Hi everyone,
Some people of our team are working on a simple tool (a PoC actually)
for FreeIPA [1].
The idea is to build a tool that can check the state of FreeIPA.
In the PoC we are only focusing on certificate related things.
What do we have until now? Ideas and some few lines of code. We n
URL: https://github.com/freeipa/freeipa/pull/695
Author: MartinBasti
Title: #695: [4.4] Fix PKCS11 helper
Action: synchronized
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/695/head:pr695
git checkout pr695
From 626890eb13b46
URL: https://github.com/freeipa/freeipa/pull/695
Author: MartinBasti
Title: #695: [4.4] Fix PKCS11 helper
Action: edited
Changed field: title
Original value:
"""
Fix PKCS11 helper
"""
--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/fre
URL: https://github.com/freeipa/freeipa/pull/695
Author: MartinBasti
Title: #695: Fix PKCS11 helper
Action: opened
PR body:
"""
Slots in HSM are not assigned statically, we have to chose proper
slot from token label.
Softhsm i2.2.0 changed this behavior and now slots can change over
time (it
URL: https://github.com/freeipa/freeipa/pull/694
Title: #694: RFC: implement local PKINIT deployment in server/replica install
MartinBasti commented:
"""
`upgrade and transitions between PKINIT configurations` does this cover:
- CA-less to CA-full upgrade?
- installed 4.4.4 --- upgraded ---> 4.
URL: https://github.com/freeipa/freeipa/pull/675
Author: MartinBasti
Title: #675: [4.5, master] Fix PKCS11 helper
Action: edited
Changed field: title
Original value:
"""
[WIP] Fix PKCS11 helper
"""
--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailma
URL: https://github.com/freeipa/freeipa/pull/675
Title: #675: [4.5, master] Fix PKCS11 helper
MartinBasti commented:
"""
In 50% cases DNSSEC works for me :-). Ready for review.
(The issue was unrelated to PKCS11, I had somehow broken machine probably)
"""
See the full comment at
https://githu
URL: https://github.com/freeipa/freeipa/pull/693
Title: #693: [tests] collect audit.log for easier selinux investigation
Label: +ack
--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.or
URL: https://github.com/freeipa/freeipa/pull/675
Author: MartinBasti
Title: #675: [WIP] Fix PKCS11 helper
Action: synchronized
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/675/head:pr675
git checkout pr675
From 5d5db000a2ffe
URL: https://github.com/freeipa/freeipa/pull/694
Author: martbab
Title: #694: RFC: implement local PKINIT deployment in server/replica install
Action: opened
PR body:
"""
This PR implements a basic local PKINIT functionality for server install with
'--no-pkinit' specified, and replica install
URL: https://github.com/freeipa/freeipa/pull/694
Author: martbab
Title: #694: RFC: implement local PKINIT deployment in server/replica install
Action: edited
Changed field: body
Original value:
"""
This PR implements a basic local PKINIT functionality for server install with
'--no-pkinit' spe
URL: https://github.com/freeipa/freeipa/pull/675
Author: MartinBasti
Title: #675: [WIP] Fix PKCS11 helper
Action: synchronized
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/675/head:pr675
git checkout pr675
From 72283bb7c4e29
URL: https://github.com/freeipa/freeipa/pull/688
Author: redhatrises
Title: #688: Update get_attr_filter in LDAPSearch to handle nsaccountlock user
searches
Action: synchronized
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/
URL: https://github.com/freeipa/freeipa/pull/693
Author: MartinBasti
Title: #693: [tests] collect audit.log for easier selinux investigation
Action: opened
PR body:
"""
Audit log contains useful information about selinux issues
"""
To pull the PR as Git branch:
git remote add ghfreeipa https:
URL: https://github.com/freeipa/freeipa/pull/688
Author: redhatrises
Title: #688: Update get_attr_filter in LDAPSearch to handle nsaccountlock user
searches
Action: edited
Changed field: body
Original value:
"""
- Update get_attr_filter in LDAPSearch to handle nsaccountlock by setting
nsacc
URL: https://github.com/freeipa/freeipa/pull/688
Author: redhatrises
Title: #688: Update get_attr_filter in LDAPSearch to handle nsaccountlock user
searches
Action: synchronized
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/
URL: https://github.com/freeipa/freeipa/pull/667
Title: #667: idrange-add: properly handle empty --dom-name option
flo-renaud commented:
"""
@martbab
thank you for the suggestion. The new test is available in PR #692
"""
