[Freeipa-devel] [freeipa PR#619][+pushed] pytest 3.x compatibility

URL: https://github.com/freeipa/freeipa/pull/619 Title: #619: pytest 3.x compatibility Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#643][comment] [master, 4.5] spec file: Bump requires to make Certificate Login in WebUI work

URL: https://github.com/freeipa/freeipa/pull/643 Title: #643: [master, 4.5] spec file: Bump requires to make Certificate Login in WebUI work pvomacka commented: """ Please create new ticket and use it. The ticket you used is in already closed milestone. """ See the full comment at

[Freeipa-devel] [freeipa PR#651][+pushed] WebUI: Fix showing vault in selfservice view

URL: https://github.com/freeipa/freeipa/pull/651 Title: #651: WebUI: Fix showing vault in selfservice view Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#651][closed] WebUI: Fix showing vault in selfservice view

URL: https://github.com/freeipa/freeipa/pull/651 Author: pvomacka Title: #651: WebUI: Fix showing vault in selfservice view Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/651/head:pr651 git checkout pr651 --

[Freeipa-devel] [freeipa PR#659][+ack] WebUI: Allow to add certs to certmapping with CERT LINES around

URL: https://github.com/freeipa/freeipa/pull/659 Title: #659: WebUI: Allow to add certs to certmapping with CERT LINES around Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#643][-ack] [master, 4.5] spec file: Bump requires to make Certificate Login in WebUI work

URL: https://github.com/freeipa/freeipa/pull/643 Title: #643: [master, 4.5] spec file: Bump requires to make Certificate Login in WebUI work Label: -ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#658][comment] Hide PKI Client database password in log file

URL: https://github.com/freeipa/freeipa/pull/658 Title: #658: Hide PKI Client database password in log file stlaz commented: """ You will need to do something similar in `ipaserver/install/krainstance.py` as well. """ See the full comment at

[Freeipa-devel] [freeipa PR#657][+pushed] configure: fix --disable-server with certauth plugin

URL: https://github.com/freeipa/freeipa/pull/657 Title: #657: configure: fix --disable-server with certauth plugin Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#657][closed] configure: fix --disable-server with certauth plugin

URL: https://github.com/freeipa/freeipa/pull/657 Author: sumit-bose Title: #657: configure: fix --disable-server with certauth plugin Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/657/head:pr657 git checkout

[Freeipa-devel] [freeipa PR#657][comment] configure: fix --disable-server with certauth plugin

URL: https://github.com/freeipa/freeipa/pull/657 Title: #657: configure: fix --disable-server with certauth plugin pvomacka commented: """ ipa-4-5: * 203d5416ce807f5cdcf9e2431feef84d49b3df61 configure: fix --disable-server with certauth plugin * 8fde0b88d7c9360e16820d6086eba3e3ca0eee1e

[Freeipa-devel] [freeipa PR#641][comment] Set "KDC:Disable Last Success" by default

URL: https://github.com/freeipa/freeipa/pull/641 Title: #641: Set "KDC:Disable Last Success" by default pvomacka commented: """ ipa-4-5: * fdcd5f486839d9279dcba74b74f7756ace5812fa Set "KDC:Disable Last Success" by default master: * eeaf428b1befc37489ed5ee14ae193b46cbd1db7 Set "KDC:Disable

[Freeipa-devel] [freeipa PR#641][closed] Set "KDC:Disable Last Success" by default

URL: https://github.com/freeipa/freeipa/pull/641 Author: MartinBasti Title: #641: Set "KDC:Disable Last Success" by default Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/641/head:pr641 git checkout pr641 --

[Freeipa-devel] [freeipa PR#651][comment] WebUI: Fix showing vault in selfservice view

URL: https://github.com/freeipa/freeipa/pull/651 Title: #651: WebUI: Fix showing vault in selfservice view pvomacka commented: """ ipa-4-5: * 7b3cb1ccad28a1fd17803bdd7dd245bdfee9a046 WebUI: Fix showing vault in selfservice view master: * ab6d7ac50a93efa6a9e3566dbe07b34a23c41cce WebUI: Fix

[Freeipa-devel] [freeipa PR#641][+pushed] Set "KDC:Disable Last Success" by default

