Roadmap - freeipa - Pagure.io

#8324 Bug API spec for object "dnsserver" defines method "add", but there is no command "dnsserver_add"

8

Opened 4 years ago by schlitzered. Modified 4 years ago

community Future Releases minor

#8320 Feature: pagination

6

Opened 4 years ago by schlitzered. Modified 4 years ago

Future Releases

#8069 RFE: Export and Import LDIF functionality in the UI

Opened 4 years ago by rcritten. Modified 4 years ago

Future Releases

#7919 Allow installations on low-performance systems

2

Opened 5 years ago by cheimes. Modified 5 years ago

Future Releases minor

#7899 Print or log certificate metadata after installation

Opened 5 years ago by cheimes. Modified 5 years ago

Future Releases low

#7479 FreeIPA web frontend: Requests to / should not redirect to hard-coded domain

16

Opened 6 years ago by bittner. Modified 4 years ago

Future Releases low

#7392 [RFE] Support for Certification Authority Authorization (CAA) DNS Resource Record

3

Opened 6 years ago by rcritten. Modified 3 years ago

Future Releases

#7368 ipa migrate-ds converts groupofuniquenames objects to groupofnames, but leaves groupofuniquenames objectclass present

1

Opened 6 years ago by rcritten. Modified 2 years ago

Future Releases

#7320 [RFE] investigate how to handle potential race conditions on low-rate created objects indexed by CN

Opened 6 years ago by abbra. Modified 6 years ago

Future Releases normal

#7297 Feature/enhance Sudo options should be more like Sudo Commands in the UI

1

Opened 6 years ago by accidentallythecable. Modified 6 years ago

rfe Future Releases normal

#7259 [RFE] Allow AD users and admins logged on IPA to have different roles

Opened 6 years ago by frenaud. Modified 6 years ago

Future Releases

#7256 [RFE] user-friendly way to disable weak or deprecated ciphers

1

Opened 6 years ago by pvoborni. Modified 6 years ago

ux Future Releases

#7199 [RFE] Central report that will show who can access which systems (attestation)

Opened 6 years ago by pvoborni. Modified 2 years ago

Future Releases

#7194 [RFE] IDM to support a floating IP/alias with Openstack

Opened 6 years ago by pvoborni. Modified 6 years ago

Future Releases

#7192 [RFE] - Automatically turn all masters into trust agents when a new trust is established.

Opened 6 years ago by pvoborni. Modified 6 years ago

Future Releases normal

#7191 [RFE] it could be nice to have a way to clean dns zones and records of deleted records references.

Opened 6 years ago by pvoborni. Modified 6 years ago

Future Releases

#7114 [RFE] Allow for more flexible password policies

1

Opened 6 years ago by dpal. Modified 6 years ago

Future Releases

#7094 [RFE] WebUI: Ability to export data to various formats from table view

1

Opened 6 years ago by pvomacka. Modified 6 years ago

webui rfe Future Releases

#7090 [RFE] Migration capabilities between non-FIPS IDM to FIPS IDM

Opened 6 years ago by pvoborni. Modified 6 years ago

Future Releases

#7080 Restrict access to ipa-custodia

Opened 6 years ago by cheimes. Modified 6 years ago

Future Releases

#7061 ipa should check if plugins it uses are enabled

1

Opened 6 years ago by lkrispen. Modified 5 years ago

healthcheck Future Releases

#7059 [RFE] Collapse DNS records or each host by default in list view

Opened 6 years ago by tduehr. Modified 6 years ago

Future Releases

#7056 [test] ipa whoami command with AD user

Opened 6 years ago by tdudlak. Modified 6 years ago

tests Future Releases

#7025 Associate krbtgt/ and K/M principals with default Kerberos ticket policy

Opened 7 years ago by abbra. Modified 6 years ago

Future Releases

#7019 RFE: scavenge stale dynamically updated DNS records

Opened 7 years ago by tkrizek. Modified 7 years ago

Future Releases

#6997 Investigate SPIFFE SVID support

1

Opened 7 years ago by cheimes. Modified 6 years ago

Future Releases

#6933 [RFE] "ipa-client-install --uninstall" should remove all references to previous domain membership

Opened 7 years ago by pvoborni. Modified 7 years ago

Future Releases

#6929 password history based on age, not count

3

Opened 7 years ago by phemmer. Modified 7 years ago

tracker Future Releases

#6893 ipa-custodia: recover from missing keys

8

Opened 7 years ago by cheimes. Modified 6 years ago

Future Releases

#6882 [RFE] Add granularity to ipa-compat-manage

3

Opened 7 years ago by pvoborni. Modified 7 years ago

Future Releases

#6871 [RFE] [webui] allow to set language preference for particular user

Opened 7 years ago by pvoborni. Modified 7 years ago

webui rfe Future Releases

#6870 [RFE] Enrollment of client for "bring your own device" BYOD

1

Opened 7 years ago by pvoborni. Modified 5 years ago

rfe Future Releases

#6868 Unused virtual operation 'request certificate different host'

3

Opened 7 years ago by cheimes. Modified 6 years ago

Future Releases

#6855 IPA should give notification before certificates are going to expire

1

Opened 7 years ago by pvoborni. Modified 5 years ago

healthcheck Future Releases

#6847 ipa_repl_version hard coded data version and "Incompatible IPA versions, pausing replication. "

4

Opened 7 years ago by msauton. Modified 7 years ago

Future Releases

#6720 Enable users to find out what the Kerberos ticket policy defaults are

Opened 7 years ago by pvoborni. Modified 7 years ago

Future Releases

#6719 [RFE] Restrain 2FA user only to OTP self-service

Opened 7 years ago by pvoborni. Modified 7 years ago

Future Releases

#6693 Improve performance of ipalib.util.json_serialize and __json__ methods

Opened 7 years ago by cheimes. Modified 7 years ago

Future Releases low

#6691 LDAP schema cache assumes persistent state between requests

1

Opened 7 years ago by cheimes. Modified 7 years ago

Future Releases normal

#6683 Unable to issue certificate for admin using cert-request

3

Opened 7 years ago by pvomacka. Modified 5 years ago

Future Releases normal

#6672 [RFE] failed ipa-server-certinstall should be able to roll back to a working PKI setup

Opened 7 years ago by mbabinsk. Modified 7 years ago

Future Releases normal

#6662 Remove the code duplication form the legacy client CI tests

Opened 7 years ago by mbabinsk. Modified 7 years ago

tests Future Releases normal

#6658 [TESTS] in_tree API mode should be used only when running tests from source tree

Opened 7 years ago by mbabinsk. Modified 7 years ago

tests Future Releases normal

#6653 Prepare all scripts for pkg_resources entry points

2

Opened 7 years ago by cheimes. Modified 7 years ago

Future Releases normal

#6651 [vault] improve performance

7

Opened 7 years ago by cheimes. Modified 6 years ago

integration Future Releases low

#6632 [RFE] Support U2F authentication workflow

7

Opened 7 years ago by mkosek. Modified 4 years ago

Future Releases normal

#6595 ipa-ca-install cannot be re-run if failed and requires full uninstallation

1

Opened 7 years ago by pvoborni. Modified 5 years ago

Future Releases normal

#6557 do not set (or look up) subject_base in sysupgrade file

1

Opened 7 years ago by ftweedal. Modified 7 years ago

Future Releases low

#6556 do not update ipaCertificateSubjectBase and certmap.conf in CA-less mode

1

Opened 7 years ago by ftweedal. Modified 7 years ago

Future Releases normal

#6553 WebUI: Add unique ID to each RPC call

Opened 7 years ago by pvomacka. Modified 7 years ago

webui Future Releases normal

#6552 Refactor vault commands to be more extensible and maintainable

Opened 7 years ago by pvoborni. Modified 7 years ago

Future Releases normal

#6544 The ipa_session cookie cache should be bound to the kerberos ticket

Opened 7 years ago by simo. Modified 7 years ago

Future Releases normal

#6516 [RFE] Remove dns record from reverse when removing from zone map (ipa dnsrecord-del)

Opened 7 years ago by pvoborni. Modified 5 years ago

Future Releases normal

#6502 SchemaPlugin does not implement __eq__ and __hash__

1

Opened 7 years ago by cheimes. Modified 7 years ago

Future Releases low

#6501 Create a white-list of entries that can be accessible by anonymous ldapsearch

2

Opened 7 years ago by mbasti. Modified 7 years ago

Future Releases normal

#6453 ipa user-add doesn't set ipaNTHash attribute

1

Opened 7 years ago by candlerb. Modified 7 years ago

Future Releases normal

#6449 Unify/fix work with Env variables in IPA

Opened 7 years ago by mbasti. Modified 7 years ago

Future Releases normal

#6427 cert-request: only check userCertificate write permission if write would be attempted

