Commits - freeipa - Pagure.io

ipatests: disable dnssec validation in tests using dnf

Florence Blanc-Renaud • 4 days ago

0996436

ipatests: remove azure tests

Florence Blanc-Renaud • 4 days ago

40c5efa

kdb: apply combinatorial logic for ticket flags

Julien Rische • 10 months ago

bee088e

ipa-kdb: do not fail if certmap rule cannot be added

Sumit Bose • 2 years ago

f6345f3

seccomp profile: Default to ENOSYS instead of EPERM

Stanislav Levin • 3 years ago

aa0a5ec

Azure: temporarily disable problematic tests, #1

François Cami • 3 years ago

81731f3

ipatests: Update the subca used in TestIPACommand::test_cacert_manage

Florence Blanc-Renaud • 3 years ago

f01c26d

extdom: return LDAP_NO_SUCH_OBJECT if domains differ

Sumit Bose • 3 years ago

decccb1

ipatests: Refactor test_check_otpd_after_idle_timeout

Anuja More • 3 years ago

827ff65

ipatests: Test for OTP when the LDAP connection timed out.

Anuja More • 3 years ago

b3860cb

ipatests: Add tests for `env` plugin

Stanislav Levin • 3 years ago

9a2fe47

ipatests: Add tests for `plugins` plugin

Stanislav Levin • 3 years ago

c55bc46

plugins: Don't treat keys of api as bytes

Stanislav Levin • 3 years ago

d59a2e5

WebUI: Fix certificate serial number representation

Serhii Tsymbaliuk • 3 years ago

1374f89

Constrain pylint to supported versions

Christian Heimes • 3 years ago

e7a12b8

Use get_replication_plugin_name in LDAP updater

Rob Crittenden • 3 years ago

ebeb498

ds: Support renaming of a replication plugin in 389-ds

Alexander Bokovoy • 3 years ago

02845be

ipatests: Replace PR-CI box with ci-ipa-4-8-f34

Armando Neto • 3 years ago

4b0ef48

ipatests: Fetch sudo rules without time offset

Stanislav Levin • 3 years ago

d43d9ca

Revert "ipatests: configure client to use IPA server as DNS resolver"

