Commits - freeipa - Pagure.io

Check that IPA cert is added to trust store after server install

Antonio Torres • 4 hours ago

902be98

Test that IPA certs are removed on server uninstall

Antonio Torres • 4 hours ago

2dfc874

ipatests: fix expected errmsg in TestTrust::test_ipa_commands_run_as_aduser

Florence Blanc-Renaud • 6 hours ago

ba8d440

ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection

Florence Blanc-Renaud • 4 days ago

35be925

ipatests: update PR-CI templates to Fedora 33

Armando Neto • 6 days ago

d8c2032

selinux: modify policy to allow one-way trust

Florence Blanc-Renaud • 9 days ago

40b69f2

Remove invalid test case for DNS SRV priority

Rob Crittenden • 10 days ago

2fd0ee3

ipatests: add test_ipa_cert_fix to the nightly definitions

Florence Blanc-Renaud • 10 days ago

c1207c3

ipa-cert-fix: do not fail when CSR is missing from CS.cfg

Florence Blanc-Renaud • 10 days ago

8f53cc3

ipatests: add a test for ipa-cert-fix

Florence Blanc-Renaud • 10 days ago

c9e0aa3

ipatests: do not set dns_lookup to true

Sergey Orlov • 12 days ago

1164ccb

ipatests: test that no errors are reported after ipa-certupdate

Rob Crittenden • 12 days ago

42bdcfb

Don't change the CA profile when modifying request in ipa_certupdate

Rob Crittenden • 12 days ago

f2fecbd

ipatests: clear initgroups cache in clear_sssd_cache

Florence Blanc-Renaud • 12 days ago

97f6250

ipatests: Test for IPATrustControllerPrincipalCheck

Sudhir Menon • 13 days ago

2d1eff3

ipatests: ipahealthcheck remove test skipped in pytest run

Sudhir Menon • 13 days ago

5779f23

ipatests: fix expected error message in test_commands

Florence Blanc-Renaud • a month ago

0fa18ee

ipatests: fix race condition in finalizer of encrypted backup test

Alexander Bokovoy • a month ago

8437b5c

ipaplatform: add constant for systemd-run binary

Alexander Bokovoy • a month ago

0769a0b

ipa-kdb: handle dates up to 2106-02-07 06:28:16

Slava Aseev • a month ago

1f1e7db

ipa-client-install: unilaterally set dns_lookup_kdc to True

François Cami • a month ago

bff0994

ipatests: make sure dns_lookup_kdc is always true

François Cami • a month ago

1f282c2

upgrade: ensure service state is synchronized with the server state

Alexander Bokovoy • a month ago

b3a1e4d

upgrade: do not overshadow service module in upgrade_configuration

Alexander Bokovoy • a month ago

5f04374

service: handle empty list of services to update their state

Alexander Bokovoy • a month ago

921abe7

ipa-kdb: use predefined filters for a wild-card searches

Alexander Bokovoy • a month ago

44c222a

Fix spelling mistake: filen ame -> filename

Alexander Scheel • a month ago

e230299

Modified YAML files

Sudhir Menon • a month ago

7979d08

ipatests: Test for IPATrustDomainsCheck with external trust to AD

Sudhir Menon • a month ago

0b3c2b6

ipatests: add test for PKI subsystem detection

Florence Blanc-Renaud • a month ago

7d47e37

Improve PKI subsystem detection

Florence Blanc-Renaud • a month ago

af830c0

systemd: enforce en_US.UTF-8 locale in systemd units

Alexander Bokovoy • a month ago

dce8ec5

xmlrpctests: remove harcoded expiration date from test_user_plugin

Florence Blanc-Renaud • a month ago

23bf98e

ipatests: fix TestTrust::test_subordinate_suffix

Florence Blanc-Renaud • 2 months ago

c1b50a7

Move where the restore state is marked during IPA server upgrade

Rob Crittenden • 2 months ago

9ecd7c2

Require PKI 10.10+ for KRA profile and ACME support

Rob Crittenden • 2 months ago

c165901

Test that the KRA profiles can renewal its three certificates

Rob Crittenden • 2 months ago

c3c577a

Change KRA profiles in certmonger tracking so they can renew

Rob Crittenden • 2 months ago

69adf81

ipa-client-install manpage: add ipa.p11-kit to list of files created

Antonio Torres Moríñigo • 2 months ago

5d9bc89

ad trust: accept subordinate domains of the forest trust root

Alexander Bokovoy • 2 months ago

6b224e5

ipatests: support subordinate upn suffixes

Sudhir Menon • 2 months ago

d5cca83

Fix krbtpolicy tests

Robbie Harwood • 2 months ago

93abf9c

ipatests: Fix the test name for krbtpolicy

Florence Blanc-Renaud • 2 months ago

e9d6483

ipatests: Tests for ipahealthcheck.ds.nss_ssl

Sudhir Menon • 2 months ago

77391da

util: Fix client-only build

Alexander Bokovoy • 2 months ago

af71b39

ipatests: Test that ipa-certupdate can run without credentials

Rob Crittenden • 2 months ago

449df02

Use host keytab to obtain credentials needed for ipa-certupdate

Rob Crittenden • 2 months ago

1e541a6

WebUI tests: Add simple test to check topology graph page is available

Serhii Tsymbaliuk • 2 months ago

7b807a5

WebUI: Fix topology graph navigation crash

Serhii Tsymbaliuk • 2 months ago

7e87738

ipa-kdb: implement AS-REQ lifetime jitter

Robbie Harwood • 2 months ago

78a7ab0

Update kdcpolicy design doc for jitter implementation

Robbie Harwood • 2 months ago

4981c45

ipatests: Collect EPN log for debugging

Stanislav Levin • 2 months ago

461b463

EPN: Allow authentication by SMTP client's certificate

Stanislav Levin • 2 months ago

058d51f

EPN: Enable certificate validation and hostname checking

Stanislav Levin • 2 months ago

119ebed

test_epn: Standardize EPN configs for deduplication

Stanislav Levin • 2 months ago

3c83c98

EPN: Don't downgrade security

Stanislav Levin • 2 months ago

9b756a7

ipatests: Respect platform's openssl dir

Stanislav Levin • 2 months ago

1f0c5cc

ipatests: temporarily remove test_dnssec.py::TestInstallDNSSECFirst from gating

Florence Blanc-Renaud • 2 months ago

c694c0f

ipatests: Update PRCI Fedora 32 templates

Armando Neto • 2 months ago

2fa5f6c

dns: allow PTR records in arbitrary zones

Fraser Tweedale • 2 months ago

82a581d

ipatests: Test that password reset unlocks users too

Rob Crittenden • 2 months ago

015e226

On password reset also set krbLastAdminUnlock to unlock account

Rob Crittenden • 2 months ago

69b1a5f

Translated using Weblate (Indonesian)

Andika Triwidada • 2 months ago

70fb786

Translated using Weblate (Polish)

Piotr Drąg • 2 months ago

ab6e224

Translated using Weblate (Ukrainian)

Yuri Chornoivan • 2 months ago

87bf88b

Translated using Weblate (Spanish)

Emilio Herrera • 2 months ago

208775b

Update translation files

Weblate • 2 months ago

47a975f

Translated using Weblate (Portuguese (Brazil))

Daniel Lara Souza • 2 months ago

d42d07c

Update translation files

Weblate • 2 months ago

56c8e1c

Translated using Weblate (Ukrainian)

Yuri Chornoivan • 2 months ago

1360ab2

Update translation files

Weblate • 2 months ago

ad00a01

Translated using Weblate (Portuguese (Brazil))

Rafael Fontenelle • 2 months ago

0ab0a2e

Update translation files

Weblate • 2 months ago

0d4e073

Translated using Weblate (Turkish)

Oğuz Ersen • 2 months ago

d24df71

wgi/plugins.py: ignore empty plugin directories

Alexander Bokovoy • 2 months ago

2926246

Wrap libpwquality PKG_CHECK_MODULES in ENABLE_SERVER test

Rob Crittenden • 2 months ago

3e51d44

ipatests: IPADNSSystemRecordsCheck also checks for AAAA records

Florence Blanc-Renaud • 2 months ago

4d8403b

ipatests: ipa-healthcheck tests for DS checks

Sudhir Menon • 2 months ago

826b479

Added nsslapd-logging-hr-timestamps-enabled attribute in _SINGLE_VALUE_OVERRIDE table

