From be6e50ab4ce3f3bade174324fcaba49092cb3f0f Mon Sep 17 00:00:00 2001 From: Antonio Torres Date: Tue, 9 Jun 2026 12:09:06 +0200 Subject: [PATCH] Replace Pagure links with new repo at Codeberg FreeIPA upstream repo is moving from Pagure to Codeberg. Replace all relevant links with the new repository URL. Signed-off-by: Antonio Torres --- src/Contribute.rst | 6 +- src/Downloads.rst | 4 +- src/index.rst | 4 +- src/page/Build.rst | 2 +- src/page/Contribute/Code.rst | 31 +- src/page/Contribute/Repository.rst | 5 +- src/page/Contribute/Tests.rst | 4 +- src/page/Pull_request_on_Github.rst | 4 +- src/page/Release.md | 14 +- src/page/Releases/4.10.0.rst | 98 +- src/page/Releases/4.10.1.rst | 226 +-- src/page/Releases/4.10.2.rst | 328 ++-- src/page/Releases/4.3.3.rst | 78 +- src/page/Releases/4.4.4.rst | 36 +- src/page/Releases/4.5.0.rst | 2102 +++++++++++----------- src/page/Releases/4.5.1.rst | 390 ++-- src/page/Releases/4.5.2.rst | 94 +- src/page/Releases/4.5.3.rst | 70 +- src/page/Releases/4.5.4.rst | 134 +- src/page/Releases/4.6.0.rst | 1060 +++++------ src/page/Releases/4.6.1.rst | 102 +- src/page/Releases/4.6.2.rst | 298 +-- src/page/Releases/4.6.8.rst | 298 +-- src/page/Releases/4.6.9.rst | 4 +- src/page/Releases/4.7.5.rst | 282 +-- src/page/Releases/4.8.0.rst | 278 +-- src/page/Releases/4.8.10.rst | 154 +- src/page/Releases/4.8.4.rst | 102 +- src/page/Releases/4.8.5.rst | 258 +-- src/page/Releases/4.8.6.rst | 114 +- src/page/Releases/4.8.7.rst | 380 ++-- src/page/Releases/4.8.8.rst | 4 +- src/page/Releases/4.8.9.rst | 320 ++-- src/page/Releases/4.9.0.rst | 2602 +++++++++++++-------------- src/page/Releases/4.9.0rc1.rst | 2400 ++++++++++++------------ src/page/Releases/4.9.0rc2.rst | 78 +- src/page/Releases/4.9.0rc3.rst | 18 +- src/page/Releases/4.9.1.rst | 146 +- src/page/Releases/4.9.10.rst | 146 +- src/page/Releases/4.9.11.rst | 332 ++-- src/page/Releases/4.9.12.rst | 124 +- src/page/Releases/4.9.2.rst | 120 +- src/page/Releases/4.9.3.rst | 202 +-- src/page/Releases/4.9.4.rst | 248 +-- src/page/Releases/4.9.5.rst | 24 +- src/page/Releases/4.9.6.rst | 54 +- src/page/Releases/4.9.7.rst | 156 +- src/page/Releases/4.9.8.rst | 180 +- src/page/Releases/4.9.9.rst | 236 +-- src/page/Roadmap.rst | 5 +- src/page/Troubleshooting.rst | 4 +- src/release-notes/4-10-2.rst | 328 ++-- src/release-notes/4-10-3.rst | 6 +- src/release-notes/4-11-0-beta.rst | 334 ++-- src/release-notes/4-11-0.rst | 38 +- src/release-notes/4-11-1.rst | 6 +- src/release-notes/4-11-2.rst | 6 +- src/release-notes/4-12-0.rst | 490 ++--- src/release-notes/4-12-1.rst | 6 +- src/release-notes/4-12-2.rst | 118 +- src/release-notes/4-12-3.rst | 6 +- src/release-notes/4-12-4.rst | 6 +- src/release-notes/4-12-5.rst | 8 +- src/release-notes/4-13-0.rst | 800 ++++---- src/release-notes/4-13-1.rst | 72 +- src/release-notes/4-6-10.rst | 6 +- src/release-notes/4-9-12.rst | 124 +- src/release-notes/4-9-13.rst | 98 +- src/release-notes/4-9-14.rst | 8 +- 69 files changed, 8401 insertions(+), 8418 deletions(-) diff --git a/src/Contribute.rst b/src/Contribute.rst index bd47f8e68..d7308c72d 100644 --- a/src/Contribute.rst +++ b/src/Contribute.rst @@ -21,7 +21,7 @@ Security Bugs and Flaws Tracking ^^^^^^^^ -- We use `Pagure `__ for the upstream +- We use `Codeberg `__ for the upstream development, so all RFEs or bug reports should go primarily there. - Bugs against released Fedora versions can be logged using the following `Bugzilla @@ -76,8 +76,8 @@ free to ask! How To Start ~~~~~~~~~~~~ -The FreeIPA project uses the `Pagure ticketing -system `__ to keep track of work being done. +The FreeIPA project uses the `Codeberg ticketing +system `__ to keep track of work being done. If you want to contribute check out if there are interesting tickets in the pipeline (or file your own). diff --git a/src/Downloads.rst b/src/Downloads.rst index d0ba72d07..1f115eb4b 100644 --- a/src/Downloads.rst +++ b/src/Downloads.rst @@ -46,9 +46,9 @@ Sources ~~~~~~~ If you want to `build `__ FreeIPA -yourself, you can check the sources stored on the project Pagure: +yourself, you can check the sources stored on the project Codeberg: -- `Latest Released Sources `__ +- `Latest Released Sources `__ - `Steps on verifying the release `__ diff --git a/src/index.rst b/src/index.rst index 1e92a3fee..58e61729e 100644 --- a/src/index.rst +++ b/src/index.rst @@ -34,9 +34,9 @@ Main features (Fedora), `389 Directory Server `__, `MIT Kerberos `__, NTP, - `DNS `__, `Dogtag certificate + `DNS `__, `Dogtag certificate system `__, - `SSSD `__ and others. + `SSSD `__ and others. - Built on top of well known Open Source components and standard protocols - Strong focus on ease of management and automation of installation and diff --git a/src/page/Build.rst b/src/page/Build.rst index c863432a4..e5ba8510f 100644 --- a/src/page/Build.rst +++ b/src/page/Build.rst @@ -44,7 +44,7 @@ In order to get more familiar with git submodule concepts, you can read You can clone the FreeIPA repository and its submodules using the following command: -``$ git clone --recurse-submodules https://pagure.io/freeipa.git`` +``$ git clone --recurse-submodules https://codeberg.org/freeipa/freeipa.git`` Next, we will install all packages needed to build FreeIPA as they do not have to be installed on your system. You can install them easily by diff --git a/src/page/Contribute/Code.rst b/src/page/Contribute/Code.rst index 5a277e8d7..a617906de 100644 --- a/src/page/Contribute/Code.rst +++ b/src/page/Contribute/Code.rst @@ -4,7 +4,7 @@ Code This article should serve both as a reference article for already seasoned FreeIPA developers, but also as a guide for new people who would like to contribute. You can fix an open bug described in chosen -`Pagure ticket `__ or implement a +`Codeberg ticket `__ or implement a whole new feature! The steps below should help get you started. If you need to learn more about FreeIPA itself, visit the `main @@ -27,8 +27,8 @@ Find something to start with If you want to start with something (relatively) easy please take a look at `list of "easyfix" -tickets `__ -in our Pagure. It is always better to start with something simple :-) +tickets `__ +in our Codeberg. It is always better to start with something simple :-) Do not hesitate to `contact us `__ with any question or idea! @@ -84,12 +84,12 @@ in git. Retrieve it and its submodules with: :: - git clone --recurse-submodules https://pagure.io/freeipa.git + git clone --recurse-submodules https://codeberg.org/freeipa/freeipa.git The code can also be browsed online -`here `__ +`here `__ -Note: to avoid pushing by mistake to pagure.io, you can replace the (push) url +Note: to avoid pushing by mistake to Codeberg, you can replace the (push) url with the following command: :: @@ -136,15 +136,15 @@ Then, you just need to run: -Update Pagure ticket +Update Codeberg ticket ---------------------------------------------------------------------------------------------- -We use Pagure for work coordination. Please be so kind and assign the +We use Codeberg for work coordination. Please be so kind and assign the ticket you are working on to yourself. It is just a few clicks and it prevents people from working on the same thing at the same time without knowing about each other. -- `Find a ticket `__ related to your +- `Find a ticket `__ related to your work. - Maybe the ticket does not exist. If you consider the code change @@ -155,10 +155,7 @@ knowing about each other. different approaches etc. - In the particular ticket, assign the ticket to yourself by clicking - on the "Take" button (note: you must be logged in - `pagure.io `__, - see `Login to pagure or create your - account `__) + on the "Assign to me" option. @@ -265,9 +262,9 @@ present in the source tree (.git-commit-template): Explanation - Fixes: https://pagure.io/freeipa/issue/XXXX + Fixes: https://codeberg.org/freeipa/freeipa/issues//XXXX or - Related: https://pagure.io/freeipa/issue/XXXX + Related: https://codeberg.org/freeipa/freeipa/issues/XXXX Signed-off-by: Full Name @@ -286,7 +283,7 @@ present in the source tree (.git-commit-template): way, but does not resolve it/them. - *Signed-off-by:* contains your email, will be credited in the Contributors and Release Notes -When a pull request is created, please update Pagure ticket with link to +When a pull request is created, please update Codeberg ticket with link to the pull request (in the ticket, click on "Edit Metadata" and update the field "on_review" with the link to your PR, for instance https://github.com/freeipa/freeipa/pull/1234). @@ -355,7 +352,7 @@ to keep track of the process. When the reviewer pass a feedback, patch should be then updated to clear all concerns and thus be ready to be merged. See `Pull request on Github `__ for advice how to update a pull -request. No changes in Pagure are needed when a reviewer rejects the +request. No changes in Codeberg are needed when a reviewer rejects the patch or submitter sends a new version of the patch. diff --git a/src/page/Contribute/Repository.rst b/src/page/Contribute/Repository.rst index da58dd309..05c0d5855 100644 --- a/src/page/Contribute/Repository.rst +++ b/src/page/Contribute/Repository.rst @@ -14,8 +14,7 @@ FreeIPA project has 1 active repository: - **Main code repository**: FreeIPA project code and tests - Link: - ```https://pagure.io/freeipa.git`` `__ - - `Code browser `__ + ```https://codeberg.org/freeipa/freeipa.git`` `__ - `Contribution howto `__ @@ -33,7 +32,7 @@ Write access ============ Write access is allowed only to a limited list of upstream core -developers (`member list `__) who are +developers (`member list `__) who are contributing to the project success, keep the code base clean and functional. The list is kept short to make sure that all committers know what should be pushed, when, to which branch(es) and with appropriate diff --git a/src/page/Contribute/Tests.rst b/src/page/Contribute/Tests.rst index 259ec1ae5..9d426260c 100644 --- a/src/page/Contribute/Tests.rst +++ b/src/page/Contribute/Tests.rst @@ -141,14 +141,14 @@ Committing (doesn’t apply for the temp commit) #. Follow the commit message guidelines listed in `Commit message requirements `__ #. Signoff and sign your commit -#. All commits must include Pagure link +#. All commits must include Codeberg ticket link #. Include separate temp commit (see below) :: (lowercase) ipatests : short summary within 80 chars (no dot) This is the particular reason for a change and or addition of a new test. Be as specific as possible. Use imperative language (fix bug, not fixed bug nor fixes bug) and present time. - Fixes (or Related): Pagure ticket link + Fixes (or Related): Codeberg ticket link Signed off by: (use –signoff and -S when committing) Note: “Fixes” is used when providing a fix for the raised issue. diff --git a/src/page/Pull_request_on_Github.rst b/src/page/Pull_request_on_Github.rst index 4883246ea..6373c8575 100644 --- a/src/page/Pull_request_on_Github.rst +++ b/src/page/Pull_request_on_Github.rst @@ -10,7 +10,7 @@ repository (cloned from fedorahosted) :: - $ git clone --recurse-submodules https://pagure.io/freeipa.git + $ git clone --recurse-submodules https://codeberg.org/freeipa/freeipa.git $ cd freeipa/ $ git remote add myfork git@github.com:/freeipa.git @@ -61,4 +61,4 @@ enough, but it is also possible to develop Modern WebUI separately using: The other processes are similar. Do note, that all of the development for Modern WebUI is done on -`GitHub `__, not on Pagure. \ No newline at end of file +`GitHub `__, not on Codeberg. \ No newline at end of file diff --git a/src/page/Release.md b/src/page/Release.md index e30b9d5f9..92f0db0e8 100644 --- a/src/page/Release.md +++ b/src/page/Release.md @@ -207,7 +207,7 @@ Building the sources If doing a pre release pull a fresh tree to do the builds into a separate directory: ``` -$ git clone --recurse-submodules [https://pagure.io/freeipa.git](https://pagure.io/freeipa.git) freeipa-x-y-z +$ git clone --recurse-submodules [https://codeberg.org/freeipa/freeipa.git](https://codeberg.org/freeipa/freeipa.git) freeipa-x-y-z $ cd freeipa-x-y-z ``` @@ -263,7 +263,7 @@ $ gpg2 --default-key --armor --detach-sign freeipa-x.y.z.tar. $ gpg2 --verify freeipa-x.y.z.tar.gz.asc ``` -Upload tarball and signature to pagure.io: [https://pagure.io/freeipa/releases](https://pagure.io/freeipa/releases) +Upload tarball and signature to Codeberg: [https://codeberg.org/freeipa/freeipa/releases](https://codeberg.org/freeipa/freeipa/releases) If you signing key is not in the [Verify Release Signature](/web/20221001164305/https://freeipa.org/page/Verify_Release_Signature "Verify Release Signature") guide, append it to the list and gpg verify command. @@ -383,13 +383,3 @@ When doing a major release, consider following extra steps: * [Roadmap](/web/20221001164305/https://freeipa.org/page/Roadmap "Roadmap") - consider updating information about planned or new releases * [Documentation](/web/20221001164305/https://freeipa.org/page/Documentation "Documentation") - update links and version numbers * [Build](/web/20221001164305/https://freeipa.org/page/Build "Build") - update COPR repositories if new ones are introduced or old abandoned - -Tickets administravia ---------------------- - -FixMe: is this being done for 4.9.x? - -* [Create a milestone](https://fedorahosted.org/freeipa/milestone?action=new) for next FreeIPA version in form FreeIPA x.y.z. -* Create a new milestone in [Pagure project settings](https://pagure.io/freeipa/settings) (if doesn't exist). -* Move all [opened tickets](https://pagure.io/freeipa/roadmap?status=Open&milestone=FreeIPA+4.5.1&all_stones=True&no_stones=) from the released version milestone to the new milestone. (Following script can be used, use [move-milestone.py --help](https://raw.githubusercontent.com/freeipa/freeipa-tools/master/release/move-milestone.py) to see usage) -* Close the old milestone in the [Roadmap](https://fedorahosted.org/freeipa/roadmap). \ No newline at end of file diff --git a/src/page/Releases/4.10.0.rst b/src/page/Releases/4.10.0.rst index 2c8c46072..a4c4ca282 100644 --- a/src/page/Releases/4.10.0.rst +++ b/src/page/Releases/4.10.0.rst @@ -77,29 +77,29 @@ Rob Crittenden (9) ---------------------------------------------------------------------------------------------- - Fix test_secure_ajp_connector.py failing with Python 3.6.8 - `commit `__ + `commit `__ - Add tests for Random Serial Number v3 support - `commit `__ + `commit `__ `#2016 `__ - Add support for Random Serial Numbers v3 - `commit `__ + `commit `__ `#2016 `__ - Add a new parameter type, SerialNumber, as a subclass of Str - `commit `__ + `commit `__ `#2016 `__ - doc/designs: add Random Serial Numbers v3 support - `commit `__ + `commit `__ `#2016 `__ - Design for IPA-to-IPA migration - `commit `__ + `commit `__ - Re-work the quiet option in ipa-join to not suppress errors - `commit `__ + `commit `__ `#9105 `__ - Improve sudooption docs, make the option multi-value - `commit `__ + `commit `__ `#2278 `__ - Design doc to allow LDAP bind using the RADIUS auth type - `commit `__ + `commit `__ @@ -107,7 +107,7 @@ Matthew Davis (1) ---------------------------------------------------------------------------------------------- - Add missing parameter to Suse modify_nsswitch_pam_stack - `commit `__ + `commit `__ @@ -115,11 +115,11 @@ Anuja More (3) ---------------------------------------------------------------------------------------------- - ipatests: Fix install_master for test_idp.py - `commit `__ + `commit `__ - Add end to end integration tests for external IdP - `commit `__ + `commit `__ - ipatests: update prci definitions for test_idp.py - `commit `__ + `commit `__ @@ -127,9 +127,9 @@ Timo Aaltonen (2) ---------------------------------------------------------------------------------------------- - ipaplatform/debian: Drop the path for ldap.so - `commit `__ + `commit `__ - ipaplatform/debian: Use multiarch path for libsofthsm2.so - `commit `__ + `commit `__ @@ -137,16 +137,16 @@ Michal Polovka (5) ---------------------------------------------------------------------------------------------- - ipatests: Healthcheck use subject base from IPA not REALM - `commit `__ + `commit `__ - ipatests: Increase expect timeout for interactive mode - `commit `__ + `commit `__ - ipatests: Healthcheck should ignore pki errors when CA is not - configured `commit `__ + configured `commit `__ - test_webui: test_hostgroup: Wait for modal dialog to appear - `commit `__ + `commit `__ `#8684 `__ - WebUI: Test if links are opened in new tab correctly - `commit `__ + `commit `__ @@ -154,24 +154,24 @@ Florence Blanc-Renaud (9) ---------------------------------------------------------------------------------------------- - xmlrpc tests: updated expected output for preserved user - `commit `__ + `commit `__ - Preserve user: fix the confusing summary - `commit `__ + `commit `__ - ipatests: update packages in rawhide test test_installation_client.py - `commit `__ + `commit `__ `#9035 `__ - ipatests: revert wrong commit on gating definition - `commit `__ + `commit `__ - Design: Integrate SID configuration into base IPA installers - `commit `__ + `commit `__ - Doc: add a design template - `commit `__ + `commit `__ - ipatests: add test_acme.py in nightly previous - `commit `__ + `commit `__ - ipatests: fix incomplete nightly def in nightly_previous - `commit `__ + `commit `__ - ipatests: fix discrepancies in nightly defs - `commit `__ + `commit `__ @@ -179,21 +179,21 @@ Armando Neto (8) ---------------------------------------------------------------------------------------------- - ipatests: update prci template - `commit `__ + `commit `__ - ipatests: update definitions for custom COPR nightlies - `commit `__ + `commit `__ - ipatests: bump PR-CI rawhide template - `commit `__ + `commit `__ - ipatests: bump rawhide template for PR-CI - `commit `__ + `commit `__ - ipatests: Bump PR-CI rawhide template - `commit `__ + `commit `__ - ipatests: Bump PR-CI Rawhide template - `commit `__ + `commit `__ - ipatests: Update gating to Fedora 33 - `commit `__ + `commit `__ - ipatests: update PR-CI templates to Fedora 33 - `commit `__ + `commit `__ @@ -201,11 +201,11 @@ Alexander Bokovoy (3) ---------------------------------------------------------------------------------------------- - Fix use of comparison functions to avoid GCC bug 95189 - `commit `__ + `commit `__ - doc/designs: fix formatting in LDAPI autobind design - `commit `__ + `commit `__ - Contributors: add new contributors to the list - `commit `__ + `commit `__ @@ -213,7 +213,7 @@ Mohammad Rizwan (1) ---------------------------------------------------------------------------------------------- - ipatest: Test ipa-cert-fix fails when startup directive is missing - from CS.cfg `commit `__ + from CS.cfg `commit `__ @@ -221,10 +221,10 @@ Christian Heimes (2) ---------------------------------------------------------------------------------------------- - Add design for LDAPI autobind - `commit `__ + `commit `__ `#8544 `__ - LDAP autobind authenticateAsDN for BIND named - `commit `__ + `commit `__ `#8544 `__ @@ -233,7 +233,7 @@ François Cami (1) ---------------------------------------------------------------------------------------------- - ipatests: fix nightly_latest_testing_selinux template - `commit `__ + `commit `__ @@ -241,10 +241,10 @@ Antonio Torres (2) ---------------------------------------------------------------------------------------------- - ipatests: add test for ipa-cacert-manage prune - `commit `__ + `commit `__ `#7404 `__ - ipa-cacert-manage: add prune option - `commit `__ + `commit `__ `#7404 `__ @@ -253,8 +253,8 @@ Peter Keresztes Schmidt (3) ---------------------------------------------------------------------------------------------- - configure: Do not set -Wno-strict-aliasing -Wno-sign-compare - `commit `__ + `commit `__ - build: Unify compiler warning flags used - `commit `__ + `commit `__ - configure: Fix source tree detection to enable more warnings - `commit `__ + `commit `__ diff --git a/src/page/Releases/4.10.1.rst b/src/page/Releases/4.10.1.rst index 35199e723..8441b8f0a 100644 --- a/src/page/Releases/4.10.1.rst +++ b/src/page/Releases/4.10.1.rst @@ -232,7 +232,7 @@ Armando Neto (1) ---------------------------------------------------------------------------------------------- - webui: Do not allow empty pagination size - `commit `__ + `commit `__ `#9192 `__ @@ -241,32 +241,32 @@ Alexander Bokovoy (10) ---------------------------------------------------------------------------------------------- - ipa-kdb: fix comment to make sure we talk about krb5 1.20 or later - `commit `__ + `commit `__ - ipa-kdb: fix PAC requester check - `commit `__ + `commit `__ `#9083 `__ - ipa-kdb: handle empty S4U proxy in allowed_to_delegate - `commit `__ + `commit `__ `#9083 `__ - ipa-kdb: handle cross-realm TGT entries when generating PAC - `commit `__ + `commit `__ `#9083 `__ - ipa-kdb: add krb5 1.20 support - `commit `__ + `commit `__ `#9083 `__ - ipa-kdb: refactor MS-PAC processing to prepare for krb5 1.20 - `commit `__ + `commit `__ `#9083 `__ - ipaclient: do not set TLS CA options in ldap.conf anymore - `commit `__ + `commit `__ `#9258 `__ - Remove empty translation for 'si' which breaks linter - `commit `__ + `commit `__ - fix canonicalization issue in Web UI - `commit `__ + `commit `__ `#9226 `__ - ipa-otpd: initialize local pointers and handle gcc 10 - `commit `__ + `commit `__ `#9230 `__ @@ -275,7 +275,7 @@ Anuja More (1) ---------------------------------------------------------------------------------------------- - ipatests : Test query to AD specific attributes is successful. - `commit `__ + `commit `__ `#9127 `__ @@ -284,7 +284,7 @@ Andika Triwidada (1) ---------------------------------------------------------------------------------------------- - Translated using Weblate (Indonesian) - `commit `__ + `commit `__ @@ -292,7 +292,7 @@ Antonio Torres (1) ---------------------------------------------------------------------------------------------- - Back to git snapshots - `commit `__ + `commit `__ @@ -301,12 +301,12 @@ Alexey Tikhonov (3) - extdom: avoid sss_nss_getorigby*() calls when get*_r_wrapper() returns object from a wrong domain (performance optimization) - `commit `__ + `commit `__ - extdom: make sure result doesn't miss domain part - `commit `__ + `commit `__ `#9245 `__ - extdom: internal functions should be static - `commit `__ + `commit `__ @@ -314,25 +314,25 @@ Carla Martinez (7) ---------------------------------------------------------------------------------------------- - Update API and VERSION - `commit `__ + `commit `__ `#9249 `__ - webui: Set 'SOA serial' field as read-only - `commit `__ + `commit `__ `#9249 `__ - ipatest: Remove warning message for 'idnssoaserial' - `commit `__ + `commit `__ `#9249 `__ - Set 'idnssoaserial' to deprecated - `commit `__ + `commit `__ `#9249 `__ - webui: Show 'Sudo order' column - `commit `__ + `commit `__ `#9237 `__ - Set pkeys in test_selinuxusermap.py::test_misc::delete_record - `commit `__ + `commit `__ `#9161 `__ - webui: Allow grace login limit - `commit `__ + `commit `__ `#9211 `__ @@ -341,33 +341,33 @@ Jan Kuparinen (14) ---------------------------------------------------------------------------------------------- - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ @@ -375,9 +375,9 @@ David Pascual (2) ---------------------------------------------------------------------------------------------- - ipatest: fix prci checker target masked return code & add pylint - `commit `__ + `commit `__ - ipatests: Checker script for prci definitions - `commit `__ + `commit `__ @@ -385,7 +385,7 @@ Erik (1) ---------------------------------------------------------------------------------------------- - ipatests: healthcheck: test if system is FIPS enabled - `commit `__ + `commit `__ `#8951 `__ @@ -394,7 +394,7 @@ Endi Sukma Dewata (1) ---------------------------------------------------------------------------------------------- - Remove pki_restart_configured_instance - `commit `__ + `commit `__ @@ -402,46 +402,46 @@ Florence Blanc-Renaud (15) ---------------------------------------------------------------------------------------------- - Spec file: bump the selinux-policy version - `commit `__ + `commit `__ `#9198 `__ - webui tests: fix test_subid suite - `commit `__ + `commit `__ `#9214 `__ - ipatests: mark xfail tests using dnssec - `commit `__ + `commit `__ `#9216 `__ - ipatests: mark xfail tests using sssctl domain-status - `commit `__ + `commit `__ `#9234 `__ - Tests: test on f37 and f36 - `commit `__ + `commit `__ - ipa man page: format the EXAMPLES section - `commit `__ + `commit `__ `#9252 `__ - ipatests: add negative test for otptoken-sync - `commit `__ + `commit `__ `#9248 `__ - ipa otptoken-sync: return error when sync fails - `commit `__ + `commit `__ `#9248 `__ - ipa-cacert-manage prune: remove all expired certs - `commit `__ + `commit `__ `#9244 `__ - gitignore: add install/oddjob/org.freeipa.server.config-enable-sid - `commit `__ + `commit `__ - ipatests: Fix expected object classes - `commit `__ + `commit `__ `#9062 `__ - check_repl_update: in progress is a boolean - `commit `__ + `commit `__ `#9218 `__ - azure tests: disable TestInstallDNSSECFirst - `commit `__ + `commit `__ `#9216 `__ - Nightly tests: fix template for nightly_ipa-4-10_latest.yaml - `commit `__ + `commit `__ - ipatests: add nightly definitions for ipa-4-10 branch - `commit `__ + `commit `__ @@ -449,10 +449,10 @@ Fraser Tweedale (2) ---------------------------------------------------------------------------------------------- - install: suggest --skip-mem-check when mem check fails - `commit `__ + `commit `__ `#8404 `__ - man: add --skip-mem-check to man pages - `commit `__ + `commit `__ `#8404 `__ @@ -461,7 +461,7 @@ Jesse Sandberg (1) ---------------------------------------------------------------------------------------------- - Fix ipa-ccache-sweeper activation timer and clean up service file - `commit `__ + `commit `__ `#9231 `__ @@ -470,7 +470,7 @@ Nikola Knazekova (1) ---------------------------------------------------------------------------------------------- - Exclude installed policy module file from RPM verification - `commit `__ + `commit `__ `#9254 `__ @@ -479,15 +479,15 @@ Weblate (5) ---------------------------------------------------------------------------------------------- - Update translation files - `commit `__ + `commit `__ - Update translation files - `commit `__ + `commit `__ - Update translation files - `commit `__ + `commit `__ - Update translation files - `commit `__ + `commit `__ - Update translation files - `commit `__ + `commit `__ @@ -495,9 +495,9 @@ Piotr Drąg (2) ---------------------------------------------------------------------------------------------- - Translated using Weblate (Polish) - `commit `__ + `commit `__ - Translated using Weblate (Polish) - `commit `__ + `commit `__ @@ -505,34 +505,34 @@ Rob Crittenden (10) ---------------------------------------------------------------------------------------------- - Move client certificate request after krb5.conf is created - `commit `__ + `commit `__ `#9246 `__ - Defer creating the final krb5.conf on clients - `commit `__ + `commit `__ `#9228 `__ - Fix upper bound of password policy grace limit - `commit `__ + `commit `__ `#9243 `__ - Set default on group pwpolicy with no grace limit in upgrade - `commit `__ + `commit `__ `#9212 `__ - Set default gracelimit on group password policies to -1 - `commit `__ + `commit `__ `#9212 `__ - doc: Update LDAP grace period design with default values - `commit `__ + `commit `__ `#9212 `__ - upgrades: Don't restart the CA on ACME and profile schema change - `commit `__ + `commit `__ `#9204 `__ - Disabling gracelimit does not prevent LDAP binds - `commit `__ + `commit `__ `#9206 `__ - Warn for permissions with read/write/search/compare and no attrs - `commit `__ + `commit `__ `#9188 `__ - Only calculate LDAP password grace when the password is expired - `commit `__ + `commit `__ `#1539 `__ @@ -541,11 +541,11 @@ Ricky Tigg (3) ---------------------------------------------------------------------------------------------- - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ @@ -553,7 +553,7 @@ Sumit Bose (1) ---------------------------------------------------------------------------------------------- - ipa-kdb: do not fail if certmap rule cannot be added - `commit `__ + `commit `__ @@ -561,13 +561,13 @@ Sumit Bose (1) ---------------------------------------------------------------------------------------------- - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Added translation using Weblate (Korean) - `commit `__ + `commit `__ @@ -575,22 +575,22 @@ Stanislav Levin (6) ---------------------------------------------------------------------------------------------- - ipapython: Support openldap 2.6 - `commit `__ + `commit `__ `#9255 `__ - x509: Replace removed register_interface with subclassing - `commit `__ + `commit `__ `#9160 `__ - ap: Constrain supported docutils - `commit `__ + `commit `__ `#9208 `__ - ap: Rearrange overloaded jobs - `commit `__ + `commit `__ `#9207 `__ - ap: Disable azure's security daemon - `commit `__ + `commit `__ `#9207 `__ - ap: Raise dbus timeout - `commit `__ + `commit `__ `#9207 `__ @@ -599,15 +599,15 @@ Scott Poore (4) ---------------------------------------------------------------------------------------------- - ipatests: add keycloak user login to ipa test - `commit `__ + `commit `__ `#9250 `__ - ipatests: add prci definitions for test_sso jobs - `commit `__ + `commit `__ - ipatests: add Keycloak Bridge test - `commit `__ + `commit `__ `#9227 `__ - ipatests: Rename create_quarkus to create_keycloak - `commit `__ + `commit `__ `#9225 `__ @@ -617,16 +617,16 @@ Sumedh Sidhaye (3) - With the commit #99a74d7, 389-ds changed the message returned in ipa-healthcheck. - `commit `__ + `commit `__ `#9238 `__ - Additional tests for RSN v3 - `commit `__ + `commit `__ `#2016 `__ - Added a check while removing 'cert_dir'. The teardown method is called even if all the tests are skipped since the required PKI version is not present. The teardown is trying to remove a non-existent directory. - `commit `__ + `commit `__ `#9179 `__ @@ -635,10 +635,10 @@ Sudhir Menon (2) ---------------------------------------------------------------------------------------------- - ipatests: ipa-client-install --subid adds entry in nsswitch.conf - `commit `__ + `commit `__ `#9159 `__ - ipatests: WebUI: do not allow subid range deletion - `commit `__ + `commit `__ `#9150 `__ @@ -647,13 +647,13 @@ Temuri Doghonadze (4) ---------------------------------------------------------------------------------------------- - Translated using Weblate (Georgian) - `commit `__ + `commit `__ - Translated using Weblate (Georgian) - `commit `__ + `commit `__ - Translated using Weblate (Georgian) - `commit `__ + `commit `__ - Added translation using Weblate (Georgian) - `commit `__ + `commit `__ @@ -661,7 +661,7 @@ Thomas Woerner (1) ---------------------------------------------------------------------------------------------- - DNSResolver: Fix use of nameservers with ports - `commit `__ + `commit `__ `#9158 `__ @@ -670,7 +670,7 @@ Viacheslav Sychov (1) ---------------------------------------------------------------------------------------------- - fix: Handle /proc/1/sched missing error - `commit `__ + `commit `__ @@ -678,14 +678,14 @@ Yuri Chornoivan (6) ---------------------------------------------------------------------------------------------- - Translated using Weblate (Ukrainian) - `commit `__ + `commit `__ - Translated using Weblate (Ukrainian) - `commit `__ + `commit `__ - Translated using Weblate (Ukrainian) - `commit `__ + `commit `__ - Translated using Weblate (Ukrainian) - `commit `__ + `commit `__ - Translated using Weblate (Ukrainian) - `commit `__ + `commit `__ - Translated using Weblate (Ukrainian) - `commit `__ + `commit `__ diff --git a/src/page/Releases/4.10.2.rst b/src/page/Releases/4.10.2.rst index 0718556b6..39ef07855 100644 --- a/src/page/Releases/4.10.2.rst +++ b/src/page/Releases/4.10.2.rst @@ -55,11 +55,11 @@ Highlights in 4.10.2 1.21 or later. On older MIT Kerberos versions, the lack of the new ticket signature will be tolerated to allow gradual upgrades. More details are available at - https://pagure.io/freeipa/c/3f1b373cb2028416e40a26e3dd99b0f4c82525c7. + https://codeberg.org/freeipa/freeipa/commit/3f1b373cb2028416e40a26e3dd99b0f4c82525c7. In addition, a 'full PAC' signature type was added to MIT Kerberos 1.21. FreeIPA will support the new signature when running against newer MIT Kerberos version. For older versions, please see - https://pagure.io/freeipa/c/9cd5f49c74f28dbe070b072b394747a039cef463. + https://codeberg.org/freeipa/freeipa/commit/9cd5f49c74f28dbe070b072b394747a039cef463. This new PAC signature will be required by default by Active Directory in July 2023 for S4U requests, and opt-out will no longer be possible after October 2023. We recommend upgrading to @@ -297,73 +297,73 @@ Alexander Bokovoy (23) - ipa-kdb: be compatible with krb5 1.19 when checking for server referral - `commit `__ + `commit `__ `#9164 `__ - ipalib/x509.py: Add signature_algorithm_parameters - `commit `__ + `commit `__ - ipa-kdb: skip verification of PAC full checksum - `commit `__ + `commit `__ `#9371 `__ - ipa-kdb: process out of realm server lookup during S4U - `commit `__ + `commit `__ `#9164 `__ - ipa-kdb: postpone ticket checksum configuration - `commit `__ + `commit `__ - ipa-kdb: protect against context corruption - `commit `__ + `commit `__ - ipa-kdb: hint KDC to use aes256-sha1 for forest trust TGT - `commit `__ + `commit `__ `#9124 `__ - Change doc theme to 'book' - `commit `__ + `commit `__ - doc/designs/rbcd.md: document use of S-1-18-\* SIDs - `commit `__ + `commit `__ `#9354 `__ - doc/designs/rbcd.md: add usage examples - `commit `__ + `commit `__ `#9354 `__ - RBCD: add basic test for RBCD handling - `commit `__ + `commit `__ `#9354 `__ - kdb: implement RBCD handling in KDB driver - `commit `__ + `commit `__ `#9354 `__ - IPA API changes to support RBCD - `commit `__ + `commit `__ `#9354 `__ - doc: add design document for Kerberos constrained delegation - `commit `__ + `commit `__ `#9354 `__ - ipa-kdb: search S4U2Proxy ACLs in cn=s4u2proxy,cn=etc,$BASEDN subtree only - `commit `__ + `commit `__ `#5444 `__ - test_xmlrpc: adopt to automember plugin message changes in 389-ds - `commit `__ + `commit `__ - Ignore empty modification error in case cifs/.. principal already added - `commit `__ + `commit `__ `#9354 `__ - ipalib/x509: Implement abstract method Certificate.verify_directly_issued_by - `commit `__ + `commit `__ `#9355 `__ - Fix tox in Azure CI - `commit `__ + `commit `__ `#9347 `__ - Use system-wide chromium for webui tests - `commit `__ + `commit `__ `#9347 `__ - Don't fail if optional RPM macros file is missing - `commit `__ + `commit `__ `#9347 `__ - ipa-kdb: PAC consistency checker needs to handle child domains as well - `commit `__ + `commit `__ `#9316 `__ - updates: fix memberManager ACI to allow managers from a specified group - `commit `__ + `commit `__ `#9286 `__ @@ -372,16 +372,16 @@ Anuja More (4) ---------------------------------------------------------------------------------------------- - ipatests: Test that non admin user can search hbac rule. - `commit `__ + `commit `__ `#5130 `__ - ipatests: Test ipa-advise is not failing with error. - `commit `__ + `commit `__ `#6044 `__ - PRCI: update test_trust.py for nightly pipelines. - `commit `__ + `commit `__ `#9326 `__ - Add test for SSH with GSSAPI auth. - `commit `__ + `commit `__ `#9316 `__ @@ -390,27 +390,27 @@ Antonio Torres (10) ---------------------------------------------------------------------------------------------- - Update list of contributors - `commit `__ + `commit `__ - Update translations to FreeIPA ipa-4-10 state - `commit `__ + `commit `__ - Extend API documentation - `commit `__ + `commit `__ - doc: allow notes on Param API Reference pages - `commit `__ + `commit `__ - ipaserver: deepcopy objectclasses list from IPA config - `commit `__ + `commit `__ `#9349 `__ - API doc: add usage guides for groups, HBAC and sudo rules - `commit `__ + `commit `__ - API doc: add note about ipa show-mappings to usage guide - `commit `__ + `commit `__ - API doc: validate generated reference - `commit `__ + `commit `__ `#9287 `__ - API doc: add basic user management guide - `commit `__ + `commit `__ - Back to git snapshots - `commit `__ + `commit `__ @@ -418,7 +418,7 @@ Carla Martinez (1) ---------------------------------------------------------------------------------------------- - Update 'Auth indicators' doc string - `commit `__ + `commit `__ `#9338 `__ @@ -427,13 +427,13 @@ Christian Heimes (3) ---------------------------------------------------------------------------------------------- - Speed up installer by restarting DS after DNA plugin - `commit `__ + `commit `__ `#9358 `__ - Don't block when kinit_pkinit() fails - `commit `__ + `commit `__ `#9333 `__ - ipa-certupdate: Update client certs before KDC/HTTPd restart - `commit `__ + `commit `__ `#9285 `__ @@ -442,7 +442,7 @@ Chris Kelley (1) ---------------------------------------------------------------------------------------------- - Check that CADogtagCertsConfigCheck can handle cert renewal - `commit `__ + `commit `__ @@ -450,9 +450,9 @@ David Pascual (2) ---------------------------------------------------------------------------------------------- - doc: Use case examples for PR-CI checker tool - `commit `__ + `commit `__ - ipatests: fix (prci_checker) duplicated check & error return code - `commit `__ + `commit `__ @@ -461,7 +461,7 @@ Erik Belko (1) - ipatests: Test MemberManager ACI to allow managers from a specified group after upgrade scenario - `commit `__ + `commit `__ `#9286 `__ @@ -471,7 +471,7 @@ Filip Dvorak (1) - ipa tests: Add LANG before kinit command to fix issue with locale settings - `commit `__ + `commit `__ @@ -479,159 +479,159 @@ Florence Blanc-Renaud (55) ---------------------------------------------------------------------------------------------- - ipatest: remove xfail from test_smb - `commit `__ + `commit `__ `#9124 `__ - ACME tests: fix issue_and_expire_acme_cert method - `commit `__ + `commit `__ `#9383 `__ - user or group name: explain the supported format - `commit `__ + `commit `__ - azure tests: move to fedora 38 - `commit `__ + `commit `__ - Tests: test on f37 and f38 - `commit `__ + `commit `__ - idview: improve performance of idview-show - `commit `__ + `commit `__ `#9372 `__ - spec file: force nodejs < 20 on fedora < 39 - `commit `__ + `commit `__ `#9374 `__ - Nightly test: add +15min for test_ipahealthcheck - `commit `__ + `commit `__ `#9362 `__ - cert_find: fix call with --all - `commit `__ + `commit `__ `#9331 `__ - ipatests: mark known failures for autoprivategroup - `commit `__ + `commit `__ `#9295 `__ - ipatests: fix test definition for test_trust - `commit `__ + `commit `__ `#9326 `__ - ipatests: increase timeout for test_trust - `commit `__ + `commit `__ `#9326 `__ - ipatests: adapt for new automembership fixup behavior - `commit `__ + `commit `__ `#9313 `__ - ipatests: increase timeout for test_acme - `commit `__ + `commit `__ `#9324 `__ - automember-rebuild: add a notice about high CPU usage - `commit `__ + `commit `__ `#9320 `__ - trust-add: handle missing msSFU30MaxGidNumber - `commit `__ + `commit `__ `#9310 `__ - Spec file: use %autosetup instead of %setup - `commit `__ + `commit `__ - Spec file: unify with RHEL9 spec - `commit `__ + `commit `__ - Installer: create RID base before domain object - `commit `__ + `commit `__ `#9309 `__ - Tests: force key type in ACME tests - `commit `__ + `commit `__ `#9298 `__ - server install: remove error log about missing bkup file - `commit `__ + `commit `__ `#9306 `__ - ipatests: mark test_smb as xfail - `commit `__ + `commit `__ `#9124 `__ - pylint: disable deprecated-module message - `commit `__ + `commit `__ `#9278 `__ - pylint: fix comparison-of-constants - `commit `__ + `commit `__ `#9278 `__ - pylint: disable comparison-of-constants - `commit `__ + `commit `__ `#9278 `__ - pylint: fix consider-iterating-dictionary - `commit `__ + `commit `__ `#9278 `__ - pylint: globally disable useless-object-inheritance - `commit `__ + `commit `__ `#9278 `__ - pylint: disable unhashable-member - `commit `__ + `commit `__ `#9278 `__ - pylint: disable invalid-sequence-index - `commit `__ + `commit `__ `#9278 `__ - pylint: fix deprecated-class SafeConfigParser - `commit `__ + `commit `__ `#9278 `__ - pylint: fix duplicate-value - `commit `__ + `commit `__ `#9278 `__ - pylint: fix implicit-str-concat - `commit `__ + `commit `__ `#9278 `__ - pylint: disable missing-timeout message - `commit `__ + `commit `__ `#9278 `__ - pylint: globally disable unnecessary-lambda-assignment message - `commit `__ + `commit `__ `#9278 `__ - pylint: disable unnecessary-dunder-call message - `commit `__ + `commit `__ `#9278 `__ - pylint: disable using-constant-test - `commit `__ + `commit `__ `#9278 `__ - pylint: remove arguments-renamed warnings - `commit `__ + `commit `__ `#9278 `__ - pylint: disable modified-iterating-list - `commit `__ + `commit `__ `#9278 `__ - pylint: replace deprecated distutils module - `commit `__ + `commit `__ `#9278 `__ - pylint: disable used-before-assignment - `commit `__ + `commit `__ `#9278 `__ - pylint: disable redefined-slots-in-subclass - `commit `__ + `commit `__ `#9278 `__ - pylint: remove useless suppression - `commit `__ + `commit `__ `#9278 `__ - pylint: remove unneeded disable=unused-private-member - `commit `__ + `commit `__ `#9278 `__ - azure tests: move to fedora 37 - `commit `__ + `commit `__ - ipatests: update the xfail annotation for test_number_of_zones - `commit `__ + `commit `__ `#9135 `__ - Spec file: bump krb5_kdb_version on rawhide - `commit `__ + `commit `__ - FIPS setup: fix typo filtering camellia encryption - `commit `__ + `commit `__ - cert utilities: MAC verification is incompatible with FIPS mode - `commit `__ + `commit `__ - ipatests: update the fake fips mode expected message - `commit `__ + `commit `__ `#9002 `__ - ipatests: xfail on all fedora for test_ipa_login_with_sso_user - `commit `__ + `commit `__ `#9264 `__ - Spec file: ipa-client depends on krb5-pkinit-openssl - `commit `__ + `commit `__ `#9290 `__ - webui tests: fix assertion in test_subid.py - `commit `__ + `commit `__ `#9282 `__ - PRCI: update memory reqs for each topology - `commit `__ + `commit `__ - API reference: update dnszone_add generated doc - `commit `__ + `commit `__ `#9249 `__ - API reference: update vault doc - `commit `__ + `commit `__ `#9259 `__ @@ -640,7 +640,7 @@ s1341 (1) ---------------------------------------------------------------------------------------------- - ipaplatform: add initial nixos support - `commit `__ + `commit `__ `#9299 `__ @@ -649,10 +649,10 @@ Jarl Gullberg (2) ---------------------------------------------------------------------------------------------- - install: Fix missing dyndb keytab directive - `commit `__ + `commit `__ `#9344 `__ - ipaplatform/debian: fix path to ldap.so - `commit `__ + `commit `__ @@ -660,13 +660,13 @@ Julien Rische (3) ---------------------------------------------------------------------------------------------- - Filter out constrained delegation ACL from KDB entry - `commit `__ + `commit `__ - Tolerate absence of PAC ticket signature depending of server capabilities - `commit `__ + `commit `__ `#9371 `__ - kdb: Use krb5_pac_full_sign_compat() when available - `commit `__ + `commit `__ `#9373 `__ @@ -675,7 +675,7 @@ Jerry James (1) ---------------------------------------------------------------------------------------------- - Change fontawesome-fonts requires to match fontawesome 4.x - `commit `__ + `commit `__ @@ -683,19 +683,19 @@ mbhalodi (5) ---------------------------------------------------------------------------------------------- - ipatests: add remove automember condition tests - `commit `__ + `commit `__ `#9332 `__ - ipatests: Test for sequence processing failures with server context - `commit `__ + `commit `__ `#9349 `__ - ipatests: add missing automember-cli tests - `commit `__ + `commit `__ `#9332 `__ - ipatests: WebUI - ensure that ipa automember-rebuild prints a warning - `commit `__ + `commit `__ `#9320 `__ - ipatests: ensure that ipa automember-rebuild prints a warning - `commit `__ + `commit `__ `#9320 `__ @@ -704,10 +704,10 @@ Michal Polovka (2) ---------------------------------------------------------------------------------------------- - ipatests: commands: Wait for the SSSD to become available - `commit `__ + `commit `__ `#9377 `__ - ipatest: loginscreen: do not use hardcoded password - `commit `__ + `commit `__ `#9226 `__ @@ -716,12 +716,12 @@ Mohammad Rizwan (3) ---------------------------------------------------------------------------------------------- - ipatests: wait for sssd-kcm to settle after date change - `commit `__ + `commit `__ - ipatests: fix tests in TestACMEPrune - `commit `__ + `commit `__ `#9294 `__ - ipatests: tests for certificate pruning - `commit `__ + `commit `__ `#9294 `__ @@ -730,49 +730,49 @@ Rob Crittenden (15) ---------------------------------------------------------------------------------------------- - Don't allow a group to be converted to POSIX and external - `commit `__ + `commit `__ `#8990 `__ - Replace usage of #!/usr/bin/env python3 with #!