Florence Blanc-Renaud

[ipareplica-ca-install.log](https://github.com/user-attachments/files/16960870/ipareplica-ca-install.log)

[pki-ca-spawn.20240911040934.log](https://github.com/user-attachments/files/16960872/pki-ca-spawn.20240911040934.log)

Installed packages: pki-resteasy-core-3.0.26-31.fc41.noarch dogtag-pki-ca-11.5.0-3.fc41.2.noarch

Hi @fmarco76 Tried with the latest versions and the issue is fixed: dogtag-pki-ca-11.6.0-0.3.alpha3.20250123224917UTC.2f8e9573.fc42.noarch freeipa-server-4.13.0.dev202501211625+git-0.fc42.x86_64

Hi @madhuriupadhye the tests are executed with sssd-client-2.9.5-1.fc40.x86_64 but the SSSD commit mentioned in the ticket ([https://github.com/SSSD/sssd/pull/7500 / ](https://github.com/SSSD/sssd/pull/7500#issuecomment-2239462425)) is not included yet in any fedora 40 build. I guess...

Hi @madhuriupadhye pycodestyle reported the following issues: ``` pycodestyle ----------- local configuration: in /__w/1/s checking ./ipatests/test_integration/test_otp.py ./ipatests/test_integration/test_otp.py:497:41: E128 continuation line under-indented for visual indent ./ipatests/test_integration/test_otp.py:498:41: E128 continuation line under-indented for...

For future ref, links to successful runs: - on f39: [Details](http://freeipa-org-pr-ci.s3-website.eu-central-1.amazonaws.com/jobs/733e82ce-8c93-11ef-ab78-fa163ea3723e) - on f40: [Details](http://freeipa-org-pr-ci.s3-website.eu-central-1.amazonaws.com/jobs/1184a96e-8c93-11ef-b23d-fa163e396e38) - on f40 with @sssd/nightly: [Details](http://freeipa-org-pr-ci.s3-website.eu-central-1.amazonaws.com/jobs/307947b2-8c93-11ef-9f0f-fa163eddb69e) @madhuriupadhye you can remove your temp commit, and I...

master: * 163bf3550b761e78294b693dd880022988c8a232 ipatests: 2FA test cases

My observations so far: - without the patch, the security context of /var/log/ipaserver-enable-sid.log depends on the way the sid generation was called (can be either ipa_log_t or var_log_t). ``` #...

> I suspect this is an issue with how `python3 script` behaves, selinux-wise. Nothing we can do: this is basic SELinux behavior. > > When you run `/usr/libexec/ipa/oddjob/org.freeipa.server.config-enable-sid`, it is...