Commits - freeipa - Pagure.io

Become FreeIPA 4.8.8

Alexander Bokovoy • 5 years ago

86ab759

Prevent local account takeover

Christian Heimes • 5 years ago

65c2736

Become FreeIPA 4.8.7

Alexander Bokovoy • 5 years ago

9d1d354

ipa-4-8: update list of contributors

Alexander Bokovoy • 5 years ago

89d5907

ipa-4-8: Update translation files before 4.8.7 release

Alexander Bokovoy • 5 years ago

0713936

Overhaul bind upgrade process

Christian Heimes • 5 years ago

b2c3c04

Fix named.conf named_conf_include_re

Christian Heimes • 5 years ago

1d3649e

Remove named_validate_dnssec update step

Christian Heimes • 5 years ago

03abb28

More upgrade tests

Christian Heimes • 5 years ago

6ddaead

Fix named.conf update bug NAMED_DNSSEC_VALIDATION

Christian Heimes • 5 years ago

aa2f932

upgrade: avoid stopping certmonger when fixing requests

Fraser Tweedale • 5 years ago

f1564cd

httpinstance: retry request without ipa-ca.$DOMAIN dnsName on failure

Fraser Tweedale • 5 years ago

00dd80b

Auto-generated ipa-epn files to gitignore

Christian Heimes • 5 years ago

0fbd29d

IPA-EPN: Don't treat givenname differently

Rob Crittenden • 5 years ago

bf28d4c

IPA-EPN: add test to validate smtp_delay value

Rob Crittenden • 5 years ago

4124bb6

IPA-EPN: add smtp_delay to limit the velocity of e-mails sent

Rob Crittenden • 5 years ago

37a4a79

IPA-EPN: Add tests for --mail-test option

Rob Crittenden • 5 years ago

672c9f5

IPA-EPN: Add mail-test option for testing sending live email

Rob Crittenden • 5 years ago

dca3f11

IPA-EPN: test using SSL against port 465

Rob Crittenden • 5 years ago

6587edd

IPA-EPN: Add test for starttls mode

Rob Crittenden • 5 years ago

fc2b3aa

IPA-EPN: Add tests for sending real mail with auth and templates

Rob Crittenden • 5 years ago

bbe3397

IPA-EPN: Fixes to starttls mode, convert some log errors to exceptions

Rob Crittenden • 5 years ago

ca1c374

Add index for krbPasswordExpiration for EPN

Rob Crittenden • 5 years ago

ab444db

Add a jinja2 e-mail template for EPN

Rob Crittenden • 5 years ago

0869765

IPA-EPN: Test suite.

François Cami • 5 years ago

3552185

IPA-EPN: First version.

François Cami • 5 years ago

98bb4e9

ipatests: add KRB5_TRACE to kinit in test_adtrust_install.py

François Cami • 5 years ago

2032a61

tasks.py: add krb5_trace to create_active_user and kinit_as_user

François Cami • 5 years ago

01f27e2

ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset

Alexander Bokovoy • 5 years ago

ca0a62e

ipatests: test that adding Active Directory user to a role makes it an administrator

Alexander Bokovoy • 5 years ago

6b0f8f3

Web UI: allow users from trusted Active Directory forest manage IPA

Alexander Bokovoy • 5 years ago

99e613e

tests: account for ID overrides as members of groups and roles

Alexander Bokovoy • 5 years ago

5e8df37

Support adding user ID overrides as group and role members

Alexander Bokovoy • 5 years ago

8cce2bb

idviews: handle unqualified ID override lookups from Web UI

Alexander Bokovoy • 5 years ago

2ffb4fd

support using trust-related operations in the server console

Alexander Bokovoy • 5 years ago

afe9191

kdb: handle enterprise principal lookup in AS_REQ

Alexander Bokovoy • 5 years ago

6abade3

libotp: Replace NSS with OpenSSL HMAC

Christian Heimes • 5 years ago

47adde9

Add test for sssd ad trust lookup with dn in certmaprule

Sergio Oliveira Campos • 5 years ago

1f22ae5

Include named config files in backup

Christian Heimes • 5 years ago

782ee11

Split named custom config to allow changes in options stanza

Peter Keresztes Schmidt • 5 years ago

539d469

util: replace NSS usage with OpenSSL

Peter Keresztes Schmidt • 5 years ago

41a20fe

util: add unit test for pw hashing

Peter Keresztes Schmidt • 5 years ago

0fe645e

po: remove zanata config since translation was moved to weblate

Peter Keresztes Schmidt • 5 years ago

a29eec3

Handle DatabaseError in RPC-Server connect()

Christian Heimes • 5 years ago

1062caa

Allow permissions with 'self' bindruletype

Christian Heimes • 5 years ago

f2caafb

Specify min and max values for TTL of a DNS record

Peter Keresztes Schmidt • 5 years ago

ac47599

WebUI: Add units to some DNS zone and IPA config fields

Peter Keresztes Schmidt • 5 years ago

ca4cc7a

WebUI: Expose TTL of DNS records

Peter Keresztes Schmidt • 5 years ago

df8bcc9

WebUI: Refresh DNS record data correctly after mod operation

Peter Keresztes Schmidt • 5 years ago

7dad4a5

ipatests: check HTTP certificate contains ipa-ca.$DOMAIN dnsname

Fraser Tweedale • 5 years ago

8e92190

upgrade: add ipa-ca.$DOMAIN alias to HTTP certificate

Fraser Tweedale • 5 years ago

c445cef

httpinstance: add ipa-ca.$DOMAIN alias in initial request

Fraser Tweedale • 5 years ago

5275342

cert-request: allow ipa-ca.$DOMAIN dNSName for IPA servers

Fraser Tweedale • 5 years ago

4b24129

httpinstance: add fqdn and ipa-ca alias to Certmonger request

Fraser Tweedale • 5 years ago

5287358

certmonger: support dnsname as request search criterion

Fraser Tweedale • 5 years ago

b127bad

certmonger: move 'criteria' description to module docstring

Fraser Tweedale • 5 years ago

ff7d066

certmonger: avoid mutable default argument

Fraser Tweedale • 5 years ago

0e9b777

make: serialize strip-po / strip-pot

Christian Heimes • 5 years ago

8d759d3

Remove obsolete BIND named.conf options

Christian Heimes • 5 years ago

91f9461

ipatests: Test to check warning state for TomcatFileCheck in ipahealthcheck.ipa.files

sumenon • 5 years ago

a571043

Add ipa-print-pac to gitignore

Christian Heimes • 5 years ago

5aa5f67

Allow dnsrecord-add --force on clients

Christian Heimes • 5 years ago

c261a6e

WebUI: Fix invalid RPC calls when link widget has no pkey passed

Peter Keresztes Schmidt • 5 years ago

2af2373

WebUI: Use data adapter to load facet header data

Peter Keresztes Schmidt • 5 years ago

7e7d0d8

ipatests: Test for ipahealthcheck.ipa.files for TomcatFilecheck

sumenon • 5 years ago

c64075b

ipatests: Test for ipahealthcheck DogtagCertsConnectivityCheck

sumenon • 5 years ago

81f924f

WebUI: Apply jQuery patch to fix htmlPrefilter issue

Serhii Tsymbaliuk • 5 years ago

0620229

azure: do not run test_commands due to failures in low memory cases

Alexander Bokovoy • 5 years ago

5f292b2

test_smb: test S4U2Self operation by IPA service

Alexander Bokovoy • 5 years ago

eeb7004

ipa-kdb: refactor principal lookup to support S4U2Self correctly

Alexander Bokovoy • 5 years ago

601151e

ipa-kdb: cache local TGS in the driver context

Alexander Bokovoy • 5 years ago

68a0790

ipa-kdb: add primary group to list of groups in MS-PAC

Alexander Bokovoy • 5 years ago

6c844c7

ipa-kdb: Always allow services to get PAC if needed

Alexander Bokovoy • 5 years ago

741f64f

ipa-kdb: add asserted identity SIDs

Alexander Bokovoy • 5 years ago

110812b

kdb: add minimal server referrals support for enterprise principals

Alexander Bokovoy • 5 years ago

1990e39

ipa-tests: add a test to make sure MS-PAC is produced by KDC

Alexander Bokovoy • 5 years ago

ca99bf2

ipa-print-pac: acquire and print PAC record for a user

Alexander Bokovoy • 5 years ago

1a01e46

ipa-kdb: add UPN_DNS_INFO PAC structure

Alexander Bokovoy • 5 years ago

4723100

Azure: Make dnf repos consistent

Stanislav Levin • 5 years ago

7f2bfd9

ipatests: Check if user with 'User Administrator' role can delete group.