/usr/bin/python3 - `commit `__ + `commit `__ `#8941 `__ - Mention in ipa-client-install that nscd is disabled - `commit `__ + `commit `__ `#9086 `__ - Return the value cert-find failures from the CA - `commit `__ + `commit `__ `#9369 `__ - Use the OpenSSL certificate parser in cert-find - `commit `__ + `commit `__ `#9331 `__ - Enforce sizelimit in cert-find - `commit `__ + `commit `__ `#9331 `__ - doc: Update pruning design with implement enable/disable options - `commit `__ + `commit `__ `#9323 `__ - Wipe the ipa-ca DNS record when updating system records - `commit `__ + `commit `__ `#9195 `__ - Fix setting values of 0 in ACME pruning - `commit `__ + `commit `__ `#9325 `__ - tests: add wrapper around ACME RSNv3 test - `commit `__ + `commit `__ `#9322 `__ - doc: add the --run command for manual job execution - `commit `__ + `commit `__ `#9294 `__ - ipa-acme-manage: add certificate/request pruning management - `commit `__ + `commit `__ `#9294 `__ - tests: Add new ipa-ca error messages to IPADNSSystemRecordsCheck - `commit `__ + `commit `__ `#9291 `__ - tests: Add ipa_ca_name checking to DNS system records - `commit `__ + `commit `__ `#9291 `__ - doc: Design for certificate pruning - `commit `__ + `commit `__ `#9294 `__ @@ -781,10 +781,10 @@ Rafael Guterres Jeffman (2) ---------------------------------------------------------------------------------------------- - Fix "no entry" condition when searching PAC info - `commit `__ + `commit `__ `#9368 `__ - Migrated to SPDX license. - `commit `__ + `commit `__ `#9342 `__ @@ -793,68 +793,68 @@ Stanislav Levin (21) ---------------------------------------------------------------------------------------------- - ipasphinx: Correct import of progress_message for Sphinx 6.1.0+ - `commit `__ + `commit `__ `#9361 `__ - fastlint: Correct concatenation of file lists - `commit `__ + `commit `__ `#9318 `__ - dns: Fix support for dnspython 1.1x - `commit `__ + `commit `__ `#9339 `__ - tests: webui: Update vendored qunit - `commit `__ + `commit `__ `#9329 `__ - AP: webui: List installed nodejs packages - `commit `__ + `commit `__ `#9329 `__ - tests: webui: Load qunit only once - `commit `__ + `commit `__ `#9329 `__ - tests: webui: Allow file access from files in tests - `commit `__ + `commit `__ `#9329 `__ - tests: Configure DNSResolver as platform agnostic resolver - `commit `__ + `commit `__ `#9319 `__ - spec: Drop no longer used build dependency on paste - `commit `__ + `commit `__ `#9314 `__ - ipatests: healthcheck: Handle missing fips-mode-setup - `commit `__ + `commit `__ `#9315 `__ - pylint: Replace deprecated cgi module - `commit `__ + `commit `__ `#9278 `__ - pylint: Fix useless-object-inheritance - `commit `__ + `commit `__ `#9278 `__ - pylint: Fix unhashable-member - `commit `__ + `commit `__ `#9278 `__ - pylint: Fix unnecessary-lambda-assignment - `commit `__ + `commit `__ `#9278 `__ - pylint: Fix modified-iterating-list - `commit `__ + `commit `__ `#9278 `__ - pylint: Fix used-before-assignment - `commit `__ + `commit `__ `#9278 `__ - pylint: Replace deprecated pipes - `commit `__ + `commit `__ `#9278 `__ - pylint: Fix cyclic-import - `commit `__ + `commit `__ `#9232 `__, `#9278 `__ - pylint: Replace deprecated extension-pkg-whitelist - `commit `__ + `commit `__ `#9278 `__ - pylint: More allowed C extensions - `commit `__ + `commit `__ `#9278 `__ - pylint: Lint in single process mode - `commit `__ + `commit `__ `#9278 `__ @@ -863,9 +863,9 @@ Sudhir Menon (2) ---------------------------------------------------------------------------------------------- - ipatests: ipa-adtrust-install command test scenarios - `commit `__ + `commit `__ - Fixes: ipa-otpd@.service: deprecated syslog setting - `commit `__ + `commit `__ `#9279 `__ @@ -874,7 +874,7 @@ Timo Aaltonen (1) ---------------------------------------------------------------------------------------------- - Drop duplicate includedir from krb5.conf - `commit `__ + `commit `__ `#9267 `__ @@ -883,9 +883,9 @@ Todd Zullinger (2) ---------------------------------------------------------------------------------------------- - spec: silence krb5 pkgconf errors in %krb5_base_version - `commit `__ + `commit `__ - spec: verify upstream source signature - `commit `__ + `commit `__ @@ -893,4 +893,4 @@ Thorsten Scherf (1) ---------------------------------------------------------------------------------------------- - external-idp: change idp server name to reference name - `commit `__ + `commit `__ diff --git a/src/page/Releases/4.3.3.rst b/src/page/Releases/4.3.3.rst index eb26730ed..7660e3ea9 100644 --- a/src/page/Releases/4.3.3.rst +++ b/src/page/Releases/4.3.3.rst @@ -111,20 +111,20 @@ Alexander Bokovoy (5) ---------------------------------------------------------------------------------------------- - ipa-kdb: search for password policies globally - `commit `__ + `commit `__ `#6561 `__ - ipa-kdb: simplify trusted domain parent search - `commit `__ + `commit `__ `#5738 `__ - trust: make sure ID range is created for the child domain even if it exists - `commit `__ + `commit `__ `#5738 `__ - trust: automatically resolve DNS trust conflicts for triangle trusts - `commit `__ + `commit `__ `#6076 `__ - ipaserver/dcerpc: reformat to make the code closer to pep8 - `commit `__ + `commit `__ `#6076 `__ @@ -133,13 +133,13 @@ Christian Heimes (3) ---------------------------------------------------------------------------------------------- - Use RSA-OAEP instead of RSA PKCS#1 v1.5 - `commit `__ + `commit `__ `#6278 `__ - Secure permissions of Custodia server.keys - `commit `__ + `commit `__ `#6056 `__ - RedHatCAService should wait for local Dogtag instance - `commit `__ + `commit `__ `#6016 `__ @@ -149,7 +149,7 @@ David Kupka (1) - password policy: Add explicit default password policy for hosts and services - `commit `__ + `commit `__ `#6561 `__ @@ -158,10 +158,10 @@ Fraser Tweedale (2) ---------------------------------------------------------------------------------------------- - certprofile-mod: correctly authorise config update - `commit `__ + `commit `__ `#6560 `__ - cert-revoke: fix permission check bypass (CVE-2016-5404) - `commit `__ + `commit `__ `#6232 `__ @@ -170,7 +170,7 @@ Ganna Kaihorodova (1) ---------------------------------------------------------------------------------------------- - Fix for integration tests replication layouts - `commit `__ + `commit `__ @@ -178,10 +178,10 @@ Jan Cholasta (2) ---------------------------------------------------------------------------------------------- - Revert "spec: add conflict with bind-chroot to freeipa-server-dns" - `commit `__ + `commit `__ `#5696 `__ - install: fix external CA cert validation - `commit `__ + `commit `__ `#6166 `__ @@ -190,25 +190,25 @@ Lenka Doudova (7) ---------------------------------------------------------------------------------------------- - Document make_delete_command method in UserTracker - `commit `__ + `commit `__ `#6485 `__ - Tests: Fix integration sudo test - `commit `__ + `commit `__ `#6378 `__ - Tests: Fix integration sudo tests setup and checks - `commit `__ + `commit `__ `#6262 `__ - Tests: Avoid skipping tests due to missing files - `commit `__ + `commit `__ `#6284 `__ - Raise error when running ipa-adtrust-install with empty netbios--name - `commit `__ + `commit `__ `#6120 `__ - Tests: Fix failing automember tests - `commit `__ + `commit `__ `#6147 `__ - Tests: Remove DNS configuration from trust tests - `commit `__ + `commit `__ @@ -216,7 +216,7 @@ Martin Babinsky (1) ---------------------------------------------------------------------------------------------- - add python-libsss_nss_idmap and python-sss to BuildRequires - `commit `__ + `commit `__ `#6244 `__ @@ -225,18 +225,18 @@ Martin Basti (5) ---------------------------------------------------------------------------------------------- - Become IPA 4.3.3 - `commit `__ + `commit `__ - Update Contributors.txt - `commit `__ + `commit `__ - Raise DuplicatedEnrty error when user exists in delete_container - `commit `__ + `commit `__ `#6199 `__, `#6316 `__ - Catch DNS exceptions during emptyzones named.conf upgrade - `commit `__ + `commit `__ `#6205 `__ - Start named during configuration upgrade. - `commit `__ + `commit `__ `#6205 `__ @@ -245,13 +245,13 @@ Oleg Fayans (3) ---------------------------------------------------------------------------------------------- - Changed addressing to the client hosts to be replicas - `commit `__ + `commit `__ `#6287 `__ - Disabled raiseonerr in kinit call during topology level check - `commit `__ + `commit `__ `#6254 `__ - Fixed incorrect domainlevel determination in tests - `commit `__ + `commit `__ `#6167 `__ @@ -260,7 +260,7 @@ Peter Lacko (1) ---------------------------------------------------------------------------------------------- - Test URIs in certificate. - `commit `__ + `commit `__ `#5881 `__ @@ -269,15 +269,15 @@ Petr Spacek (3) ---------------------------------------------------------------------------------------------- - Tests: fix test_forward_zones in test_xmlrpc/test_dns_plugin - `commit `__ + `commit `__ `#6213 `__, `#6317 `__ - DNS server upgrade: do not fail when DNS server did not respond - `commit `__ + `commit `__ `#6205 `__ - Fix ipa-replica-prepare's error message about missing local CA instance - `commit `__ + `commit `__ `#6134 `__ @@ -286,7 +286,7 @@ Petr Vobornik (1) ---------------------------------------------------------------------------------------------- - ca-less tests: fix getting cert in pem format from nssdb - `commit `__ + `commit `__ `#6177 `__ @@ -295,13 +295,13 @@ Stanislav Laznicka (3) ---------------------------------------------------------------------------------------------- - Add debug log in case cookie retrieval went wrong - `commit `__ + `commit `__ `#6774 `__ - Fix cookie with Max-Age processing - `commit `__ + `commit `__ `#6774 `__ - Remove update_from_dict() method - `commit `__ + `commit `__ `#6311 `__ @@ -310,5 +310,5 @@ Tomas Krizek (1) ---------------------------------------------------------------------------------------------- - Keep NSS trust flags of existing certificates - `commit `__ + `commit `__ `#5791 `__ diff --git a/src/page/Releases/4.4.4.rst b/src/page/Releases/4.4.4.rst index d5a56857b..5b1d3dfd7 100644 --- a/src/page/Releases/4.4.4.rst +++ b/src/page/Releases/4.4.4.rst @@ -74,7 +74,7 @@ Alexander Bokovoy (1) ---------------------------------------------------------------------------------------------- - ipa-kdb: support KDB DAL version 6.1 - `commit `__ + `commit `__ `#6776 `__ @@ -83,7 +83,7 @@ David Kupka (1) ---------------------------------------------------------------------------------------------- - ipapython.ipautil.nolog_replace: Do not replace empty value - `commit `__ + `commit `__ `#6738 `__ @@ -92,7 +92,7 @@ Florence Blanc-Renaud (1) ---------------------------------------------------------------------------------------------- - Do not configure PKI ajp redirection to use "::1" - `commit `__ + `commit `__ `#6575 `__ @@ -101,10 +101,10 @@ Fraser Tweedale (2) ---------------------------------------------------------------------------------------------- - ca: correctly authorise ca-del, ca-enable and ca-disable - `commit `__ + `commit `__ `#6713 `__ - Set up DS TLS on replica in CA-less topology - `commit `__ + `commit `__ `#6226 `__ @@ -113,7 +113,7 @@ Ganna Kaihorodova (1) ---------------------------------------------------------------------------------------------- - Tests: Add tree root domain role in legacy client tests - `commit `__ + `commit `__ `#6600 `__ @@ -122,7 +122,7 @@ Jan Cholasta (1) ---------------------------------------------------------------------------------------------- - compat: fix \`Any\` params in \`batch\` and \`dnsrecord\` - `commit `__ + `commit `__ `#6647 `__ @@ -131,21 +131,21 @@ Martin Basti (7) ---------------------------------------------------------------------------------------------- - Become IPA 4.4.4 - `commit `__ + `commit `__ - Update Contributors.txt - `commit `__ + `commit `__ - FreeIPA 4.4.4 translations - `commit `__ + `commit `__ - Bump python-dns to improve processing of non-complete resolv.conf - `commit `__ + `commit `__ `#6070 `__ - Use proper logging for error messages - `commit `__ + `commit `__ - Wait until HTTPS principal entry is replicated to replica - `commit `__ + `commit `__ `#6588 `__ - wait_for_entry: use only DN as parameter - `commit `__ + `commit `__ `#6588 `__ @@ -154,10 +154,10 @@ Stanislav Laznicka (2) ---------------------------------------------------------------------------------------------- - Add debug log in case cookie retrieval went wrong - `commit `__ + `commit `__ `#6774 `__ - Fix cookie with Max-Age processing - `commit `__ + `commit `__ `#6774 `__ @@ -166,7 +166,7 @@ Tomas Krizek (1) ---------------------------------------------------------------------------------------------- - server install: require IPv6 stack to be enabled - `commit `__ + `commit `__ `#6608 `__ @@ -175,5 +175,5 @@ Thorsten Scherf (1) ---------------------------------------------------------------------------------------------- - added ssl verification using IPA trust anchor - `commit `__ + `commit `__ `#6686 `__ diff --git a/src/page/Releases/4.5.0.rst b/src/page/Releases/4.5.0.rst index 77a1cc840..28d123435 100644 --- a/src/page/Releases/4.5.0.rst +++ b/src/page/Releases/4.5.0.rst @@ -637,21 +637,21 @@ Jan Barta (8) ---------------------------------------------------------------------------------------------- - pylint: fix bad-mcs-method-argument - `commit `__ + `commit `__ - pylint: fix bad-mcs-classmethod-argument - `commit `__ + `commit `__ - pylint: fix bad-classmethod-argument - `commit `__ + `commit `__ - pylint: fix old-style-class - `commit `__ + `commit `__ - pylint: fix redefine-in-handler - `commit `__ + `commit `__ - pylint: fix pointless-statement - `commit `__ + `commit `__ - pylint: fix unneeded-not - `commit `__ + `commit `__ - pylint: fix simplifiable-if-statement warnings - `commit `__ + `commit `__ @@ -659,26 +659,26 @@ Alexander Bokovoy (7) ---------------------------------------------------------------------------------------------- - ipaserver/dcerpc.py: use arcfour_encrypt from samba - `commit `__ + `commit `__ `#6697 `__ - add whoami command - `commit `__ + `commit `__ `#6643 `__ - pkinit: make sure to have proper dictionary for Kerberos instance on upgrade - `commit `__ + `commit `__ `#6670 `__ - ipa-kdb: support KDB DAL version 6.1 - `commit `__ + `commit `__ `#6619 `__ - ipa-kdb: search for password policies globally - `commit `__ + `commit `__ `#6561 `__ - adtrust: remove FILE: prefix from 'dedicated keytab file' in smb.conf - `commit `__ + `commit `__ `#6551 `__ - trustdomain-del: fix the way how subdomain is searched - `commit `__ + `commit `__ `#6445 `__ @@ -687,37 +687,37 @@ Abhijeet Kasurde (11) ---------------------------------------------------------------------------------------------- - Minor typo fix in DNS install plugin - `commit `__ + `commit `__ - Update warning message for replica install - `commit `__ + `commit `__ `#6352 `__ - Add fix for ipa plugins command - `commit `__ + `commit `__ `#6513 `__ - Update man page of ipa-server-install - `commit `__ + `commit `__ `#6634 `__ - Remove deprecated ipa-upgradeconfig command - `commit `__ + `commit `__ `#6620 `__ - Update warning message for ipa server uninstall - `commit `__ + `commit `__ `#6548 `__ - Fix for handling CalledProcessError in authconfig - `commit `__ + `commit `__ `#5244 `__ - Enumerate available options in IPA installer - `commit `__ + `commit `__ `#5435 `__ - Provide user hint about IP address in IPA install - `commit `__ + `commit `__ `#5949 `__ - Add fix for no-hbac-allow option in server install - `commit `__ + `commit `__ `#6357 `__ - Added a fix for setting Priority as required field in Password Policy Details facet - `commit `__ + `commit `__ `#6335 `__ @@ -726,28 +726,28 @@ Ben Lipton (8) ---------------------------------------------------------------------------------------------- - csrgen: Support encrypted private keys - `commit `__ + `commit `__ `#4899 `__ - csrgen: Allow overriding the CSR generation profile - `commit `__ + `commit `__ `#4899 `__ - csrgen: Automate full cert request flow - `commit `__ + `commit `__ `#4899 `__ - tests: Add tests for CSR autogeneration - `commit `__ + `commit `__ `#4899 `__ - csrgen: Use data_sources option to define which fields are rendered - `commit `__ + `commit `__ `#4899 `__ - csrgen: Add a CSR generation profile for user certificates - `commit `__ + `commit `__ `#4899 `__ - csrgen: Add CSR generation profile for caIPAserviceCert - `commit `__ + `commit `__ `#4899 `__ - csrgen: Add code to generate scripts that generate CSRs - `commit `__ + `commit `__ `#4899 `__ @@ -756,219 +756,219 @@ Christian Heimes (88) ---------------------------------------------------------------------------------------------- - Add PYTHON_INSTALL_EXTRA_OPTIONS and --install-layout=deb - `commit `__ + `commit `__ `#6764 `__ - Make pylint and jsl optional - `commit `__ + `commit `__ `#6604 `__ - Ignore ipapython/.DEFAULT_PLUGINS - `commit `__ + `commit `__ `#6597 `__ - Run test_ipaclient test suite - `commit `__ + `commit `__ - Chain CSR generator file loaders - `commit `__ + `commit `__ - Move csrgen templates into ipaclient package - `commit `__ + `commit `__ `#6714 `__ - Use https to get security domain from Dogtag - `commit `__ + `commit `__ - Cleanup certdb - `commit `__ + `commit `__ - Default to pkginstall=true without duplicated definitions - `commit `__ + `commit `__ - pylint: ignore pypi placeholders - `commit `__ + `commit `__ - Python build: use --build-base everywhere - `commit `__ + `commit `__ - Add with_wheels global to install wheel and PyPI packaging dependencies - `commit `__ + `commit `__ - Add placeholders for ipaplatform, ipaserver and ipatests - `commit `__ + `commit `__ - Add python-wheel as build requirement - `commit `__ + `commit `__ - Packaging: Add placeholder packages - `commit `__ + `commit `__ - Vault: port key wrapping to python-cryptography - `commit `__ + `commit `__ `#6650 `__ - Remove NSPRError exception from platform tasks - `commit `__ + `commit `__ `#5695 `__ - Remove import nss from test_ldap - `commit `__ + `commit `__ - certdb: Don't restore_context() of new NSSDB - `commit `__ + `commit `__ - Finish port to PyCA cryptography - `commit `__ + `commit `__ - Drop in-memory copy of schema zip file - `commit `__ + `commit `__ - Speed up client schema cache - `commit `__ + `commit `__ `#6690 `__ - C compilation fixes and hardening - `commit `__ + `commit `__ - lite-server: validate LDAP connection and cache schema - `commit `__ + `commit `__ `#6679 `__ - Add --without-ipatests option - `commit `__ + `commit `__ - Add missing include of stdint.h for uint8_t - `commit `__ + `commit `__ - Client-only builds with --disable-server - `commit `__ + `commit `__ `#6517 `__ - New lite-server implementation - `commit `__ + `commit `__ - Explain more performance tricks in doc string - `commit `__ + `commit `__ - Fix test, nested lists are no longer converted to nested tuples - `commit `__ + `commit `__ - Pretty print JSON in debug mode (debug level >= 2) - `commit `__ + `commit `__ - Convert list to tuples - `commit `__ + `commit `__ - Faster JSON encoder/decoder - `commit `__ + `commit `__ `#6655 `__ - Backup /root/kracert.p12 - `commit `__ + `commit `__ `#6659 `__ - Ditch version_info and use version number from ipapython.version - `commit `__ + `commit `__ - test_StrEnum: use int as bad type - `commit `__ + `commit `__ - Stable \_is_null check - `commit `__ + `commit `__ - cryptography has deprecated serial in favor of serial_number - `commit `__ + `commit `__ - Enable additional warnings (BytesWarning, DeprecationWarning) - `commit `__ + `commit `__ `#6631 `__ - Print test env information - `commit `__ + `commit `__ - Clean / ignore make check artefact - `commit `__ + `commit `__ - ipapython: Add dependencies on version.py - `commit `__ + `commit `__ - pytest: set rules to find test files and functions - `commit `__ + `commit `__ - Fix used before assignment bug in host_port_open() - `commit `__ + `commit `__ - Use pytest conftest.py and drop pytest.ini - `commit `__ + `commit `__ - Catch ValueError raised by pytest.config.getoption() - `commit `__ + `commit `__ - Silence pylint import errors of ipaserver in ipalib and ipaclient - `commit `__ + `commit `__ `#6468 `__ - Relax check for .git to support freeipa in submodules - `commit `__ + `commit `__ - Ignore backup~ files like config.h.in~ - `commit `__ + `commit `__ - Fetch correct exception in IPA_CONFDIR test - `commit `__ + `commit `__ - Use env var IPA_CONFDIR to get confdir - `commit `__ + `commit `__ - Set explicit confdir option for global contexts - `commit `__ + `commit `__ `#6389 `__ - Remove import of ipaplatform.paths from test_ipalib - `commit `__ + `commit `__ `#6474 `__ - Remove BIN_FALSE and BIN_TRUE - `commit `__ + `commit `__ `#6474 `__ - Add pylint guard to import of ipaplatform in ipapython.certdb - `commit `__ + `commit `__ `#6474 `__ - Require python-gssapi >= 1.2.0, take 2 - `commit `__ + `commit `__ `#6468 `__ - Backwards compatibility with setuptools 0.9.8 - `commit `__ + `commit `__ `#6468 `__ - Require python-cryptography >= 1.3.1 - `commit `__ + `commit `__ `#6468 `__ - Wheel bundles fixes - `commit `__ + `commit `__ `#6474 `__ - Require python-gssapi >= 1.2.0 - `commit `__ + `commit `__ `#6468 `__ - Adjustments for setup requirements - `commit `__ + `commit `__ `#6468 `__ - wrap long line - `commit `__ + `commit `__ - Silence import warnings for Samba bindings - `commit `__ + `commit `__ `#4985 `__ - Fix Python 3 bugs discovered by pylint - `commit `__ + `commit `__ `#4985 `__ - Python3 pylint fixes - `commit `__ + `commit `__ `#4985 `__ - Add main guards to a couple of Python scripts - `commit `__ + `commit `__ - Break ipaplatform / ipalib import cycle of hell - `commit `__ + `commit `__ - Replace LooseVersion - `commit `__ + `commit `__ `#6468 `__ - Don't ship install subpackages with wheels - `commit `__ + `commit `__ `#6468 `__ - Minor fixes for IPAVersion class - `commit `__ + `commit `__ `#6473 `__ - Pylint: whitelist packages with extension modules - `commit `__ + `commit `__ `#6468 `__ - Add 'ipa localenv' subcommand - `commit `__ + `commit `__ `#6490 `__ - ipapython and ipatest no longer require lxml - `commit `__ + `commit `__ - Register entry points of Custodia plugins - `commit `__ + `commit `__ `#6492 `__ - Use xml.etree in ipa-client-automount script - `commit `__ + `commit `__ - Port ipapython.dnssec.odsmgr to xml.etree - `commit `__ + `commit `__ `#6469 `__ - Add install requirements to Python packages - `commit `__ + `commit `__ `#6468 `__ - Make api.env.nss_dir relative to api.env.confdir - `commit `__ + `commit `__ `#6386 `__ - Don't modify redhat_system_units - `commit `__ + `commit `__ - Use correct classifiers to make setup.py files PyPI compatible - `commit `__ + `commit `__ - Use api.env.nss_dir instead of paths.IPA_NSSDB_DIR - `commit `__ + `commit `__ `#6386 `__ - Add \__name_\_ == \__main_\_ guards to setup.pys - `commit `__ + `commit `__ - Remove ipapython/ipa.conf - `commit `__ + `commit `__ - Port all setup.py to setuptools - `commit `__ + `commit `__ - Replace ipaplatform's symlinks with a meta importer - `commit `__ + `commit `__ - Move ipa.1 man file - `commit `__ + `commit `__ - Add iSecStore.span - `commit `__ + `commit `__ `#6365 `__ - Use RSA-OAEP instead of RSA PKCS#1 v1.5 - `commit `__ + `commit `__ `#6278 `__ @@ -978,66 +978,66 @@ David Kupka (20) - rpcserver: x509_login: Handle unsuccessful certificate login gracefully - `commit `__ + `commit `__ `#6225 `__ - Bump required version of gssproxy to 0.7.0 - `commit `__ + `commit `__ `#6671 `__, `#6698 `__ - tests: Add tests for kerberos principal aliases in stageuser - `commit `__ + `commit `__ `#6623 `__ - tests: kerberos_principal_aliases: Deduplicate tests - `commit `__ + `commit `__ `#6623 `__ - tests: Stageuser-{add,remove}-cert - `commit `__ + `commit `__ `#6623 `__ - tests: add-remove-cert: Use harcoded certificates instead of requesting them - `commit `__ + `commit `__ `#6623 `__ - ipalib.x509: Handle missing SAN gracefully - `commit `__ + `commit `__ - stageuser: Add stageuser-{add,remove}-principal - `commit `__ + `commit `__ `#6623 `__ - stageuser: Add stageuser-{add,remove}-cert - `commit `__ + `commit `__ `#6623 `__ - build: Add missing dependency on libxmlrpc{,_util} - `commit `__ + `commit `__ `#6637 `__ - ipaclient: schema cache: Handle malformed server info data gracefully - `commit `__ + `commit `__ `#6578 `__ - schema_cache: Make handling of string compatible with python3 - `commit `__ + `commit `__ `#6559 `__ - installer: Stop adding distro-specific NTP servers into ntp.conf - `commit `__ + `commit `__ `#6486 `__ - tests: Expect krbpwdpolicyreference in result of {host,service}-{find,show} --all - `commit `__ + `commit `__ `#6561 `__ - password policy: Add explicit default password policy for hosts and services - `commit `__ + `commit `__ `#6561 `__ - ipaclient.plugins: Use api_version from internally called commands - `commit `__ + `commit `__ `#6539 `__ - tests: Mark 389-ds acceptance tests - `commit `__ + `commit `__ - tests: Mark Dogtag acceptance tests - `commit `__ + `commit `__ - UnsafeIPAddress: Implement \__(g|s)etstate_\_ and to ensure proper (un)pickling - `commit `__ + `commit `__ `#6385 `__ - schema cache: Store and check info for pre-schema servers - `commit `__ + `commit `__ `#6095 `__ @@ -1046,65 +1046,65 @@ Florence Blanc-Renaud (20) ---------------------------------------------------------------------------------------------- - Installation must publish CA cert in /usr/share/ipa/html/ca.crt - `commit `__ + `commit `__ `#6750 `__ - IdM Server: list all Employees with matching Smart Card - `commit `__ + `commit `__ `#6646 `__ - ipa systemd unit should define Wants=network instead of Requires=network - `commit `__ + `commit `__ `#6723 `__ - Support for Certificate Identity Mapping - `commit `__ + `commit `__ `#6542 `__ - Define template version in certmap.conf - `commit `__ + `commit `__ `#6354 `__ - Fix ipa.service unit re. gssproxy - `commit `__ + `commit `__ `#6705 `__ - Do not configure PKI ajp redirection to use "::1" - `commit `__ + `commit `__ `#6575 `__ - ipa-kra-install must create directory if it does not exist - `commit `__ + `commit `__ `#6606 `__ - ipa-restore must stop tracking PKINIT cert in the preparation phase - `commit `__ + `commit `__ `#6570 `__ - Increase the timeout waiting for certificate issuance in installer - `commit `__ + `commit `__ `#6433 `__ - Check the result of cert request in replica installer - `commit `__ + `commit `__ `#6514 `__ - Fix ipa-replica-install when upgrade from ca-less to ca-full - `commit `__ + `commit `__ `#6375 `__ - Fix ipa migrate-ds when it finds a search reference - `commit `__ + `commit `__ `#6358 `__ - Fix renewal lock issues on installation - `commit `__ + `commit `__ `#6433 `__ - Refactor installer code requesting certificates - `commit `__ + `commit `__ `#6433 `__ - Use autobind instead of host keytab authentication in dogtag-ipa-ca-renew-agent - `commit `__ + `commit `__ - Fix ipa-cacert-manage man page - `commit `__ + `commit `__ `#6381 `__ - Add cert checks in ipa-server-certinstall - `commit `__ + `commit `__ `#6263 `__ - Fix regression introduced in ipa-certupdate - `commit `__ + `commit `__ `#6288 `__ - Fix ipa-certupdate for CA-less installation - `commit `__ + `commit `__ `#6288 `__ @@ -1113,164 +1113,164 @@ Fraser Tweedale (52) ---------------------------------------------------------------------------------------------- - rabase.get_certificate: make serial number arg mandatory - `commit `__ + `commit `__ `#3473 `__, `#5011 `__ - Extract method to map principal to princpal type - `commit `__ + `commit `__ `#5011 `__ - Remove redundant principal_type argument - `commit `__ + `commit `__ `#5011 `__ - dogtag: remove redundant property definition - `commit `__ + `commit `__ `#3473 `__ - ca: correctly authorise ca-del, ca-enable and ca-disable - `commit `__ + `commit `__ `#6713 `__ - replica install: relax domain level check for promotion - `commit `__ + `commit `__ `#5011 `__ - Fix reference before assignment - `commit `__ + `commit `__ `#6636 `__ - private_ccache: yield ccache name - `commit `__ + `commit `__ `#5011 `__ - Add sanity checks for use of --ca-subject and --subject-base - `commit `__ + `commit `__ `#2614 `__ - Indicate that ca subject / subject base uses LDAP RDN order - `commit `__ + `commit `__ `#6455 `__ - Allow full customisability of IPA CA subject DN - `commit `__ + `commit `__ `#2614 `__ - Reuse self.api when executing ca_enabled_check - `commit `__ + `commit `__ `#2614 `__ - dsinstance: extract function for writing certmap.conf - `commit `__ + `commit `__ `#2614 `__ - ipa-ca-install: add missing --subject-base option - `commit `__ + `commit `__ `#2614 `__ - Extract function for computing default subject base - `commit `__ + `commit `__ `#2614 `__ - installer: rename --subject to --subject-base - `commit `__ + `commit `__ `#2614 `__ - installutils: remove hardcoded subject DN assumption - `commit `__ + `commit `__ `#2614 `__ - Refactor and relocate set_subject_base_in_config - `commit `__ + `commit `__ `#2614 `__ - dsinstance: minor string fixes - `commit `__ + `commit `__ `#6586 `__ - Set up DS TLS on replica in CA-less topology - `commit `__ + `commit `__ `#6226 `__ - Remove "Request Certificate with SubjectAltName" permission - `commit `__ + `commit `__ `#6526 `__ - Fix DL1 replica installation in CA-less topology - `commit `__ + `commit `__ `#6573 `__ - certprofile-mod: correctly authorise config update - `commit `__ + `commit `__ `#6560 `__ - Fix regression in test suite - `commit `__ + `commit `__ `#6178 `__ - Add options to write lightweight CA cert or chain to file - `commit `__ + `commit `__ `#6178 `__ - certdb: accumulate extracted certs as list of PEMs - `commit `__ + `commit `__ `#6178 `__ - Add function for extracting PEM certs from PKCS #7 - `commit `__ + `commit `__ `#6178 `__ - cert-request: match names against principal aliases - `commit `__ + `commit `__ `#6295 `__ - Remove references to ds_newinst.pl - `commit `__ + `commit `__ `#6496 `__ - cert-request: accept CSRs with extraneous data - `commit `__ + `commit `__ `#6472 `__ - Ensure correct IPA CA nickname in DS and HTTP NSSDBs - `commit `__ + `commit `__ `#6415 `__ - Remove \__main_\_ code from ipalib.x509 and ipalib.pkcs10 - `commit `__ + `commit `__ `#6398 `__ - x509: use python-cryptography to process certs - `commit `__ + `commit `__ `#6398 `__ - x509: use pyasn1-modules X.509 specs - `commit `__ + `commit `__ `#6398 `__ - x509: avoid use of nss.data_to_hex - `commit `__ + `commit `__ `#6398 `__ - pkcs10: remove pyasn1 PKCS #10 spec - `commit `__ + `commit `__ `#6398 `__ - pkcs10: use python-cryptography for CSR processing - `commit `__ + `commit `__ `#6398 `__ - dn: support conversion from python-cryptography Name - `commit `__ + `commit `__ `#6398 `__ - cert-show: show validity in default output - `commit `__ + `commit `__ `#6419 `__ - Do not create Object Signing certificate - `commit `__ + `commit `__ `#6399 `__ - Add commentary about CA deletion to plugin doc - `commit `__ + `commit `__ `#6256 `__ - spec: require Dogtag >= 10.3.5-6 - `commit `__ + `commit `__ `#6256 `__ - sudorule: add SELinux transition examples to plugin doc - `commit `__ + `commit `__ `#3461 `__ - Fix cert revocation when removing all certs via host/service-mod - `commit `__ + `commit `__ `#6305 `__ - cert-request: raise error when request fails - `commit `__ + `commit `__ `#6309 `__ - Make host/service cert revocation aware of lightweight CAs - `commit `__ + `commit `__ `#6221 `__ - cert-request: raise CertificateOperationError if CA disabled - `commit `__ + `commit `__ `#6260 `__ - Use Dogtag REST API for certificate requests - `commit `__ + `commit `__ `#3473 `__, `#6260 `__ - Add HTTPRequestError class - `commit `__ + `commit `__ `#3473 `__, `#6260 `__ - Allow Dogtag RestClient to perform requests without logging in - `commit `__ + `commit `__ `#3473 `__, `#6260 `__ - Add ca-disable and ca-enable commands - `commit `__ + `commit `__ `#6257 `__ - Track lightweight CAs on replica installation - `commit `__ + `commit `__ `#6019 `__ @@ -1279,25 +1279,25 @@ Ganna Kaihorodova (7) ---------------------------------------------------------------------------------------------- - Tests: Basic coverage with tree root domain - `commit `__ + `commit `__ `#6489 `__ - User Tracker: Test to create user with minimal values - `commit `__ + `commit `__ `#6126 `__ - User Tracker: creation of user with minimal values - `commit `__ + `commit `__ `#6126 `__ - Stage User: Test to create stage user with minimal values - `commit `__ + `commit `__ `#6448 `__ - Tests: Stage User Tracker implementation - `commit `__ + `commit `__ `#6448 `__ - Tests: Add tree root domain role in