The FreeIPA team would like to announce FreeIPA 4.9.11 release!
It can be downloaded from http://www.freeipa.org/page/Downloads. Builds
for Fedora distributions will be available from the official repository
soon.
[[highlights_in_4.9.11]]
== Highlights in 4.9.11
* 9083: Support MIT Kerberos KDB version 9
::
;;
FreeIPA now supports MIT Kerberos 1.20. Resource-based constrained
delegation is not yet implemented.
'''''
* 9187: [UX] Preserving a user account produces output saying it was
deleted
::
;;
Previously, the command to preserve a user account used to display a
confusing output "Deleted user: " although the user was preserved
and not deleted. The command now displays "Preserved user: " for
preserved users.
'''''
* 9228: ipa-client-install does not maintain server affinity during
installation
::
;;
ipa-client-install will use a single server for the duration of the
installation process, either one discovered or provided on the
command-line. Previously it would use a temporary configuration to
do enrollment, then switch to a final one for the remaining
operations. This could lead to the installer talking with multiple
servers. If the client installer is faster than replication this
could lead to errors.
'''''
* 9237: Show order in sudo rule list in web interface
::
;;
In the 'sudo rules' page, the WebUI is now displaying a 'sudo order'
column so that the users can easily see which rules override other
rules based on their order.
'''''
* 9258: Do not add TLS CA configuration to ldap.conf anymore
::
;;
FreeIPA client installer does not add explicit TLS CA configuration
to OpenLDAP's ldap.conf anymore. Since OpenLDAP 2.4.45, explicit CA
configuration is not required as OpenLDAP uses the default CA store
provided by OpenSSL and IPA CA is installed in the default store by
the installer already.
'''''
[[bug_fixes]]
=== Bug fixes
FreeIPA 4.9.11 is a stabilization release for the features delivered as
a part of 4.9 version series.
There are more than 50 bug-fixes since FreeIPA 4.9.10 release. Details
of the bug-fixes can be seen in the list of resolved tickets below.
== Upgrading
Upgrade instructions are available on Upgrade page.
== Feedback
Please provide comments, bugs and other feedback via the freeipa-users
mailing list
(https://lists.fedoraproject.org/archives/list/freeipa-users@lists.fedorahosted.org/)
or #freeipa channel on libera.chat.
[[resolved_tickets]]
== Resolved tickets
* https://pagure.io/freeipa/issue/8946[#8946] RFE: Add label name to
Certificates section in WebUI to enable testing
* https://pagure.io/freeipa/issue/8951[#8951] Test for RFE
ipa-healthcheck tool can include check to see if the system is FIPS
enabled or not
* https://pagure.io/freeipa/issue/9062[#9062] [ipatests] SID generation
and test_xmlrpc/test_user_plugin.py
* https://pagure.io/freeipa/issue/9083[#9083] Support MIT Kerberos KDB
version 9
* https://pagure.io/freeipa/issue/9158[#9158] Internal error when
setting dnsconfig or dnsforwardzone forwarders.
* https://pagure.io/freeipa/issue/9160[#9160]
cryptography.utils.register_interface is scheduled for removal
* https://pagure.io/freeipa/issue/9161[#9161] Nightly test failure in
test_selinuxusermap.py::test_selinuxusermap::test_misc
* https://pagure.io/freeipa/issue/9183[#9183] Timeout issue in
test_installation.py when using interactive mode
* https://pagure.io/freeipa/issue/9185[#9185] Fix missing parameter for
Suse ipaplatform task
* https://pagure.io/freeipa/issue/9187[#9187]
(https://bugzilla.redhat.com/show_bug.cgi?id=2022028[rhbz#2022028]) [UX]
Preserving a user account produces output saying it was deleted
* https://pagure.io/freeipa/issue/9188[#9188]
(https://bugzilla.redhat.com/show_bug.cgi?id=2098187[rhbz#2098187]) Add
warning for empty targetattr when creating ACI with RBAC
* https://pagure.io/freeipa/issue/9189[#9189] ipatests: Fix test_idp.py
for downstream idm-ci
* https://pagure.io/freeipa/issue/9190[#9190]
ipatests.test_ipaserver.test_secure_ajp_connector failing with python
3.6.8 with: TypeError: a bytes-like object is required, not 'str'
* https://pagure.io/freeipa/issue/9192[#9192]
(https://bugzilla.redhat.com/show_bug.cgi?id=2094672[rhbz#2094672]) IdM
WebUI Pagination Size should not allow empty value
* https://pagure.io/freeipa/issue/9198[#9198] [Tracker] nightly failure:
after ipa trust-add, cred cache contains cifs/master.ipa.t...@ipa.test
instead of admin principal
* https://pagure.io/freeipa/issue/9204[#9204] [Tracker] In
ipa-server-upgrade ca_upgrade_schema() results in unnecessary pki
restarts
* https://pagure.io/freeipa/issue/9206[#9206]
(https://bugzilla.redhat.com/show_bug.cgi?id=2109236[rhbz#2109236]) ldap
bind occurs when admin user changes password with gracelimit=0
* https://pagure.io/freeipa/issue/9207[#9207] Failure in
AzurePipeline.freeipa (GATING InstallDNSSECFirst_1_to_5)
* https://pagure.io/freeipa/issue/9208[#9208] ap: Doc build fails
against Sphinx 5.1.0
* https://pagure.io/freeipa/issue/9211[#9211]
(https://bugzilla.redhat.com/show_bug.cgi?id=2109243[rhbz#2109243]) RFE:
Allow grace login limit to be set in IPA WebUI.