Florence Blanc-Renaud • 5 years ago

a457b79

Test for removing a subgroup

Sumedh Sidhaye • 5 years ago

c39a2e2

baseldap: de-duplicate passed attributes when checking for limits

Alexander Bokovoy • 5 years ago

363cb9f

ipatests: Test deletion of required principal throws proper error

Mohammad Rizwan Yusuf • 5 years ago

f0ef418

Display principal name while del required principal

Mohammad Rizwan Yusuf • 5 years ago

8737749

WebUI tests: Add confirmation step after changing default group in automember tests

Serhii Tsymbaliuk • 5 years ago

d8c8ba7

WebUI: Add confirmation dialog for changing default user/host group

Serhii Tsymbaliuk • 5 years ago

5d3364a

Check for freeipa-server-dns package early

Christian Heimes • 5 years ago

f16a4b0

service delegation: allow to add and remove host principals

Alexander Bokovoy • 5 years ago

c8009e1

Hard-code in_tree=True for tests

Christian Heimes • 5 years ago

834b04b

Fix detection logic for api.env.in_tree

Christian Heimes • 5 years ago

6cd2d44

Make api.env.mode consistent

Christian Heimes • 5 years ago

3234892

ipatests: Added testcase to check that ipa-adtrust-install command runs successfully with locale set as LANG=en_IN.UTF-8

sumenon • 5 years ago

c59106f

Azure: Always update apt cache

Stanislav Levin • 5 years ago

273f580

Azure: Allow chronyd to sync time

Stanislav Levin • 5 years ago

9d01875

Azure: Add custom seccomp profile

Stanislav Levin • 5 years ago

fd58bac

WebUI: use python3-rjsmin to minify JavaScript files

Alexander Bokovoy • 5 years ago

831de84

test_smb: test that we can auth as NetBIOS alias

Alexander Bokovoy • 5 years ago

77c2e42

kdb: fix memory handling in ipadb_find_principal

Alexander Bokovoy • 5 years ago

5c62fbd

kdb: initialize flags in ipadb_delete_principal()

Alexander Bokovoy • 5 years ago

4de1586

Disable password schema update on LDAP bind

Christian Heimes • 5 years ago

2765666

Use httpd 2.4 syntax for access control

Christian Heimes • 5 years ago

84d15da

Azure Pipelines: switch to Fedora 32

Alexander Bokovoy • 5 years ago

60ed4b0

Azure Pipelines: Override services known to not work in containers

Alexander Bokovoy • 5 years ago

e37b3d8

Add pytest.skip_if_container()

Alexander Bokovoy • 5 years ago

8988916

WebUI tests: fix PEP8 issues in test_webui/test_user.py

Mohammad Rizwan Yusuf • 5 years ago

b626a79

webui: check if notification area doesn't intercept menu button

Mohammad Rizwan Yusuf • 5 years ago

b68f98a

Fix make devcheck

Christian Heimes • 5 years ago

c2893b8

prci: update templates for new Fedora release

Armando Neto • 5 years ago

d758b6a

Azure: Increase memory limit

Stanislav Levin • 5 years ago

97581ec

ipatests: Collect all logs on all Unix hosts

Stanislav Levin • 5 years ago

736b8ba

ipatests: Pretty print multihost config

Stanislav Levin • 5 years ago

5da643f

ipatests: Cleanup 'collect_logs' decorator

Stanislav Levin • 5 years ago

295d207

ipatests: enable 389-ds audit log and collect audit file

Florence Blanc-Renaud • 5 years ago

7b39e5f

Make ipaplatform a regular top-level package

Christian Heimes • 5 years ago

07da5ab

ipa-advise: fallback to /usr/libexec/platform-python if python3 not found

Florence Blanc-Renaud • 5 years ago

787ce45

Reconfigure pycodestyle

Christian Heimes • 5 years ago

d80b98b

Manually reformat ipapython/version.py.in

Christian Heimes • 5 years ago

9c3d00b

Silence W601 .has_key() is deprecated

Christian Heimes • 5 years ago

d44a392

Fix E722 do not use bare 'except'

Christian Heimes • 5 years ago

45ddb4f

Fix E721 do not compare types, use 'isinstance()'

Christian Heimes • 5 years ago

7be2ffe

Fix E714 test for object identity should be 'is not'

Christian Heimes • 5 years ago

70dc448

Fix E713 test for membership should be 'not in'

Christian Heimes • 5 years ago

ef068bd

Fix E712 comparison to True / False

Christian Heimes • 5 years ago

01c1cf6

Fix E711 comparison to None

Christian Heimes • 5 years ago

c136aab

Fix E266 too many leading '#' for block comment

Christian Heimes • 5 years ago

033f8dc

Simplify pki proxy conf

Christian Heimes • 5 years ago

e3f7d9b

Make check_required_principal() case-insensitive

Christian Heimes • 5 years ago

b590a67

Update ACIs with the correct syntax

Viktor Ashirov • 5 years ago

218e655

prci_definitions: remove test_smb from ipa-4-8 gating workflow

Francisco Trivino • 5 years ago

f289771

Address issues found by new pylint 2.5.0

Christian Heimes • 5 years ago

ef2a745

Fix a syntax typo

Miro Hrončok • 5 years ago

0392dca

tox.ini: switch from W503 to W504

François Cami • 5 years ago

6681871

WebUI tests: cover membership management with UI tests

Serhii Tsymbaliuk • 5 years ago

e58ca6a

Add skip_if_platform marker

Christian Heimes • 5 years ago

c43f3a7

ipatests/test_installation: Use knownservices to map the service name.

Timo Aaltonen • 5 years ago

99f4cb0

ipatests/test_commands: Check sssd version like on test_sssd

Timo Aaltonen • 5 years ago

af94aad

Debian: Use parse_ipa_version from redhat.

Timo Aaltonen • 5 years ago

fc2e854

Debian: Use enable/disable_ldap_automount() from base

Timo Aaltonen • 5 years ago

c45d4c8

ipatests: Test for ipahealthcheck tool for IPADomainCheck.

sumenon • 5 years ago

1bec170

Test for check of HostKeyAlgorithms option in ssh_config

Kaleemullah Siddiqui • 5 years ago

ac67dc9

Define default password policy for sysaccounts

Christian Heimes • 5 years ago

e74cfcc

Use api.env.container_sysaccounts

Christian Heimes • 5 years ago

7509f42

Fix exception escape warning

Christian Heimes • 5 years ago

26a9241

Fix APIVersion.__getnewargs__

Christian Heimes • 5 years ago

f812e2c

servrole: takes_params must be a tuple

Christian Heimes • 5 years ago

1d2ec18

Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1

Serhii Tsymbaliuk • 5 years ago

46008f5

ipatests: Test for ipahealthcheck.ds.ruv check

sumenon • 5 years ago

3244e27

ipatests: Specify shell implementation

Stanislav Levin • 5 years ago

9d06a4a

ipatests: Specify Pytest XML report schema

Stanislav Levin • 5 years ago

b62f59f

ipatests: Remove no longer needed 'skip' compatibility

Stanislav Levin • 5 years ago

46518b4

ipatests: Remove no longer needed 'capture' compatibility

Stanislav Levin • 5 years ago

f97341c

ipatests: Remove no longer needed 'get_marker'

