[Freeipa-devel] [freeipa PR#874][+pushed] Changing cert-find to go through the proxy instead of using the port 8080
URL: https://github.com/freeipa/freeipa/pull/874 Title: #874: Changing cert-find to go through the proxy instead of using the port 8080 Label: +pushed ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org
[Freeipa-devel] [freeipa PR#874][closed] Changing cert-find to go through the proxy instead of using the port 8080
URL: https://github.com/freeipa/freeipa/pull/874 Author: felipevolpone Title: #874: Changing cert-find to go through the proxy instead of using the port 8080 Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/874/head:pr874 git checkout pr874 ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org
[Freeipa-devel] [freeipa PR#874][comment] Changing cert-find to go through the proxy instead of using the port 8080
URL: https://github.com/freeipa/freeipa/pull/874 Title: #874: Changing cert-find to go through the proxy instead of using the port 8080 tomaskrizek commented: """ master: * 36532031cfef893aa2f95d709efd807729de79f7 Changing cert-find to go through the proxy instead of using the port 8080 ipa-4-5: * 960b9a3f1b1637c0ea5b11d6d7f671a09a3e89da Changing cert-find to go through the proxy instead of using the port 8080 """ See the full comment at https://github.com/freeipa/freeipa/pull/874#issuecomment-308949940 ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org
[Freeipa-devel] [freeipa PR#876][opened] python-netifaces: update to reflect upstream changes
URL: https://github.com/freeipa/freeipa/pull/876
Author: MartinBasti
Title: #876: python-netifaces: update to reflect upstream changes
Action: opened
PR body:
"""
python-netifaces now provides IPv6 netmask in format mask/prefix. It
breaks freeipa as it is unexpected format for python-netaddr. We must
split netmask and provide only prefix for netaddr.
https://pagure.io/freeipa/issue/7021
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/876/head:pr876
git checkout pr876
From f4d58ce97252eb891e1c8158927547b2e174edd8 Mon Sep 17 00:00:00 2001
From: Martin Basti
Date: Fri, 16 Jun 2017 13:42:53 +0200
Subject: [PATCH] python-netifaces: update to reflect upstream changes
python-netifaces now provides IPv6 netmask in format mask/prefix. It
breaks freeipa as it is unexpected format for python-netaddr. We must
split netmask and provide only prefix for netaddr.
https://pagure.io/freeipa/issue/7021
---
ipapython/ipautil.py | 7 ++-
1 file changed, 6 insertions(+), 1 deletion(-)
diff --git a/ipapython/ipautil.py b/ipapython/ipautil.py
index a277ed8747..02c32381ab 100644
--- a/ipapython/ipautil.py
+++ b/ipapython/ipautil.py
@@ -212,9 +212,14 @@ def get_matching_interface(self):
# errors in IPNetwork
ifaddr = ifdata['addr'].split(u'%', 1)[0]
+# newer versions of netifaces provide IPv6 netmask in format
+# ':::::/64'. We have to split and use prefix
+# or the netmask with older versions
+ifmask = ifdata['netmask'].split(u'/')[-1]
+
ifnet = netaddr.IPNetwork('{addr}/{netmask}'.format(
addr=ifaddr,
-netmask=ifdata['netmask']
+netmask=ifmask
))
if ifnet == self._net or (
self._net is None and ifnet.ip == self):
___
FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org
To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org
[Freeipa-devel] [freeipa PR#781][edited] Warn in cert-request if CSR doesn't contain SAN
URL: https://github.com/freeipa/freeipa/pull/781 Author: felipevolpone Title: #781: Warn in cert-request if CSR doesn't contain SAN Action: edited Changed field: title Original value: """ [WIP] Warn in cert-request if CSR doesn't contain SAN """ ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org
[Freeipa-devel] [freeipa PR#876][comment] python-netifaces: update to reflect upstream changes
URL: https://github.com/freeipa/freeipa/pull/876 Title: #876: python-netifaces: update to reflect upstream changes martbab commented: """ Shouldn't we bump requires on python-netifaces so that we don't accidentally pull in the older version that can break this new code? """ See the full comment at https://github.com/freeipa/freeipa/pull/876#issuecomment-309006143 ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org
[Freeipa-devel] [freeipa PR#876][comment] python-netifaces: update to reflect upstream changes
URL: https://github.com/freeipa/freeipa/pull/876 Title: #876: python-netifaces: update to reflect upstream changes pvoborni commented: """ Could the checked addresses(input from netifaces) be logged? It is easier to debug if something goes wrong. """ See the full comment at https://github.com/freeipa/freeipa/pull/876#issuecomment-309009672 ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org
[Freeipa-devel] [freeipa PR#876][comment] python-netifaces: update to reflect upstream changes
URL: https://github.com/freeipa/freeipa/pull/876 Title: #876: python-netifaces: update to reflect upstream changes MartinBasti commented: """ @martbab should work with both versions, I don't want to bump requires for this @pvoborni It could, I'll update PR """ See the full comment at https://github.com/freeipa/freeipa/pull/876#issuecomment-309011126 ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org
[Freeipa-devel] [freeipa PR#802][+ack] Improve cert messages some more + do that for KDC certs as well
URL: https://github.com/freeipa/freeipa/pull/802 Title: #802: Improve cert messages some more + do that for KDC certs as well Label: +ack ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org
[Freeipa-devel] [freeipa PR#802][comment] Improve cert messages some more + do that for KDC certs as well
URL: https://github.com/freeipa/freeipa/pull/802 Title: #802: Improve cert messages some more + do that for KDC certs as well martbab commented: """ master: * f827fe0f19596d29f9354368077fb43be2e16e8e cert-validate: keep all messages in cert validation * bee3c1eccd44f7671a1455d12235bcbb910494b3 More verbose error message on kdc cert validation """ See the full comment at https://github.com/freeipa/freeipa/pull/802#issuecomment-309035747 ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org
[Freeipa-devel] [freeipa PR#802][closed] Improve cert messages some more + do that for KDC certs as well
URL: https://github.com/freeipa/freeipa/pull/802 Author: stlaz Title: #802: Improve cert messages some more + do that for KDC certs as well Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/802/head:pr802 git checkout pr802 ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org
[Freeipa-devel] [freeipa PR#802][+pushed] Improve cert messages some more + do that for KDC certs as well
URL: https://github.com/freeipa/freeipa/pull/802 Title: #802: Improve cert messages some more + do that for KDC certs as well Label: +pushed ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org
[Freeipa-devel] [freeipa PR#859][+prioritized] Add CommonNameToSANDefault to default cert profile
URL: https://github.com/freeipa/freeipa/pull/859 Title: #859: Add CommonNameToSANDefault to default cert profile Label: +prioritized ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org
