Commits - freeipa - Pagure.io

ipa-join: initialize pointer

Florence Blanc-Renaud • a month ago

b7d9e0e

ipa-pwd-extop: fix valueset memory leak in `ipapwd_get_cur_kvno()`

Viktor Ashirov • a month ago

b969b8c

ipa-pwd-extop: fix memory leaks in `ipapwd_gen_hashes()` error path

Viktor Ashirov • a month ago

788c6b9

ipa-pwd-extop: fix password history values memory leak

Viktor Ashirov • a month ago

ef55c2e

ipa-pwd-extop: fix NT hash string memory leak

Viktor Ashirov • a month ago

8d60809

ipa-pwd-extop: fix bind DN memory leaks in pre-op handlers

Rafael Guterres Jeffman • a month ago

995e818

ipa-pwd-extop: fix memory leaks in `ipapwd_pre_add()`

Rafael Guterres Jeffman • a month ago

9f23ffa

ipa-pwd-extop: fix memory leaks of bind DN

Viktor Ashirov • a month ago

a528e0f

ipa-pwd-extop: fix memory leaks

Viktor Ashirov • a month ago

2b7d5da

topology: fix memory leaks

Viktor Ashirov • a month ago

5552793

ipa-enrollment: fix memory leaks

Viktor Ashirov • a month ago

4bbd738

ipa-extdom-extop: fix memory leaks

Viktor Ashirov • a month ago

ddc6306

ipa-range-check: fix memory leak

Viktor Ashirov • a month ago

3b5e429

ipa-sidgen: fix memory leaks

Viktor Ashirov • a month ago

da00cf4

ipa-pwd-extop: fix memory leaks

Viktor Ashirov • a month ago

01bef15

ipa-lockout: fix memory leaks

Viktor Ashirov • a month ago

da647c1

ipa-graceperiod: fix memory leaks

Viktor Ashirov • a month ago

30f2a70

ipatests: fix kdcproxy tests against AD

Julien Rische • 4 months ago

099c11e

ipatests: update the Let's Encrypt cert chain

Florence Blanc-Renaud • 6 months ago

8e726dc

ipatests: Remove xfail from test_installation::test_number_of_zones

Anuja More • 8 months ago

6037948

Add test for master key upgrade

Julien Rische • 9 months ago

e0f4b95

Use ipaplatform tasks for krb5 enctypes

Julien Rische • 9 months ago

1f51dfe

ipa-kdb: support storing multiple KVNO for the same principal

Julien Rische • 9 months ago

479606a

kdb: keep ipadb_get_connection() from succeeding with null LDAP context

Julien Rische • 10 months ago

ae37b3e

ipatests: remove azure tests

Florence Blanc-Renaud • 11 months ago

c2f9c12

Test fix for the update

Aleksandr Sharov • 11 months ago

b5b737d

Add a check into ipa-cert-fix tool to avoid updating certs if CA is close to being expired.

Aleksandr Sharov • 11 months ago

4ee6abf

ipatests: Test to check that the configured value for "nsslapd-ignore-time-skew" remains on even after a "force-sync" is done

Sudhir Menon • a year ago

a6bb2fa

Replica CA installation: ignore time skew during initial replication

Florence Blanc-Renaud • a year ago

19f22cf

ipatests: increase delays for WebUI host test

Francisco Trivino • a year ago

5669fbe

adtrust: add missing ipaAllowedOperations objectclass

Stanislav Levin • a year ago

55ced5a

ipatests: Fixes for ipa-idrange-fix testsuite

Sudhir Menon • a year ago

2be97f5

Update prci definitions for ipa-idrange-fix testsuite.

Sudhir Menon • a year ago

7120343

readthedocs: install crypto 43.0.0

Florence Blanc-Renaud • a year ago

c119f95

pylint: use setuptools 70.2.0 on ipa-4-9 branch

Florence Blanc-Renaud • 2 years ago

0b75a49

ipatests: Update ipa-adtrust-install test

Erik Belko • 2 years ago

f6645eb

Add PR-CI definitions

Aleksandr Sharov • 2 years ago

624f5d6

Add ipa-idrange-fix

asharov@redhat.com • 2 years ago

249b3ea

ipatests: Check Default PAC type is added to config

Sudhir Menon • 2 years ago

7ef9411

trust-add: handle unavailable domain

Florence Blanc-Renaud • 2 years ago

81f61f8

Remove RC4 and 3DES default encryption types on update

Julien Rische • 2 years ago

4d682a2

Unconditionally add MS-PAC to global config on update

Julien Rische • 2 years ago

4ef0d6c

ipa_sidgen: Allow sidgen_task to continue after finding issues

Thomas Woerner • 2 years ago

41c2a83

ipatests: add test for PKINIT renewal on hidden replica

Florence Blanc-Renaud • 2 years ago

ad1fbc7

PKINIT certificate: fix renewal on hidden replica

Florence Blanc-Renaud • 2 years ago

ceb9db8

ipa-otptoken-import: open the key file in binary mode

Florence Blanc-Renaud • 2 years ago

ef084d6

Add iparepltopoconf objectclass to topology permissions

Rob Crittenden • 2 years ago

16a8aa0

kdb: apply combinatorial logic for ticket flags

Julien Rische • 2 years ago

2670338

kdb: fix vulnerability in GCD rules handling

Julien Rische • 2 years ago

96fdbf9

ipa-replica-manage list-ruvs: display FQDN in the output

Florence Blanc-Renaud • 2 years ago

89f6967

console: for public errors only print a final one

Alexander Bokovoy • 2 years ago

6bfdd2e

Force python 3.10 in tox environments

Alexander Bokovoy • 2 years ago

ea93ef9

tox: allow systemd-python in tox environment

Alexander Bokovoy • 2 years ago

0e96d9f

Tox: use sitepackages

Florence Blanc-Renaud • 2 years ago

401987e

frontend: add systemd journal audit of executed API commands

Alexander Bokovoy • 2 years ago

025f446

ipalib/rpc: Reformat after moving json code around

Alexander Bokovoy • 2 years ago

1c72ab6

ipalib: move json formatter to a separate file

Alexander Bokovoy • 2 years ago

b6a5767

idviews: Use ipaAnchorUUID without DCERPC bindings for SID anchors

Thomas Woerner • 2 years ago

805fec0

Add permissions for topologysegment

Rob Crittenden • 2 years ago

dc98332

Issue 9591 - Allow get_ruv() to handle incomplete RUV elements

Mark Reynolds • 2 years ago

5ff1f59

ipatests: Update ipa-adtrust-install test

Erik Belko • 2 years ago

8a00713

ipa-crlgen-manage: manage the cert status task execution time

Rob Crittenden • 2 years ago

74791ea

webui test: Update message for admin disable

Florence Blanc-Renaud • 2 years ago

36d0933

Allow the admin user to be disabled

Rob Crittenden • 2 years ago

137814f

ap: Migrate to docker compose V2

Stanislav Levin • 2 years ago

f5d2a6f

xmlrpc tests: Create user with manager option set using user-add

Erik Belko • 2 years ago

64503a6

xmlrpc: adapt range plugin test

Florence Blanc-Renaud • 2 years ago

2fcdaf1

idrange: only issue warning to restart services for a local range

Alexander Bokovoy • 2 years ago

f28932b

ipatests: Fixes for test_ipahealthcheck_ipansschainvalidation testcases.

Sudhir Menon • 2 years ago

8e8b97a

idrange-add: add a warning because 389ds restart is required

Florence Blanc-Renaud • 2 years ago

0a08382

dcerpc: invalidate forest trust info cache when filtering out realm domains

Alexander Bokovoy • 2 years ago

656a11a

Vault: add additional fallback to RSA-OAEP wrapping algo

Rob Crittenden • 2 years ago

d7c1ba0

validate_principal: Don't try to verify that the realm is known

Rob Crittenden • 2 years ago

96a478b

rpcserver: validate Kerberos principal name before running kinit

Alexander Bokovoy • 2 years ago

b039f30

ipa-kdb: Fix double free in ipadb_reinit_mspac()

Julien Rische • 2 years ago

dd27d22

ipa-kdb: Rework ipadb_reinit_mspac()

Julien Rische • 2 years ago

7f072e3

ipatests: fix tasks.wait_for_replication method

Florence Blanc-Renaud • 2 years ago

44a7624

ipatests: Verify that hbactest will return messages

Rob Crittenden • 2 years ago

e5579fb

hbactest was not collecting or returning messages

Rob Crittenden • 2 years ago

e4c7c98

ipatests: make sure PKINIT enrollment works with a strict policy

Alexander Bokovoy • 2 years ago

e53b394

ipa-kdb: clarify user auth table mapping use of _AUTH_PASSWORD

Alexander Bokovoy • 2 years ago

16fd9fe

ipa-kdb: when applying ticket policy, do not deny PKINIT

Alexander Bokovoy • 2 years ago

d542a23

ipa-kdb: add better detection of allowed user auth type

Alexander Bokovoy • 2 years ago

1946a8b

ipd-kdb: Fix some mistakes in ipadb_check_for_bronze_bit_attack()

Julien Rische • 2 years ago

81aa6ef

kdb: PAC generator: do not fail if canonical principal is missing

Alexander Bokovoy • 2 years ago

dcb9d6e

sidgen: fix missing prototypes

Alexander Bokovoy • 2 years ago

07150b7

sidgen: ignore staged users when generating SIDs

Alexander Bokovoy • 2 years ago

b56a805

kra: set RSA-OAEP as default wrapping algo when FIPS is enabled

Francisco Trivino • 2 years ago

f2eec9e

Vault: improve vault server archival/retrieval calls error handling

Francisco Trivino • 2 years ago

dc1ab53

Vault: add support for RSA-OAEP wrapping algo

Francisco Trivino • 2 years ago

b1fb31f

ipa-kdb: Fix memory leak during PAC verification

Julien Rische • 2 years ago

bac601b

ipapython: Propagate KRB5Error exceptions on iterating ccache

Stanislav Levin • 2 years ago

beb402a

ipapython: Correct return type of krb5_free_cred_contents

Stanislav Levin • 2 years ago

2a4bad8

ipapython: Clean up krb5_error

Stanislav Levin • 2 years ago

381af47

ipa-kdb: Disable Bronze-Bit check if PAC not available

Julien Rische • 2 years ago

27b96c1

Server affinity: call ca.install() if there is a CA in the topology

Rob Crittenden • 2 years ago

b54d5c8

ipatests: wait for replica update in test_dns_locations

Masahiro Matsuya • 2 years ago

905a55a

azure pipeline: pin cryptography version to 37.0.2

Florence Blanc-Renaud • 2 years ago

fbe6056

doc/Makefile: run sphinx in serial mode

Alexander Bokovoy • 2 years ago

59e67e6

ipasam: make krbtgt TDO principal canonical

Alexander Bokovoy • 2 years ago

90eeb04

Server affinity: Don't rely just on [ca|kra]_enabled for installs

Rob Crittenden • 2 years ago

701339d

adtrustinstance: make sure NetBIOS name defaults are set properly

Alexander Bokovoy • 2 years ago

2f17319

host: update System: Manage Host Keytab permission

Alexander Bokovoy • 2 years ago

7a4a96b

ipaplatform: add opencloudos/tencentos support

zoedong • 2 years ago

2510369

Server affinity: Retain user-requested remote server

Rob Crittenden • 2 years ago

3add9ba

ipatests: fix expected output for ipahealthcheck.ipa.host

Rob Crittenden • 2 years ago

f1cfe7d

ipatests: ignore nsslapd-accesslog-logbuffering WARN in healthcheck

Rob Crittenden • 2 years ago

5afda72

Handle samba changes in samba.security.dom_sid()

Florence Blanc-Renaud • 2 years ago

5597dbd

group-add-member fails with an external member

Florence Blanc-Renaud • 2 years ago

19f575f

ipaserver/dcerpc: avoid logging stack trace in retrieve_anonymously

Rafael Guterres Jeffman • 2 years ago

8c97363

azure tests: pin netaddr version

Florence Blanc-Renaud • 2 years ago

8cf9514

ipa-kdb: Ensure Bronze-Bit check can be enabled

Julien Rische • 2 years ago

67ca47b

ipatests: disable dnssec validation in tests using dnf

Florence Blanc-Renaud • 2 years ago

e860de2

Bump release number

Antonio Torres • 2 years ago

5f194b4

ipa-kdb: Detect and block Bronze-Bit attacks

Julien Rische • 2 years ago

a847e24

Integration tests for verifying Referer header in the UI

Rob Crittenden • 2 years ago

2645172

Check the HTTP Referer header on all requests

Rob Crittenden • 2 years ago

9b1a65f

Back to git snapshots

Antonio Torres • 2 years ago

d088b0d

Become IPA 4.9.13

Antonio Torres • 2 years ago

ed1dc6f

Update list of contributors

Antonio Torres • 2 years ago

4f24bc3

Update translations to FreeIPA 4.9 state

Antonio Torres • 2 years ago

edea4a4

ipatests: Skip the test failing due to FIPS policy

Sudhir Menon • 2 years ago

21e4cb2

Allow password policy minlength to be removed like other values

Rob Crittenden • 2 years ago

d034861

Azure CI: increase memory for forced reenrollment test

Alexander Bokovoy • 2 years ago

1635cba

Increase memory usage for Azure CI upgrade test

Alexander Bokovoy • 2 years ago

274ecc1

WebUI: update favicon.ico

Viktor Ashirov • 2 years ago

af4fb52

ipatests: fix test_ipactl_scenario_check

Florence Blanc-Renaud • 2 years ago

9b41de8

ipa-kdb: Make AD-SIGNEDPATH optional with krb5 DAL 8 and older

Julien Rische • 2 years ago

d394afc

Covscan issues: Use after free

Florence Blanc-Renaud • 2 years ago

6d0c1a2

Workshop: fix broken Sphinx cross-references.

Francisco Trivino • 2 years ago

4709063

ipatests: restart ipa services after moving date

Mohammad Rizwan • 2 years ago

4fc28ed

Don't assume KRB5CCNAME is in the environment in replica install

Rob Crittenden • 2 years ago

0cf6292

Configure affinity during server installation

Rob Crittenden • 2 years ago

3af7747

doc: typo in basic_usage.md

Alexandra Nikandrova • 2 years ago

7f080c0

idp: add the ipaidpuser objectclass when needed

Florence Blanc-Renaud • 2 years ago

7e5740f

support more DateTime attributes in LDAP searches in IPA API

Alexander Bokovoy • 2 years ago

3498ac8

Remove all references to deleted indirect map from parent map

Rob Crittenden • 2 years ago

2c402c4

Fix typo in "Subordinate ID Selfservice User" role

Rafael Guterres Jeffman • 2 years ago

22db449

Installer: activate nss and pam services in sssd.conf

Florence Blanc-Renaud • 2 years ago

f38eefd

ipatests: fix test_topology

Florence Blanc-Renaud • 2 years ago

fdaad3a

ipatests: update expected webui msg for admin deletion

Florence Blanc-Renaud • 2 years ago

7d62d84

ipa-kdb: fix error handling of is_master_host()

Julien Rische • 2 years ago

b5793c8

Prevent the admin user from being deleted

Rob Crittenden • 2 years ago

f215d3f

Fix memory leak in the OTP last token plugin

Rob Crittenden • 2 years ago

9438ce9

xmlrpc tests: add a test for user plugin with non-existing idp

Florence Blanc-Renaud • 2 years ago

dbcbe9a

User plugin: improve error related to non existing idp

Florence Blanc-Renaud • 2 years ago

99aa034

ipatests: enable firewall rule for http service on acme client

Mohammad Rizwan • 2 years ago

f684687

test: add tests for descriptive error message in ipa user-add

Erik Belko • 2 years ago

4d55ee3

OTP: fix data type to avoid endianness issue

Florence Blanc-Renaud • 2 years ago

a7e1671

Differentiate location meaning between host and server

Rob Crittenden • 2 years ago

af9c89e

Integration tests: add a test to ipa-server-upgrade

Florence Blanc-Renaud • 2 years ago

93d97b5

Upgrade: fix replica agreement

Florence Blanc-Renaud • 2 years ago

d29b475

Integration test: add a test for upgrade and PKI drop-in file

Florence Blanc-Renaud • 2 years ago

356ec5c

Upgrade: add PKI drop-in file if missing

Florence Blanc-Renaud • 2 years ago

86c1426

xmlrpc tests: add test renaming user or group with setattr

Florence Blanc-Renaud • 2 years ago

a5a4800

User and groups: rename with --setattr must check format

Florence Blanc-Renaud • 2 years ago

ba30add

Use the python-cryptography parser directly in cert-find

Rob Crittenden • 2 years ago

d00fd33

Revert "cert_find: fix call with --all"