Stanislav Levin • 3 years ago

0b8517d

pr-ci: Run tests on F34

Stanislav Levin • 3 years ago

bca86ce

ipatests: fix TestInstalDNSSECFirst::test_resolvconf logic

Florence Blanc-Renaud • 3 years ago

47e9df1

ipatests: do not configure nameserver when installing client and replica

Sergey Orlov • 3 years ago

d9744e7

ipatests: always try to create A records for hosts in IPA domain

Sergey Orlov • 3 years ago

63a3cff

ipatests: mock resolver factory

Sergey Orlov • 3 years ago

9a28022

ipatests: disable systemd-resolved cache

Sergey Orlov • 3 years ago

324ba20

ipatests: do not manually modify /etc/resolv.conf in tests

Sergey Orlov • 3 years ago

549ef48

ipatests: setup resolvers during replica and client installations

Sergey Orlov • 3 years ago

cdc78af

ipatests: add utility for managing domain name resolvers

Sergey Orlov • 3 years ago

bc9ca47

ipatests: collect config files for NetworkManager and systemd-resolved

Sergey Orlov • 3 years ago

a868604

freeipa.spec: synchronize with Fedora for 389-ds and PKI versions

Alexander Bokovoy • 3 years ago

2b8ccc8

freeipa.spec: bump the required version of 389ds

Florence Blanc-Renaud • 3 years ago

56746ec

OpenDNSSEC: fix timezone in key creation date

Florence Blanc-Renaud • 3 years ago

5bfe16a

handle Y2038 in timestamp to datetime conversions

Alexander Bokovoy • 3 years ago

b8242e6

ipatests: add a test for ZSK/KSK keytype in DNSKEY record

Florence Blanc-Renaud • 3 years ago

7daf47c

dnssec: fix the key type with OpenDNSSEC 2.1

Florence Blanc-Renaud • 3 years ago

ba6eb85

Set client keytab location for 389ds

Robbie Harwood • 3 years ago

e94261f

ipa-kdb: fix gcc complaints in kdb tests

Alexander Bokovoy • 3 years ago

2a7f21a

azure: Make it possible to adjust Docker resources per test env

Stanislav Levin • 3 years ago

8bf9538

ipatests: re-add test_dnssec.py::TestInstallDNSSECFirst in gating

Florence Blanc-Renaud • 3 years ago

6561fc6

azure: coredump: Wait for systemd fully booted

Stanislav Levin • 3 years ago

e66eb48

azure: Re-balance tests envs

Stanislav Levin • 3 years ago

a5730f5

azure: Warn about extra and missing gating tests compared to PR-CI

Stanislav Levin • 3 years ago

6710ff4

ipatests: dnssec: Add alternative approach for checking chain of trust

Stanislav Levin • 3 years ago

c65c7eb

azure: Collect installed packages

Stanislav Levin • 3 years ago

21a5201

ipatests: Suppress list trust or certificates

Stanislav Levin • 3 years ago

cb3b396

ipatests: Ignore warnings on failed to read files on tarring

Stanislav Levin • 3 years ago

ff70aac

pytest: Show extra summary information for all except passed tests

Stanislav Levin • 3 years ago

d40306b

dns: get_reverse_zone: Ignore resolver's timeout

Stanislav Levin • 3 years ago

fe0b5ff

dnsutil: Improvements for IPA DNS Resolver

Stanislav Levin • 3 years ago

c8e5867

ipatests: Handle network-isolated mode

Stanislav Levin • 3 years ago

34e1f6a

azure: Run Base and XMLRPC tests is isolated network

Stanislav Levin • 3 years ago

e23f976

ipatests: Setup and collect BIND logs

Stanislav Levin • 3 years ago

2a9dea8

BIND: Setup logging

Stanislav Levin • 3 years ago

835df31

azure: Warn about memory issues

Stanislav Levin • 3 years ago

0123795

azure: Add workaround for PhantomJS against OpenSSL 1.1.1

Stanislav Levin • 3 years ago

e573163

ipatests: Update expectations for test_detect_container

Stanislav Levin • 3 years ago

976a3bf

azure: Mask systemd-resolved

Stanislav Levin • 3 years ago

8fea2f6

azure: Remove no longer needed repo

Stanislav Levin • 3 years ago

04c90fb

azure: Wait for systemd booted

Stanislav Levin • 3 years ago

677df14

azure: Enforce multi-user.target as default systemd's target

Stanislav Levin • 3 years ago

523a9f8

azure: Collect systemd boot log

Stanislav Levin • 3 years ago

7433be9

freeipa.spec: do not use jsl for linting on Fedora 34+

Alexander Bokovoy • 3 years ago

7802e14

azure: bump F32->F34

Stanislav Levin • 3 years ago

c02544c

Move constants, document timeout loop

Christian Heimes • 3 years ago

1afe43f

Fix update_dna_shared_config to wait for both entries

Christian Heimes • 3 years ago

ccd9a2e

pkispawn: Make timeout consistent with IPA's startup_timeout

Stanislav Levin • 3 years ago

fd2e70f

pylint: Adapt to new Pylint 2.8

Stanislav Levin • 4 years ago

806b0cd

WebUI: Handle assertion if multiple notifications are present

Michal Polovka • 4 years ago

90caf5c

ipa-otpd: handle LDAP timeout in a better way

Alexander Bokovoy • 4 years ago

5d4d490

WebUI: test_user: test if user is enabled by default

Michal Polovka • 4 years ago

6737790

ipatests: Skip test_jsplugins in server less environments

Stanislav Levin • 4 years ago

79d83cb

Azure: Run Lint task as separate job

Stanislav Levin • 4 years ago

8e97deb

pylint: Fix several warnings

Stanislav Levin • 4 years ago

030d8b3

Azure: Don't install pypi's docker

Stanislav Levin • 4 years ago

902146d

Azure CI: use PPA to provide newer libseccomp version

Alexander Bokovoy • 4 years ago

9dd4983

Azure CI: use Ubuntu-20.04 image by default

Alexander Bokovoy • 4 years ago

781ca84

Azure: Disable AppArmor profile for chrony

Stanislav Levin • 4 years ago

e3ab472

Azure: Warn about Host's AVC and SECCOMP

Stanislav Levin • 4 years ago

b2e6bbf

Azure: Collect Host's systemd journal

Stanislav Levin • 4 years ago

7f35e8e

Azure: Make unique built artifacts names

Stanislav Levin • 4 years ago

9374e99

Azure: Show disk usage

Stanislav Levin • 4 years ago

ea5e38c

Azure: Make it possible to pass additional Pytest args

Stanislav Levin • 4 years ago

695a42d

ipatests: update prci definitions for test_http_kdc_proxy

Sergey Orlov • 4 years ago

fb014d3

ipatests: configure client to use IPA server as DNS resolver

Sergey Orlov • 4 years ago

d7efa9b

ipatests: add test for kdcproxy handling reply split to several TCP packets

Sergey Orlov • 4 years ago

35acb9b

ipatests: return result of kinit_as_user, pass raiseonerr parameter

Sergey Orlov • 4 years ago

ed3dcde

ipatests: log command spawned by pexpect

Sergey Orlov • 4 years ago

2b80009

ipatests: allocate pseudo-terminal only for specific command

Sergey Orlov • 4 years ago

81a19c1

Azure: Run rpmlint on Fedora

Stanislav Levin • 4 years ago

bbeca65

configure: Make rpmlint optional

Stanislav Levin • 4 years ago

35f9d1b

ipatests: Don't rely on certmonger's assigned request id

Mohammad Rizwan • 4 years ago

35350d8

ipatests: remove test cases for unsupported NTLM authentication scenarios

Sergey Orlov • 4 years ago

7e92dd0

rpm-spec: Require crypto-policies-scripts

Stanislav Levin • 4 years ago

e9a5c8a

ipatests: Handle AAAA records in test_ipa_dns_systemrecords_check

Stanislav Levin • 4 years ago

11e4e15

Azure: Populate containers with self-AAAA records

Stanislav Levin • 4 years ago

af96a07

ipatests: filter_users belongs to nss section

Florence Blanc-Renaud • 4 years ago

fb1ae1e

ipatests: use proper template for TestMaskInstall

Sergey Orlov • 4 years ago

ca7008d

ipa-kdb: do not use OpenLDAP functions with NULL LDAP context

Alexander Bokovoy • 4 years ago

79baa09

ipa-kdb: mark test functions as static

Alexander Bokovoy • 4 years ago

aa7f99c

ipa-kdb: reformat ipa_kdb_certauth

Alexander Bokovoy • 4 years ago

da98a6f

ipa-kdb: add missing prototypes

Alexander Bokovoy • 4 years ago

d454ca8

ipa-kdb: fix compiler warnings

Alexander Bokovoy • 4 years ago

701d0fb

dnssec: concurrency issue when disabling old replica key

Florence Blanc-Renaud • 4 years ago

03f5413

dnssec: fix ipa-ods-exporter crash when master key missing

Florence Blanc-Renaud • 4 years ago

040981c

ipatests: Fix expectation about GSS error in test for healthcheck

Stanislav Levin • 4 years ago

2298302

ipatests: test Samba mount with NTLM authentication

Sergey Orlov • 4 years ago

fc7bcc6

pylint: fix inconsistent-return-statements

Florence Blanc-Renaud • 4 years ago

d99af44

ipatests: use pexpect to control inetractive session of ipa-adtrust-install

Sergey Orlov • 4 years ago

fadf30a

ipatests: use pexpect to invoke ktutil

Sergey Orlov • 4 years ago

a66ae54

ipatests: add a tests-oriented wrapper for pexpect module

Sergey Orlov • 4 years ago

a2d7543

ipa-sam: return NetBIOS domain name instead of DNS one

Alexander Bokovoy • 4 years ago

43dbd3b

ipatests: rewrite test for requests routing to subordinate suffixes

Sergey Orlov • 4 years ago

1582da7

Ensure that KDC cert has SAN DNS entry

Christian Heimes • 4 years ago

79cdd1d

Fix cert_request for KDC cert

Christian Heimes • 4 years ago

f45a79c

fix collecting log files which are symlinks

Sergey Orlov • 4 years ago

8f80bec

ipatests: fix job name in nightly definitions

Florence Blanc-Renaud • 4 years ago

6fd830f

ipatests: fix discrepancies in nightly defs

Florence Blanc-Renaud • 4 years ago

f84ef09

ipatests: Don't assume sshd flush its logs immediately

Stanislav Levin • 4 years ago

7c667f6

ipatests: fix expected output for ipahealthcheck.ipa.files

Florence Blanc-Renaud • 4 years ago

1c96a1c

ipatests: test_ipahealthcheck: fix units

François Cami • 4 years ago

f63a15d

ipatests: fix healthcheck test for ipahealthcheck.ds.encryption

Florence Blanc-Renaud • 4 years ago

2cf907f

Check that IPA cert is added to trust store after server install

Antonio Torres • 4 years ago

902be98

Test that IPA certs are removed on server uninstall

Antonio Torres • 4 years ago

2dfc874

ipatests: fix expected errmsg in TestTrust::test_ipa_commands_run_as_aduser

Florence Blanc-Renaud • 4 years ago

ba8d440

ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection

Florence Blanc-Renaud • 4 years ago

35be925

ipatests: update PR-CI templates to Fedora 33

Armando Neto • 4 years ago

d8c2032

selinux: modify policy to allow one-way trust

Florence Blanc-Renaud • 4 years ago

40b69f2

Remove invalid test case for DNS SRV priority

Rob Crittenden • 4 years ago

2fd0ee3

ipatests: add test_ipa_cert_fix to the nightly definitions

Florence Blanc-Renaud • 4 years ago

c1207c3

ipa-cert-fix: do not fail when CSR is missing from CS.cfg

Florence Blanc-Renaud • 4 years ago

8f53cc3

ipatests: add a test for ipa-cert-fix

Florence Blanc-Renaud • 4 years ago

c9e0aa3

ipatests: do not set dns_lookup to true

Sergey Orlov • 4 years ago

1164ccb

ipatests: test that no errors are reported after ipa-certupdate

Rob Crittenden • 4 years ago

42bdcfb

Don't change the CA profile when modifying request in ipa_certupdate

Rob Crittenden • 4 years ago

f2fecbd

ipatests: clear initgroups cache in clear_sssd_cache

Florence Blanc-Renaud • 4 years ago

97f6250

ipatests: Test for IPATrustControllerPrincipalCheck

Sudhir Menon • 4 years ago

2d1eff3

ipatests: ipahealthcheck remove test skipped in pytest run

Sudhir Menon • 4 years ago

5779f23

ipatests: fix expected error message in test_commands

Florence Blanc-Renaud • 4 years ago

0fa18ee

ipatests: fix race condition in finalizer of encrypted backup test

Alexander Bokovoy • 4 years ago

8437b5c

ipaplatform: add constant for systemd-run binary

Alexander Bokovoy • 4 years ago

0769a0b

ipa-kdb: handle dates up to 2106-02-07 06:28:16

Slava Aseev • 4 years ago

1f1e7db

ipa-client-install: unilaterally set dns_lookup_kdc to True

François Cami • 4 years ago

bff0994

ipatests: make sure dns_lookup_kdc is always true

François Cami • 4 years ago

1f282c2

upgrade: ensure service state is synchronized with the server state

Alexander Bokovoy • 4 years ago

b3a1e4d

upgrade: do not overshadow service module in upgrade_configuration

Alexander Bokovoy • 4 years ago

5f04374

service: handle empty list of services to update their state

Alexander Bokovoy • 4 years ago

921abe7

ipa-kdb: use predefined filters for a wild-card searches

Alexander Bokovoy • 4 years ago

44c222a

Fix spelling mistake: filen ame -> filename

Alexander Scheel • 4 years ago

e230299

Modified YAML files

Sudhir Menon • 4 years ago

7979d08

ipatests: Test for IPATrustDomainsCheck with external trust to AD

Sudhir Menon • 4 years ago

0b3c2b6

ipatests: add test for PKI subsystem detection

Florence Blanc-Renaud • 4 years ago

7d47e37

Improve PKI subsystem detection

Florence Blanc-Renaud • 4 years ago

af830c0

systemd: enforce en_US.UTF-8 locale in systemd units

Alexander Bokovoy • 4 years ago

dce8ec5

xmlrpctests: remove harcoded expiration date from test_user_plugin

Florence Blanc-Renaud • 4 years ago

23bf98e

ipatests: fix TestTrust::test_subordinate_suffix

Florence Blanc-Renaud • 4 years ago

c1b50a7

Move where the restore state is marked during IPA server upgrade

Rob Crittenden • 4 years ago

9ecd7c2

Require PKI 10.10+ for KRA profile and ACME support

Rob Crittenden • 4 years ago

c165901

Test that the KRA profiles can renewal its three certificates

Rob Crittenden • 4 years ago

c3c577a

Change KRA profiles in certmonger tracking so they can renew

Rob Crittenden • 4 years ago

69adf81

ipa-client-install manpage: add ipa.p11-kit to list of files created

Antonio Torres Moríñigo • 4 years ago

5d9bc89

ad trust: accept subordinate domains of the forest trust root

Alexander Bokovoy • 4 years ago

6b224e5

ipatests: support subordinate upn suffixes

Sudhir Menon • 4 years ago

d5cca83

Fix krbtpolicy tests

Robbie Harwood • 4 years ago

93abf9c

ipatests: Fix the test name for krbtpolicy

Florence Blanc-Renaud • 4 years ago

e9d6483

ipatests: Tests for ipahealthcheck.ds.nss_ssl

Sudhir Menon • 4 years ago

77391da

util: Fix client-only build

Alexander Bokovoy • 4 years ago

af71b39

ipatests: Test that ipa-certupdate can run without credentials

Rob Crittenden • 4 years ago

449df02

Use host keytab to obtain credentials needed for ipa-certupdate

Rob Crittenden • 4 years ago

1e541a6

WebUI tests: Add simple test to check topology graph page is available

Serhii Tsymbaliuk • 4 years ago

7b807a5

WebUI: Fix topology graph navigation crash

Serhii Tsymbaliuk • 4 years ago

7e87738

ipa-kdb: implement AS-REQ lifetime jitter

Robbie Harwood • 4 years ago

78a7ab0

Update kdcpolicy design doc for jitter implementation

Robbie Harwood • 4 years ago

4981c45

ipatests: Collect EPN log for debugging

Stanislav Levin • 4 years ago

461b463

EPN: Allow authentication by SMTP client's certificate

Stanislav Levin • 4 years ago

058d51f

EPN: Enable certificate validation and hostname checking

Stanislav Levin • 4 years ago

119ebed

test_epn: Standardize EPN configs for deduplication

Stanislav Levin • 4 years ago

3c83c98

EPN: Don't downgrade security

Stanislav Levin • 4 years ago

9b756a7

ipatests: Respect platform's openssl dir

Stanislav Levin • 4 years ago

1f0c5cc

ipatests: temporarily remove test_dnssec.py::TestInstallDNSSECFirst from gating

Florence Blanc-Renaud • 4 years ago

c694c0f

ipatests: Update PRCI Fedora 32 templates

Armando Neto • 4 years ago

2fa5f6c

dns: allow PTR records in arbitrary zones

Fraser Tweedale • 4 years ago

82a581d

ipatests: Test that password reset unlocks users too

Rob Crittenden • 4 years ago

015e226

On password reset also set krbLastAdminUnlock to unlock account

Rob Crittenden • 4 years ago

69b1a5f

Translated using Weblate (Indonesian)

Andika Triwidada • 4 years ago

70fb786

Translated using Weblate (Polish)

Piotr Drąg • 4 years ago

ab6e224

Translated using Weblate (Ukrainian)

Yuri Chornoivan • 4 years ago

87bf88b

Translated using Weblate (Spanish)

Emilio Herrera • 4 years ago

208775b

Update translation files

Weblate • 4 years ago

47a975f

Translated using Weblate (Portuguese (Brazil))

Daniel Lara Souza • 4 years ago

d42d07c

Update translation files

Weblate • 4 years ago

56c8e1c

Translated using Weblate (Ukrainian)

Yuri Chornoivan • 4 years ago

1360ab2

Update translation files

Weblate • 4 years ago

ad00a01

Translated using Weblate (Portuguese (Brazil))

Rafael Fontenelle • 4 years ago

0ab0a2e

Update translation files

Weblate • 4 years ago

0d4e073

Translated using Weblate (Turkish)

Oğuz Ersen • 4 years ago

d24df71

wgi/plugins.py: ignore empty plugin directories

Alexander Bokovoy • 4 years ago

2926246

Wrap libpwquality PKG_CHECK_MODULES in ENABLE_SERVER test

Rob Crittenden • 4 years ago

3e51d44

ipatests: IPADNSSystemRecordsCheck also checks for AAAA records

Florence Blanc-Renaud • 4 years ago

4d8403b

ipatests: ipa-healthcheck tests for DS checks

Sudhir Menon • 4 years ago

826b479

Added nsslapd-logging-hr-timestamps-enabled attribute in _SINGLE_VALUE_OVERRIDE table