Sudhir Menon • 2 months ago

a889f74

ipa-kdb: fix crash in MS-PAC cache init code

Alexander Bokovoy • 2 months ago

1648576

ipatests: Fix for test_ipahealthcheck_ds_encryption

Florence Blanc-Renaud • 2 months ago

25eb7c6

Catch EmptyResult exception in update_idranges

Rob Crittenden • 2 months ago

5e611ba

Test that ipapwpolicy objectclass is added on upgrade

Rob Crittenden • 2 months ago

dccaabb

Add ipwpwdpolicy objectclass to all policies on upgrade

Rob Crittenden • 2 months ago

c08136f

ipatests: ipa-healthcheck test for EncryptionCheck

Sudhir Menon • 2 months ago

b214d90

ipatests: ipa-healthcheck test for DS RIPluginCheck

Sudhir Menon • 2 months ago

0c6e85e

ipatests: curl outputs the cookie in stderr and not in sdtout

Florence Blanc-Renaud • 2 months ago

71f46d6

Reorder creation of the CA mapping tree and database backend

Mark Reynolds • 2 months ago

3366af6

ipatests: ipa-healthcheck test for DS BackendsCheck

Sudhir Menon • 3 months ago

d1606d2

ipatests: ipa-healthcheck fixes for tests running on RHEL

Sudhir Menon • 3 months ago

c1fcc7c

rpcserver: fallback to non-armored kinit in case of trusted domains

Alexander Bokovoy • 3 months ago

1441b99

pylint: remove unused variable

Alexander Bokovoy • 3 months ago

12de9ee

ipa-kdb: support subordinate/superior UPN suffixes

Alexander Bokovoy • 3 months ago

1f0702b

Use a state to determine if a 389-ds upgrade is in progress

Rob Crittenden • 3 months ago

ae4e549

ipatests: Add test_pwpolicy to nightly runs

Rob Crittenden • 3 months ago

48801cb

Add SELinux policy so kadmind can read the crackdb dictionary

Rob Crittenden • 3 months ago

60768b7

ipatests: add test for password policies

Rob Crittenden • 3 months ago

9627ac4

Add a raiseonerr option to ldappasswd_user_change

Rob Crittenden • 3 months ago

676979e

Pass the user to the password policy check in the kdb driver

Rob Crittenden • 3 months ago

d6a8fc2

Add a unit test for libpwquality-based password policy

Rob Crittenden • 3 months ago

cba86e8

Extend password policy to evaluate passwords using libpwpolicy

Rob Crittenden • 3 months ago

43cdcad

Require libpwolicy and configure it in the build system

Rob Crittenden • 3 months ago

734afe3

Add new pwpolicy objectclass to test_xmprpc/objectclasses.py

Rob Crittenden • 3 months ago

4dcb8d9

Extend IPA pwquality plugin to include libpwquality support

Rob Crittenden • 3 months ago

e8232dd

Add LDAP schema for new libpwquality attributes

Rob Crittenden • 3 months ago

04c34dc

Don't restart certmonger after stopping tracking in uninstall

Rob Crittenden • 3 months ago

a9aad49

ipatests: run freeipa-healthcheck on hidden replica

François Cami • 3 months ago

314bf95

ipatests: tasks: add user_del

François Cami • 3 months ago

5f280b2

ipatests: properly handle journalctl return code

Florence Blanc-Renaud • 3 months ago

8bce174

rpmspec: ensure ipa snippet for sshd is always included

Florence Blanc-Renaud • 3 months ago

74b29c1

Lookup ipa-ca record with NSS

Christian Heimes • 3 months ago

81cf1db

ipatests: kinit_as_user improvements

François Cami • 3 months ago

cd15ceb

ipatests: create_active_user improvements

François Cami • 3 months ago

cc9380f

ipatests: add get_kdcinfo

François Cami • 3 months ago

27bcd30

ipatests: add check_if_sssd_is_online

François Cami • 3 months ago

03ac127

ipatests: ipa-healthcheck test fixes running on RHEL

Sudhir Menon • 3 months ago

1a41aee

Simplify update code

Christian Heimes • 3 months ago

01b5904

Don't add 127.0.0.1 to resolv.conf twice

Christian Heimes • 3 months ago

d1c43a9

Require(post) systemd with resolved enabled on F33

Christian Heimes • 3 months ago

da301c2

Replace sudo with runuser

Christian Heimes • 3 months ago

8edf482

Verify freeipa-selinux's ipa module is loaded

Christian Heimes • 3 months ago

7d3ce22

Check ca_wrapped in ipa-custodia-check

Christian Heimes • 3 months ago

0bbd61d

configure_dns_resolver: call self.restore_context

Christian Heimes • 4 months ago

4ba71ae

Add more indices

Christian Heimes • 4 months ago

b4b834f

Use single update LDIF for indices

Christian Heimes • 4 months ago

ff3bc4e

Simplify LDAPUpdater

Christian Heimes • 4 months ago

d74bf64

Add ldap_update() helper to service class

Christian Heimes • 4 months ago

1d7b108

Also backup DNS config drop-ins

Christian Heimes • 4 months ago

2f44efc

Ensure that resolved.conf.d is accessible

Christian Heimes • 4 months ago

e9824b5

Pre-populate IP addresses for the name server upgrades

Alexander Bokovoy • 4 months ago

8f94e4a

Fix compiler warning in ipa-kdb

Christian Heimes • 4 months ago

278ab92

Fix compiler warnings in libotp

Christian Heimes • 4 months ago

d33e0c5

Fix compiler warning in ipa-pwd-extop

Christian Heimes • 4 months ago

f58b289

Get back to git snapshots after release

Alexander Bokovoy • 4 months ago

932b789

Become IPA 4.8.10

Alexander Bokovoy • 4 months ago

a44bb2e

WebUI: Fix jQuery DOM manipulation issues

Serhii Tsymbaliuk • 4 months ago

090a222

Fix nsslapd-db-lock tuning of BDB backend

Christian Heimes • 4 months ago

87e5c05

Test that ccaches are cleaned up during installation

Rob Crittenden • 4 months ago

7cfd03d

Clean up entire /run/ipa/ccaches directory not just files

Rob Crittenden • 4 months ago

ade428f

Reduce the memory requirement from 1.6 to 1.2 GB

Rob Crittenden • 4 months ago

8255bc7

Create systemd-resolved configuration on update

Christian Heimes • 4 months ago

3b3cb99

Configure systemd-resolved to use IPA's BIND

Christian Heimes • 4 months ago

c67aba2

Use new API for auto-forwarders

Christian Heimes • 4 months ago

6dc5566

Configure NetworkManager to use systemd-resolved

Christian Heimes • 4 months ago

d6827f5

Add helpers for resolve1 and nameservers

Christian Heimes • 4 months ago

489ddc6

Delay import of psutil to avoid AVC

Christian Heimes • 4 months ago

202d7da

Make git a build requirement

Christian Heimes • 4 months ago

4391706

Add ipa_pki_retrieve_key_exec() interface

Zdenek Pytela • 4 months ago

c029eb7

SELinux: do not double-define node_t and pki_tomcat_cert_t

François Cami • 4 months ago

58c3343

Require a matching server package for the selinux subpackage

Rob Crittenden • 4 months ago

80f66b7

SELinux Policy: Allow tomcat_t to read kerberos keytabs

François Cami • 4 months ago

6a31605

SELinux Policy: make interfaces for kernel modules non-optional

François Cami • 4 months ago

7ad0484

SELinux Policy: flag ipa_pki_retrieve_key_exec_t as domain_type

François Cami • 4 months ago

25cf7af

SELinux Policy: ipa_custodia_pki_tomcat_exec_t => ipa_custodia_pki_tomcat_t

François Cami • 4 months ago

0518c63

SELinux Policy: ipa_pki_retrieve_key_exec_t => ipa_pki_retrieve_key_t

François Cami • 4 months ago

310dbd6

SELinux Policy: let custodia_t map custodia_tmp_t

François Cami • 4 months ago

c126610

SELinux: Add dedicated policy for ipa-pki-retrieve-key

François Cami • 4 months ago

5a59624

ipatests: enhance TestSubCAkeyReplication

François Cami • 4 months ago

52929cb

test_smb: skip test_smb_service_s4u2self for fed31

Florence Blanc-Renaud • 4 months ago

707823a

Duplicate CA CRT: ignore expected cert

Christian Heimes • 4 months ago

d7f3928

dogtaginstance.py: add --debug to pkispawn

François Cami • 4 months ago

97c6d2d

ipatests: check that pkispawn log is not empty

François Cami • 4 months ago

d1c860e

Add krbPrincipalName pres index correctly

Christian Heimes • 4 months ago

672fe14

ipatests: Add nightly definitions for enforcing mode

Armando Neto • 4 months ago

0269827

Add index for more trust-related attributes

Rob Crittenden • 4 months ago

53a952f

ipatests: Add test for ACI attribute and permission uniqueness

Rob Crittenden • 4 months ago

a572df9

Use ACI class set_permissions() method to set permissions

Rob Crittenden • 4 months ago

939a72f

De-duplicate ACI attributes and permissions

Rob Crittenden • 4 months ago

4e5ba24

ipatests: Add tests for checking available memory

Rob Crittenden • 4 months ago

9fa534c

Require at least 1.6Gb of available RAM to install the server

Rob Crittenden • 4 months ago

1fd4440

ipatests: test that a zone name and name-from-ip will be rejected

Rob Crittenden • 4 months ago

8f19411

Don't allow both a zone name and --name-from-ip to be provided

Rob Crittenden • 4 months ago

2a0c00c

Specify memory limits as strings for docker compose

Alexander Bokovoy • 4 months ago

93fff04

Only restart DS when duplicate cacrt was found

Christian Heimes • 4 months ago

be7efc4

ipa-kdb: test kadmin.local getprincs command

Alexander Bokovoy • 4 months ago

f316d01

ipa-kdb: support getprincs request in kadmin.local

Alexander Bokovoy • 4 months ago

ec8a560

ipatests: Bump PR-CI templates

Armando Neto • 4 months ago

fe9f4a8

Set the certmonger subject with a string, not an object

Rob Crittenden • 4 months ago

2a5a2a0

ipatests: test ipa_server_certinstall with an IPA-issued cert

Rob Crittenden • 4 months ago

099ab6c

dnsforwardzone-add: support dnspython 2.0

Florence Blanc-Renaud • 4 months ago

fefaeb4

SELinux Policy: let custodia replicate keys

François Cami • 4 months ago

4382854

ipatests: Install healthcheck pkg for TestIpaHealthCheckWithADtrust

Sudhir Menon • 4 months ago

0a7fc53

dns: Make use of `resolve_address` of a current resolver instead of the global one