* https://pagure.io/freeipa/issue/9212[#9212]
(https://bugzilla.redhat.com/show_bug.cgi?id=2115475[rhbz#2115475])
Nightly test failure in
test_user.py::test_user::test_password_expiration_notification
* https://pagure.io/freeipa/issue/9214[#9214] Nightly failure in webui
test test_subid.py::test_subid::test_subid_range_deletion_not_allowed
* https://pagure.io/freeipa/issue/9218[#9218]
(https://bugzilla.redhat.com/show_bug.cgi?id=2116966[rhbz#2116966])
Random failure in test-winsyncmigrate
* https://pagure.io/freeipa/issue/9225[#9225] pytest library module
rename from quarkus to keycloak
* https://pagure.io/freeipa/issue/9226[#9226]
(https://bugzilla.redhat.com/show_bug.cgi?id=2124547[rhbz#2124547])
Infinite redirect loop in the WebUI for user root
* https://pagure.io/freeipa/issue/9228[#9228]
(https://bugzilla.redhat.com/show_bug.cgi?id=2148258[rhbz#2148258])
ipa-client-install does not maintain server affinity during installation
* https://pagure.io/freeipa/issue/9230[#9230] build failure against gcc
< 11
* https://pagure.io/freeipa/issue/9231[#9231] /run/ipa/ccaches uses all
available tmpfs space
* https://pagure.io/freeipa/issue/9237[#9237] Show order in sudo rule
list in web interface
* https://pagure.io/freeipa/issue/9243[#9243]
(https://bugzilla.redhat.com/show_bug.cgi?id=2127833[rhbz#2127833])
Password Policy Grace login limit allows invalid maximum value
* https://pagure.io/freeipa/issue/9245[#9245]
(https://bugzilla.redhat.com/show_bug.cgi?id=2117167[rhbz#2117167])
`extdom` plugin can return object from a wrong domain.
* https://pagure.io/freeipa/issue/9246[#9246] Nightly test failure in
test_user_permissions.TestInstallClientNoAdmin
* https://pagure.io/freeipa/issue/9248[#9248]
(https://bugzilla.redhat.com/show_bug.cgi?id=2124369[rhbz#2124369]) OTP
token sync always returns OK even with random numbers
* https://pagure.io/freeipa/issue/9249[#9249]
(https://bugzilla.redhat.com/show_bug.cgi?id=2108630[rhbz#2108630])
Deprecated feature idnssoaserial in IdM appears when creating reverse
dns zones
* https://pagure.io/freeipa/issue/9252[#9252]
(https://bugzilla.redhat.com/show_bug.cgi?id=2129895[rhbz#2129895])
[DDF] The Examples in the RHEL ipa(1) man page show "ipa help commands"
with content for "ipa halp topics" and "ipa hel
* https://pagure.io/freeipa/issue/9254[#9254] Exclude installed policy
module file from RPM verification
* https://pagure.io/freeipa/issue/9255[#9255] ipapython.dn_ctypes is not
compatible with libldap 2.6
* https://pagure.io/freeipa/issue/9257[#9257]
(https://bugzilla.redhat.com/show_bug.cgi?id=2104185[rhbz#2104185])
Introduction of URI records for kerberos breaks location functionality
* https://pagure.io/freeipa/issue/9258[#9258]
(https://bugzilla.redhat.com/show_bug.cgi?id=2094673[rhbz#2094673]) Do
not add TLS CA configuration to ldap.conf anymore
* https://pagure.io/freeipa/issue/9259[#9259]
(https://bugzilla.redhat.com/show_bug.cgi?id=2144737[rhbz#2144737])
vault interoperability with older RHEL systems is broken
* https://pagure.io/freeipa/issue/9269[#9269]
(https://bugzilla.redhat.com/show_bug.cgi?id=2143224[rhbz#2143224],
https://bugzilla.redhat.com/show_bug.cgi?id=2075452[rhbz#2075452])
ipa-certupdate does not restart/reload KDC on servers
* https://pagure.io/freeipa/issue/9271[#9271]
(https://bugzilla.redhat.com/show_bug.cgi?id=2143224[rhbz#2143224])
Support PKINIT with ipa-client-install
* https://pagure.io/freeipa/issue/9274[#9274] ipa-join: pass the curl
write function by name, not address
[[detailed_changelog_since_4.9.10]]
== Detailed changelog since 4.9.10
[[armando_neto_1]]
=== Armando Neto (1)
* webui: Do not allow empty pagination size
https://pagure.io/freeipa/c/991849cf58fa990ad4540a61214b5ab4fcd4baa1[commit]
https://pagure.io/freeipa/issue/9192[#9192]
[[alexander_bokovoy_10]]
=== Alexander Bokovoy (10)
* ipa-kdb: for delegation check, use different error codes before and
after krb5 1.20
https://pagure.io/freeipa/c/e12aa8bb782e1f3722ae93d63632cd93df06faab[commit]
https://pagure.io/freeipa/issue/9083[#9083]
* ipa-kdb: fix comment to make sure we talk about krb5 1.20 or later