See the full comment at
https://github.com/freeipa/freeipa/pull/667#iss
URL: https://github.com/freeipa/freeipa/pull/692
Author: flo-renaud
Title: #692: tests: add non-reg for idrange-add
Action: opened
PR body:
"""
Add non regression test for issue 6404: when idrange-add is called with
empty dom-name, the command returns
ipa: ERROR: an internal error has occurred
URL: https://github.com/freeipa/freeipa/pull/691
Author: stlaz
Title: #691: Add force-join option to replica install
Action: synchronized
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/691/head:pr691
git checkout pr691
From 90
URL: https://github.com/freeipa/freeipa/pull/691
Author: stlaz
Title: #691: Add force-join option to replica install
Action: synchronized
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/691/head:pr691
git checkout pr691
From 6c
URL: https://github.com/freeipa/freeipa/pull/667
Title: #667: idrange-add: properly handle empty --dom-name option
tomaskrizek commented:
"""
master:
* 70743c8c48db54309a09d510b3a5d8ae86c29e58 idrange-add: properly handle empty
--dom-name option
ipa-4-5:
* 077a61524d79ac5ab6f0eb46450c82ad55
URL: https://github.com/freeipa/freeipa/pull/667
Title: #667: idrange-add: properly handle empty --dom-name option
Label: +pushed
--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/p
URL: https://github.com/freeipa/freeipa/pull/667
Author: flo-renaud
Title: #667: idrange-add: properly handle empty --dom-name option
Action: closed
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/667/head:pr667
git checkout pr
URL: https://github.com/freeipa/freeipa/pull/691
Author: stlaz
Title: #691: Add force-join option to replica install
Action: opened
PR body:
"""
This patchset adds the force-join option to the replica installer. It also
tries to improve the developer's experience by narrowing down the scope o
URL: https://github.com/freeipa/freeipa/pull/687
Author: stlaz
Title: #687: Add pki_pin only when needed
Action: closed
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/687/head:pr687
git checkout pr687
--
Manage your subscript
URL: https://github.com/freeipa/freeipa/pull/687
Title: #687: Add pki_pin only when needed
tomaskrizek commented:
"""
Replica installation with CA and KRA seems to work fine now.
"""
See the full comment at
https://github.com/freeipa/freeipa/pull/687#issuecomment-291786444
--
Manage your subs
URL: https://github.com/freeipa/freeipa/pull/687
Title: #687: Add pki_pin only when needed
Label: +pushed
--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code
URL: https://github.com/freeipa/freeipa/pull/687
Title: #687: Add pki_pin only when needed
tomaskrizek commented:
"""
master:
* 1aa77fe389e957a652c530ec0456ee05467754b3 Add pki_pin only when needed
ipa-4-5:
* f53c76b1055d4f7b26fc127852a66f942845cbae Add pki_pin only when needed
"""
See th
URL: https://github.com/freeipa/freeipa/pull/687
Title: #687: Add pki_pin only when needed
Label: +ack
--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code
URL: https://github.com/freeipa/freeipa/pull/677
Author: HonzaCholasta
Title: #677: cert: defer cert-find result post-processing
Action: synchronized
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/677/head:pr677
git checkout p
URL: https://github.com/freeipa/freeipa/pull/667
Title: #667: idrange-add: properly handle empty --dom-name option
martbab commented:
"""
@flo-renaud can you please add a test case for this to
`ipatests/test_xmlrpc/test_range_plugin.py` so that we do not regress in the
future?
"""
See the ful
URL: https://github.com/freeipa/freeipa/pull/672
Title: #672: IPA-KDB: use relative path in ipa-certmap config snippet
HonzaCholasta commented:
"""
master:
* 6c2772dde52c84024d32533b29e6cbd04c69924a IPA-KDB: use relative path in
ipa-certmap config snippet
ipa-4-5:
* fa46a01c37021e7b2b57fd30
URL: https://github.com/freeipa/freeipa/pull/672
Author: sumit-bose
Title: #672: IPA-KDB: use relative path in ipa-certmap config snippet
Action: closed
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/672/head:pr672
git checkou
URL: https://github.com/freeipa/freeipa/pull/672
Title: #672: IPA-KDB: use relative path in ipa-certmap config snippet
Label: +pushed
--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.o
URL: https://github.com/freeipa/freeipa/pull/672
Title: #672: IPA-KDB: use relative path in ipa-certmap config snippet
Label: +ack
--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/
35 matches
Mail list logo