The FreeIPA team would like to announce FreeIPA 4.9.11 release!
It can be downloaded from http://www.freeipa.org/page/Downloads. Builds for Fedora distributions will be available from the official repository soon.
[[highlights_in_4.9.11]] == Highlights in 4.9.11
* 9083: Support MIT Kerberos KDB version 9
:: ;; FreeIPA now supports MIT Kerberos 1.20. Resource-based constrained delegation is not yet implemented.
'''''
* 9187: [UX] Preserving a user account produces output saying it was deleted
:: ;; Previously, the command to preserve a user account used to display a confusing output "Deleted user: " although the user was preserved and not deleted. The command now displays "Preserved user: " for preserved users.
'''''
* 9228: ipa-client-install does not maintain server affinity during installation
:: ;; ipa-client-install will use a single server for the duration of the installation process, either one discovered or provided on the command-line. Previously it would use a temporary configuration to do enrollment, then switch to a final one for the remaining operations. This could lead to the installer talking with multiple servers. If the client installer is faster than replication this could lead to errors.
'''''
* 9237: Show order in sudo rule list in web interface
:: ;; In the 'sudo rules' page, the WebUI is now displaying a 'sudo order' column so that the users can easily see which rules override other rules based on their order.
'''''
* 9258: Do not add TLS CA configuration to ldap.conf anymore
:: ;; FreeIPA client installer does not add explicit TLS CA configuration to OpenLDAP's ldap.conf anymore. Since OpenLDAP 2.4.45, explicit CA configuration is not required as OpenLDAP uses the default CA store provided by OpenSSL and IPA CA is installed in the default store by the installer already.
'''''
[[bug_fixes]] === Bug fixes
FreeIPA 4.9.11 is a stabilization release for the features delivered as a part of 4.9 version series.
There are more than 50 bug-fixes since FreeIPA 4.9.10 release. Details of the bug-fixes can be seen in the list of resolved tickets below.
== Upgrading
Upgrade instructions are available on Upgrade page.
== Feedback
Please provide comments, bugs and other feedback via the freeipa-users mailing list (https://lists.fedoraproject.org/archives/list/freeipa-users@lists.fedorahost...) or #freeipa channel on libera.chat.
[[resolved_tickets]] == Resolved tickets
* https://pagure.io/freeipa/issue/8946%5B#8946] RFE: Add label name to Certificates section in WebUI to enable testing * https://pagure.io/freeipa/issue/8951%5B#8951] Test for RFE ipa-healthcheck tool can include check to see if the system is FIPS enabled or not * https://pagure.io/freeipa/issue/9062%5B#9062] [ipatests] SID generation and test_xmlrpc/test_user_plugin.py * https://pagure.io/freeipa/issue/9083%5B#9083] Support MIT Kerberos KDB version 9 * https://pagure.io/freeipa/issue/9158%5B#9158] Internal error when setting dnsconfig or dnsforwardzone forwarders. * https://pagure.io/freeipa/issue/9160%5B#9160] cryptography.utils.register_interface is scheduled for removal * https://pagure.io/freeipa/issue/9161%5B#9161] Nightly test failure in test_selinuxusermap.py::test_selinuxusermap::test_misc * https://pagure.io/freeipa/issue/9183%5B#9183] Timeout issue in test_installation.py when using interactive mode * https://pagure.io/freeipa/issue/9185%5B#9185] Fix missing parameter for Suse ipaplatform task * https://pagure.io/freeipa/issue/9187%5B#9187] (https://bugzilla.redhat.com/show_bug.cgi?id=2022028%5Brhbz#2022028]) [UX] Preserving a user account produces output saying it was deleted * https://pagure.io/freeipa/issue/9188%5B#9188] (https://bugzilla.redhat.com/show_bug.cgi?id=2098187%5Brhbz#2098187]) Add warning for empty targetattr when creating ACI with RBAC * https://pagure.io/freeipa/issue/9189%5B#9189] ipatests: Fix test_idp.py for downstream idm-ci * https://pagure.io/freeipa/issue/9190%5B#9190] ipatests.test_ipaserver.test_secure_ajp_connector failing with python 3.6.8 with: TypeError: a bytes-like object is required, not 'str' * https://pagure.io/freeipa/issue/9192%5B#9192] (https://bugzilla.redhat.com/show_bug.cgi?id=2094672%5Brhbz#2094672]) IdM WebUI Pagination Size should not allow empty value * https://pagure.io/freeipa/issue/9198%5B#9198] [Tracker] nightly failure: after ipa trust-add, cred cache contains cifs/master.ipa.test@IPA.TEST instead of admin principal * https://pagure.io/freeipa/issue/9204%5B#9204] [Tracker] In ipa-server-upgrade ca_upgrade_schema() results in unnecessary pki restarts * https://pagure.io/freeipa/issue/9206%5B#9206] (https://bugzilla.redhat.com/show_bug.cgi?id=2109236%5Brhbz#2109236]) ldap bind occurs when admin user changes password with gracelimit=0 * https://pagure.io/freeipa/issue/9207%5B#9207] Failure in AzurePipeline.freeipa (GATING InstallDNSSECFirst_1_to_5) * https://pagure.io/freeipa/issue/9208%5B#9208] ap: Doc build fails against Sphinx 5.1.0 * https://pagure.io/freeipa/issue/9211%5B#9211] (https://bugzilla.redhat.com/show_bug.cgi?id=2109243%5Brhbz#2109243]) RFE: Allow grace login limit to be set in IPA WebUI. * https://pagure.io/freeipa/issue/9212%5B#9212] (https://bugzilla.redhat.com/show_bug.cgi?id=2115475%5Brhbz#2115475]) Nightly test failure in test_user.py::test_user::test_password_expiration_notification * https://pagure.io/freeipa/issue/9214%5B#9214] Nightly failure in webui test test_subid.py::test_subid::test_subid_range_deletion_not_allowed * https://pagure.io/freeipa/issue/9218%5B#9218] (https://bugzilla.redhat.com/show_bug.cgi?id=2116966%5Brhbz#2116966]) Random failure in test-winsyncmigrate * https://pagure.io/freeipa/issue/9225%5B#9225] pytest library module rename from quarkus to keycloak * https://pagure.io/freeipa/issue/9226%5B#9226] (https://bugzilla.redhat.com/show_bug.cgi?id=2124547%5Brhbz#2124547]) Infinite redirect loop in the WebUI for user root * https://pagure.io/freeipa/issue/9228%5B#9228] (https://bugzilla.redhat.com/show_bug.cgi?id=2148258%5Brhbz#2148258]) ipa-client-install does not maintain server affinity during installation * https://pagure.io/freeipa/issue/9230%5B#9230] build failure against gcc < 11 * https://pagure.io/freeipa/issue/9231%5B#9231] /run/ipa/ccaches uses all available tmpfs space * https://pagure.io/freeipa/issue/9237%5B#9237] Show order in sudo rule list in web interface * https://pagure.io/freeipa/issue/9243%5B#9243] (https://bugzilla.redhat.com/show_bug.cgi?id=2127833%5Brhbz#2127833]) Password Policy Grace login limit allows invalid maximum value * https://pagure.io/freeipa/issue/9245%5B#9245] (https://bugzilla.redhat.com/show_bug.cgi?id=2117167%5Brhbz#2117167]) `extdom` plugin can return object from a wrong domain. * https://pagure.io/freeipa/issue/9246%5B#9246] Nightly test failure in test_user_permissions.TestInstallClientNoAdmin * https://pagure.io/freeipa/issue/9248%5B#9248] (https://bugzilla.redhat.com/show_bug.cgi?id=2124369%5Brhbz#2124369]) OTP token sync always returns OK even with random numbers * https://pagure.io/freeipa/issue/9249%5B#9249] (https://bugzilla.redhat.com/show_bug.cgi?id=2108630%5Brhbz#2108630]) Deprecated feature idnssoaserial in IdM appears when creating reverse dns zones * https://pagure.io/freeipa/issue/9252%5B#9252] (https://bugzilla.redhat.com/show_bug.cgi?id=2129895%5Brhbz#2129895]) [DDF] The Examples in the RHEL ipa(1) man page show "ipa help commands" with content for "ipa halp topics" and "ipa hel * https://pagure.io/freeipa/issue/9254%5B#9254] Exclude installed policy module file from RPM verification * https://pagure.io/freeipa/issue/9255%5B#9255] ipapython.dn_ctypes is not compatible with libldap 2.6 * https://pagure.io/freeipa/issue/9257%5B#9257] (https://bugzilla.redhat.com/show_bug.cgi?id=2104185%5Brhbz#2104185]) Introduction of URI records for kerberos breaks location functionality * https://pagure.io/freeipa/issue/9258%5B#9258] (https://bugzilla.redhat.com/show_bug.cgi?id=2094673%5Brhbz#2094673]) Do not add TLS CA configuration to ldap.conf anymore * https://pagure.io/freeipa/issue/9259%5B#9259] (https://bugzilla.redhat.com/show_bug.cgi?id=2144737%5Brhbz#2144737]) vault interoperability with older RHEL systems is broken * https://pagure.io/freeipa/issue/9269%5B#9269] (https://bugzilla.redhat.com/show_bug.cgi?id=2143224%5Brhbz#2143224], https://bugzilla.redhat.com/show_bug.cgi?id=2075452%5Brhbz#2075452]) ipa-certupdate does not restart/reload KDC on servers * https://pagure.io/freeipa/issue/9271%5B#9271] (https://bugzilla.redhat.com/show_bug.cgi?id=2143224%5Brhbz#2143224]) Support PKINIT with ipa-client-install * https://pagure.io/freeipa/issue/9274%5B#9274] ipa-join: pass the curl write function by name, not address