Stanislav Levin • 4 months ago

656aa91

dnspython: Add compatibility shim

Stanislav Levin • 4 months ago

ae8b723

tox: Don't expand symlinks

Stanislav Levin • 4 months ago

7650214

Azure: Increase verbosity for Tox task

Stanislav Levin • 4 months ago

428373f

deps: Require `nss-tools` for make's fasttest target

Stanislav Levin • 4 months ago

ee661dc

nss: Raise exception earlier on unsupported DB type

Stanislav Levin • 4 months ago

0a8997f

Azure: base: Collect both install and uninstall logs

Stanislav Levin • 4 months ago

0ff6b6e

Azure: Drop dependency on UsePythonVersion task

Stanislav Levin • 4 months ago

ae219df

Azure: Add Rawhide definitions

Stanislav Levin • 4 months ago

5d13ef9

ipatests: add missing healthcheck test in PRCI nightlies

Florence Blanc-Renaud • 5 months ago

ab6811a

ipatests: run test_ipahealthcheck.py::TestIpaHealthCheck separately

Florence Blanc-Renaud • 5 months ago

2ce880e

ipatests: simplify fixture

Sergey Orlov • 5 months ago

f3c6fb3

ipatests: refactor test for login using cifs alias principal

Sergey Orlov • 5 months ago

d560505

ipatests: Add test for is_ipa_configured

Rob Crittenden • 5 months ago

2057b33

Use is_ipa_configured from ipalib.facts

Rob Crittenden • 5 months ago

774bbb1

Fall back to old server installation detection when needed

Rob Crittenden • 5 months ago

fe783b6

cli: When parsing options require name/value pairs

Rob Crittenden • 5 months ago

dce5b1c

ipatests: Add option/arg parsing tests for the cli

Rob Crittenden • 5 months ago

6f4f7c6

ipatests: Bump PR-CI templates

Armando Neto • 5 months ago

57ea534

test_smb: make sure both smbserver and smbclient use IPA master for DNS

Alexander Bokovoy • 5 months ago

fc9840d

This is a manual backport of https://github.com/freeipa/freeipa/pull/5053/

Sumedh Sidhaye • 5 months ago

6662f5f

PEP8 fixes

Mohammad Rizwan • 5 months ago

19ec19c

ipatests: add --skip-overlap-check option to prepare_reverse_zone()

Mohammad Rizwan • 5 months ago

6b0f065

ipatests: Add PTR record for IP SAN

Mohammad Rizwan • 5 months ago

32b1242

pylint: Ignore `raise-missing-from`

Stanislav Levin • 5 months ago

ffbbc30

pylint: Ignore `super-with-arguments`

Stanislav Levin • 5 months ago

31e16f7

pylint: Fix warning W0612(unused-variable)

Stanislav Levin • 5 months ago

a283196

pylint: Teach pylint about more RRs types

Stanislav Levin • 5 months ago

8c7414a

Return to git snapshots

Alexander Bokovoy • 5 months ago

e058c4d

Become FreeIPA 4.8.9

Alexander Bokovoy • 5 months ago

c409fc6

ipa-4-8: Add new contributors

Alexander Bokovoy • 5 months ago

26d8267

ipa-4-8: update po/ipa.pot

Alexander Bokovoy • 5 months ago

2c1fb99

Add alternative email to the mailmap for myself

Alexander Bokovoy • 5 months ago

8492ba1

ipatests: Test certmonger rekey command works fine

Mohammad Rizwan • 5 months ago

9b52ba6

Increase replication changelog trimming to 30 days

Mark Reynolds • 5 months ago

14f27d2

ipatests: stop the CA during healthcheck expiration test

Rob Crittenden • 5 months ago

715ec23

Improve performance of ipa-server-guard

Rob Crittenden • 5 months ago

aac7179

spec: Move ipa-cldap plugin out to freeipa-server-trust-ad package

Stanislav Levin • 5 months ago

3084930

uninstall: Clean up no longer used flag

Stanislav Levin • 5 months ago

bba6996

uninstall: Don't fail on missing /var/lib/samba

Stanislav Levin • 5 months ago

602f3f3

IPA-EPN: Test that EPN can be install, uninstalled and re-installed

Rob Crittenden • 5 months ago

6f09f97

ipatests: remove xfail from test_dnssec

Florence Blanc-Renaud • 5 months ago

3919c9c

Issue 8456 - Add new aci's for the new replication changelog entries

Mark Reynolds • 5 months ago

c2f8c84

rpm-spec: Don't fail on missing /etc/ssh/ssh_config

Stanislav Levin • 5 months ago

dbf1d85

Modified YAML files to include healthcheck externalCA tests

sumenon • 5 months ago

4da4dd8

ipatests: Tests for ipahealthcheck tool with IPA external

sumenon • 5 months ago

8f19233

IPA-EPN: enhance input validation

François Cami • 5 months ago

2809084

ipatests: test_epn: update error messages

François Cami • 5 months ago

b426602

Added negative test case for --list-sources option

Rob Crittenden • 5 months ago

d6c4256

ipatests: CLI validation of ipa-healthcheck command

Rob Crittenden • 5 months ago

8e460c6

IPA-EPN: Fix SMTP connection error handling

François Cami • 5 months ago

53f330b

ipatests: test_epn: add test_EPN_connection_refused

François Cami • 5 months ago

3cf7fb1

ipatests: fix TestIpaHealthCheckWithoutDNS failure

Florence Blanc-Renaud • 5 months ago

c4bd1f1

IPA-EPN: Test that users without givenname and/or mail are handled

Rob Crittenden • 5 months ago

1b1dbcb

IPA-EPN: fix configuration file typo

François Cami • 5 months ago

8e810d8

IPA-EPN: Use a helper to retrieve LDAP attributes from an entry

François Cami • 5 months ago

b95817e

WebUI: Unify adapter property definition for state evaluators

Peter Keresztes Schmidt • 5 months ago

6f9c20b

WebUI: Make object_class_evaluator evaluator compatible with batch responses

Peter Keresztes Schmidt • 5 months ago

a0518f7

Treat container subplatforms like main platform

Christian Heimes • 5 months ago

508c5e5

ipatests: test_epn: test_EPN_nbdays enhancements

François Cami • 5 months ago

3b8fdd8

ipatests: tasks.py: fix ipa-epn invocation

François Cami • 5 months ago

9479a39

ipatests: Skip keyring tests on containerized platforms

Stanislav Levin • 5 months ago

50cf90f

Azure: Switch to dockerhub provider

Stanislav Levin • 5 months ago

c89718a

Tests for fake_mname parameter setup

Kaleemullah Siddiqui • 5 months ago

b93f2a7

Address legacy pylint issues in sysrestore.py

Rob Crittenden • 5 months ago

4454af4

Update check_client_configuration to use new client fact

Rob Crittenden • 5 months ago

b9e4c68

Don't use the has_files() to know if client/server is configured

Rob Crittenden • 5 months ago

cb6c48b

Create a common place to retrieve facts about an IPA installation

Rob Crittenden • 5 months ago

ee755a5

Simplify determining if IPA client configuration is complete

Rob Crittenden • 5 months ago

80a7e34

Simplify determining if an IPA server installation is complete

Rob Crittenden • 5 months ago

1a47748

ipatests: Add compatibility against python-cryptography 3.0

Stanislav Levin • 5 months ago

a55ccdb

Don't configure authselect in containers

Christian Heimes • 5 months ago

6926131

ipatests: Check permissions of /etc/ipa/ca.crt new installations

Rob Crittenden • 5 months ago

da2079c

Set mode of /etc/ipa/ca.crt to 0644 in CA-less installations

Rob Crittenden • 5 months ago

4a97145

Fix password file permission

Sergey Orlov • 5 months ago

ec2b146

ipatests: Test healthcheck revocation checker

Rob Crittenden • 5 months ago

ea288b0

pylint: Fix warning and error

Stanislav Levin • 5 months ago

e4c753d

extdom-extop: refactor tests to use unshare+chroot to override nss_files configuration

Alexander Bokovoy • 5 months ago

96aa09b

ipatests: fix test_ipahealthcheck.py::TestIpaHealthCheck

Florence Blanc-Renaud • 5 months ago

2fa03c5

Issue 8407 - Support changelog integration into main database

Mark Reynolds • 5 months ago

0a83d82

ipatests: increase test_trust timeout

Florence Blanc-Renaud • 5 months ago

55144ab

ipatests: check KDC cert permissions in CA less install

Florence Blanc-Renaud • 5 months ago

295dd42

CAless installation: set the perms on KDC cert file

Florence Blanc-Renaud • 5 months ago

81c955e

ipatests: Use healthcheck namespacing in stopped server test

Rob Crittenden • 6 months ago

e91c7bc

ipatests: lib389 is now providing healthchecks, update naming

Rob Crittenden • 6 months ago

d0cdae4

ipatests: Add healthcheck test for FileSystemSpaceCheck

Rob Crittenden • 6 months ago

81949c2

ipatests: verify that all services can be detected by healthcheck

Rob Crittenden • 6 months ago

bdd0c4a

ipatests: Test that healthcheck detects and reports expiration

Rob Crittenden • 6 months ago

40fe354

WebUI tests: Add test case to cover user ID override feature

Serhii Tsymbaliuk • 6 months ago

e35739b

WebUI: Fix error "unknown command 'idoverrideuser_add_member'"