Opened 7 years ago by ftweedal. Modified 7 years ago

Future Releases low

#6426 Extend CA ACLs to encompass issuance of certs for "external" subjects

Opened 7 years ago by ftweedal. Modified 7 years ago

Future Releases normal

#6425 Extend CA ACLs to allow external principals as operator or subject

Opened 7 years ago by ftweedal. Modified 3 years ago

rfe Future Releases normal

#6424 Extend CA ACLs to encompass operator authorisation

Opened 7 years ago by ftweedal. Modified 3 years ago

rfe Future Releases normal

#6407 [RFE] support Nitrokey stick devices for OTP management

Opened 7 years ago by abbra. Modified 7 years ago

Future Releases normal

#6383 Don't do limited internal searches

3

Opened 7 years ago by stlaz. Modified 6 years ago

Future Releases normal

#6360 ipa migrate-ds does not rename uniquemember/member attributes properly

3

Opened 7 years ago by frenaud. Modified 2 years ago

Future Releases normal

#6356 [RFE] IPA CA issues certificates for non-IPA users

Opened 7 years ago by pvoborni. Modified 7 years ago

Future Releases normal

#6345 [RFE] Add support for IDNA2008 (and transitional versions) to DNS plugin

2

Opened 7 years ago by mbasti. Modified 7 years ago

Future Releases normal

#6325 user/group-find ignores when any of default search attr are removed from config

1

Opened 7 years ago by mbasti. Modified 7 years ago

Future Releases normal

#6292 Refactor the initialization of ipalib.Parameter

1

Opened 7 years ago by mbabinsk. Modified 7 years ago

Future Releases normal

#6252 Multiple uids based onnUPN in compat tree should be configurable

1

Opened 7 years ago by simo. Modified 7 years ago

Future Releases normal

#6219 Make cainstance.__spawn_instance() finish more gracefully for external CAs

4

Opened 7 years ago by stlaz. Modified 5 years ago

Future Releases normal

#6208 [RFE] Addition of email attribute to IDM LDAP compat tree

2

Opened 7 years ago by pvoborni. Modified 6 years ago

Future Releases normal

#6181 [RFE] Add option to ipa-server-install, ipa-replica-install, and ipa-client-install to just parse and dump the options

4

Opened 7 years ago by adelton. Modified 5 years ago

Future Releases low

#6179 [RFE] Delegated Administration in IPA‏

1

Opened 7 years ago by ddimri. Modified 7 years ago

Future Releases normal

#6156 Version checks in replica prepare/install is too strict

2

Opened 7 years ago by simo. Modified 7 years ago

Future Releases normal

#6038 [RFE] Allow delegation of management of services

Opened 7 years ago by abbra. Modified 7 years ago

Future Releases normal

#5994 [RFE] Support one-time sessions

Opened 8 years ago by pvoborni. Modified 7 years ago

Future Releases normal

#5993 [RFE] Support limited User life time

1

Opened 8 years ago by pvoborni. Modified 7 years ago

Future Releases normal

#5992 [RFE] WinSync: Filter AD users

Opened 8 years ago by pvoborni. Modified 7 years ago

Future Releases normal

#5971 Make it possible to enforce unique email addresses across (active) users

2

Opened 8 years ago by adelton. Modified 7 years ago

Future Releases normal

#5970 [RFE] Topology: configure a list of replicated attributes

Opened 8 years ago by mkosek. Modified 7 years ago

Future Releases normal

#5953 [RFE] change server roles from UI

Opened 8 years ago by pvoborni. Modified 7 years ago

Future Releases normal

#5933 CA installation detection differences

1

Opened 8 years ago by rcritten. Modified 7 years ago

Future Releases normal

#5930 if X.X.in-addr.arpa. is chosen @install then IPA will still later create X.X.X.in-addr.arpa.

1

Opened 8 years ago by lejeczek. Modified 7 years ago

Future Releases normal

#5876 [RFE] Group management delegation

1

Opened 8 years ago by simo. Modified 7 years ago

Future Releases normal

#5863 [RFE] Do not overwrite user modifications on each upgrade

2

Opened 8 years ago by mbasti. Modified 7 years ago

Future Releases normal

#5853 Deleting automember default group breaks adding new entries

3

Opened 8 years ago by fskola. Modified 5 years ago

Future Releases normal

#5844 ipa-replica-manage should log debug information to stderr as other commands do (with option -v)

1

Opened 8 years ago by mbasti. Modified 5 years ago

Future Releases normal

#5836 Lightweight CAs: allow profile to specify a default CA

1

Opened 8 years ago by ftweedal. Modified 7 years ago

Future Releases normal

#5805 Reinstalling of the DNS subsystem tries to put localhost as forwarder

3

Opened 8 years ago by mbasti. Modified 5 years ago

Future Releases normal

#5793 [RFE] In IPA-AD trust environment, add an option to filter AD groups at the level of a trust boundary

3

Opened 8 years ago by pvoborni. Modified 7 years ago

Future Releases normal

#5770 [RFE] do not stop all IPA services in ipactl if non-fatal doesn't start

3

Opened 8 years ago by pvoborni. Modified 7 years ago

Future Releases normal

#5763 IPA does not provide a method for creating new users with a non-expired password

1

Opened 8 years ago by pvoborni. Modified 7 years ago

Future Releases normal

#5753 RFE: enhance CA ACLs to use service groups

Opened 8 years ago by ftweedal. Modified 6 years ago

Future Releases normal

#5752 [RFE] UI for user ipaKrbAuthzData attribute

1

Opened 8 years ago by pvoborni. Modified 7 years ago

Future Releases normal

#5730 Client-side DNS discovery improvements

1

Opened 8 years ago by mbabinsk. Modified 7 years ago

Future Releases normal

#5727 remove unused ipareplica-ca-install.log

5

Opened 8 years ago by mbasti. Modified 7 years ago

Future Releases normal

#5724 store IPA logs in one directory /var/log/ipa

6

Opened 8 years ago by mbasti. Modified 5 years ago

Future Releases normal

#5719 host plugin: detection of domain/zone may not work correctly for all cases

2

Opened 8 years ago by mbasti. Modified 7 years ago

Future Releases normal

#5716 return warning instead of "non-fatal" error

1

Opened 8 years ago by mbasti. Modified 7 years ago

Future Releases normal

#5698 [RFE] client: allow to change server discovery

1

Opened 8 years ago by pvoborni. Modified 5 years ago

Future Releases normal

#5610 [Web UI] Topology Graph shows redundant Add button

1

Opened 8 years ago by mkosek. Modified 7 years ago

Future Releases low

#5569 [RFE] Support Read-Only Replicas

3

Opened 8 years ago by pvoborni. Modified 4 years ago

Future Releases normal

#5514 [RFE] Add rules for tlog terminal capture on clients

Opened 8 years ago by mkosek. Modified 7 years ago

Future Releases normal

#5494 [RFE] Add scripts to convert autofs/sudo records in file or ldif format in IPA CLI format

1

Opened 8 years ago by pvoborni. Modified 7 years ago

Future Releases normal

#5465 Fix IP address validation

6

Opened 8 years ago by pspacek. Modified 5 years ago

Future Releases normal

#5431 [RFE] Option to acquire publicly trusted HTTP/LDAP certs from Let's Encrypt

6

Opened 8 years ago by ftweedal. Modified 7 years ago

Future Releases normal

#5350 [RFE] Add simplified UX for declaring a user-group to be administrators of a hostgroup

24

Opened 8 years ago by sgallagh. Modified 6 years ago

Future Releases normal

#5332 sudo: add support for cn=defaults directly in UI

2

Opened 8 years ago by pbrezina. Modified 7 years ago

Future Releases normal

#5317 IPA setup using pre-existing upstream signed CA certs

Opened 8 years ago by jamesmasson. Modified 7 years ago

Future Releases normal

#5304 Make User category sidebar collapsable

3

Opened 8 years ago by adelton. Modified 7 years ago

Future Releases low

#5303 Document that plugins don't raise exception in all errors cases

2

Opened 8 years ago by cheimes. Modified 5 years ago

documentation Future Releases minor

#5301 [RFE] long running task support

2

Opened 8 years ago by pvoborni. Modified 5 years ago

Future Releases normal

#5238 [RFE] Improve UX of importing CA cert for non-ipa clients

1

Opened 8 years ago by dpal. Modified 7 years ago

Future Releases low

#5224 [RFE] IPA ecosystem should provide a signing service

Opened 8 years ago by dpal. Modified 7 years ago

Future Releases normal

#5152 RFE: Should be able to install and configure ipa-server during installation using kickstart

1

Opened 8 years ago by pvoborni. Modified 5 years ago

Future Releases normal

#5048 webui: support topologysegment-reinitialize

4

Opened 9 years ago by pvoborni. Modified 5 years ago

webui Future Releases minor

#4978 Customized ID views in compat tree don't trigger

4

Opened 9 years ago by coffmant. Modified 7 years ago

Future Releases low

#4917 [RFE] Support trust with Kerberos realm

1

Opened 9 years ago by mkosek. Modified 7 years ago

Future Releases normal

#4913 ACIs in FreeIPA should support alias names for attribute's access too

4

Opened 9 years ago by abbra. Modified 7 years ago

Future Releases normal

#4856 The installer should support defaults file and both --no* and --enable* forms for all boolean options

2

Opened 9 years ago by adelton. Modified 7 years ago

Future Releases normal

#4715 [RFE] Review and improve migration experience

Opened 9 years ago by pvoborni. Modified 7 years ago

Future Releases normal

#4599 Point to hardening steps if IPA server is installed on public network

Opened 9 years ago by pspacek. Modified 7 years ago

Future Releases normal

#4598 backend cannot use other backends during startup

2

Opened 9 years ago by edewata. Modified 7 years ago

Future Releases low

#4595 [RFE] Support Token Sync during kinit

2

Opened 9 years ago by npmccallum. Modified 7 years ago

Future Releases normal

#4581 Testable help text

2

Opened 9 years ago by pspacek. Modified 7 years ago

Future Releases normal

#4568 [RFE] Allow services to be created at host provisioning

18

Opened 9 years ago by dpal. Modified 6 years ago

Future Releases normal

#4545 [RFE] Create a tool to migrate machines from a direct integration setup to the indirect one

4

Opened 9 years ago by dpal. Modified 7 years ago

Future Releases normal

#4542 [RFE] Global admin email for DNS zones

1

Opened 9 years ago by mbasti. Modified 7 years ago

Future Releases normal

#4510 [RFE] Allow and manage multiple passwords (ideally, full 'application specific password' model)

16

Opened 9 years ago by adamwill. Modified a year ago

Future Releases normal

#4500 [RFE] Add remote logging for IPA/IDM and have the ability to compress logs once they are rotated out.

