[Freeipa-devel] [freeipa PR#2206][closed] [Backport][ipa-4-5] In IPA 4.4 when updating userpassword with ldapmodify does not update…

2018-08-09 Thread flo-renaud via FreeIPA-devel
   URL: https://github.com/freeipa/freeipa/pull/2206
Author: Tiboris
 Title: #2206: [Backport][ipa-4-5] In IPA 4.4 when updating userpassword with 
ldapmodify does not update…
Action: closed

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2206/head:pr2206
git checkout pr2206
___
FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org
To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/freeipa-devel@lists.fedorahosted.org/message/IED4O2TYJF3U2JPRGSP4ETFG6KRKASCN/


[Freeipa-devel] [freeipa PR#2231][closed] [Backport][ipa-4-5] PRCI: extend timeouts for gating

2018-08-09 Thread flo-renaud via FreeIPA-devel
   URL: https://github.com/freeipa/freeipa/pull/2231
Author: Tiboris
 Title: #2231: [Backport][ipa-4-5] PRCI: extend timeouts for gating
Action: closed

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2231/head:pr2231
git checkout pr2231
___
FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org
To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/freeipa-devel@lists.fedorahosted.org/message/VCTKYFDF2YYBZDZKCAH7T2PTO4QK3PCB/


[Freeipa-devel] [freeipa PR#2217][closed] [Backport][ipa-4-6] Tests: add integration test for 7601

2018-08-09 Thread flo-renaud via FreeIPA-devel
   URL: https://github.com/freeipa/freeipa/pull/2217
Author: Tiboris
 Title: #2217: [Backport][ipa-4-6] Tests: add integration test for 7601
Action: closed

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2217/head:pr2217
git checkout pr2217
___
FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org
To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/freeipa-devel@lists.fedorahosted.org/message/37X5LMUTLO3PHCLHRZDRFGLE7VMWIHEE/


[Freeipa-devel] [freeipa PR#2221][closed] [ipa-4-5] Test: fix definition of template for dnssec

2018-08-09 Thread Tiboris via FreeIPA-devel
   URL: https://github.com/freeipa/freeipa/pull/2221
Author: flo-renaud
 Title: #2221: [ipa-4-5] Test: fix definition of template for dnssec
Action: closed

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2221/head:pr2221
git checkout pr2221
___
FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org
To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/freeipa-devel@lists.fedorahosted.org/message/JM3DMVWJIHI3UTH3KWNIFZNGYIDPU6JU/


[Freeipa-devel] [freeipa PR#2235][opened] ipaclient: Remove --no-sssd and --no-ac options

2018-08-09 Thread t-woerner via FreeIPA-devel
   URL: https://github.com/freeipa/freeipa/pull/2235
Author: t-woerner
 Title: #2235: ipaclient: Remove --no-sssd and --no-ac options
Action: opened

PR body:
"""
Client installation with --no-sssd option has already beeen deprecated
with https://pagure.io/freeipa/issue/5860. Authconfig support has been
removed, therefore --no-ac option can be removed also.

ipatests/test_integration/test_authselect.py: Skip no_sssd and no_ac tests.

See: https://pagure.io/freeipa/issue/7671
Signed-off-by: Thomas Woerner 
"""

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2235/head:pr2235
git checkout pr2235
From 44bfa588f23dd127d52dea091d71220f00bd1285 Mon Sep 17 00:00:00 2001
From: Thomas Woerner 
Date: Thu, 9 Aug 2018 12:05:26 +0200
Subject: [PATCH] ipaclient: Remove --no-sssd and --no-ac options

Client installation with --no-sssd option has already beeen deprecated
with https://pagure.io/freeipa/issue/5860. Authconfig support has been
removed, therefore --no-ac option can be removed also.

ipatests/test_integration/test_authselect.py: Skip no_sssd and no_ac tests.