Serhii Tsymbaliuk • 6 months ago

f6c460a

ipatests: Test cases for healthcheck File checker(s)

Rob Crittenden • 6 months ago

3d3e8a4

ipatests: test_otp: convert test_2fa_enable_single_prompt to run_ssh_cmd

François Cami • 6 months ago

b0d4db5

ipatests: ui_driver: convert run_cmd_on_ui_host to tasks.py::run_ssh_cmd

François Cami • 6 months ago

027d0bb

ipatests: test_commands: test_login_wrong_password: Paramiko=>OpenSSH

François Cami • 6 months ago

17759ec

ipatests: test_commands: test_ssh_from_controller: Paramiko=>OpenSSH

François Cami • 6 months ago

ee57dd2

ipatests: test_commands: test_ssh_from_controller: refactor

François Cami • 6 months ago

262a712

ipatests: test_user_permissions: test_selinux_user_optimized Paramiko=>OpenSSH

François Cami • 6 months ago

26e5803

ipatests: test_commands: test_ssh_key_connection: Paramiko=>OpenSSH

François Cami • 6 months ago

326ddff

tasks: add run_ssh_cmd

François Cami • 6 months ago

034526a

ipatests: fix test_authselect

Florence Blanc-Renaud • 6 months ago

4baf6b2

ipatests: remove the xfail for test_nfs.py

Florence Blanc-Renaud • 6 months ago

3eaab97

ipa-client-install: use the authselect backup during uninstall

Florence Blanc-Renaud • 6 months ago

ca880cf

ipatests: Test IPACertNSSTrust check when trust attributes is modified for specific cert

sumenon • 6 months ago

06b3300

Convert ipa-httpd-pwdreader into Python script

Christian Heimes • 6 months ago

c68d14b

Explicitly pass keytab to ipa-join

Christian Heimes • 6 months ago

305deb4

Write state dir to smb.conf

Christian Heimes • 6 months ago

c3bf50b

Add ipaplatform for Fedora and RHEL container

Christian Heimes • 6 months ago

6180778

Allow to override ipaplatform with env var

Christian Heimes • 6 months ago

90ae22b

Replace SSLCertVerificationError with CertificateError for py36

Rob Crittenden • 6 months ago

66a5a0e

ipatests: Don't turn Pytest IPA deprecation warnings into errors

Stanislav Levin • 6 months ago

66216e9

ipatests: test_commands: test_login_wrong_password: look farther in time

François Cami • 6 months ago

64ef1a8

ipatests: test_sss_ssh_authorizedkeys

François Cami • 6 months ago

cf6877a

ipatests: re-enable test_sss_ssh_authorizedkeys

François Cami • 6 months ago

59ad3ae

WebUI tests: Change navigation tests to find menu items using data-name instead of href

Serhii Tsymbaliuk • 6 months ago

a9e3e40

WebUI: Fix issue with opening links in new tab/window

Serhii Tsymbaliuk • 6 months ago

1502cb4

Add fips-mode-setup to ipaplatform.paths to determine FIPS status

Rob Crittenden • 6 months ago

cc06361

ipatests: Fix TestReplicaPromotionLevel1

Florence Blanc-Renaud • 6 months ago

3c53c70

ipatests: fix TestUnprivilegedUserPermissions

Florence Blanc-Renaud • 6 months ago

819bcac

ipatests: xfail TestIpaClientAutomountFileRestore's final test

François Cami • 6 months ago

0209053

ipatests: Test to check IPACAChainExpirationCheck when IPA cacrt is renamed

sumenon • 6 months ago

a52aa06

ipatests: Increase timeout value in test_getcert_list_profile_using_subca

sumenon • 6 months ago

7f205b8

ipatests: Test for ipa-nis-manage CLI tool.

sumenon • 6 months ago

ab36d79

Teach pylint how dnspython 2.x works

Christian Heimes • 6 months ago

abfe4bf

ipatests: test_epn: test_EPN_config_file: Package name fix

Michal Polovka • 6 months ago

8318b2b

ipatests: test_epn: Fix package installation

Michal Polovka • 6 months ago

9281133

ipatests: Tests to check profile is displayed for getcert request.

sumenon • 6 months ago

07d1b9d

Add missing SELinux rule for ipa-custodia.sock

Christian Heimes • 6 months ago

d83b760

replica: Add tests to ensure the ipaapi user is allowed access to ifp on replicas

Jeremy Frasier • 6 months ago

6de4b0f

replica: Ensure the ipaapi user is allowed to access ifp on replicas

Jeremy Frasier • 6 months ago

4b8da1b

ipatests: bump pr-ci templates

Armando Neto • 6 months ago

aa54002

ipatests: bump pr-ci templates

Armando Neto • 6 months ago

5c44e23

Populate nshardwareplatform and nsosversion during join operation

Peter Keresztes Schmidt • 6 months ago

92ef9d1

sshd template must be part of client package

Florence Blanc-Renaud • 6 months ago

668fdc6

certupdate: only add LWCA tracking requests on CA servers

Fraser Tweedale • 6 months ago

72d70fa

Specify cert_paths when calling PKIConnection

Alexander Scheel • 6 months ago

9ded9e2

Make tab completion in console more useful

Christian Heimes • 6 months ago

c21d3cf

Add __signature__ to plugins

Christian Heimes • 6 months ago

e334415

ipatests: cleanup in test_subdomain_lookup_with_certmaprule_containing_dn

Anuja More • 6 months ago

068646f

ipatests: xfail test with older versions of sssd

Anuja More • 6 months ago

460fea3

ipatests : Test to verify override_gid works with subdomain.

Anuja More • 6 months ago

cb5c094

cainstance.is_crlgen_enabled: handle missing ipa-pki-proxy.conf

Fraser Tweedale • 6 months ago

d13a33d

WebUI: Fix rendering of boolean_status_formatter

Peter Keresztes Schmidt • 6 months ago

42ad338

ipatests: remove dnf workaround from test_epn.py

François Cami • 6 months ago

2afe21b

selinux: support running ipa-custodia with PrivateTmp=yes

Alexander Bokovoy • 6 months ago

0d70add

selinux: allow oddjobd to set up ipa_helper_t context for execution

Alexander Bokovoy • 6 months ago

42dd162

ipatests: display SSSD kdcinfo in test_adtrust_install.py

François Cami • 6 months ago

c5abea2

Bump requires for selinux-policy

Florence Blanc-Renaud • 6 months ago

388e793

SELinux: Backport dirsrv_systemctl interface

Christian Heimes • 6 months ago

c72ef1e

Allow ipa-adtrust-install restart sssd and dirsrv services

Zdenek Pytela • 6 months ago

f76c56c

ipatests: increase test_caless_TestReplicaInstall timeout

François Cami • 6 months ago

766a80c

ipatests: xfail test with older versions of sssd

Anuja More • 7 months ago

022cd49

ipatests: Test that trusted AD users should not lose their AD domains.

Anuja More • 7 months ago

494838e

Define errors_by_code in ipalib.errors

Fraser Tweedale • 7 months ago

7bfe6b2

WebUI: Fix "IPA Error 3007: RequirmentError" while adding idoverrideuser association

Serhii Tsymbaliuk • 7 months ago

ffe7f7b

ipatests: bump prci templates

Armando Neto • 7 months ago

5820573

ipatests: ipa_epn: uninstall/reinstall ipa-client-epn

François Cami • 7 months ago

06accac

ipatests: check that EPN's configuration file is installed.

François Cami • 7 months ago

2648c21

man pages: fix epn.conf.5 and ipa-epn.1 formatting

François Cami • 7 months ago

3b43950

EPN: ship the configuration file.

