{"update": {"autokarma": true, "autotime": false, "stable_karma": 3, "stable_days": 0, "unstable_karma": -3, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "Fix a bug introduced with the update to nss-3.24, that SSLSv2 support removed, that caused of IPA failures because nss init failed.", "type": "enhancement", "status": "stable", "request": null, "severity": "unspecified", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": true, "critpath_groups": null, "close_bugs": true, "date_submitted": "2016-06-03 02:49:04", "date_modified": null, "date_approved": null, "date_testing": "2016-06-03 15:25:50", "date_stable": "2016-06-04 21:04:10", "alias": "FEDORA-2016-db48cd10e9", "test_gating_status": null, "from_tag": null, "date_pushed": "2016-06-04 21:04:10", "meets_testing_requirements": false, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2016-db48cd10e9", "title": "nss-3.24.0-1.2.fc23", "version_hash": "20006619330be538d5180a4c0cc269bffb5fa7f7", "release": {"name": "F23", "long_name": "Fedora 23", "version": "23", "id_prefix": "FEDORA", "branch": "f23", "dist_tag": "f23", "stable_tag": "f23-updates", "testing_tag": "f23-updates-testing", "candidate_tag": "f23-updates-candidate", "pending_signing_tag": "f23-signing-pending", "pending_testing_tag": "f23-updates-testing-pending", "pending_stable_tag": "f23-updates-pending", "override_tag": "f23-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": null, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "emaldonado", "email": "elio.maldonado.batiz@gmail.com", "id": 1318, "avatar": "https://seccdn.libravatar.org/avatar/771fedf22540661456c9493489b162648df426e3b1496c53576c956185b133bc?s=24&d=retro", "openid": "emaldonado.id.fedoraproject.org", "groups": [{"name": "packager"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by emaldonado. ", "timestamp": "2016-06-03 02:49:04", "update_id": 59729, "user_id": 91, "id": 441741, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 1, "text": "Resolves #1342158", "timestamp": "2016-06-03 11:59:53", "update_id": 59729, "user_id": 911, "id": 441928, "bug_feedback": [{"karma": 1, "comment_id": 441928, "bug_id": 1342158, "bug": {"bug_id": 1342158, "title": "nss-3.24 does no longer support ssl V2, installation of IPA fails because nss init fails", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "amessina", "email": "amessina@messinet.com", "id": 911, "avatar": "https://seccdn.libravatar.org/avatar/a425f417f49ccd9ca9d0d734e02ee3b0466aef7c7e859fff0cee973f59ade11c?s=24&d=retro", "openid": "amessina.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2016-06-03 16:27:50", "update_id": 59729, "user_id": 91, "id": 442016, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 1, "text": "My freeipa servers failed to restart after the first 3.24 update.  This update resolved that problem.", "timestamp": "2016-06-04 03:18:24", "update_id": 59729, "user_id": 2526, "id": 442226, "bug_feedback": [{"karma": 1, "comment_id": 442226, "bug_id": 1342158, "bug": {"bug_id": 1342158, "title": "nss-3.24 does no longer support ssl V2, installation of IPA fails because nss init fails", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "mhjacks", "email": "mhjacks@swbell.net", "id": 2526, "avatar": "https://seccdn.libravatar.org/avatar/d3b1c86a73c351f5da6428ba1b20bbe5c49c5ebffb485fa33e47dc5854b683ac?s=24&d=retro", "openid": "mhjacks.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi. ", "timestamp": "2016-06-04 10:17:28", "update_id": 59729, "user_id": 91, "id": 442342, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 1, "text": "Fixed my freeipa server problem.\n\n\nMinor IPA / nss related issues (not directly related to this fix):\n\n* httpd output a warning:\n     - \"module nss_module is already loaded, skipping\"\n     - This is because /etc/httpd/conf.modules.d/10-nss.conf already loads the module\n     - But the \"ipa-client-install\" also configure it in /etc/httpd/conf.d/nss.conf\n\n * Also, in /etc/httpd/conf.d/nss.conf:\n    - There's a non-default \"NSSPassPhraseHelper\"\n    - It is set to /usr/libexec/nss_pcache vs. /usr/sbin/nss_pcache\n    - But the /usr/sbin/nss_pcache is currently symlink to /usr/libexec/nss_pacache (both owned by mod_nss)\n  * Seems freeipa can minimize diffs from \"nss\" + \"mod_nss\" rpms.\n", "timestamp": "2016-06-04 10:17:30", "update_id": 59729, "user_id": 1751, "id": 442343, "bug_feedback": [{"karma": 1, "comment_id": 442343, "bug_id": 1342158, "bug": {"bug_id": 1342158, "title": "nss-3.24 does no longer support ssl V2, installation of IPA fails because nss init fails", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "oron", "email": "oron@actcom.co.il", "id": 1751, "avatar": "https://seccdn.libravatar.org/avatar/2fbe02e7f2fbaf0ddf97bf1915e1145dd986b89d50c3a8a9d49023d3e4151970?s=24&d=retro", "openid": "oron.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "l10n"}, {"name": "cvsl10n"}, {"name": "trust admins"}]}}, {"karma": 1, "karma_critpath": 1, "text": "Works fine again", "timestamp": "2016-06-04 14:23:32", "update_id": 59729, "user_id": 763, "id": 442393, "bug_feedback": [{"karma": 1, "comment_id": 442393, "bug_id": 1342158, "bug": {"bug_id": 1342158, "title": "nss-3.24 does no longer support ssl V2, installation of IPA fails because nss init fails", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "lupinix", "email": "lupinix.fedora@gmail.com", "id": 763, "avatar": "https://seccdn.libravatar.org/avatar/cc585f3cc94963db2fbb249c2b874edfa90d3236a6a00015ef926ae0e6867e2b?s=24&d=retro", "openid": "lupinix.