URL: https://github.com/freeipa/freeipa/pull/729
Author: pvomacka
Title: #729: Turn on NSSOCSP check in mod_nss conf
Action: synchronized
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/729/head:pr729
git checkout pr729
From 3c
URL: https://github.com/freeipa/freeipa/pull/679
Title: #679: Make sure remote hosts have our keys
pvoborni commented:
"""
What is this PR waiting for?
"""
See the full comment at
https://github.com/freeipa/freeipa/pull/679#issuecomment-298530908
--
Manage your subscription for the Freeipa-de
URL: https://github.com/freeipa/freeipa/pull/679
Title: #679: Make sure remote hosts have our keys
stlaz commented:
"""
I was expecting some action about my previous comment:
> Fails with
> 2017-04-12T14:16:14Z DEBUG The ipa-replica-install command failed,
> exception: ValueError: Incorrect n
URL: https://github.com/freeipa/freeipa/pull/751
Author: flo-renaud
Title: #751: ipa-client-install: remove extra space in pkinit_anchors
definition
Action: opened
PR body:
"""
ipa-client-install modifies /etc/krb5.conf and defines the following line:
pkinit_anchors = FILE: /etc/ipa/ca.cr
URL: https://github.com/freeipa/freeipa/pull/741
Author: stlaz
Title: #741: 6.9 -> 7.4 migration fixes
Action: synchronized
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/741/head:pr741
git checkout pr741
From 8cfc0770191003f9
URL: https://github.com/freeipa/freeipa/pull/741
Author: stlaz
Title: #741: 6.9 -> 7.4 migration fixes
Action: synchronized
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/741/head:pr741
git checkout pr741
From 169dea79ade3283c
URL: https://github.com/freeipa/freeipa/pull/729
Author: pvomacka
Title: #729: Turn on NSSOCSP check in mod_nss conf
Action: synchronized
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/729/head:pr729
git checkout pr729
From 74
URL: https://github.com/freeipa/freeipa/pull/751
Title: #751: ipa-client-install: remove extra space in pkinit_anchors definition
abbra commented:
"""
LGTM.
For the record, this is broken since cf1c4e84e74ea15fe5cf7219872cf131bd53281e
which is in 4.5.0 release. So we need to backport this to 4
URL: https://github.com/freeipa/freeipa/pull/751
Title: #751: ipa-client-install: remove extra space in pkinit_anchors definition
Label: +ack
--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.f
URL: https://github.com/freeipa/freeipa/pull/729
Author: pvomacka
Title: #729: Turn on NSSOCSP check in mod_nss conf
Action: synchronized
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/729/head:pr729
git checkout pr729
From 91
On 04/28/2017 02:41 PM, Martin Bašti wrote:
On 28.04.2017 14:17, Tomas Krizek wrote:
On 04/28/2017 10:15 AM, Petr Vobornik wrote:
Hi all,
I created "blocker" tag for FreeIPA Git Hub PRs.
It is should be used to mark PRs which solves test blocker or other
functional blockers - e.g. blocks c
URL: https://github.com/freeipa/freeipa/pull/741
Title: #741: 6.9 -> 7.4 migration fixes
MartinBasti commented:
"""
It failed to me
```
[20/28]: Configure HTTP to proxy connections
[21/28]: restarting certificate server
[22/28]: migrating certificate profiles to LDAP
[error] NetworkError
URL: https://github.com/freeipa/freeipa/pull/741
Title: #741: 6.9 -> 7.4 migration fixes
stlaz commented:
"""
This was supposed to be fixed by the patch and worked for me, it seems that I
may need to investigate it further.
