Commits - freeipa - Pagure.io

Doc: remove the constraint on docutils version

Florence Blanc-Renaud • 8 hours ago

574d9a7

ipa-join: initialize pointer

Florence Blanc-Renaud • 5 days ago

23a107d

ipatests: Add xmlrpc tests for ipa-delegation-cli

Sudhir Menon • 5 days ago

d0a1ed3

ipatests: Add integration tests for ipa-join command

PRANAV THUBE • 5 days ago

05198e8

ipatests: add Random Password based replica promotion coverage

Anuja More • 5 days ago

55b0195

ipa-migrate - do not convert hostnames/realm for computers and automounts

Mark Reynolds • 11 days ago

f125252

Remove deprecated license classifier from ipasetup.py.in

Rafael Guterres Jeffman • 12 days ago

4d35571

freeipa.spec.in: Use systemd-sysusers to setup users and groups

Rafael Guterres Jeffman • 12 days ago

6b6e101

ipa-otpd: do not pass reference of data_out->jdata

Sumit Bose • 14 days ago

4d52891

ipatests: Fix resolver state tracking in enforced DNS policy tests.

PRANAV THUBE • 14 days ago

e24e743

Fix cert-find retrieval

David Hanina • 18 days ago

c7d3076

ipatests: Add DNS functional integration tests.

PRANAV THUBE • 18 days ago

b2c83c4

Remove navigation tests

David Hanina • 20 days ago

91c76fb

Fix QUnit import

David Hanina • 20 days ago

bd1ce87

Return nothing if certificate is empty

David Hanina • 21 days ago

4d7ecc7

ipatests: Move expire_password fixture into TestIPACommand class

PRANAV THUBE • 21 days ago

dcd36cc

ipa-migrate: avoid KeyError before attributes are normalized

Florence Blanc-Renaud • a month ago

d7ede28

ipa-pwd-extop: Don't manipulate the config if not retrieved

Rob Crittenden • a month ago

53e568b

Upgrade: use openssl_engine on rhel9

Florence Blanc-Renaud • a month ago

aa60660

Manual backport of #8002

PRANAV THUBE • 2 months ago

39481b8

ipatests: do not allow zone overlap for TestInstallWithCA_DNS4

Florence Blanc-Renaud • 2 months ago

1a302f2

Extended eDNS testsuite with Enforced DNS policy testcases.

PRANAV THUBE • 2 months ago

8efc99b

ipa-pwd-extop: fix valueset memory leak in `ipapwd_get_cur_kvno()`

Viktor Ashirov • 2 months ago

4021703

ipa-pwd-extop: fix memory leaks in `ipapwd_gen_hashes()` error path

Viktor Ashirov • 2 months ago

343c9a8

ipa-pwd-extop: fix password history values memory leak

Viktor Ashirov • 2 months ago

aa4a3fb

ipa-pwd-extop: fix NT hash string memory leak

Viktor Ashirov • 2 months ago

301cada

ipa-pwd-extop: fix bind DN memory leaks in pre-op handlers

Viktor Ashirov • 2 months ago

c98a006

ipa-pwd-extop: fix memory leaks in `ipapwd_pre_add()`

Viktor Ashirov • 2 months ago

52cf968

ipa-pwd-extop: fix memory leaks of bind DN

Viktor Ashirov • 2 months ago

efd6cc2

ipatests: Add the remote IP before running ipa-migrate

Rob Crittenden • 2 months ago

198b25b

ipatests: allow dns zone overlap where dns is handled externaly

Mohammad Rizwan • 2 months ago

5c8d664

Fix incorrect error handling in ipapython/graph.py

MOHAMMAD SAMI • 2 months ago

ef13ca9

ipatests: sysaccounts: add missing integration/webui/xmlrpc tests

Anuja More • 2 months ago

f71947d

sysaccount_mod: Use object.__setattr__ to set allow_empty_update in exception handler

Anuja More • 2 months ago

c9c2f33

ipa-pwd-extop: fix memory leaks

Viktor Ashirov • 2 months ago

859990a

ipa-pwd-extop: free krbcfg in all exit paths

Viktor Ashirov • 2 months ago

99625ed

topology: fix memory leaks

Viktor Ashirov • 2 months ago

98ad365

ipa-enrollment: fix memory leaks

Viktor Ashirov • 2 months ago

c3c4eea

ipa-extdom-extop: fix memory leaks

Viktor Ashirov • 2 months ago

c1e1ff6

ipa-range-check: fix memory leak

Viktor Ashirov • 2 months ago

0fc7c49

ipa-sidgen: fix memory leaks

Viktor Ashirov • 2 months ago

e13bd8c

ipa-pwd-extop: fix memory leaks

Viktor Ashirov • 2 months ago

2f32a19

ipa-lockout: fix memory leaks

Viktor Ashirov • 2 months ago

a7587b7

ipa-graceperiod: fix memory leaks

Viktor Ashirov • 2 months ago

15170f1

ipatest: add an integration test for samba upgrade

Florence Blanc-Renaud • 2 months ago

a0230de

Trust: fix tdo with WITH_FOREST

Florence Blanc-Renaud • 2 months ago

d78e51c

Fix: Incorrect auth error message

Carla Martinez • 2 months ago

f7c078f

ipatests: fix teardown of TestIpaCertFix

Florence Blanc-Renaud • 2 months ago

d31decb

eDNS: disable dnsconfd before configuring Unbound

Antonio Torres • 2 months ago

3623d46

Use mod_auth_gssapi option GssapiNegotiateOnce

Finn Krein-Schuch • 2 months ago

37bcbed

ipatests: fix kdcproxy tests against AD

Julien Rische • 3 months ago

368da4f

Correctly recognize OID 2.5.4.97, organizationIdentifier as a subject/issuer DN of the CA certificate