https://pagure.io/freeipa/c/a35cac3d6fa80d259240b0eb1d4952c321be9e92[commit]
* ipa-kdb: fix PAC requester check
https://pagure.io/freeipa/c/7e504647dd00202c02cd203ca3474a332d1e413e[commit]
https://pagure.io/freeipa/issue/9083[#9083]
* ipa-kdb: handle empty S4U proxy in allowed_to_delegate
https://pagure.io/freeipa/c/4755bd42c0f4c8fcda6131ee89b6fa8308d8a75c[commit]
https://pagure.io/freeipa/issue/9083[#9083]
* ipa-kdb: handle cross-realm TGT entries when generating PAC
https://pagure.io/freeipa/c/0dd3315afb1056e3ca5bfd6af161793b5a5b8d86[commit]
https://pagure.io/freeipa/issue/9083[#9083]
* ipa-kdb: add krb5 1.20 support
https://pagure.io/freeipa/c/a0d840347b453bda141691ac587bc2ec851f15a5[commit]
https://pagure.io/freeipa/issue/9083[#9083]
* ipa-kdb: refactor MS-PAC processing to prepare for krb5 1.20
https://pagure.io/freeipa/c/9efa8fe49c08fc584189b9d9ab24dfa8560db824[commit]
https://pagure.io/freeipa/issue/9083[#9083]
* ipaclient: do not set TLS CA options in ldap.conf anymore
https://pagure.io/freeipa/c/d9a56b51bbb350219d0f5cb0ea6b3cc00230d437[commit]
https://pagure.io/freeipa/issue/9258[#9258]
* fix canonicalization issue in Web UI
https://pagure.io/freeipa/c/109cd579e3b089b7fad4c92bf25594eba1af8a21[commit]
https://pagure.io/freeipa/issue/9226[#9226]
* ipa-otpd: initialize local pointers and handle gcc 10
https://pagure.io/freeipa/c/9290aa5500f752d0eedabdfc92c9fe6c0ee743b8[commit]
https://pagure.io/freeipa/issue/9230[#9230]
[[anuja_more_4]]
=== Anuja More (4)
* ipatests : Test query to AD specific attributes is successful.
https://pagure.io/freeipa/c/21cb86a8e571ac7aa0304c57961881ca9c4aeacb[commit]
https://pagure.io/freeipa/issue/9127[#9127]
* ipatests: Fix install_master for test_idp.py
https://pagure.io/freeipa/c/15f454f6f8d25275c9570e2cc3a97c4e030fc581[commit]
https://pagure.io/freeipa/issue/9189[#9189]
* ipatests: update prci definitions for test_idp.py
https://pagure.io/freeipa/c/50b4d9ab3fcb2e63edc8d20346e4a8a79f15692d[commit]
* Add end to end integration tests for external IdP
https://pagure.io/freeipa/c/857713c5a9c8e0b62c06dd92e69c09eeb34b2e99[commit]
https://pagure.io/freeipa/issue/8803[#8803],
https://pagure.io/freeipa/issue/8804[#8804],
https://pagure.io/freeipa/issue/8805[#8805]
[[antonio_torres_5]]
=== Antonio Torres (5)
* Update list of contributors
https://pagure.io/freeipa/c/4f3dd0538af82bc81b146b03f03743e5ccfc516d[commit]
* Update translations to FreeIPA ipa-4-9 state
https://pagure.io/freeipa/c/59bfe9d87c01f6a73fa359be700847b9f1bb616d[commit]
* Add basic API usage guide
https://pagure.io/freeipa/c/76aa6d2a4293e5d492a7cc087b17603b6d28e34e[commit]
* doc: generate API Reference
https://pagure.io/freeipa/c/beaab476903b2f182a722f45bf8af8fee611f0b7[commit]
* Back to git snapshots
https://pagure.io/freeipa/c/3e90842b3d94268f2ccd42c8decd0eecbcf88f1f[commit]
[[alexey_tikhonov_3]]
=== Alexey Tikhonov (3)
* extdom: avoid sss_nss_getorigby*() calls when get*_r_wrapper() returns
object from a wrong domain (performance optimization)
https://pagure.io/freeipa/c/a07cece0c006b3a89fc467284244f979d39f0209[commit]
* extdom: make sure result doesn't miss domain part
https://pagure.io/freeipa/c/3de618f75416afd6c087c243fe35755739d229a4[commit]
https://pagure.io/freeipa/issue/9245[#9245]
* extdom: internal functions should be static
https://pagure.io/freeipa/c/666357649f4dfb8254cb3707e97e12c69e6714f7[commit]
[[carla_martinez_9]]
=== Carla Martinez (9)
* webui: Add name to 'Certificates' table
https://pagure.io/freeipa/c/76c8b47e4fb249db0b7c6185afcc0d11b78c5824[commit]
https://pagure.io/freeipa/issue/8946[#8946]
* webui: Add label name to 'Certificates' section
https://pagure.io/freeipa/c/98eda97648fb0d9a7ae9aac32938d4f889f8a213[commit]
https://pagure.io/freeipa/issue/8946[#8946]
* Update API and VERSION
https://pagure.io/freeipa/c/856edcc8d3c9fe64eff532db669536a0a78ba70d[commit]
https://pagure.io/freeipa/issue/9249[#9249]
* webui: Set 'SOA serial' field as read-only
https://pagure.io/freeipa/c/9f8c9a4d96877bab1cb474615d77aca2fa586ece[commit]
https://pagure.io/freeipa/issue/9249[#9249]
