[Freeipa-devel] [DRAFT] FreeIPA 4.9.12 Release Notes
The FreeIPA team would like to announce FreeIPA 4.9.12 release! It can be downloaded from http://www.freeipa.org/page/Downloads. Builds for Fedora distributions will be available from the official repository soon. [[highlights_in_4.9.12]] == Highlights in 4.9.12 *TODO RELEASE NOTES - put release notes (if any) to proper categories* * 9287: [RFE] makeapi should validate the generated API doc vs stored doc ' * 9298: [Tracker] Nightly test failure (updates-testing) in test_acme.py::TestACME::test_certbot_certonly_standalone :: ;; With Certbot update to 2.0.0, Certbot defaults to ECDSA certificate private keys for all new certificates. PKI ACME cert profile supports only rsa private keys, meaning that the key type needs to be forced to rsa when requesting an ACME certificate, using certbot --key-type rsa [...] ' *END TODO* === Enhancements [[known_issues]] === Known Issues [[bug_fixes]] === Bug fixes FreeIPA 4.9.12 is a stabilization release for the features delivered as a part of 4.9.0 version series. There are more than 30 bug-fixes since FreeIPA 4.9.11 release. Details of the bug-fixes can be seen in the list of resolved tickets below. == Upgrading Upgrade instructions are available on Upgrade page. == Feedback Please provide comments, bugs and other feedback via the freeipa-users mailing list (https://lists.fedoraproject.org/archives/list/freeipa-us...@lists.fedorahosted.org/) or #freeipa channel on libera.chat. [[resolved_tickets]] == Resolved tickets * https://pagure.io/freeipa/issue/5130[#5130] (https://bugzilla.redhat.com/show_bug.cgi?id=1243261[rhbz#1243261]) non-admin users cannot search hbac rules * https://pagure.io/freeipa/issue/6044[#6044] (https://bugzilla.redhat.com/show_bug.cgi?id=1353899[rhbz#1353899]) ipa-advise: object of type 'type' has no len() * https://pagure.io/freeipa/issue/9002[#9002] Nightly failure in test_fips.py::TestInstallFIPS::test_basic::setup * https://pagure.io/freeipa/issue/9124[#9124] Nightly test failure in test_smb.py::TestSMB::test_smb_service_s4u2self * https://pagure.io/freeipa/issue/9135[#9135] Nightly test failure (f37+): reverse zone not created * https://pagure.io/freeipa/issue/9195[#9195] (https://bugzilla.redhat.com/show_bug.cgi?id=2158775[rhbz#2158775]) Hiding a server does not completely clean up DNS records * https://pagure.io/freeipa/issue/9226[#9226] (https://bugzilla.redhat.com/show_bug.cgi?id=2124547[rhbz#2124547]) Infinite redirect loop in the WebUI for user root * https://pagure.io/freeipa/issue/9238[#9238] Nightly test failure (rawhide) in test_ipahealthcheck.py::TestIpaHealthCheck::test_ds_configcheck_passwordstorage * https://pagure.io/freeipa/issue/9279[#9279] ipa-otpd@.service: deprecated syslog setting * https://pagure.io/freeipa/issue/9282[#9282] Nightly test failure in test_webui/test_subid.py/test_subid/test_subid_range_deletion_not_allowed * https://pagure.io/freeipa/issue/9285[#9285] ipa-certupdate restarts HTTPd too early * https://pagure.io/freeipa/issue/9286[#9286] (https://bugzilla.redhat.com/show_bug.cgi?id=2056009[rhbz#2056009]) memberManager ACIs aren't allowing group-based manager access due to missing upgrade code * https://pagure.io/freeipa/issue/9287[#9287] [RFE] makeapi should validate the generated API doc vs stored doc * https://pagure.io/freeipa/issue/9290[#9290] (https://bugzilla.redhat.com/show_bug.cgi?id=2149889[rhbz#2149889]) idm:client is missing dependency on krb5-pkinit. * https://pagure.io/freeipa/issue/9291[#9291] Nightly test failure (rawhide) in test_ipa_dns_systemrecords_check * https://pagure.io/freeipa/issue/9298[#9298] [Tracker] Nightly test failure (updates-testing) in test_acme.py::TestACME::test_certbot_certonly_standalone * https://pagure.io/freeipa/issue/9306[#9306] (https://bugzilla.redhat.com/show_bug.cgi?id=2160389[rhbz#2160389]) 'ERROR Could not remove /tmp/tmpbkw6hawo.ipabkp' can be seen prior to 'ipa-client-install' command was successful. * https://pagure.io/freeipa/issue/9310[#9310] (https://bugzilla.redhat.com/show_bug.cgi?id=2162335[rhbz#2162335]) ipa-trust-add