URL: https://github.com/freeipa/freeipa/pull/641 Title: #641: Set "KDC:Disable Last Success" by default Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#645][+ack] Create temporaty directories at the begining of uninstall

URL: https://github.com/freeipa/freeipa/pull/645 Title: #645: Create temporaty directories at the begining of uninstall Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#659][comment] WebUI: Allow to add certs to certmapping with CERT LINES around

URL: https://github.com/freeipa/freeipa/pull/659 Title: #659: WebUI: Allow to add certs to certmapping with CERT LINES around pvoborni commented: """ Code LGTM, ACK give that it works for @flo-renaud """ See the full comment at

[Freeipa-devel] [freeipa PR#643][+ack] [master, 4.5] spec file: Bump requires to make Certificate Login in WebUI work

URL: https://github.com/freeipa/freeipa/pull/643 Title: #643: [master, 4.5] spec file: Bump requires to make Certificate Login in WebUI work Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#659][comment] WebUI: Allow to add certs to certmapping with CERT LINES around

URL: https://github.com/freeipa/freeipa/pull/659 Title: #659: WebUI: Allow to add certs to certmapping with CERT LINES around flo-renaud commented: """ Hi @pvomacka , thank you for the patch, it works as expected. """ See the full comment at

[Freeipa-devel] [freeipa PR#619][comment] pytest 3.x compatibility

URL: https://github.com/freeipa/freeipa/pull/619 Title: #619: pytest 3.x compatibility pvomacka commented: """ master: * dd6b72e418eba01cc9eb9a7305291bf141b9eadf pytest 3.x compatibility """ See the full comment at https://github.com/freeipa/freeipa/pull/619#issuecomment-289500363 -- Manage

[Freeipa-devel] [freeipa PR#645][comment] Create temporaty directories at the begining of uninstall

URL: https://github.com/freeipa/freeipa/pull/645 Title: #645: Create temporaty directories at the begining of uninstall MartinBasti commented: """ Not the nicest but good enough for now """ See the full comment at https://github.com/freeipa/freeipa/pull/645#issuecomment-289509303 -- Manage

[Freeipa-devel] [freeipa PR#660][comment] rpcserver.login_x509: Actually return reply from __call__ method

URL: https://github.com/freeipa/freeipa/pull/660 Title: #660: rpcserver.login_x509: Actually return reply from __call__ method pvomacka commented: """ Please change ticket to this one: https://pagure.io/freeipa/issue/6819 """ See the full comment at

[Freeipa-devel] [freeipa PR#617][closed] Allow renaming of sudo and HBAC rules

URL: https://github.com/freeipa/freeipa/pull/617 Author: stlaz Title: #617: Allow renaming of sudo and HBAC rules Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/617/head:pr617 git checkout pr617 -- Manage your

[Freeipa-devel] [freeipa PR#640][comment] Remove pkinit options from master/replica on DL0

URL: https://github.com/freeipa/freeipa/pull/640 Title: #640: Remove pkinit options from master/replica on DL0 MartinBasti commented: """ ``` ipa-replica-install --no-pkinit (as negative test without master installed) 2017-03-27T17:04:09Z DEBUG Logging to /var/log/ipareplica-install.log

[Freeipa-devel] [freeipa PR#617][+pushed] Allow renaming of sudo and HBAC rules

URL: https://github.com/freeipa/freeipa/pull/617 Title: #617: Allow renaming of sudo and HBAC rules Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#653][closed] Bump samba version for FIPS and priv. separation

URL: https://github.com/freeipa/freeipa/pull/653 Author: stlaz Title: #653: Bump samba version for FIPS and priv. separation Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/653/head:pr653 git checkout pr653 --

[Freeipa-devel] [freeipa PR#653][+pushed] Bump samba version for FIPS and priv. separation

URL: https://github.com/freeipa/freeipa/pull/653 Title: #653: Bump samba version for FIPS and priv. separation Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#653][comment] Bump samba version for FIPS and priv. separation

URL: https://github.com/freeipa/freeipa/pull/653 Title: #653: Bump samba version for FIPS and priv. separation pvomacka commented: """ ipa-4-5: * 41ff57b81807f6747b098f1ed2c281031e22bbae Bump samba version for FIPS and priv. separation master: * b7ae3363fd5bb1bf3b3175395d5bd3d26c9b48f0 Bump