legacy client tests - `commit `__ + `commit `__ `#6600 `__ - Unaccessible variable self.attrs in Tracker - `commit `__ + `commit `__ `#6125 `__ @@ -1306,317 +1306,317 @@ Jan Cholasta (106) ---------------------------------------------------------------------------------------------- - spec file: always provide python package aliases - `commit `__ + `commit `__ - spec file: support client-only build - `commit `__ + `commit `__ `#6517 `__ - spec file: support build without ipatests - `commit `__ + `commit `__ `#6517 `__ - slapi plugins: fix CFLAGS - `commit `__ + `commit `__ - spec file: add unconditional python-setuptools BuildRequires - `commit `__ + `commit `__ - httpinstance: disable system trust module in /etc/httpd/alias - `commit `__ + `commit `__ `#6132 `__ - csrgen: hide cert-get-requestdata in CLI - `commit `__ + `commit `__ `#4899 `__ - cert: include certificate chain in cert command output - `commit `__ + `commit `__ `#6547 `__ - cert: add output file option to cert-request - `commit `__ + `commit `__ `#6547 `__ - Travis CI: run tests in development mode - `commit `__ + `commit `__ `#6625 `__ - backend plugins: fix crashes in development mode - `commit `__ + `commit `__ `#6625 `__ - vault: cache the transport certificate on client - `commit `__ + `commit `__ `#6652 `__ - rpc: fix crash in verbose mode - `commit `__ + `commit `__ `#6734 `__ - install: re-introduce option groups - `commit `__ + `commit `__ `#6392 `__ - install CLI: remove magic option groups - `commit `__ + `commit `__ `#6392 `__ - client install: split off SSSD options into a separate class - `commit `__ + `commit `__ `#6392 `__ - server install: remove duplicate knob definitions - `commit `__ + `commit `__ `#6392 `__ - install: add missing space in realm_name description - `commit `__ + `commit `__ `#6392 `__ - server install: remove duplicate -w option - `commit `__ + `commit `__ `#6392 `__ - certmap: load certificate from file in certmap-match CLI - `commit `__ + `commit `__ `#6646 `__ - pylint_plugins: add forbidden import checker - `commit `__ + `commit `__ - ipapython: fix DEFAULT_PLUGINS in version.py - `commit `__ + `commit `__ `#6597 `__ - config: re-add \`init_config\` and \`config\` - `commit `__ + `commit `__ `#6707 `__ - dns: fix \`dnsrecord_add\` interactive mode - `commit `__ + `commit `__ `#6457 `__ - server install: do not attempt to issue PKINIT cert in CA-less - `commit `__ + `commit `__ `#5678 `__ - compat: fix \`Any\` params in \`batch\` and \`dnsrecord\` - `commit `__ + `commit `__ `#6647 `__ - scripts, tests: explicitly set confdir in the rest of server code - `commit `__ + `commit `__ `#6389 `__ - server upgrade: uninstall ipa_memcached properly - `commit `__ + `commit `__ `#5959 `__ - server upgrade: always upgrade KRA agent PEM file - `commit `__ + `commit `__ `#6675 `__ - server upgrade: fix upgrade from pre-4.0 - `commit `__ + `commit `__ `#5959 `__ - server upgrade: fix upgrade in CA-less - `commit `__ + `commit `__ `#5959 `__ - client install: create /etc/ipa/nssdb with correct mode - `commit `__ + `commit `__ `#5959 `__ - ipaldap: preserve order of values in LDAPEntry._sync() - `commit `__ + `commit `__ `#4985 `__ - replica install: do not log host OTP - `commit `__ + `commit `__ `#6633 `__ - tests: add test for PEM certificate files with leading text - `commit `__ + `commit `__ - ipa-ca-install: do not fail without --subject-base and --ca-subject - `commit `__ + `commit `__ `#2614 `__ - cert: fix search limit handling in cert-find - `commit `__ + `commit `__ `#6564 `__ - dogtag: search past the first 100 certificates - `commit `__ + `commit `__ `#6564 `__ - ipaldap: properly escape raw binary values in LDAP filters - `commit `__ + `commit `__ `#4985 `__ - client install: correctly report all failures - `commit `__ + `commit `__ `#6392 `__ - cainstance: do not configure renewal guard - `commit `__ + `commit `__ `#5959 `__ - dogtaginstance: track server certificate with our renew agent - `commit `__ + `commit `__ `#5959 `__ - renew agent: handle non-replicated certificates - `commit `__ + `commit `__ `#5959 `__ - ca: fix ca-find with --pkey-only - `commit `__ + `commit `__ `#6178 `__ - spec file: revert to the previous Release tag - `commit `__ + `commit `__ `#6418 `__ - x509: use PyASN1 to parse PKCS#7 - `commit `__ + `commit `__ `#6550 `__ - server install: fix KRA agent PEM file not being created - `commit `__ + `commit `__ `#6392 `__ - spec file: do not define with_lint inside a comment - `commit `__ + `commit `__ `#6418 `__ - certdb: fix PKCS#12 import with empty password - `commit `__ + `commit `__ `#6541 `__ - server install: fix external CA install - `commit `__ + `commit `__ `#6392 `__ - replica install: track the RA agent certificate again - `commit `__ + `commit `__ `#6392 `__ - ipaclient: remove hard dependency on ipaplatform - `commit `__ + `commit `__ `#6474 `__ - ipaclient: move install modules to the install subpackage - `commit `__ + `commit `__ `#6474 `__ - ipalib: remove hard dependency on ipapython - `commit `__ + `commit `__ `#6474 `__ - constants: remove CACERT - `commit `__ + `commit `__ `#6474 `__ - ipalib: move certstore to the install subpackage - `commit `__ + `commit `__ `#6474 `__ - ipapython: remove hard dependency on ipaplatform - `commit `__ + `commit `__ `#6474 `__ - ipautil: move file encryption functions to installutils - `commit `__ + `commit `__ `#6474 `__ - ipautil: move kinit functions to ipalib.install - `commit `__ + `commit `__ `#6474 `__ - ipautil: move is_fips_enabled() to ipaplatform.tasks - `commit `__ + `commit `__ `#6474 `__ - ipautil: remove the timeout argument of run() - `commit `__ + `commit `__ `#6474 `__ - ipautil: remove get_domain_name() - `commit `__ + `commit `__ `#6474 `__ - ipautil: remove SHARE_DIR and PLUGIN_SHARE_DIR - `commit `__ + `commit `__ `#6474 `__ - certdb: use a temporary file to pass password to pk12util - `commit `__ + `commit `__ `#6474 `__ - certdb: move IPA NSS DB install functions to ipaclient.install - `commit `__ + `commit `__ `#6474 `__ - ipapython: move certmonger and sysrestore to ipalib.install - `commit `__ + `commit `__ `#6474 `__ - ipapython: move dnssec, p11helper and secrets to ipaserver - `commit `__ + `commit `__ `#6474 `__ - custodiainstance: automatic restart on config file update - `commit `__ + `commit `__ `#6474 `__ - paths: remove DEV_NULL - `commit `__ + `commit `__ `#6474 `__ - install: migrate client install to the new class hierarchy - `commit `__ + `commit `__ `#6392 `__ - install: allow specifying verbosity and console log format in CLI - `commit `__ + `commit `__ `#6392 `__ - install: migrate server installers to the new class hierarchy - `commit `__ + `commit `__ `#6392 `__ - install: introduce installer class hierarchy - `commit `__ + `commit `__ `#6392 `__ - install: fix subclassing of knob groups - `commit `__ + `commit `__ `#6392 `__ - install: make knob base declaration explicit - `commit `__ + `commit `__ `#6392 `__ - install: declare knob CLI names using the argparse convention - `commit `__ + `commit `__ `#6392 `__ - install: use standard Python classes to declare knob types - `commit `__ + `commit `__ `#6392 `__ - install: introduce updated knob constructor - `commit `__ + `commit `__ `#6392 `__ - install: simplify CLI option parsing - `commit `__ + `commit `__ `#6392 `__ - install: improve CLI positional argument handling - `commit `__ + `commit `__ `#6392 `__ - install: use ldaps for pkispawn in ipa-ca-install - `commit `__ + `commit `__ `#6392 `__ - replica install: fix DS restart failure during replica promotion - `commit `__ + `commit `__ `#6392 `__ - replica install: merge KRA agent cert export into KRA install - `commit `__ + `commit `__ `#6392 `__ - replica install: merge RA cert import into CA install - `commit `__ + `commit `__ `#6392 `__ - server install: do not restart httpd during CA install - `commit `__ + `commit `__ `#6392 `__ - install: merge all KRA install code paths into one - `commit `__ + `commit `__ `#6392 `__ - install: merge all CA install code paths into one - `commit `__ + `commit `__ `#6392 `__ - replica install: use one remote KRA host name everywhere - `commit `__ + `commit `__ `#6392 `__ - replica install: use one remote CA host name everywhere - `commit `__ + `commit `__ `#6392 `__ - spec file: bump minimal required version of 389-ds-base - `commit `__ + `commit `__ `#6369 `__ - pwpolicy: do not run klist on import - `commit `__ + `commit `__ `#6418 `__ - client: remove unused libcurl build dependency - `commit `__ + `commit `__ `#6418 `__ - makeapi, makeaci: do not fail on missing imports - `commit `__ + `commit `__ `#6418 `__ - ipaserver: remove ipalib import from setup.py - `commit `__ + `commit `__ `#6418 `__ - pylint: enable the import-error check - `commit `__ + `commit `__ `#6418 `__ - spec file: do not include BuildRequires for lint by default - `commit `__ + `commit `__ `#6418 `__ - spec file: clean up BuildRequires - `commit `__ + `commit `__ `#6418 `__ - cert: add revocation reason back to cert-find output - `commit `__ + `commit `__ `#6269 `__ - test_plugable: update the rest of test_init - `commit `__ + `commit `__ `#6313 `__ - dns: re-introduce --raw in dnsrecord-del - `commit `__ + `commit `__ `#5644 `__ - client: remove hard dependency on pam_krb5 - `commit `__ + `commit `__ `#5557 `__ - cert: fix cert-find --certificate when the cert is not in LDAP - `commit `__ + `commit `__ `#6304 `__ - dns: fix crash in interactive mode against old servers - `commit `__ + `commit `__ `#6203 `__ - dns: prompt for missing record parts in CLI - `commit `__ + `commit `__ `#6203 `__ - dns: normalize record type read interactively in dnsrecord_add - `commit `__ + `commit `__ `#6203 `__ - cli: use full name when executing a command - `commit `__ + `commit `__ `#6279 `__ @@ -1625,74 +1625,74 @@ Lenka Doudova (23) ---------------------------------------------------------------------------------------------- - Document make_delete_command method in UserTracker - `commit `__ + `commit `__ `#6485 `__ - Tests: Providing trust tests with tree root domain - `commit `__ + `commit `__ `#6347 `__ - Tests: Verify that validity info is present in cert-show and cert-find command - `commit `__ + `commit `__ `#6419 `__ - Add file_exists method as a member of transport object - `commit `__ + `commit `__ `#6400 `__ - Tests: Provide AD cleanup for legacy client tests - `commit `__ + `commit `__ `#6396 `__ - Tests: Provide AD cleanup for trust tests - `commit `__ + `commit `__ `#6396 `__ - Tests: Fix integration sudo test - `commit `__ + `commit `__ `#6378 `__ - Tests: Verify that cert commands show CA without --all - `commit `__ + `commit `__ `#6410 `__ - Tests: Certificate revocation - `commit `__ + `commit `__ `#6349 `__ - Tests: Remove invalid certplugin tests - `commit `__ + `commit `__ `#6349 `__ - Tests: Fix failing test_ipalib/test_parameters - `commit `__ + `commit `__ `#6292 `__ - Tests: Remove silent deleting and creating entries by tracker - `commit `__ + `commit `__ `#6123 `__ - Tests: Remove usage of krb5 ccache from test_ipaserver/test_ldap - `commit `__ + `commit `__ `#6323 `__ - Tests: Fix host attributes in ipa-join host test - `commit `__ + `commit `__ `#6326 `__ - Tests: Update host test with ipa-join - `commit `__ + `commit `__ `#6326 `__ - Tests: Add krb5kdc.service restart to integration trust tests - `commit `__ + `commit `__ `#6322 `__ - Tests: Remove unnecessary attributes from base tracker - `commit `__ + `commit `__ `#6128 `__ - Tests: Remove --force options from tracker base class - `commit `__ + `commit `__ `#6124 `__ - Tests: Remove SSSD restart from integration tests - `commit `__ + `commit `__ `#6338 `__ - Tests: Fix integration sudo tests setup and checks - `commit `__ + `commit `__ `#6262 `__ - Tests: Fix failing ldap.backend test - `commit `__ + `commit `__ `#6312 `__ - Tests: Add cleanup to integration trust tests - `commit `__ + `commit `__ `#6306 `__ - Tests: Fix regex errors in integration trust tests - `commit `__ + `commit `__ `#6285 `__ @@ -1701,7 +1701,7 @@ Ludwig Krispenz (1) ---------------------------------------------------------------------------------------------- - Check for conflict entries before raising domain level - `commit `__ + `commit `__ `#6534 `__ @@ -1710,20 +1710,20 @@ Lukas Slebodnik (6) ---------------------------------------------------------------------------------------------- - CONFIGURE: Improve detection of xmlrpc_c flags - `commit `__ + `commit `__ `#6418 `__ - CONFIGURE: Properly detect libpopt on el7 - `commit `__ + `commit `__ - ipa_pwd: remove unnecessary dependency on dirsrv plugins - `commit `__ + `commit `__ - SPEC: Fix build in mock - `commit `__ + `commit `__ `#6604 `__ - CONFIGURE: Update help message for jslint - `commit `__ + `commit `__ `#6604 `__ - CONFIGURE: Fix detection of pylint - `commit `__ + `commit `__ `#6604 `__ @@ -1732,338 +1732,338 @@ Martin Babinsky (113) ---------------------------------------------------------------------------------------------- - Try out anonymous PKINIT after it is configured - `commit `__ + `commit `__ `#6739 `__ - check for replica's KDC entry on master before requesting PKINIT cert - `commit `__ + `commit `__ `#6739 `__ - check that the master requesting PKINIT cert has KDC enabled - `commit `__ + `commit `__ `#6739 `__ - Make wait_for_entry raise exceptions - `commit `__ + `commit `__ `#6739 `__ - Move PKINIT configuration to a later stage of server/replica install - `commit `__ + `commit `__ `#6739 `__ - Request PKINIT cert directly from Dogtag API on first master - `commit `__ + `commit `__ `#6739 `__ - Make PKINIT certificate request logic consistent with other installers - `commit `__ + `commit `__ `#6739 `__ - idviews: correctly handle modification of non-existent view - `commit `__ + `commit `__ `#6372 `__ - Re-use trust domain retrieval code in certmap validators - `commit `__ + `commit `__ `#6372 `__ - idview: add domain_resolution_order attribute - `commit `__ + `commit `__ `#6372 `__ - ipaconfig: add the ability to manipulate domain resolution order - `commit `__ + `commit `__ `#6372 `__ - Short name resolution: introduce the required schema - `commit `__ + `commit `__ `#6372 `__ - ipa-managed-entries: only permit running the command on IPA master - `commit `__ + `commit `__ `#6735 `__ - ipa-managed-entries: use server-mode API - `commit `__ + `commit `__ `#6735 `__ - Allow login to WebUI using Kerberos aliases/enterprise principals - `commit `__ + `commit `__ `#6343 `__ - Provide basic integration tests for built-in AD trust installer - `commit `__ + `commit `__ `#6630 `__ - Update server/replica installer man pages - `commit `__ + `commit `__ `#6630 `__ - Fix erroneous short name options in ipa-adtrust-install man page - `commit `__ + `commit `__ `#6630 `__ - Merge AD trust configurator into replica installer - `commit `__ + `commit `__ `#6630 `__ - Merge AD trust configurator into server installer - `commit `__ + `commit `__ `#6630 `__ - expose AD trust related knobs in composite installers - `commit `__ + `commit `__ - Add AD trust installer interface for composite installer - `commit `__ + `commit `__ `#6630 `__ - check for installed dependencies when \*not\* in standalone mode - `commit `__ + `commit `__ `#6630 `__ - print the installation info only in standalone mode - `commit `__ + `commit `__ `#6630 `__ - adtrust.py: Use logging to emit error messages - `commit `__ + `commit `__ `#6630 `__ - Refactor the code searching and presenting missing trust agents - `commit `__ + `commit `__ `#6639 `__ - only check for netbios name when LDAP backend is connected - `commit `__ + `commit `__ `#6630 `__ - Refactor the code