with --range-type=ipa-ad-trust-posix fails while creating an ID range * https://pagure.io/freeipa/issue/9314[#9314] Redundant build dependency on python3-paste (if with lint) * https://pagure.io/freeipa/issue/9315[#9315] [tests] test_ipa_healthcheck_fips_enabled fails on system without fips-mode-setup * https://pagure.io/freeipa/issue/9316[#9316] (https://bugzilla.redhat.com/show_bug.cgi?id=2166324[rhbz#2166324]) Passwordless (GSSAPI) SSH login with AD user * https://pagure.io/freeipa/issue/9318[#9318] Incomplete fast lint/codestyle check if both Python template files and Python modules were changed * https://pagure.io/freeipa/issue/9319[#9319] [tests] TestDNSResolver failures on systems without or empty /etc/resolv.conf * https://pagure.io/freeipa/issue/9320[#9320] (https://bugzilla.redhat.com/show_bug.cgi?id=2018198[rhbz#2018198]) RFE - Add a warning note about possible performance impact
[Freeipa-devel] Re: [DRAFT] FreeIPA 4.9.12 Release Notes
Notes were duplicated by error, here's the corrected version: https://gist.github.com/antoniotorresm/4551cbaeb7c97f873158c8fcf2409794 ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-devel@lists.fedorahosted.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
[Freeipa-devel] [DRAFT] FreeIPA 4.10.2 Release Notes
FreeIPA 4.10.2 release notes draft: https://gist.github.com/antoniotorresm/6ccc393e6ec6fc238c8a39d105110719 ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-devel@lists.fedorahosted.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
[Freeipa-devel] Re: [DRAFT] FreeIPA 4.9.12 Release Notes
Hi Antonio, thanks for the draft. I would put the doc related to ticket 9298: *[Tracker] Nightly test failure (updates-testing) in test_acme.py::TestACME::test_certbot_certonly_standalone* in the known issues section. A few tickets are listed as solved but are not (the commits either marked the tests as xfail or prepared a fix that is not complete yet): - 9002 - 9124 - 9135 - 9298 - 9332 - 9347 flo On Thu, Apr 20, 2023 at 2:51 PM Antonio Torres via FreeIPA-devel < freeipa-devel@lists.fedorahosted.org> wrote: > Notes were duplicated by error, here's the corrected version: > https://gist.github.com/antoniotorresm/4551cbaeb7c97f873158c8fcf2409794 > ___ > FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org > To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedorahosted.org/archives/list/freeipa-devel@lists.fedorahosted.org > Do not reply to spam, report it: > https://pagure.io/fedora-infrastructure/new_issue > ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-devel@lists.fedorahosted.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
[Freeipa-devel] Re: [DRAFT] FreeIPA 4.9.12 Release Notes
On Thu, Apr 20, 2023 at 5:21 PM Florence Blanc-Renaud wrote: > > Hi Antonio, > > thanks for the draft. > I would put the doc related to ticket 9298: [Tracker] Nightly test failure > (updates-testing) in test_acme.py::TestACME::test_certbot_certonly_standalone > in the known issues section. > > A few tickets are listed as solved but are not (the commits either marked the > tests as xfail or prepared a fix that is not complete yet): > - 9002 > - 9124 > - 9135 > - 9298 > - 9332 > - 9347 > Noted, thanks! > flo > > On Thu, Apr 20, 2023 at 2:51 PM Antonio Torres via FreeIPA-devel > wrote: >> >> Notes were duplicated by error, here's the corrected version: >> https://gist.github.com/antoniotorresm/4551cbaeb7c97f873158c8fcf2409794 >> ___ >> FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org >> To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org >> Fedora Code of Conduct: >> https://docs.fedoraproject.org/en-US/project/code-of-conduct/ >> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines >> List Archives: >> https://lists.fedorahosted.org/archives/list/freeipa-devel@lists.fedorahosted.org >> Do not reply to spam, report it: >> https://pagure.io/fedora-infrastructure/new_issue ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-devel@lists.fedorahosted.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