[[detailed_changelog_since_4.9.10]] == Detailed changelog since 4.9.10
[[armando_neto_1]] === Armando Neto (1)
* webui: Do not allow empty pagination size https://pagure.io/freeipa/c/991849cf58fa990ad4540a61214b5ab4fcd4baa1%5Bcommi...] https://pagure.io/freeipa/issue/9192%5B#9192]
[[alexander_bokovoy_10]] === Alexander Bokovoy (10)
* ipa-kdb: for delegation check, use different error codes before and after krb5 1.20 https://pagure.io/freeipa/c/e12aa8bb782e1f3722ae93d63632cd93df06faab%5Bcommi...] https://pagure.io/freeipa/issue/9083%5B#9083] * ipa-kdb: fix comment to make sure we talk about krb5 1.20 or later https://pagure.io/freeipa/c/a35cac3d6fa80d259240b0eb1d4952c321be9e92%5Bcommi...] * ipa-kdb: fix PAC requester check https://pagure.io/freeipa/c/7e504647dd00202c02cd203ca3474a332d1e413e%5Bcommi...] https://pagure.io/freeipa/issue/9083%5B#9083] * ipa-kdb: handle empty S4U proxy in allowed_to_delegate https://pagure.io/freeipa/c/4755bd42c0f4c8fcda6131ee89b6fa8308d8a75c%5Bcommi...] https://pagure.io/freeipa/issue/9083%5B#9083] * ipa-kdb: handle cross-realm TGT entries when generating PAC https://pagure.io/freeipa/c/0dd3315afb1056e3ca5bfd6af161793b5a5b8d86%5Bcommi...] https://pagure.io/freeipa/issue/9083%5B#9083] * ipa-kdb: add krb5 1.20 support https://pagure.io/freeipa/c/a0d840347b453bda141691ac587bc2ec851f15a5%5Bcommi...] https://pagure.io/freeipa/issue/9083%5B#9083] * ipa-kdb: refactor MS-PAC processing to prepare for krb5 1.20 https://pagure.io/freeipa/c/9efa8fe49c08fc584189b9d9ab24dfa8560db824%5Bcommi...] https://pagure.io/freeipa/issue/9083%5B#9083] * ipaclient: do not set TLS CA options in ldap.conf anymore https://pagure.io/freeipa/c/d9a56b51bbb350219d0f5cb0ea6b3cc00230d437%5Bcommi...] https://pagure.io/freeipa/issue/9258%5B#9258] * fix canonicalization issue in Web UI https://pagure.io/freeipa/c/109cd579e3b089b7fad4c92bf25594eba1af8a21%5Bcommi...] https://pagure.io/freeipa/issue/9226%5B#9226] * ipa-otpd: initialize local pointers and handle gcc 10 https://pagure.io/freeipa/c/9290aa5500f752d0eedabdfc92c9fe6c0ee743b8%5Bcommi...] https://pagure.io/freeipa/issue/9230%5B#9230]
[[anuja_more_4]] === Anuja More (4)
* ipatests : Test query to AD specific attributes is successful. https://pagure.io/freeipa/c/21cb86a8e571ac7aa0304c57961881ca9c4aeacb%5Bcommi...] https://pagure.io/freeipa/issue/9127%5B#9127] * ipatests: Fix install_master for test_idp.py https://pagure.io/freeipa/c/15f454f6f8d25275c9570e2cc3a97c4e030fc581%5Bcommi...] https://pagure.io/freeipa/issue/9189%5B#9189] * ipatests: update prci definitions for test_idp.py https://pagure.io/freeipa/c/50b4d9ab3fcb2e63edc8d20346e4a8a79f15692d%5Bcommi...] * Add end to end integration tests for external IdP https://pagure.io/freeipa/c/857713c5a9c8e0b62c06dd92e69c09eeb34b2e99%5Bcommi...] https://pagure.io/freeipa/issue/8803%5B#8803], https://pagure.io/freeipa/issue/8804%5B#8804], https://pagure.io/freeipa/issue/8805%5B#8805]
[[antonio_torres_5]] === Antonio Torres (5)
* Update list of contributors https://pagure.io/freeipa/c/4f3dd0538af82bc81b146b03f03743e5ccfc516d%5Bcommi...] * Update translations to FreeIPA ipa-4-9 state https://pagure.io/freeipa/c/59bfe9d87c01f6a73fa359be700847b9f1bb616d%5Bcommi...] * Add basic API usage guide https://pagure.io/freeipa/c/76aa6d2a4293e5d492a7cc087b17603b6d28e34e%5Bcommi...] * doc: generate API Reference https://pagure.io/freeipa/c/beaab476903b2f182a722f45bf8af8fee611f0b7%5Bcommi...] * Back to git snapshots https://pagure.io/freeipa/c/3e90842b3d94268f2ccd42c8decd0eecbcf88f1f%5Bcommi...]
[[alexey_tikhonov_3]] === Alexey Tikhonov (3)
* extdom: avoid sss_nss_getorigby*() calls when get*_r_wrapper() returns object from a wrong domain (performance optimization) https://pagure.io/freeipa/c/a07cece0c006b3a89fc467284244f979d39f0209%5Bcommi...] * extdom: make sure result doesn't miss domain part https://pagure.io/freeipa/c/3de618f75416afd6c087c243fe35755739d229a4%5Bcommi...] https://pagure.io/freeipa/issue/9245%5B#9245] * extdom: internal functions should be static https://pagure.io/freeipa/c/666357649f4dfb8254cb3707e97e12c69e6714f7%5Bcommi...]
