[Freeipa-devel] Re: [Freeipa-users] Re: FreeIPA 4.10.0

[Rob Crittenden]

It is largely the same as 4.9 with the notable exception of random
serial number support (see release notes for full details).

RSN requires PKI 11.2.0 or higher and F36 has 11.1.0 with no current
plans to rebase, so it didn't seem worth it to build 4.10.0 there.

rob

Dirk Streubel via FreeIPA-users wrote:
>  Hello Rob,
>  
>  is there a special reason why Version 4.10.0 will not be release with
>  Fedora 36?
>  
>  See you
>  
>  Dirk
>  
>  
>  
>  
>  Am 30.06.22 um 17:49 schrieb Rob Crittenden via FreeIPA-users:
> > The Fedora rawhide build of 4.10.0 is done and should land in
> > repositories soon. The major feature of 4.10.0 is support for Random
> > Serial Numbers which request dogtag 11.2.0 which is only in rawhide.
> > Builds for other Fedora releases are not planned.
> >
> > rob
> >
> > Antonio Torres via FreeIPA-users wrote:
> >> The FreeIPA team would like to announce FreeIPA 4.10.0 release!
> >>
> >> It can be downloaded from http://www.freeipa.org/page/Downloads. Builds
> >> for Fedora distributions will be available from the official repository
> >> soon.
> >>
> >> == Highlights in 4.10.0
> >>
> >> * 2016: [RFE] Support random serial numbers in IPA certificates
> >>
> >>      RSN can be enabled in new server installations.
> >>
> >>
> >> * 7404: Incorrect certs are being updated with "ipa-certupdate"
> >>
> >>      ipa-cacert-manage command now supports the "prune" subcommand,
> that
> >>      allows to remove the expired CA certificates.
> >>
> >>
> >> === Bug fixes
> >>
> >> FreeIPA 4.10.0 is a stabilization release for the features delivered as
> >> a part of 4.10 version series.
> >>
> >> There are 7 bug-fixes since FreeIPA 4.9.10 release. Details of the
> >> bug-fixes can be seen in the list of resolved tickets below.
> >>
> >> == Upgrading
> >>
> >> Upgrade instructions are available on Upgrade page.
> >>
> >> == Feedback
> >>
> >> Please provide comments, bugs and other feedback via the freeipa-users
> >> mailing list
> >>
> (https://lists.fedoraproject.org/archives/list/[e-mail]...)
> >>
> >> or #freeipa channel on libera.chat.
> >>
> >> == Resolved tickets
> >>
> >> * https://pagure.io/freeipa/issue/2016[#2016] [RFE] Support random
> >> serial numbers in IPA certificates
> >> * https://pagure.io/freeipa/issue/2278[#2278] IPA needs better sudo
> >> option validation or better documentation
> >> * https://pagure.io/freeipa/issue/7404[#7404] Incorrect certs are being
> >> updated with "ipa-certupdate"
> >> * https://pagure.io/freeipa/issue/8544[#8544] After reboot: Replication
> >> bind with GSSAPI auth failed
> >> * https://pagure.io/freeipa/issue/8684[#8684] [WebUI]
> >> test_hostgroup::test_names_and_button - timeout reached
> >> * https://pagure.io/freeipa/issue/9035[#9035] Nightly failure (rawhide)
> >> in test_installation_client.py::TestInstallClient
> >> * https://pagure.io/freeipa/issue/9105[#9105] Review usage of quiet flag
> >> in ipa-join
> >>
> >> == Detailed changelog since 4.9.10
> >>
> >> === Rob Crittenden (9)
> >>
> >> * Fix test_secure_ajp_connector.py failing with Python 3.6.8
> >> https://pagure.io/freeipa/c/9a97f9b40[commit]
> >> * Add tests for Random Serial Number v3 support
> >> https://pagure.io/freeipa/c/d241d7405[commit]
> >> https://pagure.io/freeipa/issue/2016[#2016]
> >> * Add support for Random Serial Numbers v3
> >> https://pagure.io/freeipa/c/beaa0562d[commit]
> >> https://pagure.io/freeipa/issue/2016[#2016]
> >> * Add a new parameter type, SerialNumber, as a subclass of Str
> >> https://pagure.io/freeipa/c/83be923ac[commit]