Sudhir Menon • 4 years ago

a889f74

ipa-kdb: fix crash in MS-PAC cache init code

Alexander Bokovoy • 4 years ago

1648576

ipatests: Fix for test_ipahealthcheck_ds_encryption

Florence Blanc-Renaud • 4 years ago

25eb7c6

Catch EmptyResult exception in update_idranges

Rob Crittenden • 4 years ago

5e611ba

Test that ipapwpolicy objectclass is added on upgrade

Rob Crittenden • 4 years ago

dccaabb

Add ipwpwdpolicy objectclass to all policies on upgrade

Rob Crittenden • 4 years ago

c08136f

ipatests: ipa-healthcheck test for EncryptionCheck

Sudhir Menon • 4 years ago

b214d90

ipatests: ipa-healthcheck test for DS RIPluginCheck

Sudhir Menon • 4 years ago

0c6e85e

ipatests: curl outputs the cookie in stderr and not in sdtout

Florence Blanc-Renaud • 4 years ago

71f46d6

Reorder creation of the CA mapping tree and database backend

Mark Reynolds • 4 years ago

3366af6

ipatests: ipa-healthcheck test for DS BackendsCheck

Sudhir Menon • 4 years ago

d1606d2

ipatests: ipa-healthcheck fixes for tests running on RHEL

Sudhir Menon • 4 years ago

c1fcc7c

rpcserver: fallback to non-armored kinit in case of trusted domains

Alexander Bokovoy • 4 years ago

1441b99

pylint: remove unused variable

Alexander Bokovoy • 4 years ago

12de9ee

ipa-kdb: support subordinate/superior UPN suffixes

Alexander Bokovoy • 4 years ago

1f0702b

Use a state to determine if a 389-ds upgrade is in progress

Rob Crittenden • 4 years ago

ae4e549

ipatests: Add test_pwpolicy to nightly runs

Rob Crittenden • 4 years ago

48801cb

Add SELinux policy so kadmind can read the crackdb dictionary

Rob Crittenden • 4 years ago

60768b7

ipatests: add test for password policies

Rob Crittenden • 4 years ago

9627ac4

Add a raiseonerr option to ldappasswd_user_change

Rob Crittenden • 4 years ago

676979e

Pass the user to the password policy check in the kdb driver

Rob Crittenden • 4 years ago

d6a8fc2

Add a unit test for libpwquality-based password policy

Rob Crittenden • 4 years ago

cba86e8

Extend password policy to evaluate passwords using libpwpolicy

Rob Crittenden • 4 years ago

43cdcad

Require libpwolicy and configure it in the build system

Rob Crittenden • 4 years ago

734afe3

Add new pwpolicy objectclass to test_xmprpc/objectclasses.py

Rob Crittenden • 4 years ago

4dcb8d9

Extend IPA pwquality plugin to include libpwquality support

Rob Crittenden • 4 years ago

e8232dd

Add LDAP schema for new libpwquality attributes

Rob Crittenden • 4 years ago

04c34dc

Don't restart certmonger after stopping tracking in uninstall

Rob Crittenden • 4 years ago

a9aad49

ipatests: run freeipa-healthcheck on hidden replica

François Cami • 4 years ago

314bf95

ipatests: tasks: add user_del

François Cami • 4 years ago

5f280b2

ipatests: properly handle journalctl return code

Florence Blanc-Renaud • 4 years ago

8bce174

rpmspec: ensure ipa snippet for sshd is always included

Florence Blanc-Renaud • 4 years ago

74b29c1

Lookup ipa-ca record with NSS

Christian Heimes • 4 years ago

81cf1db

ipatests: kinit_as_user improvements

François Cami • 4 years ago

cd15ceb

ipatests: create_active_user improvements

François Cami • 4 years ago

cc9380f

ipatests: add get_kdcinfo

François Cami • 4 years ago

27bcd30

ipatests: add check_if_sssd_is_online

François Cami • 4 years ago

03ac127

ipatests: ipa-healthcheck test fixes running on RHEL

Sudhir Menon • 4 years ago

1a41aee

Simplify update code

Christian Heimes • 4 years ago

01b5904

Don't add 127.0.0.1 to resolv.conf twice

Christian Heimes • 4 years ago

d1c43a9

Require(post) systemd with resolved enabled on F33

Christian Heimes • 4 years ago

da301c2

Replace sudo with runuser

Christian Heimes • 4 years ago

8edf482

Verify freeipa-selinux's ipa module is loaded

Christian Heimes • 4 years ago

7d3ce22

Check ca_wrapped in ipa-custodia-check

Christian Heimes • 4 years ago

0bbd61d

configure_dns_resolver: call self.restore_context

Christian Heimes • 4 years ago

4ba71ae

Add more indices

Christian Heimes • 4 years ago

b4b834f

Use single update LDIF for indices

Christian Heimes • 4 years ago

ff3bc4e

Simplify LDAPUpdater

Christian Heimes • 4 years ago

d74bf64

Add ldap_update() helper to service class

Christian Heimes • 4 years ago

1d7b108

Also backup DNS config drop-ins

Christian Heimes • 4 years ago

2f44efc

Ensure that resolved.conf.d is accessible

Christian Heimes • 4 years ago

e9824b5

Pre-populate IP addresses for the name server upgrades

Alexander Bokovoy • 4 years ago

8f94e4a

Fix compiler warning in ipa-kdb

Christian Heimes • 4 years ago

278ab92

Fix compiler warnings in libotp

Christian Heimes • 4 years ago

d33e0c5

Fix compiler warning in ipa-pwd-extop

Christian Heimes • 4 years ago

f58b289

Get back to git snapshots after release

Alexander Bokovoy • 4 years ago

932b789

Become IPA 4.8.10

Alexander Bokovoy • 4 years ago

a44bb2e

WebUI: Fix jQuery DOM manipulation issues

Serhii Tsymbaliuk • 4 years ago

090a222

Fix nsslapd-db-lock tuning of BDB backend

Christian Heimes • 4 years ago

87e5c05

Test that ccaches are cleaned up during installation

Rob Crittenden • 4 years ago

7cfd03d

Clean up entire /run/ipa/ccaches directory not just files

Rob Crittenden • 4 years ago

ade428f

Reduce the memory requirement from 1.6 to 1.2 GB

Rob Crittenden • 4 years ago

8255bc7

Create systemd-resolved configuration on update

Christian Heimes • 4 years ago

3b3cb99

Configure systemd-resolved to use IPA's BIND

Christian Heimes • 4 years ago

c67aba2

Use new API for auto-forwarders

Christian Heimes • 4 years ago

6dc5566

Configure NetworkManager to use systemd-resolved

Christian Heimes • 4 years ago

d6827f5

Add helpers for resolve1 and nameservers

Christian Heimes • 4 years ago

489ddc6

Delay import of psutil to avoid AVC

Christian Heimes • 4 years ago

202d7da

Make git a build requirement

Christian Heimes • 4 years ago

4391706

Add ipa_pki_retrieve_key_exec() interface

Zdenek Pytela • 4 years ago

c029eb7

SELinux: do not double-define node_t and pki_tomcat_cert_t

François Cami • 4 years ago

58c3343

Require a matching server package for the selinux subpackage

Rob Crittenden • 4 years ago

80f66b7

SELinux Policy: Allow tomcat_t to read kerberos keytabs

François Cami • 4 years ago

6a31605

SELinux Policy: make interfaces for kernel modules non-optional

François Cami • 4 years ago

7ad0484

SELinux Policy: flag ipa_pki_retrieve_key_exec_t as domain_type

François Cami • 4 years ago

25cf7af

SELinux Policy: ipa_custodia_pki_tomcat_exec_t => ipa_custodia_pki_tomcat_t

François Cami • 4 years ago

0518c63

SELinux Policy: ipa_pki_retrieve_key_exec_t => ipa_pki_retrieve_key_t

François Cami • 4 years ago

310dbd6

SELinux Policy: let custodia_t map custodia_tmp_t

François Cami • 4 years ago

c126610

SELinux: Add dedicated policy for ipa-pki-retrieve-key

François Cami • 4 years ago

5a59624

ipatests: enhance TestSubCAkeyReplication

François Cami • 4 years ago

52929cb

test_smb: skip test_smb_service_s4u2self for fed31

Florence Blanc-Renaud • 4 years ago

707823a

Duplicate CA CRT: ignore expected cert

Christian Heimes • 4 years ago

d7f3928

dogtaginstance.py: add --debug to pkispawn

François Cami • 4 years ago

97c6d2d

ipatests: check that pkispawn log is not empty

François Cami • 4 years ago

d1c860e

Add krbPrincipalName pres index correctly

Christian Heimes • 4 years ago

672fe14

ipatests: Add nightly definitions for enforcing mode

Armando Neto • 4 years ago

0269827

Add index for more trust-related attributes

Rob Crittenden • 4 years ago

53a952f

ipatests: Add test for ACI attribute and permission uniqueness

Rob Crittenden • 4 years ago

a572df9

Use ACI class set_permissions() method to set permissions

Rob Crittenden • 4 years ago

939a72f

De-duplicate ACI attributes and permissions

Rob Crittenden • 4 years ago

4e5ba24

ipatests: Add tests for checking available memory

Rob Crittenden • 4 years ago

9fa534c

Require at least 1.6Gb of available RAM to install the server

Rob Crittenden • 4 years ago

1fd4440

ipatests: test that a zone name and name-from-ip will be rejected

Rob Crittenden • 4 years ago

8f19411

Don't allow both a zone name and --name-from-ip to be provided

Rob Crittenden • 4 years ago

2a0c00c

Specify memory limits as strings for docker compose

Alexander Bokovoy • 4 years ago

93fff04

Only restart DS when duplicate cacrt was found

Christian Heimes • 4 years ago

be7efc4

ipa-kdb: test kadmin.local getprincs command

Alexander Bokovoy • 4 years ago

f316d01

ipa-kdb: support getprincs request in kadmin.local

Alexander Bokovoy • 4 years ago

ec8a560

ipatests: Bump PR-CI templates

Armando Neto • 4 years ago

fe9f4a8

Set the certmonger subject with a string, not an object

Rob Crittenden • 4 years ago

2a5a2a0

ipatests: test ipa_server_certinstall with an IPA-issued cert

Rob Crittenden • 4 years ago

099ab6c

dnsforwardzone-add: support dnspython 2.0

Florence Blanc-Renaud • 4 years ago

fefaeb4

SELinux Policy: let custodia replicate keys

François Cami • 4 years ago

4382854

ipatests: Install healthcheck pkg for TestIpaHealthCheckWithADtrust

Sudhir Menon • 4 years ago

0a7fc53

dns: Make use of `resolve_address` of a current resolver instead of the global one

Stanislav Levin • 4 years ago

656aa91

dnspython: Add compatibility shim

Stanislav Levin • 4 years ago

ae8b723

tox: Don't expand symlinks

Stanislav Levin • 4 years ago

7650214

Azure: Increase verbosity for Tox task

Stanislav Levin • 4 years ago

428373f

deps: Require `nss-tools` for make's fasttest target

Stanislav Levin • 4 years ago

ee661dc

nss: Raise exception earlier on unsupported DB type

Stanislav Levin • 4 years ago

0a8997f

Azure: base: Collect both install and uninstall logs

Stanislav Levin • 4 years ago

0ff6b6e

Azure: Drop dependency on UsePythonVersion task

Stanislav Levin • 4 years ago

ae219df

Azure: Add Rawhide definitions

Stanislav Levin • 4 years ago

5d13ef9

ipatests: add missing healthcheck test in PRCI nightlies

Florence Blanc-Renaud • 4 years ago

ab6811a

ipatests: run test_ipahealthcheck.py::TestIpaHealthCheck separately

Florence Blanc-Renaud • 4 years ago

2ce880e

ipatests: simplify fixture

Sergey Orlov • 4 years ago

f3c6fb3

ipatests: refactor test for login using cifs alias principal

Sergey Orlov • 4 years ago

d560505

ipatests: Add test for is_ipa_configured

Rob Crittenden • 4 years ago

2057b33

Use is_ipa_configured from ipalib.facts

Rob Crittenden • 4 years ago

774bbb1

Fall back to old server installation detection when needed

Rob Crittenden • 4 years ago

fe783b6

cli: When parsing options require name/value pairs

Rob Crittenden • 4 years ago

dce5b1c

ipatests: Add option/arg parsing tests for the cli

Rob Crittenden • 4 years ago

6f4f7c6

ipatests: Bump PR-CI templates

Armando Neto • 4 years ago

57ea534

test_smb: make sure both smbserver and smbclient use IPA master for DNS

Alexander Bokovoy • 4 years ago

fc9840d

This is a manual backport of https://github.com/freeipa/freeipa/pull/5053/

Sumedh Sidhaye • 4 years ago

6662f5f

PEP8 fixes

Mohammad Rizwan • 4 years ago

19ec19c

ipatests: add --skip-overlap-check option to prepare_reverse_zone()

Mohammad Rizwan • 4 years ago

6b0f065

ipatests: Add PTR record for IP SAN

Mohammad Rizwan • 4 years ago

32b1242

pylint: Ignore `raise-missing-from`

Stanislav Levin • 4 years ago

ffbbc30

pylint: Ignore `super-with-arguments`

Stanislav Levin • 4 years ago

31e16f7

pylint: Fix warning W0612(unused-variable)

Stanislav Levin • 4 years ago

a283196

pylint: Teach pylint about more RRs types

Stanislav Levin • 4 years ago

8c7414a

Return to git snapshots

Alexander Bokovoy • 4 years ago

e058c4d

Become FreeIPA 4.8.9

Alexander Bokovoy • 4 years ago

c409fc6

ipa-4-8: Add new contributors

Alexander Bokovoy • 4 years ago

26d8267

ipa-4-8: update po/ipa.pot

Alexander Bokovoy • 4 years ago

2c1fb99

Add alternative email to the mailmap for myself

Alexander Bokovoy • 4 years ago

8492ba1

ipatests: Test certmonger rekey command works fine

Mohammad Rizwan • 4 years ago

9b52ba6

Increase replication changelog trimming to 30 days

Mark Reynolds • 4 years ago

14f27d2

ipatests: stop the CA during healthcheck expiration test

Rob Crittenden • 4 years ago

715ec23

Improve performance of ipa-server-guard

Rob Crittenden • 4 years ago

aac7179

spec: Move ipa-cldap plugin out to freeipa-server-trust-ad package

Stanislav Levin • 4 years ago

3084930

uninstall: Clean up no longer used flag

Stanislav Levin • 4 years ago

bba6996

uninstall: Don't fail on missing /var/lib/samba

Stanislav Levin • 4 years ago

602f3f3

IPA-EPN: Test that EPN can be install, uninstalled and re-installed

Rob Crittenden • 4 years ago

6f09f97

ipatests: remove xfail from test_dnssec

Florence Blanc-Renaud • 4 years ago

3919c9c

Issue 8456 - Add new aci's for the new replication changelog entries

Mark Reynolds • 4 years ago

c2f8c84

rpm-spec: Don't fail on missing /etc/ssh/ssh_config

Stanislav Levin • 4 years ago

dbf1d85

Modified YAML files to include healthcheck externalCA tests

sumenon • 4 years ago

4da4dd8

ipatests: Tests for ipahealthcheck tool with IPA external

sumenon • 4 years ago

8f19233

IPA-EPN: enhance input validation

François Cami • 4 years ago

2809084

ipatests: test_epn: update error messages

François Cami • 4 years ago

b426602

Added negative test case for --list-sources option

Rob Crittenden • 4 years ago

d6c4256

ipatests: CLI validation of ipa-healthcheck command

Rob Crittenden • 4 years ago

8e460c6

IPA-EPN: Fix SMTP connection error handling

François Cami • 4 years ago

53f330b

ipatests: test_epn: add test_EPN_connection_refused

François Cami • 4 years ago

3cf7fb1

ipatests: fix TestIpaHealthCheckWithoutDNS failure

Florence Blanc-Renaud • 4 years ago

c4bd1f1

IPA-EPN: Test that users without givenname and/or mail are handled

Rob Crittenden • 4 years ago

1b1dbcb

IPA-EPN: fix configuration file typo

François Cami • 4 years ago

8e810d8

IPA-EPN: Use a helper to retrieve LDAP attributes from an entry

François Cami • 4 years ago

b95817e

WebUI: Unify adapter property definition for state evaluators

Peter Keresztes Schmidt • 4 years ago

6f9c20b

WebUI: Make object_class_evaluator evaluator compatible with batch responses

Peter Keresztes Schmidt • 4 years ago

a0518f7

Treat container subplatforms like main platform

Christian Heimes • 4 years ago

508c5e5

ipatests: test_epn: test_EPN_nbdays enhancements

François Cami • 4 years ago

3b8fdd8

ipatests: tasks.py: fix ipa-epn invocation

François Cami • 4 years ago

9479a39

ipatests: Skip keyring tests on containerized platforms

Stanislav Levin • 4 years ago

50cf90f

Azure: Switch to dockerhub provider

Stanislav Levin • 4 years ago

c89718a

Tests for fake_mname parameter setup

Kaleemullah Siddiqui • 4 years ago

b93f2a7

Address legacy pylint issues in sysrestore.py

Rob Crittenden • 4 years ago

4454af4

Update check_client_configuration to use new client fact

Rob Crittenden • 4 years ago

b9e4c68

Don't use the has_files() to know if client/server is configured

Rob Crittenden • 4 years ago

cb6c48b

Create a common place to retrieve facts about an IPA installation

Rob Crittenden • 4 years ago

ee755a5

Simplify determining if IPA client configuration is complete

Rob Crittenden • 4 years ago

80a7e34

Simplify determining if an IPA server installation is complete

Rob Crittenden • 4 years ago

1a47748

ipatests: Add compatibility against python-cryptography 3.0

Stanislav Levin • 4 years ago

a55ccdb

Don't configure authselect in containers

Christian Heimes • 4 years ago

6926131

ipatests: Check permissions of /etc/ipa/ca.crt new installations

Rob Crittenden • 4 years ago

da2079c

Set mode of /etc/ipa/ca.crt to 0644 in CA-less installations

Rob Crittenden • 4 years ago

4a97145

Fix password file permission

Sergey Orlov • 4 years ago

ec2b146

ipatests: Test healthcheck revocation checker

Rob Crittenden • 4 years ago

ea288b0

pylint: Fix warning and error

Stanislav Levin • 4 years ago

e4c753d

extdom-extop: refactor tests to use unshare+chroot to override nss_files configuration

Alexander Bokovoy • 4 years ago

96aa09b

ipatests: fix test_ipahealthcheck.py::TestIpaHealthCheck

Florence Blanc-Renaud • 4 years ago

2fa03c5

Issue 8407 - Support changelog integration into main database

Mark Reynolds • 4 years ago

0a83d82

ipatests: increase test_trust timeout

Florence Blanc-Renaud • 4 years ago

55144ab

ipatests: check KDC cert permissions in CA less install

Florence Blanc-Renaud • 4 years ago

295dd42

CAless installation: set the perms on KDC cert file

Florence Blanc-Renaud • 4 years ago

81c955e

ipatests: Use healthcheck namespacing in stopped server test

Rob Crittenden • 4 years ago

e91c7bc

ipatests: lib389 is now providing healthchecks, update naming

Rob Crittenden • 4 years ago

d0cdae4

ipatests: Add healthcheck test for FileSystemSpaceCheck

Rob Crittenden • 4 years ago

81949c2

ipatests: verify that all services can be detected by healthcheck

Rob Crittenden • 4 years ago

bdd0c4a

ipatests: Test that healthcheck detects and reports expiration

Rob Crittenden • 4 years ago

40fe354

WebUI tests: Add test case to cover user ID override feature

Serhii Tsymbaliuk • 4 years ago

e35739b

WebUI: Fix error "unknown command 'idoverrideuser_add_member'"

Serhii Tsymbaliuk • 4 years ago

f6c460a

ipatests: Test cases for healthcheck File checker(s)

Rob Crittenden • 4 years ago

3d3e8a4

ipatests: test_otp: convert test_2fa_enable_single_prompt to run_ssh_cmd

François Cami • 4 years ago

b0d4db5

ipatests: ui_driver: convert run_cmd_on_ui_host to tasks.py::run_ssh_cmd

François Cami • 4 years ago

027d0bb

ipatests: test_commands: test_login_wrong_password: Paramiko=>OpenSSH

François Cami • 4 years ago

17759ec

ipatests: test_commands: test_ssh_from_controller: Paramiko=>OpenSSH

François Cami • 4 years ago

ee57dd2

ipatests: test_commands: test_ssh_from_controller: refactor

François Cami • 4 years ago

262a712

ipatests: test_user_permissions: test_selinux_user_optimized Paramiko=>OpenSSH

François Cami • 4 years ago

26e5803

ipatests: test_commands: test_ssh_key_connection: Paramiko=>OpenSSH

François Cami • 4 years ago

326ddff

tasks: add run_ssh_cmd

François Cami • 4 years ago

034526a

ipatests: fix test_authselect

Florence Blanc-Renaud • 4 years ago

4baf6b2

ipatests: remove the xfail for test_nfs.py

Florence Blanc-Renaud • 4 years ago

3eaab97

ipa-client-install: use the authselect backup during uninstall

Florence Blanc-Renaud • 4 years ago

ca880cf

ipatests: Test IPACertNSSTrust check when trust attributes is modified for specific cert

sumenon • 4 years ago

06b3300

Convert ipa-httpd-pwdreader into Python script

Christian Heimes • 4 years ago

c68d14b

Explicitly pass keytab to ipa-join

Christian Heimes • 4 years ago

305deb4

Write state dir to smb.conf

Christian Heimes • 4 years ago

c3bf50b

Add ipaplatform for Fedora and RHEL container

Christian Heimes • 4 years ago

6180778

Allow to override ipaplatform with env var

Christian Heimes • 4 years ago

90ae22b

Replace SSLCertVerificationError with CertificateError for py36

Rob Crittenden • 4 years ago

66a5a0e

ipatests: Don't turn Pytest IPA deprecation warnings into errors

Stanislav Levin • 4 years ago

66216e9

ipatests: test_commands: test_login_wrong_password: look farther in time

François Cami • 4 years ago

64ef1a8

ipatests: test_sss_ssh_authorizedkeys

François Cami • 4 years ago

cf6877a

ipatests: re-enable test_sss_ssh_authorizedkeys

François Cami • 4 years ago

59ad3ae

WebUI tests: Change navigation tests to find menu items using data-name instead of href