2

Opened 9 years ago by dpal. Modified 7 years ago

Future Releases normal

#4443 [RFE] Prevent replication-set-wide OTP replay attacks

2

Opened 9 years ago by npmccallum. Modified 7 years ago

Future Releases normal

#4406 Display empty field in required multivalued widget by default

1

Opened 10 years ago by pvoborni. Modified 7 years ago

Future Releases low

#4374 Review pending operation after expired session

4

Opened 10 years ago by pvoborni. Modified 7 years ago

Future Releases normal

#4335 ipa dnszone-add --name-from-ip= doesn't work for classless netmasks

1

Opened 10 years ago by pspacek. Modified 7 years ago

Future Releases normal

#4321 [RFE] Clone sudo and hbac rules

6

Opened 10 years ago by sakodak. Modified 5 years ago

Future Releases normal

#4272 [RFE] Host password should have configurable minumum and maximum lifetime

5

Opened 10 years ago by stdweird. Modified 7 years ago

Future Releases normal

#4199 [RFE] IPA plugins need to handle the new dynamic restart functionality in DS

1

Opened 10 years ago by mreynolds. Modified 7 years ago

Future Releases normal

#4198 [RFE] During an idm migrate-ds from LDAP server record dup accounts in a file

Opened 10 years ago by dpal. Modified 7 years ago

Future Releases normal

#4129 [RFE] Smarter UI for batch actions

Opened 10 years ago by pvoborni. Modified 7 years ago

Future Releases low

#4061 [RFE] Try to use Kerberos for AD Administrator establishing trusts.

1

Opened 10 years ago by simo. Modified 7 years ago

Future Releases normal

#4035 [RFE] ACI audit tool

3

Opened 10 years ago by pviktori. Modified 7 years ago

Future Releases normal

#4007 [RFE] Multihomed IPA client should register all IP address & hostname in IPA server

11

Opened 10 years ago by dpal. Modified 4 years ago

Future Releases normal

#3976 Forbid mixing Trusts and Winsync solutions

Opened 10 years ago by mkosek. Modified 7 years ago

Future Releases normal

#3929 Mask unsupported SASL mechanisms

5

Opened 10 years ago by simo. Modified 7 years ago

Future Releases normal

#3916 Add tests for migration from remote DS

3

Opened 10 years ago by mkosek. Modified 7 years ago

Future Releases normal

#3912 ipa-client-install: error: --server cannot be used without providing --domain

6

Opened 10 years ago by adelton. Modified 3 years ago

Future Releases minor

#3888 [RFE] Allow password migration using PAM passthrough functionality

1

Opened 10 years ago by nkinder. Modified 7 years ago

Future Releases normal

#3887 [RFE] XKCD style passwords

Opened 10 years ago by rcritten. Modified 7 years ago

Future Releases normal

#3828 CIFS denied credentials when establishing trust

7

Opened 10 years ago by mkosek. Modified 5 years ago

healthcheck Future Releases normal

#3822 Don't log Negotiate or cookies

Opened 10 years ago by rcritten. Modified 7 years ago

Future Releases low

#3818 Web UI: Testing page for widgets

3

Opened 10 years ago by akrivoka. Modified 7 years ago

Future Releases normal

#3810 [RFE] Option to disable forms-based login for UI

1

Opened 10 years ago by sbingram. Modified 7 years ago

Future Releases low

#3802 [RFE] Add auditing capabilities

1

Opened 10 years ago by cdsgalaxy. Modified 7 years ago

Future Releases normal

#3751 trust-add command should do a sanity-check for the realm

Opened 11 years ago by tbabej. Modified 7 years ago

Future Releases low

#3709 [RFE] Set default attribute values for migrate-ds command

6

Opened 11 years ago by mkosek. Modified 7 years ago

Future Releases normal

#3702 Web UI: missing refresh after details facet delete action

Opened 11 years ago by pvoborni. Modified 5 years ago

webui bug Future Releases normal

#3694 Initial user password is disregarded in FreeIPA password policy check

9

Opened 11 years ago by yizhangid. Modified 7 years ago

Future Releases normal

#3689 When utility exits with error, it should give as detailed error message as possible

1

Opened 11 years ago by adelton. Modified 7 years ago

Future Releases low

#3656 [RFE] FreeIPA-to-FreeIPA migration

13

Opened 11 years ago by rcritten. Modified a month ago

Future Releases normal

#3553 conflicting mailGroup schema created

4

Opened 11 years ago by rcritten. Modified 5 years ago

Future Releases normal

#3546 [RFE] Add creatorsname as a key to automember group rules

2

Opened 11 years ago by sigbjornl. Modified 7 years ago

Future Releases normal

#3533 ipa-kdb: fill principal of user administratively changing the password

1

Opened 11 years ago by mkosek. Modified 7 years ago

Future Releases normal

#3532 put ipachangeconf into a separate package

1

Opened 11 years ago by jhrozek. Modified 7 years ago

Future Releases low

#3530 alias broken when canonicalization is not requested

1

Opened 11 years ago by simo. Modified 7 years ago

Future Releases normal

#3518 Similar error message for wrong AD domain and wrong AD server

9

Opened 11 years ago by steeve. Modified 7 years ago

Future Releases low

#3516 [RFE] Record host pasword creation timestamp

1

Opened 11 years ago by dpal. Modified 7 years ago

Future Releases normal

#3466 [RFE] Support adding constraints to the IPA CA certificate at install time

Opened 11 years ago by simo. Modified 7 years ago

Future Releases normal

#3451 [RFE] Add UI support for informational and warning messages sent by IPA

1

Opened 11 years ago by mkosek. Modified 7 years ago

Future Releases normal

#3447 [RFE] Please consider enabling TLS_CACERTDIR after ipa-client-install

2

Opened 11 years ago by amessina. Modified 7 years ago

Future Releases minor

#3445 Clean PublicError conversions

1

Opened 11 years ago by mkosek. Modified 7 years ago

Future Releases normal

#3436 [RFE] Web UI services page should show default PAC type

1

Opened 11 years ago by sbose. Modified 7 years ago

Future Releases low

#3337 [RFE] Disable NTLM support entirely in adtrust

7

Opened 11 years ago by simo. Modified 7 years ago

Future Releases normal

#3325 [RFE] [Web UI] Highlight dialog's default button

6

Opened 11 years ago by pvoborni. Modified 7 years ago

Future Releases normal

#3280 [RFE] BIND exposes it's version number to the world by default

Opened 11 years ago by pspacek. Modified 7 years ago

Future Releases low

#3278 [RFE] Expand default HBAC rules to limit ssh access to IPA masters

3

Opened 11 years ago by rcritten. Modified 7 years ago

Future Releases normal

#3272 Installer code should not use LDAPS

14

Opened 11 years ago by pviktori. Modified 4 years ago

Future Releases low

#3269 [RFE] ipa trust-add should check time is in sync between domains

1

Opened 11 years ago by simo. Modified 7 years ago

Future Releases low

#3264 [RFE] Supporting SID compression for extra SIDs

Opened 11 years ago by simo. Modified 7 years ago

Future Releases normal

#3255 [RFE] Make LDAP index upgrade more robust

1

Opened 11 years ago by mkosek. Modified 7 years ago

Future Releases normal

#3251 [RFE] ipa group-add-member allows adding non-existent AD users/groups as external members