Rob Crittenden • 2 years ago

3b1dbcd

Revert "Use the OpenSSL certificate parser in cert-find"

Rob Crittenden • 2 years ago

9fe30f2

ipatests: Check that SSSD_PUBCONF_KRB5_INCLUDE_D_DIR is not included in krb5.conf

Anuja More • 2 years ago

1b51fa4

Don't allow the FQDN to match the domain on server installs

Rob Crittenden • 2 years ago

00e8ccd

webuitests: close notification which hides Add button

Florence Blanc-Renaud • 2 years ago

f599e2d

ipatest: remove xfail from test_smb

Florence Blanc-Renaud • 2 years ago

998bafe

Don't allow a group to be converted to POSIX and external

Rob Crittenden • 2 years ago

fa321b2

Replace usage of #!/usr/bin/env python3 with #!/usr/bin/python3

Rob Crittenden • 2 years ago

e6f4478

ipalib/x509.py: Add signature_algorithm_parameters

Alexander Bokovoy • 2 years ago

6a109d9

ACME tests: fix issue_and_expire_acme_cert method

Florence Blanc-Renaud • 2 years ago

7a94acc

Mention in ipa-client-install that nscd is disabled

Rob Crittenden • 2 years ago

e859b82

user or group name: explain the supported format

Florence Blanc-Renaud • 2 years ago

f42a106

Back to git snapshots

Antonio Torres • 2 years ago

d013788

Become IPA 4.9.12

Antonio Torres • 2 years ago

2f7f6dd

Update contributors list

Antonio Torres • 2 years ago

34848e0

Update translations to FreeIPA ipa-4-9 state

Antonio Torres • 2 years ago

a26b7b5

ipatests: wait for sssd-kcm to settle after date change

Mohammad Rizwan • 2 years ago

999fa19

kdb: Use krb5_pac_full_sign_compat() when available

Julien Rische • 2 years ago

922d13a

Return the <Message> value cert-find failures from the CA

Rob Crittenden • 2 years ago

b9b268e

ipatests: commands: Wait for the SSSD to become available

Michal Polovka • 2 years ago

7b6d7b6

idview: improve performance of idview-show

Florence Blanc-Renaud • 2 years ago

ec7d770

ipatests: add remove automember condition tests

mbhalodi • 2 years ago

2c3e799

Nightly test: add +15min for test_ipahealthcheck

Florence Blanc-Renaud • 2 years ago

3ec7fa6

Change doc theme to 'book'

Alexander Bokovoy • 2 years ago

6404892

ipatests: ipa-adtrust-install command test scenarios

Sudhir Menon • 2 years ago

8c52050

Fix "no entry" condition when searching PAC info

Rafael Guterres Jeffman • 2 years ago

9aca7ce

cert_find: fix call with --all

Florence Blanc-Renaud • 2 years ago

59cab23

Drop duplicate includedir from krb5.conf

Timo Aaltonen • 2 years ago

fe22e7d

Use the OpenSSL certificate parser in cert-find

Rob Crittenden • 2 years ago

f54a55a

Enforce sizelimit in cert-find

Rob Crittenden • 2 years ago

6e04c49

ipatest: loginscreen: do not use hardcoded password

Michal Polovka • 2 years ago

2eca13e

Speed up installer by restarting DS after DNA plugin

Christian Heimes • 2 years ago

27e9181

ipatests: Test for sequence processing failures with server context

mbhalodi • 2 years ago

6e5c6b1

Extend API documentation

Antonio Torres • 2 years ago

f3d5e11

ipatests: add missing automember-cli tests

mbhalodi • 2 years ago

34c1574

doc: allow notes on Param API Reference pages

Antonio Torres • 2 years ago

f2bb386

ipatests: increase timeout for test_trust

Florence Blanc-Renaud • 2 years ago

a7147fa

fastlint: Correct concatenation of file lists

Stanislav Levin • 2 years ago

d8418ce

ipalib/x509: Implement abstract method Certificate.verify_directly_issued_by

Alexander Bokovoy • 2 years ago

e43b108

ipaserver: deepcopy objectclasses list from IPA config

Antonio Torres • 2 years ago

62fe608

ipatests: Test that non admin user can search hbac rule.

Anuja More • 2 years ago

3599a4a

Fix tox in Azure CI

Alexander Bokovoy • 2 years ago

53ac817

Use system-wide chromium for webui tests

Alexander Bokovoy • 2 years ago

3593a79

Don't fail if optional RPM macros file is missing

Alexander Bokovoy • 2 years ago

801308a

ipatests: Test MemberManager ACI to allow managers from a specified group after upgrade scenario

Erik Belko • 2 years ago

2fb6f02

ipatests: Test ipa-advise is not failing with error.

Anuja More • 2 years ago

b2f197d

external-idp: change idp server name to reference name

Thorsten Scherf • 3 years ago

b9c6ea6

dns: Fix support for dnspython 1.1x

Stanislav Levin • 3 years ago

c57507f

Update 'Auth indicators' doc string

Carla Martinez • 3 years ago

42744eb

Don't block when kinit_pkinit() fails

Christian Heimes • 3 years ago

03f544e

ipatests: remove wrong job definition TestACMEPrune

Florence Blanc-Renaud • 3 years ago

bdd1152

ipatests: increase timeout for test_acme

Florence Blanc-Renaud • 3 years ago

67131ae

ipatests: WebUI - ensure that ipa automember-rebuild prints a warning

mbhalodi • 3 years ago

ff50fe5

PRCI: update test_trust.py for nightly pipelines.

Anuja More • 3 years ago

9577e0b

ipatests: ensure that ipa automember-rebuild prints a warning

mbhalodi • 3 years ago

d035dc7

doc: Use case examples for PR-CI checker tool

David Pascual • 3 years ago

faa4853

tests: webui: Update vendored qunit

Stanislav Levin • 3 years ago

9b15dca

AP: webui: List installed nodejs packages

Stanislav Levin • 3 years ago

1ec521d

tests: webui: Load qunit only once

Stanislav Levin • 3 years ago

958a395

tests: webui: Allow file access from files in tests

Stanislav Levin • 3 years ago

a9f2904

Add test for SSH with GSSAPI auth.

Anuja More • 3 years ago

ed1959d

ipa-kdb: PAC consistency checker needs to handle child domains as well

Alexander Bokovoy • 3 years ago

2d7cc19

Wipe the ipa-ca DNS record when updating system records

Rob Crittenden • 3 years ago

b938728

API doc: add usage guides for groups, HBAC and sudo rules

Antonio Torres • 3 years ago

e96d91c

Check that CADogtagCertsConfigCheck can handle cert renewal

Chris Kelley • 3 years ago

bed21af

API doc: add note about ipa show-mappings to usage guide

Antonio Torres • 3 years ago

a6592c6

ipatests: fix (prci_checker) duplicated check & error return code

David Pascual • 3 years ago

398e091

automember-rebuild: add a notice about high CPU usage

Florence Blanc-Renaud • 3 years ago

2deaaa7

With the commit #99a74d7, 389-ds changed the message returned in ipa-healthcheck.

Sumedh Sidhaye • 3 years ago

e8ef2c2

tests: Configure DNSResolver as platform agnostic resolver

Stanislav Levin • 3 years ago

e6f1b36

tests: Add new ipa-ca error messages to IPADNSSystemRecordsCheck

Rob Crittenden • 3 years ago

f28cb79

tests: Add ipa_ca_name checking to DNS system records

Rob Crittenden • 3 years ago

0231ea8

spec: Drop no longer used build dependency on paste

Stanislav Levin • 3 years ago

ebd4096

ipatests: healthcheck: Handle missing fips-mode-setup

Stanislav Levin • 3 years ago

8d2c8fc

trust-add: handle missing msSFU30MaxGidNumber

Florence Blanc-Renaud • 3 years ago

703ab8c

API doc: validate generated reference

Antonio Torres • 3 years ago

34a06d7

Tests: force key type in ACME tests

Florence Blanc-Renaud • 3 years ago

16c37cf

server install: remove error log about missing bkup file

Florence Blanc-Renaud • 3 years ago

6f50b00

ipatests: mark test_smb as xfail

Florence Blanc-Renaud • 3 years ago

1bdd814

ipatests: update the xfail annotation for test_number_of_zones

Florence Blanc-Renaud • 3 years ago

cc9e568

Spec file: bump krb5_kdb_version on rawhide

Florence Blanc-Renaud • 3 years ago

f2b4d01

FIPS setup: fix typo filtering camellia encryption

Florence Blanc-Renaud • 3 years ago

f2a337c

cert utilities: MAC verification is incompatible with FIPS mode

Florence Blanc-Renaud • 3 years ago

42381eb

ipatests: update the fake fips mode expected message

Florence Blanc-Renaud • 3 years ago

1d01692

Fixes: ipa-otpd@.service: deprecated syslog setting

Sudhir Menon • 3 years ago

05bba99

Spec file: ipa-client depends on krb5-pkinit-openssl

Florence Blanc-Renaud • 3 years ago

d7c5fe5

API doc: add basic user management guide

Antonio Torres • 3 years ago

84c4449

webui tests: fix assertion in test_subid.py

Florence Blanc-Renaud • 3 years ago

3801d0c

updates: fix memberManager ACI to allow managers from a specified group

Alexander Bokovoy • 3 years ago

651e28c

ipa-certupdate: Update client certs before KDC/HTTPd restart

Christian Heimes • 3 years ago

f3052c1

PRCI: update memory reqs for each topology

Florence Blanc-Renaud • 3 years ago

4f69f4c

Back to git snapshots

Antonio Torres • 3 years ago

1b7fccd

Become IPA 4.9.11

Antonio Torres • 3 years ago

2a9919a

Update list of contributors

Antonio Torres • 3 years ago

4f3dd05

Update translations to FreeIPA ipa-4-9 state

Antonio Torres • 3 years ago

59bfe9d

API doc: adapt the generated doc for 4.9 branch

Florence Blanc-Renaud • 3 years ago

e725e99

API reference: update dnszone_add generated doc

Florence Blanc-Renaud • 3 years ago

0caa26d

API reference: update vault doc

Florence Blanc-Renaud • 3 years ago

4d6eabd

ipa-kdb: for delegation check, use different error codes before and after krb5 1.20

Alexander Bokovoy • 3 years ago

e12aa8b

ipa-kdb: fix comment to make sure we talk about krb5 1.20 or later

Alexander Bokovoy • 3 years ago

a35cac3

ipa-kdb: fix PAC requester check

Alexander Bokovoy • 3 years ago

7e50464

ipa-kdb: handle empty S4U proxy in allowed_to_delegate

Alexander Bokovoy • 3 years ago

4755bd4

ipa-kdb: handle cross-realm TGT entries when generating PAC

Alexander Bokovoy • 3 years ago

0dd3315

ipa-kdb: add krb5 1.20 support

Alexander Bokovoy • 3 years ago

a0d8403

ipa-kdb: refactor MS-PAC processing to prepare for krb5 1.20

Alexander Bokovoy • 3 years ago

9efa8fe

Generate CNAMEs for TXT+URI location krb records

Julien Rische • 3 years ago

a0652f5

Vault: fix interoperability issues with older RHEL systems

Francisco Trivino • 3 years ago

c643e56

ipatests: update vagrant boxes

Florence Blanc-Renaud • 3 years ago

ca486d1

docs: add security section to idp

Pavel Březina • 3 years ago

170155b

Add PKINIT support to ipa-client-install

Christian Heimes • 3 years ago

80da53e

Add basic API usage guide

Antonio Torres • 3 years ago

76aa6d2

doc: generate API Reference

Antonio Torres • 3 years ago

beaab47

Pass the curl write callback by name instead of address

Rob Crittenden • 3 years ago

9d184a2

webui: Add name to 'Certificates' table

Carla Martinez • 3 years ago

76c8b47

ipatests: Test newly added certificate lable

Mohammad Rizwan • 3 years ago

c0b438b

webui: Add label name to 'Certificates' section

Carla Martinez • 3 years ago

98eda97

ipatests: Add test for grace login limit

Erik Belko • 3 years ago

fd92757

ipatests: test for root using admin password in webUI

Erik Belko • 3 years ago

80b18b0

Spec file: bump the selinux-policy version

Florence Blanc-Renaud • 3 years ago

58ad9f2

webui tests: fix test_subid suite

Florence Blanc-Renaud • 3 years ago

58e12bd

ipatests: WebUI: do not allow subid range deletion

Sudhir Menon • 3 years ago

58b0267

ipatests : Test query to AD specific attributes is successful.

Anuja More • 3 years ago

21cb86a

Exclude installed policy module file from RPM verification

Nikola Knazekova • 3 years ago

c977cef

ipaclient: do not set TLS CA options in ldap.conf anymore

Alexander Bokovoy • 3 years ago

d9a56b5

ipa-kdb: do not fail if certmap rule cannot be added

Sumit Bose • 3 years ago

e51a0c9

ipapython: Support openldap 2.6

Stanislav Levin • 3 years ago

7e93f46

extdom: avoid sss_nss_getorigby*() calls when get*_r_wrapper() returns object from a wrong domain (performance optimization)

Alexey Tikhonov • 3 years ago

a07cece

extdom: make sure result doesn't miss domain part

Alexey Tikhonov • 3 years ago

3de618f

extdom: internal functions should be static

Alexey Tikhonov • 3 years ago

6663576

ipa man page: format the EXAMPLES section

Florence Blanc-Renaud • 3 years ago

64ef2b9

Translated using Weblate (Korean)

김인수 • 3 years ago

b8c39cc

Translated using Weblate (Korean)

김인수 • 3 years ago

2c55564

Translated using Weblate (Korean)

김인수 • 3 years ago

53e4e72

Translated using Weblate (Korean)

김인수 • 3 years ago

29dba19

Translated using Weblate (Korean)

김인수 • 3 years ago

4258941

Translated using Weblate (Finnish)

Jan Kuparinen • 3 years ago

841e0c6

Translated using Weblate (Korean)

김인수 • 3 years ago

7f9588f

Translated using Weblate (Ukrainian)

Yuri Chornoivan • 3 years ago

61dea74

Translated using Weblate (Korean)

김인수 • 3 years ago

c07e0ec

Translated using Weblate (Korean)

김인수 • 3 years ago

e6e638a

Translated using Weblate (Finnish)

Jan Kuparinen • 3 years ago

4d92e67

Translated using Weblate (Finnish)

Jan Kuparinen • 3 years ago

e6accc7

Translated using Weblate (Korean)

김인수 • 3 years ago

994c435

Translated using Weblate (Korean)

김인수 • 3 years ago

fd53880

Translated using Weblate (Korean)

김인수 • 3 years ago

aef749b

Translated using Weblate (Korean)

김인수 • 3 years ago

64b2c0e

Translated using Weblate (Korean)

김인수 • 3 years ago

a24adea

Translated using Weblate (Korean)

김인수 • 3 years ago

b70041d

Translated using Weblate (Finnish)

Jan Kuparinen • 3 years ago

20bcd69

Translated using Weblate (Finnish)

Ricky Tigg • 3 years ago

91b63fc

Translated using Weblate (Finnish)

Jan Kuparinen • 3 years ago

49a4124

Translated using Weblate (Korean)

김인수 • 3 years ago

246604e

Translated using Weblate (Finnish)

Jan Kuparinen • 3 years ago

20269ac

Translated using Weblate (Finnish)

Jan Kuparinen • 3 years ago

1853d93

Translated using Weblate (Finnish)

Jan Kuparinen • 3 years ago

7037e53

Translated using Weblate (Finnish)

Jan Kuparinen • 3 years ago

9df1672

Translated using Weblate (Korean)

simmon • 3 years ago

07a1cc5

Translated using Weblate (Korean)

simmon • 3 years ago

e98e217

Translated using Weblate (Korean)

simmon • 3 years ago

fe60d1f

Translated using Weblate (Finnish)

Ricky Tigg • 3 years ago

e6451fe

Translated using Weblate (Finnish)

Jan Kuparinen • 3 years ago

eb1a1f3

Translated using Weblate (Korean)

simmon • 3 years ago

5bd77e6

Translated using Weblate (Finnish)

Ricky Tigg • 3 years ago

3392f31

Translated using Weblate (Korean)

simmon • 3 years ago

2c0924f

Translated using Weblate (Korean)

simmon • 3 years ago

067cae5

Translated using Weblate (Finnish)