"""
See the full comment at
https://github.com/freeipa/freeipa/pull/7
URL: https://github.com/freeipa/freeipa/pull/734
Title: #734: kerberos session: use CA cert with full cert chain for obtaining
cookie
Label: +ack
--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://
URL: https://github.com/freeipa/freeipa/pull/750
Author: tscherf
Title: #750: Fixed typo in ipa-client-install help output
Action: closed
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/750/head:pr750
git checkout pr750
--
Man
URL: https://github.com/freeipa/freeipa/pull/750
Title: #750: Fixed typo in ipa-client-install help output
Label: +pushed
--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Cont
URL: https://github.com/freeipa/freeipa/pull/750
Title: #750: Fixed typo in ipa-client-install help output
MartinBasti commented:
"""
master:
* e3f849d541e8d054b0932d8ec1bd4c836e53c6f0 Fixed typo in ipa-client-install
output
"""
See the full comment at
https://github.com/freeipa/freeipa/pu
URL: https://github.com/freeipa/freeipa/pull/734
Title: #734: kerberos session: use CA cert with full cert chain for obtaining
cookie
Label: +pushed
--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http
URL: https://github.com/freeipa/freeipa/pull/734
Author: pvoborni
Title: #734: kerberos session: use CA cert with full cert chain for obtaining
cookie
Action: closed
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/734/head:pr7
URL: https://github.com/freeipa/freeipa/pull/734
Title: #734: kerberos session: use CA cert with full cert chain for obtaining
cookie
MartinBasti commented:
"""
master:
* c19196a0d3fc0a38c4c83cb8a7fde56e6bc310af kerberos session: use CA cert with
full cert chain for obtaining cookie
ipa-4-5
URL: https://github.com/freeipa/freeipa/pull/751
Title: #751: ipa-client-install: remove extra space in pkinit_anchors definition
Label: +pushed
--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://ww
URL: https://github.com/freeipa/freeipa/pull/751
Author: flo-renaud
Title: #751: ipa-client-install: remove extra space in pkinit_anchors
definition
Action: closed
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/751/head:pr751
URL: https://github.com/freeipa/freeipa/pull/751
Title: #751: ipa-client-install: remove extra space in pkinit_anchors definition
MartinBasti commented:
"""
master:
* 26dbab1fd4384b8f3999b153c2d94220cf541ad2 ipa-client-install: remove extra
space in pkinit_anchors definition
ipa-4-5:
* a3c4
URL: https://github.com/freeipa/freeipa/pull/729
Title: #729: Turn on NSSOCSP check in mod_nss conf
flo-renaud commented:
"""
Hi @pvomacka
I tested your last update with a new install and with an upgraded instance, and
both are functionally OK. Revoked certs do not allow to access IPA Web UI.
URL: https://github.com/freeipa/freeipa/pull/723
Title: #723: Store GSSAPI session key in /var/run/httpd
Label: +rejected
--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Cont
URL: https://github.com/freeipa/freeipa/pull/723
Author: MartinBasti
Title: #723: Store GSSAPI session key in /var/run/httpd
Action: closed
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/723/head:pr723
git checkout pr723
--
M
URL: https://github.com/freeipa/freeipa/pull/723
Title: #723: Store GSSAPI session key in /var/run/httpd
MartinBasti commented:
"""
The issue will be fixed on the SELinux side
"""
See the full comment at
https://github.com/freeipa/freeipa/pull/723#issuecomment-298627474
--
Manage your subscri
URL: https://github.com/freeipa/freeipa/pull/741
Author: stlaz
Title: #741: 6.9 -> 7.4 migration fixes
Action: synchronized
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/741/head:pr741
git checkout pr741
From 802b2ad635f3e622
URL: https://github.com/freeipa/freeipa/pull/741
Title: #741: 6.9 -> 7.4 migration fixes
stlaz commented:
"""
Turns out I forgot to reorder the CA installation steps a bit.
"""
See the full comment at
https://github.com/freeipa/freeipa/pull/741#issuecomment-298631763
--
Manage your subscripti
URL: https://github.com/freeipa/freeipa/pull/729
Title: #729: Turn on NSSOCSP check in mod_nss conf
MartinBasti commented:
"""
augeas should be dependency of python2-ipaserver and python3-ipaserver
(python3-augeas) packages
```
* Module ipaserver.install.httpinstance
ipaserver/insta
URL: https://github.com/freeipa/freeipa/pull/729
Author: pvomacka
Title: #729: Turn on NSSOCSP check in mod_nss conf
Action: synchronized
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/729/head:pr729
git checkout pr729
From 9e
URL: https://github.com/freeipa/freeipa/pull/729
Title: #729: Turn on NSSOCSP check in mod_nss conf
pvomacka commented:
"""
Hello @flo-renaud, thank you for testing this.
Hello @MartinBasti, thank you for review. I just fixed that.
"""
See the full comment at
https://github.com/freeipa/freeip
URL: https://github.com/freeipa/freeipa/pull/736
Author: felipevolpone
Title: #736: Fixing the cert-request command comparing whole email address
case-sensitively.