1

Opened 11 years ago by dpal. Modified 7 years ago

Future Releases low

#3232 HBAC and SUDO have inconsistent behavior regarding external users

Opened 11 years ago by dpal. Modified 7 years ago

Future Releases normal

#3203 Document PolicyKit sudo configuration

7

Opened 11 years ago by rcritten. Modified 5 years ago

documentation Future Releases low

#3149 [RFE] Introduce an ipa-client-upgrade script

8

Opened 11 years ago by jhrozek. Modified 3 years ago

Future Releases important

#3136 Failure to establish trusts

5

Opened 11 years ago by simo. Modified 7 years ago

Future Releases important

#3096 error when migrating unknown schema

4

Opened 11 years ago by rcritten. Modified 2 years ago

Future Releases normal

#3021 [RFE] Managing group membership need optimization

2

Opened 11 years ago by rcritten. Modified 7 years ago

Future Releases low

#2961 [RFE] Add update metadata to LDAP updater

4

Opened 11 years ago by mkosek. Modified 7 years ago

Future Releases normal

#2921 Support disabled ipaNTHash values in password plugin

Opened 11 years ago by abbra. Modified 7 years ago

Future Releases normal

#2902 [RFE] Fix dcerpc fault handling (rpc excepction) in s3 and s4 rpc servers

Opened 11 years ago by asn. Modified 7 years ago

Future Releases low

#2881 [RFE] Add performance improvements to PAC group filtering

1

Opened 12 years ago by sbose. Modified 7 years ago

Future Releases low

#2863 [RFE] add mailAlternateAddress attribute for email differentiation

4

Opened 12 years ago by sbingram. Modified 7 years ago

Future Releases low

#2715 Improve IPA usability in Amazon EC2 environment

6

Opened 12 years ago by mkosek. Modified 7 years ago

Future Releases low

#2655 [RFE] Add an 'ipa-client-sshkey --refresh' command to allow a host principal to update its SSH public host key

23

Opened 12 years ago by sgallagh. Modified 7 years ago

Future Releases normal

#2465 [RFE] Move IPA content from /usr/share/ipa to instance-specific place in /var/lib/ipa

11

Opened 12 years ago by abbra. Modified 3 years ago

Future Releases normal

#2413 [RFE]: add in UI examples of what is the requested field

1

Opened 12 years ago by mpizzoli. Modified 5 years ago

webui Future Releases low

#2316 [RFE] Add Host "managing services" search and list capabilities

4

Opened 12 years ago by edewata. Modified 7 years ago

Future Releases low

#2266 [RFE] Add IP address and IP network parameter types

3

Opened 12 years ago by jcholast. Modified 7 years ago

Future Releases normal

#2243 convert in-memory keytab in gse code into file based keytab

2

Opened 12 years ago by gd. Modified 7 years ago

Future Releases low

#2187 Getting object-level rights

5

Opened 12 years ago by edewata. Modified 7 years ago

Future Releases low

#2186 Role -tab missing from host group details (UI)

2

Opened 12 years ago by lassizci. Modified 5 years ago

Future Releases low

#2143 [RFE] SELinux user map test tool

9

Opened 12 years ago by rcritten. Modified 7 years ago

Future Releases low

#1690 Remove duplicate association code

2

Opened 12 years ago by edewata. Modified 7 years ago

Future Releases low

#1241 Investigate what we do across subnets?

3

Opened 13 years ago by rcritten. Modified 7 years ago

Future Releases low

#1225 [RFE] Need file upload mechanism

6

Opened 13 years ago by edewata. Modified 7 years ago

Future Releases normal

#8104 RFE: Disable Stale/Inactive Users - Upstream Design Document

2

Opened 4 years ago by fcami. Modified 4 years ago

Future Releases important

#7966 Add support for JSON-RPC in ipa-join

5

Opened 5 years ago by cheimes. Modified 3 years ago

Future Releases

#7788 Majority of gating tests are not part of nightly flows.

2

Opened 5 years ago by ftrivino. Modified 5 years ago

Future Releases normal

#7677 HSM: ipa ca-add fails with error in ipa-pki-retrieve-key

4

Opened 5 years ago by cheimes. Modified a month ago

hsm Future Releases low

#7480 certmonger takes too long to start up

16

Opened 6 years ago by brianjmurrell. Modified 3 years ago

Future Releases low

#7446 `ipactl status` returns "named" but IPA DNS service is actually "named-pkcs11"

7

Opened 6 years ago by fbarreto. Modified 5 years ago

Future Releases

#7323 IPv6 hack for Travis CI

8

Opened 6 years ago by cheimes. Modified 4 years ago

Future Releases

#7307 RFE: Extend IPA to support unadvertised replicas

6

Opened 6 years ago by frenaud. Modified 4 years ago

Future Releases normal

#7306 ipa-client-install should respect DNS Locations SRV record priority

1

Opened 6 years ago by frenaud. Modified 5 years ago

Future Releases low

#7249 RFE: Allow GET requests for OCSP responder

3

Opened 6 years ago by mpetey. Modified 6 years ago

Future Releases

#7243 Implement OTP and RADIUS authentication in FIPS

4

Opened 6 years ago by stlaz. Modified 6 years ago

rfe Future Releases normal

#7204 [RFE] Do not display user list in FreeIPA WebUI self-service

1

Opened 6 years ago by pvoborni. Modified 5 years ago

webui rfe Future Releases minor

#7101 IPA Installation fails when kdcproxy user is not present

Opened 6 years ago by pvoborni. Modified 6 years ago

Future Releases

#7057 [RFE] Simple webui based user certificate creation

4

Opened 6 years ago by tduehr. Modified 5 years ago

Future Releases

#6954 [RFE] Web UI must check CRL during smartcard login

1

Opened 7 years ago by pvomacka. Modified 5 years ago

Future Releases

#6753 [RFE] FreeIPA should allow location based authentication and be smart about it

1

Opened 7 years ago by dpal. Modified 5 years ago

rfe Future Releases

#6733 [RFE] support different ticket lifetimes depending on auth method

3

Opened 7 years ago by ftweedal. Modified 4 years ago

Future Releases

#6696 Warn about sys.exc_info()

2

Opened 7 years ago by cheimes. Modified 6 years ago

Future Releases low

#6695 Can not list more than 2000 items in the web ui

1

Opened 7 years ago by darix. Modified 5 years ago

Future Releases normal

#6627 WebUI: Enable pagination

9

Opened 7 years ago by pvomacka. Modified 4 years ago

webui Future Releases normal

#6599 [RFE] Allow KRA without CA installed

1

Opened 7 years ago by mbasti. Modified 5 years ago

Future Releases normal

#6593 ipa-server-install (ipa-client-install step) fails if non ascii text is present in sssd.conf

2

Opened 7 years ago by pvoborni. Modified 5 years ago

Future Releases low

#6587 ipa-otpd: systemctl reports "degraded" for "is-system-running" after todays CentOS updates

30

Opened 7 years ago by jh23453. Modified 2 years ago

Future Releases low

#6568 KDB: support multi-base searches for Kerberos objects

2

Opened 7 years ago by abbra. Modified 7 years ago

Future Releases normal

#6567 [RFE] Integrate with custodia and SSH to escrow and share user private keys

3

Opened 7 years ago by dpal. Modified 5 years ago

Future Releases normal

#6528 Remove "alternative principal" procedure for SAN validity

2

Opened 7 years ago by ftweedal. Modified 6 years ago

Future Releases normal

#6523 Review dns_lookup_kdc option for ipa-client-install

7

Opened 7 years ago by jstephen. Modified 3 years ago

Future Releases important

#6520 Use LDAP as an authoritative source for querying enabled/configured services

1

Opened 7 years ago by mbabinsk. Modified 5 years ago

Future Releases normal

#6507 Refactor the codebase configuring replication agreements

1

Opened 7 years ago by mbabinsk. Modified 5 years ago

Future Releases normal

#6389 [RFE] Allow client commands without enrolling

10

Opened 7 years ago by mkosek. Modified 5 years ago

Future Releases normal

#6351 [RFE] Configurable Kerberos ticket lifetime based on authentication method

2

Opened 7 years ago by pvoborni. Modified 4 years ago

Future Releases normal

#6336 Inconsistency between max allowed user login length

1

Opened 7 years ago by mbasti. Modified 5 years ago

Future Releases normal

#6302 [RFE] Provide a tool that helps debugging certificate related issues.

2

Opened 7 years ago by tscherf. Modified 2 years ago

Future Releases normal

#6293 [RFE] Set alternate primary group for AD trust users

2

Opened 7 years ago by orion. Modified 3 years ago

Future Releases low

#6283 IPA UI blocks creation of groups with UTF characters

2

Opened 7 years ago by mbasti. Modified 6 years ago

Future Releases normal

#6282 [RFE] About dialog can show more details about IPA server

1

Opened 7 years ago by mbasti. Modified 5 years ago

Future Releases normal

#6268 Extend 'startup_timeout' in ipalib/constants.py for ARM Processors

7

Opened 7 years ago by cordel. Modified 5 years ago

Future Releases low

#6249 [RFE] self-service for host join

4

Opened 7 years ago by pspacek. Modified 5 years ago

Future Releases normal

#6227 point user to use `ipa-replica-manage disconnect` when using `del` for removing winsync agreement

1

Opened 7 years ago by pvoborni. Modified 5 years ago

Future Releases normal

#6222 [RFE] improve make install to handle platform specifics

7

Opened 7 years ago by jhh. Modified 5 years ago

Future Releases normal

#6127 Tests: Trackers do not support --no-member option

1

Opened 7 years ago by lryznaro. Modified 7 years ago

Future Releases normal

#6119 FreeIPA List interface (i.e. DNS Records) not working properly on OSX+Safari

4

Opened 7 years ago by johnkeates. Modified 5 years ago

Future Releases low

#6108 /var/log/messages file displays traceback for ipa-dnskeysyncd service during ipa-server-install

1

Opened 7 years ago by pvoborni. Modified 5 years ago

Future Releases normal

#6104 Log files for ipa in /var/log/ipa and /var/log directory must have similar permissions.

