929/head:pr5929 git checkout pr5929 _

[Freeipa-devel] [freeipa PR#5930][opened] Azure: re-enable tests using forwarders

2021-07-28 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5930 Author: fcami Title: #5930: Azure: re-enable tests using forwarders Action: opened PR body: """ Since BIND was updated in Fedora, revert: b71009b31a1d4dc76af3052a1e826e0306525410 Related: https://pagure.io/freeipa/issue/8864 Signed-off-by: Fra

[Freeipa-devel] [freeipa PR#5929][reopened] ipatests: test removing BIND and the named user

2021-07-28 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5929 Author: fcami Title: #5929: ipatests: test removing BIND and the named user Action: reopened To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5929/head:pr5929 git checkout pr5929

[Freeipa-devel] [freeipa PR#5929][closed] ipatests: test removing BIND and the named user

2021-07-28 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5929 Author: fcami Title: #5929: ipatests: test removing BIND and the named user Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5929/head:pr5929 git checkout pr5929 _

[Freeipa-devel] [freeipa PR#5931][opened] freeipa.spec.in: remove python3-pexpect from Requires

2021-07-28 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5931 Author: fcami Title: #5931: freeipa.spec.in: remove python3-pexpect from Requires Action: opened PR body: """ python3-pexpect will be removed in RHEL9. Update BuildRequires/Requires accordingly. Fixes: https://pagure.io/freeipa/issue/8938 Sign

[Freeipa-devel] [freeipa PR#5939][opened] ipaserver: disable resolved' stub resolver

2021-08-02 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5939 Author: fcami Title: #5939: ipaserver: disable resolved' stub resolver Action: opened PR body: """ Disable systemd-resolved stub resolver at install time. Use systemd-resolved' maintained list of upstream DNS servers instead. Rationale: system

[Freeipa-devel] [freeipa PR#5931][closed] freeipa.spec.in: remove python3-pexpect from Requires

2021-08-02 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5931 Author: fcami Title: #5931: freeipa.spec.in: remove python3-pexpect from Requires Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5931/head:pr5931 git checkout pr

[Freeipa-devel] [freeipa PR#5941][opened] [Backport][ipa-4-9] freeipa.spec.in: remove python3-pexpect from Requires

2021-08-02 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5941 Author: fcami Title: #5941: [Backport][ipa-4-9] freeipa.spec.in: remove python3-pexpect from Requires Action: opened PR body: """ This PR was opened automatically because PR #5931 was pushed to master and backport to ipa-4-9 is required. """

[Freeipa-devel] [freeipa PR#5953][opened] ipatests: use krb5_trace in TestIpaAdTrustInstall

2021-08-05 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5953 Author: fcami Title: #5953: ipatests: use krb5_trace in TestIpaAdTrustInstall Action: opened PR body: """ tasks.create_active_user can fail in a subtle way when there are two IPA servers due to replication delays. Using the debug-enabled versio

[Freeipa-devel] [freeipa PR#5953][closed] ipatests: use krb5_trace in TestIpaAdTrustInstall

2021-08-05 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5953 Author: fcami Title: #5953: ipatests: use krb5_trace in TestIpaAdTrustInstall Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5953/head:pr5953 git checkout pr5953

[Freeipa-devel] [freeipa PR#5954][opened] [Backport][ipa-4-9] ipatests: use krb5_trace in TestIpaAdTrustInstall

2021-08-05 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5954 Author: fcami Title: #5954: [Backport][ipa-4-9] ipatests: use krb5_trace in TestIpaAdTrustInstall Action: opened PR body: """ This PR was opened automatically because PR #5953 was pushed to master and backport to ipa-4-9 is required. """ To

[Freeipa-devel] [freeipa PR#5955][opened] Add index for dnahostname

2021-08-05 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5955 Author: fcami Title: #5955: Add index for dnahostname Action: opened PR body: """ There are 60+ searches for: Filter: (dnahostname=FQDN) at startup. Fixes: https://pagure.io/freeipa/issue/8945 Signed-off-by: François Cami """ To pull the P

[Freeipa-devel] [freeipa PR#5959][opened] Fix string check in uninstall helper

2021-08-06 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5959 Author: fcami Title: #5959: Fix string check in uninstall helper Action: opened PR body: """ The install helpers used an invalid string check. ``('ubuntu')`` is not a tuple. It's a string with superfluous parenthesis. A single-item tuple would

[Freeipa-devel] [freeipa PR#5986][opened] freeipa.spec.in: update 389-DS version

2021-08-20 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5986 Author: fcami Title: #5986: freeipa.spec.in: update 389-DS version Action: opened PR body: """ Signed-off-by: François Cami """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull

[Freeipa-devel] [freeipa PR#5986][closed] freeipa.spec.in: update 389-DS version

2021-08-20 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5986 Author: fcami Title: #5986: freeipa.spec.in: update 389-DS version Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5986/head:pr5986 git checkout pr5986 __

[Freeipa-devel] [freeipa PR#5987][opened] [Backport][ipa-4-9] freeipa.spec.in: update 389-DS version

2021-08-20 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5987 Author: fcami Title: #5987: [Backport][ipa-4-9] freeipa.spec.in: update 389-DS version Action: opened PR body: """ This PR was opened automatically because PR #5986 was pushed to master and backport to ipa-4-9 is required. """ To pull the PR

[Freeipa-devel] [freeipa PR#5983][closed] Azure: Run pycodestyle check in Lint job

2021-08-24 Thread fcami via FreeIPA-devel
URL: https://github.com/freeipa/freeipa/pull/5983 Author: stanislavlevin Title: #5983: Azure: Run pycodestyle check in Lint job Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5983/head:pr5983 git checkout pr5983

  1   2   3   4   >