Action: synchronized
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeip
URL: https://github.com/freeipa/freeipa/pull/741
Title: #741: 6.9 -> 7.4 migration fixes
Label: +ack
--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code
URL: https://github.com/freeipa/freeipa/pull/741
Title: #741: 6.9 -> 7.4 migration fixes
MartinBasti commented:
"""
master:
* 0d406fcb784924bfe685729f3156efb8c902b947 Refresh Dogtag RestClient.ca_host
property
* 92313c9e9d37733feb79d1b1c825178f48d6c69c Remove the cachedproperty class
ipa-4-5
URL: https://github.com/freeipa/freeipa/pull/741
Author: stlaz
Title: #741: 6.9 -> 7.4 migration fixes
Action: closed
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/741/head:pr741
git checkout pr741
--
Manage your subscriptio
URL: https://github.com/freeipa/freeipa/pull/741
Title: #741: 6.9 -> 7.4 migration fixes
Label: +pushed
--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code
URL: https://github.com/freeipa/freeipa/pull/736
Title: #736: Fixing the cert-request command comparing whole email address
case-sensitively.
felipevolpone commented:
"""
@frasertweedale I did the check in SAN extension.
However, I'm not sure if these are valid situations:
Case 1)
The princip
URL: https://github.com/freeipa/freeipa/pull/736
Author: felipevolpone
Title: #736: Fixing the cert-request command comparing whole email address
case-sensitively.
Action: synchronized
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeip
URL: https://github.com/freeipa/freeipa/pull/671
Title: #671: Slim down dependencies
MartinBasti commented:
"""
Due missing jinja, tox tests failed
```
ERROR: py27: commands failed
ERROR: py35: commands failed
ERROR: py36: commands failed
ERROR: pylint2: commands failed
ERROR: pylint3
URL: https://github.com/freeipa/freeipa/pull/679
Title: #679: Make sure remote hosts have our keys
stlaz commented:
"""
Still fails.
"""
See the full comment at
https://github.com/freeipa/freeipa/pull/679#issuecomment-298681896
--
Manage your subscription for the Freeipa-devel mailing list:
h
URL: https://github.com/freeipa/freeipa/pull/729
Title: #729: Turn on NSSOCSP check in mod_nss conf
MartinBasti commented:
"""
And you also need python[3]-augeas as Pylint BuildDependency to pass pylint :),
sorry I forgot about it.
"""
See the full comment at
https://github.com/freeipa/freeip
URL: https://github.com/freeipa/freeipa/pull/729
Title: #729: Turn on NSSOCSP check in mod_nss conf
MartinBasti commented:
"""
And you also need to add it in `ipaserver/setup.py` as dependency for our PyPI
packages
"""
See the full comment at
https://github.com/freeipa/freeipa/pull/729#issuec
URL: https://github.com/freeipa/freeipa/pull/752
Author: tomaskrizek
Title: #752: upgrade: add missing DN suffix when enabling KDC proxy
Action: opened
PR body:
"""
This issue prevented from upgrading from IPA 4.1.
I also discovered a missing python dependency when I was running the
ipa-serv
URL: https://github.com/freeipa/freeipa/pull/753
Author: MartinBasti
Title: #753: Check CA status: add HTTP timeout
Action: opened
PR body:
"""
https://pagure.io/freeipa/issue/6766
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeip
URL: https://github.com/freeipa/freeipa/pull/679
Title: #679: Make sure remote hosts have our keys
simo5 commented:
"""
Can you please attach more of the logs before the failure ?
"""
See the full comment at
https://github.com/freeipa/freeipa/pull/679#issuecomment-298734189
--
Manage your sub
URL: https://github.com/freeipa/freeipa/pull/679
Title: #679: Make sure remote hosts have our keys
simo5 commented:
"""
@stlaz just FYI, I am sking this info because I cannot reproduce locally with a
single replica.
"""
See the full comment at
https://github.com/freeipa/freeipa/pull/679#issue
URL: https://github.com/freeipa/freeipa/pull/679
Title: #679: Make sure remote hosts have our keys
simo5 commented:
"""
Nevermind I finally reproduced
"""
See the full comment at
https://github.com/freeipa/freeipa/pull/679#issuecomment-298750030
--
Manage your subscription for the Freeipa-dev
URL: https://github.com/freeipa/freeipa/pull/679
Author: simo5
Title: #679: Make sure remote hosts have our keys
Action: synchronized
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/679/head:pr679
git checkout pr679
From 0e70f0
URL: https://github.com/freeipa/freeipa/pull/679
Title: #679: Make sure remote hosts have our keys
simo5 commented:
"""
Turned out my master had some more relaxed permissions I added when developing
the feature.
I now have added a new function to just check for the host keys without asking
for
URL: https://github.com/freeipa/freeipa/pull/679
Title: #679: Make sure remote hosts have our keys
stlaz commented:
"""
@simo5 will check, sorry for not replying yesterday, I was no more at my
machine.
"""
See the full comment at
https://github.com/freeipa/freeipa/pull/679#issuecomment-298829
51 matches
Mail list logo