François Cami • 7 months ago

23e2935

ipatests: fix the method adding ifp to sssd.conf

Florence Blanc-Renaud • 7 months ago

437fc60

Unify spelling of "One-Time Password" (take 2)

Florence Blanc-Renaud • 7 months ago

8c7f54d

Modified YAML to include healthcheck IPA-AD trust scenario

sumenon • 7 months ago

2e8cd60

ipatests: Tests to check ipahealthcheck tool with IPA-AD trust scenario

sumenon • 7 months ago

73df4e1

RHEL 8.3 has KRB5 1.18 with KDB 8.0

Christian Heimes • 7 months ago

7473bd1

Unify spelling of "One-Time Password"

Peter Keresztes Schmidt • 7 months ago

0320de7

WebUI: reword OTP info message displayed during PW reset

Peter Keresztes Schmidt • 7 months ago

82475aa

WebUI: move OTP to be the last field in the PW reset form

Peter Keresztes Schmidt • 7 months ago

2c3bf18

client install: fix broken sshd config

Florence Blanc-Renaud • 7 months ago

3ea611c

ipa-client-install: use sshd drop-in configuration

Florence Blanc-Renaud • 7 months ago

b317222

Configure PKI AJP Secret with 256-bit secret

Alexander Scheel • 7 months ago

1e804bf

Clarify AJP connector creation process

Alexander Scheel • 7 months ago

be48983

Use old uglifyjs on RHEL 8

Christian Heimes • 7 months ago

5cefc6d

fix iPAddress cert issuance for >1 host/service

Fraser Tweedale • 7 months ago

1285001

.mailmap: add fcami

François Cami • 7 months ago

6de941c

Build ipa-selinux package on RHEL 8

Christian Heimes • 7 months ago

351f306

baseuser: fix ipanthomedirectorydrive option name

Petr Vobornik • 7 months ago

a090b42

fix cert-find errors in CA-less deployment

Fraser Tweedale • 7 months ago

60a58ea

ipatests: bump prci templates

Armando Neto • 7 months ago

3f89bd2

Xfail test for sssd < 2.3.0

Mohammad Rizwan • 7 months ago

40804b5

ipatests: Test ipa user login with wrong password

Mohammad Rizwan • 7 months ago

34b4d9b

webui: hide user attributes for SMB services section if empty

Petr Vobornik • 7 months ago

691b3cd

Get back to git snapshots

Alexander Bokovoy • 7 months ago

7ca6129

Become FreeIPA 4.8.8

Alexander Bokovoy • 7 months ago

71b8ecd

Prevent local account takeover

Christian Heimes • 7 months ago

930f4b3

ipatests: add a test for ipa-replica-install --setup-ca --http-cert-file

Florence Blanc-Renaud • 7 months ago

0e325bd

ipa-replica-install: --setup-ca and *-cert-file are mutually exclusive

Florence Blanc-Renaud • 7 months ago

32c4df7

Move ipa-epn systemd files and run RPM hooks

Christian Heimes • 7 months ago

77fae8c

ipatests: fix the disable_dnssec_validation method

Florence Blanc-Renaud • 7 months ago

7f19fda

VERSION: back to git snapshots

Alexander Bokovoy • 7 months ago

57034ce

Become FreeIPA 4.8.7

Alexander Bokovoy • 7 months ago

9d1d354

ipa-4-8: update list of contributors

Alexander Bokovoy • 7 months ago

89d5907

ipa-4-8: Update translation files before 4.8.7 release

Alexander Bokovoy • 7 months ago

0713936

Overhaul bind upgrade process

Christian Heimes • 7 months ago

b2c3c04

Fix named.conf named_conf_include_re

Christian Heimes • 7 months ago

1d3649e

Remove named_validate_dnssec update step

Christian Heimes • 7 months ago

03abb28

More upgrade tests

Christian Heimes • 7 months ago

6ddaead

Fix named.conf update bug NAMED_DNSSEC_VALIDATION

Christian Heimes • 7 months ago

aa2f932

upgrade: avoid stopping certmonger when fixing requests

Fraser Tweedale • 7 months ago

f1564cd

httpinstance: retry request without ipa-ca.$DOMAIN dnsName on failure

Fraser Tweedale • 7 months ago

00dd80b

Auto-generated ipa-epn files to gitignore

Christian Heimes • 7 months ago

0fbd29d

IPA-EPN: Don't treat givenname differently

Rob Crittenden • 7 months ago

bf28d4c

IPA-EPN: add test to validate smtp_delay value

Rob Crittenden • 7 months ago

4124bb6

IPA-EPN: add smtp_delay to limit the velocity of e-mails sent

Rob Crittenden • 7 months ago

37a4a79

IPA-EPN: Add tests for --mail-test option

Rob Crittenden • 7 months ago

672c9f5

IPA-EPN: Add mail-test option for testing sending live email

Rob Crittenden • 7 months ago

dca3f11

IPA-EPN: test using SSL against port 465

Rob Crittenden • 7 months ago

6587edd

IPA-EPN: Add test for starttls mode

Rob Crittenden • 7 months ago

fc2b3aa

IPA-EPN: Add tests for sending real mail with auth and templates

Rob Crittenden • 7 months ago

bbe3397

IPA-EPN: Fixes to starttls mode, convert some log errors to exceptions

Rob Crittenden • 7 months ago

ca1c374

Add index for krbPasswordExpiration for EPN

Rob Crittenden • 7 months ago

ab444db

Add a jinja2 e-mail template for EPN

Rob Crittenden • 7 months ago

0869765

IPA-EPN: Test suite.

François Cami • 7 months ago

3552185

IPA-EPN: First version.

François Cami • 7 months ago

98bb4e9

ipatests: add KRB5_TRACE to kinit in test_adtrust_install.py

François Cami • 7 months ago

2032a61

tasks.py: add krb5_trace to create_active_user and kinit_as_user

François Cami • 7 months ago

01f27e2

ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset

Alexander Bokovoy • 7 months ago

ca0a62e

ipatests: test that adding Active Directory user to a role makes it an administrator

Alexander Bokovoy • 7 months ago

6b0f8f3

Web UI: allow users from trusted Active Directory forest manage IPA

Alexander Bokovoy • 7 months ago

99e613e

tests: account for ID overrides as members of groups and roles

Alexander Bokovoy • 7 months ago

5e8df37

Support adding user ID overrides as group and role members

Alexander Bokovoy • 7 months ago

8cce2bb

idviews: handle unqualified ID override lookups from Web UI

Alexander Bokovoy • 7 months ago

2ffb4fd

support using trust-related operations in the server console

Alexander Bokovoy • 7 months ago

afe9191

kdb: handle enterprise principal lookup in AS_REQ

Alexander Bokovoy • 7 months ago

6abade3

libotp: Replace NSS with OpenSSL HMAC

Christian Heimes • 7 months ago

47adde9

Add test for sssd ad trust lookup with dn in certmaprule

Sergio Oliveira Campos • 7 months ago

1f22ae5

Include named config files in backup

Christian Heimes • 7 months ago

782ee11

Split named custom config to allow changes in options stanza

Peter Keresztes Schmidt • 7 months ago

539d469

util: replace NSS usage with OpenSSL

Peter Keresztes Schmidt • 7 months ago

41a20fe

util: add unit test for pw hashing

Peter Keresztes Schmidt • 7 months ago

0fe645e

po: remove zanata config since translation was moved to weblate

Peter Keresztes Schmidt • 7 months ago

a29eec3

Handle DatabaseError in RPC-Server connect()

Christian Heimes • 7 months ago

1062caa

Allow permissions with 'self' bindruletype

Christian Heimes • 7 months ago

f2caafb

Specify min and max values for TTL of a DNS record

Peter Keresztes Schmidt • 7 months ago

ac47599

WebUI: Add units to some DNS zone and IPA config fields

Peter Keresztes Schmidt • 7 months ago

ca4cc7a

WebUI: Expose TTL of DNS records

Peter Keresztes Schmidt • 7 months ago

df8bcc9

WebUI: Refresh DNS record data correctly after mod operation

Peter Keresztes Schmidt • 7 months ago

7dad4a5

ipatests: check HTTP certificate contains ipa-ca.$DOMAIN dnsname

Fraser Tweedale • 7 months ago

8e92190

upgrade: add ipa-ca.$DOMAIN alias to HTTP certificate

Fraser Tweedale • 7 months ago

c445cef

httpinstance: add ipa-ca.$DOMAIN alias in initial request

Fraser Tweedale • 7 months ago

5275342

cert-request: allow ipa-ca.$DOMAIN dNSName for IPA servers

Fraser Tweedale • 7 months ago

4b24129

httpinstance: add fqdn and ipa-ca alias to Certmonger request

Fraser Tweedale • 7 months ago

5287358

certmonger: support dnsname as request search criterion

Fraser Tweedale • 7 months ago

b127bad

certmonger: move 'criteria' description to module docstring

Fraser Tweedale • 7 months ago

ff7d066

certmonger: avoid mutable default argument

Fraser Tweedale • 7 months ago

0e9b777

make: serialize strip-po / strip-pot

Christian Heimes • 7 months ago

8d759d3

Remove obsolete BIND named.conf options

Christian Heimes • 7 months ago

91f9461

ipatests: Test to check warning state for TomcatFileCheck in ipahealthcheck.ipa.files

sumenon • 7 months ago

a571043

Add ipa-print-pac to gitignore

Christian Heimes • 7 months ago

5aa5f67

Allow dnsrecord-add --force on clients

Christian Heimes • 7 months ago

c261a6e

WebUI: Fix invalid RPC calls when link widget has no pkey passed

Peter Keresztes Schmidt • 7 months ago

2af2373

WebUI: Use data adapter to load facet header data

Peter Keresztes Schmidt • 7 months ago

7e7d0d8

ipatests: Test for ipahealthcheck.ipa.files for TomcatFilecheck

sumenon • 7 months ago

c64075b

ipatests: Test for ipahealthcheck DogtagCertsConnectivityCheck

sumenon • 7 months ago

81f924f

WebUI: Apply jQuery patch to fix htmlPrefilter issue

Serhii Tsymbaliuk • 8 months ago

0620229

azure: do not run test_commands due to failures in low memory cases

Alexander Bokovoy • 8 months ago

5f292b2

test_smb: test S4U2Self operation by IPA service

Alexander Bokovoy • 8 months ago

eeb7004

ipa-kdb: refactor principal lookup to support S4U2Self correctly

Alexander Bokovoy • 8 months ago

601151e

ipa-kdb: cache local TGS in the driver context

Alexander Bokovoy • 8 months ago

68a0790

ipa-kdb: add primary group to list of groups in MS-PAC

Alexander Bokovoy • 8 months ago

6c844c7

ipa-kdb: Always allow services to get PAC if needed

Alexander Bokovoy • 8 months ago

741f64f

ipa-kdb: add asserted identity SIDs

Alexander Bokovoy • 8 months ago

110812b

kdb: add minimal server referrals support for enterprise principals

Alexander Bokovoy • 8 months ago

1990e39

ipa-tests: add a test to make sure MS-PAC is produced by KDC

Alexander Bokovoy • 8 months ago

ca99bf2

ipa-print-pac: acquire and print PAC record for a user

Alexander Bokovoy • 8 months ago

1a01e46

ipa-kdb: add UPN_DNS_INFO PAC structure

Alexander Bokovoy • 8 months ago

4723100

Azure: Make dnf repos consistent

Stanislav Levin • 8 months ago

7f2bfd9

ipatests: Check if user with 'User Administrator' role can delete group.