> >> https://pagure.io/freeipa/issue/2016[#2016]
> >> * doc/designs: add Random Serial Numbers v3 support
> >> https://pagure.io/freeipa/c/d3481449e[commit]
> >> https://pagure.io/freeipa/issue/2016[#2016]
> >> * Design for IPA-to-IPA migration
> >> https://pagure.io/freeipa/c/d4859db4e[commit]
> >> * Re-work the quiet option in ipa-join to not suppress errors
> >> https://pagure.io/freeipa/c/61650c577[commit]
> >> https://pagure.io/freeipa/issue/9105[#9105]
> >> * Improve sudooption docs, make the option multi-value
> >> https://pagure.io/freeipa/c/47fbe05f7[commit]
> >> https://pagure.io/freeipa/issue/2278[#2278]
> >> * Design doc to allow LDAP bind using the RADIUS auth type
> >> https://pagure.io/freeipa/c/16ab690bf[commit]
> >>
> >> === Matthew Davis (1)
> >>
> >> * Add missing parameter to Suse modify_nsswitch_pam_stack
> >> https://pagure.io/freeipa/c/6d6b135ff[commit]
> >>
> >> === Anuja More (3)
> >>
> >> * ipatests: Fix install_master for test_idp.py
> >> https://pagure.io/freeipa/c/ef091c99f[commit]
> >> * Add end to end integration tests for external IdP
> >> https://pagure.io/freeipa/c/bd57ff356[commit]
> >> * ipatests: update prci definitions for test_idp.py
> >> https://pagure.io/freeipa/c/a80a98194[commit]
> >>
> >> === Timo Aaltonen (2)
> >>
> >> * ipaplatform/debian: Drop the path for ldap.so
> >> https://pagure.io/freeipa/c/808ac46ba[commit]
> >> * ipaplatform/debian: Use multiarch path for libsofthsm2.so
> >> https://pagure.io/freeipa/c/92d718dbf[commit]
> >>
> >> === Michal Polovka (5)
> >>
> >> * ipatests: Healthcheck use subject base from IPA not REALM
> >> https://pagure.io/freeipa/c/d3c11f762[commit]
> >> * ipatests: Increase expect timeout for interactive mode
> >> https://pagure.io/freeipa/c/40b3c11bd[commit]
> >> * ipatests: Healthcheck should ignore pki errors when CA is not
> >> configured https://pagure.io/freeipa/c/b2bbf8165[commit]
> >> * test_webui: test_hostgroup: Wait for modal dialog to appear
> >> https://pagure.io/freeipa/c/d0269f236[commit]
> >> https://pagure.io/freeipa/issue/8684[#8684]
> >> * WebUI: Test if links are opened in new tab correctly
> >> https://pagure.io/freeipa/c/89c846a1f[commit]
> >>
> >> === Florence Blanc-Renaud (9)
> >>
> >> * xmlrpc tests: updated expected output for preserved user
> >> https://pagure.io/freeipa/c/3732349bc[commit]
> >> * Preserve user: fix the confusing summary
> >> https://pagure.io/freeipa/c/cbc18ff8c[commit]
> >> * ipatests: update packages in rawhide test test_installation_client.py
> >> https://pagure.io/freeipa/c/4c61b9266[commit]
> >> https://pagure.io/freeipa/issue/9035[#9035]
> >> * ipatests: revert wrong commit on gating definition
> >> https://pagure.io/freeipa/c/4b665ccf2[commit]
> >> * Design: Integrate SID configuration into base IPA installers
> >> https://pagure.io/freeipa/c/bacddb828[commit]
> >> * Doc: add a design template
> >> https://pagure.io/freeipa/c/5edf144a7[commit]
> >> * ipatests: add test_acme.py in nightly previous
> >> https://pagure.io/freeipa/c/96a297f3b[commit]
> >> * ipatests: fix incomplete nightly def in nightly_previous
> >> https://pagure.io/freeipa/c/296f27dce[commit]
> >> * ipatests: fix discrepancies in nightly defs
> >> https://pagure.io/freeipa/c/9b2c05aff[commit]
> >>
> >> === Armando Neto (8)
> >>
> >> * ipatests: update prci template
> >> https://pagure.io/freeipa/c/b3085b830[commit]
> >> * ipatests: update definitions for custom COPR nightlies
> >> https://pagure.io/freeipa/c/1101b22b5[commit]
> >> * ipatests: bump PR-CI rawhide template
> >> https://pagure.io/freeipa/c/c780504d4[commit]
> >> * ipatests: bump rawhide template for PR-CI
> >> https://pagure.io/freeipa/c/d6d413628[commit]
