Project

General

Profile

Activity

From 11/11/2015 to 12/10/2015

12/10/2015

07:48 PM Bug #12774 (Closed): DNS nsupdate configuration woes
According to the examples [1] [2] as well as the puppet-foreman_proxy module [3], the configuration (dns_key, dns_ser... Frank Wall
11:02 AM Refactor #11081 (Closed): Move DHCP providers to plugin-capable layout
Applied in changeset commit:62c9e22d26c686702271e5d4b33fc6cde73d4a8a. Anonymous
11:01 AM Feature #12715: As a user I would like to know if the Proxy's available plugins are up and running and if they are not running why they did not load
I can't tell from the title if this is in the right project, it's missing a description (again). It may depend on, o... Dominic Cleal
10:03 AM Revision 62c9e22d: Fixes #11081: broke out dhcp providers into separate modules
Dmitri Dolguikh
06:02 AM Bug #12572 (Closed): Smart-Proxy includes RC4 in ciphersuites
Applied in changeset commit:508a9e8b18d8811f65f0f9f4201c287bae55da2d. Brandon Weeks
05:56 AM Bug #12555: Only first FreeIPA XMLRPC call succeeds Foreman proxy 1.10 and FreeIPA, version: 4.1.4
Confirmed to work for us too. Davy Stoffel
05:33 AM Revision 508a9e8b: Fixes #12572 - refactor openssl settings
Brandon Weeks

12/09/2015

03:28 PM Bug #12555: Only first FreeIPA XMLRPC call succeeds Foreman proxy 1.10 and FreeIPA, version: 4.1.4
Confirmed to work for me. Michael Eklund
10:25 AM Bug #12555: Only first FreeIPA XMLRPC call succeeds Foreman proxy 1.10 and FreeIPA, version: 4.1.4
There is a fix available in the PR at https://github.com/theforeman/smart-proxy/pull/353. Please give it a try if you... Anonymous
10:24 AM Bug #12555 (Ready For Testing): Only first FreeIPA XMLRPC call succeeds Foreman proxy 1.10 and FreeIPA, version: 4.1.4
The Foreman Bot

12/07/2015

03:34 AM Feature #12715 (Closed): As a user I would like to know if the Proxy's available plugins are up and running and if they are not running why they did not load
Shlomi Zadok

12/02/2015

07:10 AM Refactor #11081 (Ready For Testing): Move DHCP providers to plugin-capable layout
The Foreman Bot

11/30/2015

12:41 PM Bug #12555 (Assigned): Only first FreeIPA XMLRPC call succeeds Foreman proxy 1.10 and FreeIPA, version: 4.1.4
Anonymous
12:20 PM Bug #12555: Only first FreeIPA XMLRPC call succeeds Foreman proxy 1.10 and FreeIPA, version: 4.1.4
here is my hack to make it send a new token on each call, +this is most likely not the right way to fix this+:... Michael Eklund
09:35 AM Bug #12555: Only first FreeIPA XMLRPC call succeeds Foreman proxy 1.10 and FreeIPA, version: 4.1.4
Hi, same here too. rhel 7.2, ipa-server 4.2
Given workaround works too for us, please advise.
 Davy Stoffel
10:02 AM Bug #10378 (Closed): smart-proxy service doesn't start on windows
Applied in changeset commit:8e19663fa0d964c6cbb408663f25b9bd16420db5. Anonymous
09:00 AM Revision 8e19663f: Fixes #10378: smart-proxy service starts on windows now
Dmitri Dolguikh
07:53 AM Feature #12633 (Closed): Add Pxegrub2 variant and allow multiple TFTP config files
Foreman Proxy must be enhanced with new PXE variant "Pxegrub2" to allow deploying configuration files in "grub2/" fol... Lukas Zapletal

11/26/2015

11:01 AM Bug #12465 (Closed): ISC DHCP proxy fails to parse deleted entires
Applied in changeset commit:d981fe9f751cbcf598f33cb97eba3e540a3e6785. Brandon Weeks
10:12 AM Revision d981fe9f: Fixes #12465 - remove deleted records from results
Brandon Weeks
08:01 AM Feature #12568 (Closed): /version should also return modules versions
Applied in changeset commit:1128d9318cadeb9e206850d69f8396c6e5f9f6d7. Shlomi Zadok
08:01 AM Bug #12597 (Closed): Smart Proxy DNS tests have an extra method definition that is upsetting rubocop
Applied in changeset commit:bef9bee933a01474b631f8fc88dfba5924b7b973. Aaron Stone
07:59 AM Revision 1128d931: Fixes #12568 - Add module versions to /version
Shlomi Zadok
07:52 AM Revision bef9bee9: Fixes #12597: remove extraneous method definition in the DNS API tests
And removed redundant validation in dns api 'delete' call Aaron Stone
05:23 AM Bug #12555: Only first FreeIPA XMLRPC call succeeds Foreman proxy 1.10 and FreeIPA, version: 4.1.4
Hi, any updates on this topic?
Same error with ipa-server 4.2 on rhel7.2 and foreman 1.9.2 on centos6.5. Daniel O