Jan Kuparinen • 3 years ago

216cced

Translated using Weblate (Korean)

simmon • 3 years ago

aa00e7c

Translated using Weblate (Finnish)

Jan Kuparinen • 3 years ago

e98691b

Translated using Weblate (Finnish)

Jan Kuparinen • 3 years ago

4d306ee

Translated using Weblate (Korean)

simmon • 3 years ago

b5d6616

Translated using Weblate (Korean)

simmon • 3 years ago

7ca1bef

Translated using Weblate (Finnish)

Ricky Tigg • 3 years ago

a8a2b2c

Translated using Weblate (Korean)

simmon • 3 years ago

b2cf29a

Translated using Weblate (Korean)

simmon • 3 years ago

8b3ceac

Translated using Weblate (Korean)

simmon • 3 years ago

7d12b30

Translated using Weblate (Korean)

simmon • 3 years ago

20006cc

Translated using Weblate (Korean)

simmon • 3 years ago

9e2f7d0

Translated using Weblate (Korean)

simmon • 3 years ago

cf9f35e

Translated using Weblate (Korean)

simmon • 3 years ago

d6ff8af

Translated using Weblate (Korean)

simmon • 3 years ago

1e65336

Translated using Weblate (Korean)

simmon • 3 years ago

548afe9

Translated using Weblate (Korean)

simmon • 3 years ago

715043d

Translated using Weblate (Korean)

simmon • 3 years ago

18346d9

Translated using Weblate (Korean)

simmon • 3 years ago

9658dbd

Translated using Weblate (Korean)

simmon • 3 years ago

27dba4a

Translated using Weblate (Korean)

simmon • 3 years ago

d5726f0

Translated using Weblate (Korean)

simmon • 3 years ago

eac046f

Translated using Weblate (Korean)

simmon • 3 years ago

77feee8

Translated using Weblate (Korean)

simmon • 3 years ago

00eba1f

Translated using Weblate (Korean)

simmon • 3 years ago

1014605

Translated using Weblate (Finnish)

Jan Kuparinen • 3 years ago

2203f36

Translated using Weblate (Korean)

simmon • 3 years ago

23fb8a4

Translated using Weblate (Korean)

simmon • 3 years ago

fd81a77

Added translation using Weblate (Korean)

Hela Basa • 3 years ago

0a6246e

Translated using Weblate (Sinhala)

Hela Basa • 3 years ago

696a72f

Translated using Weblate (Finnish)

Jan Kuparinen • 3 years ago

15457a6

Translated using Weblate (Finnish)

Jan Kuparinen • 3 years ago

5dcb614

Translated using Weblate (Finnish)

Jan Kuparinen • 3 years ago

c2061cf

Translated using Weblate (Finnish)

Jan Kuparinen • 3 years ago

9d6d2e2

Translated using Weblate (Finnish)

Jan Kuparinen • 3 years ago

6bdd02d

Added translation using Weblate (Finnish)

Jan Kuparinen • 3 years ago

6169eb4

Translated using Weblate (Ukrainian)

Yuri Chornoivan • 3 years ago

842a645

Translated using Weblate (Polish)

Piotr Drąg • 3 years ago

3b0c1ca

Translated using Weblate (Polish)

Marcin Stanclik • 3 years ago

d198a35

Added translation using Weblate (Sinhala)

Hela Basa • 3 years ago

f9590de

Translated using Weblate (Ukrainian)

Yuri Chornoivan • 3 years ago

6353e45

Update API and VERSION

Carla Martinez • 3 years ago

856edcc

webui: Set 'SOA serial' field as read-only

Carla Martinez • 3 years ago

9f8c9a4

ipatest: Remove warning message for 'idnssoaserial'

Carla Martinez • 3 years ago

76604df

Set 'idnssoaserial' to deprecated

Carla Martinez • 3 years ago

e9048da

Move client certificate request after krb5.conf is created

Rob Crittenden • 3 years ago

762d786

ipatests: add negative test for otptoken-sync

Florence Blanc-Renaud • 3 years ago

895a800

ipa otptoken-sync: return error when sync fails

Florence Blanc-Renaud • 3 years ago

4cc94cd

Defer creating the final krb5.conf on clients

Rob Crittenden • 3 years ago

6941332

webui: Show 'Sudo order' column

Carla Martinez • 3 years ago

0513a83

Fix upper bound of password policy grace limit

Rob Crittenden • 3 years ago

91a0217

x509: Replace removed register_interface with subclassing

Stanislav Levin • 3 years ago

89fe83b

Set pkeys in test_selinuxusermap.py::test_misc::delete_record

Carla Martinez • 3 years ago

cefa8f1

fix canonicalization issue in Web UI

Alexander Bokovoy • 3 years ago

109cd57

Fix ipa-ccache-sweeper activation timer and clean up service file

Jesse Sandberg • 3 years ago

3589244

ipa-otpd: initialize local pointers and handle gcc 10

Alexander Bokovoy • 3 years ago

9290aa5

ipatests: Rename create_quarkus to create_keycloak

Scott Poore • 3 years ago

88ea19b

Set default on group pwpolicy with no grace limit in upgrade

Rob Crittenden • 3 years ago

a4ddaaf

Set default gracelimit on group password policies to -1

Rob Crittenden • 3 years ago

497a57e

doc: Update LDAP grace period design with default values

Rob Crittenden • 3 years ago

434620e

gitignore: add install/oddjob/org.freeipa.server.config-enable-sid

Florence Blanc-Renaud • 3 years ago

a736994

ipatests: Fix expected object classes

Florence Blanc-Renaud • 3 years ago

2385d1d

DNSResolver: Fix use of nameservers with ports

Thomas Woerner • 3 years ago

5e2e466

upgrades: Don't restart the CA on ACME and profile schema change

Rob Crittenden • 3 years ago

aaf5718

check_repl_update: in progress is a boolean

Florence Blanc-Renaud • 3 years ago

05a298f

webui: Allow grace login limit

Carla Martinez • 3 years ago

ade5093

ipatests: ipa-client-install --subid adds entry in nsswitch.conf

Sudhir Menon • 3 years ago

a576262

azure tests: disable TestInstallDNSSECFirst

Florence Blanc-Renaud • 3 years ago

d40fd28

ipatest: fix prci checker target masked return code & add pylint

David Pascual • 3 years ago

6483f33

Disabling gracelimit does not prevent LDAP binds

Rob Crittenden • 3 years ago

1316cd8

ipatests: healthcheck: test if system is FIPS enabled

Erik • 3 years ago

f962a0c

ap: Constrain supported docutils

Stanislav Levin • 3 years ago

1ada42e

ap: Rearrange overloaded jobs

Stanislav Levin • 3 years ago

b59baf3

ap: Disable azure's security daemon

Stanislav Levin • 3 years ago

98c6e96

ap: Raise dbus timeout

Stanislav Levin • 3 years ago

e77b0b0

Warn for permissions with read/write/search/compare and no attrs

Rob Crittenden • 3 years ago

b31631a

ipatests: Checker script for prci definitions

David Pascual • 3 years ago

f33266c

webui: Do not allow empty pagination size

Armando Neto • 3 years ago

991849c

install: suggest --skip-mem-check when mem check fails

Fraser Tweedale • 3 years ago

cbf2614

man: add --skip-mem-check to man pages

Fraser Tweedale • 3 years ago

585cebb

Only calculate LDAP password grace when the password is expired

Rob Crittenden • 3 years ago

3675bd1

Fix test_secure_ajp_connector.py failing with Python 3.6.8

Rob Crittenden • 3 years ago

de64d67

Add missing parameter to Suse modify_nsswitch_pam_stack

Matthew Davis • 3 years ago

4f15804

ipatests: Fix install_master for test_idp.py

Anuja More • 3 years ago

15f454f

ipaplatform/debian: Drop the path for ldap.so

Timo Aaltonen • 3 years ago

56c8270

ipaplatform/debian: Use multiarch path for libsofthsm2.so

Timo Aaltonen • 3 years ago

c39c2ee

ipatests: Healthcheck use subject base from IPA not REALM

Michal Polovka • 3 years ago

afa94c7

ipatests: update prci definitions for test_idp.py

Anuja More • 3 years ago

50b4d9a

Add end to end integration tests for external IdP

Anuja More • 3 years ago

857713c

xmlrpc tests: updated expected output for preserved user

Florence Blanc-Renaud • 3 years ago

4984ff2

Preserve user: fix the confusing summary

Florence Blanc-Renaud • 3 years ago

ff41525

ipatests: Healthcheck should ignore pki errors when CA is not configured

Michal Polovka • 3 years ago

206e08d

ipatests: Increase expect timeout for interactive mode

Michal Polovka • 3 years ago

a6a6781

Back to git snapshots

Antonio Torres • 3 years ago

3e90842

Become IPA 4.9.10

Antonio Torres • 3 years ago

61a64ae

Update list of contributors

Antonio Torres • 3 years ago

dabea80

Update translations to FreeIPA ipa-4-9 state

Antonio Torres • 3 years ago

553b84c

Create missing SSSD_PUBCONF_KRB5_INCLUDE_D_DIR

Matthew Davis • 3 years ago

70d23b2

ipatests: xfail for test_ipahealthcheck_hidden_replica to respect pki version

Michal Polovka • 3 years ago

60739ce

Suse compatibility fix

Matthew Davis • 3 years ago

fe048d8

idviews: use cached ipaOriginalUid value when resolving ID override anchor

Alexander Bokovoy • 3 years ago

cfca49c

Add switch for LDAP cache debug output

Rob Crittenden • 3 years ago

d062dc9

Remove extraneous AJP secret from server.xml on upgrades

Rob Crittenden • 3 years ago

deaaaaf

ACI: define "Read DNS entries from a zone" aci during install

Florence Blanc-Renaud • 3 years ago

4b8b032

ipatests: bump pr-ci templates

Armando Neto • 3 years ago

f325539

ipatests: update expected output for boolean attribute

Florence Blanc-Renaud • 3 years ago

c6bc8fd

ipa-replica-install: nsds5replicaUpdateInProgress is a Boolean

Florence Blanc-Renaud • 3 years ago

23d56bb

Update subordinate design doc

Francisco Trivino • 3 years ago

8abc0a2

ipatests: ipahealthcheck tests to check change in permission of ipaserver log files

Sudhir Menon • 3 years ago

3488276

ipatest: update expected out for ipa-healthcheck's DogtagCertsConnectivityCheck

Florence Blanc-Renaud • 3 years ago

6147f87

ipaldap: fix conversion from boolean OID to Python

Alexander Bokovoy • 3 years ago

faeb656

graceperiod: ignore case when checking for missing objectclass

Rob Crittenden • 3 years ago

e6cc410

Set default LDAP password grace period to -1

Rob Crittenden • 3 years ago

9b0fbdc

doc: Design document for LDAP graceperiod

Rob Crittenden • 3 years ago

d2b2964

Don't duplicate the LDAP gracelimit set in the previous test

Rob Crittenden • 3 years ago

8b2edd5

Configure and enable the graceperiod plugin on upgrades

Rob Crittenden • 3 years ago

62bafcc

dnssec daemons: read the dns context config file for debug state

Rob Crittenden • 3 years ago

c002864

ipatests: tasks: add ipactl start, stop and restart

Michal Polovka • 3 years ago

58ddcff

ipatests: RFE: Improve ipa-replica-install error message

Michal Polovka • 3 years ago

352b9df

healthcheck: add tests for setting cli options in config file

Rob Crittenden • 3 years ago

0e8350e

ipatests: test_subids: test subid-match shows UID of the owner

Michal Polovka • 3 years ago

ab0e67d

Exclude passwordgraceusertime from replication

Rob Crittenden • 3 years ago

87fe3fb

Remove the replicated attribute constants

Rob Crittenden • 3 years ago

6b3ab98

Implement LDAP bind grace period 389-ds plugin

Rob Crittenden • 3 years ago

4fcbf2d

ipa-kdb: avoid additional checks for a well-known anonymous principal

Alexander Bokovoy • 3 years ago

6c6fc7d

Ignore dnssec-enable-related named-checkonf errors in test

Alexander Bokovoy • 3 years ago

35c720c

Support dnssec utils from bind 9.17.2+

Alexander Bokovoy • 3 years ago

1c6bdf9

If the password auth type is enabled also enable the hardened policy

Rob Crittenden • 3 years ago

300f130

kdb: The jitter offset should always be positive

Rob Crittenden • 3 years ago

ed1447a

ipa-kdb: apply per-indicator settings from inherited ticket policy

Alexander Bokovoy • 3 years ago

a2baae4

workshop: add freeipa version requirements

Thorsten Scherf • 3 years ago

84c88b6

workshop: add freeipa version requirements

Thorsten Scherf • 3 years ago

7e596fd

ipatests: add new test with --subid installer option

Florence Blanc-Renaud • 3 years ago

0193498

man pages: document the --subid installer option

Florence Blanc-Renaud • 3 years ago

e10f338

Installer: add --subid option to select the sssd profile with-subid

Florence Blanc-Renaud • 3 years ago

74b2fd0

Update ipa-replica-install replication agreement error message

Francisco Trivino • 3 years ago

c03a8c3

pr-ci definitions: add external idp related jobs.

Anuja More • 3 years ago

b39f933

ipatests: Add integration tests for External IdP support

Anuja More • 3 years ago

b979dd9

ipatests: Bump PR-CI latest templates to Fedora 36

Francisco Trivino • 3 years ago

9ae6ef5

client uninstall: handle uninstall with authconfig

Florence Blanc-Renaud • 3 years ago

d39e232

freeipa.spec.in: Depend on sssd-idp directly to help RHEL BaseOS/AppStream repository split

Alexander Bokovoy • 3 years ago

979163b

docs: tune RTD to display lists with disc and left margin

Alexander Bokovoy • 3 years ago

40a257f

workshop: add chapter 12: External IdP support

Alexander Bokovoy • 3 years ago

5f9e0d3

freeipa.spec.in: use SSSD 2.7.0 to add IdP pre-auth mechanism

Alexander Bokovoy • 3 years ago

d49aa71

doc/workshop: document use of pam_sss_gss PAM module

Alexander Bokovoy • 3 years ago

d0eab8f

External IdP: initial SELinux policy

Alexander Bokovoy • 3 years ago

660c3dc

External IdP: add Web UI to manage IdP references

Alexander Bokovoy • 3 years ago

51a4e42

KDB: support external IdP configuration

Alexander Bokovoy • 3 years ago

673478b

ipa-otpd: add support for SSSD OIDC helper

Alexander Bokovoy • 3 years ago

bf8e2bb

external-idp: add XMLRPC tests for External IdP objects and idp indicator

Alexander Bokovoy • 3 years ago

b77015b

external-idp: add support to manage external IdP objects

Alexander Bokovoy • 3 years ago

2136bd5

external-idp: add LDAP schema, indices and other LDAP objects

Alexander Bokovoy • 3 years ago

1df7b82

doc/designs: add External IdP support design documents

Alexander Bokovoy • 3 years ago

8d81338

workshop: Update docs and support default cloud image

Armando Neto • 3 years ago

42afcc9

ipatests: --no-dnssec-validation requires --setup-dns

Florence Blanc-Renaud • 3 years ago

7f814d9

ipatests: Adding --no-dnssec-validation option for healthcheck

Sudhir Menon • 3 years ago

f11b7b3

js tests: use latest grunt

Alexander Bokovoy • 3 years ago

ea0275f

Azure CI: don't force non-existing OpenSSL configuration anymore

Alexander Bokovoy • 3 years ago

c2434c4

Azure CI: temporarily add libldap_r.so symlink for python-ldap PIP use

Alexander Bokovoy • 3 years ago

137e62c

Switch Azure CI to Fedora 36 pre-release

Alexander Bokovoy • 3 years ago

1e88214

web ui: do not provide Remove button in subid page

Alexander Bokovoy • 3 years ago

59cf901

ipatests: remove test_rekey_keytype_DSA

Florence Blanc-Renaud • 3 years ago

b3093d9

docs: force sphinx version above 3.0 to avoid caching in RTD

Alexander Bokovoy • 3 years ago

5ea1866

docs: update Sphinx requirements in ipasphinx package

Alexander Bokovoy • 3 years ago

ffd8f14

docs: add the readthedocs configuration

Alexander Bokovoy • 3 years ago

68c2084

docs: add plantuml and use virtual environment to generate docs

Alexander Bokovoy • 3 years ago

7ddef72

doc: migrate to m2r2 and newer sphinx, add plantuml to venv

Alexander Bokovoy • 3 years ago

de918ae

ipatests: update the expected sha256sum of epn.conf file

Florence Blanc-Renaud • 3 years ago

5877c4e

EPN: document missing option msg_subject

Florence Blanc-Renaud • 3 years ago

d37d1f7

Back to git snapshots

Antonio Torres • 3 years ago

0cdbe00

Become IPA 4.9.9

Antonio Torres • 3 years ago

029c4fc

Update list of contributors

Antonio Torres • 3 years ago

8a28154

Update translations to FreeIPA ipa-4-9 state

Antonio Torres • 3 years ago

2ffa2b4

ipatests: fix wrong condition in xfail_context for auto private grp

Florence Blanc-Renaud • 3 years ago

5ba5143

ipatests: collect samba logs when setting up trust to AD

Alexander Bokovoy • 3 years ago

ee6472c

ipa-sam: retrieve trusted domain account credential from the TDO itself

Alexander Bokovoy • 3 years ago

91d083c

ipa-pwd-extop: allow ipasam to request RC4-HMAC in Kerberos keys for trusted domain objects