Serhii Tsymbaliuk • 4 years ago

a9e3e40

WebUI: Fix issue with opening links in new tab/window

Serhii Tsymbaliuk • 4 years ago

1502cb4

Add fips-mode-setup to ipaplatform.paths to determine FIPS status

Rob Crittenden • 4 years ago

cc06361

ipatests: Fix TestReplicaPromotionLevel1

Florence Blanc-Renaud • 4 years ago

3c53c70

ipatests: fix TestUnprivilegedUserPermissions

Florence Blanc-Renaud • 4 years ago

819bcac

ipatests: xfail TestIpaClientAutomountFileRestore's final test

François Cami • 4 years ago

0209053

ipatests: Test to check IPACAChainExpirationCheck when IPA cacrt is renamed

sumenon • 4 years ago

a52aa06

ipatests: Increase timeout value in test_getcert_list_profile_using_subca

sumenon • 4 years ago

7f205b8

ipatests: Test for ipa-nis-manage CLI tool.

sumenon • 4 years ago

ab36d79

Teach pylint how dnspython 2.x works

Christian Heimes • 4 years ago

abfe4bf

ipatests: test_epn: test_EPN_config_file: Package name fix

Michal Polovka • 4 years ago

8318b2b

ipatests: test_epn: Fix package installation

Michal Polovka • 4 years ago

9281133

ipatests: Tests to check profile is displayed for getcert request.

sumenon • 4 years ago

07d1b9d

Add missing SELinux rule for ipa-custodia.sock

Christian Heimes • 4 years ago

d83b760

replica: Add tests to ensure the ipaapi user is allowed access to ifp on replicas

Jeremy Frasier • 4 years ago

6de4b0f

replica: Ensure the ipaapi user is allowed to access ifp on replicas

Jeremy Frasier • 4 years ago

4b8da1b

ipatests: bump pr-ci templates

Armando Neto • 4 years ago

aa54002

ipatests: bump pr-ci templates

Armando Neto • 4 years ago

5c44e23

Populate nshardwareplatform and nsosversion during join operation

Peter Keresztes Schmidt • 4 years ago

92ef9d1

sshd template must be part of client package

Florence Blanc-Renaud • 4 years ago

668fdc6

certupdate: only add LWCA tracking requests on CA servers

Fraser Tweedale • 4 years ago

72d70fa

Specify cert_paths when calling PKIConnection

Alexander Scheel • 4 years ago

9ded9e2

Make tab completion in console more useful

Christian Heimes • 4 years ago

c21d3cf

Add __signature__ to plugins

Christian Heimes • 4 years ago

e334415

ipatests: cleanup in test_subdomain_lookup_with_certmaprule_containing_dn

Anuja More • 4 years ago

068646f

ipatests: xfail test with older versions of sssd

Anuja More • 4 years ago

460fea3

ipatests : Test to verify override_gid works with subdomain.

Anuja More • 4 years ago

cb5c094

cainstance.is_crlgen_enabled: handle missing ipa-pki-proxy.conf

Fraser Tweedale • 4 years ago

d13a33d

WebUI: Fix rendering of boolean_status_formatter

Peter Keresztes Schmidt • 4 years ago

42ad338

ipatests: remove dnf workaround from test_epn.py

François Cami • 4 years ago

2afe21b

selinux: support running ipa-custodia with PrivateTmp=yes

Alexander Bokovoy • 4 years ago

0d70add

selinux: allow oddjobd to set up ipa_helper_t context for execution

Alexander Bokovoy • 4 years ago

42dd162

ipatests: display SSSD kdcinfo in test_adtrust_install.py

François Cami • 4 years ago

c5abea2

Bump requires for selinux-policy

Florence Blanc-Renaud • 4 years ago

388e793

SELinux: Backport dirsrv_systemctl interface

Christian Heimes • 4 years ago

c72ef1e

Allow ipa-adtrust-install restart sssd and dirsrv services

Zdenek Pytela • 4 years ago

f76c56c

ipatests: increase test_caless_TestReplicaInstall timeout

François Cami • 4 years ago

766a80c

ipatests: xfail test with older versions of sssd

Anuja More • 4 years ago

022cd49

ipatests: Test that trusted AD users should not lose their AD domains.

Anuja More • 4 years ago

494838e

Define errors_by_code in ipalib.errors

Fraser Tweedale • 4 years ago

7bfe6b2

WebUI: Fix "IPA Error 3007: RequirmentError" while adding idoverrideuser association

Serhii Tsymbaliuk • 4 years ago

ffe7f7b

ipatests: bump prci templates

Armando Neto • 4 years ago

5820573

ipatests: ipa_epn: uninstall/reinstall ipa-client-epn

François Cami • 4 years ago

06accac

ipatests: check that EPN's configuration file is installed.

François Cami • 4 years ago

2648c21

man pages: fix epn.conf.5 and ipa-epn.1 formatting

François Cami • 4 years ago

3b43950

EPN: ship the configuration file.

François Cami • 4 years ago

23e2935

ipatests: fix the method adding ifp to sssd.conf

Florence Blanc-Renaud • 4 years ago

437fc60

Unify spelling of "One-Time Password" (take 2)

Florence Blanc-Renaud • 4 years ago

8c7f54d

Modified YAML to include healthcheck IPA-AD trust scenario

sumenon • 4 years ago

2e8cd60

ipatests: Tests to check ipahealthcheck tool with IPA-AD trust scenario

sumenon • 4 years ago

73df4e1

RHEL 8.3 has KRB5 1.18 with KDB 8.0

Christian Heimes • 4 years ago

7473bd1

Unify spelling of "One-Time Password"

Peter Keresztes Schmidt • 4 years ago

0320de7

WebUI: reword OTP info message displayed during PW reset

Peter Keresztes Schmidt • 4 years ago

82475aa

WebUI: move OTP to be the last field in the PW reset form

Peter Keresztes Schmidt • 4 years ago

2c3bf18

client install: fix broken sshd config

Florence Blanc-Renaud • 4 years ago

3ea611c

ipa-client-install: use sshd drop-in configuration

Florence Blanc-Renaud • 4 years ago

b317222

Configure PKI AJP Secret with 256-bit secret

Alexander Scheel • 4 years ago

1e804bf

Clarify AJP connector creation process

Alexander Scheel • 4 years ago

be48983

Use old uglifyjs on RHEL 8

Christian Heimes • 4 years ago

5cefc6d

fix iPAddress cert issuance for >1 host/service

Fraser Tweedale • 4 years ago

1285001

.mailmap: add fcami

François Cami • 4 years ago

6de941c

Build ipa-selinux package on RHEL 8

Christian Heimes • 4 years ago

351f306

baseuser: fix ipanthomedirectorydrive option name

Petr Vobornik • 4 years ago

a090b42

fix cert-find errors in CA-less deployment

Fraser Tweedale • 4 years ago

60a58ea

ipatests: bump prci templates

Armando Neto • 4 years ago

3f89bd2

Xfail test for sssd < 2.3.0

Mohammad Rizwan • 4 years ago

40804b5

ipatests: Test ipa user login with wrong password

Mohammad Rizwan • 4 years ago

34b4d9b

webui: hide user attributes for SMB services section if empty

Petr Vobornik • 4 years ago

691b3cd

Get back to git snapshots

Alexander Bokovoy • 4 years ago

7ca6129

Become FreeIPA 4.8.8

Alexander Bokovoy • 4 years ago

71b8ecd

Prevent local account takeover

Christian Heimes • 4 years ago

930f4b3

ipatests: add a test for ipa-replica-install --setup-ca --http-cert-file

Florence Blanc-Renaud • 4 years ago

0e325bd

ipa-replica-install: --setup-ca and *-cert-file are mutually exclusive

Florence Blanc-Renaud • 4 years ago

32c4df7

Move ipa-epn systemd files and run RPM hooks

Christian Heimes • 4 years ago

77fae8c

ipatests: fix the disable_dnssec_validation method

Florence Blanc-Renaud • 4 years ago

7f19fda

VERSION: back to git snapshots

Alexander Bokovoy • 4 years ago

57034ce

Become FreeIPA 4.8.7

Alexander Bokovoy • 4 years ago

9d1d354

ipa-4-8: update list of contributors

Alexander Bokovoy • 4 years ago

89d5907

ipa-4-8: Update translation files before 4.8.7 release

Alexander Bokovoy • 4 years ago

0713936

Overhaul bind upgrade process

Christian Heimes • 4 years ago

b2c3c04

Fix named.conf named_conf_include_re

Christian Heimes • 4 years ago

1d3649e

Remove named_validate_dnssec update step

Christian Heimes • 4 years ago

03abb28

More upgrade tests

Christian Heimes • 4 years ago

6ddaead

Fix named.conf update bug NAMED_DNSSEC_VALIDATION

Christian Heimes • 4 years ago

aa2f932

upgrade: avoid stopping certmonger when fixing requests

Fraser Tweedale • 4 years ago

f1564cd

httpinstance: retry request without ipa-ca.$DOMAIN dnsName on failure

Fraser Tweedale • 4 years ago

00dd80b

Auto-generated ipa-epn files to gitignore

Christian Heimes • 4 years ago

0fbd29d

IPA-EPN: Don't treat givenname differently

Rob Crittenden • 4 years ago

bf28d4c

IPA-EPN: add test to validate smtp_delay value

Rob Crittenden • 4 years ago

4124bb6

IPA-EPN: add smtp_delay to limit the velocity of e-mails sent

Rob Crittenden • 4 years ago

37a4a79

IPA-EPN: Add tests for --mail-test option

Rob Crittenden • 4 years ago

672c9f5

IPA-EPN: Add mail-test option for testing sending live email

Rob Crittenden • 4 years ago

dca3f11

IPA-EPN: test using SSL against port 465

Rob Crittenden • 4 years ago

6587edd

IPA-EPN: Add test for starttls mode

Rob Crittenden • 4 years ago

fc2b3aa

IPA-EPN: Add tests for sending real mail with auth and templates

Rob Crittenden • 4 years ago

bbe3397

IPA-EPN: Fixes to starttls mode, convert some log errors to exceptions

Rob Crittenden • 4 years ago

ca1c374

Add index for krbPasswordExpiration for EPN

Rob Crittenden • 4 years ago

ab444db

Add a jinja2 e-mail template for EPN

Rob Crittenden • 4 years ago

0869765

IPA-EPN: Test suite.

François Cami • 4 years ago

3552185

IPA-EPN: First version.

François Cami • 4 years ago

98bb4e9

ipatests: add KRB5_TRACE to kinit in test_adtrust_install.py

François Cami • 4 years ago

2032a61

tasks.py: add krb5_trace to create_active_user and kinit_as_user

François Cami • 4 years ago

01f27e2

ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset

Alexander Bokovoy • 4 years ago

ca0a62e

ipatests: test that adding Active Directory user to a role makes it an administrator

Alexander Bokovoy • 4 years ago

6b0f8f3

Web UI: allow users from trusted Active Directory forest manage IPA

Alexander Bokovoy • 4 years ago

99e613e

tests: account for ID overrides as members of groups and roles

Alexander Bokovoy • 4 years ago

5e8df37

Support adding user ID overrides as group and role members

Alexander Bokovoy • 4 years ago

8cce2bb

idviews: handle unqualified ID override lookups from Web UI

Alexander Bokovoy • 4 years ago

2ffb4fd

support using trust-related operations in the server console

Alexander Bokovoy • 4 years ago

afe9191

kdb: handle enterprise principal lookup in AS_REQ

Alexander Bokovoy • 4 years ago

6abade3

libotp: Replace NSS with OpenSSL HMAC

Christian Heimes • 4 years ago

47adde9

Add test for sssd ad trust lookup with dn in certmaprule

Sergio Oliveira Campos • 4 years ago

1f22ae5

Include named config files in backup

Christian Heimes • 4 years ago

782ee11

Split named custom config to allow changes in options stanza

Peter Keresztes Schmidt • 4 years ago

539d469

util: replace NSS usage with OpenSSL

Peter Keresztes Schmidt • 4 years ago

41a20fe

util: add unit test for pw hashing

Peter Keresztes Schmidt • 4 years ago

0fe645e

po: remove zanata config since translation was moved to weblate

Peter Keresztes Schmidt • 4 years ago

a29eec3

Handle DatabaseError in RPC-Server connect()

Christian Heimes • 4 years ago

1062caa

Allow permissions with 'self' bindruletype

Christian Heimes • 4 years ago

f2caafb

Specify min and max values for TTL of a DNS record

Peter Keresztes Schmidt • 4 years ago

ac47599

WebUI: Add units to some DNS zone and IPA config fields

Peter Keresztes Schmidt • 4 years ago

ca4cc7a

WebUI: Expose TTL of DNS records

Peter Keresztes Schmidt • 4 years ago

df8bcc9

WebUI: Refresh DNS record data correctly after mod operation

Peter Keresztes Schmidt • 4 years ago

7dad4a5

ipatests: check HTTP certificate contains ipa-ca.$DOMAIN dnsname

Fraser Tweedale • 4 years ago

8e92190

upgrade: add ipa-ca.$DOMAIN alias to HTTP certificate

Fraser Tweedale • 4 years ago

c445cef

httpinstance: add ipa-ca.$DOMAIN alias in initial request

Fraser Tweedale • 4 years ago

5275342

cert-request: allow ipa-ca.$DOMAIN dNSName for IPA servers

Fraser Tweedale • 4 years ago

4b24129

httpinstance: add fqdn and ipa-ca alias to Certmonger request

Fraser Tweedale • 4 years ago

5287358

certmonger: support dnsname as request search criterion

Fraser Tweedale • 4 years ago

b127bad

certmonger: move 'criteria' description to module docstring

Fraser Tweedale • 4 years ago

ff7d066

certmonger: avoid mutable default argument

Fraser Tweedale • 4 years ago

0e9b777

make: serialize strip-po / strip-pot

Christian Heimes • 4 years ago

8d759d3

Remove obsolete BIND named.conf options

Christian Heimes • 4 years ago

91f9461

ipatests: Test to check warning state for TomcatFileCheck in ipahealthcheck.ipa.files

sumenon • 4 years ago

a571043

Add ipa-print-pac to gitignore

Christian Heimes • 4 years ago

5aa5f67

Allow dnsrecord-add --force on clients

Christian Heimes • 4 years ago

c261a6e

WebUI: Fix invalid RPC calls when link widget has no pkey passed

Peter Keresztes Schmidt • 4 years ago

2af2373

WebUI: Use data adapter to load facet header data

Peter Keresztes Schmidt • 4 years ago

7e7d0d8

ipatests: Test for ipahealthcheck.ipa.files for TomcatFilecheck

sumenon • 4 years ago

c64075b

ipatests: Test for ipahealthcheck DogtagCertsConnectivityCheck

sumenon • 4 years ago

81f924f

WebUI: Apply jQuery patch to fix htmlPrefilter issue

Serhii Tsymbaliuk • 4 years ago

0620229

azure: do not run test_commands due to failures in low memory cases

Alexander Bokovoy • 4 years ago

5f292b2

test_smb: test S4U2Self operation by IPA service

Alexander Bokovoy • 4 years ago

eeb7004

ipa-kdb: refactor principal lookup to support S4U2Self correctly

Alexander Bokovoy • 4 years ago

601151e

ipa-kdb: cache local TGS in the driver context

Alexander Bokovoy • 4 years ago

68a0790

ipa-kdb: add primary group to list of groups in MS-PAC

Alexander Bokovoy • 4 years ago

6c844c7

ipa-kdb: Always allow services to get PAC if needed

Alexander Bokovoy • 4 years ago

741f64f

ipa-kdb: add asserted identity SIDs

Alexander Bokovoy • 4 years ago

110812b

kdb: add minimal server referrals support for enterprise principals

Alexander Bokovoy • 4 years ago

1990e39

ipa-tests: add a test to make sure MS-PAC is produced by KDC

Alexander Bokovoy • 4 years ago

ca99bf2

ipa-print-pac: acquire and print PAC record for a user

Alexander Bokovoy • 4 years ago

1a01e46

ipa-kdb: add UPN_DNS_INFO PAC structure

Alexander Bokovoy • 4 years ago

4723100

Azure: Make dnf repos consistent

Stanislav Levin • 4 years ago

7f2bfd9

ipatests: Check if user with 'User Administrator' role can delete group.