* ipatest: Remove warning message for 'idnssoaserial'
https://pagure.io/freeipa/c/76604df09d8b62795f4e2d1fbc99af9ed55ec5cd[commit]
https://pagure.io/freeipa/issue/9249[#9249]
* Set 'idnssoaserial' to deprecated
https://pagure.io/freeipa/c/e9048daac53e24759a33e2031c8b4224a80a0e54[commit]
https://pagure.io/freeipa/issue/9249[#9249]
* webui: Show 'Sudo order' column
https://pagure.io/freeipa/c/0513a83a4fcd5626168cb45132af8cd1b4a9ee03[commit]
https://pagure.io/freeipa/issue/9237[#9237]
* Set pkeys in test_selinuxusermap.py::test_misc::delete_record
https://pagure.io/freeipa/c/cefa8f1e5f5b01e6863d07e9f3849dfd4c485f22[commit]
https://pagure.io/freeipa/issue/9161[#9161]
* webui: Allow grace login limit
https://pagure.io/freeipa/c/ade5093b08f92b279c200f341e96972a74f644d8[commit]
https://pagure.io/freeipa/issue/9211[#9211]
[[christian_heimes_1]]
=== Christian Heimes (1)
* Add PKINIT support to ipa-client-install
https://pagure.io/freeipa/c/80da53eaada1b5ad61b8cff2f9ed1217fea600c9[commit]
https://pagure.io/freeipa/issue/9269[#9269],
https://pagure.io/freeipa/issue/9271[#9271]
[[jan_kuparinen_20]]
=== Jan Kuparinen (20)
* Translated using Weblate (Finnish)
https://pagure.io/freeipa/c/841e0c673b222e686083cb96c210a55da6e09ff8[commit]
* Translated using Weblate (Finnish)
https://pagure.io/freeipa/c/4d92e67a45b0caf72ce5028f8bbba06f4d63fb7f[commit]
* Translated using Weblate (Finnish)
https://pagure.io/freeipa/c/e6accc7b3f39e0140e0d1dc3ee6bfcf6636d214d[commit]
* Translated using Weblate (Finnish)
https://pagure.io/freeipa/c/20bcd69f38fb734dc80e5052cb2ed91c19b12994[commit]
* Translated using Weblate (Finnish)
https://pagure.io/freeipa/c/49a41249e1d8cf6b349f895ba88c7490081ab462[commit]
* Translated using Weblate (Finnish)
https://pagure.io/freeipa/c/20269ac630c451734dffef50298cba823ffe2624[commit]
* Translated using Weblate (Finnish)
https://pagure.io/freeipa/c/1853d934d1e93dbf07d50799406ac12995a1d977[commit]
* Translated using Weblate (Finnish)
https://pagure.io/freeipa/c/7037e5389006f1eeea0299918cbbae57893ef125[commit]
* Translated using Weblate (Finnish)
https://pagure.io/freeipa/c/9df1672f479bee01efcd53c46e800e789762bc97[commit]
* Translated using Weblate (Finnish)
https://pagure.io/freeipa/c/eb1a1f35849c1f2e43c282c555b62f7d12962e37[commit]
* Translated using Weblate (Finnish)
https://pagure.io/freeipa/c/216cced00a1973f2103cf678ed94ef3b6c204190[commit]
* Translated using Weblate (Finnish)
https://pagure.io/freeipa/c/e98691b491ae2a8d41c3eb6e7028f6e731dbdbae[commit]
* Translated using Weblate (Finnish)
https://pagure.io/freeipa/c/4d306ee7ebe90275a47b4f182f66bc87bc397170[commit]
* Translated using Weblate (Finnish)
https://pagure.io/freeipa/c/2203f3627f28ff4c81ab9fd24eed31669ae34ff5[commit]
* Translated using Weblate (Finnish)
https://pagure.io/freeipa/c/15457a6d9fdb19466405f6882fbbc9e29510d40e[commit]
* Translated using Weblate (Finnish)
https://pagure.io/freeipa/c/5dcb614691ed31a660edc936612b525b1be0ccae[commit]
* Translated using Weblate (Finnish)
https://pagure.io/freeipa/c/c2061cf9c505c4821c7812a71c464afa367300b5[commit]
* Translated using Weblate (Finnish)
https://pagure.io/freeipa/c/9d6d2e2dc9cfb7c1ef1e400ba90b27474866380f[commit]
* Translated using Weblate (Finnish)
https://pagure.io/freeipa/c/6bdd02db7ace58cbb16d45d5c6dbfb1945e2bb43[commit]
* Added translation using Weblate (Finnish)
https://pagure.io/freeipa/c/6169eb47e1ea42c81ad6022ab02ef3222566f70f[commit]
[[david_pascual_2]]
=== David Pascual (2)
* ipatest: fix prci checker target masked return code & add pylint
https://pagure.io/freeipa/c/6483f33389c7bb1d185f2b39d68f407e131a282c[commit]
* ipatests: Checker script for prci definitions
https://pagure.io/freeipa/c/f33266c2ba9d794a5a1e9994e5fa029d2fa5de70[commit]
[[erik_belko_3]]
=== Erik Belko (3)
* ipatests: Add test for grace login limit
https://pagure.io/freeipa/c/fd92757fc4a20eb73ebe08573c3e7ac5fb5c6ae2[commit]
https://pagure.io/freeipa/issue/9211[#9211]
* ipatests: test for root using admin password in webUI
https://pagure.io/freeipa/c/80b18b08e8cf3aaa9f75769e703c2aab569b599e[commit]