Florence Blanc-Renaud • 8 months ago

a457b79

Test for removing a subgroup

Sumedh Sidhaye • 8 months ago

c39a2e2

baseldap: de-duplicate passed attributes when checking for limits

Alexander Bokovoy • 8 months ago

363cb9f

ipatests: Test deletion of required principal throws proper error

Mohammad Rizwan Yusuf • 8 months ago

f0ef418

Display principal name while del required principal

Mohammad Rizwan Yusuf • 8 months ago

8737749

WebUI tests: Add confirmation step after changing default group in automember tests

Serhii Tsymbaliuk • 8 months ago

d8c8ba7

WebUI: Add confirmation dialog for changing default user/host group

Serhii Tsymbaliuk • 8 months ago

5d3364a

Check for freeipa-server-dns package early

Christian Heimes • 8 months ago

f16a4b0

service delegation: allow to add and remove host principals

Alexander Bokovoy • 8 months ago

c8009e1

Hard-code in_tree=True for tests

Christian Heimes • 8 months ago

834b04b

Fix detection logic for api.env.in_tree

Christian Heimes • 8 months ago

6cd2d44

Make api.env.mode consistent

Christian Heimes • 8 months ago

3234892

ipatests: Added testcase to check that ipa-adtrust-install command runs successfully with locale set as LANG=en_IN.UTF-8

sumenon • 8 months ago

c59106f

Azure: Always update apt cache

Stanislav Levin • 8 months ago

273f580

Azure: Allow chronyd to sync time

Stanislav Levin • 8 months ago

9d01875

Azure: Add custom seccomp profile

Stanislav Levin • 8 months ago

fd58bac

WebUI: use python3-rjsmin to minify JavaScript files

Alexander Bokovoy • 8 months ago

831de84

test_smb: test that we can auth as NetBIOS alias

Alexander Bokovoy • 8 months ago

77c2e42

kdb: fix memory handling in ipadb_find_principal

Alexander Bokovoy • 8 months ago

5c62fbd

kdb: initialize flags in ipadb_delete_principal()

Alexander Bokovoy • 8 months ago

4de1586

Disable password schema update on LDAP bind

Christian Heimes • 8 months ago

2765666

Use httpd 2.4 syntax for access control

Christian Heimes • 8 months ago

84d15da

Azure Pipelines: switch to Fedora 32

Alexander Bokovoy • 8 months ago

60ed4b0

Azure Pipelines: Override services known to not work in containers

Alexander Bokovoy • 8 months ago

e37b3d8

Add pytest.skip_if_container()

Alexander Bokovoy • 8 months ago

8988916

WebUI tests: fix PEP8 issues in test_webui/test_user.py

Mohammad Rizwan Yusuf • 8 months ago

b626a79

webui: check if notification area doesn't intercept menu button

Mohammad Rizwan Yusuf • 8 months ago

b68f98a

Fix make devcheck

Christian Heimes • 8 months ago

c2893b8

prci: update templates for new Fedora release

Armando Neto • 8 months ago

d758b6a

Azure: Increase memory limit

Stanislav Levin • 8 months ago

97581ec

ipatests: Collect all logs on all Unix hosts

Stanislav Levin • 8 months ago

736b8ba

ipatests: Pretty print multihost config

Stanislav Levin • 8 months ago

5da643f

ipatests: Cleanup 'collect_logs' decorator

Stanislav Levin • 8 months ago

295d207

ipatests: enable 389-ds audit log and collect audit file

Florence Blanc-Renaud • 8 months ago

7b39e5f

Make ipaplatform a regular top-level package

Christian Heimes • 8 months ago

07da5ab

ipa-advise: fallback to /usr/libexec/platform-python if python3 not found

Florence Blanc-Renaud • 8 months ago

787ce45

Reconfigure pycodestyle

Christian Heimes • 8 months ago

d80b98b

Manually reformat ipapython/version.py.in

Christian Heimes • 8 months ago

9c3d00b

Silence W601 .has_key() is deprecated

Christian Heimes • 8 months ago

d44a392

Fix E722 do not use bare 'except'

Christian Heimes • 8 months ago

45ddb4f

Fix E721 do not compare types, use 'isinstance()'

Christian Heimes • 8 months ago

7be2ffe

Fix E714 test for object identity should be 'is not'

Christian Heimes • 8 months ago

70dc448

Fix E713 test for membership should be 'not in'

Christian Heimes • 8 months ago

ef068bd

Fix E712 comparison to True / False

Christian Heimes • 8 months ago

01c1cf6

Fix E711 comparison to None

Christian Heimes • 8 months ago

c136aab

Fix E266 too many leading '#' for block comment

Christian Heimes • 8 months ago

033f8dc

Simplify pki proxy conf

Christian Heimes • 8 months ago

e3f7d9b

Make check_required_principal() case-insensitive

Christian Heimes • 8 months ago

b590a67

Update ACIs with the correct syntax

Viktor Ashirov • 8 months ago

218e655

prci_definitions: remove test_smb from ipa-4-8 gating workflow

Francisco Trivino • 8 months ago

f289771

Address issues found by new pylint 2.5.0

Christian Heimes • 8 months ago

ef2a745

Fix a syntax typo

Miro Hrončok • 8 months ago

0392dca

tox.ini: switch from W503 to W504

François Cami • 8 months ago

6681871

WebUI tests: cover membership management with UI tests

Serhii Tsymbaliuk • 9 months ago

e58ca6a

Add skip_if_platform marker

Christian Heimes • 9 months ago

c43f3a7

ipatests/test_installation: Use knownservices to map the service name.

Timo Aaltonen • 9 months ago

99f4cb0

ipatests/test_commands: Check sssd version like on test_sssd

Timo Aaltonen • 9 months ago

af94aad

Debian: Use parse_ipa_version from redhat.

Timo Aaltonen • 9 months ago

fc2e854

Debian: Use enable/disable_ldap_automount() from base

Timo Aaltonen • 9 months ago

c45d4c8

ipatests: Test for ipahealthcheck tool for IPADomainCheck.

sumenon • 9 months ago

1bec170

Test for check of HostKeyAlgorithms option in ssh_config

Kaleemullah Siddiqui • 9 months ago

ac67dc9

Define default password policy for sysaccounts

Christian Heimes • 9 months ago

e74cfcc

Use api.env.container_sysaccounts

Christian Heimes • 9 months ago

7509f42

Fix exception escape warning

Christian Heimes • 9 months ago

26a9241

Fix APIVersion.__getnewargs__

Christian Heimes • 9 months ago

f812e2c

servrole: takes_params must be a tuple

Christian Heimes • 9 months ago

1d2ec18

Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1

Serhii Tsymbaliuk • 9 months ago

46008f5

ipatests: Test for ipahealthcheck.ds.ruv check

sumenon • 9 months ago

3244e27

ipatests: Specify shell implementation

Stanislav Levin • 9 months ago

9d06a4a

ipatests: Specify Pytest XML report schema

Stanislav Levin • 9 months ago

b62f59f

ipatests: Remove no longer needed 'skip' compatibility

Stanislav Levin • 9 months ago

46518b4

ipatests: Remove no longer needed 'capture' compatibility

Stanislav Levin • 9 months ago

f97341c

ipatests: Remove no longer needed 'get_marker'

Stanislav Levin • 9 months ago

6e14cfc

ipatests: Remove deprecated yield_fixture

Stanislav Levin • 9 months ago

8c0192a

ipatests: Bump required Pytest

Stanislav Levin • 9 months ago

9d10bc8

Fix various OpenDNSSEC 2.1 issues

Christian Heimes • 9 months ago

c3f97a9

Web UI: Upgrade Dojo version 1.13.0 -> 1.16.2

Serhii Tsymbaliuk • 9 months ago

fa09cc2

ipatests: Test to check password leak in apache error log

Mohammad Rizwan Yusuf • 9 months ago

cd7dcb1

Test for healthcheck being run on replica with stopped master

Michal Polovka • 9 months ago

b6b41b3

Man pages: fix syntax issues

Florence Blanc-Renaud • 9 months ago

98045dc

Support for SUSE/openSUSE ipaplatform

Stasiek Michalski • 9 months ago

f0c6d1e

Use /run and /run/lock instead of /var

Christian Heimes • 9 months ago

d22ce3d

ipatests: increase test_webui_server timeout

François Cami • 9 months ago

589c7fd

CVE-2020-1722: prevent use of too long passwords

Alexander Bokovoy • 9 months ago

089a393

ipatests: increase test_ipahealthcheck timeout

François Cami • 9 months ago

fa395ce

ipatests: Mark firewalld commands as no-op on non-firewalld distros

Stanislav Levin • 9 months ago

d320997

Debian: write out only one CA certificate per file

Sam Morris • 9 months ago

6fcc78b

Azure: Gather coredumps

Stanislav Levin • 9 months ago

5325c72

Azure: Allow distros to install Python they want

Stanislav Levin • 9 months ago

60d6def

Perform baseline healthcheck

Rob Crittenden • 9 months ago

435e2be

ipatests: move ipa_backup to tasks

François Cami • 9 months ago

8691e5f

ipatests: mark test_trustdomain_disable test as expectedly failing

Sergey Orlov • 9 months ago

8c68b92

ipatests: add context manager for declaring part of test as xfail

Sergey Orlov • 9 months ago

fc253fe

ipatests: add utility for getting sssd version on remote host

Sergey Orlov • 9 months ago

3e81b0f

update prci definitions for test_sssd.py

Sergey Orlov • 9 months ago

edbb913

ipatests: add test for sssd behavior with disabled trustdomains

Sergey Orlov • 9 months ago

fed6ad2

Test for output being indented by default value if not stated implicitly.

