public/freeipa
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
15,384 Commits 9 Branches 0 Tags
22022ae2ff8d1767bd50eec098eddb02573ea1ae
Commit Graph
15384 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Alexander Bokovoy 22022ae2ff ipaclient: do not set TLS CA options in ldap.conf anymore 
OpenLDAP has made it explicit to use default CA store as provided by
OpenSSL in 2016:

	branches 2.5 and later:
	commit 4962dd6083ae0fe722eb23a618ad39e47611429b
	Author: Howard Guo <hguo@suse.com>
	Date:   Thu Nov 10 15:39:03 2016 +0100

	branch 2.4:
	commit e3affc71e05b33bfac43833c7b95fd7b7c3188f8
	Author: Howard Guo <hguo@suse.com>
	Date:   Thu Nov 10 15:39:03 2016 +0100

This means starting with OpenLDAP 2.4.45 we can drop the explicit CA
configuration in ldap.conf.

There are several use cases where an explicit IPA CA should be specified
in the configuration. These mostly concern situations where a higher
security level must be maintained. For these configurations an
administrator would need to add an explicit CA configuration to
ldap.conf if we wouldn't add it during the ipa-client-install setup.

RN: FreeIPA client installer does not add explicit TLS CA configuration
RN: to OpenLDAP's ldap.conf anymore. Since OpenLDAP 2.4.45, explicit CA
RN: configuration is not required as OpenLDAP uses the default CA store
RN: provided by OpenSSL and IPA CA is installed in the default store
RN: by the installer already.

Fixes: https://pagure.io/freeipa/issue/9258

Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>
 2022-10-10 09:50:39 +02:00
Viacheslav Sychov d33a2523ee fix: Handle /proc/1/sched missing error 
Reviewed-By: Rob Crittenden <rcritten@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2022-10-10 09:48:55 +02:00
Sumit Bose 0ce3ab36b4 ipa-kdb: do not fail if certmap rule cannot be added 
Currently if a certificate mapping and matching rule has a typo or is of
an unsupported type the whole rule processing is aborted and the IPA
certmap plugin works without any rules effectively disabling PKINIT for
users. Since each rule would only allow more certificates for PKINIT it
would be more user/admin friendly to just ignore the failed rules with a
log message and continue with what is left or use the default rule if
nothing is left.

This change is done to add more flexibility to define new mapping and
matching templates which are e.g. needed to cover changes planned by
Microsoft as explained in
https://support.microsoft.com/en-us/topic/kb5014754-certificate-based-authentication-changes-on-windows-domain-controllers-ad2c23b0-15d8-4340-a468-4d4f3b188f16

Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2022-10-07 17:02:43 +02:00
Stanislav Levin d4fa80b224 ipapython: Support openldap 2.6 
While python-ldap is strict dependency of IPA in downstreams, it
is optional for IPA packages published on PyPI.

Openldap 2.6 no longer ships ldap_r-2, that makes
ipapython.dn_ctypes not working against such environments.

Thanks @abbra!

Fixes: https://pagure.io/freeipa/issue/9255
Signed-off-by: Stanislav Levin <slev@altlinux.org>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>
 2022-10-06 10:22:26 +02:00
Alexey Tikhonov 147123e6b9 extdom: avoid sss_nss_getorigby*() calls when get*_r_wrapper() returns object from a wrong domain (performance optimization) 
Reviewed-By: Alexander Bokovoy <abbra@users.noreply.github.com>
 2022-10-04 14:01:56 +02:00
Alexey Tikhonov b381acb3d0 extdom: make sure result doesn't miss domain part 
This is required to ensure that only objects from requested domain
are returned.

Resolves: https://pagure.io/freeipa/issue/9245
Reviewed-By: Alexander Bokovoy <abbra@users.noreply.github.com>
 2022-10-04 14:01:56 +02:00
Alexey Tikhonov f0c26fe094 extdom: internal functions should be static 
Fixes following compilation warnings:
```
ipa_extdom_common.c:109:5: warning: no previous prototype for ‘__nss_to_err’ [-Wmissing-prototypes]
  109 | int __nss_to_err(enum nss_status errcode)
      |     ^~~~~~~~~~~~
ipa_extdom_common.c:738:5: warning: no previous prototype for ‘pack_ber_name_list’ [-Wmissing-prototypes]
  738 | int pack_ber_name_list(struct extdom_req *req, char **fq_name_list,
      |     ^~~~~~~~~~~~~~~~~~
```

Reviewed-By: Alexander Bokovoy <abbra@users.noreply.github.com>
 2022-10-04 14:01:56 +02:00
Florence Blanc-Renaud 96cf293f1f ipatests: mark xfail tests using dnssec 
In fedora 37+, the signing of DNS zones is failing.
Mark xfail the gating tests impacted by this issue, to avoid
breaking the CI gating when we move to f37.