https://pagure.io/freeipa/issue/9226[#9226]
* ipatests: healthcheck: test if system is FIPS enabled
https://pagure.io/freeipa/c/f962a0c2832619100046c923d15f21e8c10fce96[commit]
https://pagure.io/freeipa/issue/8951[#8951]
[[florence_blanc_renaud_15]]
=== Florence Blanc-Renaud (15)
* API doc: adapt the generated doc for 4.9 branch
https://pagure.io/freeipa/c/e725e9954737367fd6b2e5e3566d4f19ddd36295[commit]
* API reference: update dnszone_add generated doc
https://pagure.io/freeipa/c/0caa26daf2cf8f770b0111a22d89e31c763a1e89[commit]
https://pagure.io/freeipa/issue/9249[#9249]
* API reference: update vault doc
https://pagure.io/freeipa/c/4d6eabd3caf629a14c801ced4ad50dd9faa8147e[commit]
https://pagure.io/freeipa/issue/9259[#9259]
* ipatests: update vagrant boxes
https://pagure.io/freeipa/c/ca486d1507a2eb0a05576f835354d8d42c178810[commit]
* Spec file: bump the selinux-policy version
https://pagure.io/freeipa/c/58ad9f2eec0afe494c57015c4449ae39748117e4[commit]
https://pagure.io/freeipa/issue/9198[#9198]
* webui tests: fix test_subid suite
https://pagure.io/freeipa/c/58e12bd93a9b7b1c9a39981ee0c6a724040e164f[commit]
https://pagure.io/freeipa/issue/9214[#9214]
* ipa man page: format the EXAMPLES section
https://pagure.io/freeipa/c/64ef2b9c07ec0b1b316555739ff9f98229258838[commit]
https://pagure.io/freeipa/issue/9252[#9252]
* ipatests: add negative test for otptoken-sync
https://pagure.io/freeipa/c/895a800e90a34f55f5d2789ece6e7bc8e6f5c0a6[commit]
https://pagure.io/freeipa/issue/9248[#9248]
* ipa otptoken-sync: return error when sync fails
https://pagure.io/freeipa/c/4cc94cd3b929ee1878767d23f98ad5e755583c6b[commit]
https://pagure.io/freeipa/issue/9248[#9248]
* gitignore: add install/oddjob/org.freeipa.server.config-enable-sid
https://pagure.io/freeipa/c/a7369944d8b68032eddcc4577b0cc5f9f603cda9[commit]
* ipatests: Fix expected object classes
https://pagure.io/freeipa/c/2385d1d90aa91d34c4b36842a17e72aa2399a733[commit]
https://pagure.io/freeipa/issue/9062[#9062]
* check_repl_update: in progress is a boolean
https://pagure.io/freeipa/c/05a298f56485222583cb7dd4f6a3a4c5c77fc8cf[commit]
https://pagure.io/freeipa/issue/9218[#9218]
* azure tests: disable TestInstallDNSSECFirst
https://pagure.io/freeipa/c/d40fd287836dc8440f69314d77ccb461c7e6ccea[commit]
https://pagure.io/freeipa/issue/9216[#9216]
* xmlrpc tests: updated expected output for preserved user
https://pagure.io/freeipa/c/4984ff210a169129e4e56b10e54e9c795520855c[commit]
https://pagure.io/freeipa/issue/9187[#9187]
* Preserve user: fix the confusing summary
https://pagure.io/freeipa/c/ff4152539b96d309dcceaf854a3e0a49f435acff[commit]
https://pagure.io/freeipa/issue/9187[#9187]
[[francisco_trivino_1]]
=== Francisco Trivino (1)
* Vault: fix interoperability issues with older RHEL systems
https://pagure.io/freeipa/c/c643e56e4c45b7cb61aa53989657143627c23e04[commit]
https://pagure.io/freeipa/issue/9259[#9259]
[[fraser_tweedale_2]]
=== Fraser Tweedale (2)
* install: suggest --skip-mem-check when mem check fails
https://pagure.io/freeipa/c/cbf2614d8acc11a1b41558a45dac8ec98b032732[commit]
https://pagure.io/freeipa/issue/8404[#8404]
* man: add --skip-mem-check to man pages
https://pagure.io/freeipa/c/585cebb1a9673e2fc083dd3c9545a6c080e171e3[commit]
https://pagure.io/freeipa/issue/8404[#8404]
[[matthew_davis_1]]
=== Matthew Davis (1)
* Add missing parameter to Suse modify_nsswitch_pam_stack
https://pagure.io/freeipa/c/4f15804270590fdf0f339fc53ed63bf440361b7b[commit]
https://pagure.io/freeipa/issue/9185[#9185]
[[jesse_sandberg_1]]
=== Jesse Sandberg (1)
* Fix ipa-ccache-sweeper activation timer and clean up service file
https://pagure.io/freeipa/c/358924455d87b67db6cd743f3cfe15522b4c0d91[commit]
https://pagure.io/freeipa/issue/9231[#9231]
[[julien_rische_1]]
=== Julien Rische (1)
* Generate CNAMEs for TXT+URI location krb records
https://pagure.io/freeipa/c/a0652f5dc8efc4580d8039e70c0e762638d3871d[commit]
https://pagure.io/freeipa/issue/9257[#9257]
[[michal_polovka_3]]
=== Michal Polovka (3)
* ipatests: Healthcheck use subject base from IPA not REALM