[Freeipa-devel] [freeipa PR#656][+ack] Backup CA cert from kerberos folder

URL: https://github.com/freeipa/freeipa/pull/656 Title: #656: Backup CA cert from kerberos folder Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#659][comment] WebUI: Allow to add certs to certmapping with CERT LINES around

URL: https://github.com/freeipa/freeipa/pull/659 Title: #659: WebUI: Allow to add certs to certmapping with CERT LINES around pvomacka commented: """ ipa-4-5: * eda23a9847197513555f6237b46c658365dfc12d WebUI: Allow to add certs to certmapping with CERT LINES around master: *

[Freeipa-devel] [freeipa PR#617][comment] Allow renaming of sudo and HBAC rules

URL: https://github.com/freeipa/freeipa/pull/617 Title: #617: Allow renaming of sudo and HBAC rules pvomacka commented: """ ipa-4-5: * 28db6cd40100c6301121e3f82c074624fe53729c Reworked the renaming mechanism * 85f2a19f88eef94ff080a42246658f572b5275f4 Allow renaming of the HBAC rule objects *

[Freeipa-devel] [freeipa PR#659][closed] WebUI: Allow to add certs to certmapping with CERT LINES around

URL: https://github.com/freeipa/freeipa/pull/659 Author: pvomacka Title: #659: WebUI: Allow to add certs to certmapping with CERT LINES around Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/659/head:pr659 git

[Freeipa-devel] [freeipa PR#656][comment] Backup CA cert from kerberos folder

URL: https://github.com/freeipa/freeipa/pull/656 Title: #656: Backup CA cert from kerberos folder MartinBasti commented: """ ``` mod_wsgi (pid=4398): Exception occurred processing WSGI script '/usr/share/ipa/wsgi.py'. Traceback (most recent call last): File "/usr/share/ipa/wsgi.py", line

[Freeipa-devel] [freeipa PR#659][+pushed] WebUI: Allow to add certs to certmapping with CERT LINES around

URL: https://github.com/freeipa/freeipa/pull/659 Title: #659: WebUI: Allow to add certs to certmapping with CERT LINES around Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#656][comment] Backup CA cert from kerberos folder

URL: https://github.com/freeipa/freeipa/pull/656 Title: #656: Backup CA cert from kerberos folder MartinBasti commented: """ ACK, however webUI is still not working after restore """ See the full comment at https://github.com/freeipa/freeipa/pull/656#issuecomment-289514024 -- Manage your

[Freeipa-devel] [freeipa PR#658][synchronized] Hide PKI Client database password in log file

URL: https://github.com/freeipa/freeipa/pull/658 Author: Akasurde Title: #658: Hide PKI Client database password in log file Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/658/head:pr658 git checkout

[Freeipa-devel] [freeipa PR#470][comment] WebUI: Size limit warning on details pages fixed

URL: https://github.com/freeipa/freeipa/pull/470 Title: #470: WebUI: Size limit warning on details pages fixed pvomacka commented: """ ipa-4-5: * 422c9058d9a6be69db4eab7db654b9184ae5eab6 WebUI: Add support for suppressing warnings * 697a5779b377a5d76c1cb212514b6feb46326f71 WebUI: suppress

[Freeipa-devel] [freeipa PR#616][-rejected] Simplify KRA transport cert cache

URL: https://github.com/freeipa/freeipa/pull/616 Title: #616: Simplify KRA transport cert cache Label: -rejected -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#616][comment] Simplify KRA transport cert cache

URL: https://github.com/freeipa/freeipa/pull/616 Title: #616: Simplify KRA transport cert cache HonzaCholasta commented: """ I guess you must have missed my last comment about the PR being almost OK - reopening. """ See the full comment at

[Freeipa-devel] [freeipa PR#617][synchronized] Allow renaming of sudo and HBAC rules

URL: https://github.com/freeipa/freeipa/pull/617 Author: stlaz Title: #617: Allow renaming of sudo and HBAC rules Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/617/head:pr617 git checkout pr617 From