checking for missing SIDs - `commit `__ + `commit `__ `#6630 `__ - use the methods of the parent class to retrieve CIFS kerberos keys - `commit `__ + `commit `__ `#6638 `__ - httpinstance: re-use parent's methods to retrieve anonymous keytab - `commit `__ + `commit `__ `#6638 `__ - Make request_service_keytab into a public method - `commit `__ + `commit `__ `#6638 `__ - allow for more flexibility when requesting service keytab - `commit `__ + `commit `__ `#6638 `__ - Move AD trust installation code to a separate module - `commit `__ + `commit `__ `#6629 `__ - Replace exit() calls with exceptions - `commit `__ + `commit `__ `#6629 `__ - Remove unused variables in exception handling - `commit `__ + `commit `__ `#6629 `__ - ipa-adtrust-install: format the code for PEP-8 compliance - `commit `__ + `commit `__ `#6629 `__ - Travis CI: Upload the logs from failed jobs to transfer.sh - `commit `__ + `commit `__ - Explicitly handle quoting/unquoting of NSSNickname directive - `commit `__ + `commit `__ `#6460 `__ - Delegate directive value quoting/unquoting to separate functions - `commit `__ + `commit `__ `#6460 `__ - installutils: improve directive value parsing in \`get_directive\` - `commit `__ + `commit `__ `#6460 `__ - Fix the installutils.set_directive docstring - `commit `__ + `commit `__ `#6460 `__ - disable hostname canonicalization by Kerberos library - `commit `__ + `commit `__ `#6584 `__ - Travis CI: actually return non-zero exit status when the test job fails - `commit `__ + `commit `__ - Trim the test runner log to show only pytest failures/errors - `commit `__ + `commit `__ - Add license headers to the files used by Travis CI - `commit `__ + `commit `__ - Travis CI: use specific Python version during build - `commit `__ + `commit `__ - introduce install step to .travis.yml and cache pip installs - `commit `__ + `commit `__ - split out lint to a separate Travis job - `commit `__ + `commit `__ - Travis: offload test execution to a separate script - `commit `__ + `commit `__ - Travis CI: a separate script to run test tasks - `commit `__ + `commit `__ - Put the commands informing and displaying build logs on single line - `commit `__ + `commit `__ - travis: mark FreeIPA as python project - `commit `__ + `commit `__ - Bump up ipa-docker-test-runner version - `commit `__ + `commit `__ - Add a basic test suite for \`kadmin.local\` interface - `commit `__ + `commit `__ `#6561 `__ - Make \`kadmin\` family of functions return the result of ipautil.run - `commit `__ + `commit `__ `#6561 `__ - gracefully handle setting replica bind dn group on old masters - `commit `__ + `commit `__ `#6532 `__ - add missing attribute to ipaca replica during CA topology update - `commit `__ + `commit `__ `#6508 `__ - Revert "upgrade: add replica bind DN group check interval to CA topology config" - `commit `__ + `commit `__ `#6508 `__ - bindinstance: use data in named.conf to determine configuration status - `commit `__ + `commit `__ `#6503 `__ - Use ipa-docker-test-runner to run tests in Travis CI - `commit `__ + `commit `__ - Configuration file for ipa-docker-test-runner - `commit `__ + `commit `__ - Add 'env_confdir' to constants - `commit `__ + `commit `__ `#6389 `__ - Fix pep-8 transgressions in ipalib/misc.py - `commit `__ + `commit `__ `#6490 `__ - Make \`env\` and \`plugins\` commands local again - `commit `__ + `commit `__ `#6490 `__ - Revert "Add 'ipa localenv' subcommand" - `commit `__ + `commit `__ `#6490 `__ - Enhance \__repr_\_ method of Principal - `commit `__ + `commit `__ `#6505 `__ - replication: ensure bind DN group check interval is set on replica config - `commit `__ + `commit `__ `#6508 `__ - upgrade: add replica bind DN group check interval to CA topology config - `commit `__ + `commit `__ `#6508 `__ - Improve the robustness FreeIPA's i18n module and its tests - `commit `__ + `commit `__ `#6512 `__ - Use common procedure to setup initial replication in both domain levels - `commit `__ + `commit `__ `#6406 `__ - ensure that the initial sync using GSSAPI works agains old masters - `commit `__ + `commit `__ `#6406 `__ - replication: refactor the code setting principals as replica bind DNs - `commit `__ + `commit `__ `#6406 `__ - replication: augment setup_promote_replication method - `commit `__ + `commit `__ `#6406 `__ - Turn replication manager group into ReplicationManager class member - `commit `__ + `commit `__ `#6406 `__ - Fix the naming of ipa-dnskeysyncd service principal - `commit `__ + `commit `__ `#6405 `__ - installutils: remove 'install_service_keytab' function - `commit `__ + `commit `__ `#6405 `__ - domain-level agnostic keytab retrieval in httpinstance - `commit `__ + `commit `__ `#6405 `__ - installers: restart DS after KDC is configured - `commit `__ + `commit `__ `#6405 `__ - dsinstance: use keytab retrieval method from parent class - `commit `__ + `commit `__ `#6405 `__ - use DM credentials to retrieve service keytab only in DLO - `commit `__ + `commit `__ `#6405 `__ - Service: common method for service keytab requests - `commit `__ + `commit `__ `#6405 `__ - Turn Kerberos-related properties to Service class members - `commit `__ + `commit `__ `#6392 `__ - Make service user name a class member of Service - `commit `__ + `commit `__ `#6392 `__ - service installers: clean up the inheritance - `commit `__ + `commit `__ `#6392 `__ - fix incorrect invocation of ipa-getkeytab during DL0 host enrollment - `commit `__ + `commit `__ `#6434 `__ - do partial host enrollment in domain level 0 replica install - `commit `__ + `commit `__ `#6434 `__ - Separate function to purge IPA host principals from keytab - `commit `__ + `commit `__ `#6434 `__ - certs: do not re-create NSS database when requesting service cert - `commit `__ + `commit `__ `#6429 `__ - initialize empty /etc/http/alias during server/replica install - `commit `__ + `commit `__ `#6429 `__ - CertDB: add API for non-destructive initialization from PKCS#12 bundle - `commit `__ + `commit `__ `#6429 `__ - test_ipagetkeytab: use system-wide IPA CA cert location in tests - `commit `__ + `commit `__ `#6409 `__ - Extend keytab retrieval test suite to cover new options - `commit `__ + `commit `__ `#6409 `__ - Modernize ipa-getkeytab test suite - `commit `__ + `commit `__ `#6409 `__ - extend ipa-getkeytab to support other LDAP bind methods - `commit `__ + `commit `__ `#6409 `__ - ipa-getkeytab: expose CA cert path as option - `commit `__ + `commit `__ `#6409 `__ - server-del: fix incorrect check for one IPA master - `commit `__ + `commit `__ `#6417 `__ - Revert "Fix install scripts debugging" - `commit `__ + `commit `__ - do not use keys() method when iterating through dictionaries - `commit `__ + `commit `__ `#6391 `__ - remove trailing newlines form python modules - `commit `__ + `commit `__ `#6391 `__ - mod_nss: use more robust quoting of NSSNickname directive - `commit `__ + `commit `__ `#5809 `__ - Move character escaping function to ipautil - `commit `__ + `commit `__ `#5809 `__ - Make Continuous installer continuous only during execution phase - `commit `__ + `commit `__ `#5725 `__ - use separate exception handlers for executors and validators - `commit `__ + `commit `__ `#5725 `__ - ipa passwd: use correct normalizer for user principals - `commit `__ + `commit `__ `#6329 `__ - trust-fetch-domains: contact forest DCs when fetching trust domain info - `commit `__ + `commit `__ `#6328 `__ - netgroup: avoid extraneous LDAP search when retrieving primary key from DN - `commit `__ + `commit `__ `#5855 `__ - advise: Use \`name\` instead of \`__name__\` to get plugin names - `commit `__ + `commit `__ - Use Travis-CI for basic sanity checks - `commit `__ + `commit `__ - ldapupdate: Use proper inheritance in BadSyntax exception - `commit `__ + `commit `__ `#6294 `__ - raise ValidationError when deprecated param is passed to command - `commit `__ + `commit `__ `#6190 `__ - Always fetch forest info from root DCs when establishing one-way trust - `commit `__ + `commit `__ `#6057 `__ - factor out \`populate_remote_domain\` method into module-level function - `commit `__ + `commit `__ `#6057 `__ - Always fetch forest info from root DCs when establishing two-way trust - `commit `__ + `commit `__ `#6057 `__ @@ -2072,382 +2072,382 @@ Martin Basti (134) ---------------------------------------------------------------------------------------------- - Become IPA 4.5.0 - `commit `__ + `commit `__ - Update 4.5 translations - `commit `__ + `commit `__ - Add copy-schema-to-ca for RHEL6 to contrib/ - `commit `__ + `commit `__ `#6540 `__ - Remove copy-schema-to-ca.py from master branch - `commit `__ + `commit `__ `#6540 `__ - pylint: bump dependency to version >= 1.6 - `commit `__ + `commit `__ - backup: backup anonymous keytab - `commit `__ + `commit `__ `#5959 `__ - tests: use --setup-kra in tests - `commit `__ + `commit `__ `#6731 `__ - KRA: add --setup-kra to ipa-server-install - `commit `__ + `commit `__ `#6731 `__ - man: add missing --setup-adtrust option to manpage - `commit `__ + `commit `__ `#6630 `__ - ipactl restart: log httplib failues as debug - `commit `__ + `commit `__ `#6674 `__ - Tests: search for disabled users - `commit `__ + `commit `__ - Test: DNS nsupdate from dns-update-system-records - `commit `__ + `commit `__ `#6585 `__ - DNS: dns-update-system-record can create nsupdate file - `commit `__ + `commit `__ `#6585 `__ - py3: ipa_generate_password: do not compare None and Int - `commit `__ + `commit `__ `#4985 `__ - py3: change_admin_password: use textual mode - `commit `__ + `commit `__ `#4985 `__ - py3: create DNS zonefile: use textual mode - `commit `__ + `commit `__ `#4985 `__ - py3: upgradeinstance: use bytes literals with LDIF operations - `commit `__ + `commit `__ `#4985 `__ - py3: upgradeinstance: decode data before storing them as backup... - `commit `__ + `commit `__ `#4985 `__ - py3: upgradeinstance: open dse.ldif in textual mode - `commit `__ + `commit `__ `#4985 `__ - custodia: kem.set_keys: replace too-broad exception - `commit `__ + `commit `__ - py3: kem.py: user bytes with ldap values - `commit `__ + `commit `__ `#4985 `__ - py3: custodia: basedn must be unicode - `commit `__ + `commit `__ `#4985 `__ - py3: configparser: use raw keyword - `commit `__ + `commit `__ `#4985 `__ - py3: modify_s: attribute name must be str not bytes - `commit `__ + `commit `__ `#4985 `__ - py3: ldapupdate: fix logging str(bytes) issue - `commit `__ + `commit `__ `#4985 `__ - DNSSEC: forwarders validation improvement - `commit `__ + `commit `__ - py3: test_ipaserver: fix BytesWarnings - `commit `__ + `commit `__ `#4985 `__ - py3: get_memberofindirect: fix ByteWarnings - `commit `__ + `commit `__ `#4985 `__ - py3: DN: fix BytesWarning - `commit `__ + `commit `__ `#4985 `__ - Tests: fix wait_for_replication task - `commit `__ + `commit `__ - py3: send Decimal number as string instead of base64 encoded value - `commit `__ + `commit `__ `#4985 `__ - py3: ipaldap: properly encode DNSName to bytes - `commit `__ + `commit `__ `#4985 `__ - py3: \_convert_to_idna: fix bytes/unicode mistmatch - `commit `__ + `commit `__ `#4985 `__ - py3: DNS: get_record_entry_attrs: do not modify dict during iteration - `commit `__ + `commit `__ `#4985 `__ - py3: \_ptrrecord_precallaback: use bytes with labels - `commit `__ + `commit `__ `#4985 `__ - py3: remove_entry_from_group: attribute name must be string - `commit `__ + `commit `__ `#4985 `__ - py3: base64 encoding/decoding returns always bytes don't mix it - `commit `__ + `commit `__ `#4985 `__ - pki-base: use pki-base-python2 as dependency - `commit `__ + `commit `__ `#4985 `__ - pki: add missing depedency pki-base[-python3] - `commit `__ + `commit `__ `#4985 `__ - py3: x509.py: return principal as unicode string - `commit `__ + `commit `__ `#4985 `__, `#6640 `__ - py3: tests_xmlrpc: do not call str() on bytes - `commit `__ + `commit `__ `#4985 `__ - py3: normalize_certificate: support both bytes and unicode - `commit `__ + `commit `__ `#4985 `__ - py3: strip_header: support both bytes and unicode - `commit `__ + `commit `__ `#4985 `__ - py3: fingerprint_hex_sha256: fix encoding/decoding - `commit `__ + `commit `__ `#4985 `__ - py3: fix CSR encoding inside framework - `commit `__ + `commit `__ `#4985 `__ - Principal: validate type of input parameter - `commit `__ + `commit `__ - Use dict comprehension - `commit `__ + `commit `__ - py3: can_read: attributelevelrights is already string - `commit `__ + `commit `__ `#4985 `__ - py3: get_effective_rights: values passed to ldap must be bytes - `commit `__ + `commit `__ `#4985 `__ - py3: ipaldap: update encode/decode methods - `commit `__ + `commit `__ `#4985 `__ - py3: rpcserver fix undefined variable - `commit `__ + `commit `__ `#4985 `__ - py3: WSGI executioners must return bytes in list - `commit `__ + `commit `__ `#4985 `__ - py3: session: fix r/w ccache data - `commit `__ + `commit `__ `#4985 `__ - Py3: Fix undefined variable - `commit `__ + `commit `__ `#4985 `__ - py3: rpcserver: decode input because json requires string - `commit `__ + `commit `__ `#4985 `__ - py3: session.py decode server name to str - `commit `__ + `commit `__ `#4985 `__ - Use proper logging for error messages - `commit `__ + `commit `__ - wait_for_entry: use only DN as parameter - `commit `__ + `commit `__ `#6588 `__ - py3: decode bytes for json.loads() - `commit `__ + `commit `__ `#4985 `__ - dogtag.py: fix exception logging of JSON data - `commit `__ + `commit `__ - py3: convert_attribute_members: don't use bytes as parameter for DN - `commit `__ + `commit `__ `#4985 `__ - py3: make_filter_from_attr: use string instead of bytes - `commit `__ + `commit `__ `#4985 `__ - py3: \__add_acl: use standard ipaldap methods - `commit `__ + `commit `__ `#4985 `__ - py3: add_entry_to_group: attribute name must be string not bytes - `commit `__ + `commit `__ `#4985 `__ - py3: HTTPResponse has no 'dict' attribute in 'msg' - `commit `__ + `commit `__ `#4985 `__ - py3: \_httplib_request: don't convert string to bytes - `commit `__ + `commit `__ `#4985 `__ - py3: cainstance: replace mkstemp with NamedTemporaryFile - `commit `__ + `commit `__ `#4985 `__ - py3: write CA/KRA config into file opened in text mode - `commit `__ + `commit `__ `#4985 `__ - py3: CA/KRA: config parser requires string - `commit `__ + `commit `__ `#4985 `__ - py3: ipautil: open tempfiles in text mode - `commit `__ + `commit `__ `#4985 `__ - py3: ldap modlist must have keys as string, not bytes - `commit `__ + `commit `__ `#4985 `__ - py3: open temporary ldif file in text mode - `commit `__ + `commit `__ `#4985 `__ - py3: service.py: replace mkstemp by NamedTemporaryFile - `commit `__ + `commit `__ `#4985 `__ - py3: create_cert_db: write to file in a compatible way - `commit `__ + `commit `__ `#4985 `__ - \_resolve_records: fix assert, nameserver_ip can be none - `commit `__ + `commit `__ - Remove duplicated step from DS install - `commit `__ + `commit `__ - py3: enable py3 pylint - `commit `__ + `commit `__ - Py3: Fix ToASCII method - `commit `__ + `commit `__ `#5935 `__ - fix: regression in API version comparison - `commit `__ + `commit `__ `#6468 `__ - ipactl: pass api as argument to services - `commit `__ + `commit `__ - DNS: URI records: bump python-dns requirements - `commit `__ + `commit `__ `#6344 `__ - remove Knob function - `commit `__ + `commit `__ `#6392 `__ - KRA: don't add KRA container when KRA replica - `commit `__ + `commit `__ - Zanata: exlude testing ipa.pot file - `commit `__ + `commit `__ `#6435 `__ - client: use correct code for failed uninstall - `commit `__ + `commit `__ `#6392 `__ - client: use exceptions instead of return states - `commit `__ + `commit `__ `#6392 `__ - client: move install part to