Aleksandr Sharov • 3 months ago

8905bbf

sysaccounts: extend permissions to include description and account lock

Alexander Bokovoy • 3 months ago

5e87614

test_sudo: do not clean the cache for offline cache tests

Florence Blanc-Renaud • 3 months ago

8e9e516

sysaccount: make sure nsaccountlock is always present

Alexander Bokovoy • 3 months ago

517fe4c

ipatests: Add new test cases with extended automount plugin attributes

PRANAV THUBE • 3 months ago

a7f541d

Port bash sudo tests.

PRANAV THUBE • 3 months ago

2794351

sysaccounts: add integration test

Alexander Bokovoy • 3 months ago

ce907c2

Add system accounts (sysaccounts)

Alexander Bokovoy • 3 months ago

a3e044b

ipa-pwd-extop: add SysAcctManagersDNs support

Alexander Bokovoy • 3 months ago

5550efd

ipatests: test_fips: Remove obsolete patch

Michal Polovka • 3 months ago

599e208

ipatests: simulate FIPS mode and install replica

Florence Blanc-Renaud • 3 months ago

232169c

ipatests: Refactor and port trust functional SUDO tests.

Anuja More • 3 months ago

9d144b8

Azure: fix WebUI tests

Florence Blanc-Renaud • 3 months ago

3223650

Azure: fix the configuration issue

Florence Blanc-Renaud • 3 months ago

c3e6a48

Azure CI: Use F43

Florence Blanc-Renaud • 3 months ago

b700a5b

slapi-plugins: Add replication checking to the Modrdn plugin

vectinx • 4 months ago

ac15a8b

API: correct ordering for password policy credits

Alexander Bokovoy • 4 months ago

08ab5b3

makeapi: enforce en_US.UTF-8 locale when sorting API files

Alexander Bokovoy • 4 months ago

ef979fe

doc/api: regenerate notes

Alexander Bokovoy • 4 months ago

dc7ddde

Include the HSM token name when creating LWCAs

Rob Crittenden • 4 months ago

12dd94e

ipatests: mark test_scale_add_subca as xfail

Florence Blanc-Renaud • 4 months ago

d15ee8a

Integration test: fix teardown of test_expiration_date_post_2038

Florence Blanc-Renaud • 4 months ago

dfa38b9

test_cert: adapt the expect error message to PKI 11.7.0-5

Florence Blanc-Renaud • 4 months ago

9c416a6

Revert "Tests xmlrpc: mark xfail tests requesting cert with subca"

Florence Blanc-Renaud • 4 months ago

5c96cab

PRCI tests: update vagrant image with latest PKI/certmonger package

Florence Blanc-Renaud • 4 months ago

c092c14

Use Augeas when updating dbmodules in krb5.conf

Rob Crittenden • 4 months ago

611c9b3

Extended eDNS testsuite with Relaxed policy testcases. 1. Relaxed policy without certs and including --no-dnssec-validation 2. Relaxed policy with external CA and including --no-dnssec-validation

PRANAV THUBE • 4 months ago

79eaa67

ipatests: Refactor and port trust functional HBAC tests.

