Florence Blanc-Renaud

Lint report: ``` ************* Module ipatests.test_integration.test_ipa_ipa_migration ipatests/test_integration/test_ipa_ipa_migration.py:1091: [E1306(too-few-format-args), TestIPAMigrationProdMode.test_ipa_migrate_otptoken] Not enough arguments for format string) ```

master: * 07f33365d8868bf9c62fe1617f97b6073419a14b ipatests: Tests for ipa-migrate tool * e8ed1d70f7080700726b66c67181574972bcfcb7 ipatests: Updated nightly definitions for ipa-ipa-migration

Hi @menonsudhir can you do a manual backport for ipa-4-12 branch? The nightly test definitions differ in this branch.

Hi @jakub-vavra-cz based on this commit message https://github.com/freeipa/freeipa/commit/9bff6cb8a955c3f4b167e05856b40f6e2ee5dca8 it looks like the check was intentional: ``` Always check (even with --setup-dns or --no-host-dns) that if the host name or ip...

Thanks for the update, LGTM. Please wait for azure to have a green run, then remove the temp commit and I will ack.

ACK when CI is green

master: * 6346ca71d7e4ebbd5737a91372849f2c00b3d293 Add token options to immutables for pki override

Hi @rcritten I checked the following things: - [x] the extensions of RA cert, HTTP cert and LDAP cert are ok - [x] installation with `--subject-base` and `--ca-subject` is properly...

> @flo-renaud SAN is correct for the IPA CA-issued PKINIT, it has to be issued for the whole realm. with IPA 4.12.5 this is what I get for the PKINIT...

I still see an issue when renewing the PKINIT cert: ``` # getcert list -i 20251030082625 Number of certificates and requests being tracked: 12. Request ID '20251030082625': status: MONITORING ca-error:...