[[carla_martinez_9]] === Carla Martinez (9)
* webui: Add name to 'Certificates' table https://pagure.io/freeipa/c/76c8b47e4fb249db0b7c6185afcc0d11b78c5824%5Bcommi...] https://pagure.io/freeipa/issue/8946%5B#8946] * webui: Add label name to 'Certificates' section https://pagure.io/freeipa/c/98eda97648fb0d9a7ae9aac32938d4f889f8a213%5Bcommi...] https://pagure.io/freeipa/issue/8946%5B#8946] * Update API and VERSION https://pagure.io/freeipa/c/856edcc8d3c9fe64eff532db669536a0a78ba70d%5Bcommi...] https://pagure.io/freeipa/issue/9249%5B#9249] * webui: Set 'SOA serial' field as read-only https://pagure.io/freeipa/c/9f8c9a4d96877bab1cb474615d77aca2fa586ece%5Bcommi...] https://pagure.io/freeipa/issue/9249%5B#9249] * ipatest: Remove warning message for 'idnssoaserial' https://pagure.io/freeipa/c/76604df09d8b62795f4e2d1fbc99af9ed55ec5cd%5Bcommi...] https://pagure.io/freeipa/issue/9249%5B#9249] * Set 'idnssoaserial' to deprecated https://pagure.io/freeipa/c/e9048daac53e24759a33e2031c8b4224a80a0e54%5Bcommi...] https://pagure.io/freeipa/issue/9249%5B#9249] * webui: Show 'Sudo order' column https://pagure.io/freeipa/c/0513a83a4fcd5626168cb45132af8cd1b4a9ee03%5Bcommi...] https://pagure.io/freeipa/issue/9237%5B#9237] * Set pkeys in test_selinuxusermap.py::test_misc::delete_record https://pagure.io/freeipa/c/cefa8f1e5f5b01e6863d07e9f3849dfd4c485f22%5Bcommi...] https://pagure.io/freeipa/issue/9161%5B#9161] * webui: Allow grace login limit https://pagure.io/freeipa/c/ade5093b08f92b279c200f341e96972a74f644d8%5Bcommi...] https://pagure.io/freeipa/issue/9211%5B#9211]
[[christian_heimes_1]] === Christian Heimes (1)
* Add PKINIT support to ipa-client-install https://pagure.io/freeipa/c/80da53eaada1b5ad61b8cff2f9ed1217fea600c9%5Bcommi...] https://pagure.io/freeipa/issue/9269%5B#9269], https://pagure.io/freeipa/issue/9271%5B#9271]
[[jan_kuparinen_20]] === Jan Kuparinen (20)
* Translated using Weblate (Finnish) https://pagure.io/freeipa/c/841e0c673b222e686083cb96c210a55da6e09ff8%5Bcommi...] * Translated using Weblate (Finnish) https://pagure.io/freeipa/c/4d92e67a45b0caf72ce5028f8bbba06f4d63fb7f%5Bcommi...] * Translated using Weblate (Finnish) https://pagure.io/freeipa/c/e6accc7b3f39e0140e0d1dc3ee6bfcf6636d214d%5Bcommi...] * Translated using Weblate (Finnish) https://pagure.io/freeipa/c/20bcd69f38fb734dc80e5052cb2ed91c19b12994%5Bcommi...] * Translated using Weblate (Finnish) https://pagure.io/freeipa/c/49a41249e1d8cf6b349f895ba88c7490081ab462%5Bcommi...] * Translated using Weblate (Finnish) https://pagure.io/freeipa/c/20269ac630c451734dffef50298cba823ffe2624%5Bcommi...] * Translated using Weblate (Finnish) https://pagure.io/freeipa/c/1853d934d1e93dbf07d50799406ac12995a1d977%5Bcommi...] * Translated using Weblate (Finnish) https://pagure.io/freeipa/c/7037e5389006f1eeea0299918cbbae57893ef125%5Bcommi...] * Translated using Weblate (Finnish) https://pagure.io/freeipa/c/9df1672f479bee01efcd53c46e800e789762bc97%5Bcommi...] * Translated using Weblate (Finnish) https://pagure.io/freeipa/c/eb1a1f35849c1f2e43c282c555b62f7d12962e37%5Bcommi...] * Translated using Weblate (Finnish) https://pagure.io/freeipa/c/216cced00a1973f2103cf678ed94ef3b6c204190%5Bcommi...] * Translated using Weblate (Finnish) https://pagure.io/freeipa/c/e98691b491ae2a8d41c3eb6e7028f6e731dbdbae%5Bcommi...] * Translated using Weblate (Finnish) https://pagure.io/freeipa/c/4d306ee7ebe90275a47b4f182f66bc87bc397170%5Bcommi...] * Translated using Weblate (Finnish) https://pagure.io/freeipa/c/2203f3627f28ff4c81ab9fd24eed31669ae34ff5%5Bcommi...] * Translated using Weblate (Finnish) https://pagure.io/freeipa/c/15457a6d9fdb19466405f6882fbbc9e29510d40e%5Bcommi...] * Translated using Weblate (Finnish) https://pagure.io/freeipa/c/5dcb614691ed31a660edc936612b525b1be0ccae%5Bcommi...] * Translated using Weblate (Finnish) https://pagure.io/freeipa/c/c2061cf9c505c4821c7812a71c464afa367300b5%5Bcommi...] * Translated using Weblate (Finnish) https://pagure.io/freeipa/c/9d6d2e2dc9cfb7c1ef1e400ba90b27474866380f%5Bcommi...] * Translated using Weblate (Finnish) https://pagure.io/freeipa/c/6bdd02db7ace58cbb16d45d5c6dbfb1945e2bb43%5Bcommi...] * Added translation using Weblate (Finnish) https://pagure.io/freeipa/c/6169eb47e1ea42c81ad6022ab02ef3222566f70f%5Bcommi...]
[[david_pascual_2]] === David Pascual (2)
* ipatest: fix prci checker target masked return code & add pylint https://pagure.io/freeipa/c/6483f33389c7bb1d185f2b39d68f407e131a282c%5Bcommi...] * ipatests: Checker script for prci definitions https://pagure.io/freeipa/c/f33266c2ba9d794a5a1e9994e5fa029d2fa5de70%5Bcommi...]
