9:44 a.m.
Christian Heimes via FreeIPA-devel wrote:
On 23/04/2019 19.34, Alexander Bokovoy via FreeIPA-devel wrote:
> Hi,
>
> below is the first cut on 4.8.0 rc1 release notes. I had to modify
> release-notes.py from freeipa-tools quite a lot to get Pagure issues for
> git master branch pulled out of the commit messages and then merged with
> the list of issues referenced by the target milestone as we don't really
> have those in use for 4.8.0 yet.
>
> In total, a jump from 4.7.2 to 4.8.0rc1 is more than 210 referenced
> Pagure issues. Please add (as replies) comments on what should be
> highlighted in enhancements and known issues specifically.
>
> I will do few more experiments with a new release-notes.py, that's why
> I'm not publishing the draft on freeipa.org yet but rather including it
> in this email.
Here are some high lights. I have rephrased some ticket titles.
* FreeIPA no longer supports Python (7568)
* Domain Level 0 is no longer supported (7689)
* Tech preview: hidden / unadvertised IPA replica (7892)
* Tech preview: allow overriding of PKI config settings (5608)
* IPA CA uses 3072 instead of 2048 bit RSA key (6790)
* Allow issuing certificates with IP addresses in subjectAltName (7451)
* Installer utilized lib389 instead of setup-ds.pl (4491)
* FreeIPA's LDAP server requires SASL security strength factor of >= 56
(4580, 7140)
I'd tweak Christian's to read:
* FreeIPA no longer supports Python 2 (7568)
* Domain Level 0 is no longer supported (7689)
* Tech preview: hidden / unadvertised IPA replica (7892)
* Tech preview: allow overriding of PKI config settings (5608)
* Increase the IPA RSA key size from 3072 to 2048 bits (6790)
* Allow issuing certificates with IP addresses in subjectAltName (7451)
* Use lib389 to install 389-ds instead of setup-ds.pl (4491)
* FreeIPA's LDAP server requires SASL security strength factor of >= 56
(4580, 7140)
And add:
* Add utility to promote CA replica to CRL master (5803)
* Support AD One-Way Trust authenticated by trust secret (6077)
* UI migration, password reset and configuration pages support
translations (7619, 7640, 7641)
Ticket 7744 is duplicated in the list.
Could be a cut-n-paste issue that wouldn't show in the wiki but a few
lines seem concatenated:
* 7723 NTP options fails on ipa replica * 7728 RFE: Validation and
better error messages when novajoin fails because of SSL errors
* 7843 [WebUI] Use generated certificates and CSR for testing * 7844
testcase test_change_sysaccount_password_issue7561 fails with some test
configurations
* 7894 restoring a backup done on a hidden replica results * 7895 ipa
trust fetch-domains, server parameter ignored