[Freeipa-devel] [freeipa PR#2206][closed] [Backport][ipa-4-5] In IPA 4.4 when updating userpassword with ldapmodify does not update…
URL: https://github.com/freeipa/freeipa/pull/2206 Author: Tiboris Title: #2206: [Backport][ipa-4-5] In IPA 4.4 when updating userpassword with ldapmodify does not update… Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2206/head:pr2206 git checkout pr2206 ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/freeipa-devel@lists.fedorahosted.org/message/IED4O2TYJF3U2JPRGSP4ETFG6KRKASCN/
[Freeipa-devel] [freeipa PR#2231][closed] [Backport][ipa-4-5] PRCI: extend timeouts for gating
URL: https://github.com/freeipa/freeipa/pull/2231 Author: Tiboris Title: #2231: [Backport][ipa-4-5] PRCI: extend timeouts for gating Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2231/head:pr2231 git checkout pr2231 ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/freeipa-devel@lists.fedorahosted.org/message/VCTKYFDF2YYBZDZKCAH7T2PTO4QK3PCB/
[Freeipa-devel] [freeipa PR#2217][closed] [Backport][ipa-4-6] Tests: add integration test for 7601
URL: https://github.com/freeipa/freeipa/pull/2217 Author: Tiboris Title: #2217: [Backport][ipa-4-6] Tests: add integration test for 7601 Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2217/head:pr2217 git checkout pr2217 ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/freeipa-devel@lists.fedorahosted.org/message/37X5LMUTLO3PHCLHRZDRFGLE7VMWIHEE/
[Freeipa-devel] [freeipa PR#2221][closed] [ipa-4-5] Test: fix definition of template for dnssec
URL: https://github.com/freeipa/freeipa/pull/2221 Author: flo-renaud Title: #2221: [ipa-4-5] Test: fix definition of template for dnssec Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2221/head:pr2221 git checkout pr2221 ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/freeipa-devel@lists.fedorahosted.org/message/JM3DMVWJIHI3UTH3KWNIFZNGYIDPU6JU/
[Freeipa-devel] [freeipa PR#2235][opened] ipaclient: Remove --no-sssd and --no-ac options
URL: https://github.com/freeipa/freeipa/pull/2235 Author: t-woerner Title: #2235: ipaclient: Remove --no-sssd and --no-ac options Action: opened PR body: """ Client installation with --no-sssd option has already beeen deprecated with https://pagure.io/freeipa/issue/5860. Authconfig support has been removed, therefore --no-ac option can be removed also. ipatests/test_integration/test_authselect.py: Skip no_sssd and no_ac tests. See: https://pagure.io/freeipa/issue/7671 Signed-off-by: Thomas Woerner """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2235/head:pr2235 git checkout pr2235 From 44bfa588f23dd127d52dea091d71220f00bd1285 Mon Sep 17 00:00:00 2001 From: Thomas Woerner Date: Thu, 9 Aug 2018 12:05:26 +0200 Subject: [PATCH] ipaclient: Remove --no-sssd and --no-ac options Client installation with --no-sssd option has already beeen deprecated with https://pagure.io/freeipa/issue/5860. Authconfig support has been removed, therefore --no-ac option can be removed also. ipatests/test_integration/test_authselect.py: Skip no_sssd and no_ac tests. See: https://pagure.io/freeipa/issue/7671 Signed-off-by: Thomas Woerner --- ipaclient/install/client.py | 6 +- ipaclient/install/sssd.py| 9 + ipatests/test_integration/test_authselect.py | 2 ++ 3 files changed, 4 insertions(+), 13 deletions(-) diff --git a/ipaclient/install/client.py b/ipaclient/install/client.py index 627351ac21..800a467340 100644 --- a/ipaclient/install/client.py +++ b/ipaclient/install/client.py @@ -3709,11 +3709,7 @@ def ca_cert_files(self, value): def