Related: https://pagure.io/freeipa/issue/9216
Signed-off-by: Florence Blanc-Renaud <flo@redhat.com>
Reviewed-By: Alexander Bokovoy <abbra@users.noreply.github.com>
Reviewed-By: Stanislav Levin <slev@altlinux.org>
 2022-10-04 13:47:48 +02:00
Florence Blanc-Renaud 4a4f7e76da ipatests: mark xfail tests using sssctl domain-status 
In fedora 37+, sssctl domain-status is failing.
Mark xfail the gating tests impacted by this issue, to avoid
breaking the CI gating when we move to f37.

Related: https://pagure.io/freeipa/issue/9234
Signed-off-by: Florence Blanc-Renaud <flo@redhat.com>
Reviewed-By: Alexander Bokovoy <abbra@users.noreply.github.com>
Reviewed-By: Stanislav Levin <slev@altlinux.org>
 2022-10-04 13:47:48 +02:00
Florence Blanc-Renaud 43fcfe45f1 Tests: test on f37 and f36 
Fedora 37 beta is now available, move the testing pipelines to
- fedora 37 for the _latest definitions
- fedora 36 for the _previous definition

Signed-off-by: Florence Blanc-Renaud <flo@redhat.com>
Reviewed-By: Alexander Bokovoy <abbra@users.noreply.github.com>
Reviewed-By: Stanislav Levin <slev@altlinux.org>
 2022-10-04 13:47:48 +02:00
Alexander Bokovoy 76152e0335 Remove empty translation for 'si' which breaks linter 
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2022-10-02 12:07:20 +03:00
김인수 6e6a07188b Translated using Weblate (Korean) 
Currently translated at 2.9% (140 of 4818 strings)

Translation: freeipa/master
Translate-URL: https://translate.fedoraproject.org/projects/freeipa/master/ko/
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2022-10-02 12:07:20 +03:00
김인수 a2a70ab7ac Translated using Weblate (Korean) 
Currently translated at 2.2% (108 of 4818 strings)

Translation: freeipa/master
Translate-URL: https://translate.fedoraproject.org/projects/freeipa/master/ko/
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2022-10-02 12:07:20 +03:00
김인수 526b5165fe Translated using Weblate (Korean) 
Currently translated at 2.0% (99 of 4818 strings)

Translation: freeipa/master
Translate-URL: https://translate.fedoraproject.org/projects/freeipa/master/ko/
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2022-10-02 12:07:20 +03:00
김인수 e9d5908851 Added translation using Weblate (Korean) 
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2022-10-02 12:07:20 +03:00
Temuri Doghonadze 2ee7fcdfba Translated using Weblate (Georgian) 
Currently translated at 8.3% (401 of 4818 strings)

Translation: freeipa/master
Translate-URL: https://translate.fedoraproject.org/projects/freeipa/master/ka/
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2022-10-02 12:07:20 +03:00
Temuri Doghonadze d12908ffce Translated using Weblate (Georgian) 
Currently translated at 7.6% (368 of 4818 strings)

Translation: freeipa/master
Translate-URL: https://translate.fedoraproject.org/projects/freeipa/master/ka/
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2022-10-02 12:07:20 +03:00
Temuri Doghonadze 097615c34c Translated using Weblate (Georgian) 
Currently translated at 6.9% (333 of 4818 strings)

Translation: freeipa/master
Translate-URL: https://translate.fedoraproject.org/projects/freeipa/master/ka/
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2022-10-02 12:07:20 +03:00
Jan Kuparinen e20e1a446c Translated using Weblate (Finnish) 
Currently translated at 17.6% (848 of 4818 strings)

Translation: freeipa/master
Translate-URL: https://translate.fedoraproject.org/projects/freeipa/master/fi/
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2022-10-02 12:07:20 +03:00
Yuri Chornoivan 7a82bc090e Translated using Weblate (Ukrainian) 
Currently translated at 100.0% (4818 of 4818 strings)

Translation: freeipa/master
Translate-URL: https://translate.fedoraproject.org/projects/freeipa/master/uk/
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2022-10-02 12:07:20 +03:00
Weblate 1d1b31a2f4 Update translation files 
Updated by "Update PO files to match POT (msgmerge)" hook in Weblate.