Florence Blanc-Renaud • 4 years ago

a457b79

Test for removing a subgroup

Sumedh Sidhaye • 4 years ago

c39a2e2

baseldap: de-duplicate passed attributes when checking for limits

Alexander Bokovoy • 4 years ago

363cb9f

ipatests: Test deletion of required principal throws proper error

Mohammad Rizwan Yusuf • 4 years ago

f0ef418

Display principal name while del required principal

Mohammad Rizwan Yusuf • 4 years ago

8737749

WebUI tests: Add confirmation step after changing default group in automember tests

Serhii Tsymbaliuk • 4 years ago

d8c8ba7

WebUI: Add confirmation dialog for changing default user/host group

Serhii Tsymbaliuk • 4 years ago

5d3364a

Check for freeipa-server-dns package early

Christian Heimes • 4 years ago

f16a4b0

service delegation: allow to add and remove host principals

Alexander Bokovoy • 4 years ago

c8009e1

Hard-code in_tree=True for tests

Christian Heimes • 4 years ago

834b04b

Fix detection logic for api.env.in_tree

Christian Heimes • 4 years ago

6cd2d44

Make api.env.mode consistent

Christian Heimes • 4 years ago

3234892

ipatests: Added testcase to check that ipa-adtrust-install command runs successfully with locale set as LANG=en_IN.UTF-8

sumenon • 4 years ago

c59106f

Azure: Always update apt cache

Stanislav Levin • 4 years ago

273f580

Azure: Allow chronyd to sync time

Stanislav Levin • 4 years ago

9d01875

Azure: Add custom seccomp profile

Stanislav Levin • 4 years ago

fd58bac

WebUI: use python3-rjsmin to minify JavaScript files

Alexander Bokovoy • 4 years ago

831de84

test_smb: test that we can auth as NetBIOS alias

Alexander Bokovoy • 4 years ago

77c2e42

kdb: fix memory handling in ipadb_find_principal

Alexander Bokovoy • 4 years ago

5c62fbd

kdb: initialize flags in ipadb_delete_principal()

Alexander Bokovoy • 4 years ago

4de1586

Disable password schema update on LDAP bind

Christian Heimes • 4 years ago

2765666

Use httpd 2.4 syntax for access control

Christian Heimes • 4 years ago

84d15da

Azure Pipelines: switch to Fedora 32

Alexander Bokovoy • 4 years ago

60ed4b0

Azure Pipelines: Override services known to not work in containers

Alexander Bokovoy • 4 years ago

e37b3d8

Add pytest.skip_if_container()

Alexander Bokovoy • 4 years ago

8988916

WebUI tests: fix PEP8 issues in test_webui/test_user.py

Mohammad Rizwan Yusuf • 4 years ago

b626a79

webui: check if notification area doesn't intercept menu button

Mohammad Rizwan Yusuf • 4 years ago

b68f98a

Fix make devcheck

Christian Heimes • 4 years ago

c2893b8

prci: update templates for new Fedora release

Armando Neto • 4 years ago

d758b6a

Azure: Increase memory limit

Stanislav Levin • 4 years ago

97581ec

ipatests: Collect all logs on all Unix hosts

Stanislav Levin • 4 years ago

736b8ba

ipatests: Pretty print multihost config

Stanislav Levin • 4 years ago

5da643f

ipatests: Cleanup 'collect_logs' decorator

Stanislav Levin • 4 years ago

295d207

ipatests: enable 389-ds audit log and collect audit file

Florence Blanc-Renaud • 4 years ago

7b39e5f

Make ipaplatform a regular top-level package

Christian Heimes • 4 years ago

07da5ab

ipa-advise: fallback to /usr/libexec/platform-python if python3 not found

Florence Blanc-Renaud • 4 years ago

787ce45

Reconfigure pycodestyle

Christian Heimes • 4 years ago

d80b98b

Manually reformat ipapython/version.py.in

Christian Heimes • 4 years ago

9c3d00b

Silence W601 .has_key() is deprecated

Christian Heimes • 4 years ago

d44a392

Fix E722 do not use bare 'except'

Christian Heimes • 4 years ago

45ddb4f

Fix E721 do not compare types, use 'isinstance()'

Christian Heimes • 4 years ago

7be2ffe

Fix E714 test for object identity should be 'is not'

Christian Heimes • 4 years ago

70dc448

Fix E713 test for membership should be 'not in'

Christian Heimes • 4 years ago

ef068bd

Fix E712 comparison to True / False

Christian Heimes • 4 years ago

01c1cf6

Fix E711 comparison to None

Christian Heimes • 4 years ago

c136aab

Fix E266 too many leading '#' for block comment

Christian Heimes • 4 years ago

033f8dc

Simplify pki proxy conf

Christian Heimes • 4 years ago

e3f7d9b

Make check_required_principal() case-insensitive

Christian Heimes • 4 years ago

b590a67

Update ACIs with the correct syntax

Viktor Ashirov • 4 years ago

218e655

prci_definitions: remove test_smb from ipa-4-8 gating workflow

Francisco Trivino • 4 years ago

f289771

Address issues found by new pylint 2.5.0

Christian Heimes • 4 years ago

ef2a745

Fix a syntax typo

Miro Hrončok • 4 years ago

0392dca

tox.ini: switch from W503 to W504

François Cami • 4 years ago

6681871

WebUI tests: cover membership management with UI tests

Serhii Tsymbaliuk • 4 years ago

e58ca6a

Add skip_if_platform marker

Christian Heimes • 5 years ago

c43f3a7

ipatests/test_installation: Use knownservices to map the service name.

Timo Aaltonen • 5 years ago

99f4cb0

ipatests/test_commands: Check sssd version like on test_sssd

Timo Aaltonen • 5 years ago

af94aad

Debian: Use parse_ipa_version from redhat.

Timo Aaltonen • 5 years ago

fc2e854

Debian: Use enable/disable_ldap_automount() from base

Timo Aaltonen • 5 years ago

c45d4c8

ipatests: Test for ipahealthcheck tool for IPADomainCheck.

sumenon • 5 years ago

1bec170

Test for check of HostKeyAlgorithms option in ssh_config

Kaleemullah Siddiqui • 5 years ago

ac67dc9

Define default password policy for sysaccounts

Christian Heimes • 5 years ago

e74cfcc

Use api.env.container_sysaccounts

Christian Heimes • 5 years ago

7509f42

Fix exception escape warning

Christian Heimes • 5 years ago

26a9241

Fix APIVersion.__getnewargs__

Christian Heimes • 5 years ago

f812e2c

servrole: takes_params must be a tuple

Christian Heimes • 5 years ago

1d2ec18

Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1

Serhii Tsymbaliuk • 5 years ago

46008f5

ipatests: Test for ipahealthcheck.ds.ruv check

sumenon • 5 years ago

3244e27

ipatests: Specify shell implementation

Stanislav Levin • 5 years ago

9d06a4a

ipatests: Specify Pytest XML report schema

Stanislav Levin • 5 years ago

b62f59f

ipatests: Remove no longer needed 'skip' compatibility

Stanislav Levin • 5 years ago

46518b4

ipatests: Remove no longer needed 'capture' compatibility

Stanislav Levin • 5 years ago

f97341c

ipatests: Remove no longer needed 'get_marker'

Stanislav Levin • 5 years ago

6e14cfc

ipatests: Remove deprecated yield_fixture

Stanislav Levin • 5 years ago

8c0192a

ipatests: Bump required Pytest

Stanislav Levin • 5 years ago

9d10bc8

Fix various OpenDNSSEC 2.1 issues

Christian Heimes • 5 years ago

c3f97a9

Web UI: Upgrade Dojo version 1.13.0 -> 1.16.2

Serhii Tsymbaliuk • 5 years ago

fa09cc2

ipatests: Test to check password leak in apache error log

Mohammad Rizwan Yusuf • 5 years ago

cd7dcb1

Test for healthcheck being run on replica with stopped master

Michal Polovka • 5 years ago

b6b41b3

Man pages: fix syntax issues

Florence Blanc-Renaud • 5 years ago

98045dc

Support for SUSE/openSUSE ipaplatform

Stasiek Michalski • 5 years ago

f0c6d1e

Use /run and /run/lock instead of /var

Christian Heimes • 5 years ago

d22ce3d

ipatests: increase test_webui_server timeout

François Cami • 5 years ago

589c7fd

CVE-2020-1722: prevent use of too long passwords

Alexander Bokovoy • 5 years ago

089a393

ipatests: increase test_ipahealthcheck timeout

François Cami • 5 years ago

fa395ce

ipatests: Mark firewalld commands as no-op on non-firewalld distros

Stanislav Levin • 5 years ago

d320997

Debian: write out only one CA certificate per file

Sam Morris • 5 years ago

6fcc78b

Azure: Gather coredumps

Stanislav Levin • 5 years ago

5325c72

Azure: Allow distros to install Python they want

Stanislav Levin • 5 years ago

60d6def

Perform baseline healthcheck

Rob Crittenden • 5 years ago

435e2be

ipatests: move ipa_backup to tasks

François Cami • 5 years ago

8691e5f

ipatests: mark test_trustdomain_disable test as expectedly failing

Sergey Orlov • 5 years ago

8c68b92

ipatests: add context manager for declaring part of test as xfail

Sergey Orlov • 5 years ago

fc253fe

ipatests: add utility for getting sssd version on remote host

Sergey Orlov • 5 years ago

3e81b0f

update prci definitions for test_sssd.py

Sergey Orlov • 5 years ago

edbb913

ipatests: add test for sssd behavior with disabled trustdomains

Sergey Orlov • 5 years ago

fed6ad2

Test for output being indented by default value if not stated implicitly.

Michal Polovka • 5 years ago

80fe55d

ipatests:Test if proper error thrown when AD user tries to run IPA commands

Mohammad Rizwan Yusuf • 5 years ago

90eef2f

ipa-backup: Make sure all roles are installed on the current master.

François Cami • 5 years ago

37a60b2

test_backup_and_restore: add server role verification steps

François Cami • 5 years ago

69a2b6d

ipatests: test ipa-backup with different role configurations.

François Cami • 5 years ago

00e2a48

nightly_ipa-4-8_previous.yaml: fix typo

François Cami • 5 years ago

48be293

ipatests: run all cases from test_integration/test_idviews.py in nightlies

Sergey Orlov • 5 years ago

e86558d

ipatests: explicitly save output of certutil

Sergey Orlov • 5 years ago

8e1d524

ipatests: add AD DC as a DNS forwarder before establishing trust

Sergey Orlov • 5 years ago

cc16712

ipatests: add missing classes from test_installation in nightly runs

Sergey Orlov • 5 years ago

d22d55d

ipatests: run test_integration/test_cert.py in PR-CI

Sergey Orlov • 5 years ago

b55bdd2

Test for ipahealthcheck.ipa.idns check when integrated DNS is setup

sumenon • 5 years ago

f6171fd

Allow rename of a host group

Alexander Bokovoy • 5 years ago

b4fdb83

Add 'api' and 'aci' targets to make

Alexander Bokovoy • 5 years ago

38e0268

Test to check if Certmonger tracks certs in between reboots/interruptions and while in "CA_WORKING" state