[Freeipa-devel] [freeipa PR#575][comment] IPA certauth plugin

URL: https://github.com/freeipa/freeipa/pull/575 Title: #575: IPA certauth plugin dkupka commented: """ I've tested the patches and it worked as expected. Once CI successfully finishes I'll ACK it. """ See the full comment at

[Freeipa-devel] [freeipa PR#490][comment] certdb: use certutil and match_hostname for cert verification

URL: https://github.com/freeipa/freeipa/pull/490 Title: #490: certdb: use certutil and match_hostname for cert verification stlaz commented: """ @tiran Could you please finish the review? I guess we can omit the change in `.spec.in` for the review time being. """ See the full comment at

[Freeipa-devel] [freeipa PR#644][reopened] extdom: improve certificate request

URL: https://github.com/freeipa/freeipa/pull/644 Author: sumit-bose Title: #644: extdom: improve certificate request Action: reopened To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/644/head:pr644 git checkout pr644 -- Manage

[Freeipa-devel] [freeipa PR#631][synchronized] Upgrade: configure PKINIT after adding anonymous principal

URL: https://github.com/freeipa/freeipa/pull/631 Author: martbab Title: #631: Upgrade: configure PKINIT after adding anonymous principal Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/631/head:pr631 git

[Freeipa-devel] [freeipa PR#655][comment] httpinstance.disable_system_trust: Don't fail if module 'Root Certs' …

URL: https://github.com/freeipa/freeipa/pull/655 Title: #655: httpinstance.disable_system_trust: Don't fail if module 'Root Certs' … stlaz commented: """ For the record: ```bash [slaznick@vm-066 ~]$ sudo modutil -dbdir nssdb/ -disable 'Root Certs' -force ERROR: Module "Root Certs" not found in

[Freeipa-devel] [freeipa PR#616][reopened] Simplify KRA transport cert cache

URL: https://github.com/freeipa/freeipa/pull/616 Author: tiran Title: #616: Simplify KRA transport cert cache Action: reopened To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/616/head:pr616 git checkout pr616 -- Manage your

[Freeipa-devel] [freeipa PR#656][opened] Backup CA cert from kerberos folder

URL: https://github.com/freeipa/freeipa/pull/656 Author: stlaz Title: #656: Backup CA cert from kerberos folder Action: opened PR body: """ I have no idea how I missed this file in previous backup fixing attempts. https://pagure.io/freeipa/issue/6748 """ To pull the PR as Git branch: git

[Freeipa-devel] [freeipa PR#616][comment] Simplify KRA transport cert cache

URL: https://github.com/freeipa/freeipa/pull/616 Title: #616: Simplify KRA transport cert cache tiran commented: """ I did not miss https://github.com/freeipa/freeipa/pull/616#issuecomment-287739826 """ See the full comment at

[Freeipa-devel] [freeipa PR#618][comment] [WIP] Tox testing support for client wheel packages

URL: https://github.com/freeipa/freeipa/pull/618 Title: #618: [WIP] Tox testing support for client wheel packages tiran commented: """ Tox testing should also be integrated into Travis CI to catch bugs like https://pagure.io/freeipa/issue/6816. The tox script will automatically test features

[Freeipa-devel] [freeipa PR#655][comment] httpinstance.disable_system_trust: Don't fail if module 'Root Certs' …

URL: https://github.com/freeipa/freeipa/pull/655 Title: #655: httpinstance.disable_system_trust: Don't fail if module 'Root Certs' … stlaz commented: """ Hm, I believe the `-list` operation was there just to check whether the module is there. If `modutil` fails like this no matter the

[Freeipa-devel] [freeipa PR#655][comment] httpinstance.disable_system_trust: Don't fail if module 'Root Certs' …

URL: https://github.com/freeipa/freeipa/pull/655 Title: #655: httpinstance.disable_system_trust: Don't fail if module 'Root Certs' … stlaz commented: """ Hm, I believe the `-list` operation was there just to check whether the module is there. If `modutil` fails like this no matter the

[Freeipa-devel] [freeipa PR#657][opened] configure: fix --disable-server with certauth plugin