Michal Polovka • 9 months ago

80fe55d

ipatests:Test if proper error thrown when AD user tries to run IPA commands

Mohammad Rizwan Yusuf • 9 months ago

90eef2f

ipa-backup: Make sure all roles are installed on the current master.

François Cami • 9 months ago

37a60b2

test_backup_and_restore: add server role verification steps

François Cami • 9 months ago

69a2b6d

ipatests: test ipa-backup with different role configurations.

François Cami • 9 months ago

00e2a48

nightly_ipa-4-8_previous.yaml: fix typo

François Cami • 9 months ago

48be293

ipatests: run all cases from test_integration/test_idviews.py in nightlies

Sergey Orlov • 9 months ago

e86558d

ipatests: explicitly save output of certutil

Sergey Orlov • 9 months ago

8e1d524

ipatests: add AD DC as a DNS forwarder before establishing trust

Sergey Orlov • 9 months ago

cc16712

ipatests: add missing classes from test_installation in nightly runs

Sergey Orlov • 9 months ago

d22d55d

ipatests: run test_integration/test_cert.py in PR-CI

Sergey Orlov • 9 months ago

b55bdd2

Test for ipahealthcheck.ipa.idns check when integrated DNS is setup

sumenon • 10 months ago

f6171fd

Allow rename of a host group

Alexander Bokovoy • 10 months ago

b4fdb83

Add 'api' and 'aci' targets to make

Alexander Bokovoy • 10 months ago

38e0268

Test to check if Certmonger tracks certs in between reboots/interruptions and while in "CA_WORKING" state

Sumedh Sidhaye • 10 months ago

77409e2

pr-ci templates: update test_fips timeouts

François Cami • 10 months ago

d847f12

Remove Fedora repository fastmirror selection

Alexander Bokovoy • 10 months ago

a4ae456

Become FreeIPA 4.8.6

Alexander Bokovoy • 10 months ago

75d04b5

ipatests: test_replica_promotion.py: test KRA on Hidden Replica

François Cami • 10 months ago

a692212

ipatests: Skip test using paramiko when FIPS is enabled

Mohammad Rizwan Yusuf • 10 months ago

45507c1

po: fix LINGUAS to use whitespace separation

Christian Heimes • 10 months ago

616ad39

Test that pwpolicy only applied on Kerberos entries

Rob Crittenden • 10 months ago

b34063e

Add ability to change a user password as the Directory Manager

Rob Crittenden • 10 months ago

840671b

Don't save password history on non-Kerberos accounts

Rob Crittenden • 10 months ago

8b7bb96

ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager

Alexander Bokovoy • 10 months ago

bcbf64b

ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN

Alexander Bokovoy • 10 months ago

5bae736

ipatests: test sysaccount password change with a password policy applied

Alexander Bokovoy • 10 months ago

313542e

ipatests: allow changing sysaccount passwords as cn=Directory Manager

Alexander Bokovoy • 10 months ago

f4dc10b

Fix indentation levels

Alexander Bokovoy • 10 months ago

c62b9e7

SELinux: apache_manage_pid_files for F30

Christian Heimes • 10 months ago

f08ced1

ipatests: always skip additional input for group-add-member --external

Alexander Bokovoy • 10 months ago

74f36e7

po: update Chinese (China) translation

Alexander Bokovoy • 10 months ago

c6adee0

po: update Ukrainian translation

Alexander Bokovoy • 10 months ago

855a36b

po: update Tajik translation timestamp

Alexander Bokovoy • 10 months ago

3d411cf

po: update Slovak translation timestamp

Alexander Bokovoy • 10 months ago

3c15e47

po: update Russian translation

Alexander Bokovoy • 10 months ago

db433fb

po: update Portuguese (Brazil) translation timestamp

Alexander Bokovoy • 10 months ago

eab195f

po: update Portuguese translation timestamp

Alexander Bokovoy • 10 months ago

31a9da8

po: update Polish translation

Alexander Bokovoy • 10 months ago

4e3867f

po: update Punjabi translation timestamp

Alexander Bokovoy • 10 months ago

e4dfb74

po: update Dutch translation timestamp

Alexander Bokovoy • 10 months ago

e794528

po: update Marathi translation timestamp

Alexander Bokovoy • 10 months ago

28a963e

po: update Kannada translation timestamp

Alexander Bokovoy • 10 months ago

89b048d

po: update Japanese translation timestamp

Alexander Bokovoy • 10 months ago

89dbf88

po: update Indonesian translation timestamp

Alexander Bokovoy • 10 months ago

124a563

po: update Hungarian translation timestamp

Alexander Bokovoy • 10 months ago

595d506

po: update Hindi translation timestamp

Alexander Bokovoy • 10 months ago

c4dd8b2

po: update French translation

Alexander Bokovoy • 10 months ago

a2ca393

po: update Basque translation timestamp

Alexander Bokovoy • 10 months ago

92fb5c5

po: update Spanish translation

Alexander Bokovoy • 10 months ago

7af52df

po: update English (United Kingdom) translation timestamp

Alexander Bokovoy • 10 months ago

37a1e92

po: update German translation

Alexander Bokovoy • 10 months ago

0d053d8

po: update Czech translation timestamp

Alexander Bokovoy • 10 months ago

c8ba436

po: update Catalan translation timestamp

Alexander Bokovoy • 10 months ago

29e3ade

po: update Bengali translation timestamp

Alexander Bokovoy • 10 months ago

16d9556

po: update ipa.pot template

Alexander Bokovoy • 10 months ago

e23ba77

Update translation infrastructure

Alexander Bokovoy • 10 months ago

831f4dd

Keep ipa.pot translation file in git for weblate

Alexander Bokovoy • 10 months ago

9ff7b4a

ipatests: provide AD admin password when trying to establish trust

Sergey Orlov • 10 months ago

814b47e

Test if schema-compat-entry-attribute is set

Mohammad Rizwan Yusuf • 10 months ago

3f3fa40

Test if schema-compat-entry-attribute is set

Mohammad Rizwan Yusuf • 10 months ago

210619a

Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1

Serhii Tsymbaliuk • 10 months ago

f1855dd

Add pytest OpenSSH transport with password

Christian Heimes • 10 months ago

42aa86f

selinux: disable ipa_custodia when installing custom policy

Vit Mojzis • 10 months ago

f99cfa1

ipatests: remove test_ordering

Sergey Orlov • 10 months ago

0e9b020

Test that ipa-healthcheck human output translates error strings

Rob Crittenden • 10 months ago

7974ac9

ipatests: wait for SSSD to become online in backup/restore tests

Florence Blanc-Renaud • 10 months ago

ebb3c22

Prevent adding IPA objects as external members of external groups

Alexander Bokovoy • 10 months ago

127b8d9

Move freeipa-selinux dependency to freeipa-common

Christian Heimes • 10 months ago

7d525ab

Integrate ipa_custodia policy

Christian Heimes • 10 months ago

04cc045

ipatests: Added testcase to check logrotate is added for healthcheck tool

sumenon • 10 months ago

7d46879

xmlrpc tests: add a test for idview-apply on a master

Florence Blanc-Renaud • 10 months ago

c37a846

idviews: prevent applying to a master

Florence Blanc-Renaud • 10 months ago

7905891

pki-proxy: Don't rely on running apache until it's configured

Stanislav Levin • 10 months ago

24c6ea3

Become FreeIPA 4.8.5

Alexander Bokovoy • 10 months ago

5f49e6d

Add new contributors to the list

Alexander Bokovoy • 10 months ago

1af9536

Add more contributor emails to the mailmap

Alexander Bokovoy • 10 months ago

b598982

Mark test to skip sssd-2.2.2

Anuja More • 10 months ago

a992263

ipatests: User and group with same name should not break reading AD user data.