https://pagure.io/freeipa/c/afa94c7995f236c5eff516652f31c1a956466cf7[commit]
* ipatests: Healthcheck should ignore pki errors when CA is not
configured
https://pagure.io/freeipa/c/206e08d811c43ba8295816e609d4cb7148a774a3[commit]
* ipatests: Increase expect timeout for interactive mode
https://pagure.io/freeipa/c/a6a6781284658e77f36c07cb7fd35b43240946a2[commit]
https://pagure.io/freeipa/issue/9183[#9183]
[[marcin_stanclik_1]]
=== Marcin Stanclik (1)
* Translated using Weblate (Polish)
https://pagure.io/freeipa/c/d198a35cb885b6cc1622bf99b8546675b98c8aed[commit]
[[mohammad_rizwan_1]]
=== Mohammad Rizwan (1)
* ipatests: Test newly added certificate lable
https://pagure.io/freeipa/c/c0b438bc745666694f2c590859d4926178a0ca04[commit]
[[nikola_knazekova_1]]
=== Nikola Knazekova (1)
* Exclude installed policy module file from RPM verification
https://pagure.io/freeipa/c/c977cefa101e145b13b5c19ae5369e5ca7ef1ef8[commit]
https://pagure.io/freeipa/issue/9254[#9254]
[[pavel_březina_1]]
=== Pavel Březina (1)
* docs: add security section to idp
https://pagure.io/freeipa/c/170155b648084846111bf0c65459aba94a8e980d[commit]
https://pagure.io/freeipa/issue/8803[#8803],
https://pagure.io/freeipa/issue/8804[#8804],
https://pagure.io/freeipa/issue/8805[#8805]
[[piotr_drąg_1]]
=== Piotr Drąg (1)
* Translated using Weblate (Polish)
https://pagure.io/freeipa/c/3b0c1cafc16dc927449231a7a70b2876770ba962[commit]
[[hela_basa_3]]
=== Hela Basa (3)
* Added translation using Weblate (Korean)
https://pagure.io/freeipa/c/0a6246ea971282a2f1fc0b5fe3f09f7d656bbf2f[commit]
* Translated using Weblate (Sinhala)
https://pagure.io/freeipa/c/696a72f7aef3df7c0f619f0d67e5fe259cc80c37[commit]
* Added translation using Weblate (Sinhala)
https://pagure.io/freeipa/c/f9590de2e0bc1d2dde4f6a78c72b6a69f773bd99[commit]
[[rob_crittenden_12]]
=== Rob Crittenden (12)
* Pass the curl write callback by name instead of address
https://pagure.io/freeipa/c/9d184a295b1b581f1d5e189ee810c6b08bc0550b[commit]
https://pagure.io/freeipa/issue/9274[#9274]
* Move client certificate request after krb5.conf is created
https://pagure.io/freeipa/c/762d786bf7a3043fd56877949f02bccd077e2711[commit]
https://pagure.io/freeipa/issue/9246[#9246]
* Defer creating the final krb5.conf on clients
https://pagure.io/freeipa/c/69413325158a3ea06d1491acd77ee6e0955ee89a[commit]
https://pagure.io/freeipa/issue/9228[#9228]
* Fix upper bound of password policy grace limit
https://pagure.io/freeipa/c/91a02174a0a9694fd5611c071913ad4720be5ac9[commit]
https://pagure.io/freeipa/issue/9243[#9243]
* Set default on group pwpolicy with no grace limit in upgrade
https://pagure.io/freeipa/c/a4ddaaf3048c4e8d78a1807af7266ee40ab3a30b[commit]
https://pagure.io/freeipa/issue/9212[#9212]
* Set default gracelimit on group password policies to -1
https://pagure.io/freeipa/c/497a57e7a6872fa30d1855a1d91a455bfdbf9300[commit]
https://pagure.io/freeipa/issue/9212[#9212]
* doc: Update LDAP grace period design with default values
https://pagure.io/freeipa/c/434620ee342ac4767beccec647a318bfa7743dfa[commit]
https://pagure.io/freeipa/issue/9212[#9212]
* upgrades: Don't restart the CA on ACME and profile schema change
https://pagure.io/freeipa/c/aaf57185a2701b34948105e8b54075afe048ff18[commit]
https://pagure.io/freeipa/issue/9204[#9204]
* Disabling gracelimit does not prevent LDAP binds
https://pagure.io/freeipa/c/1316cd8b2252c2543cf2ef2186956a8833037b1e[commit]
https://pagure.io/freeipa/issue/9206[#9206]
* Warn for permissions with read/write/search/compare and no attrs
https://pagure.io/freeipa/c/b31631ad69f72fb42b5091375df8021580f8139a[commit]
https://pagure.io/freeipa/issue/9188[#9188]
* Only calculate LDAP password grace when the password is expired
https://pagure.io/freeipa/c/3675bd1d7aca443832bb9bb2f521cc4d3a088aec[commit]
https://pagure.io/freeipa/issue/1539[#1539]
* Fix test_secure_ajp_connector.py failing with Python 3.6.8
https://pagure.io/freeipa/c/de64d6724e028a1882c3a8be31c2752bebdd41fd[commit]
https://pagure.io/freeipa/issue/9190[#9190]
[[ricky_tigg_4]]
=== Ricky Tigg (4)
* Translated using Weblate (Finnish)
