[Freeipa-devel] [freeipa PR#643][opened] [master, 4.5] spec file: Bump requires to make Certificate Login in WebUI work

URL: https://github.com/freeipa/freeipa/pull/643 Author: dkupka Title: #643: [master, 4.5] spec file: Bump requires to make Certificate Login in WebUI work Action: opened PR body: """ gssproxy >= 0.7.0-2 - fixes impersonator checking mod_lookup_identity >= 0.9.9 - adds support for single cert

[Freeipa-devel] [freeipa PR#643][synchronized] [master, 4.5] spec file: Bump requires to make Certificate Login in WebUI work

URL: https://github.com/freeipa/freeipa/pull/643 Author: dkupka Title: #643: [master, 4.5] spec file: Bump requires to make Certificate Login in WebUI work Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/6

[Freeipa-devel] [freeipa PR#643][synchronized] [master, 4.5] spec file: Bump requires to make Certificate Login in WebUI work

URL: https://github.com/freeipa/freeipa/pull/643 Author: dkupka Title: #643: [master, 4.5] spec file: Bump requires to make Certificate Login in WebUI work Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/6

[Freeipa-devel] [freeipa PR#643][synchronized] [master, 4.5] spec file: Bump requires to make Certificate Login in WebUI work

URL: https://github.com/freeipa/freeipa/pull/643 Author: dkupka Title: #643: [master, 4.5] spec file: Bump requires to make Certificate Login in WebUI work Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/6

[Freeipa-devel] [freeipa PR#642][+ack] [4.4] Bump python-dns to improve processing of non-complete resolv.conf

URL: https://github.com/freeipa/freeipa/pull/642 Title: #642: [4.4] Bump python-dns to improve processing of non-complete resolv.conf Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://

[Freeipa-devel] [freeipa PR#642][comment] [4.4] Bump python-dns to improve processing of non-complete resolv.conf

URL: https://github.com/freeipa/freeipa/pull/642 Title: #642: [4.4] Bump python-dns to improve processing of non-complete resolv.conf tomaskrizek commented: """ ipa-4-4: * 951d27ecc591a71c4a1297623b6920136c01bb4b Bump python-dns to improve processing of non-complete resolv.conf """ See the f

[Freeipa-devel] [freeipa PR#642][+pushed] [4.4] Bump python-dns to improve processing of non-complete resolv.conf

URL: https://github.com/freeipa/freeipa/pull/642 Title: #642: [4.4] Bump python-dns to improve processing of non-complete resolv.conf Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http

[Freeipa-devel] [freeipa PR#642][closed] [4.4] Bump python-dns to improve processing of non-complete resolv.conf

URL: https://github.com/freeipa/freeipa/pull/642 Author: MartinBasti Title: #642: [4.4] Bump python-dns to improve processing of non-complete resolv.conf Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/642/head:

[Freeipa-devel] [freeipa PR#607][closed] Backup ipa-specific httpd unit-file

URL: https://github.com/freeipa/freeipa/pull/607 Author: stlaz Title: #607: Backup ipa-specific httpd unit-file Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/607/head:pr607 git checkout pr607 -- Manage your su

[Freeipa-devel] [freeipa PR#607][+pushed] Backup ipa-specific httpd unit-file

URL: https://github.com/freeipa/freeipa/pull/607 Title: #607: Backup ipa-specific httpd unit-file Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Co

[Freeipa-devel] [freeipa PR#607][comment] Backup ipa-specific httpd unit-file

URL: https://github.com/freeipa/freeipa/pull/607 Title: #607: Backup ipa-specific httpd unit-file tomaskrizek commented: """ master: * 2612c092dd797c9c8f772c785aae1f152f06847d Backup ipa-specific httpd unit-file ipa-4-5: * 59342a7f6fffe2aaf0b8ce4e10bb41444d8fa25f Backup ipa-specific httpd unit

[Freeipa-devel] [freeipa PR#644][opened] extdom: improve certificate request

URL: https://github.com/freeipa/freeipa/pull/644 Author: sumit-bose Title: #644: extdom: improve certificate request Action: opened PR body: """ Certificates can be assigned to multiple user so the extdom plugin must use sss_nss_getlistbycert() instead of sss_nss_getnamebycert() and return a l

[Freeipa-devel] [freeipa PR#617][comment] Allow renaming of sudo and HBAC rules

URL: https://github.com/freeipa/freeipa/pull/617 Title: #617: Allow renaming of sudo and HBAC rules stlaz commented: """ For the record, and I might be wrong, I did a bit of researching, the `rdn_is_primary_key` is actually misused in some cases, as RDN is the primary key for e.g. `pwpolicy` a

