Alexander Bokovoy

#YesterdayAtWork:
This week was intense in fixing regressions. At SambaXP we improved Samba support for Kerberos but it broke FreeIPA use of GSSProxy which we only noticed in Fedora Rawhide with 4.23 release candidates. Fixed that and during Rawhide update discovered that new PCP 7.0.0 broke ctdb in Samba. Took some time to fix that too, thanks to PCP maintainers!

Hopefully, upstream changes will be merged before Samba 4.23.0 final release.

1/

Sep 5, 2025 at 10:40amWeb
Show threadAlexander BokovoySep 5, 2025
FreeIPA system accounts support is nearing completion. Spent a week to figure out why my test is failing only to find out it was a single character failure. When objects get included as references in IPA API (role, permission, etc) they mentioned in command line options using plural (e.g. --users) but in API they are specified as a singular named attribute (e.g. 'user'). I used 'sysaccounts' as an attribute in the test instead of 'sysaccount' and the batch of calls silently failed. Fixed now.
Show threadAlexander BokovoySep 5, 2025
Azure CI runners are slow and FreeIPA CI tests often fail there. It probably can be solved by redistributing the tests across more parallel runners but we may just move some tests to PRCI instead...
Show threadAlexander BokovoySep 5, 2025
One more update is that I managed to record few demos of how system accounts work: https://www.youtube.com/playlist?list=PLnztcusQEwUp23rUWp4SEZ8I2jCyyUiwb
FreeIPA system accounts demo

YouTube
Show threadFrancis Augusto MedeirosSep 5, 2025
@abbra Can those be used for simple binding to ldap when applications need it?
Show threadFrancis Augusto MedeirosSep 5, 2025
@abbra ops, too soon, I saw your demo now - this is absolutely amazing! Looking forward to use it when it becomes available!
Show threadFrancis Augusto MedeirosSep 5, 2025
@abbra This is amazing, Alexander! Thank you for the great work!