Sumedh Sidhaye • 5 years ago

77409e2

pr-ci templates: update test_fips timeouts

François Cami • 5 years ago

d847f12

Remove Fedora repository fastmirror selection

Alexander Bokovoy • 5 years ago

a4ae456

Become FreeIPA 4.8.6

Alexander Bokovoy • 5 years ago

75d04b5

ipatests: test_replica_promotion.py: test KRA on Hidden Replica

François Cami • 5 years ago

a692212

ipatests: Skip test using paramiko when FIPS is enabled

Mohammad Rizwan Yusuf • 5 years ago

45507c1

po: fix LINGUAS to use whitespace separation

Christian Heimes • 5 years ago

616ad39

Test that pwpolicy only applied on Kerberos entries

Rob Crittenden • 5 years ago

b34063e

Add ability to change a user password as the Directory Manager

Rob Crittenden • 5 years ago

840671b

Don't save password history on non-Kerberos accounts

Rob Crittenden • 5 years ago

8b7bb96

ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager

Alexander Bokovoy • 5 years ago

bcbf64b

ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN

Alexander Bokovoy • 5 years ago

5bae736

ipatests: test sysaccount password change with a password policy applied

Alexander Bokovoy • 5 years ago

313542e

ipatests: allow changing sysaccount passwords as cn=Directory Manager

Alexander Bokovoy • 5 years ago

f4dc10b

Fix indentation levels

Alexander Bokovoy • 5 years ago

c62b9e7

SELinux: apache_manage_pid_files for F30

Christian Heimes • 5 years ago

f08ced1

ipatests: always skip additional input for group-add-member --external

Alexander Bokovoy • 5 years ago

74f36e7

po: update Chinese (China) translation

Alexander Bokovoy • 5 years ago

c6adee0

po: update Ukrainian translation

Alexander Bokovoy • 5 years ago

855a36b

po: update Tajik translation timestamp

Alexander Bokovoy • 5 years ago

3d411cf

po: update Slovak translation timestamp

Alexander Bokovoy • 5 years ago

3c15e47

po: update Russian translation

Alexander Bokovoy • 5 years ago

db433fb

po: update Portuguese (Brazil) translation timestamp

Alexander Bokovoy • 5 years ago

eab195f

po: update Portuguese translation timestamp

Alexander Bokovoy • 5 years ago

31a9da8

po: update Polish translation

Alexander Bokovoy • 5 years ago

4e3867f

po: update Punjabi translation timestamp

Alexander Bokovoy • 5 years ago

e4dfb74

po: update Dutch translation timestamp

Alexander Bokovoy • 5 years ago

e794528

po: update Marathi translation timestamp

Alexander Bokovoy • 5 years ago

28a963e

po: update Kannada translation timestamp

Alexander Bokovoy • 5 years ago

89b048d

po: update Japanese translation timestamp

Alexander Bokovoy • 5 years ago

89dbf88

po: update Indonesian translation timestamp

Alexander Bokovoy • 5 years ago

124a563

po: update Hungarian translation timestamp

Alexander Bokovoy • 5 years ago

595d506

po: update Hindi translation timestamp

Alexander Bokovoy • 5 years ago

c4dd8b2

po: update French translation

Alexander Bokovoy • 5 years ago

a2ca393

po: update Basque translation timestamp

Alexander Bokovoy • 5 years ago

92fb5c5

po: update Spanish translation

Alexander Bokovoy • 5 years ago

7af52df

po: update English (United Kingdom) translation timestamp

Alexander Bokovoy • 5 years ago

37a1e92

po: update German translation

Alexander Bokovoy • 5 years ago

0d053d8

po: update Czech translation timestamp

Alexander Bokovoy • 5 years ago

c8ba436

po: update Catalan translation timestamp

Alexander Bokovoy • 5 years ago

29e3ade

po: update Bengali translation timestamp

Alexander Bokovoy • 5 years ago

16d9556

po: update ipa.pot template

Alexander Bokovoy • 5 years ago

e23ba77

Update translation infrastructure

Alexander Bokovoy • 5 years ago

831f4dd

Keep ipa.pot translation file in git for weblate

Alexander Bokovoy • 5 years ago

9ff7b4a

ipatests: provide AD admin password when trying to establish trust

Sergey Orlov • 5 years ago

814b47e

Test if schema-compat-entry-attribute is set

Mohammad Rizwan Yusuf • 5 years ago

3f3fa40

Test if schema-compat-entry-attribute is set

Mohammad Rizwan Yusuf • 5 years ago

210619a

Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1

Serhii Tsymbaliuk • 5 years ago

f1855dd

Add pytest OpenSSH transport with password

Christian Heimes • 5 years ago

42aa86f

selinux: disable ipa_custodia when installing custom policy

Vit Mojzis • 5 years ago

f99cfa1

ipatests: remove test_ordering

Sergey Orlov • 5 years ago

0e9b020

Test that ipa-healthcheck human output translates error strings

Rob Crittenden • 5 years ago

7974ac9

ipatests: wait for SSSD to become online in backup/restore tests

Florence Blanc-Renaud • 5 years ago

ebb3c22

Prevent adding IPA objects as external members of external groups

Alexander Bokovoy • 5 years ago

127b8d9

Move freeipa-selinux dependency to freeipa-common

Christian Heimes • 5 years ago

7d525ab

Integrate ipa_custodia policy

Christian Heimes • 5 years ago

04cc045

ipatests: Added testcase to check logrotate is added for healthcheck tool

sumenon • 5 years ago

7d46879

xmlrpc tests: add a test for idview-apply on a master

Florence Blanc-Renaud • 5 years ago

c37a846

idviews: prevent applying to a master

Florence Blanc-Renaud • 5 years ago

7905891

pki-proxy: Don't rely on running apache until it's configured

Stanislav Levin • 5 years ago

24c6ea3

Become FreeIPA 4.8.5

Alexander Bokovoy • 5 years ago

5f49e6d

Add new contributors to the list

Alexander Bokovoy • 5 years ago

1af9536

Add more contributor emails to the mailmap

Alexander Bokovoy • 5 years ago

b598982

Mark test to skip sssd-2.2.2

Anuja More • 5 years ago

a992263

ipatests: User and group with same name should not break reading AD user data.

Anuja More • 5 years ago

c3053e2

Allow hosts to read DNS records for IP SAN

Christian Heimes • 5 years ago

e4a611a

spec: Take the ownership over '/usr/libexec/ipa/custodia'

Stanislav Levin • 5 years ago

5df2f5d

ipa-restore: restart services at the end

François Cami • 5 years ago

8d6a609

ipatests: add test for SSSD updating expired cache items

Sergey Orlov • 5 years ago

40fd96f

ipatests: provide docstrings instead of imporperly placed comments

Sergey Orlov • 5 years ago

1d416a5

opendnssec2.1 support: move all ods tasks to specific file

Florence Blanc-Renaud • 5 years ago

799ebc8

DnsSecMaster migration: move the call to zonelist export later

Florence Blanc-Renaud • 5 years ago

598c55c

Support OpenDNSSEC 2.1: new ods-signer protocol

Florence Blanc-Renaud • 5 years ago

fc4ccfa

With opendnssec 2, read the zone list from file

Florence Blanc-Renaud • 5 years ago

6cb3b11

Remove the <Interval> from opendnssec conf

Florence Blanc-Renaud • 5 years ago

5716c3b

Support opendnssec 2.1.6

Florence Blanc-Renaud • 5 years ago

23993f5

Move execution of ipa-healthcheck to a separate function

Rob Crittenden • 5 years ago

f36b869

ipatests: check that ipa-healthcheck warns if no dna range is set

sumenon • 5 years ago

59bd2fe

Cleanup SELinux policy

Christian Heimes • 5 years ago

87e0d82

Test if getcert creates cacert file with -F option

Mohammad Rizwan Yusuf • 5 years ago

937fb1d

Move wait_for_request() method to tasks.py

Mohammad Rizwan Yusuf • 5 years ago

5d8d919

Secure AJP connector between Dogtag and Apache proxy

Alexander Bokovoy • 5 years ago

d4d8b98

Tighten permissions on PKI proxy configuration

Alexander Bokovoy • 5 years ago

1deb101

selinux policy: add the right context for org.freeipa.server.trust-enable-agent

Florence Blanc-Renaud • 5 years ago

df0df14

ipa-adtrust-install: remote command fails if ipa-server-trust-ad pkg missing

Florence Blanc-Renaud • 5 years ago

21c923c

ipatests: remove invalid parameter from sssd.conf

Sergey Orlov • 5 years ago

a169572

ipatests: use remote_sssd_config to modify sssd.conf

Sergey Orlov • 5 years ago

32584ed

ipatests: replace utility for editing sssd.conf

Sergey Orlov • 5 years ago

5ff9b6e

ipatests: update docstring to reflect changes in FileBackup.restore()

Sergey Orlov • 5 years ago

9cb8984

ipatests: fix TestSubCAkeyReplication

Florence Blanc-Renaud • 5 years ago

c444f7a

selinux: Remove obsolete memcached access

Vit Mojzis • 5 years ago

9656541

selinux: move BUILD_SELINUX_POLICY definition

Vit Mojzis • 5 years ago

bb6a5a5

Integrate SELinux policy into build system

Christian Heimes • 5 years ago

18ce203

Add freeipa-selinux subpackage

Vit Mojzis • 5 years ago

4ca1009

ipatests: add test for ipa-adtrust-install --add-agents

Florence Blanc-Renaud • 5 years ago

4afd6e5

ipa-adtrust-install: run remote configuration for new agents

Florence Blanc-Renaud • 5 years ago

5edc674

Privilege: add a helper checking if a principal has a given privilege

Florence Blanc-Renaud • 5 years ago

66154f8

ipatests: Added test when 2FA prompting configurations is set.

Anuja More • 5 years ago

dcdcbe3

Test if server installer lock Bind9 recursion

Mohammad Rizwan Yusuf • 5 years ago

3fbbd02

prci: update fedora used for testing ipa-4-8

Armando Neto • 5 years ago

c1660a4

Fix div-by-zero when svc weight is 0 for all masters in location

Rob Crittenden • 5 years ago

12d6864

Azure: Report elapsed time

Stanislav Levin • 5 years ago

8fd1eac

Azure: Rebalance tests

Stanislav Levin • 5 years ago

1fe5c04

Azure: Skip tests requiring external DNS

Stanislav Levin • 5 years ago

ec21ecc

Azure: Free Docker resources after usage

Stanislav Levin • 5 years ago

4b2cdee

Azure: Preliminary check for provided limits

Stanislav Levin • 5 years ago

4e6e0c8

Azure: Sync Gating definitions to current PR-CI

Stanislav Levin • 5 years ago

0fbdb13

pylint: Run Pylint over Azure Python scripts

Stanislav Levin • 5 years ago

3fff867

Azure: Add support for testing multi IPA environments

Stanislav Levin • 5 years ago

245a9dc

Azure: Don't collect twice systemd_journal.log

Stanislav Levin • 5 years ago

685d902

yamllint: Lint all the YAML files

Stanislav Levin • 5 years ago

2988f5f

Azure: Make it possible to configure distro-specific stuff

Stanislav Levin • 5 years ago

198cd50

Azure: Allow to run integration tests

Stanislav Levin • 5 years ago

d33b7d6

Azure: Allow SSH for Docker environments

Stanislav Levin • 5 years ago

6a6e3f2

Azure: Allow to not provide tests to be ignored

Stanislav Levin • 5 years ago

11d1453

Part2: Don't fully quality the FQDN in ssbrowser.html for Chrome

Florence Blanc-Renaud • 5 years ago

8a5bfab

ipaserver/plugins/hbacrule: Add HBAC to memberservice_hbacsvc* labels

Thomas Woerner • 5 years ago

8b5dc6a

Add certmonger wait_for_request that uses run_command

Mohammad Rizwan Yusuf • 5 years ago

84ae778

Test if certmonger reads the token in HSM

Mohammad Rizwan Yusuf • 5 years ago

eaf9e79

Test AES SHA 256 and 384 Kerberos enctypes enabled

Mohammad Rizwan Yusuf • 5 years ago

61577c8

Tests for backup-restore when pkg required is missing

Kaleemullah Siddiqui • 5 years ago

3ced553

ipatests: SSSD should fetch external groups without any limit.

Anuja More • 5 years ago

d4b8081

Don't fully quality the FQDN in ssbrowser.html for Chrome

Rob Crittenden • 5 years ago

f356d57

ipatests: Add test for ipa-extdom-extop plugin should allow @ in group name

Anuja More • 5 years ago

985c99f

Update topology for test_integration/test_sssd.py

Anuja More • 5 years ago

2d0da2f

Azure Pipelines: re-enable nodejs:12 stream for Fedora 31+

Alexander Bokovoy • 5 years ago

4eb4849

kdb: make sure audit_as_req callback signature change is preserved

Alexander Bokovoy • 5 years ago

30b8c8b

dnsrecord: Treat empty list arguments correctly

Christian Heimes • 5 years ago

2ade60a

Remove dependency on custodia package

Christian Heimes • 5 years ago

b240b54

ipatests: Allow zero-length arguments

Stanislav Levin • 5 years ago

c35c066

ipatests: make sure ipa-client-automount reverts sssd.conf

François Cami • 5 years ago

7ae804c

ipa-client-automount: call save_domain() for each change

François Cami • 5 years ago

6332aed

ipatests: add test_trust suite to nightly runs

Sergey Orlov • 5 years ago

0ff0ab8

adtrust: print DNS records for external DNS case after role is enabled

Alexander Bokovoy • 5 years ago

936e27f

lint: Make Pylint-2.4 happy again

Stanislav Levin • 5 years ago

44a59ff

pylint: Clean up comment

Stanislav Levin • 5 years ago

6f48848

pylint: Synchronize pylint plugin to ipatests code

Stanislav Levin • 5 years ago

3460db4

pylint: Teach Pylint how to handle request.context

Stanislav Levin • 5 years ago

5939c90

ipatests: Properly kill gpg-agent

Stanislav Levin • 5 years ago

294694a

Update Azure Pipelines to use Fedora 31

Alexander Bokovoy • 5 years ago

f4e2acd

pytest: Warn about unittest/nose/xunit tests

Stanislav Levin • 5 years ago

3659b46

pytest: Migrate unittest/nose to Pytest fixtures

Stanislav Levin • 5 years ago

356f907

pytest: Migrate xunit-style setups to Pytest fixtures

Stanislav Levin • 5 years ago

87bc314

Added a test to check if ipa host-find --pkey-only does not return SSH public key

Sumedh Sidhaye • 5 years ago

2cd67d5

install/updates: move external members past schema compat update

Alexander Bokovoy • 5 years ago

14dbf04

ipatests: fix modify_sssd_conf()

Florence Blanc-Renaud • 5 years ago

8e52750

WebUI tests: Fix broken reference to parent facet in table record check

Serhii Tsymbaliuk • 5 years ago

4e1d27c

prci: Bump template version

Armando Neto • 5 years ago

5959319

WebUI tests: Fix 'Button is not displayed' exception

Serhii Tsymbaliuk • 5 years ago

664eed7

Nightly definition for ipa-healthcheck tool

sumenon • 5 years ago

7a45cd1

Tier-1 test for ipa-healthcheck tool

sumenon • 5 years ago

a6dae48

After mounting "Unspecified GSS failure" should not be in logs.

Anuja More • 5 years ago

4d7eac9

Fix legacy S4U2Proxy in DAL v8 support

Isaac Boukris • 5 years ago

0806c15

Fix DAL v8 support

Isaac Boukris • 5 years ago

99a920c

Drop support for DAL version 5.0

Robbie Harwood • 5 years ago

1963504

Support DAL version 8.0

Robbie Harwood • 5 years ago

089c47e

Handle the removal of KRB5_KDB_FLAG_ALIAS_OK

Robbie Harwood • 5 years ago

d97cfd7

Normalize test definations titles

Gaurav Talreja • 5 years ago

875769c

ipatests: add check for output contents of ipa-client-samba

Sergey Orlov • 5 years ago

577dd1e

Do not renew externally-signed CA as self-signed

Fraser Tweedale • 5 years ago

4b55136

Add tests for ipa-cacert-manage delete command

Rob Crittenden • 5 years ago

78827db

ipa-certupdate removes all CA certs from db before adding new ones

Rob Crittenden • 5 years ago

7d81a34

Add delete option to ipa-cacert-manage to remove CA certificates

Rob Crittenden • 5 years ago

37f81cc

ipatests: add test_winsyncmigrate suite to nightly runs

Sergey Orlov • 5 years ago

72e1b13

Make assert_error compatible with Python 3.6

Christian Heimes • 5 years ago

e9ed8e7

Print LDAP diagnostic messages on error

Christian Heimes • 5 years ago

4fe1f77

Fix several leaks in ipadb_find_principal

Robbie Harwood • 5 years ago

6bdd6b3

Use separate variable for client fetch in kdcpolicy

Robbie Harwood • 5 years ago

01c1b27

Make the coding style explicit

Robbie Harwood • 5 years ago

86a8d94

ipatests: fix backup and restore

Florence Blanc-Renaud • 5 years ago

1b7cf51

Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit

Rob Crittenden • 5 years ago

3d7d58d

Add xmlrpc test with input validation check for kerberos ticket policy.