URL: https://github.com/freeipa/freeipa/pull/657 Author: sumit-bose Title: #657: configure: fix --disable-server with certauth plugin Action: opened PR body: """ Resolves https://pagure.io/freeipa/issue/6816 """ To pull the PR as Git branch: git remote add ghfreeipa

[Freeipa-devel] [freeipa PR#655][comment] httpinstance.disable_system_trust: Don't fail if module 'Root Certs' …

URL: https://github.com/freeipa/freeipa/pull/655 Title: #655: httpinstance.disable_system_trust: Don't fail if module 'Root Certs' … stlaz commented: """ For the record: ```bash [slaznick@vm-066 ~]$ sudo modutil -dbdir nssdb/ -disable 'Root Certs' -force ERROR: Module "Root Certs" not found in

[Freeipa-devel] [freeipa PR#617][comment] Allow renaming of sudo and HBAC rules

URL: https://github.com/freeipa/freeipa/pull/617 Title: #617: Allow renaming of sudo and HBAC rules stlaz commented: """ *sigh* there was a rogue space. Split into three separate commits. """ See the full comment at https://github.com/freeipa/freeipa/pull/617#issuecomment-289366812 --

[Freeipa-devel] [freeipa PR#575][synchronized] IPA certauth plugin

URL: https://github.com/freeipa/freeipa/pull/575 Author: sumit-bose Title: #575: IPA certauth plugin Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/575/head:pr575 git checkout pr575 From

[Freeipa-devel] [freeipa PR#617][comment] Allow renaming of sudo and HBAC rules

URL: https://github.com/freeipa/freeipa/pull/617 Title: #617: Allow renaming of sudo and HBAC rules stlaz commented: """ *sigh* there was a rogue space. Split into three separate commits. """ See the full comment at https://github.com/freeipa/freeipa/pull/617#issuecomment-289366812 --

[Freeipa-devel] [freeipa PR#634][closed] cert: do not limit internal searches in cert-find

URL: https://github.com/freeipa/freeipa/pull/634 Author: HonzaCholasta Title: #634: cert: do not limit internal searches in cert-find Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/634/head:pr634 git checkout

[Freeipa-devel] [freeipa PR#575][+pushed] IPA certauth plugin

URL: https://github.com/freeipa/freeipa/pull/575 Title: #575: IPA certauth plugin Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#575][comment] IPA certauth plugin

URL: https://github.com/freeipa/freeipa/pull/575 Title: #575: IPA certauth plugin dkupka commented: """ master: * da880decfedc66f9d0d2734dcb86c23a8866f603 ipa-kdb: add ipadb_fetch_principals_with_extra_filter() * c4156041feb9c48598427ad59e43313b9c7327bb IPA certauth plugin ipa-4-5: *

[Freeipa-devel] [freeipa PR#650][comment] CA-less installation fix

URL: https://github.com/freeipa/freeipa/pull/650 Title: #650: CA-less installation fix HonzaCholasta commented: """ @stlaz, `NSSDatabase.publish_ca_cert()` and `CertDB.publish_ca_cert()` become unused after your changes, could we remove them? """ See the full comment at

[Freeipa-devel] [freeipa PR#575][+ack] IPA certauth plugin

URL: https://github.com/freeipa/freeipa/pull/575 Title: #575: IPA certauth plugin Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#575][closed] IPA certauth plugin

URL: https://github.com/freeipa/freeipa/pull/575 Author: sumit-bose Title: #575: IPA certauth plugin Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/575/head:pr575 git checkout pr575 -- Manage your subscription

Re: [Freeipa-devel] Announcing FreeIPA 4.4.4

On 03/23/2017 07:15 PM, Martin Basti wrote: > > Release date: 2017-03-23 > > The FreeIPA team would like to announce FreeIPA 4.4.4 release! > > It can be downloaded from http://www.freeipa.org/page/Downloads. > Builds for > Fedora 24 will be available in the official COPR repository >

Re: [Freeipa-devel] Announcing FreeIPA 4.3.3

On 03/23/2017 08:06 PM, Martin Basti wrote: > > Release date: 2017-03-23 > > The FreeIPA team would like to announce FreeIPA 4.3.3 release! > > It can be downloaded from http://www.freeipa.org/page/Downloads. > > Please note that this is the last upstream release of FreeIPA 4.3.x > branch. > >