Anuja More • 4 months ago

13ab328

Add support for libpwpolicy credit to password policy

Rob Crittenden • 4 months ago

18c7bcc

ipatests: fix TestIpaClientAutomountDiscovery

Florence Blanc-Renaud • 4 months ago

6cb3c66

Tests xmlrpc: mark xfail tests requesting cert with subca

Florence Blanc-Renaud • 4 months ago

a1f2fef

Spec file: bump version for 389-ds

Florence Blanc-Renaud • 4 months ago

ef69d05

Bump version number

Antonio Torres • 5 months ago

3ddbd68

ipatests: extend test for unique krbcanonicalname

Florence Blanc-Renaud • 5 months ago

9f15d21

ipa-kdb: enforce PAC presence on TGT for TGS-REQ

Julien Rische • 5 months ago

ee838b2

Enforce uniqueness across krbprincipalname and krbcanonicalname

Rob Crittenden • 5 months ago

943032c

ipatests: fix TestIPAMigratewithBackupRestore setup

Florence Blanc-Renaud • 5 months ago

325108c

ipasam: remove definitions which included from ndr_drsblobs.h

Alexander Bokovoy • 5 months ago

c1c0c0d

Don't let lack of subca in PKI prevent LDAP deletion

Rob Crittenden • 5 months ago

272ed4d

Catch decoding errors in CertificateSigningRequest parameters

Rob Crittenden • 5 months ago

1db66d2

Test that password expiration date past 2038 works

Rob Crittenden • 5 months ago

be7255e

Test that certificates beyond 2038 can be parsed

Rob Crittenden • 5 months ago

ec92f72

ipatests: add xfail for TestKRAinstallAfterCertRenew

Florence Blanc-Renaud • 5 months ago

a23e082

ipatests: exclude TomcatFileCheck when RSN are enabled

Florence Blanc-Renaud • 5 months ago

aae73df

GetEntryFromLDIF: handle DNs case-insensitive

Alexander Bokovoy • 5 months ago

0a55096

ipatests: update the Let's Encrypt cert chain

Florence Blanc-Renaud • 5 months ago

9449364

ipasam: define prototypes

Alexander Bokovoy • 5 months ago

fc40c7c

ipasam: address signedness warnings

Alexander Bokovoy • 5 months ago

cb36c3d

ipasam: simplify error handling in fill_pdb_trusted_domain

Alexander Bokovoy • 5 months ago

fcd0f0c

dcerpc: Support Samba 4.23

Alexander Bokovoy • 5 months ago

486558c

dcerpc: make sure forest trust info structure version is 1

Alexander Bokovoy • 5 months ago

7d4b554

ipatests: fix test_otp

Florence Blanc-Renaud • 5 months ago

9b631f8

ipatests: fix test_certmonger_ipa_responder_jsonrpc

Florence Blanc-Renaud • 5 months ago

4a2e912

ipatests: remove xfail for PKI 11.7

Florence Blanc-Renaud • 5 months ago

b923355

azure webui tests: force chromium version

Florence Blanc-Renaud • 5 months ago

537e032

xmlrpc test: fix test_find_orphan_automember_rules

Florence Blanc-Renaud • 5 months ago

03f48bf

DNS over TLS: use system trust store

Florence Blanc-Renaud • 5 months ago

bc3c095

Spec file: bump samba version to 4.23.0 in f43 and above

Florence Blanc-Renaud • 6 months ago

72e1a1d

Fix ipa-client-install failure when a trusted CA's distinguished name contains slash characters

Sam Morris • 6 months ago

09acc86

ipatests: Add comprehensive tests for ipa-client-automount --domain option

Anuja More • 6 months ago

902dbeb

ipatests: Update ipatests to test topology with multiple domain.

Anuja More • 6 months ago

1f915d4

ipatests: Remove xfail from test_installation::test_number_of_zones

Anuja More • 7 months ago

b693639

Spec file: use nodejs22 on fedora 41+

Florence Blanc-Renaud • 7 months ago

2863b58

dns: disable all previous Unbound configuration before deploying ours

Antonio Torres • 7 months ago

bae7808

install: make use of shared temp directory for hsm validation

Stanislav Levin • 7 months ago

7887b02

ipatests: Nightly definitions for TestIPAMigratewithBackupRestore

Florence Blanc-Renaud • 7 months ago

6ee2110

ipatests: Tests for ipa-migrate tool with ldif file

Sudhir Menon • 7 months ago

0c9ba2a

kdb: prevent double crash in RBCD ACL free

Alexander Bokovoy • 7 months ago

45cce31

Fix terminal height for Rawhide

David Hanina • 7 months ago

3b1d0e1

freeipa.spec.in: protect scriptlets in environment where dbus or systemd do not run

Alexander Bokovoy • 7 months ago

43f1653

Use correct capitalization for GitHub and GitLab

Rafael Guterres Jeffman • 7 months ago

6bb7ebd

dns: only overwrite resolv.conf during eDNS setup when needed

Antonio Torres • 7 months ago

a6ae9f7

Replica: Request cert for DoT before setting up bind

Thomas Woerner • 8 months ago

f4cbea0

ipatests: prci nightly definitions for 32BitIdranges

Sudhir Menon • 8 months ago

6f2f941

ipatests: Tests for 32BitIdranges.