Anuja More • 5 years ago

acbbc52

AD user without override receive InternalServerError with API

Florence Blanc-Renaud • 5 years ago

4db18be

Test for ipa-ca-install on replica

Jayesh • 5 years ago

e1ff95f

ipatests: expect "Dynamic Update" and "Bind update policy" in default dnszone* output

François Cami • 5 years ago

578bdce

ipaserver/plugins/dns.py: add "Dynamic Update" and "Bind update policy" to default dnszone* output

François Cami • 5 years ago

e3cff5d

Fix fedora version for xfail for sssd test

Anuja More • 5 years ago

2b19749

Test ipa-getkeytab quiet mode, encryptons

Jayesh • 5 years ago

631054a

Add integration test for otp kerberos ticket policy.

Anuja More • 5 years ago

27a6920

ipatests: add test for certinstall with notBefore in the future

Fraser Tweedale • 5 years ago

2531010

Test if ipactl starts services stopped by systemctl

Jayesh Garg • 5 years ago

acbd90d

Reset per-indicator Kerberos policy

Alexander Bokovoy • 5 years ago

a8b52ea

ipatests: filter_users should be applied correctly.

Anuja More • 5 years ago

71a4d57

Fix test regressions caused by certificate validation changes

Fraser Tweedale • 5 years ago

d833b5b

ipatests: assert_error: allow regexp match

Fraser Tweedale • 5 years ago

44fca09

ipatests: Skip test_sss_ssh_authorizedkeys method

Armando Neto • 5 years ago

0117342

DNS install check: Fix overlapping DNS zone from the master itself

Thomas Woerner • 5 years ago

2c2cef7

Adding auto COPR builds

Dinesh Prasanth M K • 5 years ago

21fb038

ipatests: Improve test_commands reliability

Armando Neto • 5 years ago

5431dd9

Become FreeIPA 4.8.4

Alexander Bokovoy • 5 years ago

60c12a9

ipa-cacert-manage man page: fix indentation

Florence Blanc-Renaud • 5 years ago

668a641

ipa-client-samba: map domain sid of trust domain properly for display

Alexander Bokovoy • 5 years ago

e1d11aa

ipatests: fix pr-ci templates' indentation

François Cami • 5 years ago

d7a2c71

ipatests/test_nfs.py: wait before umount

François Cami • 5 years ago

c00ec94

ipa-kdb: Remove keys if password auth is disabled

Sumit Bose • 5 years ago

aaf8fcc

Enable TestInstallMasterDNSRepeatedly in prci_definitions

Thomas Woerner • 5 years ago

71ea25c

Test repeated installation of the primary with DNS enabled and domain set

Thomas Woerner • 5 years ago

ba28073

DNS install check: allow overlapping zone to be from the master itself

Alexander Bokovoy • 5 years ago

4cf01e7

adtrust.py: mention restarting sssd when adding trust agents

François Cami • 5 years ago

62f0bd0

Fix get_trusted_domain_object_from_sid()

Christian Heimes • 5 years ago

9462e4c

Fix service ldap_disable()

Christian Heimes • 5 years ago

b39ee3e

Require idstart to be larger than UID_MAX

Christian Heimes • 5 years ago

6a95373

Check valid before/after of external certs

Christian Heimes • 5 years ago

2fc5990

Add config that maintains existing content to ipa-client-install manpage

MIZUTA Takeshi • 5 years ago

999ebc1

Fix lite-server to work with GSS_NAME

Christian Heimes • 5 years ago

9f726a2

ipatests : Login via ssh using private-key for ipa-user should work.

Anuja More • 5 years ago

fa95266

ipatests: fix TestMigrateDNSSECMaster teardown

Florence Blanc-Renaud • 5 years ago

bb8da7d

Fix logic of check_client_configuration

Christian Heimes • 5 years ago

5d847cf

Optimize user-add by caching ldap2.has_upg()

Christian Heimes • 5 years ago

0785a03

trust upgrade: ensure that host is member of adtrust agents

Florence Blanc-Renaud • 5 years ago

b21128c

travis: Remove CI integration

Armando Neto • 5 years ago

6486b1a

Don't hard-code client's TLS versions and ciphers

Christian Heimes • 5 years ago

b655586

Update Apache HTTPd for RHBZ#1775146

Christian Heimes • 5 years ago

ae9e41b

Enable TLS 1.3 support on the server

Christian Heimes • 5 years ago

f7de64c

Skip paramiko tests in FIPS mode

Christian Heimes • 5 years ago

82a4fae

FIPS: server key has different name in FIPS mode

Christian Heimes • 5 years ago

9091290

Remove FIPS noise from SSHd

Christian Heimes • 5 years ago

6ce6b53

ipatests: fix test_crlgen_manage

Florence Blanc-Renaud • 5 years ago

dd06dfc

ipatests: fix teardown

Florence Blanc-Renaud • 5 years ago

ab67e0e

ipatests: generic uninstall should call ipa server-del

Florence Blanc-Renaud • 5 years ago

c77b062

covscan: free ucs2-encoded password copy when generating NTLM hash

Alexander Bokovoy • 5 years ago

eebabb5

covscan: free encryption types in case there is an error

Alexander Bokovoy • 5 years ago

84592e3

Add test case for OTP login

Christian Heimes • 5 years ago

dfa356e

Fix otptoken_sync plugin

Christian Heimes • 5 years ago

90f2866

Become FreeIPA 4.8.3

Alexander Bokovoy • 5 years ago

11be139

CVE-2019-10195: Don't log passwords embedded in commands in calls using batch

Rob Crittenden • 5 years ago

7db2000

Make sure to have storage space for tag

Simo Sorce • 5 years ago

d2e0d94

ipatests: add check that ipa-adtrust-install generates sane smb.conf

Sergey Orlov • 5 years ago

8cbf47a

DSU: add Design for Disable Stale Users

François Cami • 5 years ago

d5be38a

Nightly definition: use right template for krbtpolicy

Florence Blanc-Renaud • 5 years ago

04cfaa1

Debian: Fix font-awesome path.

Timo Aaltonen • 5 years ago

1ca9394

Add integration test for Kerberos ticket policy

Rob Crittenden • 5 years ago

bc007ec

Add Authentication Indicator Kerberos ticket policy options

Alexander Bokovoy • 5 years ago

14ff82f

Allow presence of LDAP attribute options

Alexander Bokovoy • 5 years ago

4dbd689

WebUI: Fix notification area layout

Serhii Tsymbaliuk • 5 years ago

d26429e

Do not run trust upgrade code if master lacks Samba bindings

Alexander Bokovoy • 5 years ago

1854038

Update selinux-policy minimal requirement

Cédric Jeanneret • 5 years ago

e011906

Show group-add/remove-member-manager failures

Christian Heimes • 5 years ago

2c98d76

WebUI: Fix adding member manager for groups and host groups

Serhii Tsymbaliuk • 5 years ago

444df81

Test installation with (fake) userspace FIPS

Christian Heimes • 5 years ago

0cd2f4e

Use default ssh host key algorithms

Christian Heimes • 5 years ago

2422970

Become FreeIPA 4.8.2

Alexander Bokovoy • 5 years ago

9dfce7a

Update list of contributors

Alexander Bokovoy • 5 years ago

3674a5c

Update translations

Alexander Bokovoy • 5 years ago

0bda6f9

Prevents DNS Amplification Attack and allow to customize named

Cédric Jeanneret • 5 years ago

bbe2472

prci: bump template version

Armando Neto • 5 years ago

965ce52

ipatests: enable test_smb.py in gating.yaml

Sergey Orlov • 5 years ago

98f2f8c

ipatests: replace ad hoc backup with FileBackup helper

Sergey Orlov • 5 years ago

48a5352

ipatests: refactor FileBackup helper

Sergey Orlov • 5 years ago

11ec42a

Add tests for member management

Christian Heimes • 5 years ago

fd10eaa

Add group membership management

Christian Heimes • 5 years ago

3d54897

smartcard: make the ipa-advise script compatible with authselect/authconfig

Florence Blanc-Renaud • 5 years ago

d9d9abb

Conditionally restart certmonger after client installation

Rob Crittenden • 5 years ago

6bac58c

Add conditional restart (try-restart) capability to services

Rob Crittenden • 5 years ago

24e882f

Provide modern example enctypes in ipa-getkeytab(1)

Robbie Harwood • 5 years ago

0142a3b

Skip commented lines after substitution

Christian Heimes • 5 years ago

6ab306a

Block camellia in krbenctypes update in FIPS

Christian Heimes • 5 years ago

9023033

ipatests: in DNS zone file add A record for name server

Sergey Orlov • 5 years ago

66ff611

ipatests: strip newline character when getting name of temp file

Sergey Orlov • 5 years ago

9f93c65

Fixes debian path for IPA_CUSTODIA_HANDLER

Spencer E. Olson • 5 years ago

4248263

ipatests: add test to check that only TLS 1.2 is enabled in Apache

Sergey Orlov • 5 years ago

686b85b

Enable AES SHA 256 and 384-bit enctypes in Kerberos

Rob Crittenden • 5 years ago

e5c9c75

Fix errors found by Pylint-2.4.3

Stanislav Levin • 5 years ago

7d0fbbf

prci: increase timeout argument for test_sssd.py

Armando Neto • 5 years ago

40da0ce

Don't install a preexec_fn by default

Christian Heimes • 5 years ago

3fbd0ab

test_integration: add tests for custom CA subject DN

Fraser Tweedale • 5 years ago

5d68d04

upgrade: fix ipakra people entry 'description' attribute

Fraser Tweedale • 5 years ago

23f4e00

krainstance: set correct issuer DN in uid=ipakra entry

Fraser Tweedale • 5 years ago

09c6db7

Install language packs for tests

Stanislav Levin • 5 years ago

b3857c7

Restore running of 'test_ipaserver' tests on Azure

Stanislav Levin • 5 years ago

5754582

ipa-backup: fix python2 issue with os.mkdir

Florence Blanc-Renaud • 5 years ago

4c24d01

ipa-server-certinstall manpage: add missing options

Florence Blanc-Renaud • 5 years ago

94b4c25

ipatests: temporarily remove test_smb from gating

François Cami • 5 years ago

c73000e

ipa_client_automount.py: fix typo (idmap.conf => idmapd.conf)

François Cami • 5 years ago

8f8e450

Add test to nightly yamls.

Mohammad Rizwan Yusuf • 5 years ago

b585e58

Installation of replica against a specific server

Mohammad Rizwan Yusuf • 5 years ago

b6134e8

ipatests: fix DNS forwarders setup for AD trust tests with non-root domains

Sergey Orlov • 5 years ago

3067632

Add missing timeout option to logging statement

Rob Crittenden • 5 years ago

e10c896

Log dogtag auth timeout in install, provide hint to increase it

Rob Crittenden • 5 years ago

02ff41d

Log the replication wait timeout for debugging purposes

Rob Crittenden • 5 years ago

c61a327

Replace replication_wait_timeout with certmonger_wait_timeout

Rob Crittenden • 5 years ago

8704fb0

prci: increase timeout for jobs that required AD

Armando Neto • 5 years ago

2c7ad3c

Check file ownership and permission for dirsrv log instance

Mohammad Rizwan Yusuf • 5 years ago

940e2ef

ipatests: fix test_replica_promotion.py::TestHiddenReplicaPromotion

Florence Blanc-Renaud • 5 years ago

b24feb4

Add local helpers to handle unixid structure

Alexander Bokovoy • 5 years ago

3f98406

Fixes pylint errors introduced by version 2.4.0.

Rafael Guterres Jeffman • 5 years ago

c793c68

Removed unnecessary imports after code review.

Rafael Guterres Jeffman • 5 years ago

56b736b

Removes several pylint warnings.

Rafael Guterres Jeffman • 5 years ago

f022674

Removed unnecessary imports after code review.

Rafael Guterres Jeffman • 5 years ago

9d75f82

Removes several pylint warnings.

Rafael Guterres Jeffman • 5 years ago

07d318d

Removes rpmlint warning on freeipa.spec.

Rafael Guterres Jeffman • 5 years ago

ebb6e5d

ipatests: add XMLRPC test for user-add when UPG plugin is disabled

Florence Blanc-Renaud • 5 years ago

482ee74

ipa user_add: do not check group if UPG is disabled

Florence Blanc-Renaud • 5 years ago

624144d

Bump Dogtag min version to 10.7.3

Fraser Tweedale • 5 years ago

af5f2b8

ipa-pki-retrieve-key: request AES encryption (with fallback)

Fraser Tweedale • 5 years ago

abc28be

NSSWrappedCertDB: accept optional symmetric algorithm

Fraser Tweedale • 5 years ago

979f25c

IPASecStore: support extra key arguments

Fraser Tweedale • 5 years ago

a305f67

Don't create log files from help scripts

Christian Heimes • 5 years ago

3098b67

Disable dogtag cert publishing

Rob Crittenden • 5 years ago

f709ca9

Setup DNS for AP Docker container

Stanislav Levin • 5 years ago

7f5b826

Fixed errors newly exposed by pylint 2.4.0

Stanislav Levin • 5 years ago

a733fec

replica install: enforce --server arg

Florence Blanc-Renaud • 5 years ago

c845ef0

ipa-restore: Restore ownership and perms on 389-ds log directory

Rob Crittenden • 5 years ago

966e0b8

ipatests: ensure that backup/restore restores pkcs 11 modules config file

Florence Blanc-Renaud • 5 years ago

71c09ad

ipa-backup: backup the PKCS module config files setup by IPA

Florence Blanc-Renaud • 5 years ago

ebec637

Fix segfault in ipadb_parse_ldap_entry()

Robbie Harwood • 5 years ago

8b3d5b0

Re-add function façades removed by commit 2da9088.