[Freeipa-devel] [freeipa PR#644][synchronized] extdom: improve certificate request

URL: https://github.com/freeipa/freeipa/pull/644 Author: sumit-bose Title: #644: extdom: improve certificate request Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/644/head:pr644 git checkout pr644 From

[Freeipa-devel] [freeipa PR#575][reopened] IPA certauth plugin

URL: https://github.com/freeipa/freeipa/pull/575 Author: sumit-bose Title: #575: IPA certauth plugin Action: reopened To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/575/head:pr575 git checkout pr575 -- Manage your

[Freeipa-devel] [freeipa PR#575][closed] IPA certauth plugin

URL: https://github.com/freeipa/freeipa/pull/575 Author: sumit-bose Title: #575: IPA certauth plugin Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/575/head:pr575 git checkout pr575 -- Manage your subscription

[Freeipa-devel] [freeipa PR#639][+pushed] WebUI: Login for AD Users

URL: https://github.com/freeipa/freeipa/pull/639 Title: #639: WebUI: Login for AD Users Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#639][comment] WebUI: Login for AD Users

URL: https://github.com/freeipa/freeipa/pull/639 Title: #639: WebUI: Login for AD Users martbab commented: """ master: * 1dcdcd12f4336c98e7507fe0e7f0c0da2bc69eba WebUI: check principals in lowercase * 2992e3c5d480567cfdc71b38365d5d74f009b4d2 WebUI: add method for disabling item in user

[Freeipa-devel] [freeipa PR#639][closed] WebUI: Login for AD Users

URL: https://github.com/freeipa/freeipa/pull/639 Author: pvomacka Title: #639: WebUI: Login for AD Users Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/639/head:pr639 git checkout pr639 -- Manage your

[Freeipa-devel] [freeipa PR#634][+pushed] cert: do not limit internal searches in cert-find

URL: https://github.com/freeipa/freeipa/pull/634 Title: #634: cert: do not limit internal searches in cert-find Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#634][comment] cert: do not limit internal searches in cert-find

URL: https://github.com/freeipa/freeipa/pull/634 Title: #634: cert: do not limit internal searches in cert-find martbab commented: """ master: * 6de507c2cad255975665eca6dd6ef7c8f2458d51 cert: do not limit internal searches in cert-find ipa-4-5: * 6382f9eee335907362a5ccb44b892f59de7d3751

[Freeipa-devel] [freeipa PR#644][closed] extdom: improve certificate request

URL: https://github.com/freeipa/freeipa/pull/644 Author: sumit-bose Title: #644: extdom: improve certificate request Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/644/head:pr644 git checkout pr644 -- Manage

[Freeipa-devel] [freeipa PR#631][comment] Upgrade: configure PKINIT after adding anonymous principal

URL: https://github.com/freeipa/freeipa/pull/631 Title: #631: Upgrade: configure PKINIT after adding anonymous principal martbab commented: """ I have prepared a more thorough fix which should cover more edge cases. """ See the full comment at

[Freeipa-devel] [freeipa PR#655][opened] httpinstance.disable_system_trust: Don't fail if module 'Root Certs' …

URL: https://github.com/freeipa/freeipa/pull/655 Author: dkupka Title: #655: httpinstance.disable_system_trust: Don't fail if module 'Root Certs' … Action: opened PR body: """ …is not available Server installation failed when attmpting to disable module 'Root Certs' and the module was not

[Freeipa-devel] [freeipa PR#655][synchronized] httpinstance.disable_system_trust: Don't fail if module 'Root Certs' …

URL: https://github.com/freeipa/freeipa/pull/655 Author: dkupka Title: #655: httpinstance.disable_system_trust: Don't fail if module 'Root Certs' … Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa

[Freeipa-devel] [freeipa PR#655][comment] httpinstance.disable_system_trust: Don't fail if module 'Root Certs' …

URL: https://github.com/freeipa/freeipa/pull/655 Title: #655: httpinstance.disable_system_trust: Don't fail if module 'Root Certs' … dkupka commented: """ @tiran @stlaz Makes sense. I will update it accordingly. Thanks for suggestions. """ See the full comment at