Alexander Bokovoy • 3 years ago

710314a

ipatests: extend find_segment with suffix param

Mohammad Rizwan • 3 years ago

de1f446

ipatests: fix the topologysegment-reinitialize command

Mohammad Rizwan • 3 years ago

c3bd690

ipa-kdb: fix make check

Sumit Bose • 3 years ago

9cd48d1

ipatests: fix check for AD topology being present

Alexander Bokovoy • 3 years ago

b6b5f60

tests: ensure AD-SUPPORT subpolicy is active in more cases

Alexander Bokovoy • 3 years ago

0948111

ipatests: Test for pki.server.healthcheck.clones.connectivity_and_data

Sudhir Menon • 3 years ago

98eb661

ipatests: Fix a call to run_command with wildcard

Florence Blanc-Renaud • 3 years ago

85b2c81

ipatests: remove certmonger tracking before uninstall

Florence Blanc-Renaud • 3 years ago

12785a3

Remove the --no-sssd option from ipa-client-automount

Rob Crittenden • 3 years ago

c46ea21

ipalib/util.py: switch to ssl.PROTOCOL_TLS_CLIENT by default

Alexander Bokovoy • 3 years ago

3e8a355

Convert values using _SYNTAX_MAPPING with --delattr

Rob Crittenden • 3 years ago

bd8748f

ipatests: Check maxlife error message where minlife > maxlife specified

Mohammad Rizwan • 3 years ago

8355169

Set AES as default for KRA archival wrapping

Francisco Trivino • 3 years ago

984190e

Support AES for KRA archival wrapping

Christian Heimes • 3 years ago

895e99b

test_krbtpolicy: skip SPAKE-related tests in FIPS mode

Alexander Bokovoy • 3 years ago

2e70535

test_otp: do not use paramiko unless it is really needed

Alexander Bokovoy • 3 years ago

3baae8d

Kerberos instance: default to AES256-SHA2 for master key encryption

Alexander Bokovoy • 3 years ago

3e54c43

extdom: user getorigby{user|group}name if available

Sumit Bose • 3 years ago

cedca75

ipatests: Give the subCA more time to be loaded by the CA

Rob Crittenden • 3 years ago

3a4238b

allow overriding systemd-tmpfiles program

Fraser Tweedale • 3 years ago

b413a32

azure: Bump supported Pylint

Stanislav Levin • 3 years ago

1e2cf55

pylint: Skip false-positive invalid-sequence-index

Stanislav Levin • 3 years ago

b58ec49

pylint: Fix useless-suppression

Stanislav Levin • 3 years ago

6202a7d

pylint: Fix format-string-without-interpolation

Stanislav Levin • 3 years ago

c5b4657

pylint: Skip unsupported-assignment-operation

Stanislav Levin • 3 years ago

bfb2331

pylint: Fix deprecated-method for threading

Stanislav Levin • 3 years ago

fd99e4d

pylint: Skip deprecated-method for match_hostname

Stanislav Levin • 3 years ago

1f17ade

pylint: Fix consider-using-in

Stanislav Levin • 3 years ago

3ea0e1b

pylint: Fix arguments-renamed

Stanislav Levin • 3 years ago

a960adc

pylint: Skip use-implicit-booleaness-not-comparison

Stanislav Levin • 3 years ago

03cd914

pylint: Enable useless-suppression

Stanislav Levin • 3 years ago

2db2c6c

pylint: Skip raising-bad-type

Stanislav Levin • 3 years ago

bb515f4

pylint: Fix consider-using-dict-items

Stanislav Levin • 3 years ago

322d089

pylint: Skip not-callable

Stanislav Levin • 3 years ago

13e5720

pylint: Fix unused-variable

Stanislav Levin • 3 years ago

76c2c08

pylint: Fix no-member

Stanislav Levin • 3 years ago

08f2db7

pylint: Skip isinstance-second-argument-not-valid-type

Stanislav Levin • 3 years ago

afba414

pylint: Fix deprecated-decorator

Stanislav Levin • 3 years ago

054376c

pylint: Fix unnecessary-dict-index-lookup

Stanislav Levin • 3 years ago

d3b384b

pylint: Fix deprecated-class

Stanislav Levin • 3 years ago

ccf9334

pylint: Remove unused __convert_iter

Stanislav Levin • 3 years ago

0ebf09e

pylint: Drop no longer used __home

Stanislav Levin • 3 years ago

91ff7b8

pylint: Fix unused-private-member

Stanislav Levin • 3 years ago

4da897c

pylint: Skip unused-private-member for unsupported cases

Stanislav Levin • 3 years ago

bffde84

pylint: Skip unused-private-member for property case

Stanislav Levin • 3 years ago

9ca818b

pylint: Drop no longer used __finalized

Stanislav Levin • 3 years ago

dfa1cea

pylint: Drop never used __remove_lightweight_ca_key_retrieval_custodia

Stanislav Levin • 3 years ago

3c77949

pylint: Clean up __convert_to_gssapi_replication

Stanislav Levin • 3 years ago

04c4032

pylint: Fix use-maxsplit-arg

Stanislav Levin • 3 years ago

6fd75de

pylint: Skip unspecified-encoding

Stanislav Levin • 3 years ago

106d011

pylint: Skip use-dict-literal/use-list-literal

Stanislav Levin • 3 years ago

40ee6a4

pylint: Skip consider-using-f-string

Stanislav Levin • 3 years ago

b5fc2ee

pylint: Skip redundant-u-string-prefix

Stanislav Levin • 3 years ago

7f8b4f0

freeipa.spec: bump crypto-policies dependency for CentOS 9 Stream

Alexander Bokovoy • 4 years ago

ee39de4

ipatests: extend AES keyset to SHA2-based ones

Alexander Bokovoy • 4 years ago

49d9147

tests: ensure AD-SUPPORT subpolicy is active

Alexander Bokovoy • 4 years ago

b016683

KRB instance: make provision to work with crypto policy without SHA-1 HMAC types

Alexander Bokovoy • 4 years ago

a519008

ipatests: add missing test in the nightly defs

Florence Blanc-Renaud • 4 years ago

42f41ff

Strip off trailing period of a user-provided FQDN in installer

Rob Crittenden • 4 years ago

57de18e

Verify the user-provided hostname in the server installer

Rob Crittenden • 4 years ago

7ac8e96

ipa-restore: Mark a restored server as enabled

Rob Crittenden • 4 years ago

ab9e7da

Mark xfail test_gidnumber_not_corresponding_existing_group[true,hybrid]

Anuja More • 4 years ago

7ad500e

mark xfail for test_idoverride_with_auto_private_group[hybrid]

Anuja More • 4 years ago

8438100

ipatests: Tests for Autoprivate group.

Anuja More • 4 years ago

6b70e3c

Set the mode on ipaupgrade.log during RPM %post snipppet

Rob Crittenden • 4 years ago

d8174b0

Commit template: use either Fixes or Related

Florence Blanc-Renaud • 4 years ago

f273110

ipa_cldap: fix memory leak

Francisco Trivino • 4 years ago

186ebe3

ipalib: Handle percent signs in saved values

Brian Turek • 4 years ago

8377021

ipatests: remove additional check for failed units.

Anuja More • 4 years ago

b36bcf4

ipatests: Remove certmonger tracking before uninstall in cert tests

Rob Crittenden • 4 years ago

cc2348a

ipatests: healthcheck: Sync the expected system RRs

Stanislav Levin • 4 years ago

86b98b8

Test ipa-ccache-sweep.timer enabled by default during installation

Mohammad Rizwan • 4 years ago

0d9eb3d

Enable the ccache sweep timer during installation

Rob Crittenden • 4 years ago

9b6d0bb

ipatests: update images for f34 and f35

Florence Blanc-Renaud • 4 years ago

896d0f3

translations: regenerate translations after changes in help message in sudorule

Alexander Bokovoy • 4 years ago

0d034d7

pylint: workaround incorrect pylint detection of a local function

Alexander Bokovoy • 4 years ago

10d32d4

OpenLDAP 2.6+: use only -H option to specify LDAP url

Alexander Bokovoy • 4 years ago

85ce7ac

Remove ipa-join errors from behind the debug option

Rob Crittenden • 4 years ago

7c5540b

Don't always override the port in import_included_profiles

Rob Crittenden • 4 years ago

edb2168

ipatests: add case for hardened-only ticket policy

Julien Rische • 4 years ago

294ae35

ipa-kdb: do not remove keys for hardened auth-enabled users

Julien Rische • 4 years ago

6d70421

Custodia: use a stronger encryption algo when exporting keys

Francisco Trivino • 4 years ago

653a7fe

ipa-pki-proxy.conf: provide access to /kra/admin/kra/getStatus

Florence Blanc-Renaud • 4 years ago

9bae549

ipatests: fix expected automount config in nsswitch.conf

Florence Blanc-Renaud • 4 years ago

cd8e9ce

ipa-kdb: refactor KDB driver to prepare for KDB version 9

Alexander Bokovoy • 4 years ago

ace0bbf

ipatests: update images for f34 and f35

Florence Blanc-Renaud • 4 years ago

d8a7f15

Added nightly job definitions

Sumedh Sidhaye • 4 years ago

ef43ea0

Added test automation for SHA384withRSA CSR support

Sumedh Sidhaye • 4 years ago

0edf915

Remove deprecation warning when installing a CA replica

jh23453 • 4 years ago

e11cf7f

ipatests: webui: Use safe-loader for loading YAML configuration file

Michal Polovka • 4 years ago

419d7fd

config plugin: add a test ensuring EmptyModlist is returned

Florence Blanc-Renaud • 4 years ago

cd73509

Config plugin: return EmptyModlist when no change is applied

Florence Blanc-Renaud • 4 years ago

b9c42fe

automember default group: remove --desc parameter

Florence Blanc-Renaud • 4 years ago

6ff7491

pr-ci definitions: add web-ui subid-related jobs

Michal Polovka • 4 years ago

878859f

ipatests: webui: Tests for subordinate ids.

Anuja More • 4 years ago

edbd8f6

ipatests: update images for f34 and f35

Florence Blanc-Renaud • 4 years ago

1efdda0

PEP8 Fixes

Mohammad Rizwan • 4 years ago

5444da0

Test cases for ipa-replica-conncheck command

Mohammad Rizwan • 4 years ago

1d19b86

Support building against OpenLDAP 2.6+

Alexander Bokovoy • 4 years ago

ce112e6

ipatests: Test empty cert request doesn't force certmonger to segfault

Mohammad Rizwan • 4 years ago

cbd9ac6

ipatests: Test default value of nsslapd-sizelimit.

Anuja More • 4 years ago

465f166

ipatests: fix TestOTPToken::test_check_otpd_after_idle_timeout

Florence Blanc-Renaud • 4 years ago

4c54e9d

Extend test to see if replica is not shown when running `ipa-replica-manage list -v <FQDN>`

Sumedh Sidhaye • 4 years ago

8b22ee0

ipatests: Fix test_ipa_cert_fix.py::TestCertFixReplica teardown

Mohammad Rizwan • 4 years ago

ba7ec71

ipa-kdb: fix requester SID check according to MS-KILE and MS-SFU updates

Alexander Bokovoy • 4 years ago

7d93bda

ipa-kdb: issue PAC_REQUESTER_SID only for TGTs

Alexander Bokovoy • 4 years ago

669f3d7

configure: Use HTTPD_GROUP in init/tmpfiles/ipa.conf.in

Timo Aaltonen • 4 years ago

69f5f31

ipaplatform: Modify paths to fips-mode-setup and systemd-tmpfiles

Timo Aaltonen • 4 years ago

739d356

ipatests/test_ipaplatform: Skip test_ipa_version on Debian

Timo Aaltonen • 4 years ago

e99870f

ipaplatform/debian: Fix ntpd service name

Timo Aaltonen • 4 years ago

dcdc31b

ipaplatform/debian: Fix named keytab name

Timo Aaltonen • 4 years ago

da9be70

ipaplatform: Add support for recognizing systemd-timesyncd

Timo Aaltonen • 4 years ago

cf9c4cc

ipaplatform/debian: Fix HTTPD_ALIAS_DIR, and drop some obsolete paths.

Timo Aaltonen • 4 years ago

a0eb02c

Back to git snapshots

Antonio Torres • 4 years ago

8042bdc

Become IPA 4.9.8

Antonio Torres • 4 years ago

a9620a5

Update list of contributors

Antonio Torres • 4 years ago

b4f9026

Update translations to FreeIPA ipa-4-9 state

Antonio Torres • 4 years ago

c587db8

freeipa.spec: depend on bind-dnssec-utils

François Cami • 4 years ago

f89d59b

ipatests: remove xfail on f35+ for test_number_of_zones

Florence Blanc-Renaud • 4 years ago

a9c0807

Remove duplicate _() in the error path

Jochen Kellner • 4 years ago

1660cfa

Don't limit role-find by hostname when searching for last KRA

Rob Crittenden • 4 years ago

1c66226

webui tests: remove unnecessary code in add_record

Petr Vobornik • 4 years ago

a286cd3

fix(webui): create correct PTR record when navigated from host page

Petr Vobornik • 4 years ago

4f5ed83

pwpolicy: change lifetime error message

François Cami • 4 years ago

76afa64

ipatests: Fix UI_driver method after Selenium upgrade

Armando Neto • 4 years ago

bb5ef71

ipatests: Bump PR-CI latest templates to Fedora 35

Armando Neto • 4 years ago

d97250f

freeipa.spec.in: -server subpackage should require samba-client-libs

Alexander Bokovoy • 4 years ago

c850cd5

ipatests: mark test_installation_TestInstallWithCA_DNS3 as xfail

Florence Blanc-Renaud • 4 years ago

8ca5b09

ipa-kdb: validate domain SID in incoming PAC for trusted domains for S4U

Alexander Bokovoy • 4 years ago

5213c1e

ipa-kdb: honor SID from the host or service entry

Alexander Bokovoy • 4 years ago

a95ccd9

SMB: switch IPA domain controller role

Alexander Bokovoy • 4 years ago

693c165

ipa-kdb: Use proper account flags for Kerberos principal in PAC

Alexander Bokovoy • 4 years ago

adf5ab7

ipa-kdb: add PAC_ATTRIBUTES_INFO PAC buffer support

Alexander Bokovoy • 4 years ago

b71467e

ipa-kdb: add support for PAC_REQUESTER_SID buffer

Alexander Bokovoy • 4 years ago

879ef1b

ipa-kdb: add support for PAC_UPN_DNS_INFO_EX

Alexander Bokovoy • 4 years ago

4cafdac

ipa-kdb: S4U2Proxy target should use a service name without realm

Alexander Bokovoy • 4 years ago

8b5e496

ipa-kdb: use entry DN to compare aliased entries in S4U operations

Alexander Bokovoy • 4 years ago

eb5a93d

ipa-kdb: enforce SID checks when generating PAC

Alexander Bokovoy • 4 years ago

9ecbdd8

ipa-kdb: store SID in the principal entry

Alexander Bokovoy • 4 years ago

9ded98b

ipatests: fix get_user_result method

Florence Blanc-Renaud • 4 years ago

421e124

Test to verify if the case of a request for /ca/rest/authority/{id}/cert (or .../chain)