[[erik_belko_3]] === Erik Belko (3)
* ipatests: Add test for grace login limit https://pagure.io/freeipa/c/fd92757fc4a20eb73ebe08573c3e7ac5fb5c6ae2%5Bcommi...] https://pagure.io/freeipa/issue/9211%5B#9211] * ipatests: test for root using admin password in webUI https://pagure.io/freeipa/c/80b18b08e8cf3aaa9f75769e703c2aab569b599e%5Bcommi...] https://pagure.io/freeipa/issue/9226%5B#9226] * ipatests: healthcheck: test if system is FIPS enabled https://pagure.io/freeipa/c/f962a0c2832619100046c923d15f21e8c10fce96%5Bcommi...] https://pagure.io/freeipa/issue/8951%5B#8951]
[[florence_blanc_renaud_15]] === Florence Blanc-Renaud (15)
* API doc: adapt the generated doc for 4.9 branch https://pagure.io/freeipa/c/e725e9954737367fd6b2e5e3566d4f19ddd36295%5Bcommi...] * API reference: update dnszone_add generated doc https://pagure.io/freeipa/c/0caa26daf2cf8f770b0111a22d89e31c763a1e89%5Bcommi...] https://pagure.io/freeipa/issue/9249%5B#9249] * API reference: update vault doc https://pagure.io/freeipa/c/4d6eabd3caf629a14c801ced4ad50dd9faa8147e%5Bcommi...] https://pagure.io/freeipa/issue/9259%5B#9259] * ipatests: update vagrant boxes https://pagure.io/freeipa/c/ca486d1507a2eb0a05576f835354d8d42c178810%5Bcommi...] * Spec file: bump the selinux-policy version https://pagure.io/freeipa/c/58ad9f2eec0afe494c57015c4449ae39748117e4%5Bcommi...] https://pagure.io/freeipa/issue/9198%5B#9198] * webui tests: fix test_subid suite https://pagure.io/freeipa/c/58e12bd93a9b7b1c9a39981ee0c6a724040e164f%5Bcommi...] https://pagure.io/freeipa/issue/9214%5B#9214] * ipa man page: format the EXAMPLES section https://pagure.io/freeipa/c/64ef2b9c07ec0b1b316555739ff9f98229258838%5Bcommi...] https://pagure.io/freeipa/issue/9252%5B#9252] * ipatests: add negative test for otptoken-sync https://pagure.io/freeipa/c/895a800e90a34f55f5d2789ece6e7bc8e6f5c0a6%5Bcommi...] https://pagure.io/freeipa/issue/9248%5B#9248] * ipa otptoken-sync: return error when sync fails https://pagure.io/freeipa/c/4cc94cd3b929ee1878767d23f98ad5e755583c6b%5Bcommi...] https://pagure.io/freeipa/issue/9248%5B#9248] * gitignore: add install/oddjob/org.freeipa.server.config-enable-sid https://pagure.io/freeipa/c/a7369944d8b68032eddcc4577b0cc5f9f603cda9%5Bcommi...] * ipatests: Fix expected object classes https://pagure.io/freeipa/c/2385d1d90aa91d34c4b36842a17e72aa2399a733%5Bcommi...] https://pagure.io/freeipa/issue/9062%5B#9062] * check_repl_update: in progress is a boolean https://pagure.io/freeipa/c/05a298f56485222583cb7dd4f6a3a4c5c77fc8cf%5Bcommi...] https://pagure.io/freeipa/issue/9218%5B#9218] * azure tests: disable TestInstallDNSSECFirst https://pagure.io/freeipa/c/d40fd287836dc8440f69314d77ccb461c7e6ccea%5Bcommi...] https://pagure.io/freeipa/issue/9216%5B#9216] * xmlrpc tests: updated expected output for preserved user https://pagure.io/freeipa/c/4984ff210a169129e4e56b10e54e9c795520855c%5Bcommi...] https://pagure.io/freeipa/issue/9187%5B#9187] * Preserve user: fix the confusing summary https://pagure.io/freeipa/c/ff4152539b96d309dcceaf854a3e0a49f435acff%5Bcommi...] https://pagure.io/freeipa/issue/9187%5B#9187]
[[francisco_trivino_1]] === Francisco Trivino (1)
* Vault: fix interoperability issues with older RHEL systems https://pagure.io/freeipa/c/c643e56e4c45b7cb61aa53989657143627c23e04%5Bcommi...] https://pagure.io/freeipa/issue/9259%5B#9259]
[[fraser_tweedale_2]] === Fraser Tweedale (2)
* install: suggest --skip-mem-check when mem check fails https://pagure.io/freeipa/c/cbf2614d8acc11a1b41558a45dac8ec98b032732%5Bcommi...] https://pagure.io/freeipa/issue/8404%5B#8404] * man: add --skip-mem-check to man pages https://pagure.io/freeipa/c/585cebb1a9673e2fc083dd3c9545a6c080e171e3%5Bcommi...] https://pagure.io/freeipa/issue/8404%5B#8404]
[[matthew_davis_1]] === Matthew Davis (1)
* Add missing parameter to Suse modify_nsswitch_pam_stack https://pagure.io/freeipa/c/4f15804270590fdf0f339fc53ed63bf440361b7b%5Bcommi...] https://pagure.io/freeipa/issue/9185%5B#9185]
[[jesse_sandberg_1]] === Jesse Sandberg (1)
* Fix ipa-ccache-sweeper activation timer and clean up service file https://pagure.io/freeipa/c/358924455d87b67db6cd743f3cfe15522b4c0d91%5Bcommi...] https://pagure.io/freeipa/issue/9231%5B#9231]
[[julien_rische_1]] === Julien Rische (1)
* Generate CNAMEs for TXT+URI location krb records https://pagure.io/freeipa/c/a0652f5dc8efc4580d8039e70c0e762638d3871d%5Bcommi...] https://pagure.io/freeipa/issue/9257%5B#9257]
[[michal_polovka_3]] === Michal Polovka (3)
* ipatests: Healthcheck use subject base from IPA not REALM https://pagure.io/freeipa/c/afa94c7995f236c5eff516652f31c1a956466cf7%5Bcommi...] * ipatests: Healthcheck should ignore pki errors when CA is not configured https://pagure.io/freeipa/c/206e08d811c43ba8295816e609d4cb7148a774a3%5Bcommi...] * ipatests: Increase expect timeout for interactive mode https://pagure.io/freeipa/c/a6a6781284658e77f36c07cb7fd35b43240946a2%5Bcommi...] https://pagure.io/freeipa/issue/9183%5B#9183]
[[marcin_stanclik_1]] === Marcin Stanclik (1)
* Translated using Weblate (Polish) https://pagure.io/freeipa/c/d198a35cb885b6cc1622bf99b8546675b98c8aed%5Bcommi...]