Sudhir Menon • 8 months ago

15adc26

ipaserver/install/dns.py: Allow to Turn off DNSSEC validation for unbound

Thomas Woerner • 8 months ago

0412252

ipa-client-install: New --no-dnssec-validation option

Thomas Woerner • 8 months ago

5db3bfa

Add test for master key upgrade

Julien Rische • 8 months ago

b69616e

Use ipaplatform tasks for krb5 enctypes

Julien Rische • 8 months ago

fb90a94

ipa-kdb: support storing multiple KVNO for the same principal

Julien Rische • 8 months ago

cafaed1

ipa-migrate - only remove repl state attribute options

Mark Reynolds • 8 months ago

ceaa1c9

Add token options to immutables for pki override

Rob Crittenden • 8 months ago

7301f00

ipa-idrange-fix: check that IPA server is installed

Florence Blanc-Renaud • 8 months ago

fba7aa1

ipatests: fix test_adtrust_install_with_non_ipa_user

Florence Blanc-Renaud • 8 months ago

39e92c4

ipa-client-install: Fix nsupdate issues when dns_over_tls is enabled

Thomas Woerner • 8 months ago

7b43179

Bump version number

Antonio Torres • 8 months ago

3769b41

Set krbCanonicalName=admin@REALM on the admin user

Rob Crittenden • 8 months ago

796ed20

Fix inconsistency in manpage for DoT forwarder option

Antonio Torres • 8 months ago

d0f6979

ipatests: fix xfail annotation for test_ipa_healthcheck_fips_enabled

Florence Blanc-Renaud • 8 months ago

8653c48

ipatests: fix invalid range creation in test_ipa_idrange_fix.py

Florence Blanc-Renaud • 8 months ago

0155718

Warn when UID is out of local ID ranges

David Hanina • 8 months ago

0c98af9

ipatests: skip encrypted dns tests on fedora 41

Florence Blanc-Renaud • 8 months ago

5b10d0e

Nightly tests: add TestIPAHealthcheckWithCALess

Florence Blanc-Renaud • 8 months ago

078e913

ipatests: ipahealthcheck warns for user provided certificates about to expire

Sudhir Menon • 8 months ago

cef1996

ipatests: Tests for krbLastSuccessfulAuth warning

Sudhir Menon • 9 months ago

3ba0f6a

ipatests: Ignore /run/log/journal in test_uninstallation.py

PRANAV THUBE • 9 months ago

a31654e

Fix some issues identified by a static analyzer

Rob Crittenden • 9 months ago

777f4c0

ipatests: Test to check dot forwarders are added to unbound.