Stanislav Levin • 5 years ago

6e14cfc

ipatests: Remove deprecated yield_fixture

Stanislav Levin • 5 years ago

8c0192a

ipatests: Bump required Pytest

Stanislav Levin • 5 years ago

9d10bc8

Fix various OpenDNSSEC 2.1 issues

Christian Heimes • 5 years ago

c3f97a9

Web UI: Upgrade Dojo version 1.13.0 -> 1.16.2

Serhii Tsymbaliuk • 5 years ago

fa09cc2

ipatests: Test to check password leak in apache error log

Mohammad Rizwan Yusuf • 5 years ago

cd7dcb1

Test for healthcheck being run on replica with stopped master

Michal Polovka • 5 years ago

b6b41b3

Man pages: fix syntax issues

Florence Blanc-Renaud • 5 years ago

98045dc

Support for SUSE/openSUSE ipaplatform

Stasiek Michalski • 5 years ago

f0c6d1e

Use /run and /run/lock instead of /var

Christian Heimes • 5 years ago

d22ce3d

ipatests: increase test_webui_server timeout

François Cami • 5 years ago

589c7fd

CVE-2020-1722: prevent use of too long passwords

Alexander Bokovoy • 5 years ago

089a393

ipatests: increase test_ipahealthcheck timeout

François Cami • 5 years ago

fa395ce

ipatests: Mark firewalld commands as no-op on non-firewalld distros

Stanislav Levin • 5 years ago

d320997

Debian: write out only one CA certificate per file

Sam Morris • 5 years ago

6fcc78b

Azure: Gather coredumps

Stanislav Levin • 5 years ago

5325c72

Azure: Allow distros to install Python they want

Stanislav Levin • 5 years ago

60d6def

Perform baseline healthcheck

Rob Crittenden • 5 years ago

435e2be

ipatests: move ipa_backup to tasks

François Cami • 5 years ago

8691e5f

ipatests: mark test_trustdomain_disable test as expectedly failing

Sergey Orlov • 5 years ago

8c68b92

ipatests: add context manager for declaring part of test as xfail

Sergey Orlov • 5 years ago

fc253fe

ipatests: add utility for getting sssd version on remote host

Sergey Orlov • 5 years ago

3e81b0f

update prci definitions for test_sssd.py

Sergey Orlov • 5 years ago

edbb913

ipatests: add test for sssd behavior with disabled trustdomains

Sergey Orlov • 5 years ago

fed6ad2

Test for output being indented by default value if not stated implicitly.

Michal Polovka • 5 years ago

80fe55d

ipatests:Test if proper error thrown when AD user tries to run IPA commands

Mohammad Rizwan Yusuf • 5 years ago

90eef2f

ipa-backup: Make sure all roles are installed on the current master.

François Cami • 5 years ago

37a60b2

test_backup_and_restore: add server role verification steps

François Cami • 5 years ago

69a2b6d

ipatests: test ipa-backup with different role configurations.

François Cami • 5 years ago

00e2a48

nightly_ipa-4-8_previous.yaml: fix typo

François Cami • 5 years ago

48be293

ipatests: run all cases from test_integration/test_idviews.py in nightlies

Sergey Orlov • 5 years ago

e86558d

ipatests: explicitly save output of certutil

Sergey Orlov • 5 years ago

8e1d524

ipatests: add AD DC as a DNS forwarder before establishing trust

Sergey Orlov • 5 years ago

cc16712

ipatests: add missing classes from test_installation in nightly runs

Sergey Orlov • 5 years ago

d22d55d

ipatests: run test_integration/test_cert.py in PR-CI

Sergey Orlov • 5 years ago

b55bdd2

Test for ipahealthcheck.ipa.idns check when integrated DNS is setup

sumenon • 5 years ago

f6171fd

Allow rename of a host group

Alexander Bokovoy • 5 years ago

b4fdb83

Add 'api' and 'aci' targets to make

Alexander Bokovoy • 5 years ago

38e0268

Test to check if Certmonger tracks certs in between reboots/interruptions and while in "CA_WORKING" state

Sumedh Sidhaye • 5 years ago

77409e2

pr-ci templates: update test_fips timeouts

François Cami • 5 years ago

d847f12

Remove Fedora repository fastmirror selection

Alexander Bokovoy • 5 years ago

a4ae456

Become FreeIPA 4.8.6

Alexander Bokovoy • 5 years ago

75d04b5

ipatests: test_replica_promotion.py: test KRA on Hidden Replica

François Cami • 5 years ago

a692212

ipatests: Skip test using paramiko when FIPS is enabled

Mohammad Rizwan Yusuf • 5 years ago

45507c1

po: fix LINGUAS to use whitespace separation

Christian Heimes • 5 years ago

616ad39

Test that pwpolicy only applied on Kerberos entries

Rob Crittenden • 5 years ago

b34063e

Add ability to change a user password as the Directory Manager

Rob Crittenden • 5 years ago

840671b

Don't save password history on non-Kerberos accounts

Rob Crittenden • 5 years ago

8b7bb96

ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager

Alexander Bokovoy • 5 years ago

bcbf64b

ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN

Alexander Bokovoy • 5 years ago

5bae736

ipatests: test sysaccount password change with a password policy applied

Alexander Bokovoy • 5 years ago

313542e

ipatests: allow changing sysaccount passwords as cn=Directory Manager

Alexander Bokovoy • 5 years ago

f4dc10b

Fix indentation levels

Alexander Bokovoy • 5 years ago

c62b9e7

SELinux: apache_manage_pid_files for F30

Christian Heimes • 5 years ago

f08ced1

ipatests: always skip additional input for group-add-member --external

Alexander Bokovoy • 5 years ago

74f36e7

po: update Chinese (China) translation

Alexander Bokovoy • 5 years ago

c6adee0

po: update Ukrainian translation

Alexander Bokovoy • 5 years ago

855a36b

po: update Tajik translation timestamp

Alexander Bokovoy • 5 years ago

3d411cf

po: update Slovak translation timestamp

Alexander Bokovoy • 5 years ago

3c15e47

po: update Russian translation

Alexander Bokovoy • 5 years ago

db433fb

po: update Portuguese (Brazil) translation timestamp

Alexander Bokovoy • 5 years ago

eab195f

po: update Portuguese translation timestamp

Alexander Bokovoy • 5 years ago

31a9da8

po: update Polish translation

Alexander Bokovoy • 5 years ago

4e3867f

po: update Punjabi translation timestamp

Alexander Bokovoy • 5 years ago

e4dfb74

po: update Dutch translation timestamp

Alexander Bokovoy • 5 years ago

e794528

po: update Marathi translation timestamp

Alexander Bokovoy • 5 years ago

28a963e

po: update Kannada translation timestamp

Alexander Bokovoy • 5 years ago

89b048d

po: update Japanese translation timestamp

Alexander Bokovoy • 5 years ago

89dbf88

po: update Indonesian translation timestamp

Alexander Bokovoy • 5 years ago

124a563

po: update Hungarian translation timestamp

Alexander Bokovoy • 5 years ago

595d506

po: update Hindi translation timestamp

Alexander Bokovoy • 5 years ago

c4dd8b2

po: update French translation

Alexander Bokovoy • 5 years ago

a2ca393

po: update Basque translation timestamp

Alexander Bokovoy • 5 years ago

92fb5c5

po: update Spanish translation

Alexander Bokovoy • 5 years ago

7af52df

po: update English (United Kingdom) translation timestamp

Alexander Bokovoy • 5 years ago

37a1e92

po: update German translation

Alexander Bokovoy • 5 years ago

0d053d8

po: update Czech translation timestamp

Alexander Bokovoy • 5 years ago

c8ba436

po: update Catalan translation timestamp

Alexander Bokovoy • 5 years ago

29e3ade

po: update Bengali translation timestamp

Alexander Bokovoy • 5 years ago

16d9556

po: update ipa.pot template

Alexander Bokovoy • 5 years ago

e23ba77

Update translation infrastructure

Alexander Bokovoy • 5 years ago

831f4dd

Keep ipa.pot translation file in git for weblate

Alexander Bokovoy • 5 years ago

9ff7b4a

ipatests: provide AD admin password when trying to establish trust

Sergey Orlov • 5 years ago

814b47e

Test if schema-compat-entry-attribute is set

Mohammad Rizwan Yusuf • 5 years ago

3f3fa40

Test if schema-compat-entry-attribute is set

Mohammad Rizwan Yusuf • 5 years ago

210619a

Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1

Serhii Tsymbaliuk • 5 years ago

f1855dd

Add pytest OpenSSH transport with password

Christian Heimes • 5 years ago

42aa86f

selinux: disable ipa_custodia when installing custom policy

Vit Mojzis • 5 years ago

f99cfa1

ipatests: remove test_ordering

Sergey Orlov • 5 years ago

0e9b020

Test that ipa-healthcheck human output translates error strings

Rob Crittenden • 5 years ago

7974ac9

ipatests: wait for SSSD to become online in backup/restore tests

Florence Blanc-Renaud • 5 years ago

ebb3c22

Prevent adding IPA objects as external members of external groups

Alexander Bokovoy • 5 years ago

127b8d9

Move freeipa-selinux dependency to freeipa-common

Christian Heimes • 5 years ago

7d525ab

Integrate ipa_custodia policy

Christian Heimes • 5 years ago

04cc045

ipatests: Added testcase to check logrotate is added for healthcheck tool

sumenon • 5 years ago

7d46879

xmlrpc tests: add a test for idview-apply on a master

Florence Blanc-Renaud • 5 years ago

c37a846

idviews: prevent applying to a master

Florence Blanc-Renaud • 5 years ago

7905891

pki-proxy: Don't rely on running apache until it's configured

Stanislav Levin • 5 years ago

24c6ea3

Become FreeIPA 4.8.5

Alexander Bokovoy • 5 years ago

5f49e6d

Add new contributors to the list

Alexander Bokovoy • 5 years ago

1af9536

Add more contributor emails to the mailmap

Alexander Bokovoy • 5 years ago

b598982

Mark test to skip sssd-2.2.2

Anuja More • 5 years ago

a992263

ipatests: User and group with same name should not break reading AD user data.