[Freeipa-devel] [freeipa PR#644][comment] extdom: improve certificate request

URL: https://github.com/freeipa/freeipa/pull/644 Title: #644: extdom: improve certificate request abbra commented: """ LGTM. I read the code but since SSSD counterpart is currently on review, travis fails the build. """ See the full comment at https://github.com/freeipa/freeipa/pull/644#issue

[Freeipa-devel] [freeipa PR#575][comment] IPA certauth plugin

URL: https://github.com/freeipa/freeipa/pull/575 Title: #575: IPA certauth plugin abbra commented: """ The code LGTM. Once updated SSSD is added to freeipa-master copr, let's see what CI says. Authentication indicators' handling would need to be added in a separate PR once certmap rules would

[Freeipa-devel] [freeipa PR#617][synchronized] Allow renaming of sudo and HBAC rules

URL: https://github.com/freeipa/freeipa/pull/617 Author: stlaz Title: #617: Allow renaming of sudo and HBAC rules Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/617/head:pr617 git checkout pr617 From 1de05

[Freeipa-devel] PKINIT Handling in mixed/CA-less topologies

Hi List, TL;DR we have to handle FAST channer establishment when KDC is not issued PKINIT keypair I have spent some time studying and fixing bugs/regressions caused by incomplete consideration of PKINIT and anonymous principal setup regarding to * replicas standed up against old (3.0.0) masters

[Freeipa-devel] [freeipa PR#617][comment] Allow renaming of sudo and HBAC rules

URL: https://github.com/freeipa/freeipa/pull/617 Title: #617: Allow renaming of sudo and HBAC rules stlaz commented: """ The latest patch removes the `rdn_is_private_key` attribute, replaces it with `allow_rename` which actually says correctly what's happening. Also, the decision whether prima

[Freeipa-devel] [freeipa PR#639][synchronized] WebUI: Login for AD Users

URL: https://github.com/freeipa/freeipa/pull/639 Author: pvomacka Title: #639: WebUI: Login for AD Users Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/639/head:pr639 git checkout pr639 From 79a2dbfd1459ff

[Freeipa-devel] [freeipa PR#645][opened] Create temporaty directories at the begining of uninstall

URL: https://github.com/freeipa/freeipa/pull/645 Author: dkupka Title: #645: Create temporaty directories at the begining of uninstall Action: opened PR body: """ Since commit 38c6689 temporary directories are no longer created at package install time. Instead they're created at server install

[Freeipa-devel] [freeipa PR#634][comment] cert: do not limit internal searches in cert-find

URL: https://github.com/freeipa/freeipa/pull/634 Title: #634: cert: do not limit internal searches in cert-find stlaz commented: """ Works for me. """ See the full comment at https://github.com/freeipa/freeipa/pull/634#issuecomment-288728368 -- Manage your subscription for the Freeipa-devel m

[Freeipa-devel] [freeipa PR#634][+ack] cert: do not limit internal searches in cert-find

URL: https://github.com/freeipa/freeipa/pull/634 Title: #634: cert: do not limit internal searches in cert-find Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Co

Re: [Freeipa-devel] PKINIT Handling in mixed/CA-less topologies

On to, 23 maalis 2017, Martin Babinsky wrote: Hi List, TL;DR we have to handle FAST channer establishment when KDC is not issued PKINIT keypair I have spent some time studying and fixing bugs/regressions caused by incomplete consideration of PKINIT and anonymous principal setup regarding to *

Re: [Freeipa-devel] PKINIT Handling in mixed/CA-less topologies

On Thu, 2017-03-23 at 16:08 +0200, Alexander Bokovoy wrote: > On to, 23 maalis 2017, Martin Babinsky wrote: > >Hi List, > > > >TL;DR we have to handle FAST channer establishment when KDC is not issued > >PKINIT keypair > > > >I have spent some time studying and fixing bugs/regressions caused by >

[Freeipa-devel] [DRAFT] release notes FreeIPA 4.4.4

Please check the draft of the release notes for FreeIPA 4.4.4 release: http://www.freeipa.org/page/Releases/4.4.4 Martin^2 -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Con

[Freeipa-devel] [DRAFT] release notes FreeIPA 4.3.3

Please check the draft of the release notes for FreeIPA 4.3.3 release: http://www.freeipa.org/page/Releases/4.3.3 Martin^2 -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Con

Re: [Freeipa-devel] PKINIT Handling in mixed/CA-less topologies

On to, 23 maalis 2017, Simo Sorce wrote: On Thu, 2017-03-23 at 16:08 +0200, Alexander Bokovoy wrote: On to, 23 maalis 2017, Martin Babinsky wrote: >Hi List, > >TL;DR we have to handle FAST channer establishment when KDC is not issued >PKINIT keypair > >I have spent some time studying and fixing