Sumedh Sidhaye • 4 years ago

4c14b8c

ipatests: remove redundant kinit from test

Mohammad Rizwan • 4 years ago

d3edc03

Make the schema cache TTL user-configurable

Rob Crittenden • 4 years ago

331cadd

ipatests: update the expected output of user-add cmd

Florence Blanc-Renaud • 4 years ago

009a8cd

User plugin: do not return the SID on user creation

Florence Blanc-Renaud • 4 years ago

61f42ae

Webui tests: new idrange now requires base RID

Florence Blanc-Renaud • 4 years ago

9c7e8c6

ipatests: backup-reinstall-restore needs to clear sssd cache

Florence Blanc-Renaud • 4 years ago

c6fd0d0

User lifecycle: ignore SID when moving from preserved to staged

Florence Blanc-Renaud • 4 years ago

86d1683

ipatests: adapt expected output with SID

Florence Blanc-Renaud • 4 years ago

efc9df0

ipatests: interactive install prompts for netbios name

Florence Blanc-Renaud • 4 years ago

31d095e

ipatests: add test ensuring SIDs are generated for new installs

Florence Blanc-Renaud • 4 years ago

5bb56f9

ipa config: add --enable-sid option

Florence Blanc-Renaud • 4 years ago

b98ecab

adtrust install: define constants for rid bases

Florence Blanc-Renaud • 4 years ago

a91e671

Installers: configure sid generation in server/replica installer

Florence Blanc-Renaud • 4 years ago

e527857

SID generation: define SIDInstallInterface

Florence Blanc-Renaud • 4 years ago

dd07db2

ipatests: TestMultipleExternalCA: Create tempfiles on remote host

Stanislav Levin • 4 years ago

7480844

On redhat-based platforms rely on authselect to enable sudo

Rob Crittenden • 4 years ago

c1baae8

ipatests: use AD domain name from config instead of hardcoded value

Sergey Orlov • 4 years ago

b3bee9b

ipa-server-install uninstall: remove tdb files

Florence Blanc-Renaud • 4 years ago

6302769

ipa-client-samba uninstall: remove tdb files

Florence Blanc-Renaud • 4 years ago

82eaa2e

ipatests: webui: Specify configuration loader

Michal Polovka • 4 years ago

17ba273

azure: Don't customize pip's builddir

Stanislav Levin • 4 years ago

8dd788d

seccomp profile: Default to ENOSYS instead of EPERM

Stanislav Levin • 4 years ago

488fb10

ipatests: Update the subca used in TestIPACommand::test_cacert_manage

Florence Blanc-Renaud • 4 years ago

34d6f51

Make Dogtag return XML for ipa cert-find

Chris Kelley • 4 years ago

bbda359

ipatests: check for message in sssd log only during actual test action

Sergey Orlov • 4 years ago

e600766

webui test: close notification after selinux user map update

Florence Blanc-Renaud • 4 years ago

b706483

ipatests: increase sosreport verbosity

Florence Blanc-Renaud • 4 years ago

fc384b0

ipatests: update expected error message for openssl verify

Florence Blanc-Renaud • 4 years ago

01dfce6

selinux: Fix file context definition for /var/run

Vit Mojzis • 4 years ago

186497c

kdb: fix typo in ipa_kdcpolicy_check_as

Pavel Březina • 4 years ago

bdf479e

test_schema_plugin: Add missing tests for command, class and topic commands

Stanislav Levin • 4 years ago

973334c

test_schema_plugin: Drop dependency on Tracker

Stanislav Levin • 4 years ago

83405a7

command_defaults: Don't crash on nonexistent command

Stanislav Levin • 4 years ago

e4839b0

schema plugin: Fix commands without metaobject arg

Stanislav Levin • 4 years ago

a9f7300

ipatests: Test that a user can be issued multiple certificates

Rob Crittenden • 4 years ago

8658864

Don't store entries with a usercertificate in the LDAP cache

Rob Crittenden • 4 years ago

be1e3bb

ipatests: Log debug messages for locator plugin

Stanislav Levin • 4 years ago

12ebc65

krb5: Pin kpasswd server to a primary one

Stanislav Levin • 4 years ago

8fcc0f0

azure: Ignore tar errors

Stanislav Levin • 4 years ago

dfe9464

ipatests: fix expected msg in tasks.run_ssh_cmd

Florence Blanc-Renaud • 4 years ago

ef58efe

docs: Make use of `text` highlighting

Stanislav Levin • 4 years ago

d1343e8

ipatests: fix logic waiting for repl in TestIPACommand

Florence Blanc-Renaud • 4 years ago

4f569c6

migrate-ds: workaround to detect compat tree

Florence Blanc-Renaud • 4 years ago

3c4f9e7

ipatests: rpcclient now uses --use-kerberos=desired

Florence Blanc-Renaud • 4 years ago

395b0d2

Increase default limit on LDAP searches to 100k

Rob Crittenden • 4 years ago

3fb0f53

subid: subid-match: display the owner's ID not DN

François Cami • 4 years ago

4785a90

Catch and log errors when adding CA profiles

Rob Crittenden • 4 years ago

a6e708a

extdom: return LDAP_NO_SUCH_OBJECT if domains differ

Sumit Bose • 4 years ago

4fca957

Add URI system records for KDC

Christian Heimes • 4 years ago

2cf0ad5

selinux policy: allow custodia to access /proc/cpuinfo

Florence Blanc-Renaud • 4 years ago

07e2bf7

Specify PKI installation log paths

Endi S. Dewata • 4 years ago

5abf1bc

ipatests: Add tests for `schema` Command

Stanislav Levin • 4 years ago

14ad522

schema plugin: Generate stable fingerprint

Stanislav Levin • 4 years ago

939d0f5

ipatests: use whole date for journalctl --since

Florence Blanc-Renaud • 4 years ago

b5036b5

pycodestyle: Check *.in Python files

Stanislav Levin • 4 years ago

31afc00

Azure: Run pycodestyle check in Lint job

Stanislav Levin • 4 years ago

0b359fb

ipatests: refactor test_ipa_cert_fix with tasks

François Cami • 4 years ago

4a3a15f

ipatests: update the timemout for test_ipa_cert_fix.py in nightlies

Mohammad Rizwan • 4 years ago

1b38afc

ipatests: wait while http/ldap/pkinit cert get renew on replica

Mohammad Rizwan • 4 years ago

a620e5e

ipatests: test to renew certs on replica using ipa-cert-fix

Mohammad Rizwan • 4 years ago

e0aef52

freeipa.spec.in: update 389-DS version

François Cami • 4 years ago

210c53d

Back to git snapshots

François Cami • 4 years ago

6074511

Become IPA 4.9.7

François Cami • 4 years ago

d2df13d

Only call add_agent_to_security_domain_admins() when CA is installed

Rob Crittenden • 4 years ago

da1d543

Update list of contributors

François Cami • 4 years ago

3cb6b5c

ipatests: Verify that securitydomain is updated on server-del

Rob Crittenden • 4 years ago

a417810

Clean up the PKI securitydomain when removing a server

Rob Crittenden • 4 years ago

be3a0f3

ipatests: test_ipahealthcheck: Verify permissions for /var/log/ files

Michal Polovka • 4 years ago

488ac7e

ipatests: Fix TestAJPSecretUpgrade tests on systems without pkiuser

Stanislav Levin • 4 years ago

c9bc471

ipatests: Test unsecure nsupdate.

Anuja More • 4 years ago

4fdab0c

ipatests: Refactor test_check_otpd_after_idle_timeout

Anuja More • 4 years ago

eac03d6

Parse cert chain as JSON not XML

Chris Kelley • 4 years ago

40f76a5

ipatests: skip test_basesearch_compat_tree on fedora.

Anuja More • 4 years ago

d4062e4

ipatests: Test ldapsearch with base scope works with compat tree.

Anuja More • 4 years ago

a3d71eb

Fix string check in uninstall helper

Christian Heimes • 4 years ago

c5b5bc9

Parse getStatus as JSON not XML

Chris Kelley • 4 years ago

7fb95cc

pr-ci definitions: add custom plugin-related jobs

Rob Crittenden • 4 years ago

78c4819

ipatests: add suite for testing custom plugins

Rob Crittenden • 4 years ago

e28e454

Don't assume that plugin attributes and objectclasses are lowercase

Rob Crittenden • 4 years ago

97a2a92

ipatests: use krb5_trace in TestIpaAdTrustInstall

François Cami • 4 years ago

9ae23e1

Add index for sudoorder

Rob Crittenden • 4 years ago

0526174

ipatests: Look for warning into stderr instead of stdout

Mohammad Rizwan • 4 years ago

96dd8ac

ipatests: expect SOA serial option deprecation warning

Antonio Torres • 4 years ago

1d75124

dnszone: deprecate option for setting SOA serial

Antonio Torres • 4 years ago

4c0dcab

ipatests: verify that getcert output includes the issued date

Rob Crittenden • 4 years ago

826b582

ipa-advise: Define the domain used when looking up ipa-ca

Rob Crittenden • 4 years ago

9a4a6cd

ipa-advise: if p11-kit provides opensc, don't add to NSS db

Rob Crittenden • 4 years ago

018ee09

ipatests: Test for OTP when the LDAP connection timed out.

Anuja More • 4 years ago

25a4acf

ipatests: test ipa-getkeytab server option

Rob Crittenden • 4 years ago

7a13200

ipa-getkeytab: fix compiler warnings

Rob Crittenden • 4 years ago

0114d24

ipa-getkeytab: add option to discover servers using DNS SRV

Rob Crittenden • 4 years ago

42206df

Provide more information in ipa-certupdate on ccache failure

Rob Crittenden • 4 years ago

fbbff3e

freeipa.spec.in: remove python3-pexpect from Requires

François Cami • 4 years ago

e0e1d6f

Fix ldapupdate.get_sub_dict() for missing named user

Christian Heimes • 4 years ago

a1eb13c

ipatests: test if KRA install fails when ca_host is overriden

Antonio Torres • 4 years ago

a4e13a3

ipa-kra-install: exit if ca_host is overriden

Antonio Torres • 4 years ago

ab4720d

ipatests: bump prci boxes + move gating to f34

Armando Neto • 4 years ago

0244776

Fix automountlocation-tofiles expected output in xmlrpc test

Rob Crittenden • 4 years ago

ded3cd3

ipatests: Add test for ipa automountlocation-tofiles

Rob Crittenden • 4 years ago

dbe4159

Display all orphaned keys in automountlocation-tofiles

Rob Crittenden • 4 years ago

89ca5c8

gating.yaml: Fix TestInstallMaster timeout

François Cami • 4 years ago

33c561d

Azure: temporarily disable problematic tests, #2

François Cami • 4 years ago

18ccaea

Azure: temporarily disable problematic tests, #1

François Cami • 4 years ago

eb1d509

ipatests: test removing last KRA when it is not running

Rob Crittenden • 4 years ago

8ea8f8b

Use new method in check to prevent removal of last KRA

Rob Crittenden • 4 years ago

0b9adf1

tasks.py: fix flake8-reported issues

François Cami • 4 years ago

5b826ab

test_acme: make password renewal more robust

François Cami • 4 years ago

701adb9

test_acme: refactor with tasks

François Cami • 4 years ago

8686936

ipatests: smbclient "-k" => "--use-kerberos=desired"

François Cami • 4 years ago

161d584

webui tests: fix algo for finding available idrange

Florence Blanc-Renaud • 4 years ago

f7997ed

Index: Fix definition for memberOf

Florence Blanc-Renaud • 4 years ago

b132956

rhel platform: add a named crypto-policy support

Alexander Bokovoy • 4 years ago

1a5159b

spec file: Trust controller role should pull sssd-winbind-idmap package

Florence Blanc-Renaud • 4 years ago

1a4f459

ipatests: Test ipa-cert-fix warns when startup directive is missing from CS.cfg

Mohammad Rizwan • 4 years ago

02c0da3

webui tests: close notification when revoking cert

Florence Blanc-Renaud • 4 years ago

40e4ccf

pr-ci definitions: add subid-related jobs

Florence Blanc-Renaud • 4 years ago

d456649

Fall back to krbprincipalname when validating host auth indicators

Rob Crittenden • 4 years ago

8ad535b

ipatests: test_installation: move tracking_reqs dependency to ipalib constants ipaserver: krainstance: utilize moved tracking_reqs dependency

Michal Polovka • 4 years ago

e5df4dc

ipatests: test_ipahealthcheck: print a message if a system is healthy

Michal Polovka • 4 years ago

7f910eb

Test DNA plugin configuration

Christian Heimes • 4 years ago

b53a52a

WebUI: Improve subordinate ids user workflow

Serhii Tsymbaliuk • 4 years ago

9f4b898

Fix oid of ipaUserDefaultSubordinateId

Christian Heimes • 4 years ago

44ccc0f

Fix ipa-server-upgrade

Christian Heimes • 4 years ago

e6e3fb6

Use 389-DS' dnaInterval setting to assign intervals

Christian Heimes • 4 years ago

ef115b0

Redesign subid feature

Christian Heimes • 4 years ago

5d4fe06

Add basic support for subordinate user/group ids

Christian Heimes • 4 years ago

3540986

ipatests: Fix for test_source_ipahealthcheck_ipa_host_check_ipahostkeytab

Sudhir Menon • 4 years ago

26be7ff

ipatests: use whole date when calling journalctl --since

Florence Blanc-Renaud • 4 years ago

b2e6292

Add SHA384withRSA as a certificate signing algorithm

Rob Crittenden • 4 years ago

ca8c701

Server install: do not use unchecked ip addr for ipa-ca record

Florence Blanc-Renaud • 4 years ago

2c0a123

man page: update ipa-server-upgrade.1

Florence Blanc-Renaud • 4 years ago

195035c

augeas: bump version for rhel9

Florence Blanc-Renaud • 4 years ago

076e499

XMLRPC test: add a test for stageuser-add --user-auth-type

Florence Blanc-Renaud • 4 years ago

4a5a0fe

stageuser: add ipauserauthtypeclass when required

Florence Blanc-Renaud • 4 years ago

06468b2

ipatests: ensure auth indicators can't be added to internal IPA services

Antonio Torres • 4 years ago

28484c3

Add checks to prevent adding auth indicators to internal IPA services

Antonio Torres • 4 years ago

a5d2857

Remove unneeded dependency on python-coverage

Florence Blanc-Renaud • 4 years ago

9cfae26

rpcserver.py: perf_counter_ns is Python 3.7+

François Cami • 4 years ago

1539c73

ipatests: smoke test for server debug mode.

François Cami • 4 years ago

ee4be29

paths: add IPA_SERVER_CONF

François Cami • 4 years ago

e713c22

Back to git snapshots

Alexander Bokovoy • 4 years ago

2b7e884

Become IPA v.4.9.6

Alexander Bokovoy • 4 years ago

6b3496a

Return a copy of cached entries, only with requested attributes

Rob Crittenden • 4 years ago

ae4478d

Increase timeout for test_commands.py

Sudhir Menon • 4 years ago

5d995b8

ipa-client-install: update sssd.conf if nsupdate requires -g

François Cami • 4 years ago

3cbd24d

ipa-client-install: invoke nsupdate twice (GSS-TSIG, plain)

François Cami • 4 years ago

a8588c5

ipa-client-install: remove fsync in do_nsupdate()

François Cami • 4 years ago

e82f253

ipatests: Add tests for `env` plugin

Stanislav Levin • 4 years ago

0abae79

ipatests: Add tests for `plugins` plugin

Stanislav Levin • 4 years ago

15d7102

plugins: Don't treat keys of api as bytes

Stanislav Levin • 4 years ago

32eb409

WebUI: Fix certificate serial number representation

Serhii Tsymbaliuk • 4 years ago

52e6088

ipatests: healthcheck: Update IPAHostKeytab assumptions

Stanislav Levin • 4 years ago

d744ff3

ipatests: Test to check that ResponseNotReady error is not displayed when user session cache is deleted