Anuja More • 5 years ago

c3053e2

Allow hosts to read DNS records for IP SAN

Christian Heimes • 5 years ago

e4a611a

spec: Take the ownership over '/usr/libexec/ipa/custodia'

Stanislav Levin • 5 years ago

5df2f5d

ipa-restore: restart services at the end

François Cami • 5 years ago

8d6a609

ipatests: add test for SSSD updating expired cache items

Sergey Orlov • 5 years ago

40fd96f

ipatests: provide docstrings instead of imporperly placed comments

Sergey Orlov • 5 years ago

1d416a5

opendnssec2.1 support: move all ods tasks to specific file

Florence Blanc-Renaud • 5 years ago

799ebc8

DnsSecMaster migration: move the call to zonelist export later

Florence Blanc-Renaud • 5 years ago

598c55c

Support OpenDNSSEC 2.1: new ods-signer protocol

Florence Blanc-Renaud • 5 years ago

fc4ccfa

With opendnssec 2, read the zone list from file

Florence Blanc-Renaud • 5 years ago

6cb3b11

Remove the <Interval> from opendnssec conf

Florence Blanc-Renaud • 5 years ago

5716c3b

Support opendnssec 2.1.6

Florence Blanc-Renaud • 5 years ago

23993f5

Move execution of ipa-healthcheck to a separate function

Rob Crittenden • 5 years ago

f36b869

ipatests: check that ipa-healthcheck warns if no dna range is set

sumenon • 5 years ago

59bd2fe

Cleanup SELinux policy

Christian Heimes • 5 years ago

87e0d82

Test if getcert creates cacert file with -F option

Mohammad Rizwan Yusuf • 5 years ago

937fb1d

Move wait_for_request() method to tasks.py

Mohammad Rizwan Yusuf • 5 years ago

5d8d919

Secure AJP connector between Dogtag and Apache proxy

Alexander Bokovoy • 5 years ago

d4d8b98

Tighten permissions on PKI proxy configuration

Alexander Bokovoy • 5 years ago

1deb101

selinux policy: add the right context for org.freeipa.server.trust-enable-agent

Florence Blanc-Renaud • 5 years ago

df0df14

ipa-adtrust-install: remote command fails if ipa-server-trust-ad pkg missing

Florence Blanc-Renaud • 5 years ago

21c923c

ipatests: remove invalid parameter from sssd.conf

Sergey Orlov • 5 years ago

a169572

ipatests: use remote_sssd_config to modify sssd.conf

Sergey Orlov • 5 years ago

32584ed

ipatests: replace utility for editing sssd.conf

Sergey Orlov • 5 years ago

5ff9b6e

ipatests: update docstring to reflect changes in FileBackup.restore()

Sergey Orlov • 5 years ago

9cb8984

ipatests: fix TestSubCAkeyReplication

Florence Blanc-Renaud • 5 years ago

c444f7a

selinux: Remove obsolete memcached access

Vit Mojzis • 5 years ago

9656541

selinux: move BUILD_SELINUX_POLICY definition

Vit Mojzis • 5 years ago

bb6a5a5

Integrate SELinux policy into build system

Christian Heimes • 5 years ago

18ce203

Add freeipa-selinux subpackage

Vit Mojzis • 5 years ago

4ca1009

ipatests: add test for ipa-adtrust-install --add-agents

Florence Blanc-Renaud • 5 years ago

4afd6e5

ipa-adtrust-install: run remote configuration for new agents

Florence Blanc-Renaud • 5 years ago

5edc674

Privilege: add a helper checking if a principal has a given privilege

Florence Blanc-Renaud • 5 years ago

66154f8

ipatests: Added test when 2FA prompting configurations is set.

Anuja More • 5 years ago

dcdcbe3

Test if server installer lock Bind9 recursion

Mohammad Rizwan Yusuf • 5 years ago

3fbbd02

prci: update fedora used for testing ipa-4-8

Armando Neto • 5 years ago

c1660a4

Fix div-by-zero when svc weight is 0 for all masters in location

Rob Crittenden • 5 years ago

12d6864

Azure: Report elapsed time

Stanislav Levin • 5 years ago

8fd1eac

Azure: Rebalance tests

Stanislav Levin • 5 years ago

1fe5c04

Azure: Skip tests requiring external DNS

Stanislav Levin • 5 years ago

ec21ecc

Azure: Free Docker resources after usage

Stanislav Levin • 5 years ago

4b2cdee

Azure: Preliminary check for provided limits

Stanislav Levin • 5 years ago

4e6e0c8

Azure: Sync Gating definitions to current PR-CI

Stanislav Levin • 5 years ago

0fbdb13

pylint: Run Pylint over Azure Python scripts

Stanislav Levin • 5 years ago

3fff867

Azure: Add support for testing multi IPA environments

Stanislav Levin • 5 years ago

245a9dc

Azure: Don't collect twice systemd_journal.log

Stanislav Levin • 5 years ago

685d902

yamllint: Lint all the YAML files

Stanislav Levin • 5 years ago

2988f5f

Azure: Make it possible to configure distro-specific stuff

Stanislav Levin • 5 years ago

198cd50

Azure: Allow to run integration tests

Stanislav Levin • 5 years ago

d33b7d6

Azure: Allow SSH for Docker environments

Stanislav Levin • 5 years ago

6a6e3f2

Azure: Allow to not provide tests to be ignored

Stanislav Levin • 5 years ago

11d1453

Part2: Don't fully quality the FQDN in ssbrowser.html for Chrome

Florence Blanc-Renaud • 5 years ago

8a5bfab

ipaserver/plugins/hbacrule: Add HBAC to memberservice_hbacsvc* labels

Thomas Woerner • 5 years ago

8b5dc6a

Add certmonger wait_for_request that uses run_command

Mohammad Rizwan Yusuf • 5 years ago

84ae778

Test if certmonger reads the token in HSM

Mohammad Rizwan Yusuf • 5 years ago

eaf9e79

Test AES SHA 256 and 384 Kerberos enctypes enabled

Mohammad Rizwan Yusuf • 5 years ago

61577c8

Tests for backup-restore when pkg required is missing

Kaleemullah Siddiqui • 5 years ago

3ced553

ipatests: SSSD should fetch external groups without any limit.