[[mohammad_rizwan_1]] === Mohammad Rizwan (1)
* ipatests: Test newly added certificate lable https://pagure.io/freeipa/c/c0b438bc745666694f2c590859d4926178a0ca04%5Bcommi...]
[[nikola_knazekova_1]] === Nikola Knazekova (1)
* Exclude installed policy module file from RPM verification https://pagure.io/freeipa/c/c977cefa101e145b13b5c19ae5369e5ca7ef1ef8%5Bcommi...] https://pagure.io/freeipa/issue/9254%5B#9254]
[[pavel_březina_1]] === Pavel Březina (1)
* docs: add security section to idp https://pagure.io/freeipa/c/170155b648084846111bf0c65459aba94a8e980d%5Bcommi...] https://pagure.io/freeipa/issue/8803%5B#8803], https://pagure.io/freeipa/issue/8804%5B#8804], https://pagure.io/freeipa/issue/8805%5B#8805]
[[piotr_drąg_1]] === Piotr Drąg (1)
* Translated using Weblate (Polish) https://pagure.io/freeipa/c/3b0c1cafc16dc927449231a7a70b2876770ba962%5Bcommi...]
[[hela_basa_3]] === Hela Basa (3)
* Added translation using Weblate (Korean) https://pagure.io/freeipa/c/0a6246ea971282a2f1fc0b5fe3f09f7d656bbf2f%5Bcommi...] * Translated using Weblate (Sinhala) https://pagure.io/freeipa/c/696a72f7aef3df7c0f619f0d67e5fe259cc80c37%5Bcommi...] * Added translation using Weblate (Sinhala) https://pagure.io/freeipa/c/f9590de2e0bc1d2dde4f6a78c72b6a69f773bd99%5Bcommi...]
[[rob_crittenden_12]] === Rob Crittenden (12)
* Pass the curl write callback by name instead of address https://pagure.io/freeipa/c/9d184a295b1b581f1d5e189ee810c6b08bc0550b%5Bcommi...] https://pagure.io/freeipa/issue/9274%5B#9274] * Move client certificate request after krb5.conf is created https://pagure.io/freeipa/c/762d786bf7a3043fd56877949f02bccd077e2711%5Bcommi...] https://pagure.io/freeipa/issue/9246%5B#9246] * Defer creating the final krb5.conf on clients https://pagure.io/freeipa/c/69413325158a3ea06d1491acd77ee6e0955ee89a%5Bcommi...] https://pagure.io/freeipa/issue/9228%5B#9228] * Fix upper bound of password policy grace limit https://pagure.io/freeipa/c/91a02174a0a9694fd5611c071913ad4720be5ac9%5Bcommi...] https://pagure.io/freeipa/issue/9243%5B#9243] * Set default on group pwpolicy with no grace limit in upgrade https://pagure.io/freeipa/c/a4ddaaf3048c4e8d78a1807af7266ee40ab3a30b%5Bcommi...] https://pagure.io/freeipa/issue/9212%5B#9212] * Set default gracelimit on group password policies to -1 https://pagure.io/freeipa/c/497a57e7a6872fa30d1855a1d91a455bfdbf9300%5Bcommi...] https://pagure.io/freeipa/issue/9212%5B#9212] * doc: Update LDAP grace period design with default values https://pagure.io/freeipa/c/434620ee342ac4767beccec647a318bfa7743dfa%5Bcommi...] https://pagure.io/freeipa/issue/9212%5B#9212] * upgrades: Don't restart the CA on ACME and profile schema change https://pagure.io/freeipa/c/aaf57185a2701b34948105e8b54075afe048ff18%5Bcommi...] https://pagure.io/freeipa/issue/9204%5B#9204] * Disabling gracelimit does not prevent LDAP binds https://pagure.io/freeipa/c/1316cd8b2252c2543cf2ef2186956a8833037b1e%5Bcommi...] https://pagure.io/freeipa/issue/9206%5B#9206] * Warn for permissions with read/write/search/compare and no attrs https://pagure.io/freeipa/c/b31631ad69f72fb42b5091375df8021580f8139a%5Bcommi...] https://pagure.io/freeipa/issue/9188%5B#9188] * Only calculate LDAP password grace when the password is expired https://pagure.io/freeipa/c/3675bd1d7aca443832bb9bb2f521cc4d3a088aec%5Bcommi...] https://pagure.io/freeipa/issue/1539%5B#1539] * Fix test_secure_ajp_connector.py failing with Python 3.6.8 https://pagure.io/freeipa/c/de64d6724e028a1882c3a8be31c2752bebdd41fd%5Bcommi...] https://pagure.io/freeipa/issue/9190%5B#9190]
[[ricky_tigg_4]] === Ricky Tigg (4)
* Translated using Weblate (Finnish) https://pagure.io/freeipa/c/91b63fcae0a588fc174cf865b4e0135c8c0e48ec%5Bcommi...] * Translated using Weblate (Finnish) https://pagure.io/freeipa/c/e6451fe15acf406aa741d4eed296ab6eff7e9313%5Bcommi...] * Translated using Weblate (Finnish) https://pagure.io/freeipa/c/3392f31afe04e5b6b0d49d4e2f2906bc90b3643c%5Bcommi...] * Translated using Weblate (Finnish) https://pagure.io/freeipa/c/a8a2b2cf97bbf8b2b80acce08d0903b6c91c5f98%5Bcommi...]