Sudhir Menon • 9 months ago

383574b

ipa config-mod: fix internalerror when setting an empty ipaconfigstring

Florence Blanc-Renaud • 9 months ago

1c06965

PRCI tests: update vagrant image with latest bind package

Florence Blanc-Renaud • 9 months ago

a55e835

Require baserid and secondarybaserid

David Hanina • 9 months ago

6f1b9a4

ipatests: test_manual_renewal_master_transfer must wait for replication

Florence Blanc-Renaud • 9 months ago

17fdff8

ipatests: add extensions to server certificates for CAless mode

Florence Blanc-Renaud • 9 months ago

8cfafef

azure pipeline: disable InstallDNSSECFirst

Florence Blanc-Renaud • 9 months ago

f18628e

dns install: fix selinux avc relabelto

Florence Blanc-Renaud • 9 months ago

0aff65d

test_schema: do not fool pytest with a non-test class name

Alexander Bokovoy • 9 months ago

6b02744

Azure CI: do not run test_ipaserver/test_migratepw

Alexander Bokovoy • 9 months ago

b5ce672

Stop using deprecated pkg_resources

Miro Hrončok • 9 months ago

1fed74f

Make IPAAbstractVersion available to all platforms

Alexander Bokovoy • 9 months ago

6e43b2a

test_console: rework matching to adjust to Python 3.13

Alexander Bokovoy • 9 months ago

7df021d

pylint: do not use return at the end of flow

Alexander Bokovoy • 9 months ago

7a8f3b8

fix used-before-assignment errors where pylint cannot infer logic

Alexander Bokovoy • 9 months ago

66df181

Move wheel constraints to F41+

Alexander Bokovoy • 9 months ago

9d91d38

Test: dnf5 handles updating itself differently than dnf4

Rob Crittenden • 9 months ago

6a99d75

Make the Azure template work with both dnf4 and dnf5

Rob Crittenden • 9 months ago

69156cb

Azure CI: Use F42

Rob Crittenden • 9 months ago

eeec579

freeipa.spec.in: do not recommend encrypted DNS on pre-F42 systems

Alexander Bokovoy • 9 months ago

13332be

freeipa.spec.in: update BIND-related dependencies

Alexander Bokovoy • 9 months ago

a66adf2

ipa-dnskeysyncd: use systemd-tmpfiles to handle tokens

Alexander Bokovoy • 9 months ago

efbe63a

DNS: detect when OpenSSL engine should be removed on upgrade

Alexander Bokovoy • 9 months ago

3094ef8

Use OpenSSL provider with BIND for Fedora 42+ and RHEL10+

Alexander Bokovoy • 9 months ago

3e3af2d

Add --domain option to ipa-client-automount for DNS discovery

Rob Crittenden • 9 months ago

b394ac6

kdb: keep ipadb_get_connection() from succeeding with null LDAP context

Julien Rische • 9 months ago

5d893c9

ipa-migrate - improve suffix replacement

Mark Reynolds • 9 months ago

c052bbb

ipa-migrate - do not process AD entgries in staging mode

Mark Reynolds • 9 months ago

4e23fa9

ipa-migrate - remove replication state information

Mark Reynolds • 9 months ago

5f632d9

Azure CI: use podman instead of docker through emulation

Florence Blanc-Renaud • 10 months ago

4d8e341

azure pipeline: skip step disabling conflicting apparmor profile

Florence Blanc-Renaud • 10 months ago

c73ec36

azure pipeline: replace ubuntu-20.04 with 24.04

Florence Blanc-Renaud • 10 months ago

d25aeaf

ipatests: fix test_idp

Florence Blanc-Renaud • 10 months ago

3aa35fe

PRCI: switch testing from f41 to f42

Florence Blanc-Renaud • 10 months ago

d8c7c32

Remove ipa-nis-manage on fedora 42+

Florence Blanc-Renaud • 10 months ago

add20a7

ipa-sidgen: fix memory leak in ipa_sidgen_add_post_op

Julien Rische • 10 months ago

1aac0a5

ipatests: Fix for ipa-healthcheck test in FIPS Mode

Sudhir Menon • 10 months ago

d77c459

Correct dnsrecord_* tests for --raw --structured

David Hanina • 11 months ago

d3e9e35

Address deprecation warning in ipa-replica-manage

Rob Crittenden • 11 months ago

b8fd9db

Test fix for the update

Aleksandr Sharov • 11 months ago

cdc03d7

Add a check into ipa-cert-fix tool to avoid updating certs if CA is close to being expired.

Aleksandr Sharov • 11 months ago

3f7d846

dns: don't populate forwarders with DoT forwarders

Antonio Torres • 11 months ago

e1d5170

doc/designs: add encrypted DNS design documents

Francisco Trivino • 11 months ago

603792b

Don't require certificates to have unique ipaCertSubject

Rob Crittenden • 11 months ago

722a5a4

Disallow removal of dogtag and ipa-dnskeysyncd services on IPA servers

David Hanina • 11 months ago

ac308ab

ipatests: Tests to check data in journal log

Sudhir Menon • 11 months ago

47770b8

ipatests: use newer fedora 41 box

Florence Blanc-Renaud • 11 months ago

2f38915

gating tests: add test_ipahealthcheck.py::TestIpaHealthCheckWithADtrust

Florence Blanc-Renaud • 11 months ago

d4f4c7c

idrange: use minvalue=0 for baserid and secondarybaserid

Florence Blanc-Renaud • 11 months ago

01f2321

ipatests: add a test to use full 32-bit ID range space

Alexander Bokovoy • 11 months ago

015d26b

baseuser: allow uidNumber and gidNumber of 32-bit range

Alexander Bokovoy • 11 months ago

65cb358

update_dna_shared_config: do not fail when config is not found

Alexander Bokovoy • 11 months ago

b8b91df

config-mod: allow disabling subordinate ID integration

Alexander Bokovoy • 11 months ago

f906e36

Disable --raw and --structured together

David Hanina • 11 months ago

653b4b6

ipatest: make test_cert more robust to replication delays

Florence Blanc-Renaud • 11 months ago

883f69d

Leapp upgrade: skip systemctl calls

Florence Blanc-Renaud • 11 months ago

9b566fe

Make path of Samba lock directory configurable and use /run/samba on Debian

Frederik Himpe • 11 months ago

1e47185

man: fix incorrect groff syntax in man pages

Vasily Parfenov • 11 months ago

7b03874

man: fix formatting and syntax issues

Erik Belko • 11 months ago

3553cd3

ipatests: adapt error code and message for samba 4.22

Florence Blanc-Renaud • 11 months ago

d03164f

WebUI: fix the tooltip for Search Size limit

Florence Blanc-Renaud • 11 months ago

100737f

Log failed auth attempts over LDAP when a user is locked

Rob Crittenden • 11 months ago

fbdf755

Skip for unpatched freeipa-healthcheck

David Hanina • 11 months ago

3e8348a

Replace fips-mode-setup

David Hanina • 11 months ago

460281f

vault: remove PKIConnection deprecation warning

Florence Blanc-Renaud • a year ago

25848a8

Remove the migration of the RA cert from mod_nss to mod_ssl

Rob Crittenden • a year ago

5cb30d2

Remove migration from mod_nss to mod_ssl

Rob Crittenden • a year ago

9c6ff33

Make name of nobody group configurable and use nogroup on Debian

Frederik Himpe • a year ago

8a9c562

Fix some memory errors identified by a static analyzer

Rob Crittenden • a year ago

c87b695

Use new(er) PKI connection API in ipa-pki-wait-running

Rob Crittenden • a year ago

bf4de61

ipatests: use "sos report" instead of "sosreport" command

Florence Blanc-Renaud • a year ago

1c789f5

Validate the default e-mail domain in the config plugin

Rob Crittenden • a year ago

c6bac9b

ipa-migrate - do not migrate tombstone entries, ignore MidairCollisions, and krbpwdpolicyreference