11/24/2015

06:40 PM Bug #12597 (Ready For Testing): Smart Proxy DNS tests have an extra method definition that is upsetting rubocop
The Foreman Bot
06:38 PM Bug #12597 (Closed): Smart Proxy DNS tests have an extra method definition that is upsetting rubocop
The Smart Proxy Rubocop Jenkins is failing because of this test, which has an inexplicable nested definition:
```
... Aaron Stone
11:01 AM Feature #12209 (Closed): Introduce support for dependency injection in dns module
Applied in changeset commit:42b958156808eb2a16bd895863b196fca8f2977d. Anonymous
10:22 AM Revision 42b95815: Fixes #12209: introduced basic support for di in dns module
DNS record class interface has been cleaned up with validation and type
parsing logic moved into the controller layer... Dmitri Dolguikh
08:01 AM Bug #12574 (Closed): Upgrade rubocop to 0.35.1
Applied in changeset commit:45ba025a024cda723e72c8cbd6437f309b51081c. Brandon Weeks
12:10 AM Bug #12574 (Ready For Testing): Upgrade rubocop to 0.35.1
The Foreman Bot
12:07 AM Bug #12574 (Closed): Upgrade rubocop to 0.35.1
Shameless ripping off #12530. Mostly because Atom doesn't like the older version. :) Brandon Weeks
08:01 AM Bug #12578 (Closed): Smart-Proxy doesn't enforce ciphersuite ordering
Applied in changeset commit:ec99de9917fcc7ba6e1595d85d508245a3ff6695. Brandon Weeks
04:25 AM Bug #12578 (Ready For Testing): Smart-Proxy doesn't enforce ciphersuite ordering
The Foreman Bot
04:15 AM Bug #12578 (Closed): Smart-Proxy doesn't enforce ciphersuite ordering
The SSL settings don't enforce ciphersuite ordering, which may allow the clients to make worse decisions about cipher... Brandon Weeks
08:01 AM Bug #12580 (Closed): WEBrick doesn't use ::Proxy::Log.logger
Applied in changeset commit:63a513a1669d6d6a4824b8bea77126b7f71dd886. Brandon Weeks
05:46 AM Bug #12580 (Closed): WEBrick doesn't use ::Proxy::Log.logger
WEBrick outputs its logs to STDOUT/STDERROR even with SETTINGS.log_level set. This is less than ideal since some impo... Brandon Weeks
07:43 AM Revision 45ba025a: Fixes #12574 - Upgrade rubocop to 0.35.1
Brandon Weeks
07:19 AM Revision ec99de99: Fixes #12578 - set SSL_OP_CIPHER_SERVER_PREFERENCE
Brandon Weeks
07:06 AM Revision 63a513a1: Fixes #12580 - configure WEBrick to use ::Proxy::Log.logger
Brandon Weeks
03:48 AM Bug #12576 (Ready For Testing): Logjam - doesn't allow custom DHE groups
The Foreman Bot
03:41 AM Bug #12576 (Closed): Logjam - doesn't allow custom DHE groups
The Smart-Proxy suffers from two limitations regarding Diffie-Hellman key exchange:
* The Ruby OpenSSL implementatio... Brandon Weeks

11/23/2015

10:21 PM Bug #12573 (Ready For Testing): Smart-Proxy supports TLSv1
The Foreman Bot
10:15 PM Bug #12573 (Closed): Smart-Proxy supports TLSv1
https://wiki.mozilla.org/Security/Server_Side_TLS#Modern_compatibility
Mozilla recommends only using TLSv1.1 and T... Brandon Weeks
09:56 PM Bug #12572 (Ready For Testing): Smart-Proxy includes RC4 in ciphersuites
The Foreman Bot
09:51 PM Bug #12572 (Closed): Smart-Proxy includes RC4 in ciphersuites
https://wiki.mozilla.org/Security/Server_Side_TLS#RC4_weaknesses
See this article for background. RC4 should no lo... Brandon Weeks
09:34 AM Feature #12568 (Closed): /version should also return modules versions
as discussed in #12506, the proxy should return the versions of its enabled modules as well. Shlomi Zadok
08:01 AM Bug #12466 (Closed): Parsing subnets for ISC DHCP fails
Applied in changeset commit:2f513ecd306e97f29024d5457c1f0692b99ad0a9. Anonymous