Anuja More • 5 years ago

d4b8081

Don't fully quality the FQDN in ssbrowser.html for Chrome

Rob Crittenden • 5 years ago

f356d57

ipatests: Add test for ipa-extdom-extop plugin should allow @ in group name

Anuja More • 5 years ago

985c99f

Update topology for test_integration/test_sssd.py

Anuja More • 5 years ago

2d0da2f

Azure Pipelines: re-enable nodejs:12 stream for Fedora 31+

Alexander Bokovoy • 5 years ago

4eb4849

kdb: make sure audit_as_req callback signature change is preserved

Alexander Bokovoy • 5 years ago

30b8c8b

dnsrecord: Treat empty list arguments correctly

Christian Heimes • 5 years ago

2ade60a

Remove dependency on custodia package

Christian Heimes • 5 years ago

b240b54

ipatests: Allow zero-length arguments

Stanislav Levin • 5 years ago

c35c066

ipatests: make sure ipa-client-automount reverts sssd.conf

François Cami • 5 years ago

7ae804c

ipa-client-automount: call save_domain() for each change

François Cami • 5 years ago

6332aed

ipatests: add test_trust suite to nightly runs

Sergey Orlov • 5 years ago

0ff0ab8

adtrust: print DNS records for external DNS case after role is enabled

Alexander Bokovoy • 5 years ago

936e27f

lint: Make Pylint-2.4 happy again

Stanislav Levin • 5 years ago

44a59ff

pylint: Clean up comment

Stanislav Levin • 5 years ago

6f48848

pylint: Synchronize pylint plugin to ipatests code

Stanislav Levin • 5 years ago

3460db4

pylint: Teach Pylint how to handle request.context

Stanislav Levin • 5 years ago

5939c90

ipatests: Properly kill gpg-agent

Stanislav Levin • 5 years ago

294694a

Update Azure Pipelines to use Fedora 31

Alexander Bokovoy • 5 years ago

f4e2acd

pytest: Warn about unittest/nose/xunit tests

Stanislav Levin • 5 years ago

3659b46

pytest: Migrate unittest/nose to Pytest fixtures

Stanislav Levin • 5 years ago

356f907

pytest: Migrate xunit-style setups to Pytest fixtures

Stanislav Levin • 5 years ago

87bc314

Added a test to check if ipa host-find --pkey-only does not return SSH public key

Sumedh Sidhaye • 5 years ago

2cd67d5

install/updates: move external members past schema compat update

Alexander Bokovoy • 5 years ago

14dbf04

ipatests: fix modify_sssd_conf()

Florence Blanc-Renaud • 5 years ago

8e52750

WebUI tests: Fix broken reference to parent facet in table record check

Serhii Tsymbaliuk • 5 years ago

4e1d27c

prci: Bump template version

Armando Neto • 5 years ago

5959319

WebUI tests: Fix 'Button is not displayed' exception

Serhii Tsymbaliuk • 5 years ago

664eed7

Nightly definition for ipa-healthcheck tool

sumenon • 5 years ago

7a45cd1

Tier-1 test for ipa-healthcheck tool

sumenon • 5 years ago

a6dae48

After mounting "Unspecified GSS failure" should not be in logs.

Anuja More • 5 years ago

4d7eac9

Fix legacy S4U2Proxy in DAL v8 support

Isaac Boukris • 5 years ago

0806c15

Fix DAL v8 support

Isaac Boukris • 5 years ago

99a920c

Drop support for DAL version 5.0

Robbie Harwood • 5 years ago

1963504

Support DAL version 8.0

Robbie Harwood • 5 years ago

089c47e

Handle the removal of KRB5_KDB_FLAG_ALIAS_OK

Robbie Harwood • 5 years ago

d97cfd7

Normalize test definations titles

Gaurav Talreja • 5 years ago

875769c

ipatests: add check for output contents of ipa-client-samba

Sergey Orlov • 5 years ago

577dd1e

Do not renew externally-signed CA as self-signed

Fraser Tweedale • 5 years ago

4b55136

Add tests for ipa-cacert-manage delete command

Rob Crittenden • 5 years ago

78827db

ipa-certupdate removes all CA certs from db before adding new ones

Rob Crittenden • 5 years ago

7d81a34

Add delete option to ipa-cacert-manage to remove CA certificates

Rob Crittenden • 5 years ago

37f81cc

ipatests: add test_winsyncmigrate suite to nightly runs

Sergey Orlov • 5 years ago

72e1b13

Make assert_error compatible with Python 3.6

Christian Heimes • 5 years ago

e9ed8e7

Print LDAP diagnostic messages on error

Christian Heimes • 5 years ago

4fe1f77

Fix several leaks in ipadb_find_principal

Robbie Harwood • 5 years ago

6bdd6b3

Use separate variable for client fetch in kdcpolicy

Robbie Harwood • 5 years ago

01c1b27

Make the coding style explicit

Robbie Harwood • 5 years ago

86a8d94

ipatests: fix backup and restore

Florence Blanc-Renaud • 5 years ago

1b7cf51

Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit

Rob Crittenden • 5 years ago

3d7d58d

Add xmlrpc test with input validation check for kerberos ticket policy.

Anuja More • 5 years ago

acbbc52

AD user without override receive InternalServerError with API

Florence Blanc-Renaud • 5 years ago

4db18be

Test for ipa-ca-install on replica

Jayesh • 5 years ago

e1ff95f

ipatests: expect "Dynamic Update" and "Bind update policy" in default dnszone* output

François Cami • 5 years ago

578bdce

ipaserver/plugins/dns.py: add "Dynamic Update" and "Bind update policy" to default dnszone* output

François Cami • 5 years ago

e3cff5d

Fix fedora version for xfail for sssd test

Anuja More • 5 years ago

2b19749

Test ipa-getkeytab quiet mode, encryptons

Jayesh • 5 years ago

631054a

Add integration test for otp kerberos ticket policy.

Anuja More • 5 years ago

27a6920

ipatests: add test for certinstall with notBefore in the future

Fraser Tweedale • 5 years ago

2531010

Test if ipactl starts services stopped by systemctl

Jayesh Garg • 5 years ago

acbd90d

Reset per-indicator Kerberos policy

Alexander Bokovoy • 5 years ago

a8b52ea

ipatests: filter_users should be applied correctly.

Anuja More • 5 years ago

71a4d57

Fix test regressions caused by certificate validation changes

Fraser Tweedale • 5 years ago

d833b5b

ipatests: assert_error: allow regexp match

Fraser Tweedale • 5 years ago

44fca09

ipatests: Skip test_sss_ssh_authorizedkeys method

Armando Neto • 5 years ago

0117342

DNS install check: Fix overlapping DNS zone from the master itself

Thomas Woerner • 5 years ago

2c2cef7

Adding auto COPR builds

Dinesh Prasanth M K • 5 years ago

21fb038

ipatests: Improve test_commands reliability

Armando Neto • 5 years ago

5431dd9

Become FreeIPA 4.8.4

Alexander Bokovoy • 5 years ago

60c12a9

ipa-cacert-manage man page: fix indentation

Florence Blanc-Renaud • 5 years ago

668a641

ipa-client-samba: map domain sid of trust domain properly for display

Alexander Bokovoy • 5 years ago

e1d11aa

ipatests: fix pr-ci templates' indentation

François Cami • 5 years ago

d7a2c71

ipatests/test_nfs.py: wait before umount

François Cami • 5 years ago

c00ec94

ipa-kdb: Remove keys if password auth is disabled

Sumit Bose • 5 years ago

aaf8fcc

Enable TestInstallMasterDNSRepeatedly in prci_definitions

Thomas Woerner • 5 years ago

71ea25c

Test repeated installation of the primary with DNS enabled and domain set

Thomas Woerner • 5 years ago

ba28073

DNS install check: allow overlapping zone to be from the master itself

Alexander Bokovoy • 5 years ago

4cf01e7

adtrust.py: mention restarting sssd when adding trust agents

François Cami • 5 years ago

62f0bd0

Fix get_trusted_domain_object_from_sid()

Christian Heimes • 5 years ago

9462e4c

Fix service ldap_disable()

Christian Heimes • 5 years ago

b39ee3e

Require idstart to be larger than UID_MAX

Christian Heimes • 5 years ago

6a95373

Check valid before/after of external certs

Christian Heimes • 5 years ago

2fc5990

Add config that maintains existing content to ipa-client-install manpage

MIZUTA Takeshi • 5 years ago

999ebc1

Fix lite-server to work with GSS_NAME

Christian Heimes • 5 years ago

9f726a2

ipatests : Login via ssh using private-key for ipa-user should work.