[Freeipa-devel] [freeipa PR#575][synchronized] IPA certauth plugin

URL: https://github.com/freeipa/freeipa/pull/575 Author: sumit-bose Title: #575: IPA certauth plugin Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/575/head:pr575 git checkout pr575 From e84f70cceec2421968

[Freeipa-devel] [freeipa PR#639][synchronized] WebUI: Login for AD Users

URL: https://github.com/freeipa/freeipa/pull/639 Author: pvomacka Title: #639: WebUI: Login for AD Users Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/639/head:pr639 git checkout pr639 From 36d039e75ebf07

[Freeipa-devel] [freeipa PR#639][comment] WebUI: Login for AD Users

URL: https://github.com/freeipa/freeipa/pull/639 Title: #639: WebUI: Login for AD Users pvomacka commented: """ I implemented all comments which you proposed and I also changed menu of AD user selfservice - I removed User tab and renamed User ID override to Profile. """ See the full comment at

[Freeipa-devel] [freeipa PR#470][synchronized] WebUI: Size limit warning on details pages fixed

URL: https://github.com/freeipa/freeipa/pull/470 Author: pvomacka Title: #470: WebUI: Size limit warning on details pages fixed Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/470/head:pr470 git checkout pr

[Freeipa-devel] [freeipa PR#646][opened] [4.4] FreeIPA 4.4.4 translations

URL: https://github.com/freeipa/freeipa/pull/646 Author: MartinBasti Title: #646: [4.4] FreeIPA 4.4.4 translations Action: opened PR body: """ """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/646/head:pr646 git checkout pr

[Freeipa-devel] [freeipa PR#646][+ack] [4.4] FreeIPA 4.4.4 translations

URL: https://github.com/freeipa/freeipa/pull/646 Title: #646: [4.4] FreeIPA 4.4.4 translations Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#646][+pushed] [4.4] FreeIPA 4.4.4 translations

URL: https://github.com/freeipa/freeipa/pull/646 Title: #646: [4.4] FreeIPA 4.4.4 translations Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#646][closed] [4.4] FreeIPA 4.4.4 translations

URL: https://github.com/freeipa/freeipa/pull/646 Author: MartinBasti Title: #646: [4.4] FreeIPA 4.4.4 translations Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/646/head:pr646 git checkout pr646 -- Manage your

[Freeipa-devel] [freeipa PR#646][comment] [4.4] FreeIPA 4.4.4 translations

URL: https://github.com/freeipa/freeipa/pull/646 Title: #646: [4.4] FreeIPA 4.4.4 translations tomaskrizek commented: """ ipa-4-4: * e7beb9a2ae5349525119ee072eebcc385f01c68e FreeIPA 4.4.4 translations """ See the full comment at https://github.com/freeipa/freeipa/pull/646#issuecomment-2887808

[Freeipa-devel] [freeipa PR#647][opened] [4.3] Update Contributors.txt

URL: https://github.com/freeipa/freeipa/pull/647 Author: MartinBasti Title: #647: [4.3] Update Contributors.txt Action: opened PR body: """ """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/647/head:pr647 git checkout pr647

[Freeipa-devel] [freeipa PR#648][opened] [4.4] Update Contributors.txt

URL: https://github.com/freeipa/freeipa/pull/648 Author: MartinBasti Title: #648: [4.4] Update Contributors.txt Action: opened PR body: """ """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/648/head:pr648 git checkout pr648

[Freeipa-devel] [freeipa PR#648][synchronized] [4.4] Update Contributors.txt

URL: https://github.com/freeipa/freeipa/pull/648 Author: MartinBasti Title: #648: [4.4] Update Contributors.txt Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/648/head:pr648 git checkout pr648 From 1f987f0

[Freeipa-devel] [freeipa PR#648][+ack] [4.4] Update Contributors.txt

URL: https://github.com/freeipa/freeipa/pull/648 Title: #648: [4.4] Update Contributors.txt Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#647][+ack] [4.3] Update Contributors.txt

URL: https://github.com/freeipa/freeipa/pull/647 Title: #647: [4.3] Update Contributors.txt Label: +ack -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#647][+pushed] [4.3] Update Contributors.txt

URL: https://github.com/freeipa/freeipa/pull/647 Title: #647: [4.3] Update Contributors.txt Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#647][comment] [4.3] Update Contributors.txt