Translation: freeipa/master
Translate-URL: https://translate.fedoraproject.org/projects/freeipa/master/
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2022-10-02 12:07:20 +03:00
Temuri Doghonadze b2cdddeaea Added translation using Weblate (Georgian) 
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2022-10-02 12:07:20 +03:00
Jan Kuparinen ea95f0dda0 Translated using Weblate (Finnish) 
Currently translated at 17.8% (845 of 4741 strings)

Translation: freeipa/master
Translate-URL: https://translate.fedoraproject.org/projects/freeipa/master/fi/
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2022-10-02 12:07:20 +03:00
Yuri Chornoivan 0f2d2d36ee Translated using Weblate (Ukrainian) 
Currently translated at 100.0% (4741 of 4741 strings)

Translation: freeipa/master
Translate-URL: https://translate.fedoraproject.org/projects/freeipa/master/uk/
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2022-10-02 12:07:20 +03:00
Weblate 6f3c9a2533 Update translation files 
Updated by "Update PO files to match POT (msgmerge)" hook in Weblate.

Translation: freeipa/master
Translate-URL: https://translate.fedoraproject.org/projects/freeipa/master/
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2022-10-02 12:07:20 +03:00
Jan Kuparinen e92b847850 Translated using Weblate (Finnish) 
Currently translated at 17.7% (842 of 4739 strings)

Translation: freeipa/master
Translate-URL: https://translate.fedoraproject.org/projects/freeipa/master/fi/
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2022-10-02 12:07:20 +03:00
Jan Kuparinen cd702b5421 Translated using Weblate (Finnish) 
Currently translated at 17.7% (840 of 4739 strings)

Translation: freeipa/master
Translate-URL: https://translate.fedoraproject.org/projects/freeipa/master/fi/
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2022-10-02 12:07:20 +03:00
Ricky Tigg ab652aa11a Translated using Weblate (Finnish) 
Currently translated at 17.5% (833 of 4739 strings)

Translation: freeipa/master
Translate-URL: https://translate.fedoraproject.org/projects/freeipa/master/fi/
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2022-10-02 12:07:20 +03:00
Piotr Drąg 35f58c9af4 Translated using Weblate (Polish) 
Currently translated at 9.5% (453 of 4739 strings)

Translation: freeipa/master
Translate-URL: https://translate.fedoraproject.org/projects/freeipa/master/pl/
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2022-10-02 12:07:20 +03:00
Jan Kuparinen f680614b5c Translated using Weblate (Finnish) 
Currently translated at 17.5% (832 of 4739 strings)

Translation: freeipa/master
Translate-URL: https://translate.fedoraproject.org/projects/freeipa/master/fi/
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2022-10-02 12:07:20 +03:00
Jan Kuparinen 581dfddcf7 Translated using Weblate (Finnish) 
Currently translated at 17.2% (816 of 4739 strings)

Translation: freeipa/master
Translate-URL: https://translate.fedoraproject.org/projects/freeipa/master/fi/
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2022-10-02 12:07:20 +03:00
Andika Triwidada c7ba8f5f28 Translated using Weblate (Indonesian) 
Currently translated at 6.8% (323 of 4739 strings)

Translation: freeipa/master
Translate-URL: https://translate.fedoraproject.org/projects/freeipa/master/id/
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2022-10-02 12:07:20 +03:00
Jan Kuparinen 7fc89bc0ba Translated using Weblate (Finnish) 
Currently translated at 16.9% (804 of 4739 strings)

Translation: freeipa/master
Translate-URL: https://translate.fedoraproject.org/projects/freeipa/master/fi/
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2022-10-02 12:07:20 +03:00
Yuri Chornoivan cf338b5b35 Translated using Weblate (Ukrainian) 
Currently translated at 100.0% (4739 of 4739 strings)

Translation: freeipa/master
Translate-URL: https://translate.fedoraproject.org/projects/freeipa/master/uk/
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2022-10-02 12:07:20 +03:00
Weblate 8b1eb488bd Update translation files 
Updated by "Update PO files to match POT (msgmerge)" hook in Weblate.