2

Opened 7 years ago by pvoborni. Modified 3 years ago

Future Releases normal

#6103 [RFE] idempotent ipa-client-install

3

Opened 7 years ago by pvoborni. Modified 2 years ago

Future Releases normal

#6075 [RFE] Helpdesk role for managing otp tokens

2

Opened 7 years ago by pvoborni. Modified 3 years ago

Future Releases normal

#6065 ipa-client-install should overwrite or prompt for changes in /etc/openldap/ldap.conf

Opened 7 years ago by pvoborni. Modified 3 years ago

Future Releases normal

#6063 ipa-client-install should overwrite existing sssd.conf

Opened 7 years ago by pvoborni. Modified 3 years ago

Future Releases normal

#6040 install does not provide way to deconflict Dogtag port

6

Opened 7 years ago by admiyo. Modified 5 years ago

Future Releases normal

#6014 Parser fails on incorrectly formatted /etc/hosts file

3

Opened 8 years ago by lryznaro. Modified 7 years ago

Future Releases normal

#5997 DNS upgrade: forwarders from named.conf are not migrated to LDAP

2

Opened 8 years ago by pspacek. Modified 7 years ago

Future Releases normal

#5972 LDAP updater does not respect equality matching rules from LDAP schema

8

Opened 8 years ago by pspacek. Modified 5 years ago

Future Releases normal

#5948 [RFE] Implement pam_pwquality featureset in IPA password policies

6

Opened 8 years ago by pvoborni. Modified 3 years ago

Future Releases normal

#5893 Tests: workout way how to test --raw option in current API test framework

3

Opened 8 years ago by mbasti. Modified 5 years ago

Future Releases normal

#5879 Attempt to fix capitalization fails with ipa: ERROR: Type or value exists:

8

Opened 8 years ago by pvoborni. Modified 4 years ago

Future Releases normal

#5859 ipa-client-install --no-sssd: Unable to find 'admin' user with 'getent passwd admin@domainname'!

2

Opened 8 years ago by pvoborni. Modified 5 years ago

Future Releases low

#5858 [RFE] ipa-{server,replica,dns}-installshould preserve include files in /etc/named.conf

2

Opened 8 years ago by pvoborni. Modified 2 years ago

Future Releases normal

#5846 [RFE] Copy / Paste duplicate future

6

Opened 8 years ago by quenode. Modified 5 years ago

Future Releases normal

#5829 [RFE] topology analysis tool

1

Opened 8 years ago by pvoborni. Modified 5 years ago

Future Releases normal

#5806 nslcd is not properly handled in ipa-client-install

4

Opened 8 years ago by rcritten. Modified 5 years ago

Future Releases normal

#5749 Print errors to stderr

1

Opened 8 years ago by mbasti. Modified 5 years ago

Future Releases normal

#5745 [RFE] store user configuration on a server

1

Opened 8 years ago by pvoborni. Modified 5 years ago

Future Releases low

#5728 Rename log files to command names that created them

2

Opened 8 years ago by mbasti. Modified 5 years ago

Future Releases normal

#5726 ipa-dns-install deserves own logfile

3

Opened 8 years ago by mbasti. Modified 5 years ago

Future Releases normal

#5705 When user selects to configure integrated DNS, installer asks a bunch of unrelated questions before complaining about missing freeipa-server-dns

8

Opened 8 years ago by adelton. Modified 4 years ago

easyfix Future Releases low

#5632 [RFE]IdM and FedFS integration

1

Opened 8 years ago by pvoborni. Modified 5 years ago

Future Releases normal

#5545 The kdcproxy user should be created in rpm installation time, and ideally with some soft static uid

4

Opened 8 years ago by pvoborni. Modified 3 years ago

Future Releases normal

#5447 [RFE] option to prune old CRLs kept in /var/lib/ipa/pki-ca/publish

1

Opened 8 years ago by ftweedal. Modified 5 years ago

Future Releases low

#5430 [tracker] RFE - renew replication ticket before expiration

8

Opened 8 years ago by orion. Modified 5 years ago

Future Releases low

#5395 [RFE] Allow some of the AD users to have IPA password instead

1

Opened 8 years ago by dpal. Modified 5 years ago

Future Releases normal

#5366 [RFE] Allow to search enabled/disabled users

3

Opened 8 years ago by mbasti. Modified 2 years ago

Future Releases normal

#5337 [RFE] Reduce number of components of IPA that run as root

2

Opened 8 years ago by dpal. Modified 5 years ago

Future Releases normal

#5336 [RFE] Create a server side switch that would force only secure authentication methods

1

Opened 8 years ago by dpal. Modified 5 years ago

Future Releases normal

#5186 stageuser_add can create name conflict

4

Opened 8 years ago by cheimes. Modified 6 years ago

Future Releases normal

#5111 [RFE] Integrate sudo with kerberos

7

Opened 8 years ago by dpal. Modified 2 years ago

Future Releases normal

#5098 [RFE] UI for unknown DNS RR type attribute (RFC 3597)

2

Opened 8 years ago by mkosek. Modified 5 years ago

Future Releases normal

#5060 [RFE] Add override for admin user in ipa-replica-install

5

Opened 9 years ago by rcritten. Modified 7 years ago

Future Releases normal

#5054 [RFE] Support adding of oneWaySync property to a winsync replication agreement

9

Opened 9 years ago by nathanpeters. Modified 5 years ago

Future Releases normal

#5053 RFE: Add support for user impersonation to service delegation

1

Opened 9 years ago by rcritten. Modified 5 years ago

Future Releases normal

#5050 Do we clean Kerberos kernel keyring when uninstall?

7

Opened 9 years ago by dpal. Modified 5 years ago

Future Releases low

#4957 IdM - Add DNS Resource Record - Unexpected behavior (A added even if PTR failed)

2

Opened 9 years ago by pvoborni. Modified 5 years ago

Future Releases normal

#4911 [RFE] Share CRLs between servers

6

Opened 9 years ago by simo. Modified 5 years ago

Future Releases low

#4880 [RFE] FreeIPA server should not advertise itself when in 'maintenance mode'

2

Opened 9 years ago by pspacek. Modified 5 years ago

Future Releases normal

#4858 ipa-server-install crashed on certmonger having duplicate requests

7

Opened 9 years ago by mkosek. Modified 5 years ago

Future Releases normal

#4845 ipa-client-install --preserve-sssd does not work for domain parts

3

Opened 9 years ago by mbasti. Modified 5 years ago

Future Releases normal

#4804 Write properly encoded string into stderr, stdout

2

Opened 9 years ago by mbasti. Modified 5 years ago

Future Releases normal

#4782 WebUI doesn't allow add forwardzone without forwarders

5

Opened 9 years ago by mbasti. Modified 5 years ago

webui Future Releases normal

#4757 Warning that if kerberos keys are in place for renamed users

2

Opened 9 years ago by vjanelle. Modified 5 years ago

Future Releases minor

#4745 [RFE] A better error in the httpd error log when the client has no forwardable ticket

7

Opened 9 years ago by cobradevil. Modified 5 years ago

Future Releases minor

#4733 Data restore proceeds successfully on new IPA server install

6

Opened 9 years ago by ksiddiqu. Modified 5 years ago

Future Releases low

#4714 idrange-add: interactive prompt should ask for range type when it could not be inferred

2

Opened 9 years ago by pvoborni. Modified 5 years ago

Future Releases normal

#4706 [RFE] Seed managed DNS domain from existing domain

6

Opened 9 years ago by adelton. Modified 5 years ago

Future Releases low

#4684 Add permission to administer tokens

4

Opened 9 years ago by nkrishnan. Modified 5 years ago

Future Releases normal

#4682 ipa-otpd only supports a single ipatokenRadiusServer

3

Opened 9 years ago by npmccallum. Modified 5 years ago

Future Releases normal

#4677 ipa-client-install --uninstall ignores --noac option

2

Opened 9 years ago by pvoborni. Modified 5 years ago

Future Releases normal

#4675 User lifecycle: prevent newly activated user to be immediatly in the configured automember groups

3

Opened 9 years ago by tbordaz. Modified 5 years ago

Future Releases low

#4641 Failed downloading certificate with conflicting serial number in client database.