[[sumit_bose_1]] === Sumit Bose (1)
* ipa-kdb: do not fail if certmap rule cannot be added https://pagure.io/freeipa/c/e51a0c927db4a4c9b3e1ab0c6dffca545532a2b4%5Bcommi...]
[[김인수_44]] === 김인수 (44)
* Translated using Weblate (Korean) https://pagure.io/freeipa/c/b8c39cca34b75a4ed3ed77a468836778f670027b%5Bcommi...] * Translated using Weblate (Korean) https://pagure.io/freeipa/c/2c555646dd71911d1bcf860e6c3acbcfd3050ad2%5Bcommi...] * Translated using Weblate (Korean) https://pagure.io/freeipa/c/53e4e7212b5b6fe0dceb809aaddc83158f8dfef4%5Bcommi...] * Translated using Weblate (Korean) https://pagure.io/freeipa/c/29dba19aa8862ea7b3185dcc0dba789b8e4af5b8%5Bcommi...] * Translated using Weblate (Korean) https://pagure.io/freeipa/c/425894153a17de0cdb827a83fad599343e2d3656%5Bcommi...] * Translated using Weblate (Korean) https://pagure.io/freeipa/c/7f9588f36a2b82df3fd9ef7dd286886021e0ffa6%5Bcommi...] * Translated using Weblate (Korean) https://pagure.io/freeipa/c/c07e0ec7a5acedef693b0f79fdc68529e64aa023%5Bcommi...] * Translated using Weblate (Korean) https://pagure.io/freeipa/c/e6e638aea7fda83beb47fa6c2f75772673d351c2%5Bcommi...] * Translated using Weblate (Korean) https://pagure.io/freeipa/c/994c43513950b4c82dd9e1ed38b56232f3efffaa%5Bcommi...] * Translated using Weblate (Korean) https://pagure.io/freeipa/c/fd538803cf6c098b2a3386ecc1f4b1e3a27b9a88%5Bcommi...] * Translated using Weblate (Korean) https://pagure.io/freeipa/c/aef749b632fd636e6d6b920757e13d64303da9d4%5Bcommi...] * Translated using Weblate (Korean) https://pagure.io/freeipa/c/64b2c0ebfeb7035b8c9d9e38c2a75e046e855f62%5Bcommi...] * Translated using Weblate (Korean) https://pagure.io/freeipa/c/a24adeab5ca162b3c79358128fcdee22d0bd18f2%5Bcommi...] * Translated using Weblate (Korean) https://pagure.io/freeipa/c/b70041d904926e9d33423fe1f7b48ca0c3791718%5Bcommi...] * Translated using Weblate (Korean) https://pagure.io/freeipa/c/246604ec696255674e8716610c387f0f2ef93d73%5Bcommi...] * Translated using Weblate (Korean) https://pagure.io/freeipa/c/07a1cc5424760a4ef43ffc6734c901f1cc446909%5Bcommi...] * Translated using Weblate (Korean) https://pagure.io/freeipa/c/e98e21709e2205c8c019cc7006d3f9ded94432ae%5Bcommi...] * Translated using Weblate (Korean) https://pagure.io/freeipa/c/fe60d1f6f386734b7cb052f34fb798341130052a%5Bcommi...] * Translated using Weblate (Korean) https://pagure.io/freeipa/c/5bd77e606cb6be3b3a133294027e284f5604b447%5Bcommi...] * Translated using Weblate (Korean) https://pagure.io/freeipa/c/2c0924f38694603777bcbdab804d9b3331efa239%5Bcommi...] * Translated using Weblate (Korean) https://pagure.io/freeipa/c/067cae55eced1c1c7bcdbbb0dd56a16d7127488c%5Bcommi...] * Translated using Weblate (Korean) https://pagure.io/freeipa/c/aa00e7c3cff81e79a1dfce2c1e5348af9f3a3438%5Bcommi...] * Translated using Weblate (Korean) https://pagure.io/freeipa/c/b5d6616aed77a46de2db53b3395aeaf531537df3%5Bcommi...] * Translated using Weblate (Korean) https://pagure.io/freeipa/c/7ca1befe7e8ca463052f8b24f6c9b37093dabbaa%5Bcommi...] * Translated using Weblate (Korean) https://pagure.io/freeipa/c/b2cf29ae168661a12a426bf72e98f43d769fb132%5Bcommi...] * Translated using Weblate (Korean) https://pagure.io/freeipa/c/8b3ceace34a55fadb560a758c02632efa87ec96f%5Bcommi...] * Translated using Weblate (Korean) https://pagure.io/freeipa/c/7d12b30e2c6762eda93eb66a1dab2e52770d94aa%5Bcommi...] * Translated using Weblate (Korean) https://pagure.io/freeipa/c/20006cc713c7666c373804cd7d6415f9af6a6d27%5Bcommi...] * Translated using Weblate (Korean) https://pagure.io/freeipa/c/9e2f7d041c1c72b329fdacac232451e57a4d0516%5Bcommi...] * Translated using Weblate (Korean) https://pagure.io/freeipa/c/cf9f35e3eb2c90cb3b07a2c5ed33fdd2f3bfa0b3%5Bcommi...] * Translated using Weblate (Korean) https://pagure.io/freeipa/c/d6ff8af62ee12517d438d9f3ff02f25219166da4%5Bcommi...] * Translated using Weblate (Korean) https://pagure.io/freeipa/c/1e65336b3513cf7c6579ac5714c50cb4a965fd96%5Bcommi...] * Translated using Weblate (Korean) https://pagure.io/freeipa/c/548afe9eed0696ceb4e8abdc3331b3f1f0fad6f2%5Bcommi...] * Translated using Weblate (Korean) https://pagure.io/freeipa/c/715043df4ea1d416e64ce50b0e141faf36f6c45d%5Bcommi...] * Translated using Weblate (Korean) https://pagure.io/freeipa/c/18346d99b214f6060ab7f6c83e02f2c4d56ec799%5Bcommi...] * Translated using Weblate (Korean) https://pagure.io/freeipa/c/9658dbd3c31ad22e175e613f3c51073eb196c72c%5Bcommi...] * Translated using Weblate (Korean) https://pagure.io/freeipa/c/27dba4a7c3605a1ab03c55458ad4bb47b7c4dbc7%5Bcommi...] * Translated using Weblate (Korean) https://pagure.io/freeipa/c/d5726f04b6b73d6c1de183ee5b6b7bd96d590db5%5Bcommi...] * Translated using Weblate (Korean) https://pagure.io/freeipa/c/eac046fd82d02105d3388af1f04527813546e6f7%5Bcommi...] * Translated using Weblate (Korean) https://pagure.io/freeipa/c/77feee852ed01502c0a0e48d4d4e546332827885%5Bcommi...] * Translated using Weblate (Korean) https://pagure.io/freeipa/c/00eba1f70445a5faf27db461fb762a030b0b5789%5Bcommi...] * Translated using Weblate (Korean) https://pagure.io/freeipa/c/101460521cb228f68a52a934acf97eddcbbb9928%5Bcommi...] * Translated using Weblate (Korean) https://pagure.io/freeipa/c/23fb8a4709af35db3e760159de405adad343c042%5Bcommi...] * Translated using Weblate (Korean) https://pagure.io/freeipa/c/fd81a77d78423293dee4e117b58f2f9077cb0cbf%5Bcommi...]
[[stanislav_levin_6]] === Stanislav Levin (6)
* ipapython: Support openldap 2.6 https://pagure.io/freeipa/c/7e93f46c589ba0a68c039d65ea3c0872644a0eb0%5Bcommi...] https://pagure.io/freeipa/issue/9255%5B#9255] * x509: Replace removed register_interface with subclassing https://pagure.io/freeipa/c/89fe83b03ac3b046685389ee1059ca75c73e53b0%5Bcommi...] https://pagure.io/freeipa/issue/9160%5B#9160] * ap: Constrain supported docutils https://pagure.io/freeipa/c/1ada42e3bce58a729e689377b1a41b6cfa90b508%5Bcommi...] https://pagure.io/freeipa/issue/9208%5B#9208] * ap: Rearrange overloaded jobs https://pagure.io/freeipa/c/b59baf31bc097821ff7787ecd75affb27ea2a7c3%5Bcommi...] https://pagure.io/freeipa/issue/9207%5B#9207] * ap: Disable azure's security daemon https://pagure.io/freeipa/c/98c6e96e8db3d5bdc0315094b8a7bf81d196479b%5Bcommi...] https://pagure.io/freeipa/issue/9207%5B#9207] * ap: Raise dbus timeout https://pagure.io/freeipa/c/e77b0b08d78d4d5ae7632ef23aebc577848ea507%5Bcommi...] https://pagure.io/freeipa/issue/9207%5B#9207]
[[scott_poore_1]] === Scott Poore (1)
* ipatests: Rename create_quarkus to create_keycloak https://pagure.io/freeipa/c/88ea19b9a53d9c209105af049a1df100d07e081a%5Bcommi...] https://pagure.io/freeipa/issue/9225%5B#9225]
[[sudhir_menon_2]] === Sudhir Menon (2)
* ipatests: WebUI: do not allow subid range deletion https://pagure.io/freeipa/c/58b026716c973f422b1b98e27eb9536e59919d82%5Bcommi...] https://pagure.io/freeipa/issue/9150%5B#9150] * ipatests: ipa-client-install --subid adds entry in nsswitch.conf https://pagure.io/freeipa/c/a5762621ef3ed1e699306a8d2eef634bc927a6fc%5Bcommi...] https://pagure.io/freeipa/issue/9159%5B#9159]
[[timo_aaltonen_2]] === Timo Aaltonen (2)
* ipaplatform/debian: Drop the path for ldap.so https://pagure.io/freeipa/c/56c827099708d8613e194052857e121612fbd768%5Bcommi...] * ipaplatform/debian: Use multiarch path for libsofthsm2.so https://pagure.io/freeipa/c/c39c2ee80db056296f6826746b5b7a5bf7ba7cc4%5Bcommi...]
[[thomas_woerner_1]] === Thomas Woerner (1)
* DNSResolver: Fix use of nameservers with ports https://pagure.io/freeipa/c/5e2e4664aec641886923c2bec61ce25b96edb62a%5Bcommi...] https://pagure.io/freeipa/issue/9158%5B#9158]
[[yuri_chornoivan_3]] === Yuri Chornoivan (3)
* Translated using Weblate (Ukrainian) https://pagure.io/freeipa/c/61dea74b405d251ea2778e209b03a167064b1bf6%5Bcommi...] * Translated using Weblate (Ukrainian) https://pagure.io/freeipa/c/842a6457fda382d78a11bce626b2ef0ef3749aa0%5Bcommi...] * Translated using Weblate (Ukrainian) https://pagure.io/freeipa/c/6353e45b5dd446b7acc46244d8bb10c38c39f9ce%5Bcommi...]
freeipa-users@lists.fedorahosted.org
-
Antonio Torres