Sudhir Menon • 4 years ago

2aa7799

Use get_replication_plugin_name in LDAP updater

Rob Crittenden • 4 years ago

45d8118

ipatests: test host update using shortname

Antonio Torres • 4 years ago

27a65a1

host: try to resolve FQDN before command execution

Antonio Torres • 4 years ago

48370cb

Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server

Antonio Torres • 4 years ago

7bed7e4

Also drop Custodia client and forwarder

Christian Heimes • 4 years ago

62647ff

Add Custodia tests

Christian Heimes • 4 years ago

cde5e2d

Remove more unused Custodia code

Christian Heimes • 4 years ago

7cb2c89

Fix Custodia pylint issues

Christian Heimes • 4 years ago

0ec775f

Fix Custodia imports

Christian Heimes • 4 years ago

02ece29

Remove unused Custodia modules

Christian Heimes • 4 years ago

d804f1f

Add Custodia 0.6.0 to ipaserver package

Christian Heimes • 4 years ago

1be15d2

ipatests: use non-ascii chars in CA-less install

Florence Blanc-Renaud • 4 years ago

4b040e1

CA-less install: non-ASCII chars in CA cert subject

Florence Blanc-Renaud • 4 years ago

7b278b6

When loading certificates verify that it is X.509 v3

Rob Crittenden • 4 years ago

22f0d8c

Back to git snapshots

Alexander Bokovoy • 4 years ago

9f16174

Become FreeIPA 4.9.5

Alexander Bokovoy • 4 years ago

e045f11

gssproxy: Don't refresh expired delegated credentials

Stanislav Levin • 4 years ago

0fd06f3

krb_utils: Simplify get_credentials

Stanislav Levin • 4 years ago

700be74

ipa-cert-fix man page: add note about certmonger renewal

Florence Blanc-Renaud • 4 years ago

06a445a

ipatests: disable test_nfs.py::TestNFS in nightly runs on Fedora 33

Sergey Orlov • 4 years ago

c9f5acc

freeipa.spec: bump 389-ds version

Florence Blanc-Renaud • 4 years ago

6eb5353

ipatests: temporary disable execution of test_nfs.py::TestNFS in nightly runs

Sergey Orlov • 4 years ago

6ee14f5

ipatests: delete the replica before uninstallation

Florence Blanc-Renaud • 4 years ago

2b22450

ipatests: set selinux context for fips mode

Florence Blanc-Renaud • 4 years ago

13b257d

ipatests: Bump PR-CI boxes

Armando Neto • 4 years ago

79e0919

get_credentials: return ValueError for missing creds

Alexander Bokovoy • 4 years ago

5238651

Back to git snapshots

Alexander Bokovoy • 4 years ago

b25f5bd

Become FreeIPA 4.9.4

Alexander Bokovoy • 4 years ago

d64d74d

po/uk.po: Update translations to FreeIPA ipa-4-9 state

Alexander Bokovoy • 4 years ago

5b6a656

po/ru.po: Update translations to FreeIPA ipa-4-9 state

Alexander Bokovoy • 4 years ago

d6de84e

po/ipa.pot: Update translations to FreeIPA ipa-4-9 state

Alexander Bokovoy • 4 years ago

4523214

po/es.po: Update translations to FreeIPA ipa-4-9 state

Alexander Bokovoy • 4 years ago

1157c5b

Depend on system-logos-ipa on RHEL/CentOS Stream

Alexander Bokovoy • 4 years ago

3dd8c4d

Catch ValueError when trying to retrieve existing credentials

Rob Crittenden • 4 years ago

63d20c4

WebUI tests: Add test for 'ipaautoprivategroups' field on 'ID Ranges' page

Serhii Tsymbaliuk • 4 years ago

dfbafaf

WebUI: Add support of 'ipaautoprivategroups' LDAP attribute on 'ID Ranges' page

Serhii Tsymbaliuk • 4 years ago

15b47c8

service: enforce keytab user when retrieving the keytab

Alexander Bokovoy • 4 years ago

d7f3c1f

ipatests: Fetch sudo rules without time offset

Stanislav Levin • 4 years ago

8e05170

po/zh_CN.po: Update translations to FreeIPA ipa-4-9 state

Alexander Bokovoy • 4 years ago

94831c3

po/tr.po: Update translations to FreeIPA ipa-4-9 state

Alexander Bokovoy • 4 years ago

5cf1340

po/tg.po: Update translations to FreeIPA ipa-4-9 state

Alexander Bokovoy • 4 years ago

3f74383

po/sk.po: Update translations to FreeIPA ipa-4-9 state

Alexander Bokovoy • 4 years ago

9905e38

po/ru.po: Update translations to FreeIPA ipa-4-9 state

Alexander Bokovoy • 4 years ago

d3ef07a

po/pt_BR.po: Update translations to FreeIPA ipa-4-9 state

Alexander Bokovoy • 4 years ago

468c485

po/pt.po: Update translations to FreeIPA ipa-4-9 state

Alexander Bokovoy • 4 years ago

e7bfe72

po/pa.po: Update translations to FreeIPA ipa-4-9 state

Alexander Bokovoy • 4 years ago

e8ba917

po/nl.po: Update translations to FreeIPA ipa-4-9 state

Alexander Bokovoy • 4 years ago

fa15bf1

po/mr.po: Update translations to FreeIPA ipa-4-9 state

Alexander Bokovoy • 4 years ago

a4679b8

po/kn.po: Update translations to FreeIPA ipa-4-9 state

Alexander Bokovoy • 4 years ago

8c5ca86

po/ja.po: Update translations to FreeIPA ipa-4-9 state

Alexander Bokovoy • 4 years ago

44c57c2

po/ipa.pot: Update translations to FreeIPA ipa-4-9 state

Alexander Bokovoy • 4 years ago

0feda3d

po/id.po: Update translations to FreeIPA ipa-4-9 state

Alexander Bokovoy • 4 years ago

87150c2

po/hu.po: Update translations to FreeIPA ipa-4-9 state

Alexander Bokovoy • 4 years ago

3eca1f9

po/hi.po: Update translations to FreeIPA ipa-4-9 state

Alexander Bokovoy • 4 years ago

1de25fb

po/fr.po: Update translations to FreeIPA ipa-4-9 state

Alexander Bokovoy • 4 years ago

00a0cb3

po/eu.po: Update translations to FreeIPA ipa-4-9 state

Alexander Bokovoy • 4 years ago

4f68174

po/es.po: Update translations to FreeIPA ipa-4-9 state

Alexander Bokovoy • 4 years ago

f9c667e

po/en_GB.po: Update translations to FreeIPA ipa-4-9 state

Alexander Bokovoy • 4 years ago

9c34f7e

po/de.po: Update translations to FreeIPA ipa-4-9 state

Alexander Bokovoy • 4 years ago

5ed8987

po/cs.po: Update translations to FreeIPA ipa-4-9 state

Alexander Bokovoy • 4 years ago

626c7f7

po/ca.po: Update translations to FreeIPA ipa-4-9 state

Alexander Bokovoy • 4 years ago

7cb4ee0

po/bn_IN.po: Update translations to FreeIPA ipa-4-9 state

Alexander Bokovoy • 4 years ago

d933123

ds: Support renaming of a replication plugin in 389-ds

Alexander Bokovoy • 4 years ago

04a6583

Add --keyfile option to ipa-otptoken-import.1

MIZUTA Takeshi • 4 years ago

5193283

Update IRC links to point to Libera.chat

Alexander Bokovoy • 4 years ago

ab5aba2

pkispawn: override AJP connector address

Florence Blanc-Renaud • 4 years ago

986e2d7

azure: Make it possible to adjust Docker resources per test env

Stanislav Levin • 4 years ago

391ca8b

azure: coredump: Wait for systemd fully booted

Stanislav Levin • 4 years ago

692f42d

azure: Re-balance tests envs

Stanislav Levin • 4 years ago

d4d2794

azure: Warn about extra and missing gating tests compared to PR-CI

Stanislav Levin • 4 years ago

0dd0631

ipatests: dnssec: Add alternative approach for checking chain of trust

Stanislav Levin • 4 years ago

3ada2d9

azure: Collect installed packages

Stanislav Levin • 4 years ago

3049b95

ipatests: Suppress list trust or certificates

Stanislav Levin • 4 years ago

c92f100

ipatests: Ignore warnings on failed to read files on tarring

Stanislav Levin • 4 years ago

535131d

pytest: Show extra summary information for all except passed tests

Stanislav Levin • 4 years ago

645f90a

dns: get_reverse_zone: Ignore resolver's timeout

Stanislav Levin • 4 years ago

9e15311

dnsutil: Improvements for IPA DNS Resolver

Stanislav Levin • 4 years ago

b487629

ipatests: Handle network-isolated mode

Stanislav Levin • 4 years ago

a192c21

azure: Run Base and XMLRPC tests is isolated network

Stanislav Levin • 4 years ago

5501fda

ipatests: Setup and collect BIND logs

Stanislav Levin • 4 years ago

64c0f90

BIND: Setup logging

Stanislav Levin • 4 years ago

0932c92

azure: Warn about memory issues

Stanislav Levin • 4 years ago

6164bfb

azure: Add workaround for PhantomJS against OpenSSL 1.1.1

Stanislav Levin • 4 years ago

aa0c8c8

ipatests: Update expectations for test_detect_container

Stanislav Levin • 4 years ago

c90a363

azure: Mask systemd-resolved

Stanislav Levin • 4 years ago

4d53d9f

azure: Remove no longer needed repo

Stanislav Levin • 4 years ago

e243b95

azure: Wait for systemd booted

Stanislav Levin • 4 years ago

eb0a5db

azure: Enforce multi-user.target as default systemd's target

Stanislav Levin • 4 years ago

c26907b

azure: Collect systemd boot log

Stanislav Levin • 4 years ago

c711292

freeipa.spec: do not use jsl for linting on Fedora 34+

Alexander Bokovoy • 4 years ago

18563bc

azure: bump F32->F34

Stanislav Levin • 4 years ago

b9fd47a

ipatests: kinit on server for test_proxycommand_invalid_shell

Rob Crittenden • 4 years ago

bfd7b6e

Add argument for --entry option in ipa-managed-entries.1

MIZUTA Takeshi • 4 years ago

9a9373d

Remove -s option from ipa-ldap-updater usage

MIZUTA Takeshi • 4 years ago

25e0f4a

Add ability to search on certificate revocation status

Rob Crittenden • 4 years ago

6031b8a

Add argument for --schema-file option in ipa-ldap-updater.1

MIZUTA Takeshi • 4 years ago

190f8b6

Load dogtag RA plugin in installers so profiles can be loaded

Rob Crittenden • 4 years ago

7239864

Add arguments to the description of OPTIONS in ipa-winsync-migrate.1

MIZUTA Takeshi • 4 years ago

25c4da9

Fix the option to match in the ipa-client-automount usage and man-page

MIZUTA Takeshi • 4 years ago

7c17e27

Add -d option to match in the ipa-client-samba usage and man-page

MIZUTA Takeshi • 4 years ago

8799df5

man: fix typos in ipa-epn.1

MIZUTA Takeshi • 4 years ago

9d37d07

Move constants, document timeout loop

Christian Heimes • 4 years ago

7e9407d

Fix update_dna_shared_config to wait for both entries

Christian Heimes • 4 years ago

74889cf

ipatests: increase timeout for test_commands up to 1.5 hours

Sergey Orlov • 4 years ago

a1ed05d

ipatests: Bump PR-CI templates to Fedora 34

Armando Neto • 4 years ago

1647afa

Parse the debugging cache log to determine the read savings

Rob Crittenden • 4 years ago

0307d22

Add a unit test for the LDAP cache layer

Rob Crittenden • 4 years ago

951720d

Add LDAP cache options to the default.conf man page

Rob Crittenden • 4 years ago

00c99cc

Implement simple LDAP cache layer

Rob Crittenden • 4 years ago

b37d679

Unify installer context to be 'installer'

Rob Crittenden • 4 years ago

63767ec

Call the LDAPClient layer when modifying values

Rob Crittenden • 4 years ago

d6637b2

Only attempt to upgrade ACME configuration files if deployed

Rob Crittenden • 4 years ago

1aa3f7a

Spec file: bump augeas-libs version

Florence Blanc-Renaud • 4 years ago

4dd9d07

Parse Apache log etime and display average per command

Rob Crittenden • 4 years ago

bae02a7

hbacrule: reduce number of LDAP searches during deletion

Antonio Torres • 4 years ago

046012e

ipatests: test_installation: add install test scenarios

Michal Polovka • 4 years ago

a213110

Constrain pylint to supported versions

Christian Heimes • 4 years ago

35198be

ipatests: Test if ACME renews the issued cert with cerbot

Mohammad Rizwan • 4 years ago

a7ff408

pkispawn: Make timeout consistent with IPA's startup_timeout

Stanislav Levin • 4 years ago

5afe830

Add max/min safe integer

Christian Heimes • 4 years ago

0c3a2db

pylint: Adapt to new Pylint 2.8

Stanislav Levin • 4 years ago

eefbe85

Use PyCA crypto provider for KRAClient

Christian Heimes • 4 years ago

0244a06

WebUI: Handle assertion if multiple notifications are present

Michal Polovka • 4 years ago

bd2a14a

ipa-otpd: handle LDAP timeout in a better way

Alexander Bokovoy • 4 years ago

33404a6

xmlrpc tests: add test for idrange auto-private-groups option

Florence Blanc-Renaud • 4 years ago

7ddc191

Trust: add auto private groups option

Florence Blanc-Renaud • 4 years ago

cada918

LDAP schema: new attribute ipaautoprivategroups

Florence Blanc-Renaud • 4 years ago

42b8fa6

Design doc for idrange option "auto-private-groups"

Florence Blanc-Renaud • 4 years ago

9d34142

Retrieve the user objectclasses when checking for existence

Rob Crittenden • 4 years ago

58c73a7

Cache the value of ca_is_enabled in the request context

Rob Crittenden • 4 years ago

74130f8

Add pkey_only to the service_find calls in host del and disable

Rob Crittenden • 4 years ago

7e0626a

WebUI: test_user: test if user is enabled by default

Michal Polovka • 4 years ago

b3488b2

ipatests: check that the output of sudo -V is not displayed

Florence Blanc-Renaud • 4 years ago

3499fde

client install: do not capture sudo -V stdout

Florence Blanc-Renaud • 4 years ago

7fa80ac

ipaserver/install/dns: handle SERVFAIL when checking reverse zone

Alexander Bokovoy • 4 years ago

aea2c9f

Improve wsgi app loading

Christian Heimes • 4 years ago

b7700b9

Better mod_wsgi configuration

Christian Heimes • 4 years ago

07fe32e

Bumps openssl requires

Florence Blanc-Renaud • 4 years ago

de5fffd

ipatests: TestIpaHealthCheck now needs 1 client

Florence Blanc-Renaud • 4 years ago

03dfd01

ipatests: call server-del before replica uninstall

Florence Blanc-Renaud • 4 years ago

c7271ea

Also use uglifyjs on CentOS Stream 8

Carl George • 4 years ago

a8c3f5f

ipatests: mark test_ipahealthcheck_hidden_replica as expected failure

François Cami • 4 years ago

0ffaf29

ipatests: hidden replica: misc fixes

François Cami • 4 years ago

45fa104

ipatests: hidden replica: use dns_update_system_records

François Cami • 4 years ago

b1fef6b

ipatests: use wait_for_replication for hidden replica checks

François Cami • 4 years ago

834adfc

ipatests: hiddenreplica: use wait_for_ipa_to_start after restore

François Cami • 4 years ago

9ad9c38

ipatests: tasks.py: add dns_update_system_records

François Cami • 4 years ago

18b0350

ipatests: tasks.py: add wait_for_ipa_to_start

François Cami • 4 years ago

7f598c8

ipatests: Test to check ipa-healthcheck tool displays warning when run on ipa-client

Sudhir Menon • 4 years ago

8c5eb88

ipatests: collect PKI config files and NSSDB

Florence Blanc-Renaud • 4 years ago

4334438

Back to git snapshots

Alexander Bokovoy • 4 years ago

50d986b

Become FreeIPA 4.9.3

Alexander Bokovoy • 4 years ago

dab3706

Update list of contributors

Alexander Bokovoy • 4 years ago

8cb3238

Update ipa.pot translations file

Alexander Bokovoy • 4 years ago

ef4a2f3

ipatests: Skip test_jsplugins in server less environments

Stanislav Levin • 4 years ago

3eb8b30

sudorule: reduce number of LDAP searches during modification

Antonio Torres • 4 years ago

8552fab

Azure: Run Lint task as separate job

Stanislav Levin • 4 years ago

188a279

pylint: Fix several warnings

Stanislav Levin • 4 years ago

2bec09a

Azure: Don't install pypi's docker

Stanislav Levin • 4 years ago

6c1dc1b

Azure: Disable AppArmor profile for chrony

Stanislav Levin • 4 years ago

572f203

Azure: Warn about Host's AVC and SECCOMP

Stanislav Levin • 4 years ago

d47847b

Azure: Collect Host's systemd journal

Stanislav Levin • 4 years ago

8cdc7bf

Azure: Run chronyd in Docker

Stanislav Levin • 4 years ago

255be04

Azure: Template docs build

Stanislav Levin • 4 years ago

e80ff6f

Azure: Show disk usage

Stanislav Levin • 4 years ago

adc4d8d

Azure: Make it possible to pass additional Pytest args

Stanislav Levin • 4 years ago

380336d

ipatests: update expected message

Florence Blanc-Renaud • 4 years ago

c9ed627

ipatests: log command spawned by pexpect

Sergey Orlov • 4 years ago

c52cf21

ipatests: allocate pseudo-terminal only for specific command

Sergey Orlov • 4 years ago

9f0c483

ipa passwd: make help for `--otp` option clearer

Antonio Torres • 4 years ago

74638ed

ipatests: add test for multiple permitopen entries in SSH keys

Antonio Torres • 4 years ago

dc799a5

Allow multiple permitopen/permitlisten in SSH keys

Antonio Torres • 4 years ago

3dc5896

ipatests: add test for group creation with GID and nonposix option

Antonio Torres • 4 years ago

d8bc3e4

Enhance error message when adding non-posix group with a GID

Antonio Torres • 4 years ago

28d310d

ipatests: expect boolean type for nsaccountlock in user module

Antonio Torres • 4 years ago

cfff1f6

Return nsaccountlock in user-add as boolean

Antonio Torres • 4 years ago

39153f9

Azure: Run rpmlint on Fedora

Stanislav Levin • 4 years ago

8c38c57

configure: Make rpmlint optional

Stanislav Levin • 4 years ago

c441397

Adapt redhat ipaplatform to RHEL9/ELN

Florence Blanc-Renaud • 4 years ago

8272da7

Increase timeout for TestIpaHealthCheck to 5400s

Rob Crittenden • 4 years ago

d15e577

Uninstall without starting the CA in cert expiration test

Rob Crittenden • 4 years ago

b70e30d

ipatests: Don't rely on certmonger's assigned request id

Mohammad Rizwan • 4 years ago

8defcb0

ipatests: Test secure_ajp_connector works with multiple connectors

Rob Crittenden • 4 years ago

16fbe09

Allow overriding is_newer_tomcat_version()

Rob Crittenden • 4 years ago

d3e4bd9

Handle multiple AJP adapters during upgrade

Alexander Scheel • 4 years ago

60389f5

ipatests: Enable certbot test on rhel

Mohammad Rizwan • 4 years ago

339152c

Avoid comparing 'max' with 'max\n'.