Anuja More • 5 years ago

fa95266

ipatests: fix TestMigrateDNSSECMaster teardown

Florence Blanc-Renaud • 6 years ago

bb8da7d

Fix logic of check_client_configuration

Christian Heimes • 6 years ago

5d847cf

Optimize user-add by caching ldap2.has_upg()

Christian Heimes • 6 years ago

0785a03

trust upgrade: ensure that host is member of adtrust agents

Florence Blanc-Renaud • 6 years ago

b21128c

travis: Remove CI integration

Armando Neto • 6 years ago

6486b1a

Don't hard-code client's TLS versions and ciphers

Christian Heimes • 6 years ago

b655586

Update Apache HTTPd for RHBZ#1775146

Christian Heimes • 6 years ago

ae9e41b

Enable TLS 1.3 support on the server

Christian Heimes • 6 years ago

f7de64c

Skip paramiko tests in FIPS mode

Christian Heimes • 6 years ago

82a4fae

FIPS: server key has different name in FIPS mode

Christian Heimes • 6 years ago

9091290

Remove FIPS noise from SSHd

Christian Heimes • 6 years ago

6ce6b53

ipatests: fix test_crlgen_manage

Florence Blanc-Renaud • 6 years ago

dd06dfc

ipatests: fix teardown

Florence Blanc-Renaud • 6 years ago

ab67e0e

ipatests: generic uninstall should call ipa server-del

Florence Blanc-Renaud • 6 years ago

c77b062

covscan: free ucs2-encoded password copy when generating NTLM hash

Alexander Bokovoy • 6 years ago

eebabb5

covscan: free encryption types in case there is an error

Alexander Bokovoy • 6 years ago

84592e3

Add test case for OTP login

Christian Heimes • 6 years ago

dfa356e

Fix otptoken_sync plugin

Christian Heimes • 6 years ago

90f2866

Become FreeIPA 4.8.3

Alexander Bokovoy • 6 years ago

11be139

CVE-2019-10195: Don't log passwords embedded in commands in calls using batch

Rob Crittenden • 6 years ago

7db2000

Make sure to have storage space for tag

Simo Sorce • 6 years ago

d2e0d94

ipatests: add check that ipa-adtrust-install generates sane smb.conf

Sergey Orlov • 6 years ago

8cbf47a

DSU: add Design for Disable Stale Users

François Cami • 6 years ago

d5be38a

Nightly definition: use right template for krbtpolicy

Florence Blanc-Renaud • 6 years ago

04cfaa1

Debian: Fix font-awesome path.

Timo Aaltonen • 6 years ago

1ca9394

Add integration test for Kerberos ticket policy

Rob Crittenden • 6 years ago

bc007ec

Add Authentication Indicator Kerberos ticket policy options

Alexander Bokovoy • 6 years ago

14ff82f

Allow presence of LDAP attribute options

Alexander Bokovoy • 6 years ago

4dbd689

WebUI: Fix notification area layout

Serhii Tsymbaliuk • 6 years ago

d26429e

Do not run trust upgrade code if master lacks Samba bindings

Alexander Bokovoy • 6 years ago

1854038

Update selinux-policy minimal requirement

Cédric Jeanneret • 6 years ago

e011906

Show group-add/remove-member-manager failures

Christian Heimes • 6 years ago

2c98d76

WebUI: Fix adding member manager for groups and host groups

Serhii Tsymbaliuk • 6 years ago

444df81

Test installation with (fake) userspace FIPS

Christian Heimes • 6 years ago

0cd2f4e

Use default ssh host key algorithms

Christian Heimes • 6 years ago

2422970

Become FreeIPA 4.8.2

Alexander Bokovoy • 6 years ago

9dfce7a

Update list of contributors

Alexander Bokovoy • 6 years ago

3674a5c

Update translations

Alexander Bokovoy • 6 years ago

0bda6f9

Prevents DNS Amplification Attack and allow to customize named

Cédric Jeanneret • 6 years ago

bbe2472

prci: bump template version

Armando Neto • 6 years ago

965ce52

ipatests: enable test_smb.py in gating.yaml

Sergey Orlov • 6 years ago

98f2f8c

ipatests: replace ad hoc backup with FileBackup helper

Sergey Orlov • 6 years ago

48a5352

ipatests: refactor FileBackup helper

Sergey Orlov • 6 years ago

11ec42a

Add tests for member management

Christian Heimes • 6 years ago

fd10eaa

Add group membership management

Christian Heimes • 6 years ago

3d54897

smartcard: make the ipa-advise script compatible with authselect/authconfig

Florence Blanc-Renaud • 6 years ago

d9d9abb

Conditionally restart certmonger after client installation

Rob Crittenden • 6 years ago

6bac58c

Add conditional restart (try-restart) capability to services

Rob Crittenden • 6 years ago

24e882f

Provide modern example enctypes in ipa-getkeytab(1)

Robbie Harwood • 6 years ago

0142a3b

Skip commented lines after substitution

Christian Heimes • 6 years ago

6ab306a

Block camellia in krbenctypes update in FIPS

Christian Heimes • 6 years ago

9023033

ipatests: in DNS zone file add A record for name server

Sergey Orlov • 6 years ago

66ff611

ipatests: strip newline character when getting name of temp file

Sergey Orlov • 6 years ago

9f93c65

Fixes debian path for IPA_CUSTODIA_HANDLER

Spencer E. Olson • 6 years ago

4248263

ipatests: add test to check that only TLS 1.2 is enabled in Apache

Sergey Orlov • 6 years ago

686b85b

Enable AES SHA 256 and 384-bit enctypes in Kerberos

Rob Crittenden • 6 years ago

e5c9c75

Fix errors found by Pylint-2.4.3

Stanislav Levin • 6 years ago

7d0fbbf

prci: increase timeout argument for test_sssd.py

Armando Neto • 6 years ago

40da0ce

Don't install a preexec_fn by default

Christian Heimes • 6 years ago

3fbd0ab

test_integration: add tests for custom CA subject DN

Fraser Tweedale • 6 years ago

5d68d04

upgrade: fix ipakra people entry 'description' attribute

Fraser Tweedale • 6 years ago

23f4e00

krainstance: set correct issuer DN in uid=ipakra entry

Fraser Tweedale • 6 years ago

09c6db7

Install language packs for tests

Stanislav Levin • 6 years ago

b3857c7

Restore running of 'test_ipaserver' tests on Azure

Stanislav Levin • 6 years ago

5754582

ipa-backup: fix python2 issue with os.mkdir

Florence Blanc-Renaud • 6 years ago

4c24d01

ipa-server-certinstall manpage: add missing options

Florence Blanc-Renaud • 6 years ago

94b4c25

ipatests: temporarily remove test_smb from gating

François Cami • 6 years ago

c73000e

ipa_client_automount.py: fix typo (idmap.conf => idmapd.conf)

François Cami • 6 years ago

8f8e450

Add test to nightly yamls.

Mohammad Rizwan Yusuf • 6 years ago

b585e58

Installation of replica against a specific server

Mohammad Rizwan Yusuf • 6 years ago

b6134e8

ipatests: fix DNS forwarders setup for AD trust tests with non-root domains

Sergey Orlov • 6 years ago

3067632

Add missing timeout option to logging statement

Rob Crittenden • 6 years ago

e10c896

Log dogtag auth timeout in install, provide hint to increase it

Rob Crittenden • 6 years ago

02ff41d

Log the replication wait timeout for debugging purposes

Rob Crittenden • 6 years ago

c61a327

Replace replication_wait_timeout with certmonger_wait_timeout

Rob Crittenden • 6 years ago

8704fb0

prci: increase timeout for jobs that required AD

Armando Neto • 6 years ago

2c7ad3c

Check file ownership and permission for dirsrv log instance

Mohammad Rizwan Yusuf • 6 years ago

940e2ef

ipatests: fix test_replica_promotion.py::TestHiddenReplicaPromotion

Florence Blanc-Renaud • 6 years ago

b24feb4

Add local helpers to handle unixid structure

Alexander Bokovoy • 6 years ago

3f98406

Fixes pylint errors introduced by version 2.4.0.

Rafael Guterres Jeffman • 6 years ago

c793c68

Removed unnecessary imports after code review.

Rafael Guterres Jeffman • 6 years ago

56b736b

Removes several pylint warnings.

Rafael Guterres Jeffman • 6 years ago

f022674

Removed unnecessary imports after code review.

Rafael Guterres Jeffman • 6 years ago

9d75f82

Removes several pylint warnings.

Rafael Guterres Jeffman • 6 years ago

07d318d

Removes rpmlint warning on freeipa.spec.