Mark Reynolds • a year ago

7fd4b94

dns: only disable unbound when DoT is enabled

Antonio Torres • a year ago

f65ec98

PRCI: add definitions for DNS over TLS tests

Antonio Torres • a year ago

f443b91

spec: add unbound requirement and template file

Antonio Torres • a year ago

a32b8fd

ipatests: add tests for DNS over TLS

Antonio Torres • a year ago

186d5f6

Add DNS over TLS support

Antonio Torres • a year ago

46ef43b

Align startup_timeout with the systemd default and document it

Rob Crittenden • a year ago

22cbc5e

Configure the pki-tomcatd service systemd timeout

Rob Crittenden • a year ago

47ce098

Suppress spurious failure messages when uninstalling ACME

Rob Crittenden • a year ago

826ba67

ipatests: on rhel10 do not install firefox

Florence Blanc-Renaud • a year ago

d0dd2e8

Add a message where the ipa service restarted at end of install

Rob Crittenden • a year ago

b083f7f

Write out the PKI admin certificate as a PEM file

Rob Crittenden • a year ago

d070a9a

ipatests: increase delays for WebUI host test

Francisco Trivino • a year ago

e2be556

Apply certmonger_timeout to start_tracking and request_cert

Rob Crittenden • a year ago

9f30ede

Reintroduce test_idp to gating tests

Alexander Bokovoy • a year ago

4ea7840

Migrate Keycloak tests to JDK 21 and Keycloak 26

Alexander Bokovoy • a year ago

431a580

ipa-otpd: do not pass OIDC client secret if there is none to pass

Alexander Bokovoy • a year ago

d86db9d

ipatests: restart dirsrv after time jumps

Florence Blanc-Renaud • a year ago

ec94ee7

ipatests: skip test_ipahealthcheck_ds_configcheck for recent versions

Florence Blanc-Renaud • a year ago

45f96a0

ipatests: force the version for uninstall/reinstall

Florence Blanc-Renaud • a year ago

175bd7b

Fix pylint issue in ipatests/i18n.py

Florence Blanc-Renaud • a year ago

eef544c

ipa-otpd: use oidc_child's --client-secret-stdin option

Sumit Bose • a year ago

d857fcf

ipa tools: remove sensitive material from the commandline

Alexander Bokovoy • a year ago

f931456

Unify use of option parsers

Alexander Bokovoy • a year ago

d26ce5c

Bump version number

Antonio Torres • a year ago

d83389d

Add 30-second timeout for certmonger request/start tracking

Rob Crittenden • a year ago

2506d5d

ipatests: certbot removed the --manual-public-ip-logging-ok parameter

Florence Blanc-Renaud • a year ago

8ecf75b

Cert renewal: update the trust flags for audit cert

Florence Blanc-Renaud • a year ago

d556ac4

Dogtag instance: add method to create temp password file

Florence Blanc-Renaud • a year ago

83d47a2

KRA cert renewal: update ca.connector.KRA.transportCert

Florence Blanc-Renaud • a year ago

a707083

Installation test: KRA on replica after cert renewal

Florence Blanc-Renaud • a year ago

ff5bb48

ipatests: Fixes for ipa-ipa-migration tool

Sudhir Menon • a year ago

c294b7f

Fix the typo in ipa_migrate_constants.

Sudhir Menon • a year ago

6a2310e

Fix copr build

Florence Blanc-Renaud • a year ago

6046aae

adtrust: add missing ipaAllowedOperations objectclass

Stanislav Levin • a year ago

477dbba

ipa-pwd-extop: clarify OTP use over LDAP binds

Alexander Bokovoy • a year ago

3e7ec3d

pyca: adapt import paths for TripleDES cipher

Stanislav Levin • a year ago

8dfec28

ipalib/x509: support PyCA 44.0

Alexander Bokovoy • a year ago

d4d56a6

Revert "readthedocs: install crypto 43.0.0"