Jan Pazdziora • 4 years ago

44d7cce

Extend logging to include execution time

Antonio Torres • 4 years ago

e880d38

ipatests: update prci definitions for test_http_kdc_proxy

Sergey Orlov • 4 years ago

305d6f2

ipatests: add test for kdcproxy handling reply split to several TCP packets

Sergey Orlov • 4 years ago

643a70a

ipatests: return result of kinit_as_user, pass raiseonerr parameter

Sergey Orlov • 4 years ago

462dc75

ipatests: fix TestInstalDNSSECFirst::test_resolvconf logic

Florence Blanc-Renaud • 4 years ago

5af5743

ipatests: re-add test_dnssec.py::TestInstallDNSSECFirst in gating

Florence Blanc-Renaud • 4 years ago

ab23ecd

ipatests: filter_users belongs to nss section

Florence Blanc-Renaud • 4 years ago

5221f4c

ipatests: introduce wait_for_replication in test_rolecheck_Trust

Mohammad Rizwan • 4 years ago

1b8de48

ipatests: check for the "no sudo present" string absence

François Cami • 4 years ago

4b91783

ipa-client-install: output a warning if sudo is not present (2)

François Cami • 4 years ago

061e0b6

Update 10-ssh-key-management.rst

Thorsten Scherf • 5 years ago

f6aac4d

freeipa.spec: synchronize with Fedora for 389-ds and PKI versions

Alexander Bokovoy • 5 years ago

a63c6e0

ipatests: use proper template for TestMaskInstall

Sergey Orlov • 5 years ago

3ce45ce

dnssec: concurrency issue when disabling old replica key

Florence Blanc-Renaud • 5 years ago

7616f1d

dnssec: fix ipa-ods-exporter crash when master key missing

Florence Blanc-Renaud • 5 years ago

9cfcbc6

Fix lgtm file classification

Thorsten Scherf • 5 years ago

cc3e3cd

ipatests: Update gating to Fedora 33

Armando Neto • 5 years ago

0dfd4b7

ipatests: Fix expectation about GSS error in test for healthcheck

Stanislav Levin • 5 years ago

fbbfce1

ipatests: Test to check sosreport collects healthcheck.log file

Sudhir Menon • 5 years ago

9fb2668

cleanup: Drop never used path for httpd's ccache

Stanislav Levin • 5 years ago

99a65e3

ccache_sweeper: Add gssproxy service

Stanislav Levin • 5 years ago

cf80bb3

ipatests: do not configure nameserver when installing client and replica

Sergey Orlov • 5 years ago

1ca7cb6

ipatests: always try to create A records for hosts in IPA domain

Sergey Orlov • 5 years ago

b0ee8e0

ipatests: mock resolver factory

Sergey Orlov • 5 years ago

b3abb2c

ipatests: disable systemd-resolved cache

Sergey Orlov • 5 years ago

28af454

ipatests: do not manually modify /etc/resolv.conf in tests

Sergey Orlov • 5 years ago

f5d7f85

ipatests: setup resolvers during replica and client installations

Sergey Orlov • 5 years ago

64f2a40

ipatests: add utility for managing domain name resolvers

Sergey Orlov • 5 years ago

1a394c6

ipatests: collect config files for NetworkManager and systemd-resolved

Sergey Orlov • 5 years ago

2c5b706

ipatests: use whole date when calling journalctl --since

Florence Blanc-Renaud • 5 years ago

caf7488

ipa-csreplica-manage, ipa-replica-manage: refactor

François Cami • 5 years ago

25cbae4

ipalib/util.py: add print_replication_status

François Cami • 5 years ago

5f2f97a

ipa-replica-manage: handle missing attributes

François Cami • 5 years ago

85484d3

ipa-replica-manage: always display nsds5replicalastinitstatus

François Cami • 5 years ago

f6204b0

ipatests: update nightly definition for ipa_cert_fix suite

Mohammad Rizwan • 5 years ago

260fbcb

ipatests: Test if ipa-cert-fix renews expired certs with kra installed

Mohammad Rizwan • 5 years ago

c84e054

Move fixture outside the class and add setup_kra capability

Mohammad Rizwan • 5 years ago

36a60db

ipatests: Test if ipa-cert-fix renews expired certs

Mohammad Rizwan • 5 years ago

7f30ddb

ipa-kdb: mark test functions as static

Alexander Bokovoy • 5 years ago

2968609

ipa-kdb: reformat ipa_kdb_certauth

Alexander Bokovoy • 5 years ago

f340baa

ipa-kdb: add missing prototypes

Alexander Bokovoy • 5 years ago

c7ce801

ipa-kdb: fix compiler warnings

Alexander Bokovoy • 5 years ago

0da9de4

ipa-kdb: do not use OpenLDAP functions with NULL LDAP context

Alexander Bokovoy • 5 years ago

2832810

ipatests: check that zonemgr is set correctly during server install

Antonio Torres • 5 years ago

82043e1

ipaserver: don't ignore zonemgr option on install

Antonio Torres • 5 years ago

20bb855

ipatests: test Samba mount with NTLM authentication

Sergey Orlov • 5 years ago

80ccac7

ipa-cert-fix: improve handling of 'pki-server cert-fix' failure

Fraser Tweedale • 5 years ago

f2b1b5b

freeipa.spec: bump the required version of 389ds

Florence Blanc-Renaud • 5 years ago

1c1c469

platform-python only on RHEL8

Troy Dawson • 5 years ago

026e0ca

Don't renew non-IPA issued certs in ipa-cert-fix

Rob Crittenden • 5 years ago

f346372

Set pki-core dependency to 10.3.3 for pki-server cert-fix bug

Rob Crittenden • 5 years ago

4cb6f0b

ipatests: test third-party 389-ds cert with ipa-cert-fix

Rob Crittenden • 5 years ago

660507f

ipa-cert-fix: Don't hardcode the NSS certificate nickname

Rob Crittenden • 5 years ago

a0626e0

ipatests: Update PRCI templates for ipa-4-9

Florence Blanc-Renaud • 5 years ago

1bcacd8

pylint: fix inconsistent-return-statements

Florence Blanc-Renaud • 5 years ago

2fae28f

ipatests: skip tests for AD trust with shared secret in FIPS mode

Sergey Orlov • 5 years ago

6d7b2d7

Remove a remaining file used with csrgen

Rob Crittenden • 5 years ago

fe4b154

ipatests: error message check in uninstall log for KRA

Kaleemullah Siddiqui • 5 years ago

6b25cd3

Don't double-report any errors from pki-spawn failures

Rob Crittenden • 5 years ago

f1e12c7

Suppress error message if the CRL directory doesn't exist

Rob Crittenden • 5 years ago

584151d

freeipa.spec: client: depend on libsss_sudo and sudo

François Cami • 5 years ago

ee0ba2d

ipa-client-install: output a warning if sudo is not present

François Cami • 5 years ago

fe157ca

ipatests: tasks: handle uninstalling packages with nodeps

François Cami • 5 years ago

0c2741a

ipatests: add TestInstallWithoutSudo

François Cami • 5 years ago

b590dce

Back to git commits

Alexander Bokovoy • 5 years ago

811d130

Become IPA 4.9.2

Alexander Bokovoy • 5 years ago

34600a0

po: refresh translations to remove outdated strings

Alexander Bokovoy • 5 years ago

66ffc9a

po: update translations template

Alexander Bokovoy • 5 years ago

d1313a5

ipatests: update expected error message

Florence Blanc-Renaud • 5 years ago

9854c39

Remove the option stop_certmonger from stop_tracking_*

Rob Crittenden • 5 years ago

9872610

man: fix ipa-client-samba.1 typos

Thorsten Scherf • 5 years ago

b290bc1

ipatests: test addition of invalid sudo command

Antonio Torres • 5 years ago

029daa5

sudocmd: ensure command doesn't contain trailing dot before adding it

Antonio Torres • 5 years ago

602a4fa

rpm-spec: Require crypto-policies-scripts

Stanislav Levin • 5 years ago

0b11a7c

ipatests: Handle AAAA records in test_ipa_dns_systemrecords_check

Stanislav Levin • 5 years ago

151fa50

Azure: Populate containers with self-AAAA records

Stanislav Levin • 5 years ago

63b1483

Add some logging around initial ACME deployment

Rob Crittenden • 5 years ago

6526ab4

Add versions to the ACME config templates and update on upgrade

Rob Crittenden • 5 years ago

31061c6

Set the ACME baseURL in order to pin a client to a single IPA server

Rob Crittenden • 5 years ago

a16dc59

WebUI: change FreeIPA naming to IPA in About dialog

Antonio Torres • 5 years ago

4f63dc9

xmlrpc tests: add a test for cert-remove-hold

Florence Blanc-Renaud • 5 years ago

55c7e21

cert plugin: propagate the error for non-existent cert

Florence Blanc-Renaud • 5 years ago

45d7d15

test_installutils: run gpg-agent under a specific SELinux context

Alexander Bokovoy • 5 years ago

7ca2797

configure: ipaplatform falls back to ID_LIKE

Christian Heimes • 5 years ago

55180f6

Add RHEL 9 UI branding patch reference

Rob Crittenden • 5 years ago

dffe695

Force-update translation after FreeIPA to IPA change: po/ipa.pot

Rob Crittenden • 5 years ago

936f98e

Force-update translation after FreeIPA to IPA change: po/fr.po

Alexander Bokovoy • 5 years ago

fc96521

Force-update translation after FreeIPA to IPA change: po/es.po

Alexander Bokovoy • 5 years ago

12d92fe

Force-update translation po/id.po

Alexander Bokovoy • 5 years ago

e77d689

Force-update translation po/fr.po

Alexander Bokovoy • 5 years ago

cf054fc

Force-update translation po/es.po

Alexander Bokovoy • 5 years ago

d839881

Force-update translation po/de.po

Alexander Bokovoy • 5 years ago

7d00ad4

Don't install csrgen extra dependencies

Christian Heimes • 5 years ago

de35102

Remove references to rjsmin in UI compile.sh

Rob Crittenden • 5 years ago

1478db8

Remove support for csrgen

Rob Crittenden • 5 years ago

e35bec9

Change FreeIPA references to IPA and Identity Management

Rob Crittenden • 5 years ago

f05ee29

ipatests: ipactl status now exits with 3 when a service is stopped

Florence Blanc-Renaud • 5 years ago

8d30629

ipatests: fix ipahealthcheck fixture _modify_permission

Florence Blanc-Renaud • 5 years ago

b784e1f

OpenDNSSEC: fix timezone in key creation date

Florence Blanc-Renaud • 5 years ago

2a51892

ipatests: add a test for ZSK/KSK keytype in DNSKEY record

Florence Blanc-Renaud • 5 years ago

dd21d06

dnssec: fix the key type with OpenDNSSEC 2.1

Florence Blanc-Renaud • 5 years ago

4476236

Update samba configuration on IPA master to explicitly use 'server role' setting

Antonio Torres • 5 years ago

2b64a4e

ipatests: Handle non-zero return code in test_ipactl_scenario_check

Rob Crittenden • 5 years ago

00226ad

Add exit status to the ipactl man page

Rob Crittenden • 5 years ago

302f937

Ensure IPA is running (ideally) before uninstalling the KRA

Rob Crittenden • 5 years ago

87ede26

ipactl: support script status 3, program is not running

Rob Crittenden • 5 years ago

ddb5414

Use the new API introduced in PKI 10.8

Rob Crittenden • 5 years ago

4d26ce5

Change CA profile migration message from info to debug

Rob Crittenden • 5 years ago

b99bc2d

client: synchronize ignored return codes with ipa-rmkeytab

Alexander Bokovoy • 5 years ago

5a1ad47

ipatests: use pexpect to control inetractive session of ipa-adtrust-install

Sergey Orlov • 5 years ago

34d72d1

ipatests: use pexpect to invoke ktutil

Sergey Orlov • 5 years ago

1c15447

ipatests: add a tests-oriented wrapper for pexpect module

Sergey Orlov • 5 years ago

2937790

ipatests: Test if server setup without dns uninstall properly

Mohammad Rizwan • 5 years ago

85674f1

ipa-sam: return NetBIOS domain name instead of DNS one

Alexander Bokovoy • 5 years ago

8a4cf21

Only build the UI with uglifyjs on RHEL 8

Rob Crittenden • 5 years ago

5fb0cc4

Provide more detailed logging around memory detection

Rob Crittenden • 5 years ago

6eff5b9

ipatests: Update NSSDatabase DBM test on non-DBM-capable installs

Rob Crittenden • 5 years ago

7f1849e

Ignore database errors when trying to extract ipaCert on upgrade

Rob Crittenden • 5 years ago

348d4ee

Report the NSS database directory if it cannot be opened

Rob Crittenden • 5 years ago

b71c0c6

Ensure that KDC cert has SAN DNS entry

Christian Heimes • 5 years ago

5ab290a

Fix cert_request for KDC cert

Christian Heimes • 5 years ago

2c48897

ipatests: rewrite test for requests routing to subordinate suffixes

Sergey Orlov • 5 years ago

0d9f988

fix collecting log files which are symlinks

Sergey Orlov • 5 years ago

5517aa6

Back to git commits

Alexander Bokovoy • 5 years ago

9690659

Become FreeIPA 4.9.1

Alexander Bokovoy • 5 years ago

aa58fad

Force-update translation po/uk.po

Alexander Bokovoy • 5 years ago

a97967f

Force-update translation po/ipa.pot

Alexander Bokovoy • 5 years ago

cb583ac

Force-update translation po/hu.po

Alexander Bokovoy • 5 years ago

a1c43ac

Force-update translation po/de.po

Alexander Bokovoy • 5 years ago

6f6dd62

Update contributors list

Alexander Bokovoy • 5 years ago

2ac8028

ipatests: Don't assume sshd flush its logs immediately

Stanislav Levin • 5 years ago

cbe7d22

ipatests: fix discrepancies in nightly defs

Florence Blanc-Renaud • 5 years ago

bb78693

baseldap: allow rejecting unknown objects instead of adding to an external attr

Alexander Bokovoy • 5 years ago

51ca387

ipatests: when talking to AD DCs, use FQDN credentials

Alexander Bokovoy • 5 years ago

64b70be

test_trust: add tests for using AD users and groups in SUDO rules

Alexander Bokovoy • 5 years ago

a7c56fd

ipatests: fix test_sudorule_plugin's wrong argument use

Alexander Bokovoy • 5 years ago

f4d3c91

sudorule runAs: allow to add users and groups from trusted domains directly

Alexander Bokovoy • 5 years ago

78043bf

sudorule-add-user: allow to reference users and groups from trusted domains directly