7

Opened 9 years ago by edewata. Modified 5 years ago

Future Releases normal

#4634 [RFE] Support IPA as a member server in AD

2

Opened 9 years ago by dpal. Modified 5 years ago

Future Releases important

#4576 Output example replica DNS configuration during setup

3

Opened 9 years ago by constantmirrors. Modified 2 years ago

Future Releases low

#4543 ipa-client-automount uninstall restores original nsswitch.conf

3

Opened 9 years ago by mkosek. Modified 4 years ago

Future Releases normal

#4512 Bad error message when adding non existing user to a group

3

Opened 9 years ago by tscherf. Modified 5 years ago

Future Releases minor

#4501 [RFE] Preserve client and server installation logs

6

Opened 9 years ago by mkosek. Modified 5 years ago

Future Releases low

#4467 ipa-server-install --uninstall doesn't restore certmonger and kadmin correctly

1

Opened 9 years ago by mkosek. Modified 5 years ago

Future Releases normal

#4428 DNS admin cannot add DNS zone permission

3

Opened 9 years ago by pspacek. Modified 5 years ago

Future Releases normal

#4399 Remove trivial path constants from modules

2

Opened 10 years ago by pviktori. Modified 7 years ago

Future Releases minor

#4388 Use LDAPI+autobind instead of Kerberos for named<->LDAP connection

1

Opened 10 years ago by pspacek. Modified 5 years ago

Future Releases normal

#4384 Make dnszone-add-permission create V2 permissions

2

Opened 10 years ago by pviktori. Modified 5 years ago

Future Releases normal

#4362 Add attributelevelrights support to ipaldap

3

Opened 10 years ago by pviktori. Modified 5 years ago

Future Releases normal

#4358 'API' object has no attribute 'log' when running with -c option

2

Opened 10 years ago by admiyo. Modified 5 years ago

Future Releases normal

#4337 [RFE] Add progress bar to "Applying LDAP updates"

3

Opened 10 years ago by pspacek. Modified 5 years ago

Future Releases normal

#4333 ipa dnszone-add accepts contradicting --name-from-ip= and zone name

3

Opened 10 years ago by pspacek. Modified 5 years ago

Future Releases normal

#4329 host-del can return NotFound if no DNS permissions

3

Opened 10 years ago by rcritten. Modified 5 years ago

Future Releases normal

#4322 [RFE] Automatically distribute CA certificates to clients

11

Opened 10 years ago by mkosek. Modified 5 years ago

Future Releases important

#4314 Can set ipaSudoRunAsGroup to a non-POSIX group

3

Opened 10 years ago by rcritten. Modified 5 years ago

Future Releases normal

#4297 "Test the contents of a certificate" fails when LC_TIME=cs_CZ.UTF-8

2

Opened 10 years ago by pspacek. Modified 5 years ago

Future Releases low

#4292 [RFE] High Watermark Support for TOTP tokens

5

Opened 10 years ago by npmccallum. Modified 7 years ago

Future Releases normal

#4285 [RFE] Implement migration from stand alone KDC

2

Opened 10 years ago by dpal. Modified 5 years ago

Future Releases normal

#4277 during install see if portreserver is managing a port

2

Opened 10 years ago by rcritten. Modified 5 years ago

Future Releases low

#4270 CA-less installation should not continue if dirsrv/httpd certificate is revoked

1

Opened 10 years ago by mkosek. Modified 5 years ago

Future Releases normal

#4267 Ignore attribute name letter case in tests

2

Opened 10 years ago by jcholast. Modified 5 years ago

Future Releases normal

#4161 Check that hosts file is correct in ipactl start

3

Opened 10 years ago by simo. Modified 5 years ago

Future Releases normal

#4160 Run ipa-adtrust-install without enabling compatibility in Posix attributes testing

1

Opened 10 years ago by steeve. Modified 5 years ago

Future Releases low

#4148 [RFE] Add a framework call that returns the server UTC time

1

Opened 10 years ago by simo. Modified 5 years ago

Future Releases normal

#4127 Removing a domain controller results in NTP errors on systems

6

Opened 10 years ago by mkosek. Modified 5 years ago

Future Releases normal

#4101 [RFE] Add option to disable/enable selected domains from being fetched in trusted environment

1

Opened 10 years ago by steeve. Modified 5 years ago

Future Releases normal

#4083 [RFE] Provide ipa help info online from web page

2

Opened 10 years ago by spoore. Modified 5 years ago

Future Releases low

#4077 [RFE] ipa-client-install should print fingerprint of downloaded certificate

1

Opened 10 years ago by mkosek. Modified 5 years ago

Future Releases low

#4073 [RFE] Add jpegPhoto to user with ipa user-mod

6

Opened 10 years ago by dbmacartney. Modified 5 years ago

Future Releases low

#4068 [RFE] Allow PKI load balancing/fail over for clients

3

Opened 10 years ago by erinn. Modified 5 years ago

Future Releases normal

#4062 [RFE] Need a centralized mechanism that will monitor all the IPA services

1

Opened 10 years ago by dpal. Modified 5 years ago

Future Releases normal

#4049 Server XMLRPC decoding raises "Internal Server Error"

1

Opened 10 years ago by mkosek. Modified 5 years ago

Future Releases normal

#4044 dnsrecord-add doesn't handle multiple records specified 'per partes'

1

Opened 10 years ago by pspacek. Modified 5 years ago

Future Releases normal

#4036 RHEL7 ipa-replica-manage hang waiting on CLEANALLRUV tasks

6

Opened 10 years ago by dpal. Modified 7 years ago

Future Releases normal

#4030 [RFE] Upload host MAC address during ipa-client-install

2

Opened 10 years ago by mkosek. Modified 5 years ago

Future Releases normal

#4001 ipa-server-install should not change /etc/ntp.conf by default.

3

Opened 10 years ago by mkosek. Modified 6 years ago

Future Releases normal

#4000 Logging in using SSH keys does not create a kerberos ticket

8

Opened 10 years ago by mkosek. Modified 5 years ago

Future Releases normal

#3999 [RFE] Fix and Document how to set up Samba File Server with IPA

10

Opened 10 years ago by mkosek. Modified 3 years ago

documentation Future Releases normal

#3998 [RFE] Use 389-ds syntax plugin to handle BIND record syntax

4

Opened 10 years ago by mkosek. Modified 5 years ago

Future Releases normal

#3985 [RFE] Add ability to change Trust related attribute in CLI/Web UI

3

Opened 10 years ago by simo. Modified 5 years ago

Future Releases normal

#3965 [RFE] IPA Web UI: When editing A/AAAA record in DNS there could be a check box to sync the reverse record

3

Opened 10 years ago by thozza. Modified 5 years ago

Future Releases low

#3960 [RFE] ipa-client command cannot be run on machine that is not enrolled

10

Opened 10 years ago by admiyo. Modified 5 years ago

Future Releases normal

#3959 [RFE] ipa service-add could hint --force if host does not have corresponding DNS A record

2

Opened 10 years ago by adelton. Modified 5 years ago

Future Releases low

#3955 [RFE] Allowing IPA client to communicate on non-standard Port or custom port

9

Opened 10 years ago by chandank. Modified 2 years ago

Future Releases low

#3945 ipa-client-install could be more helpful when it fails because SRV records don't use FQDN

1

Opened 10 years ago by mkosek. Modified 5 years ago

Future Releases normal

#3930 [RFE] Add formatting support for CLI output to the framework

2

Opened 10 years ago by tbabej. Modified 5 years ago

Future Releases normal

#3927 invalid manager dn can cause entire migration to fail

3

Opened 10 years ago by rcritten. Modified 5 years ago

Future Releases normal

#3926 [RFE] When asking for DNS forwarders in ipa-server-install, show the current resolv.conf values

2

Opened 10 years ago by adelton. Modified 7 years ago

Future Releases minor

#3917 When ipa-client-install does not set dns_lookup_kdc = true, kinit for user from the trusted domain fails

6

Opened 10 years ago by adelton. Modified 7 years ago

Future Releases minor

#3914 Clean up handling of extra attributes in LDAPModify commands

1

Opened 10 years ago by pviktori. Modified 5 years ago

Future Releases low

#3905 [RFE] Delete related PTR record when deleting A/AAAA record

3

Opened 10 years ago by pvoborni. Modified 5 years ago

Future Releases normal

#3873 ipa-replica-manage is asking on STDERR

2

Opened 10 years ago by mbasti. Modified 7 years ago

Future Releases minor

#3871 Add error handling to get_cert_nickname()

1

Opened 10 years ago by rcritten. Modified 5 years ago

Future Releases low

#3850 [RFE] HBAC test command should allow excluding rules from evaluation

3

Opened 10 years ago by dpal. Modified 5 years ago

Future Releases normal

#3794 [RFE] Use GSS proxy for IPA Apache instance

2

Opened 10 years ago by dpal. Modified 7 years ago

Future Releases normal

#3789 Fix NTP configuration merging and handling

1

Opened 10 years ago by mkosek. Modified 6 years ago

Future Releases normal

#3775 [RFE] new ipa command component like "ipa accesscheck"

1

Opened 10 years ago by dpal. Modified a year ago

Future Releases normal

#3761 [RFE] Plugin to get information equivalent to .k5login from IPA

2

Opened 11 years ago by adelton. Modified 5 years ago

Future Releases normal

#3753 [RFE] Add freeipa-docs package

9

Opened 11 years ago by mkosek. Modified 7 years ago

Future Releases normal

#3741 cert-request internal error with a binary CSR

7

Opened 11 years ago by jcholast. Modified 5 years ago

Future Releases low

#3738 [RFE] Certificate normalization is broken in host and service commands

4

Opened 11 years ago by jcholast. Modified 5 years ago

Future Releases low

#3735 ipa-client-install should not run ntpdate when ntpd is running

4

Opened 11 years ago by mkosek. Modified 6 years ago

Future Releases normal

#3728 Investigate PKI CRL publishing rules

6

Opened 11 years ago by mkosek. Modified 5 years ago

Future Releases normal

#3714 Unable to add a netgroup named 'ng'