[Freeipa-devel] [freeipa PR#617][comment] Allow renaming of sudo and HBAC rules

URL: https://github.com/freeipa/freeipa/pull/617 Title: #617: Allow renaming of sudo and HBAC rules MartinBasti commented: """ Please update release notes (changelog) """ See the full comment at https://github.com/freeipa/freeipa/pull/617#issuecomment-289423071 -- Manage your subscription

[Freeipa-devel] [freeipa PR#617][+ack] Allow renaming of sudo and HBAC rules

URL: https://github.com/freeipa/freeipa/pull/617 Title: #617: Allow renaming of sudo and HBAC rules Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#655][comment] httpinstance.disable_system_trust: Don't fail if module 'Root Certs' …

URL: https://github.com/freeipa/freeipa/pull/655 Title: #655: httpinstance.disable_system_trust: Don't fail if module 'Root Certs' … HonzaCholasta commented: """ @stlaz, you can't do just `-disable`, as that would break upgrade (note that the `-list` is there because `-disable` always reports

[Freeipa-devel] [freeipa PR#655][comment] httpinstance.disable_system_trust: Don't fail if module 'Root Certs' …

URL: https://github.com/freeipa/freeipa/pull/655 Title: #655: httpinstance.disable_system_trust: Don't fail if module 'Root Certs' … tiran commented: """ @stlaz The broad except also catches and ignores typos in the command line or missing ```modutil``` binary. """ See the full comment at

[Freeipa-devel] [freeipa PR#657][comment] configure: fix --disable-server with certauth plugin

URL: https://github.com/freeipa/freeipa/pull/657 Title: #657: configure: fix --disable-server with certauth plugin lslebodn commented: """ `AM_CONDITIONAL` need to be executed every time. So just `AM_CONDITIONAL([BUILD_IPA_CERTAUTH_PLUGIN]` need to be moved from sever.m4 -> configure.ac. The

[Freeipa-devel] [freeipa PR#657][synchronized] configure: fix --disable-server with certauth plugin

URL: https://github.com/freeipa/freeipa/pull/657 Author: sumit-bose Title: #657: configure: fix --disable-server with certauth plugin Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/657/head:pr657 git

[Freeipa-devel] [freeipa PR#655][comment] httpinstance.disable_system_trust: Don't fail if module 'Root Certs' …

URL: https://github.com/freeipa/freeipa/pull/655 Title: #655: httpinstance.disable_system_trust: Don't fail if module 'Root Certs' … stlaz commented: """ @tiran I of course agree on narrowing the broad except down, my point is we should rather remove the whole `-list` part and just try to do

[Freeipa-devel] [freeipa PR#657][synchronized] configure: fix --disable-server with certauth plugin

URL: https://github.com/freeipa/freeipa/pull/657 Author: sumit-bose Title: #657: configure: fix --disable-server with certauth plugin Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/657/head:pr657 git

[Freeipa-devel] [freeipa PR#657][comment] configure: fix --disable-server with certauth plugin

URL: https://github.com/freeipa/freeipa/pull/657 Title: #657: configure: fix --disable-server with certauth plugin tiran commented: """ LGTM I verified that the PR fixes * --disable-server * --enable-server with old version of krb5 that does not have ```krb5/certauth_plugin.h``` """ See the

[Freeipa-devel] [freeipa PR#653][+ack] Bump samba version for FIPS and priv. separation

URL: https://github.com/freeipa/freeipa/pull/653 Title: #653: Bump samba version for FIPS and priv. separation Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#655][comment] httpinstance.disable_system_trust: Don't fail if module 'Root Certs' …

URL: https://github.com/freeipa/freeipa/pull/655 Title: #655: httpinstance.disable_system_trust: Don't fail if module 'Root Certs' … stlaz commented: """ @tiran I of course agree on narrowing the broad except down, my point is we should rather remove the whole `-list` part and just try to do

[Freeipa-devel] [freeipa PR#655][comment] httpinstance.disable_system_trust: Don't fail if module 'Root Certs' …

URL: https://github.com/freeipa/freeipa/pull/655 Title: #655: httpinstance.disable_system_trust: Don't fail if module 'Root Certs' … stlaz commented: """ @HonzaCholasta You're right, I completely forgot about that one. """ See the full comment at