Alexander Bokovoy • a year ago

e3cf4d0

Pass all pkiuser groups as suplementary when validating an HSM

Rob Crittenden • a year ago

934d4a2

Allow looking up constants.Group by gid in addition to name

Rob Crittenden • a year ago

184589f

readthedocs: install crypto 43.0.0

Florence Blanc-Renaud • a year ago

fdfe942

ipaserver/dcerpc: support Samba 4.21

Alexander Bokovoy • a year ago

c306c61

ipatests: install master with allow-zone-overlap

Florence Blanc-Renaud • a year ago

baa9fc3

Fix: 'Organization' field in Okta not required

Carla Martinez • a year ago

c64c098

ipatests: move tests to fedora 41

Florence Blanc-Renaud • a year ago

70ee983

ipatests: Include ipa-ipa migration testsuite in nightly test definitions

Sudhir Menon • a year ago

e08f4fb

ipatests: Tests for ipa-migrate tool

Sudhir Menon • a year ago

9da927c

vault: handle pyca InternalError exception for PKCS#1 v1.5 padding

Alexander Bokovoy • a year ago

dad2f06

Small fixup to determine which ACME uninstaller to use

Rob Crittenden • a year ago

9a2de23

ipa-migrate should migrate dns forward zones

Mark Reynolds • a year ago

6bdb860

web ui: Add explicit white border for QR code widget

Alexander Bokovoy • a year ago

533ec87

ipa-migrate - dryrun write updates crashes when removing values

Mark Reynolds • a year ago

3d09620

ipatests: 2FA test cases

Madhuri Upadhye • a year ago

6ac11ae

ipatests: refactor password file handling in TestHSMInstall

Mohammad Rizwan • a year ago

142f52f

ipatests: Test for ipa hbac rule duplication

Sudhir Menon • a year ago

7f4e7e1

ipa-migrate man page: fix typos and errors

Florence Blanc-Renaud • a year ago

f978fa0

Replace instances of del os.environ with os.environ.pop

Ian Brown • a year ago

6735327

ipatests: Activate ssh in sssd.conf

Sudhir Menon • a year ago

761647f

Extend nightly tests with Cockpit test

Florence Blanc-Renaud • a year ago

4994728

Minimal test for Cockpit integration on IPA master

Alexander Bokovoy • a year ago

0dadcbb

selinux: allow Cockpit to use HTTP keytab on IPA servers

Alexander Bokovoy • a year ago

c71e12e

test_ipahealthcheck: skip connectivity_and_data check

Florence Blanc-Renaud • a year ago

d8d4c55

Do not let user with an expired OTP token to log in if only OTP is allowed

Mark Reynolds • a year ago

18303b9

spec: Use nodejs22 on RHEL 10 and ELN

Yaakov Selkowitz • a year ago

642af01

Nightly test definition: use master_1repl topology for idrange_fix

Florence Blanc-Renaud • a year ago

4b34bfb

ipatests: Fixes for ipa-idrange-fix testsuite

Sudhir Menon • a year ago

ae4c2ad

Don't rely on removing the CA to uninstall the ACME depoyment

Rob Crittenden • a year ago

a785d0c

test_adtrust_install: add --use-krb5-ccache to smbclient command

Florence Blanc-Renaud • a year ago

743c7b4

ipatests: provide a ccache to rpcclient deletetrustdom

Florence Blanc-Renaud • a year ago

a343c14

Fix a couple of instances of the "no-break control character" being used inadvertently

Sam Morris • a year ago

993f792

ipatests: make TestDuplicates teardowns order agnostic

Stanislav Levin • a year ago

d102773

azure pipeline: use latest version of DownloadPipelineArtifact task

Florence Blanc-Renaud • a year ago

8a8fb11

UnsafeIPAddress: pass flag=0 to IPNetwork

Florence Blanc-Renaud • a year ago

a9e653c

azure tests: move to fedora 40

Florence Blanc-Renaud • a year ago

32a46d1

Custodia: in fips mode add -nomac or -nomacver to openssl pkcs12

Florence Blanc-Renaud • a year ago

c96d172

ipa-migrate - fix alternate entry search filter

Mark Reynolds • a year ago

3b5a980

ipa-migrate - fix migration issues with entries using ipaUniqueId in the RDN

Mark Reynolds • a year ago

8d242ba

Installer: activate ssh service in sssd.conf

Francisco Trivino • a year ago

373d41f

ipatests: Update ipa-adtrust-install test

Erik Belko • a year ago

a18eb83

ipatests: Add missing comma in test_idrange_no_rid_bases_reversed

Florence Blanc-Renaud • a year ago

4fef80a

Add PR-CI definitions for test_ipa_idrange_fix

Florence Blanc-Renaud • a year ago

a5b0a41

Add ipa-idrange-fix

asharov@redhat.com • a year ago

aa46515

selinux: add all IPA log files to ipa_log_t file context

Alexander Bokovoy • a year ago

42eb97e

ipatests: Check Default PAC type is added to config

Sudhir Menon • a year ago

ad4b7f6

Bump release number

Rob Crittenden • a year ago

4d53e68

Back to git snapshots

Rob Crittenden • a year ago

7c5d69c

Become IPA v4.12.2

Rob Crittenden • a year ago

c7da7e0

ipatests: Test to check that the configured value for "nsslapd-ignore-time-skew" remains on even after a "force-sync" is done

Sudhir Menon • a year ago

f5c7237

ipatests: Replace 'usermod -r' command with 'gpasswd -d' in test_hsm.py

Sudhir Menon • a year ago

ed813fe

Fix some resource leaks identified by a static analyzer

Rob Crittenden • a year ago

21c6ccc

Ignore TripleDES python-cryptography import warnings

Rob Crittenden • a year ago

d0684a7

Correct usage of public_key_algorithm_oid in ipalib/x509

Rob Crittenden • a year ago

5cc7941

trust-add: handle unavailable domain

Florence Blanc-Renaud • a year ago

f37c2eb

HSM: fix the module name

Florence Blanc-Renaud • a year ago

1fc63e2

ipatests: skip HSM test if pki < 11.5.9

Florence Blanc-Renaud • 2 years ago

84751a2

ipatests: ipa-migrate tool with -Z option (CACERTFILE)