See: https://pagure.io/freeipa/issue/7671
Signed-off-by: Thomas Woerner 
---
 ipaclient/install/client.py  | 6 +-
 ipaclient/install/sssd.py| 9 +
 ipatests/test_integration/test_authselect.py | 2 ++
 3 files changed, 4 insertions(+), 13 deletions(-)

diff --git a/ipaclient/install/client.py b/ipaclient/install/client.py
index 627351ac21..800a467340 100644
--- a/ipaclient/install/client.py
+++ b/ipaclient/install/client.py
@@ -3709,11 +3709,7 @@ def ca_cert_files(self, value):
 def prompt_password(self):
 return self.interactive
 
-no_ac = knob(
-None,
-description="do not modify the nsswitch.conf and PAM configuration",
-cli_names='--noac',
-)
+no_ac = False
 
 force = knob(
 None,
diff --git a/ipaclient/install/sssd.py b/ipaclient/install/sssd.py
index b20abde56f..98b8504643 100644
--- a/ipaclient/install/sssd.py
+++ b/ipaclient/install/sssd.py
@@ -43,11 +43,4 @@ class SSSDInstallInterface(service.ServiceInstallInterface):
 )
 preserve_sssd = enroll_only(preserve_sssd)
 
-no_sssd = knob(
-None,
-deprecated=True,
-description="Do not configure the client to use SSSD for "
-"authentication",
-cli_names=[None, '-S'],
-)
-no_sssd = enroll_only(no_sssd)
+no_sssd = False
diff --git a/ipatests/test_integration/test_authselect.py b/ipatests/test_integration/test_authselect.py
index fa9b202654..ebf3d98922 100644
--- a/ipatests/test_integration/test_authselect.py
+++ b/ipatests/test_integration/test_authselect.py
@@ -88,6 +88,7 @@ def _uninstall_client(self):
 ['ipa-client-install', '--uninstall', '-U'],
 raiseonerr=False)
 
+@pytest.mark.skip(reason="Option --no-sssd has been removed")
 def test_install_client_no_sssd(self):
 """
 Test client installation with --no-sssd option.
@@ -98,6 +99,7 @@ def test_install_client_no_sssd(self):
 msg = "Option '--no-sssd' is incompatible with the 'authselect' tool"
 assert msg in result.stderr_text
 
+@pytest.mark.skip(reason="Option --noac has been removed")
 def test_install_client_no_ac(self):
 """
 Test client installation with --noac option.
___
FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org
To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/freeipa-devel@lists.fedorahosted.org/message/XC7H5FJD2KBUROR7UCRWYIODCDEH5XWM/


[Freeipa-devel] [freeipa PR#2230][closed] [Backport][ipa-4-6] PRCI: extend timeouts for gating

2018-08-09 Thread Tiboris via FreeIPA-devel
   URL: https://github.com/freeipa/freeipa/pull/2230
Author: Tiboris
 Title: #2230: [Backport][ipa-4-6] PRCI: extend timeouts for gating
Action: closed

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2230/head:pr2230
git checkout pr2230
___
FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org
To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/freeipa-devel@lists.fedorahosted.org/message/HYKZONXA3VZHG7RFJMSXQIAASDO3LSSZ/


[Freeipa-devel] [freeipa PR#2229][closed] [Backport][ipa-4-7] PRCI: extend timeouts for gating

2018-08-09 Thread Tiboris via FreeIPA-devel
   URL: https://github.com/freeipa/freeipa/pull/2229
Author: Tiboris
 Title: #2229: [Backport][ipa-4-7] PRCI: extend timeouts for gating
Action: closed

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2229/head:pr2229
git checkout pr2229
___
FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org
To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/freeipa-devel@lists.fedorahosted.org/message/ANY6YMYD5WRNR72D6AUJPHHDGLKLPVP6/


[Freeipa-devel] [freeipa PR#2234][opened] Disable DL0 specific tests

2018-08-09 Thread tiran via FreeIPA-devel
   URL: https://github.com/freeipa/freeipa/pull/2234
Author: tiran
 Title: #2234: Disable DL0 specific tests
Action: opened

PR body:
"""
Disable tests that use domain level 0. Fail early to catch additional
tests that depend on DL0.

See: https://pagure.io/freeipa/issue/7669
Signed-off-by: Christian Heimes 
"""

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2234/head:pr2234
git checkout pr2234
From 4f9642eb109f9ff76a3682fb99fc97ed96e3af64 Mon Sep 17 00:00:00 2001
From: Christian Heimes 
Date: Thu, 9 Aug 2018 09:25:52 +0200
Subject: [PATCH] Disable DL0 specific tests

Disable tests that use domain level 0. Fail early to catch additional
tests that depend on DL0.