[Freeipa-devel] [freeipa PR#619][+ack] pytest 3.x compatibility

URL: https://github.com/freeipa/freeipa/pull/619 Title: #619: pytest 3.x compatibility Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#657][+ack] configure: fix --disable-server with certauth plugin

URL: https://github.com/freeipa/freeipa/pull/657 Title: #657: configure: fix --disable-server with certauth plugin Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#655][synchronized] httpinstance.disable_system_trust: Don't fail if module 'Root Certs' …

URL: https://github.com/freeipa/freeipa/pull/655 Author: dkupka Title: #655: httpinstance.disable_system_trust: Don't fail if module 'Root Certs' … Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa

[Freeipa-devel] [freeipa PR#659][opened] WebUI: Allow to add certs to certmapping with CERT LINES around

URL: https://github.com/freeipa/freeipa/pull/659 Author: pvomacka Title: #659: WebUI: Allow to add certs to certmapping with CERT LINES around Action: opened PR body: """ The certificate to the certmapping might be inserted as base64 encoded blob. This patch allows to also insert the

[Freeipa-devel] [freeipa PR#657][comment] configure: fix --disable-server with certauth plugin

URL: https://github.com/freeipa/freeipa/pull/657 Title: #657: configure: fix --disable-server with certauth plugin lslebodn commented: """ `AM_CONDITIONAL` need to be executed every time. So just `AM_CONDITIONAL([BUILD_IPA_CERTAUTH_PLUGIN]` need to be moved from sever.m4 -> configure.ac. The

[Freeipa-devel] [freeipa PR#658][opened] Hide PKI Client database password in log file

URL: https://github.com/freeipa/freeipa/pull/658 Author: Akasurde Title: #658: Hide PKI Client database password in log file Action: opened PR body: """ Signed-off-by: Abhijeet Kasurde """ To pull the PR as Git branch: git remote add ghfreeipa

[Freeipa-devel] [freeipa PR#623][comment] client install: do not assume /etc/krb5.conf.d exists

URL: https://github.com/freeipa/freeipa/pull/623 Title: #623: client install: do not assume /etc/krb5.conf.d exists lslebodn commented: """ FYI: `/etc/krb5.conf.d` is not default include directory it is fedora/el7 specific. debian testing has MIT kerberos 1.15 and `/etc/krb5.conf.d` does not

[Freeipa-devel] [freeipa PR#623][comment] client install: do not assume /etc/krb5.conf.d exists

URL: https://github.com/freeipa/freeipa/pull/623 Title: #623: client install: do not assume /etc/krb5.conf.d exists lslebodn commented: """ FYI: `/etc/krb5.conf.d` is not default include directory it is fedora/el7 specific. debian testing has MIT kerberos 1.15 and `/etc/krb5.conf.d` does not

[Freeipa-devel] [freeipa PR#517][edited] Use Custodia 0.3 features

URL: https://github.com/freeipa/freeipa/pull/517 Author: tiran Title: #517: Use Custodia 0.3 features Action: edited Changed field: title Original value: """ Use Custodia 0.3 features """ -- Manage your subscription for the Freeipa-devel mailing list:

[Freeipa-devel] [freeipa PR#517][comment] Use Custodia 0.3.1 features

URL: https://github.com/freeipa/freeipa/pull/517 Title: #517: Use Custodia 0.3.1 features tiran commented: """ 0.3.1 with fix for the space in URLs is out. * rawhide build https://koji.fedoraproject.org/koji/taskinfo?taskID=18637684 * F26 scratch build

[Freeipa-devel] [freeipa PR#641][+ack] Set "KDC:Disable Last Success" by default

URL: https://github.com/freeipa/freeipa/pull/641 Title: #641: Set "KDC:Disable Last Success" by default Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA:

[Freeipa-devel] [freeipa PR#641][comment] Set "KDC:Disable Last Success" by default

URL: https://github.com/freeipa/freeipa/pull/641 Title: #641: Set "KDC:Disable Last Success" by default stlaz commented: """ This change of default behavior seems to have removed a lot of write-load from DS so I believe we should go with it. However, add comment about it to the issue

  1   2   >