URL: https://github.com/freeipa/freeipa/pull/647 Title: #647: [4.3] Update Contributors.txt tomaskrizek commented: """ ipa-4-3: * 4ce58141cce0a58ec896b93bc1409a56a88c7700 Update Contributors.txt """ See the full comment at https://github.com/freeipa/freeipa/pull/647#issuecomment-288787577 --

[Freeipa-devel] [freeipa PR#647][closed] [4.3] Update Contributors.txt

URL: https://github.com/freeipa/freeipa/pull/647 Author: MartinBasti Title: #647: [4.3] Update Contributors.txt Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/647/head:pr647 git checkout pr647 -- Manage your su

[Freeipa-devel] [freeipa PR#648][+pushed] [4.4] Update Contributors.txt

URL: https://github.com/freeipa/freeipa/pull/648 Title: #648: [4.4] Update Contributors.txt Label: +pushed -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [freeipa PR#648][comment] [4.4] Update Contributors.txt

URL: https://github.com/freeipa/freeipa/pull/648 Title: #648: [4.4] Update Contributors.txt tomaskrizek commented: """ ipa-4-4: * b150a7a9941893d11d4bccc4f0e1e2bd4b27d289 Update Contributors.txt """ See the full comment at https://github.com/freeipa/freeipa/pull/648#issuecomment-288787836 --

[Freeipa-devel] [freeipa PR#648][closed] [4.4] Update Contributors.txt

URL: https://github.com/freeipa/freeipa/pull/648 Author: MartinBasti Title: #648: [4.4] Update Contributors.txt Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/648/head:pr648 git checkout pr648 -- Manage your su

[Freeipa-devel] Announcing FreeIPA 4.4.4

Release date: 2017-03-23 The FreeIPA team would like to announce FreeIPA 4.4.4 release! It can be downloaded from http://www.freeipa.org/page/Downloads. Builds for Fedora 24 will be available in the official COPR repository . Thi

[Freeipa-devel] Announcing FreeIPA 4.3.3

Release date: 2017-03-23 The FreeIPA team would like to announce FreeIPA 4.3.3 release! It can be downloaded from http://www.freeipa.org/page/Downloads. Please note that this is the last upstream release of FreeIPA 4.3.x branch. This announcement is also available at

[Freeipa-devel] [freeipa PR#649][opened] Session cookie storage and handling fixes

URL: https://github.com/freeipa/freeipa/pull/649 Author: simo5 Title: #649: Session cookie storage and handling fixes Action: opened PR body: """ This patchset improves the behavior of the client in various ways. - Avoids unbounded growth of FILE ccaches - Fix regression with session cookies u

[Freeipa-devel] [freeipa PR#649][comment] Session cookie storage and handling fixes

URL: https://github.com/freeipa/freeipa/pull/649 Title: #649: Session cookie storage and handling fixes simo5 commented: """ Note I am still running tests, but I think the patchset is good for review already. """ See the full comment at https://github.com/freeipa/freeipa/pull/649#issuecommen

[Freeipa-devel] [freeipa PR#638][closed] ipalib/rpc.py: Fix session handling for KEYRING: ccaches

URL: https://github.com/freeipa/freeipa/pull/638 Author: abbra Title: #638: ipalib/rpc.py: Fix session handling for KEYRING: ccaches Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/638/head:pr638 git checkout pr6

[Freeipa-devel] [freeipa PR#638][comment] ipalib/rpc.py: Fix session handling for KEYRING: ccaches

URL: https://github.com/freeipa/freeipa/pull/638 Title: #638: ipalib/rpc.py: Fix session handling for KEYRING: ccaches simo5 commented: """ This PR has been obsoleted by #649 """ See the full comment at https://github.com/freeipa/freeipa/pull/638#issuecomment-288850585 -- Manage your subscrip

[Freeipa-devel] [freeipa PR#649][comment] Session cookie storage and handling fixes

URL: https://github.com/freeipa/freeipa/pull/649 Title: #649: Session cookie storage and handling fixes simo5 commented: """ The FILE ccache is still growing because we keep getting updated cookies (where the only thing that changes is the expiration date. """ See the full comment at https://

[Freeipa-devel] [freeipa PR#649][synchronized] Session cookie storage and handling fixes

URL: https://github.com/freeipa/freeipa/pull/649 Author: simo5 Title: #649: Session cookie storage and handling fixes Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/649/head:pr649 git checkout pr649 From 9

[Freeipa-devel] [freeipa PR#649][comment] Session cookie storage and handling fixes

URL: https://github.com/freeipa/freeipa/pull/649 Title: #649: Session cookie storage and handling fixes simo5 commented: """ I aded a 4th patch to address the FILE ccache growth issue. It is a bit unorthodox but it works. Please review carefully and let me know if you are ok with this """ See