Rafael Guterres Jeffman • 6 years ago

ebb6e5d

ipatests: add XMLRPC test for user-add when UPG plugin is disabled

Florence Blanc-Renaud • 6 years ago

482ee74

ipa user_add: do not check group if UPG is disabled

Florence Blanc-Renaud • 6 years ago

624144d

Bump Dogtag min version to 10.7.3

Fraser Tweedale • 6 years ago

af5f2b8

ipa-pki-retrieve-key: request AES encryption (with fallback)

Fraser Tweedale • 6 years ago

abc28be

NSSWrappedCertDB: accept optional symmetric algorithm

Fraser Tweedale • 6 years ago

979f25c

IPASecStore: support extra key arguments

Fraser Tweedale • 6 years ago

a305f67

Don't create log files from help scripts

Christian Heimes • 6 years ago

3098b67

Disable dogtag cert publishing

Rob Crittenden • 6 years ago

f709ca9

Setup DNS for AP Docker container

Stanislav Levin • 6 years ago

7f5b826

Fixed errors newly exposed by pylint 2.4.0

Stanislav Levin • 6 years ago

a733fec

replica install: enforce --server arg

Florence Blanc-Renaud • 6 years ago

c845ef0

ipa-restore: Restore ownership and perms on 389-ds log directory

Rob Crittenden • 6 years ago

966e0b8

ipatests: ensure that backup/restore restores pkcs 11 modules config file

Florence Blanc-Renaud • 6 years ago

71c09ad

ipa-backup: backup the PKCS module config files setup by IPA

Florence Blanc-Renaud • 6 years ago

ebec637

Fix segfault in ipadb_parse_ldap_entry()

Robbie Harwood • 6 years ago

8b3d5b0

Re-add function façades removed by commit 2da9088.

Rafael Guterres Jeffman • 6 years ago

3323913

Report if a certmonger CA is missing

Rob Crittenden • 6 years ago

c4fca82

Extdom plugin should not return error (32)/'No such object'

Anuja More • 6 years ago

1b1e719

ipa-scripts: fix all ipa command line scripts to operate with -I

Alexandre Mulatinho • 6 years ago

f3814e6

Re-order tasks.restore_pkcs11_modules() to run earlier

Rob Crittenden • 6 years ago

8e87e65

Don't log host passwords when they are set/modified

Rob Crittenden • 6 years ago

f262762

ipatests: add tests for cached_auth_timeout in sssd.conf

Sergey Orlov • 6 years ago

5a1ad73

ipatests: refactoring: use library function to check if selinux is enabled

Sergey Orlov • 6 years ago

9431c64

ipatests: add new utilities for file management

Sergey Orlov • 6 years ago

a2da665

WebUI: Fix new test initialization on "HBAC Test" page

Serhii Tsymbaliuk • 6 years ago

850500c

WebUI: Fix changing category on HBAC/Sudo/etc Rule pages

Serhii Tsymbaliuk • 6 years ago

919240b

Add container environment check to replicainstall

Tibor Dudlák • 6 years ago

0b2ed9c

Hidden Replica: Add a test for Automatic CRL configuration

ndehadra • 6 years ago

f2fb220

adtrust: add default read_keys permission for TDO objects

Alexander Bokovoy • 6 years ago

b32510d

add default access control when migrating trust objects

Alexander Bokovoy • 6 years ago

0deea83

prci: increase gating tasks priority

Francisco Trivino • 6 years ago

79458ee

extdom: add extdom protocol documentation

Tomas Halman • 6 years ago

13a37fb

extdom: use sss_nss_*_timeout calls

Tomas Halman • 6 years ago

d8a6b21

extdom: plugin doesn't use timeout in blocking call

Tomas Halman • 6 years ago

9253c18

extdom: plugin doesn't allow @ in group name

Tomas Halman • 6 years ago

51723c7

WebUI: Make 'Unlock' option is available only on locked user page

Serhii Tsymbaliuk • 6 years ago

a8703cd

Fix ca_initialize_hsm_state

Christian Heimes • 6 years ago

f98c9f2

Add design document

Changmin Teng • 6 years ago

027e30d

Modify webUI to adhere to new IPA server API

Changmin Teng • 6 years ago

3e42d74

Implement user pre-authentication control with kdcpolicy plugin

Changmin Teng • 6 years ago

76d1f94

Add a skeleton kdcpolicy plugin

Robbie Harwood • 6 years ago

3a8980f

Move certauth configuration into a server krb5.conf template

Robbie Harwood • 6 years ago

80be759

Enable krb5 snippet updates on client update

Robbie Harwood • 6 years ago

b2e540c

Extend the list of supported pre-auth mechanisms in IPA server API

Changmin Teng • 6 years ago

67467f4

Add new authentication indicators in kdc.conf.template

Changmin Teng • 6 years ago

e1dad72

adtrust: avoid using timestamp in klist output

Alexander Bokovoy • 6 years ago

ed1c162

ipatests: add tests for ipa host-add with non-default maxhostnamelength

Michal Polovka • 6 years ago

4dcd112

ipatests: refactor and extend tests for IPA-Samba integration

Sergey Orlov • 6 years ago

a4839f6

ipatests: modify run_command to allow specify successful return codes

Sergey Orlov • 6 years ago

a45662a

ipatests: add utility functions related to using and managing user accounts

Sergey Orlov • 6 years ago

0b62616

ipatests: allow to pass additional options for clients installation

Sergey Orlov • 6 years ago

c14aa5d

Skip lock and fork in ipa-server-guard on unsupported ops

Rob Crittenden • 6 years ago

a6286e6

Defer initializing the API in dogtag-ipa-ca-renew-agent-submit

Rob Crittenden • 6 years ago

5c5f537

Fix NULL pointer dereference in maybe_require_preauth()

Robbie Harwood • 6 years ago

d9c2edb

Log INFO message when LDAP connection fails on startup

Robbie Harwood • 6 years ago

bb7025f

Add new env vars to pylint plugin

Christian Heimes • 6 years ago

576e2ce

Fix wrong use of identity operation

Christian Heimes • 6 years ago

4c17a9b

Enable literal-comparison linter again

Christian Heimes • 6 years ago

70302ab

config plugin: replace 'is 0' with '== 0'

Florence Blanc-Renaud • 6 years ago

129adb4

ipapython/ipachangeconf.py: change "is not 0" for "!= 0"

François Cami • 6 years ago

79b9d59

Replace %{_libdir} macro in BuildRequires

Christian Heimes • 6 years ago

5de091b

ipatests: fix topology for TestIpaNotConfigured in PR-CI nightly definitions

Michal Polovka • 6 years ago

3aca654

ipatests: fix wrong xfail in test_domain_resolution_order

Florence Blanc-Renaud • 6 years ago

11c720d

travis-ci: make dnf invocations more resilient

François Cami • 6 years ago

d1d0eb6

authconfig.py: restore user-nsswitch.conf at uninstall time

François Cami • 6 years ago

7343504

ipatests: remove xfail in TestIpaClientAutomountFileRestore

François Cami • 6 years ago

ffe9871

WebUI tests: Fix login screen loading issue

Serhii Tsymbaliuk • 6 years ago

26de310

Added testcase to check capitalization fix while running ipa user-mod

sumenon • 6 years ago

24b2d58

Use tasks to configure automount nsswitch settings

Rob Critenden • 6 years ago

2da9088

Move ipachangeconf from ipaclient.install to ipapython

Rob Critenden • 6 years ago

6e92776

ipa-client-automount: always restore nsswitch.conf at uninstall time

François Cami • 6 years ago

2f0afed

ipatests: check that ipa-client-automount restores nsswitch.conf at uninstall time

François Cami • 6 years ago

abea98a

ipatests: Test for ipa-backup with ipa not configured

Michal Polovka • 6 years ago

0010d07

Mark failing test as xfail for use of python-dns make_ds method

Alexander Bokovoy • 6 years ago

bd181e3

prci: Update box used in branch ipa-4-8

Armando Neto • 6 years ago

d7f5e7b

ipa-extdom-extop: test timed out getgrgid_r

Alexander Bokovoy • 6 years ago

0ead6f5

extdom: unify error code handling especially LDAP_NO_SUCH_OBJECT

Sumit Bose • 6 years ago

3bb7254

Store HSM token and state

Christian Heimes • 6 years ago

eb23139

Become FreeIPA 4.8.1

Alexander Bokovoy • 6 years ago

828fdc0

Nightly test definition: add missing tests

Florence Blanc-Renaud • 6 years ago

179e040

Update translation and code contributors for FreeIPA 4.8.1

Alexander Bokovoy • 6 years ago

96ac892

Switch ipa-4-8 branch to track Zanata ipa-4-8 branch

Alexander Bokovoy • 6 years ago

89f99eb

Update translations for FreeIPA 4.8 branch

Alexander Bokovoy • 6 years ago

47e2152

Add Theodor van Nahl to the Contributors.txt

Alexander Bokovoy • 6 years ago

e7762ae

Update translations for FreeIPA 4.8.1

Alexander Bokovoy • 6 years ago

9d751dc

Allow insecure binds for migration

Christian Heimes • 6 years ago

8e207fd

Don't move keys when key backup is disabled

Christian Heimes • 6 years ago

f6c2a9d

install: Add missing scripts to app_DATA.