7

Opened 11 years ago by akrivoka. Modified 5 years ago

Future Releases normal

#3682 ipa-client-install : --preserve-sssd : error in parsing sssd.conf

3

Opened 11 years ago by yizhangid. Modified 5 years ago

Future Releases low

#3679 [RFE] Allow linking more than one principal to an account

3

Opened 11 years ago by dpal. Modified 5 years ago

Future Releases normal

#3677 ipa-client-install : conflict between flag --mkhomedir and flag --noac

2

Opened 11 years ago by yizhangid. Modified 5 years ago

Future Releases normal

#3676 ipa-client-install : conflict between flag --force and flag --noac

2

Opened 11 years ago by yizhangid. Modified 5 years ago

Future Releases normal

#3661 [RFE] IPA Web UI: When adding new reverse zone in DNS there could be an example of expected address format

1

Opened 11 years ago by thozza. Modified 7 years ago

Future Releases low

#3638 ambiguous output message when delete group & user in bulk

2

Opened 11 years ago by yizhangid. Modified 5 years ago

Future Releases minor

#3631 [RFE] Create a way to report freeipa-client health

5

Opened 11 years ago by dpal. Modified 7 years ago

Future Releases normal

#3626 [RFE] pac-type change must be effective immediately without kdc restart

4

Opened 11 years ago by steeve. Modified 7 years ago

Future Releases normal

#3624 Setting --base-id to 0 produces cryptic error in ipa idrange-add/mod

2

Opened 11 years ago by tbabej. Modified 5 years ago

Future Releases low

#3618 Update mod_auth_kerb to support DIR format

1

Opened 11 years ago by rcritten. Modified 7 years ago

Future Releases normal

#3608 [RFE] Need --dom-name option for idrange-find

3

Opened 11 years ago by steeve. Modified 5 years ago

Future Releases normal

#3606 ipactl status does not show recently installed services

2

Opened 11 years ago by mkosek. Modified 5 years ago

Future Releases normal

#3598 Automember function enrolledby

2

Opened 11 years ago by jmoyer256. Modified 5 years ago

Future Releases low

#3570 Installation fails when server hostname = domain

2

Opened 11 years ago by mkosek. Modified 2 years ago

Future Releases normal

#3558 IPA KDC cannot handle enterprise principals

2

Opened 11 years ago by sbose. Modified 6 years ago

Future Releases normal

#3557 [RFE] Warn about underscores in hostnames in DNS records

1

Opened 11 years ago by pviktori. Modified 5 years ago

Future Releases normal

#3541 Verify revocation status when installing using PKCS#12 certificates

1

Opened 11 years ago by rcritten. Modified 5 years ago

Future Releases normal

#3499 Remove uses of raw python-ldap

1

Opened 11 years ago by pviktori. Modified 5 years ago

Future Releases normal

#3480 Cannot delete replication agreement using delegated admin

4

Opened 11 years ago by rcritten. Modified 5 years ago

Future Releases normal

#3478 Drop --dynamic-update option from IPA DNS

3

Opened 11 years ago by pspacek. Modified 5 years ago

Future Releases normal

#3474 FileError raised with invalid format

3

Opened 11 years ago by rcritten. Modified 5 years ago

Future Releases normal

#3472 [RFE] Utilize RFC 4527 Read Entry Controls in 389-ds-base when added

1

Opened 11 years ago by rcritten. Modified 5 years ago

Future Releases normal

#3470 Take ownership of the IPA certificate profile

1

Opened 11 years ago by rcritten. Modified 7 years ago

Future Releases normal

#3455 [RFE] Allow IPA commands to skip domain name validation check

4

Opened 11 years ago by akrivoka. Modified 5 years ago

Future Releases normal

#3443 remove ip address family selection logic.

1

Opened 11 years ago by jdennis. Modified 5 years ago

Future Releases low

#3441 [RFE] With systemd 'ipactl status' says 'Directory Service: RUNNING' even if it is not running

2

Opened 11 years ago by sbose. Modified 5 years ago

Future Releases normal

#3430 [RFE] Make it possible to mark accounts as non human accounts

4

Opened 11 years ago by dpal. Modified 7 years ago

Future Releases low

#3417 [RFE] Turn selected ValidationErrors into warnings

2

Opened 11 years ago by mkosek. Modified 5 years ago

Future Releases normal

#3408 Handle RA cert request more carefully, IndexError: list index out of range

4

Opened 11 years ago by rcritten. Modified 5 years ago

Future Releases normal

#3405 See if enabling memcache can fail

2

Opened 11 years ago by rcritten. Modified 7 years ago

Future Releases normal

#3401 [RFE] Add all masters SRV records when adding DNS server post-install

2

Opened 11 years ago by rcritten. Modified 7 years ago

Future Releases normal

#3395 ipa show-mappings lists virtual attributes

4

Opened 11 years ago by tbabej. Modified 5 years ago

Future Releases normal

#3393 [RFE] password migration website for AD users

1

Opened 11 years ago by dpal. Modified 5 years ago

Future Releases normal

#3392 [RFE] Use pkispawn option to set location of saved CA admin PKCS#12 file

1

Opened 11 years ago by rcritten. Modified 5 years ago

Future Releases normal

#3384 Fix user regular expression to exclude upper-case

2

Opened 11 years ago by rcritten. Modified 5 years ago

Future Releases normal

#3359 [RFE] Refuse to install with SELinux disabled

6

Opened 11 years ago by rcritten. Modified 5 years ago

Future Releases normal

#3356 Investigate use of ISC Bind's 'external' authentication module for DNS Updates

3

Opened 11 years ago by simo. Modified 5 years ago

Future Releases normal

#3354 ipa group-mod setattr allows renaming of admins group - setattr on cn

1

Opened 11 years ago by dpal. Modified 7 years ago

Future Releases normal

#3346 Roles for "IT Specialist" and "User Administrator" Are not listing privileges

1

Opened 11 years ago by dpal. Modified 7 years ago

Future Releases normal

#3345 Default "Modify Users and Reset passwords" Privilege - Permissions missing

1

Opened 11 years ago by dpal. Modified 7 years ago

Future Releases normal

#3332 ipa permission-add using invalid subtree throws internal error

1

Opened 11 years ago by mkosek. Modified 7 years ago

Future Releases normal

#3301 ipa netgroup-mod --setattr with empty value returns internal server error

1

Opened 11 years ago by dpal. Modified 5 years ago

Future Releases low

#3300 Option to remove AD synced users on winsync agreement deletion

3

Opened 11 years ago by dpal. Modified 5 years ago

Future Releases normal

#3286 ipa-replica-prepare fails with gnupg2

2

Opened 11 years ago by rcritten. Modified 7 years ago

Future Releases normal

#3274 Problem with joining ipa-client v2.1.3 to server v.2.2.0 with external CA

4

Opened 11 years ago by rcritten. Modified 7 years ago

Future Releases normal

#3258 ipa-server-uninstall doesn't clean dirsrv.target

2

Opened 11 years ago by pviktori. Modified 5 years ago

Future Releases normal

#3246 ipa-getkeytab usage instructions are incorrect

6

Opened 11 years ago by pspacek. Modified 2 years ago

Future Releases low

#3245 IPA CLI don't honour Control+C

2

Opened 11 years ago by pspacek. Modified 6 years ago

Future Releases normal

#3233 Internal error instead of validation error for incorect input in permission add

1

Opened 11 years ago by pvoborni. Modified 7 years ago

Future Releases normal

#3230 ipa-server-install returns success result if bind restart fails.

5

Opened 11 years ago by mkosek. Modified 5 years ago

Future Releases important

#3227 handle NSS initialization and shutdown better, use context's

3

Opened 11 years ago by jdennis. Modified 6 years ago

Future Releases normal

#3222 krbPasswordExpiration attribute not respected by 2.x ldap driver

4

Opened 11 years ago by simo. Modified 5 years ago

Future Releases normal

#3216 [RFE] Replication of Active Directory groups in IPA

1

Opened 11 years ago by dpal. Modified 5 years ago

Future Releases low

#3215 [RFE] IPA: Add crond into the list of hbac-services in default install

4

Opened 11 years ago by dpal. Modified 7 years ago

Future Releases important

#3212 DNA plugin not reclaiming UID's when close to dnamaxvalue value

2

Opened 11 years ago by dpal. Modified 7 years ago

Future Releases important

#3206 IPA with Samba: sambaPwdLastSet is not properly set when user changes password

1

Opened 11 years ago by rcritten. Modified 5 years ago

Future Releases normal

#3200 [RFE] Confirmation by 'Enter' is not supported in all confirmation dialogs

4

Opened 11 years ago by pvoborni. Modified 7 years ago

Future Releases normal

#3171 Same range should not be allowed for primary and secondary RID range

5

Opened 11 years ago by tbabej. Modified 7 years ago

Future Releases important

#3142 Create an IPA tools repo

2

Opened 11 years ago by dpal. Modified 5 years ago

Future Releases normal

#3141 [RFE] for ipa cert auto renew: add success/fail message in /var/log/message to tell cert renew result