See: https://pagure.io/freeipa/issue/7669
Signed-off-by: Christian Heimes 
---
 ipatests/pytest_ipa/integration/tasks.py  | 15 ++-
 ipatests/test_integration/test_caless.py  | 27 ++-
 .../test_replica_promotion.py |  5 
 3 files changed, 34 insertions(+), 13 deletions(-)

diff --git a/ipatests/pytest_ipa/integration/tasks.py b/ipatests/pytest_ipa/integration/tasks.py
index a50b55d7d5..4ffb20e053 100644
--- a/ipatests/pytest_ipa/integration/tasks.py
+++ b/ipatests/pytest_ipa/integration/tasks.py
@@ -32,6 +32,7 @@
 
 import dns
 from ldif import LDIFWriter
+import pytest
 from SSSDConfig import SSSDConfig
 from six import StringIO
 
@@ -287,6 +288,8 @@ def install_master(host, setup_dns=True, setup_kra=False, setup_adtrust=False,
stdin_text=None, raiseonerr=True):
 if domain_level is None:
 domain_level = host.config.domain_level
+if domain_level == DOMAIN_LEVEL_0:
+pytest.fail("Domain level 0 is not supported anymore")
 setup_server_logs_collecting(host)
 apply_common_fixes(host)
 fix_apache_semaphores(host)
@@ -397,6 +400,8 @@ def install_replica(master, replica, setup_ca=True, setup_dns=False,
 raiseonerr=True):
 if domain_level is None:
 domain_level = domainlevel(master)
+if domain_level == DOMAIN_LEVEL_0:
+pytest.fail("Domain level 0 is not supported anymore")
 apply_common_fixes(replica)
 setup_server_logs_collecting(replica)
 allow_sync_ptr(master)
@@ -709,6 +714,7 @@ def connect_replica(master, replica, domain_level=None):
 if domain_level is None:
 domain_level = master.config.domain_level
 if domain_level == DOMAIN_LEVEL_0:
+pytest.fail("Domain level 0 is not supported anymore")
 replica.run_command(['ipa-replica-manage', 'connect', master.hostname])
 else:
 kinit_admin(master)
@@ -723,7 +729,10 @@ def disconnect_replica(master, replica, domain_level=None):
 if domain_level is None:
 domain_level = master.config.domain_level
 if domain_level == DOMAIN_LEVEL_0:
-replica.run_command(['ipa-replica-manage', 'disconnect', master.hostname])
+pytest.fail("Domain level 0 is not supported anymore")
+replica.run_command([
+'ipa-replica-manage', 'disconnect', master.hostname
+])
 else:
 kinit_admin(master)
 master.run_command(["ipa", "topologysegment-del", DOMAIN_SUFFIX_NAME,
@@ -1222,6 +1231,8 @@ def ipa_restore(master, backup_path):
 def install_kra(host, domain_level=None, first_instance=False, raiseonerr=True):
 if domain_level is None:
 domain_level = domainlevel(host)
+if domain_level == DOMAIN_LEVEL_0:
+pytest.fail("Domain level 0 is not supported anymore")
 command = ["ipa-kra-install", "-U", "-p", host.config.dirman_password]
 if domain_level == DOMAIN_LEVEL_0 and not first_instance:
 replica_file = get_replica_filename(host)
@@ -1237,6 +1248,8 @@ def install_ca(host, domain_level=None, first_instance=False,
external_ca=False, cert_files=None, raiseonerr=True):
 if domain_level is None:
 domain_level = domainlevel(host)
+if domain_level == DOMAIN_LEVEL_0:
+pytest.fail("Domain level 0 is not supported anymore")
 command = ["ipa-ca-install", "-U", "-p", host.config.dirman_password,
"-P", 'admin', "-w", host.config.admin_password]
 if domain_level == DOMAIN_LEVEL_0 and not first_instance:
diff --git a/ipatests/test_integration/test_caless.py b/ipatests/test_integration/test_caless.py
index 2449b3c875..5ffed8ad83 100644
--- a/ipatests/test_integration/test_caless.py
+++ b/ipatests/test_integration/test_caless.py
@@ -39,7 +39,7 @@
 from ipatests.pytest_ipa.integration import tasks
 from ipatests.create_external_ca import ExternalCA
 from ipatests.pytest_ipa.integration import create_caless_pki
-from ipalib.constants import DOMAIN_LEVEL_0
+from ipalib.constants import DOMAIN_LEVEL_0, DOMAIN_LEVEL_1
 
 if six.PY3:
 unicode = str
@@ -252,6 +252,8 @@ def prepare_replica(self, _replica_number=0, replica=None, master=None,
 
 Return value is the remote ipa-replica-prepare command