07:51 AM Revision 2f513ecd: Fixes #12466: isc dhcp provider handles subnet block declarations correctly now.
Dmitri Dolguikh

11/20/2015

02:55 PM Bug #12555: Only first FreeIPA XMLRPC call succeeds Foreman proxy 1.10 and FreeIPA, version: 4.1.4
probably related to "IPA 4.1 Replay Protection":http://www.freeipa.org/page/V4/OTP_Replay_Prevention Michael Eklund
02:46 PM Bug #12555: Only first FreeIPA XMLRPC call succeeds Foreman proxy 1.10 and FreeIPA, version: 4.1.4
IPA error logs... Michael Eklund
02:33 PM Bug #12555 (Closed): Only first FreeIPA XMLRPC call succeeds Foreman proxy 1.10 and FreeIPA, version: 4.1.4
... Michael Eklund
10:01 AM Bug #12546 (Closed): "Gem loading error: cannot load such file -- smart_proxy" on startup under bundler_ext
Applied in changeset commit:59809c6cbbaa8d7e26195f7b2f90437dbd0d4de4. Anonymous
07:24 AM Bug #12546 (Ready For Testing): "Gem loading error: cannot load such file -- smart_proxy" on startup under bundler_ext
The Foreman Bot
03:09 AM Bug #12546 (Closed): "Gem loading error: cannot load such file -- smart_proxy" on startup under bundler_ext
Since #12146, the smart proxy Debian and RPM packages are failing to start up under bundler_ext. Under plain Bundler... Dominic Cleal
09:18 AM Revision 59809c6c: Fixes #12546: smart-proxy now loads under bundler_ext
Dmitri Dolguikh

11/19/2015

07:02 AM Bug #12146 (Closed): core gem dependencies are defined in both Gemfile and gemspec files.
Applied in changeset commit:bf8936ecb5cfa803b5c58b2fea0ca074edcc1b05. Anonymous
06:48 AM Revision bf8936ec: Fixes #12146: moved core dependencies into gemspec
Dmitri Dolguikh

11/18/2015

08:37 AM Feature #4917: Smart-Proxy Realm Provider for Active Directory
Oh hi, sorry I missed this. This is great, thanks!
The best way to get comments would to get a PR open.
My per... Stephen Benjamin

11/16/2015

01:13 PM Bug #12466 (Ready For Testing): Parsing subnets for ISC DHCP fails
The Foreman Bot
04:42 AM Bug #12466: Parsing subnets for ISC DHCP fails
Brandon, can you please apply the patch bellow:... Baptiste Agasse
10:01 AM Bug #12469 (Closed): ISC DHCP proxy errors when attempting to delete nonexistant records
Applied in changeset commit:f24be74d8f51f44aa8730769d2e468683804254c. Brandon Weeks
09:03 AM Bug #12469: ISC DHCP proxy errors when attempting to delete nonexistant records
Leaving on .1 so we've got more time to soak test this change. The regression (#12465) needs to go in sooner as it'l... Dominic Cleal
06:35 AM Bug #12469: ISC DHCP proxy errors when attempting to delete nonexistant records
Removing from the 1.10.0 blockers as it seems to stem entirely from the linked bug, where a deleted entry is still be... Dominic Cleal
09:01 AM Revision f24be74d: Fixes #12469 - raise Proxy::DHCP::InvalidRecord
Raise Proxy::DHCP::InvalidRecord if delRecord is called on a nonexistant record by looking for the `omshell` error. Brandon Weeks

11/13/2015

06:54 AM Bug #12469 (Ready For Testing): ISC DHCP proxy errors when attempting to delete nonexistant records
The Foreman Bot
06:33 AM Bug #12469: ISC DHCP proxy errors when attempting to delete nonexistant records
Note that Foreman deliberately ignores a 404 HTTP response from the smart proxy during DHCP record deletion, expectin... Dominic Cleal
06:31 AM Bug #12469 (Closed): ISC DHCP proxy errors when attempting to delete nonexistant records
When trying to delete an nonexistent host via omshell the ISC DHCP proxy an exception is raised and an error returned... Brandon Weeks
06:01 AM Bug #12466: Parsing subnets for ISC DHCP fails
Sorry I should have been more clear, it no longer find any subnets.