https://pagure.io/freeipa/c/91b63fcae0a588fc174cf865b4e0135c8c0e48ec[commit]
* Translated using Weblate (Finnish)
https://pagure.io/freeipa/c/e6451fe15acf406aa741d4eed296ab6eff7e9313[commit]
* Translated using Weblate (Finnish)
https://pagure.io/freeipa/c/3392f31afe04e5b6b0d49d4e2f2906bc90b3643c[commit]
* Translated using Weblate (Finnish)
https://pagure.io/freeipa/c/a8a2b2cf97bbf8b2b80acce08d0903b6c91c5f98[commit]
[[sumit_bose_1]]
=== Sumit Bose (1)
* ipa-kdb: do not fail if certmap rule cannot be added
https://pagure.io/freeipa/c/e51a0c927db4a4c9b3e1ab0c6dffca545532a2b4[commit]
[[김인수_44]]
=== 김인수 (44)
* Translated using Weblate (Korean)
https://pagure.io/freeipa/c/b8c39cca34b75a4ed3ed77a468836778f670027b[commit]
* Translated using Weblate (Korean)
https://pagure.io/freeipa/c/2c555646dd71911d1bcf860e6c3acbcfd3050ad2[commit]
* Translated using Weblate (Korean)
https://pagure.io/freeipa/c/53e4e7212b5b6fe0dceb809aaddc83158f8dfef4[commit]
* Translated using Weblate (Korean)
https://pagure.io/freeipa/c/29dba19aa8862ea7b3185dcc0dba789b8e4af5b8[commit]
* Translated using Weblate (Korean)
https://pagure.io/freeipa/c/425894153a17de0cdb827a83fad599343e2d3656[commit]
* Translated using Weblate (Korean)
https://pagure.io/freeipa/c/7f9588f36a2b82df3fd9ef7dd286886021e0ffa6[commit]
* Translated using Weblate (Korean)
https://pagure.io/freeipa/c/c07e0ec7a5acedef693b0f79fdc68529e64aa023[commit]
* Translated using Weblate (Korean)
https://pagure.io/freeipa/c/e6e638aea7fda83beb47fa6c2f75772673d351c2[commit]
* Translated using Weblate (Korean)
https://pagure.io/freeipa/c/994c43513950b4c82dd9e1ed38b56232f3efffaa[commit]
* Translated using Weblate (Korean)
https://pagure.io/freeipa/c/fd538803cf6c098b2a3386ecc1f4b1e3a27b9a88[commit]
* Translated using Weblate (Korean)
https://pagure.io/freeipa/c/aef749b632fd636e6d6b920757e13d64303da9d4[commit]
* Translated using Weblate (Korean)
https://pagure.io/freeipa/c/64b2c0ebfeb7035b8c9d9e38c2a75e046e855f62[commit]
* Translated using Weblate (Korean)
https://pagure.io/freeipa/c/a24adeab5ca162b3c79358128fcdee22d0bd18f2[commit]
* Translated using Weblate (Korean)
https://pagure.io/freeipa/c/b70041d904926e9d33423fe1f7b48ca0c3791718[commit]
* Translated using Weblate (Korean)
https://pagure.io/freeipa/c/246604ec696255674e8716610c387f0f2ef93d73[commit]
* Translated using Weblate (Korean)
https://pagure.io/freeipa/c/07a1cc5424760a4ef43ffc6734c901f1cc446909[commit]
* Translated using Weblate (Korean)
https://pagure.io/freeipa/c/e98e21709e2205c8c019cc7006d3f9ded94432ae[commit]
* Translated using Weblate (Korean)
https://pagure.io/freeipa/c/fe60d1f6f386734b7cb052f34fb798341130052a[commit]
* Translated using Weblate (Korean)
https://pagure.io/freeipa/c/5bd77e606cb6be3b3a133294027e284f5604b447[commit]
* Translated using Weblate (Korean)
https://pagure.io/freeipa/c/2c0924f38694603777bcbdab804d9b3331efa239[commit]
* Translated using Weblate (Korean)
https://pagure.io/freeipa/c/067cae55eced1c1c7bcdbbb0dd56a16d7127488c[commit]
* Translated using Weblate (Korean)
https://pagure.io/freeipa/c/aa00e7c3cff81e79a1dfce2c1e5348af9f3a3438[commit]
* Translated using Weblate (Korean)
https://pagure.io/freeipa/c/b5d6616aed77a46de2db53b3395aeaf531537df3[commit]
* Translated using Weblate (Korean)
https://pagure.io/freeipa/c/7ca1befe7e8ca463052f8b24f6c9b37093dabbaa[commit]
* Translated using Weblate (Korean)
https://pagure.io/freeipa/c/b2cf29ae168661a12a426bf72e98f43d769fb132[commit]
* Translated using Weblate (Korean)
https://pagure.io/freeipa/c/8b3ceace34a55fadb560a758c02632efa87ec96f[commit]
* Translated using Weblate (Korean)
https://pagure.io/freeipa/c/7d12b30e2c6762eda93eb66a1dab2e52770d94aa[commit]
* Translated using Weblate (Korean)
https://pagure.io/freeipa/c/20006cc713c7666c373804cd7d6415f9af6a6d27[commit]
* Translated using Weblate (Korean)
https://pagure.io/freeipa/c/9e2f7d041c1c72b329fdacac232451e57a4d0516[commit]
* Translated using Weblate (Korean)
https://pagure.io/freeipa/c/cf9f35e3eb2c90cb3b07a2c5ed33fdd2f3bfa0b3[commit]
* Translated using Weblate (Korean)
https://pagure.io/freeipa/c/d6ff8af62ee12517d438d9f3ff02f25219166da4[commit]