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "python-sig"}, {"name": "kde-sig"}, {"name": "astro-sig"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "gitspin-kickstarts"}, {"name": "scitech"}, {"name": "python-packagers-sig"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2016-06-05 02:57:56", "update_id": 59729, "user_id": 91, "id": 442545, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "nss-3.24.0-1.2.fc23", "signed": true, "release_id": 11, "type": "rpm", "epoch": 0}], "bugs": [{"bug_id": 1342158, "title": "nss-3.24 does no longer support ssl V2, installation of IPA fails because nss init fails", "security": false, "parent": false, "feedback": [{"karma": 1, "comment_id": 441899, "bug_id": 1342158, "comment": {"karma": 1, "karma_critpath": 1, "text": "Tests of freeipa are successful with nss-3.24.0-1.2.fc24.x86_64\n\nTest on F23 - Freeipa 4.3.1 - DS 1.3.5.4.1\n\nFreeipa already installed\nupgrade nss-3.23->nss-3.24.0-1.2.fc24.x86_64\nrestart DS instance\n--> nss is correctly initialize nss, LDAPS working (636)\n\nFreeipa full install\nwith nss-3.24.0-1.2.fc24.x86_64\nInstallation complete successfully\nrestart DS instance\n--> nss is correctly initialize nss, LDAPS working (636)", "timestamp": "2016-06-03 09:57:25", "update_id": 59361, "user_id": 2494, "id": 441899, "testcase_feedback": [], "user": {"name": "tbordaz", "email": "tbordaz@redhat.com", "id": 2494, "avatar": "https://seccdn.libravatar.org/avatar/856711b8fb54e30a01184c7a7744cc1a2f9aff9a99d0c8362e2bdf1bd3176b94?s=24&d=retro", "openid": "tbordaz.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "git389"}, {"name": "git389test"}]}}}, {"karma": 1, "comment_id": 441928, "bug_id": 1342158, "comment": {"karma": 1, "karma_critpath": 1, "text": "Resolves #1342158", "timestamp": "2016-06-03 11:59:53", "update_id": 59729, "user_id": 911, "id": 441928, "testcase_feedback": [], "user": {"name": "amessina", "email": "amessina@messinet.com", "id": 911, "avatar": "https://seccdn.libravatar.org/avatar/a425f417f49ccd9ca9d0d734e02ee3b0466aef7c7e859fff0cee973f59ade11c?s=24&d=retro", "openid": "amessina.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}, {"karma": 1, "comment_id": 442226, "bug_id": 1342158, "comment": {"karma": 1, "karma_critpath": 1, "text": "My freeipa servers failed to restart after the first 3.24 update.  This update resolved that problem.", "timestamp": "2016-06-04 03:18:24", "update_id": 59729, "user_id": 2526, "id": 442226, "testcase_feedback": [], "user": {"name": "mhjacks", "email": "mhjacks@swbell.net", "id": 2526, "avatar": "https://seccdn.libravatar.org/avatar/d3b1c86a73c351f5da6428ba1b20bbe5c49c5ebffb485fa33e47dc5854b683ac?s=24&d=retro", "openid": "mhjacks.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "trust admins"}]}}}, {"karma": 1, "comment_id": 442343, "bug_id": 1342158, "comment": {"karma": 1, "karma_critpath": 1, "text": "Fixed my freeipa server problem.\n\n\nMinor IPA / nss related issues (not directly related to this fix):\n\n* httpd output a warning:\n     - \"module nss_module is already loaded, skipping\"\n     - This is because /etc/httpd/conf.modules.d/10-nss.conf already loads the module\n     - But the \"ipa-client-install\" also configure it in /etc/httpd/conf.d/nss.conf\n\n * Also, in /etc/httpd/conf.d/nss.conf:\n    - There's a non-default \"NSSPassPhraseHelper\"\n    - It is set to /usr/libexec/nss_pcache vs. /usr/sbin/nss_pcache\n    - But the /usr/sbin/nss_pcache is currently symlink to /usr/libexec/nss_pacache (both owned by mod_nss)\n  * Seems freeipa can minimize diffs from \"nss\" + \"mod_nss\" rpms.\n", "timestamp": "2016-06-04 10:17:30", "update_id": 59729, "user_id": 1751, "id": 442343, "testcase_feedback": [], "user": {"name": "oron", "email": "oron@actcom.co.il", "id": 1751, "avatar": "https://seccdn.libravatar.org/avatar/2fbe02e7f2fbaf0ddf97bf1915e1145dd986b89d50c3a8a9d49023d3e4151970?s=24&d=retro", "openid": "oron.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "l10n"}, {"name": "cvsl10n"}, {"name": "trust admins"}]}}}, {"karma": 1, "comment_id": 442393, "bug_id": 1342158, "comment": {"karma": 1, "karma_critpath": 1, "text": "Works fine again", "timestamp": "2016-06-04 14:23:32", "update_id": 59729, "user_id": 763, "id": 442393, "testcase_feedback": [], "user": {"name": "lupinix", "email": "lupinix.fedora@gmail.com", "id": 763, "avatar": "https://seccdn.libravatar.org/avatar/cc585f3cc94963db2fbb249c2b874edfa90d3236a6a00015ef926ae0e6867e2b?s=24&d=retro", "openid": "lupinix.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "python-sig"}, {"name": "kde-sig"}, {"name": "astro-sig"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "gitspin-kickstarts"}, {"name": "scitech"}, {"name": "python-packagers-sig"}]}}}]}], "updateid": "FEDORA-2016-db48cd10e9", "karma": 4, "content_type": "rpm", "test_cases": []}, "can_edit": false, "ci_allowed": false}