Rafael Guterres Jeffman • 5 years ago

3323913

Report if a certmonger CA is missing

Rob Crittenden • 5 years ago

c4fca82

Extdom plugin should not return error (32)/'No such object'

Anuja More • 5 years ago

1b1e719

ipa-scripts: fix all ipa command line scripts to operate with -I

Alexandre Mulatinho • 5 years ago

f3814e6

Re-order tasks.restore_pkcs11_modules() to run earlier

Rob Crittenden • 5 years ago

8e87e65

Don't log host passwords when they are set/modified

Rob Crittenden • 5 years ago

f262762

ipatests: add tests for cached_auth_timeout in sssd.conf

Sergey Orlov • 5 years ago

5a1ad73

ipatests: refactoring: use library function to check if selinux is enabled

Sergey Orlov • 5 years ago

9431c64

ipatests: add new utilities for file management

Sergey Orlov • 5 years ago

a2da665

WebUI: Fix new test initialization on "HBAC Test" page

Serhii Tsymbaliuk • 5 years ago

850500c

WebUI: Fix changing category on HBAC/Sudo/etc Rule pages

Serhii Tsymbaliuk • 5 years ago

919240b

Add container environment check to replicainstall

Tibor Dudlák • 5 years ago

0b2ed9c

Hidden Replica: Add a test for Automatic CRL configuration

ndehadra • 5 years ago

f2fb220

adtrust: add default read_keys permission for TDO objects

Alexander Bokovoy • 5 years ago

b32510d

add default access control when migrating trust objects

Alexander Bokovoy • 5 years ago

0deea83

prci: increase gating tasks priority

Francisco Trivino • 5 years ago

79458ee

extdom: add extdom protocol documentation

Tomas Halman • 5 years ago

13a37fb

extdom: use sss_nss_*_timeout calls

Tomas Halman • 5 years ago

d8a6b21

extdom: plugin doesn't use timeout in blocking call

Tomas Halman • 5 years ago

9253c18

extdom: plugin doesn't allow @ in group name

Tomas Halman • 5 years ago

51723c7

WebUI: Make 'Unlock' option is available only on locked user page

Serhii Tsymbaliuk • 5 years ago

a8703cd

Fix ca_initialize_hsm_state

Christian Heimes • 5 years ago

f98c9f2

Add design document

Changmin Teng • 5 years ago

027e30d

Modify webUI to adhere to new IPA server API

Changmin Teng • 5 years ago

3e42d74

Implement user pre-authentication control with kdcpolicy plugin

Changmin Teng • 5 years ago

76d1f94

Add a skeleton kdcpolicy plugin

Robbie Harwood • 5 years ago

3a8980f

Move certauth configuration into a server krb5.conf template

Robbie Harwood • 5 years ago

80be759

Enable krb5 snippet updates on client update

Robbie Harwood • 5 years ago

b2e540c

Extend the list of supported pre-auth mechanisms in IPA server API

Changmin Teng • 5 years ago

67467f4

Add new authentication indicators in kdc.conf.template

Changmin Teng • 5 years ago

e1dad72

adtrust: avoid using timestamp in klist output

Alexander Bokovoy • 5 years ago

ed1c162

ipatests: add tests for ipa host-add with non-default maxhostnamelength

Michal Polovka • 5 years ago

4dcd112

ipatests: refactor and extend tests for IPA-Samba integration

Sergey Orlov • 5 years ago

a4839f6

ipatests: modify run_command to allow specify successful return codes

Sergey Orlov • 5 years ago

a45662a

ipatests: add utility functions related to using and managing user accounts

Sergey Orlov • 5 years ago

0b62616

ipatests: allow to pass additional options for clients installation

Sergey Orlov • 5 years ago

c14aa5d

Skip lock and fork in ipa-server-guard on unsupported ops

Rob Crittenden • 5 years ago

a6286e6

Defer initializing the API in dogtag-ipa-ca-renew-agent-submit

Rob Crittenden • 5 years ago

5c5f537

Fix NULL pointer dereference in maybe_require_preauth()

Robbie Harwood • 5 years ago

d9c2edb

Log INFO message when LDAP connection fails on startup

Robbie Harwood • 5 years ago

bb7025f

Add new env vars to pylint plugin

Christian Heimes • 5 years ago

576e2ce

Fix wrong use of identity operation

Christian Heimes • 5 years ago

4c17a9b

Enable literal-comparison linter again

Christian Heimes • 5 years ago

70302ab

config plugin: replace 'is 0' with '== 0'

Florence Blanc-Renaud • 5 years ago

129adb4

ipapython/ipachangeconf.py: change "is not 0" for "!= 0"

François Cami • 5 years ago

79b9d59

Replace %{_libdir} macro in BuildRequires

Christian Heimes • 5 years ago

5de091b

ipatests: fix topology for TestIpaNotConfigured in PR-CI nightly definitions

Michal Polovka • 5 years ago

3aca654

ipatests: fix wrong xfail in test_domain_resolution_order

Florence Blanc-Renaud • 5 years ago

11c720d

travis-ci: make dnf invocations more resilient

François Cami • 5 years ago

d1d0eb6

authconfig.py: restore user-nsswitch.conf at uninstall time

François Cami • 5 years ago

7343504

ipatests: remove xfail in TestIpaClientAutomountFileRestore

François Cami • 5 years ago

ffe9871

WebUI tests: Fix login screen loading issue

Serhii Tsymbaliuk • 5 years ago

26de310

Added testcase to check capitalization fix while running ipa user-mod

sumenon • 5 years ago

24b2d58

Use tasks to configure automount nsswitch settings

Rob Critenden • 5 years ago

2da9088

Move ipachangeconf from ipaclient.install to ipapython

Rob Critenden • 5 years ago

6e92776

ipa-client-automount: always restore nsswitch.conf at uninstall time

François Cami • 5 years ago

2f0afed

ipatests: check that ipa-client-automount restores nsswitch.conf at uninstall time

François Cami • 5 years ago

abea98a

ipatests: Test for ipa-backup with ipa not configured

Michal Polovka • 5 years ago

0010d07

Mark failing test as xfail for use of python-dns make_ds method

Alexander Bokovoy • 5 years ago

bd181e3

prci: Update box used in branch ipa-4-8

Armando Neto • 5 years ago

d7f5e7b

ipa-extdom-extop: test timed out getgrgid_r

Alexander Bokovoy • 5 years ago

0ead6f5

extdom: unify error code handling especially LDAP_NO_SUCH_OBJECT

Sumit Bose • 5 years ago

3bb7254

Store HSM token and state

Christian Heimes • 5 years ago

eb23139

Become FreeIPA 4.8.1

Alexander Bokovoy • 5 years ago

828fdc0

Nightly test definition: add missing tests

Florence Blanc-Renaud • 5 years ago

179e040

Update translation and code contributors for FreeIPA 4.8.1

Alexander Bokovoy • 5 years ago

96ac892

Switch ipa-4-8 branch to track Zanata ipa-4-8 branch

Alexander Bokovoy • 5 years ago

89f99eb

Update translations for FreeIPA 4.8 branch

Alexander Bokovoy • 5 years ago

47e2152

Add Theodor van Nahl to the Contributors.txt

Alexander Bokovoy • 5 years ago

e7762ae

Update translations for FreeIPA 4.8.1

Alexander Bokovoy • 5 years ago

9d751dc

Allow insecure binds for migration

Christian Heimes • 5 years ago

8e207fd

Don't move keys when key backup is disabled

Christian Heimes • 5 years ago

f6c2a9d

install: Add missing scripts to app_DATA.

Timo Aaltonen • 5 years ago

27586cb

Restore SELinux context for p11-kit config overrides

Alexander Bokovoy • 5 years ago

fd0386f

Update comments to explain caSubsystemCert switch

Christian Heimes • 5 years ago

b0f7e65

Change RA agent certificate profile to caSubsystemCert

Alexander Bokovoy • 5 years ago

a0996ca

Test external CA with DNS name constraints

Christian Heimes • 5 years ago

86fe710

configure.ac: don't rely on bashisms

Christian Hermann • 5 years ago

6bef867

Don't return SSH keys with ipa host-find --pkey-only

Rob Crittenden • 5 years ago

e539a29

Fix UnboundLocalError in ipa-replica-manage on errors

Theodor van Nahl • 5 years ago

3d0e3fb

azure-pipelines.yml: switch to Python 3.7

François Cami • 5 years ago

f4bbe00

travis: update container used for testing ipa-4-8 branch

Armando Neto • 5 years ago

d1457fb

Increase ntp_options test timeout

Tibor Dudlák • 5 years ago

744b820

ipatests: refactor TestNTPoptions

Tibor Dudlák • 5 years ago

708528e

ipatests: Add tests for interactive chronyd config

Tibor Dudlák • 5 years ago

1c6efcd

ipatests: Update test tasks for client to be interactive

Tibor Dudlák • 5 years ago

cbb4b65

test_nfs.py: switch to master_3repl

François Cami • 5 years ago

1ad3bf4

ipatests: rename config_replica_resolvconf_with_master_data()

François Cami • 5 years ago

0fdfce5

test_nfs.py: switch to tasks.config_replica_resolvconf_with_master_data()

François Cami • 5 years ago

68f98e2

prci_definitions: add master_3client topology

François Cami • 5 years ago

0231d87

xmlrpc test: add test for preserved > stage user

Florence Blanc-Renaud • 5 years ago

17b97ae

user-stage: transfer all attributes from preserved to stage user

Florence Blanc-Renaud • 5 years ago

317787b

ipapython/admintool.py: use SERVER_NOT_CONFIGURED

François Cami • 5 years ago

fa08e96

test_xmlrpc: fix TestAutomemberFindOrphans.test_find_orphan_automember_rules

Florence Blanc-Renaud • 5 years ago

edb1ae5

WebUI tests: Fix request timeout for test_trust

Serhii Tsymbaliuk • 5 years ago

667db0c

WebUI: Add PKINIT status field to 'Configuration' page

Serhii Tsymbaliuk • 5 years ago

a46383f

Test: Test to check whether ssh from ipa client to ipa master is successful after adding ldap_deref_threshold=0 in sssd.conf

Sumedh Sidhaye • 5 years ago

146fd91

Add PKCS#11 module name to p11helper errors

Christian Heimes • 5 years ago

04c6d83

ipa-client-samba: remove state on uninstall

François Cami • 5 years ago

551cd68

ipatests: test ipa-client-samba after --uninstall

François Cami • 5 years ago

00ba2ae

ipa-client-samba: remove and restore smb.conf only on first uninstall

François Cami • 5 years ago

256a6a8

ipatests: test multiple invocations of ipa-client-samba --uninstall

François Cami • 5 years ago

b9b9809

Test: To check ipa replica-manage del <FQDN> does not fail

Sumedh Sidhaye • 5 years ago

184b60b

Azure pipeline: report failure in prepare-build step

Florence Blanc-Renaud • 5 years ago

279bb8f

WebUI tests: Fix timeout issues for reset password tests

Serhii Tsymbaliuk • 5 years ago

6ddd3b8

dsinstance: add proflie when tracking certificate

Fraser Tweedale • 5 years ago

860b6f6

httpinstance: add pinfile when tracking certificate

Rob Crittenden • 5 years ago

46792fb

ipatests: test ipa-server-upgrade in CA-less deployment

Fraser Tweedale • 5 years ago

f8f8289

Use RENEWAL_CA_NAME and RA_AGENT_PROFILE constants

Fraser Tweedale • 5 years ago

27ea7db

cainstance: add profile to IPA RA tracking request

Fraser Tweedale • 5 years ago

4758a4a

upgrade: fix spurious certmonger re-tracking

Fraser Tweedale • 5 years ago

5194bec

upgrade: log missing/misconfigured tracking requests

Fraser Tweedale • 5 years ago

f64c369

upgrade: update KRA tracking requests

Fraser Tweedale • 5 years ago

80895dd

upgrade: always add profile to tracking requests

Fraser Tweedale • 5 years ago

1f9d1ba

dogtaginstance: avoid special cases for Server-Cert

Fraser Tweedale • 5 years ago

19f1f10

dogtag-ipa-ca-renew-agent: always use profile-based renewal

Fraser Tweedale • 5 years ago

ec5eb84

certmonger: use long options when invoking dogtag-ipa-renew-agent

Fraser Tweedale • 5 years ago

34c51ea

upgrade: add profile to Dogtag tracking requests

Fraser Tweedale • 5 years ago

6fc44bd

dogtaginstance: add profile to tracking requests

Fraser Tweedale • 5 years ago

2906449

Remove posixAccount from service_find search filter

Rob Crittenden • 5 years ago

2f9cbff

ci: add --external-ca-profile tests to gating

Fraser Tweedale • 5 years ago

011c528

ci: add --external-ca-profile tests to nightly

Fraser Tweedale • 5 years ago

740964c

Collapse --external-ca-profile tests into single class

Fraser Tweedale • 5 years ago

a627df8

Add more tests for --external-ca-profile handling

Fraser Tweedale • 5 years ago

83ed057

Fix use of incorrect variable

Fraser Tweedale • 5 years ago

71af731

install: fix --external-ca-profile option

Fraser Tweedale • 5 years ago

e632b22

move MSCSTemplate classes to ipalib

Fraser Tweedale • 5 years ago

d0d29cc

certmaprule: add negative test for altSecurityIdentities

Alexander Bokovoy • 5 years ago

2e37205

certmap rules: altSecurityIdentities should only be used for trusted domains

Alexander Bokovoy • 5 years ago

14ddf7b

Create indexes for altSecurityIdentities and ipaCertmapData attributes

Alexander Bokovoy • 5 years ago

0841d8b

Add altSecurityIdentities attribute from MS-WSPP schema definition

Alexander Bokovoy • 5 years ago

f955145

Use stage and phase attempt counters when saving test artifacts

Alexander Bokovoy • 5 years ago

800545c

Use any nodejs version instead of forcing a version before nodejs 11

Alexander Bokovoy • 5 years ago

2d348aa

Fix rpmlint errors for Rawhide

Alexander Bokovoy • 5 years ago

7d3d307

Avoid use of '/tmp' for pip operations

Stanislav Levin • 5 years ago

0ec908b

Make use of Azure Pipeline slicing

Stanislav Levin • 5 years ago

5780d6a

Simplify ipa-run-tests script

Stanislav Levin • 5 years ago

8aa3ef0

ipatests: new test for trust with partially unreachable AD topology

Sergey Orlov • 5 years ago

14407bb

upgrade: remove ipaCert and key from /etc/httpd/alias

Florence Blanc-Renaud • 5 years ago

0587718

Fix `test_webui.test_selinuxusermap`

Stanislav Levin • 5 years ago

96af539

ipatests/azure: display actual dnf repo URLs

François Cami • 5 years ago

fe8cd4f

ipatests: mark test_domain_resolution_order as expectedly failing

Sergey Orlov • 5 years ago

50d8a40

ipatests: add test for sudo with runAsUser and domain resolution order.

Sergey Orlov • 5 years ago

64a2b3f

Use nis-domainname.service on all RH platforms

Christian Heimes • 5 years ago

c2ac85a

freeipa

Source Code

Commits 14275