Timo Aaltonen • 6 years ago

27586cb

Restore SELinux context for p11-kit config overrides

Alexander Bokovoy • 6 years ago

fd0386f

Update comments to explain caSubsystemCert switch

Christian Heimes • 6 years ago

b0f7e65

Change RA agent certificate profile to caSubsystemCert

Alexander Bokovoy • 6 years ago

a0996ca

Test external CA with DNS name constraints

Christian Heimes • 6 years ago

86fe710

configure.ac: don't rely on bashisms

Christian Hermann • 6 years ago

6bef867

Don't return SSH keys with ipa host-find --pkey-only

Rob Crittenden • 6 years ago

e539a29

Fix UnboundLocalError in ipa-replica-manage on errors

Theodor van Nahl • 6 years ago

3d0e3fb

azure-pipelines.yml: switch to Python 3.7

François Cami • 6 years ago

f4bbe00

travis: update container used for testing ipa-4-8 branch

Armando Neto • 6 years ago

d1457fb

Increase ntp_options test timeout

Tibor Dudlák • 6 years ago

744b820

ipatests: refactor TestNTPoptions

Tibor Dudlák • 6 years ago

708528e

ipatests: Add tests for interactive chronyd config

Tibor Dudlák • 6 years ago

1c6efcd

ipatests: Update test tasks for client to be interactive

Tibor Dudlák • 6 years ago

cbb4b65

test_nfs.py: switch to master_3repl

François Cami • 6 years ago

1ad3bf4

ipatests: rename config_replica_resolvconf_with_master_data()

François Cami • 6 years ago

0fdfce5

test_nfs.py: switch to tasks.config_replica_resolvconf_with_master_data()

François Cami • 6 years ago

68f98e2

prci_definitions: add master_3client topology

François Cami • 6 years ago

0231d87

xmlrpc test: add test for preserved > stage user

Florence Blanc-Renaud • 6 years ago

17b97ae

user-stage: transfer all attributes from preserved to stage user

Florence Blanc-Renaud • 6 years ago

317787b

ipapython/admintool.py: use SERVER_NOT_CONFIGURED

François Cami • 6 years ago

fa08e96

test_xmlrpc: fix TestAutomemberFindOrphans.test_find_orphan_automember_rules

Florence Blanc-Renaud • 6 years ago

edb1ae5

WebUI tests: Fix request timeout for test_trust

Serhii Tsymbaliuk • 6 years ago

667db0c

WebUI: Add PKINIT status field to 'Configuration' page

Serhii Tsymbaliuk • 6 years ago

a46383f

Test: Test to check whether ssh from ipa client to ipa master is successful after adding ldap_deref_threshold=0 in sssd.conf

Sumedh Sidhaye • 6 years ago

146fd91

Add PKCS#11 module name to p11helper errors

Christian Heimes • 6 years ago

04c6d83

ipa-client-samba: remove state on uninstall

François Cami • 6 years ago

551cd68

ipatests: test ipa-client-samba after --uninstall

François Cami • 6 years ago

00ba2ae

ipa-client-samba: remove and restore smb.conf only on first uninstall

François Cami • 6 years ago

256a6a8

ipatests: test multiple invocations of ipa-client-samba --uninstall

François Cami • 6 years ago

b9b9809

Test: To check ipa replica-manage del <FQDN> does not fail

Sumedh Sidhaye • 6 years ago

184b60b

Azure pipeline: report failure in prepare-build step

Florence Blanc-Renaud • 6 years ago

279bb8f

WebUI tests: Fix timeout issues for reset password tests

Serhii Tsymbaliuk • 6 years ago

6ddd3b8

dsinstance: add proflie when tracking certificate

Fraser Tweedale • 6 years ago

860b6f6

httpinstance: add pinfile when tracking certificate

Rob Crittenden • 6 years ago

46792fb

ipatests: test ipa-server-upgrade in CA-less deployment

Fraser Tweedale • 6 years ago

f8f8289

Use RENEWAL_CA_NAME and RA_AGENT_PROFILE constants

Fraser Tweedale • 6 years ago

27ea7db

cainstance: add profile to IPA RA tracking request

Fraser Tweedale • 6 years ago

4758a4a

upgrade: fix spurious certmonger re-tracking

Fraser Tweedale • 6 years ago

5194bec

upgrade: log missing/misconfigured tracking requests

Fraser Tweedale • 6 years ago

f64c369

upgrade: update KRA tracking requests

Fraser Tweedale • 6 years ago

80895dd

upgrade: always add profile to tracking requests

Fraser Tweedale • 6 years ago

1f9d1ba

dogtaginstance: avoid special cases for Server-Cert

Fraser Tweedale • 6 years ago

19f1f10

dogtag-ipa-ca-renew-agent: always use profile-based renewal

Fraser Tweedale • 6 years ago

ec5eb84

certmonger: use long options when invoking dogtag-ipa-renew-agent

Fraser Tweedale • 6 years ago

34c51ea

upgrade: add profile to Dogtag tracking requests

Fraser Tweedale • 6 years ago

6fc44bd

dogtaginstance: add profile to tracking requests

Fraser Tweedale • 6 years ago

2906449

Remove posixAccount from service_find search filter

Rob Crittenden • 6 years ago

2f9cbff

ci: add --external-ca-profile tests to gating

Fraser Tweedale • 6 years ago

011c528

ci: add --external-ca-profile tests to nightly

Fraser Tweedale • 6 years ago

740964c

Collapse --external-ca-profile tests into single class

Fraser Tweedale • 6 years ago

a627df8

Add more tests for --external-ca-profile handling

Fraser Tweedale • 6 years ago

83ed057

Fix use of incorrect variable

Fraser Tweedale • 6 years ago

71af731

install: fix --external-ca-profile option

Fraser Tweedale • 6 years ago

e632b22

move MSCSTemplate classes to ipalib

Fraser Tweedale • 6 years ago

d0d29cc

certmaprule: add negative test for altSecurityIdentities

Alexander Bokovoy • 6 years ago

2e37205

certmap rules: altSecurityIdentities should only be used for trusted domains

Alexander Bokovoy • 6 years ago

14ddf7b

Create indexes for altSecurityIdentities and ipaCertmapData attributes

Alexander Bokovoy • 6 years ago

0841d8b

Add altSecurityIdentities attribute from MS-WSPP schema definition

Alexander Bokovoy • 6 years ago

f955145

Use stage and phase attempt counters when saving test artifacts

Alexander Bokovoy • 6 years ago

800545c

Use any nodejs version instead of forcing a version before nodejs 11

Alexander Bokovoy • 6 years ago

2d348aa

Fix rpmlint errors for Rawhide

Alexander Bokovoy • 6 years ago

7d3d307

Avoid use of '/tmp' for pip operations

Stanislav Levin • 6 years ago

0ec908b

Make use of Azure Pipeline slicing

Stanislav Levin • 6 years ago

5780d6a

Simplify ipa-run-tests script

Stanislav Levin • 6 years ago

8aa3ef0

ipatests: new test for trust with partially unreachable AD topology

Sergey Orlov • 6 years ago

14407bb

upgrade: remove ipaCert and key from /etc/httpd/alias

Florence Blanc-Renaud • 6 years ago

0587718

Fix `test_webui.test_selinuxusermap`

Stanislav Levin • 6 years ago

96af539

ipatests/azure: display actual dnf repo URLs

François Cami • 6 years ago

fe8cd4f

ipatests: mark test_domain_resolution_order as expectedly failing

Sergey Orlov • 6 years ago

50d8a40

ipatests: add test for sudo with runAsUser and domain resolution order.

Sergey Orlov • 6 years ago

64a2b3f

Use nis-domainname.service on all RH platforms

Christian Heimes • 6 years ago

c2ac85a

freeipa

Source Code

Commits 13784