Translation: freeipa/master
Translate-URL: https://translate.fedoraproject.org/projects/freeipa/master/
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2022-10-02 12:07:20 +03:00
Jan Kuparinen 386e51168a Translated using Weblate (Finnish) 
Currently translated at 16.7% (794 of 4739 strings)

Translation: freeipa/master
Translate-URL: https://translate.fedoraproject.org/projects/freeipa/master/fi/
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2022-10-02 12:07:20 +03:00
Jan Kuparinen feb94b3aa5 Translated using Weblate (Finnish) 
Currently translated at 16.1% (764 of 4739 strings)

Translation: freeipa/master
Translate-URL: https://translate.fedoraproject.org/projects/freeipa/master/fi/
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2022-10-02 12:07:20 +03:00
Ricky Tigg e7623b4f5a Translated using Weblate (Finnish) 
Currently translated at 16.0% (762 of 4739 strings)

Translation: freeipa/master
Translate-URL: https://translate.fedoraproject.org/projects/freeipa/master/fi/
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2022-10-02 12:07:20 +03:00
Jan Kuparinen e39ccf5988 Translated using Weblate (Finnish) 
Currently translated at 15.9% (754 of 4739 strings)

Translation: freeipa/master
Translate-URL: https://translate.fedoraproject.org/projects/freeipa/master/fi/
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2022-10-02 12:07:20 +03:00
Piotr Drąg fd985ae43a Translated using Weblate (Polish) 
Currently translated at 9.5% (452 of 4739 strings)

Translation: freeipa/master
Translate-URL: https://translate.fedoraproject.org/projects/freeipa/master/pl/
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2022-10-02 12:07:20 +03:00
Ricky Tigg 0ab3870229 Translated using Weblate (Finnish) 
Currently translated at 15.6% (743 of 4739 strings)

Translation: freeipa/master
Translate-URL: https://translate.fedoraproject.org/projects/freeipa/master/fi/
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2022-10-02 12:07:20 +03:00
Jan Kuparinen 706faddf24 Translated using Weblate (Finnish) 
Currently translated at 15.6% (742 of 4739 strings)

Translation: freeipa/master
Translate-URL: https://translate.fedoraproject.org/projects/freeipa/master/fi/
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2022-10-02 12:07:20 +03:00
Jan Kuparinen dd345aaca8 Translated using Weblate (Finnish) 
Currently translated at 15.5% (736 of 4739 strings)

Translation: freeipa/master
Translate-URL: https://translate.fedoraproject.org/projects/freeipa/master/fi/
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2022-10-02 12:07:20 +03:00
Jan Kuparinen 31ba6aa500 Translated using Weblate (Finnish) 
Currently translated at 10.9% (520 of 4739 strings)

Translation: freeipa/master
Translate-URL: https://translate.fedoraproject.org/projects/freeipa/master/fi/
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2022-10-02 12:07:20 +03:00
Yuri Chornoivan b9f9462055 Translated using Weblate (Ukrainian) 
Currently translated at 100.0% (4739 of 4739 strings)

Translation: freeipa/master
Translate-URL: https://translate.fedoraproject.org/projects/freeipa/master/uk/
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2022-10-02 12:07:20 +03:00
Yuri Chornoivan 5cc8e5b869 Translated using Weblate (Ukrainian) 
Currently translated at 99.4% (4713 of 4739 strings)

Translation: freeipa/master
Translate-URL: https://translate.fedoraproject.org/projects/freeipa/master/uk/
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2022-10-02 12:07:20 +03:00
Yuri Chornoivan a0e0d57a42 Translated using Weblate (Ukrainian) 
Currently translated at 98.5% (4671 of 4739 strings)

Translation: freeipa/master
Translate-URL: https://translate.fedoraproject.org/projects/freeipa/master/uk/
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2022-10-02 12:07:20 +03:00
Weblate 3c7fe6c49d Update translation files 
Updated by "Update PO files to match POT (msgmerge)" hook in Weblate.

Translation: freeipa/master
Translate-URL: https://translate.fedoraproject.org/projects/freeipa/master/
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2022-10-02 12:07:20 +03:00
Jan Kuparinen 4185578705 Translated using Weblate (Finnish) 
Currently translated at 7.7% (362 of 4672 strings)

Translation: freeipa/master
Translate-URL: https://translate.fedoraproject.org/projects/freeipa/master/fi/
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2022-10-02 12:07:20 +03:00
Weblate ac2c3de889 Update translation files 
Updated by "Update LINGUAS file" hook in Weblate.

Update translation files

Updated by "Update PO files to match POT (msgmerge)" hook in Weblate.

Co-authored-by: Weblate <noreply@weblate.org>
Translate-URL: https://translate.fedoraproject.org/projects/freeipa/master/
Translation: freeipa/master
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2022-10-02 12:07:20 +03:00