Anuja More • 10 months ago

c3053e2

Allow hosts to read DNS records for IP SAN

Christian Heimes • 10 months ago

e4a611a

spec: Take the ownership over '/usr/libexec/ipa/custodia'

Stanislav Levin • 10 months ago

5df2f5d

ipa-restore: restart services at the end

François Cami • 10 months ago

8d6a609

ipatests: add test for SSSD updating expired cache items

Sergey Orlov • 10 months ago

40fd96f

ipatests: provide docstrings instead of imporperly placed comments

Sergey Orlov • 10 months ago

1d416a5

opendnssec2.1 support: move all ods tasks to specific file

Florence Blanc-Renaud • 10 months ago

799ebc8

DnsSecMaster migration: move the call to zonelist export later

Florence Blanc-Renaud • 10 months ago

598c55c

Support OpenDNSSEC 2.1: new ods-signer protocol

Florence Blanc-Renaud • 10 months ago

fc4ccfa

With opendnssec 2, read the zone list from file

Florence Blanc-Renaud • 10 months ago

6cb3b11

Remove the <Interval> from opendnssec conf

Florence Blanc-Renaud • 10 months ago

5716c3b

Support opendnssec 2.1.6

Florence Blanc-Renaud • 10 months ago

23993f5

Move execution of ipa-healthcheck to a separate function

Rob Crittenden • 10 months ago

f36b869

ipatests: check that ipa-healthcheck warns if no dna range is set

sumenon • 10 months ago

59bd2fe

Cleanup SELinux policy

Christian Heimes • 10 months ago

87e0d82

Test if getcert creates cacert file with -F option

Mohammad Rizwan Yusuf • 10 months ago

937fb1d

Move wait_for_request() method to tasks.py

Mohammad Rizwan Yusuf • 10 months ago

5d8d919

Secure AJP connector between Dogtag and Apache proxy

Alexander Bokovoy • 10 months ago

d4d8b98

Tighten permissions on PKI proxy configuration

Alexander Bokovoy • 10 months ago

1deb101

selinux policy: add the right context for org.freeipa.server.trust-enable-agent

Florence Blanc-Renaud • 10 months ago

df0df14

ipa-adtrust-install: remote command fails if ipa-server-trust-ad pkg missing

Florence Blanc-Renaud • 10 months ago

21c923c

ipatests: remove invalid parameter from sssd.conf

Sergey Orlov • 10 months ago

a169572

ipatests: use remote_sssd_config to modify sssd.conf

Sergey Orlov • 10 months ago

32584ed

ipatests: replace utility for editing sssd.conf

Sergey Orlov • 10 months ago

5ff9b6e

ipatests: update docstring to reflect changes in FileBackup.restore()

Sergey Orlov • 10 months ago

9cb8984

ipatests: fix TestSubCAkeyReplication

Florence Blanc-Renaud • 10 months ago

c444f7a

selinux: Remove obsolete memcached access

Vit Mojzis • 10 months ago

9656541

selinux: move BUILD_SELINUX_POLICY definition

Vit Mojzis • 10 months ago

bb6a5a5

Integrate SELinux policy into build system

Christian Heimes • 10 months ago

18ce203

Add freeipa-selinux subpackage

Vit Mojzis • 10 months ago

4ca1009

ipatests: add test for ipa-adtrust-install --add-agents

Florence Blanc-Renaud • 10 months ago

4afd6e5

ipa-adtrust-install: run remote configuration for new agents

Florence Blanc-Renaud • 10 months ago

5edc674

Privilege: add a helper checking if a principal has a given privilege

Florence Blanc-Renaud • 10 months ago

66154f8

ipatests: Added test when 2FA prompting configurations is set.

Anuja More • 10 months ago

dcdcbe3

Test if server installer lock Bind9 recursion

Mohammad Rizwan Yusuf • 10 months ago

3fbbd02

prci: update fedora used for testing ipa-4-8

Armando Neto • 10 months ago

c1660a4

Fix div-by-zero when svc weight is 0 for all masters in location

Rob Crittenden • 11 months ago

12d6864

Azure: Report elapsed time

Stanislav Levin • 11 months ago

8fd1eac

Azure: Rebalance tests

Stanislav Levin • 11 months ago

1fe5c04

Azure: Skip tests requiring external DNS

Stanislav Levin • 11 months ago

ec21ecc

Azure: Free Docker resources after usage

Stanislav Levin • 11 months ago

4b2cdee

Azure: Preliminary check for provided limits

Stanislav Levin • 11 months ago

4e6e0c8

Azure: Sync Gating definitions to current PR-CI

Stanislav Levin • 11 months ago

0fbdb13

pylint: Run Pylint over Azure Python scripts

Stanislav Levin • 11 months ago

3fff867

Azure: Add support for testing multi IPA environments

Stanislav Levin • 11 months ago

245a9dc

Azure: Don't collect twice systemd_journal.log

Stanislav Levin • 11 months ago

685d902

yamllint: Lint all the YAML files

Stanislav Levin • 11 months ago

2988f5f

Azure: Make it possible to configure distro-specific stuff

Stanislav Levin • 11 months ago

198cd50

Azure: Allow to run integration tests

Stanislav Levin • 11 months ago

d33b7d6

Azure: Allow SSH for Docker environments

Stanislav Levin • 11 months ago

6a6e3f2

Azure: Allow to not provide tests to be ignored

Stanislav Levin • 11 months ago

11d1453

Part2: Don't fully quality the FQDN in ssbrowser.html for Chrome

Florence Blanc-Renaud • 11 months ago

8a5bfab

ipaserver/plugins/hbacrule: Add HBAC to memberservice_hbacsvc* labels

Thomas Woerner • 11 months ago

8b5dc6a

Add certmonger wait_for_request that uses run_command

Mohammad Rizwan Yusuf • 11 months ago

84ae778

Test if certmonger reads the token in HSM

Mohammad Rizwan Yusuf • 11 months ago

eaf9e79

Test AES SHA 256 and 384 Kerberos enctypes enabled

Mohammad Rizwan Yusuf • 11 months ago

61577c8

Tests for backup-restore when pkg required is missing

Kaleemullah Siddiqui • 11 months ago

3ced553

ipatests: SSSD should fetch external groups without any limit.

Anuja More • 11 months ago

d4b8081

Don't fully quality the FQDN in ssbrowser.html for Chrome

Rob Crittenden • 11 months ago

f356d57

ipatests: Add test for ipa-extdom-extop plugin should allow @ in group name

Anuja More • 11 months ago

985c99f

Update topology for test_integration/test_sssd.py

Anuja More • 11 months ago

2d0da2f

Azure Pipelines: re-enable nodejs:12 stream for Fedora 31+

Alexander Bokovoy • 11 months ago

4eb4849

kdb: make sure audit_as_req callback signature change is preserved

Alexander Bokovoy • 11 months ago

30b8c8b

dnsrecord: Treat empty list arguments correctly

Christian Heimes • 11 months ago

2ade60a

Remove dependency on custodia package

Christian Heimes • 11 months ago

b240b54

ipatests: Allow zero-length arguments

Stanislav Levin • 11 months ago

c35c066

ipatests: make sure ipa-client-automount reverts sssd.conf

François Cami • 11 months ago

7ae804c

ipa-client-automount: call save_domain() for each change

François Cami • 11 months ago

6332aed

ipatests: add test_trust suite to nightly runs

Sergey Orlov • 11 months ago

0ff0ab8

adtrust: print DNS records for external DNS case after role is enabled

Alexander Bokovoy • 11 months ago

936e27f

lint: Make Pylint-2.4 happy again

Stanislav Levin • 11 months ago

44a59ff

pylint: Clean up comment

Stanislav Levin • 11 months ago

6f48848

pylint: Synchronize pylint plugin to ipatests code

Stanislav Levin • 11 months ago

3460db4

pylint: Teach Pylint how to handle request.context

Stanislav Levin • 11 months ago

5939c90

ipatests: Properly kill gpg-agent

Stanislav Levin • 11 months ago

294694a

Update Azure Pipelines to use Fedora 31

Alexander Bokovoy • 11 months ago

f4e2acd

pytest: Warn about unittest/nose/xunit tests

Stanislav Levin • 11 months ago

3659b46

pytest: Migrate unittest/nose to Pytest fixtures

Stanislav Levin • 11 months ago

356f907

pytest: Migrate xunit-style setups to Pytest fixtures

Stanislav Levin • 11 months ago

87bc314

Added a test to check if ipa host-find --pkey-only does not return SSH public key

Sumedh Sidhaye • 11 months ago

2cd67d5

install/updates: move external members past schema compat update

Alexander Bokovoy • 11 months ago

14dbf04

ipatests: fix modify_sssd_conf()

Florence Blanc-Renaud • 11 months ago

8e52750

WebUI tests: Fix broken reference to parent facet in table record check

Serhii Tsymbaliuk • a year ago

4e1d27c

prci: Bump template version

Armando Neto • a year ago

5959319

WebUI tests: Fix 'Button is not displayed' exception

Serhii Tsymbaliuk • a year ago

664eed7

Nightly definition for ipa-healthcheck tool

sumenon • a year ago

7a45cd1

Tier-1 test for ipa-healthcheck tool

sumenon • a year ago

a6dae48

After mounting "Unspecified GSS failure" should not be in logs.

Anuja More • a year ago

4d7eac9

Fix legacy S4U2Proxy in DAL v8 support

Isaac Boukris • a year ago

0806c15

Fix DAL v8 support

Isaac Boukris • a year ago

99a920c

Drop support for DAL version 5.0

Robbie Harwood • a year ago

1963504

Support DAL version 8.0

Robbie Harwood • a year ago

089c47e

Handle the removal of KRB5_KDB_FLAG_ALIAS_OK

Robbie Harwood • a year ago

d97cfd7

freeipa

Source Code

Commits 14153