2

Opened 11 years ago by dpal. Modified 5 years ago

Future Releases normal

#3123 Internal server error on CSR with no subject hostname

3

Opened 11 years ago by pviktori. Modified 7 years ago

Future Releases low

#3121 Don't use %r formatting specifier in error messages

3

Opened 11 years ago by jcholast. Modified 7 years ago

Future Releases normal

#3120 Remove unnecessary krb5 version checks

3

Opened 11 years ago by rcritten. Modified 5 years ago

Future Releases normal

#3093 [RFE] Print more data about our replication agremeents

2

Opened 11 years ago by mkosek. Modified 5 years ago

Future Releases low

#3080 [RFE] ipa-client-automount : improve error message: remind user firewall issue

4

Opened 11 years ago by yizhangid. Modified 5 years ago

Future Releases normal

#3072 Display Dogtag 10/pkispawn's errors when it fails

3

Opened 11 years ago by pviktori. Modified 6 years ago

Future Releases important

#3030 Separation of IPA specific variables and framework in Web UI

1

Opened 11 years ago by pvoborni. Modified 5 years ago

Future Releases low

#2996 IPA: Improve Debugging

4

Opened 11 years ago by dpal. Modified 7 years ago

Future Releases important

#2981 Delegation search error using trailing space is different

1

Opened 11 years ago by dpal. Modified 7 years ago

Future Releases low

#2977 [RFE] [Web UI] Notify user about successful action

9

Opened 11 years ago by mkosek. Modified 5 years ago

Future Releases normal

#2966 ipa winsync doesn't sync user if first name and lastname are not given for a AD user

1

Opened 11 years ago by dpal. Modified 7 years ago

Future Releases low

#2957 [RFE] ipa-dns-install and other tools do not need DM password

4

Opened 11 years ago by mkosek. Modified 7 years ago

Future Releases normal

#2952 Incorrect suggested Zone name when using name-from-ip

3

Opened 11 years ago by mkosek. Modified 7 years ago

Future Releases low

#2933 [RFE]: be able to specify a file when adding ssh keys for user

2

Opened 11 years ago by rcritten. Modified 5 years ago

Future Releases normal

#2920 Measure unit support in server plugins

2

Opened 11 years ago by pvoborni. Modified 5 years ago

Future Releases normal

#2916 ipa-client-install should warn about wrong SELinux settings

1

Opened 11 years ago by mkosek. Modified 5 years ago

Future Releases low

#2893 support beta name in VERSION

1

Opened 11 years ago by rcritten. Modified 7 years ago

Future Releases low

#2884 Improve notification and validation in password reset dialogs

4

Opened 12 years ago by pvoborni. Modified 7 years ago

Future Releases normal

#2812 [RFE] [Web UI] Add remote_attributes relationship

3

Opened 12 years ago by mkosek. Modified 7 years ago

Future Releases low

#2804 ipa-csreplica-manage connect/disconnect options provide inconsistent results

2

Opened 12 years ago by rcritten. Modified 5 years ago

Future Releases low

#2798 Random password not displayed when reverse zone for the client doesn't exist.

2

Opened 12 years ago by mkosek. Modified 5 years ago

Future Releases low

#2788 Missing memberof_role attribute member in host group.

2

Opened 12 years ago by pvoborni. Modified 5 years ago

Future Releases low

#2787 [RFE] Binding IPA Replica to a specific Nic or hostname using --hostname

2

Opened 12 years ago by dpal. Modified 5 years ago

Future Releases low

#2777 Operations Error when using invalid data to add automount location

2

Opened 12 years ago by mkosek. Modified 7 years ago

Future Releases low

#2741 [ipa webui] Intermittent errors - 'cn' is required; limits exceeded for this query

4

Opened 12 years ago by mkosek. Modified 5 years ago

Future Releases low

#2723 [IPA WebUI] multiple error dialog appears at same time

6

Opened 12 years ago by mkosek. Modified 5 years ago

webui Future Releases low

#2716 [RFE] Send entryLevelRights when --rights are requested

2

Opened 12 years ago by mkosek. Modified 7 years ago

Future Releases normal

#2714 Warn user if he uses irrelevant attribute in permission-add

3

Opened 12 years ago by mkosek. Modified 7 years ago

Future Releases low

#2710 [RFE] Report client/server API incompatibility in ipa-client-install

3

Opened 12 years ago by mkosek. Modified 7 years ago

Future Releases low

#2692 ipa-server-install ignores --hostname

3

Opened 12 years ago by mkosek. Modified 3 years ago

Future Releases low

#2686 [RFE] Create role for hosts managing other hosts

7

Opened 12 years ago by rcritten. Modified 7 years ago

Future Releases normal

#2682 [RFE]: enable/disable users/HBAC/Sudo in search list

1

Opened 12 years ago by rcritten. Modified 5 years ago

webui Future Releases low

#2612 [RFE] disable srv lookups(or add option to disable it) when --server option is used with ipa-client install

4

Opened 12 years ago by rcritten. Modified 7 years ago

Future Releases normal

#2588 Error message has a user-unfriendly "u" character in it.

4

Opened 12 years ago by mkosek. Modified 7 years ago

Future Releases normal

#2563 CLI should warn user if he creates DNS record with conflicting TTL values

3

Opened 12 years ago by pspacek. Modified 5 years ago

Future Releases low

#2535 [RFE]: Automember Test to simulate logic

5

Opened 12 years ago by jraquino. Modified 5 years ago

Future Releases important

#2501 ipa hbacsvc-find missing --not-in-hbacrule and --in-hbacrule rules.

2

Opened 12 years ago by mkosek. Modified 5 years ago

Future Releases low

#2463 Clarify meaning of errors.InvalidSyntax

1

Opened 12 years ago by rcritten. Modified 5 years ago

Future Releases low

#2442 [RFE] Deprecate default ipa user group in cn=ipaconfig

3

Opened 12 years ago by rcritten. Modified 5 years ago

Future Releases low

#2357 [Feature] Input validation and handling

4

Opened 12 years ago by dpal. Modified 7 years ago

Future Releases low

#2339 ipa selfservice-del : inconsistent behavior and error message

1

Opened 12 years ago by mkosek. Modified 5 years ago

Future Releases low

#2283 Remove workaround for central look through limit

3

Opened 12 years ago by rcritten. Modified 5 years ago

Future Releases important

#2278 IPA needs better sudo option validation or better documentation

4

Opened 12 years ago by dpal. Modified 2 years ago

Future Releases normal

#2245 Further Improve framework Parameter validation

2

Opened 12 years ago by dpal. Modified 2 years ago

Future Releases normal

#2158 ipa-getcert NSSDB Should Include IPA CA

5

Opened 12 years ago by jcape. Modified 4 years ago

Future Releases normal

#2131 Traceback message displaye while registeredAddress attribute has incorrect values in Active Directory.

15

Opened 12 years ago by dpal. Modified 5 years ago

Future Releases important

#2124 [RFE] Provide more specialized replica modification tool.

2

Opened 12 years ago by shanks. Modified 2 years ago

Future Releases low

#2047 Doc CS replication errors to avoid user from facing unexpected problems

2

Opened 12 years ago by dpal. Modified 7 years ago

Future Releases important

#2033 [RFE] Allow any data type to be used in parameters

2

Opened 12 years ago by jcholast. Modified 5 years ago

Future Releases normal

#2025 Inconsistent way to show boolean values

2

Opened 12 years ago by edewata. Modified a year ago

Future Releases normal

#1954 [RFE]: Allow IPA Server Sync Time from External NTP Servers

3

Opened 12 years ago by myllynen. Modified 6 years ago

Future Releases normal

#1917 [RFE] Add hostname and network address objects

3

Opened 12 years ago by jcholast. Modified 5 years ago

Future Releases normal

#1851 Consider using SIGHUP instead of restart with dbus

4

Opened 12 years ago by myllynen. Modified 5 years ago

Future Releases normal

#1765 Investigate the time component of the access rules

10

Opened 12 years ago by dpal. Modified 5 years ago

Future Releases normal

#1720 [RFE] Downloading keytab via UI

5

Opened 12 years ago by edewata. Modified 5 years ago

Future Releases low

#1539 [RFE] Add code to check password expiration on ldap bind

39

Opened 12 years ago by simo. Modified 2 years ago

Future Releases normal

#1487 IP address format cleanup

3

Opened 12 years ago by jcholast. Modified 5 years ago

Future Releases low

#1431 Manage CNAME for CRL and OCSP responders when the list of replicas changes

7

Opened 12 years ago by simo. Modified 7 years ago

Future Releases normal

#1079 [RFE]: Improve consistency in input args, output display, etc., in ipa group-del

3

Opened 13 years ago by obriend. Modified 5 years ago

Future Releases low

#939 [RFE] Add DHCP integration to IPA

13

Opened 13 years ago by dpal. Modified 5 years ago

Future Releases normal

#521 [RFE] Add dogtag support to generate KDC certificates for Pkinit

3

Opened 13 years ago by simo. Modified 5 years ago

Future Releases normal

#298 [RFE] Add support for cracklib to password policies

5

Opened 13 years ago by rcritten. Modified 3 years ago

Future Releases normal

freeipa

Source Code

Future Releases