Sudhir Menon • 2 years ago

8046023

ipatests: Verify that SIDgen task continue even if it fails to assign sid

Mohammad Rizwan • 2 years ago

ee96c12

ipatests: increase the timeout for test_hsm.py::TestHSMInstall

Florence Blanc-Renaud • 2 years ago

81401e6

Log errors reported by adtrustinstance.check_inst() using logger

Rob Crittenden • 2 years ago

e83d949

Force a logout in KerberosSession if a login is needed

Rob Crittenden • 2 years ago

ffba696

Replica CA installation: ignore time skew during initial replication

Florence Blanc-Renaud • 2 years ago

aadb805

Get rid of unicode and long helpers in ipa-otptoken-import

Alexander Bokovoy • 2 years ago

7b5f3d7

ipalib/constants.py: factor out TripleDES use

Alexander Bokovoy • 2 years ago

fc02904

ipalib/x509.py: get rid of unicode helper

Alexander Bokovoy • 2 years ago

7f9c890

ipalib/x509.py: support Cryptography 43

Alexander Bokovoy • 2 years ago

531bd05

Run HSM validation as pkiuser to verify token permissions

Rob Crittenden • 2 years ago

38b83c2

ipatests: Fix usage of token_password_file

Rob Crittenden • 2 years ago

f03a96a

ipa-migrate - properly handle invalid certificates

Mark Reynolds • 2 years ago

0e4fbc3

spec file: do not use nodejs-22 on f39 and f40

Florence Blanc-Renaud • 2 years ago

2ddca5d

Fix a copy/paste issue when detecting the HSM SELinux subpackage

Rob Crittenden • 2 years ago

fdd471d

Remove RC4 and 3DES default encryption types on update

Julien Rische • 2 years ago

9f88188

Unconditionally add MS-PAC to global config on update

Julien Rische • 2 years ago

d1a485a

ipatests: remove xfail for test_ipa_migrate_stage_mode

Florence Blanc-Renaud • 2 years ago

6eb6a92

ipatests: remove xfail for test_ipa_migrate_version_option

Florence Blanc-Renaud • 2 years ago

de94080

Issue 9621 - ipa-migrate - should not update mapped attributes in managed entries

Mark Reynolds • 2 years ago

85a853b

ipatests: Test replica installation using AD admin.

Anuja More • 2 years ago

8b70315

ipa-pwd-extop: differentiate OTP requirements in LDAP binds

Alexander Bokovoy • 2 years ago

051d61f

Added new testsuite(ipa_ipa_migration) in prci definitions

Sudhir Menon • 2 years ago

ab47696

ipa-migrate - starttls does not work

Mark Reynolds • 2 years ago

eeade50

Include token password options in ipa-kra-install man page

Rob Crittenden • 2 years ago

6c53a22

ipatests: tests related to --token-password-file

Mohammad Rizwan • 2 years ago

4ea1ad6

Re-organize HSM validation to be more consistent/less duplication

Rob Crittenden • 2 years ago

7ab1bcb

Fix syntax error in the selinux-luna %postun script

Rob Crittenden • 2 years ago

1b278de

ipa-migrate - remove -V option

Mark Reynolds • 2 years ago

efa5719

The -d option of the ipa-advise command was able to used.

Shunsuke matsumoto • 2 years ago

06c02f5

ipa_sidgen: Allow sidgen_task to continue after finding issues

Thomas Woerner • 2 years ago

a8e75bb

test_replica_install_after_restore: kinit after restore

Florence Blanc-Renaud • 2 years ago

d635d70

Uninstall: stop sssd-kcm before removing KCM ccaches database

Florence Blanc-Renaud • 2 years ago

6fe268a

ipa-ods-enforcer: stop must also stop the socket

Florence Blanc-Renaud • 2 years ago

2f902ef

ipatests: Tests for ipa-ipa migration tool

Sudhir Menon • 2 years ago

90b22ff

ipa-advise ipa-backup ipa-restore: Fix --v option of the manual.

TAKAHASHI Masatsuna • 2 years ago

52ea4ad

ipatests: fix / permissions for test_nested_group_members

Florence Blanc-Renaud • 2 years ago

48ff7da

Clean up more files and directories created by the installer(s)

Rob Crittenden • 2 years ago

9e36491

ipatests: fix / permissions to allow ssh with private key

Florence Blanc-Renaud • 2 years ago

60c127d

ipatests: mark test_ca_show_error_handling as xfail

Florence Blanc-Renaud • 2 years ago

4521fe5

ipatests: configure gating and nightly tests on ipa-4-12 branch

Florence Blanc-Renaud • 2 years ago

58154be

ipatests: add test for PKINIT renewal on hidden replica

Florence Blanc-Renaud • 2 years ago

467ec04

PKINIT certificate: fix renewal on hidden replica

Florence Blanc-Renaud • 2 years ago

c8e3fde

ipatests: add test for ticket 9610

Florence Blanc-Renaud • 2 years ago

4d51446

spec file: do not create /etc/ssh/ssh_config.orig if unchanged

Florence Blanc-Renaud • 2 years ago

09e66dc

ipa-otptoken-import: open the key file in binary mode

Florence Blanc-Renaud • 2 years ago

9de053e

Add iparepltopoconf objectclass to topology permissions

Rob Crittenden • 2 years ago

ebccaac

Use a unique task name for each backend in ipa-backup

Rob Crittenden • 2 years ago

584d0ce

Bump minor version number

Antonio Torres • 2 years ago

5b3735b

kdb: apply combinatorial logic for ticket flags

Julien Rische • 2 years ago

4a61184

kdb: fix vulnerability in GCD rules handling

Julien Rische • 2 years ago

f77c0a5

Back to git snapshots

Antonio Torres • 2 years ago

ea37593

Become IPA 4.12.0

Antonio Torres • 2 years ago

407408e

freeipa

Source Code

Commits 16299