> >> * ipatests: Bump PR-CI rawhide template
> >> https://pagure.io/freeipa/c/c14d52f43[commit]
> >> * ipatests: Bump PR-CI Rawhide template
> >> https://pagure.io/freeipa/c/c572697d9[commit]
> >> * ipatests: Update gating to Fedora 33
> >> https://pagure.io/freeipa/c/a6b487130[commit]
> >> * ipatests: update PR-CI templates to Fedora 33
> >> https://pagure.io/freeipa/c/3e8e83654[commit]
> >>
> >> === Alexander Bokovoy (3)
> >>
> >> * Fix use of comparison functions to avoid GCC bug 95189
> >> https://pagure.io/freeipa/c/9043b8d53[commit]
> >> * doc/designs: fix formatting in LDAPI autobind design
> >> https://pagure.io/freeipa/c/3d809c706[commit]
> >> * Contributors: add new contributors to the list
> >> https://pagure.io/freeipa/c/bef78d16e[commit]
> >>
> >> === Mohammad Rizwan (1)
> >>
> >> * ipatest: Test ipa-cert-fix fails when startup directive is missing
> >> from CS.cfg https://pagure.io/freeipa/c/16057898a[commit]
> >>
> >> === Christian Heimes (2)
> >>
> >> * Add design for LDAPI autobind
> >> https://pagure.io/freeipa/c/5b8f37f88[commit]
> >> https://pagure.io/freeipa/issue/8544[#8544]
> >> * LDAP autobind authenticateAsDN for BIND named
> >> https://pagure.io/freeipa/c/16e1cbdc5[commit]
> >> https://pagure.io/freeipa/issue/8544[#8544]
> >>
> >> === François Cami (1)
> >>
> >> * ipatests: fix nightly_latest_testing_selinux template
> >> https://pagure.io/freeipa/c/87304c78a[commit]
> >>
> >> === Antonio Torres (2)
> >>
> >> * ipatests: add test for ipa-cacert-manage prune
> >> https://pagure.io/freeipa/c/8a2e6ec32[commit]
> >> https://pagure.io/freeipa/issue/7404[#7404]
> >> * ipa-cacert-manage: add prune option
> >> https://pagure.io/freeipa/c/5d8cb1dd1[commit]
> >> https://pagure.io/freeipa/issue/7404[#7404]
> >>
> >> === Peter Keresztes Schmidt (3)
> >>
> >> * configure: Do not set -Wno-strict-aliasing -Wno-sign-compare
> >> https://pagure.io/freeipa/c/f9357cb98[commit]
> >> * build: Unify compiler warning flags used
> >> https://pagure.io/freeipa/c/a355646c3[commit]
> >> * configure: Fix source tree detection to enable more warnings
> >> https://pagure.io/freeipa/c/54b42f72f[commit]
> >> _______________________________________________
> >> FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
> >> To unsubscribe send an email to
> >> freeipa-users-leave(a)lists.fedorahosted.org
> >> Fedora Code of Conduct:
> >> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> >> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> >> List Archives:
> >>
> https://lists.fedorahosted.org/archives/list/[e-mail]...
> >>
> >> Do not reply to spam on the list, report it:
> >> https://pagure.io/fedora-infrastructure
> >>
> > _______________________________________________
> > FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
> > To unsubscribe send an email to
> > freeipa-users-leave(a)lists.fedorahosted.org
> > Fedora Code of Conduct:
> > https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> > List Archives:
> > https://lists.fedorahosted.org/archives/list/[e-mail]...
> >
> > Do not reply to spam on the list, report it:
> > https://pagure.io/fedora-infrastructure
>  _______________________________________________
>  FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
>  To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
>  Fedora Code of Conduct:
>  https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>  List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  List Archives:
>  https://lists.fedorahosted.org/archives/list/[e-mail]...
>  
>  Do not reply to spam on the list, report it:
>  https://pagure.io/fedora-infrastructure