* Translated using Weblate (Korean)
https://pagure.io/freeipa/c/1e65336b3513cf7c6579ac5714c50cb4a965fd96[commit]
* Translated using Weblate (Korean)
https://pagure.io/freeipa/c/548afe9eed0696ceb4e8abdc3331b3f1f0fad6f2[commit]
* Translated using Weblate (Korean)
https://pagure.io/freeipa/c/715043df4ea1d416e64ce50b0e141faf36f6c45d[commit]
* Translated using Weblate (Korean)
https://pagure.io/freeipa/c/18346d99b214f6060ab7f6c83e02f2c4d56ec799[commit]
* Translated using Weblate (Korean)
https://pagure.io/freeipa/c/9658dbd3c31ad22e175e613f3c51073eb196c72c[commit]
* Translated using Weblate (Korean)
https://pagure.io/freeipa/c/27dba4a7c3605a1ab03c55458ad4bb47b7c4dbc7[commit]
* Translated using Weblate (Korean)
https://pagure.io/freeipa/c/d5726f04b6b73d6c1de183ee5b6b7bd96d590db5[commit]
* Translated using Weblate (Korean)
https://pagure.io/freeipa/c/eac046fd82d02105d3388af1f04527813546e6f7[commit]
* Translated using Weblate (Korean)
https://pagure.io/freeipa/c/77feee852ed01502c0a0e48d4d4e546332827885[commit]
* Translated using Weblate (Korean)
https://pagure.io/freeipa/c/00eba1f70445a5faf27db461fb762a030b0b5789[commit]
* Translated using Weblate (Korean)
https://pagure.io/freeipa/c/101460521cb228f68a52a934acf97eddcbbb9928[commit]
* Translated using Weblate (Korean)
https://pagure.io/freeipa/c/23fb8a4709af35db3e760159de405adad343c042[commit]
* Translated using Weblate (Korean)
https://pagure.io/freeipa/c/fd81a77d78423293dee4e117b58f2f9077cb0cbf[commit]
[[stanislav_levin_6]]
=== Stanislav Levin (6)
* ipapython: Support openldap 2.6
https://pagure.io/freeipa/c/7e93f46c589ba0a68c039d65ea3c0872644a0eb0[commit]
https://pagure.io/freeipa/issue/9255[#9255]
* x509: Replace removed register_interface with subclassing
https://pagure.io/freeipa/c/89fe83b03ac3b046685389ee1059ca75c73e53b0[commit]
https://pagure.io/freeipa/issue/9160[#9160]
* ap: Constrain supported docutils
https://pagure.io/freeipa/c/1ada42e3bce58a729e689377b1a41b6cfa90b508[commit]
https://pagure.io/freeipa/issue/9208[#9208]
* ap: Rearrange overloaded jobs
https://pagure.io/freeipa/c/b59baf31bc097821ff7787ecd75affb27ea2a7c3[commit]
https://pagure.io/freeipa/issue/9207[#9207]
* ap: Disable azure's security daemon
https://pagure.io/freeipa/c/98c6e96e8db3d5bdc0315094b8a7bf81d196479b[commit]
https://pagure.io/freeipa/issue/9207[#9207]
* ap: Raise dbus timeout
https://pagure.io/freeipa/c/e77b0b08d78d4d5ae7632ef23aebc577848ea507[commit]
https://pagure.io/freeipa/issue/9207[#9207]
[[scott_poore_1]]
=== Scott Poore (1)
* ipatests: Rename create_quarkus to create_keycloak
https://pagure.io/freeipa/c/88ea19b9a53d9c209105af049a1df100d07e081a[commit]
https://pagure.io/freeipa/issue/9225[#9225]
[[sudhir_menon_2]]
=== Sudhir Menon (2)
* ipatests: WebUI: do not allow subid range deletion
https://pagure.io/freeipa/c/58b026716c973f422b1b98e27eb9536e59919d82[commit]
https://pagure.io/freeipa/issue/9150[#9150]
* ipatests: ipa-client-install --subid adds entry in nsswitch.conf
https://pagure.io/freeipa/c/a5762621ef3ed1e699306a8d2eef634bc927a6fc[commit]
https://pagure.io/freeipa/issue/9159[#9159]
[[timo_aaltonen_2]]
=== Timo Aaltonen (2)
* ipaplatform/debian: Drop the path for ldap.so
https://pagure.io/freeipa/c/56c827099708d8613e194052857e121612fbd768[commit]
* ipaplatform/debian: Use multiarch path for libsofthsm2.so
https://pagure.io/freeipa/c/c39c2ee80db056296f6826746b5b7a5bf7ba7cc4[commit]
[[thomas_woerner_1]]
=== Thomas Woerner (1)
* DNSResolver: Fix use of nameservers with ports
https://pagure.io/freeipa/c/5e2e4664aec641886923c2bec61ce25b96edb62a[commit]
https://pagure.io/freeipa/issue/9158[#9158]
[[yuri_chornoivan_3]]
=== Yuri Chornoivan (3)
* Translated using Weblate (Ukrainian)
https://pagure.io/freeipa/c/61dea74b405d251ea2778e209b03a167064b1bf6[commit]
* Translated using Weblate (Ukrainian)
https://pagure.io/freeipa/c/842a6457fda382d78a11bce626b2ef0ef3749aa0[commit]
* Translated using Weblate (Ukrainian)
https://pagure.io/freeipa/c/6353e45b5dd446b7acc46244d8bb10c38c39f9ce[commit]
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
