[Freeipa-devel] [freeipa PR#805][opened] Fix rare race condition with missing ccache file

URL: https://github.com/freeipa/freeipa/pull/805 Author: simo5 Title: #805: Fix rare race condition with missing ccache file Action: opened PR body: """ In some circumstances the ccache file may disappear while mod_auth_gssapi still has a valid cookie and the client is pe

[Freeipa-devel] [freeipa PR#805][synchronized] Fix rare race condition with missing ccache file

URL: https://github.com/freeipa/freeipa/pull/805 Author: simo5 Title: #805: Fix rare race condition with missing ccache file Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/805/head:pr805 git checkout

[Freeipa-devel] [freeipa PR#892][opened] Always check peer has keys before connecting

URL: https://github.com/freeipa/freeipa/pull/892 Author: simo5 Title: #892: Always check peer has keys before connecting Action: opened PR body: """ When pulling the DM password we may have the same issues reported in ticket #6838 for CA keys. This commit makes sure we always

[Freeipa-devel] [freeipa PR#890][opened] Make sure we check ccaches in all rpcserver paths

URL: https://github.com/freeipa/freeipa/pull/890 Author: simo5 Title: #890: Make sure we check ccaches in all rpcserver paths Action: opened PR body: """ We need to verify the ccache is avcailable in all cases or finalize will cause us to acquire creds with the keytab which

[Freeipa-devel] [freeipa PR#851][+ack] ipa-kdb: add pkinit authentication indicator in case of a successful certauth

URL: https://github.com/freeipa/freeipa/pull/851 Title: #851: ipa-kdb: add pkinit authentication indicator in case of a successful certauth Label: +ack ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an

[Freeipa-devel] [freeipa PR#855][synchronized] Prevent issues with older clients

URL: https://github.com/freeipa/freeipa/pull/855 Author: simo5 Title: #855: Prevent issues with older clients Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/855/head:pr855 git checkout pr855 From

[Freeipa-devel] [freeipa PR#855][comment] Prevent issues with older clients

URL: https://github.com/freeipa/freeipa/pull/855 Title: #855: Prevent issues with older clients simo5 commented: """ Change to used the correct bug number: https://pagure.io/freeipa/issue/7001 """ See the full comment at https://github.com/freeipa/freeipa/p

[Freeipa-devel] [freeipa PR#855][comment] Prevent issues with older clients

URL: https://github.com/freeipa/freeipa/pull/855 Title: #855: Prevent issues with older clients simo5 commented: """ Fixes https://pagure.io/freeipa/issue/6774 """ See the full comment at https://github.com/freeipa/freeipa/p

[Freeipa-devel] [freeipa PR#855][opened] Prevent issues with older clients

URL: https://github.com/freeipa/freeipa/pull/855 Author: simo5 Title: #855: Prevent issues with older clients Action: opened PR body: """ Older clients have issues parsing cookies, and cannot handle well the MaxAge setting. So the first patch is about removing it. Unfortuna

[Freeipa-devel] [freeipa PR#855][comment] Prevent issues with older clients

URL: https://github.com/freeipa/freeipa/pull/855 Title: #855: Prevent issues with older clients simo5 commented: """ I thought just defining it as None in the constants was enough ? We do not want to set a kinit_lifetime entry in defaults.conf, I am ok with the default being

[Freeipa-devel] [freeipa PR#3672][opened] Make sure to have storage space for tag

URL: https://github.com/freeipa/freeipa/pull/3672 Author: simo5 Title: #3672: Make sure to have storage space for tag Action: opened PR body: """ ber_scanf expects a pointer to a ber_tag_t to return the tag pointed at by "t", if that is not provided the pointer

[Freeipa-devel] [freeipa PR#5744][opened] WIP: Convert HMAC to EVP interface

URL: https://github.com/freeipa/freeipa/pull/5744 Author: simo5 Title: #5744: WIP: Convert HMAC to EVP interface Action: opened PR body: """ I haven't even compiled this yet, but I thought it would be better to post it then forget in my branch @abbra @tiran let me kno