Alexander Bokovoy • 5 years ago

054a068

idviews: add extended validator for users from trusted domains

Alexander Bokovoy • 5 years ago

a3563d1

baseldap: when adding external objects, differentiate between them and failures

Alexander Bokovoy • 5 years ago

ffc2edf

baseldap: refactor validator support in add_external_pre_callback

Alexander Bokovoy • 5 years ago

132d7fb

Add design document for using AD users/groups in SUDO rules

Alexander Bokovoy • 5 years ago

16b30cb

ipatests: test that trailing/leading whitespaces in passwords are allowed

Antonio Torres Moríñigo • 5 years ago

3f3762e

Allow leading/trailing whitespaces in passwords

Antonio Torres Moríñigo • 5 years ago

89eba7d

ipatests: fix expected output for ipahealthcheck.ipa.files

Florence Blanc-Renaud • 5 years ago

dc2a52a

use a constant instead of /var/lib/sss/keytabs

Alexander Bokovoy • 5 years ago

9f63afb

trust-fetch-domains: use custom krb5.conf overlay for all trust operations

Alexander Bokovoy • 5 years ago

c842d4b

Update ipa_sam.c

JoeDrane • 5 years ago

b535924

ipatests: use fully qualified name for AD admin when establishing trust

Sergey Orlov • 5 years ago

dc16c24

ipaserver/dcerpc: store forest topology as a blob in ipasam

Alexander Bokovoy • 5 years ago

3d706b6

ipasam: derive parent domain for subdomains automatically

Alexander Bokovoy • 5 years ago

f103172

ipasam: free trusted domain context on failure

Alexander Bokovoy • 5 years ago

e8f927d

ipasam: allow search of users by user principal name (UPN)

Alexander Bokovoy • 5 years ago

2e8eb0f

ipasam: implement PASSDB getgrnam call

Alexander Bokovoy • 5 years ago

962052a

ipa-kdb: provide correct logon time in MS-PAC from authentication time

Alexander Bokovoy • 5 years ago

f8bf374

ipatests: test_ipahealthcheck: fix units

François Cami • 5 years ago

34add4a

ipatests: test the cgroup v2 memory restrictions

Rob Crittenden • 5 years ago

85d944c

Add support for cgroup v2 to the installer memory checker

Rob Crittenden • 5 years ago

1dd4501

ipatests: fix healthcheck test for ipahealthcheck.ds.encryption

Florence Blanc-Renaud • 5 years ago

2a20791

Check that IPA cert is added to trust store after server install

Antonio Torres • 5 years ago

2715fbd

Test that IPA certs are removed on server uninstall

Antonio Torres • 5 years ago

2a86a93

ipatests: Raise log level of 389-ds replication

Stanislav Levin • 5 years ago

41a9cc6

Add ccache sweeper files to gitignore

Christian Heimes • 5 years ago

56b8497

ipatests: fix expected errmsg in TestTrust::test_ipa_commands_run_as_aduser

Florence Blanc-Renaud • 5 years ago

bd3bad8

ipatests: Update PR-CI definitions for ipa-4-9

Armando Neto • 5 years ago

ccdecaa

ipa-rmkeytab: Check return value of krb5_kt_(start|end)_seq_get

Rob Crittenden • 5 years ago

7b38096

ipa-rmkeytab: convert numeric return values to #defines

Rob Crittenden • 5 years ago

06ffc7a

ipa_pwd: Remove unnecessary conditional

Rob Crittenden • 5 years ago

f6cfbff

ipa_kdb: Fix memory leak

Rob Crittenden • 5 years ago

df0c2d7

ipa-kdb: Fix logic to prevent NULL pointer dereference

Rob Crittenden • 5 years ago

93f8840

ipa-kdb: Change mspac base RID logic from OR to AND

Rob Crittenden • 5 years ago

f0de557

Add missing break statement to password quality switch

Rob Crittenden • 5 years ago

ec4511e

Revert "Remove test for minimum ACME support and rely on package deps"

Rob Crittenden • 5 years ago

3aeb9b8

ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection

Florence Blanc-Renaud • 5 years ago

0db2896

ipatests: See if nologin supports -c before asserting message

Rob Crittenden • 5 years ago

ca9f8d1

ipaserver/dcerpc.py: enforce SMB encryption on LSA pipe if available

Alexander Bokovoy • 5 years ago

3fa07a1

ipaserver/dcerpc.py: use Kerberos authentication for discovery

Alexander Bokovoy • 5 years ago

8ab9bf6

ipaserver/dcerpc: use Samba-provided trust helper to establish trust

Alexander Bokovoy • 5 years ago

753246f

Set client keytab location for 389ds

Robbie Harwood • 5 years ago

df411f0

ipatests: test that modifying a permission attrs handles failure

Rob Crittenden • 5 years ago

bdc383a

Remove virtual attributes before rolling back a permission

Rob Crittenden • 5 years ago

9ae7442

selinux: modify policy to allow one-way trust

Florence Blanc-Renaud • 5 years ago

952b6bd

Remove invalid test case for DNS SRV priority

Rob Crittenden • 5 years ago

071b712

ipatests: add test_ipa_cert_fix to the nightly definitions

Florence Blanc-Renaud • 5 years ago

7f2be8a

ipa-cert-fix: do not fail when CSR is missing from CS.cfg

Florence Blanc-Renaud • 5 years ago

eb711f7

ipatests: add a test for ipa-cert-fix

Florence Blanc-Renaud • 5 years ago

f36e518

ipatests: do not set dns_lookup to true

Sergey Orlov • 5 years ago

8d7697a

ipatests: test that no errors are reported after ipa-certupdate

Rob Crittenden • 5 years ago

ad1764a

Don't change the CA profile when modifying request in ipa_certupdate

Rob Crittenden • 5 years ago

10ba43a

ipatests: clear initgroups cache in clear_sssd_cache

Florence Blanc-Renaud • 5 years ago

286d068

ipatests: Test for IPATrustControllerPrincipalCheck

Sudhir Menon • 5 years ago

2035ba9

ipatests: ipahealthcheck remove test skipped in pytest run

Sudhir Menon • 5 years ago

27cc011

ipatests: remove test_acme from gating

Florence Blanc-Renaud • 5 years ago

dd1b596

ipatests: fix expected error message in test_commands

Florence Blanc-Renaud • 5 years ago

8bc3418

ipatests: fix race condition in finalizer of encrypted backup test

Alexander Bokovoy • 5 years ago

6fe573b

ipaplatform: add constant for systemd-run binary

Alexander Bokovoy • 5 years ago

8c7d1fb

Get back to git snapshots

Alexander Bokovoy • 5 years ago

0fd4a89

Become FreeIPA 4.9.0

Alexander Bokovoy • 5 years ago

44914cf

Update translation files

Weblate • 5 years ago

1354031

Update list of contributors

Alexander Bokovoy • 5 years ago

a3058d5

odsexporterinstance: use late binding for UID/GID resolution

Alexander Bokovoy • 5 years ago

eca2281

dnskeysyncinstance: use late binding for UID/GID resolution

Alexander Bokovoy • 5 years ago

eae9f0d

opendnssecinstance: use late binding for UID/GID resolution

Alexander Bokovoy • 5 years ago

eb42b10

tests_webui: fix wrong user name key for trail space case

Alexander Bokovoy • 5 years ago

7d13d70

tests_webui: flip leading and trailing space password test

Alexander Bokovoy • 5 years ago

d9bdd3e

set SELinux back to Permissive in gating.xml

François Cami • 5 years ago

6f8e488

Use uglifyjs on CentOS too

Carl George • 5 years ago

2244a7a

set SELinux to Enforcing in gating.xml

François Cami • 5 years ago

0b3f871

selinux: Fix/waive issues reported by SELint

Vit Mojzis • 5 years ago

e2f9912

Update IPA translation template before release

Alexander Bokovoy • 5 years ago

4db85be

Update po/zh_CN translation before release

Alexander Bokovoy • 5 years ago

6c58f82

Update po/uk translation before release

Alexander Bokovoy • 5 years ago

bdb759a

Update po/tr translation before release

Alexander Bokovoy • 5 years ago

29f797d

Update po/tg translation before release

Alexander Bokovoy • 5 years ago

1bf4b41

Update po/sk translation before release

Alexander Bokovoy • 5 years ago

badd955

Update po/ru translation before release

Alexander Bokovoy • 5 years ago

ad37d39

Update po/pt translation before release

Alexander Bokovoy • 5 years ago

acd2f30

Update po/pt_BR translation before release

Alexander Bokovoy • 5 years ago

970c405

Update po/pl translation before release

Alexander Bokovoy • 5 years ago

9ed9eb7

Update po/pa translation before release

Alexander Bokovoy • 5 years ago

4bf0a13

Update po/nl translation before release

Alexander Bokovoy • 5 years ago

5ea6048

Update po/mr translation before release

Alexander Bokovoy • 5 years ago

58d2017

Update po/kn translation before release

Alexander Bokovoy • 5 years ago

162aa65

Update po/ja translation before release

Alexander Bokovoy • 5 years ago

12de97f

Update po/id translation before release

Alexander Bokovoy • 5 years ago

036c967

Update po/hu translation before release

Alexander Bokovoy • 5 years ago

9d4d4d2

Update po/hi translation before release

Alexander Bokovoy • 5 years ago

fa4ac63

Update po/fr translation before release

Alexander Bokovoy • 5 years ago

33f4e65

Update po/eu translation before release

Alexander Bokovoy • 5 years ago

0b02b05

Update po/es translation before release

Alexander Bokovoy • 5 years ago

03cf8ff

Update po/en_GB translation before release

Alexander Bokovoy • 5 years ago

09f97d2

Update po/de translation before release

Alexander Bokovoy • 5 years ago

9c166cf

Update po/cs translation before release

Alexander Bokovoy • 5 years ago

7b63b5b

Update po/ca translation before release

Alexander Bokovoy • 5 years ago

57b41e0

Update po/bn_IN translation before release

Alexander Bokovoy • 5 years ago

8f6b4a0

Change mkdir logic in DNSSEC

Christian Heimes • 5 years ago

f3a1b4a

ipa-kdb: handle dates up to 2106-02-07 06:28:16

Slava Aseev • 5 years ago

18721cc

ipaplatform: Use gpg instead of gpg2

Timo Aaltonen • 5 years ago

b46fa4e

Debian: Fix chrony service name

Timo Aaltonen • 5 years ago

efe767c

Debian: Fix paths and service names for bind 9.16

Timo Aaltonen • 5 years ago

38cb763

upgrade: ensure service state is synchronized with the server state

Alexander Bokovoy • 5 years ago

56c8b17

upgrade: do not overshadow service module in upgrade_configuration

Alexander Bokovoy • 5 years ago

59432e9

service: handle empty list of services to update their state

Alexander Bokovoy • 5 years ago

06fbb8b

ipa-kdb: use predefined filters for a wild-card searches

Alexander Bokovoy • 5 years ago

2d1594c

ipa-client-install: unilaterally set dns_lookup_kdc to True

François Cami • 5 years ago

352f2be

ipatests: make sure dns_lookup_kdc is always true

François Cami • 5 years ago

3c965a0

Fix spelling mistake: filen ame -> filename

Alexander Scheel • 5 years ago

2efc44d

Modified YAML files

Sudhir Menon • 5 years ago

184fa80

ipatests: Test for IPATrustDomainsCheck with external trust to AD

Sudhir Menon • 5 years ago

d41bfea

Back to git snapshots

Alexander Bokovoy • 5 years ago

f5cd9d0

Become FreeIPA 4.9.0rc3

Alexander Bokovoy • 5 years ago

502d291

ipatests: add test for PKI subsystem detection

Florence Blanc-Renaud • 5 years ago

24f6a36

Improve PKI subsystem detection

Florence Blanc-Renaud • 5 years ago

cf30cc3

systemd: enforce en_US.UTF-8 locale in systemd units

Alexander Bokovoy • 5 years ago

184997e

upgrade: provide DOMAIN to the server upgrade dictionary

Alexander Bokovoy • 5 years ago

cc51feb

Allow mod_auth_gssapi to create and access ccaches in /run/ipa/ccaches

Alexander Bokovoy • 5 years ago

7d1a688

xmlrpctests: remove harcoded expiration date from test_user_plugin

Florence Blanc-Renaud • 5 years ago

f2bc3f1

Correct SELinux policy requirements

Alexander Bokovoy • 5 years ago

0cb8f06

Back to git snapshots

Alexander Bokovoy • 5 years ago

7767407

Become FreeIPA 4.9.0rc2

Alexander Bokovoy • 5 years ago

e74d640

Update contributors

Alexander Bokovoy • 5 years ago

5f36ee5

Skip the ACME mod_md test when the client is in enforcing mode

Rob Crittenden • 5 years ago

2d576d5

Increase timeout for krbtpolicy to 4800

Rob Crittenden • 5 years ago

28ed75c

Enable the ccache sweep systemd timer

Rob Crittenden • 5 years ago

068d085

ipatests: test that stale caches are removed using the sweeper

Rob Crittenden • 5 years ago

22fa1a7

Generate a unique cache for each connection

Rob Crittenden • 5 years ago

51b186b

Convert reset_to_default_policy into a pytest fixture

Rob Crittenden • 5 years ago

848dffb

VERSION: back to git snapshots

Rob Crittenden • 5 years ago

2e1cbcb

freeipa.spec.in: unify spec files across upstream RHEL, and Fedora

Alexander Bokovoy • 5 years ago

4b56a4c

ipatests: fix TestTrust::test_subordinate_suffix

Florence Blanc-Renaud • 5 years ago

bf1d652

ipatests: Test that ipa-ca.$domain can retrieve CRLs without redirect

Rob Crittenden • 5 years ago

b478bf9

Allow Apache to answer to ipa-ca requests without a redirect

Rob Crittenden • 5 years ago

4ba6a03

Move where the restore state is marked during IPA server upgrade

Rob Crittenden • 5 years ago

20055dd

Reorder when ACME is enabled to fix failure on upgrade

Rob Crittenden • 5 years ago

ea67962

Remove test for minimum ACME support and rely on package deps

Rob Crittenden • 5 years ago

0d6caf5

Require PKI 10.10+ for KRA profile and ACME support

Rob Crittenden • 5 years ago

3e530e9

Test that the KRA profiles can renewal its three certificates

Rob Crittenden • 5 years ago

bd4771d

Change KRA profiles in certmonger tracking so they can renew

Rob Crittenden • 5 years ago

a9e1c01

Accept 389-ds JSON replication status messages

Mark Reynolds • 5 years ago

826dccc

Always define the path DNSSEC_OPENSSL_CONF

Florence Blanc-Renaud • 5 years ago

06a7db1

ipa-client-install manpage: add ipa.p11-kit to list of files created

Antonio Torres Moríñigo • 5 years ago

08bbd0a

ad trust: accept subordinate domains of the forest trust root

Alexander Bokovoy • 5 years ago

381cc5e

ipatests: support subordinate upn suffixes

Sudhir Menon • 5 years ago

7e605e9

Fix krbtpolicy tests

Robbie Harwood • 5 years ago

17a4198

ipatests: Bump PR-CI templates

Armando Neto • 5 years ago

a3c5c71

ipatests: Increase timeout for ACME in gating.yaml

Rob Crittenden • 5 years ago

17f293e

ipatests: honor class inheritance in TestACMEwithExternalCA

Rob Crittenden • 5 years ago

75ad575

ipatests: configure MDStoreDir for mod_md ACME test

Rob Crittenden • 5 years ago

b474b26

ipatests: Clean up existing ACME registration and certs

Rob Crittenden • 5 years ago

5d286e7

ipatests: Configure a replica in TestACMEwithExternalCA

Rob Crittenden • 5 years ago

de5baf8

ipatests: call the CALess install method to generate the CA

Rob Crittenden • 5 years ago

3cd6b81

ipatests: Test that Match ProxyCommand masks on no shell exec

Rob Crittenden • 5 years ago

d89e3ab

Create IPA ssh client configuration and move ProxyCommand

Rob Crittenden • 5 years ago

a525b2e

ipatests: Tests for ipahealthcheck.ds.nss_ssl

Sudhir Menon • 5 years ago

46f114d

util: Fix client-only build

Alexander Bokovoy • 5 years ago

244704c

ipatests: Test that ipa-certupdate can run without credentials

Rob Crittenden • 5 years ago

4941d3d

Use host keytab to obtain credentials needed for ipa-certupdate

Rob Crittenden • 5 years ago

1a09ce9

ipatests: Test certmonger IPA responder switched to JSONRPC

Mohammad Rizwan • 5 years ago

25eebb2

freeipa

Source Code

Commits 15623