Nightly:
> D, [2015-11-13T04:39:25.710406 #10... Brandon Weeks
05:56 AM Bug #12466: Parsing subnets for ISC DHCP fails
Parsing fail to retrieve subnet infos or just print warnings in logs ? Baptiste Agasse
04:56 AM Bug #12466 (Closed): Parsing subnets for ISC DHCP fails
https://github.com/theforeman/smart-proxy/commit/e2a21ecff6cf153890e93ad7c28a932396ae02d8#diff-79ebe89624de84cfd48356... Brandon Weeks
05:55 AM Bug #12465 (Ready For Testing): ISC DHCP proxy fails to parse deleted entires
The Foreman Bot
03:40 AM Bug #12465: ISC DHCP proxy fails to parse deleted entires
Looks like a regression to me, the parse_config_and_leases_for_records method shouldn't be performing a subnet lookup... Dominic Cleal
03:32 AM Bug #12465 (Closed): ISC DHCP proxy fails to parse deleted entires
In /var/lib/dhcpd/dhcpd.leases the following type of entry may appear:
> host test.example.com {
> dynamic;
> de... Brandon Weeks

11/12/2015

08:02 AM Feature #12211 (Closed): Improve DHCP subnets parsing to get more informations from DHCP server
Applied in changeset commit:e2a21ecff6cf153890e93ad7c28a932396ae02d8. Anonymous
07:40 AM Revision e2a21ecf: Fixes #12211 - Improve DHCP subnets parsing to get more informations from DHCP server
Baptiste Agasse
07:01 AM Bug #12449 (Closed): Keytab not configured via dns_tsig_keytab for DNS GSS-TSIG support
Applied in changeset commit:839ca954a620b8496d6ea9e5c992684c70ef34ee. Dominic Cleal
06:49 AM Bug #12449: Keytab not configured via dns_tsig_keytab for DNS GSS-TSIG support
Mario Gamboa wrote:
> the variables :tsig_keytab, :tsig_principal is not pass the value into the /usr/share/forema... Dominic Cleal
06:38 AM Bug #12449: Keytab not configured via dns_tsig_keytab for DNS GSS-TSIG support
Hi the patch was already apply but still issues now with the kerberos apparently on /usr/share/foreman-proxy/modules/... Mario Gamboa
03:16 AM Bug #12449 (Ready For Testing): Keytab not configured via dns_tsig_keytab for DNS GSS-TSIG support
The Foreman Bot
02:57 AM Bug #12449 (Assigned): Keytab not configured via dns_tsig_keytab for DNS GSS-TSIG support
Dominic Cleal
02:55 AM Bug #12449: Keytab not configured via dns_tsig_keytab for DNS GSS-TSIG support
Thanks for the report. This looks like a bug that we're not setting up the keytab location from the settings correct... Dominic Cleal
01:48 AM Bug #12449: Keytab not configured via dns_tsig_keytab for DNS GSS-TSIG support
from proxy.log in debug mode
D, [2015-11-12T19:48:10.770624 #25828] DEBUG -- : /usr/share/foreman-proxy/modules/dns_... Mario Gamboa
01:31 AM Bug #12449 (Closed): Keytab not configured via dns_tsig_keytab for DNS GSS-TSIG support
i upgrade foreman from 1.9.3 to 1.10 and now i can't register the record of the new vms into the active directory
... Mario Gamboa
06:18 AM Revision 839ca954: fixes #12449 - load nsupdate_gss config from plugin settings
Dominic Cleal

11/11/2015

09:01 AM Bug #12136 (Closed): foreman-proxy fails to start if ruby-rgen is missing
Applied in changeset commit:7cbe47ab867a9a844885d164553faf09603507be. Anonymous
08:37 AM Revision 7cbe47ab: Fixes #12136: load only Puppet dependencies that are required by the config
in puppet_proxy only dependencies and concrete implementation classes that
are required by the configuration are bein... Dmitri Dolguikh
04:45 AM Bug #12392: 100% cpu usage on foreman-proxy DHCP calls
There's probably stuff I've missed, but our workaround is to add this into dhcp_conflict_detected? :
return false ... Matt Jarvis
 

Also available in: Atom