prompt_password(self): return self.interactive -no_ac = knob( -None, -description="do not modify the nsswitch.conf and PAM configuration", -cli_names='--noac', -) +no_ac = False force = knob( None, diff --git a/ipaclient/install/sssd.py b/ipaclient/install/sssd.py index b20abde56f..98b8504643 100644 --- a/ipaclient/install/sssd.py +++ b/ipaclient/install/sssd.py @@ -43,11 +43,4 @@ class SSSDInstallInterface(service.ServiceInstallInterface): ) preserve_sssd = enroll_only(preserve_sssd) -no_sssd = knob( -None, -deprecated=True, -description="Do not configure the client to use SSSD for " -"authentication", -cli_names=[None, '-S'], -) -no_sssd = enroll_only(no_sssd) +no_sssd = False diff --git a/ipatests/test_integration/test_authselect.py b/ipatests/test_integration/test_authselect.py index fa9b202654..ebf3d98922 100644 --- a/ipatests/test_integration/test_authselect.py +++ b/ipatests/test_integration/test_authselect.py @@ -88,6 +88,7 @@ def _uninstall_client(self): ['ipa-client-install', '--uninstall', '-U'], raiseonerr=False) +@pytest.mark.skip(reason="Option --no-sssd has been removed") def test_install_client_no_sssd(self): """ Test client installation with --no-sssd option. @@ -98,6 +99,7 @@ def test_install_client_no_sssd(self): msg = "Option '--no-sssd' is incompatible with the 'authselect' tool" assert msg in result.stderr_text +@pytest.mark.skip(reason="Option --noac has been removed") def test_install_client_no_ac(self): """ Test client installation with --noac option. ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/freeipa-devel@lists.fedorahosted.org/message/XC7H5FJD2KBUROR7UCRWYIODCDEH5XWM/
[Freeipa-devel] [freeipa PR#2230][closed] [Backport][ipa-4-6] PRCI: extend timeouts for gating
URL: https://github.com/freeipa/freeipa/pull/2230 Author: Tiboris Title: #2230: [Backport][ipa-4-6] PRCI: extend timeouts for gating Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2230/head:pr2230 git checkout pr2230 ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/freeipa-devel@lists.fedorahosted.org/message/HYKZONXA3VZHG7RFJMSXQIAASDO3LSSZ/
[Freeipa-devel] [freeipa PR#2229][closed] [Backport][ipa-4-7] PRCI: extend timeouts for gating
URL: https://github.com/freeipa/freeipa/pull/2229 Author: Tiboris Title: #2229: [Backport][ipa-4-7] PRCI: extend timeouts for gating Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2229/head:pr2229 git checkout pr2229 ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/freeipa-devel@lists.fedorahosted.org/message/ANY6YMYD5WRNR72D6AUJPHHDGLKLPVP6/
[Freeipa-devel] [freeipa PR#2234][opened] Disable DL0 specific tests
URL: https://github.com/freeipa/freeipa/pull/2234 Author: tiran Title: #2234: Disable DL0 specific tests Action: opened PR body: """ Disable tests that use domain level 0. Fail early to catch additional tests that depend on DL0. See: https://pagure.io/freeipa/issue/7669 Signed-off-by: Christian Heimes """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2234/head:pr2234 git checkout pr2234 From 4f9642eb109f9ff76a3682fb99fc97ed96e3af64 Mon Sep 17 00:00:00 2001 From: Christian Heimes Date: Thu, 9 Aug 2018 09:25:52 +0200 Subject: [PATCH] Disable DL0 specific tests Disable tests that use domain level 0. Fail early to catch additional tests that depend on DL0. See: https://pagure.io/freeipa/issue/7669 Signed-off-by: Christian Heimes --- ipatests/pytest_ipa/integration/tasks.py | 15 ++- ipatests/test_integration/test_caless.py | 27 ++- .../test_replica_promotion.py | 5 3 files changed, 34 insertions(+), 13 deletions(-) diff --git a/ipatests/pytest_ipa/integration/tasks.py b/ipatests/pytest_ipa/integration/tasks.py index a50b55d7d5..4ffb20e053 100644 --- a/ipatests/pytest_ipa/integration/tasks.py +++ b/ipatests/pytest_ipa/integration/tasks.py @@ -32,6 +32,7 @@ import dns from ldif import LDIFWriter +import pytest from SSSDConfig import SSSDConfig from six import StringIO @@ -287,6 +288,8 @@ def install_master(host, setup_dns=True, setup_kra=False, setup_adtrust=False, stdin_text=None, raiseonerr=True): if domain_level is None: domain_level = host.config.domain_level +if domain_level == DOMAIN_LEVEL_0: +pytest.fail("Domain level 0 is not supported anymore") setup_server_logs_collecting(host) apply_common_fixes(host) fix_apache_semaphores(host) @@ -397,6 +400,8 @@ def install_replica(master, replica, setup_ca=True, setup_dns=False, raiseonerr=True): if domain_level is None: domain_level = domainlevel(master) +if domain_level == DOMAIN_LEVEL_0: +pytest.fail("Domain level 0 is not supported anymore") apply_common_fixes(replica) setup_server_logs_collecting(replica) allow_sync_ptr(master) @@ -709,6 +714,7 @@ def connect_replica(master, replica, domain_level=None): if domain_level is None: domain_level = master.config.domain_level if domain_level == DOMAIN_LEVEL_0: +pytest.fail("Domain level 0 is not supported anymore") replica.run_command(['ipa-replica-manage', 'connect', master.hostname]) else: kinit_admin(master) @@ -723,7 +729,10 @@ def disconnect_replica(master, replica, domain_level=None): if domain_level is None: domain_level = master.config.domain_level if domain_level == DOMAIN_LEVEL_0: -replica.run_command(['ipa-replica-manage', 'disconnect', master.hostname]) +pytest.fail("Domain level 0 is not supported anymore") +replica.run_command([ +'ipa-replica-manage', 'disconnect', master.hostname +]) else: kinit_admin(master) master.run_command(["ipa", "topologysegment-del", DOMAIN_SUFFIX_NAME, @@ -1222,6 +1231,8 @@ def ipa_restore(master, backup_path): def install_kra(host, domain_level=None, first_instance=False, raiseonerr=True): if domain_level is None: domain_level = domainlevel(host) +if domain_level == DOMAIN_LEVEL_0: +pytest.fail("Domain level 0 is not supported anymore") command = ["ipa-kra-install", "-U", "-p", host.config.dirman_password] if domain_level == DOMAIN_LEVEL_0 and not first_instance: replica_file = get_replica_filename(host) @@ -1237,6 +1248,8 @@ def install_ca(host, domain_level=None, first_instance=False, external_ca=False, cert_files=None, raiseonerr=True): if domain_level is None: domain_level = domainlevel(host) +if domain_level == DOMAIN_LEVEL_0: +pytest.fail("Domain level 0 is not supported anymore") command = ["ipa-ca-install", "-U", "-p", host.config.dirman_password, "-P", 'admin', "-w", host.config.admin_password] if domain_level == DOMAIN_LEVEL_0 and not first_instance: diff --git a/ipatests/test_integration/test_caless.py b/ipatests/test_integration/test_caless.py index 2449b3c875..5ffed8ad83 100644 --- a/ipatests/test_integration/test_caless.py +++ b/ipatests/test_integration/test_caless.py @@ -39,7 +39,7 @@ from ipatests.pytest_ipa.integration import tasks from ipatests.create_external_ca import ExternalCA from ipatests.pytest_ipa.integration import create_caless_pki -from ipalib.constants import DOMAIN_LEVEL_0 +from ipalib.constants import DOMAIN_LEVEL_0, DOMAIN_LEVEL_1 if six.PY3: unicode = str @@ -252,6 +252,8 @@ def prepare_replica(self, _replica_number=0, replica=None, master=None, Return value is the remote ipa-replica-prepare command