else branch - `commit `__ + `commit `__ `#6392 `__ - client: move install cleanup from ipa-client-install to module - `commit `__ + `commit `__ `#6392 `__ - client: move clean CCACHE to module - `commit `__ + `commit `__ `#6392 `__ - client: fix script execution - `commit `__ + `commit `__ `#6392 `__ - client: Remove useless except in ipa-client-install - `commit `__ + `commit `__ `#6392 `__ - client: move custom env variable into client module - `commit `__ + `commit `__ `#6392 `__ - client: extract checks from uninstall to uninstall_check - `commit `__ + `commit `__ `#6392 `__ - client: extract checks from install to install_check - `commit `__ + `commit `__ `#6392 `__ - client: move checks to client.install_check - `commit `__ + `commit `__ `#6392 `__ - client: make statestore and fstore consistent with server - `commit `__ + `commit `__ `#6392 `__ - IPAChangeConf: use constant for empty line - `commit `__ + `commit `__ `#6392 `__ - client: import IPAChangeConf directly instead the module - `commit `__ + `commit `__ `#6392 `__ - client: remove extra return from hardcode_ldap_server - `commit `__ + `commit `__ `#6392 `__ - client: install function: return constant not hardcoded number - `commit `__ + `commit `__ `#6392 `__ - client: remove unneded return from configure_ipa_conf - `commit `__ + `commit `__ `#6392 `__ - client: remove unneded return configure_krb5_conf - `commit `__ + `commit `__ `#6392 `__ - ipa-client-install: move client install to module - `commit `__ + `commit `__ `#6392 `__ - CI: Disable KRA install tests on DL0 - `commit `__ + `commit `__ `#6088 `__ - CI: use --setup-kra with replica installation - `commit `__ + `commit `__ `#6088 `__ - CI: extend replication layouts tests with KRA - `commit `__ + `commit `__ `#6088 `__ - CI: workaround: wait for dogtag before replica-prepare - `commit `__ + `commit `__ `#6274 `__ - Pylint: fix the rest of unused local variables - `commit `__ + `commit `__ - Pylint: remove unused variables in tests - `commit `__ + `commit `__ - Pylint: remove unused variables in ipaserver package - `commit `__ + `commit `__ - Pylint: remove unused variables from installers and scripts - `commit `__ + `commit `__ - Fix: find OSCP certificate test - `commit `__ + `commit `__ `#6359 `__ - Pylint: enable check for unused-variables - `commit `__ + `commit `__ - Remove unused variables in tests - `commit `__ + `commit `__ - Remove unused variables in the code - `commit `__ + `commit `__ - test_text: add test ipa.pot file for tests - `commit `__ + `commit `__ `#6333 `__ - Pylint: enable global-variable-not-assigned check - `commit `__ + `commit `__ - Pylint: enable cyclic-import check - `commit `__ + `commit `__ - Test: dont use global variable for iteration in test_cert_plugin - `commit `__ + `commit `__ `#5755 `__ - Use constant for user and group patterns - `commit `__ + `commit `__ `#5822 `__ - Fix regexp patterns in parameters to not enforce length - `commit `__ + `commit `__ `#5822 `__ - Add check for IP addresses into DNS installer - `commit `__ + `commit `__ `#5814 `__ - Fix missing config.ips in promote_check - `commit `__ + `commit `__ `#5814 `__ - Abstract procedures for IP address warnings - `commit `__ + `commit `__ `#5814 `__ - Catch DNS exceptions during emptyzones named.conf upgrade - `commit `__ + `commit `__ `#6205 `__ - Start named during configuration upgrade. - `commit `__ + `commit `__ `#6205 `__ - Tests: extend DNS cmdline tests with lowercased record type - `commit `__ + `commit `__ `#6203 `__ - Show warning when net/broadcast IP address is used in installer - `commit `__ + `commit `__ `#5814 `__ - Allow multicast addresses in A/AAAA records - `commit `__ + `commit `__ `#5814 `__ - Allow broadcast ip addresses - `commit `__ + `commit `__ `#5814 `__ - Allow network ip addresses - `commit `__ + `commit `__ `#5814 `__ - Fix parse errors with link-local addresses - `commit `__ + `commit `__ `#6296 `__ - Fix ScriptError to always return string from \__str_\_ - `commit `__ + `commit `__ `#6294 `__ - Bump master IPA devel version to 4.4.90 - `commit `__ + `commit `__ @@ -2455,7 +2455,7 @@ Martin Kosek (1) ---------------------------------------------------------------------------------------------- - Update Contributors.txt - `commit `__ + `commit `__ @@ -2463,16 +2463,16 @@ Milan Kubík (4) ---------------------------------------------------------------------------------------------- - ipatests: Fix assert_deepequal outside of pytest process - `commit `__ + `commit `__ `#6420 `__ - ipatests: Implement tests with CSRs requesting SAN - `commit `__ + `commit `__ `#6366 `__ - ipatests: Fix name property on a service tracker - `commit `__ + `commit `__ `#6366 `__ - ipatests: provide context manager for keytab usage in RPC tests - `commit `__ + `commit `__ `#6366 `__ @@ -2481,7 +2481,7 @@ Michal Reznik (1) ---------------------------------------------------------------------------------------------- - test_csrgen: adjusted comparison test scripts for CSRGenerator - `commit `__ + `commit `__ `#6724 `__ @@ -2490,7 +2490,7 @@ Michal Židek (1) ---------------------------------------------------------------------------------------------- - git: Add commit template - `commit `__ + `commit `__ @@ -2498,12 +2498,12 @@ Nathaniel McCallum (3) ---------------------------------------------------------------------------------------------- - Migrate OTP import script to python-cryptography - `commit `__ + `commit `__ `#5192 `__ - Use RemoveOnStop to cleanup systemd sockets - `commit `__ + `commit `__ - Properly handle LDAP socket closures in ipa-otpd - `commit `__ + `commit `__ `#6368 `__ @@ -2512,111 +2512,111 @@ Oleg Fayans (45) ---------------------------------------------------------------------------------------------- - Test: uniqueness of certificate renewal master - `commit `__ + `commit `__ `#6504 `__ - Test: basic kerberos over http functionality - `commit `__ + `commit `__ `#6446 `__ - Test: made kinit_admin a returning function - `commit `__ + `commit `__ - tests: Added basic tests for certs in idoverrides - `commit `__ + `commit `__ `#6412 `__ - Created idview tracker - `commit `__ + `commit `__ `#6412 `__ - Test for installing rules with service principals - `commit `__ + `commit `__ `#6481 `__ - Test: integration tests for certs in idoverrides feature - `commit `__ + `commit `__ `#6005 `__ - Added interface to certutil - `commit `__ + `commit `__ - Automated ipa-replica-manage del tests - `commit `__ + `commit `__ - tests: Automated clean-ruv subcommand tests - `commit `__ + `commit `__ `#6451 `__ - Reverted the essertion for replica uninstall returncode - `commit `__ + `commit `__ `#6401 `__ - Test: disabled wrong client domain tests for domlevel 0 - `commit `__ + `commit `__ `#6382 `__ - tests: Fixed code styling in caless tests to make pep8 happy - `commit `__ + `commit `__ - tests: Reverted erroneous asserts in 4 tests - `commit `__ + `commit `__ - tests: fixed certinstall method - `commit `__ + `commit `__ - tests: fixed super method invocation - `commit `__ + `commit `__ - tests: added verbose assert to test_service_disable_doesnt_revoke - `commit `__ + `commit `__ - tests: Standardized replica_preparation in test_no_certs - `commit `__ + `commit `__ - tests: Implemented check for domainlevel before installation verification - `commit `__ + `commit `__ - tests: Fixed Usage of improper certs in ca-less tests - `commit `__ + `commit `__ - tests: fixed expects of incorrect error messages - `commit `__ + `commit `__ - tests: Replaced unused setUp method with install - `commit `__ + `commit `__ - tests: Replaced hardcoded certutil with imported from paths - `commit `__ + `commit `__ - tests: Enabled negative testing for cleaning replication agreements - `commit `__ + `commit `__ - tests: Made unapply_fixes call optional at master uninstallation - `commit `__ + `commit `__ - tests: Updated master and replica installation methods to enable negative testing - `commit `__ + `commit `__ - tests: Added necessary xfails - `commit `__ + `commit `__ - tests: Added necessary getkeytabs calls to fixtures - `commit `__ + `commit `__ - tests: Removed outdated command options test - `commit `__ + `commit `__ - tests: Applied correct teardown methods - `commit `__ + `commit `__ - tests: Fixed incorrect assert in verify_installation - `commit `__ + `commit `__ - tests: Adapted installation methods to utilize methods from tasks - `commit `__ + `commit `__ - tests: Removed call for install method from parent class - `commit `__ + `commit `__ - tests: Added teardown methods for server and replica installation - `commit `__ + `commit `__ - tests: Create a method that cleans all ipa certs - `commit `__ + `commit `__ - tests: Updated ipa server installation stdin text - `commit `__ + `commit `__ - tests: Added generation of missing certs - `commit `__ + `commit `__ - tests: Added basic constraints extension to the CA certs - `commit `__ + `commit `__ - tests: Fixed method failures during second call for the method - `commit `__ + `commit `__ `#5880 `__ - Xfailed a test that fails due to 6250 - `commit `__ + `commit `__ `#6250 `__ - Fixed segment naming in topology tests - `commit `__ + `commit `__ - Xfailed the tests due to a known bug with replica preparation - `commit `__ + `commit `__ `#6274 `__ - Changed addressing to the client hosts to be replicas - `commit `__ + `commit `__ `#6287 `__ - Several fixes in replica_promotion tests - `commit `__ + `commit `__ `#6301 `__ - Removed incorrect check for returncode - `commit `__ + `commit `__ `#6300 `__ @@ -2625,7 +2625,7 @@ Petr Čech (1) ---------------------------------------------------------------------------------------------- - ipatests: nested netgroups (intg) - `commit `__ + `commit `__ `#6439 `__ @@ -2634,388 +2634,388 @@ Petr Spacek (126) ---------------------------------------------------------------------------------------------- - ipa_generate_password algorithm change - `commit `__ + `commit `__ `#5695 `__ - Remove named-pkcs11 workarounds from DNSSEC tests. - `commit `__ + `commit `__ `#5348 `__ - Build: forbid builds in working directories containing white spaces - `commit `__ + `commit `__ `#6537 `__ - Build: always use Pylint from Python version used for rest of the build - `commit `__ + `commit `__ `#157 `__ - Build: specify BuildRequires for Python 3 pylint - `commit `__ + `commit `__ `#157 `__ - Build: makerpms.sh generates Python 2 & 3 packages at the same time - `commit `__ + `commit `__ `#157 `__ - Accept server host names resolvable only using /etc/hosts - `commit `__ + `commit `__ `#6518 `__ - Build: properly integrate ipa.pot into build system tests - `commit `__ + `commit `__ `#6498 `__ - Build: properly integrate ipasetup.py into build system - `commit `__ + `commit `__ `#6498 `__ - Build: properly integrate version.py into build system - `commit `__ + `commit `__ `#6498 `__ - Build: properly integrate loader.js into build system - `commit `__ + `commit `__ `#6498 `__ - Build: properly integrate freeipa.spec.in into build system - `commit `__ + `commit `__ `#6498 `__ - Build: properly integrate ipa-version.h.in into build system - `commit `__ + `commit `__ `#6498 `__ - Build: workaround bug while calling parallel make from rpmbuild - `commit `__ + `commit `__ `#6418 `__ - Build: remove ipa.pot from Git as it can be re-generated at any time - `commit `__ + `commit `__ `#6418 `__ - Build: integrate translation system tests again - `commit `__ + `commit `__ `#6418 `__ - Build: automatically generate list of files to be translated in configure - `commit `__ + `commit `__ `#6418 `__ - Build: clean in po/ removes \*~ files as well - `commit `__ + `commit `__ `#6418 `__ - Build: support strip-po target for translations - `commit `__ + `commit `__ `#6418 `__ - Build: use standard infrastructure for translations - `commit `__ + `commit `__ `#6418 `__ - Build: fix path in ipa-ods-exporter.socket unit file - `commit `__ + `commit `__ `#6495 `__ - Build: fix file dependencies for make-css.sh - `commit `__ + `commit `__ `#6418 `__ - Build: update makerpms.sh to use same paths as rpmbuild - `commit `__ + `commit `__ `#6418 `__ - Build: remove incorrect use of MAINTAINERCLEANFILES - `commit `__ + `commit `__ `#6418 `__ - Build: enable silent build in makerpms.sh - `commit `__ + `commit `__ `#6418 `__ - Build: support --enable-silent-rules for Python packages - `commit `__ + `commit `__ `#6418 `__ - Build: workaround bug 1005235 related to Python paths in auto-generated Requires - `commit `__ + `commit `__ `#6418 `__ - Build: document what should be in %install section of SPEC file - `commit `__ + `commit `__ `#6418 `__ - Build: move web UI file installation from SPEC to Makefile.am - `commit `__ + `commit `__ `#6418 `__ - Build: move server directory handling from SPEC to Makefile.am - `commit `__ + `commit `__ `#6418 `__ - Build: move client directory handling from SPEC to Makefile.am - `commit `__ + `commit `__ `#6418 `__ - Update man page for ipa-adtrust-install by removing --no-msdcs option - `commit `__ + `commit `__ `#6480 `__ - Build: pass down %{release} from SPEC to configure - `commit `__ + `commit `__ `#6418 `__ - Build: update IPA_VERSION_IS_GIT_SNAPSHOT to comply with PEP440 - `commit `__ + `commit `__ `#6418 `__ - Build: add make srpms target - `commit `__ + `commit `__ `#6418 `__ - Build: IPA_VERSION_IS_GIT_SNAPSHOT re-generates version number on RPM build - `commit `__ + `commit `__ `#6418 `__ - Build: use POSIX 1003.1-1988 (ustar) file format for tar archives - `commit `__ + `commit `__ `#6418 `__ - Build: IPA_VERSION_IS_GIT_SNAPSHOT checks if source directory is Git repo - `commit `__ + `commit `__ `#6418 `__ - Build: remove unused and redundant code from configure.ac and po/Makefile.in - `commit `__ + `commit `__ `#6418 `__ - Build: fix make clean to remove build artifacts from top-level directory - `commit `__ + `commit `__ `#6418 `__ - Build: fix make clean for web UI - `commit `__ + `commit `__ `#6418 `__ - Build: add polint target for i18n tests - `commit `__ + `commit `__ `#6418 `__ - Build: add makeapi lint target - `commit `__ + `commit `__ `#6418 `__ - Build: add makeaci lint target - `commit `__ + `commit `__ `#6418 `__ - Build: add JS lint target - `commit `__ + `commit `__ `#6418 `__ - Build: add Python lint target - `commit `__ + `commit `__ `#6418 `__ - Build: remove obsolete instructions about BuildRequires from BUILD.txt - `commit `__ + `commit `__ `#6418 `__ - Build: add make rpms target and convenience script makerpms.sh - `commit `__ + `commit `__ `#6418 `__ - Build: fix KDC proxy installation and remove unused kdcproxy.conf - `commit `__ + `commit `__ `#6418 `__ - Build: remove unused dirs /var/cache/ipa/{sysupgrade,sysrestore} from SPEC - `commit `__ + `commit `__ `#6418 `__ - Build: do not compress manual pages at install time - `commit `__ + `commit `__ `#6418 `__ - Build: distribute doc directory - `commit `__ + `commit `__ `#6418 `__ - Build: create /var/run directories at install time - `commit `__ + `commit `__ `#6418 `__ - Build: integrate init and init/systemd into build system - `commit `__ + `commit `__ `#6418 `__ - Build: remove init/SystemV directory - `commit `__ + `commit `__ `#6418 `__ - Build: integrate contrib directory into build system - `commit `__ + `commit `__ `#6418 `__ - Build: remove ancient checks/check-ra.py - `commit `__ + `commit `__ `#6418 `__ - Build: integrate daemons/dnssec into build system - `commit `__ + `commit `__ `#6418 `__ - Build: fix distribution of daemons/ipa-slapi-plugins/topology files - `commit `__ + `commit `__ `#6418 `__ - Build: fix distribution of daemons/ipa-slapi-plugins/ipa-winsync files - `commit `__ + `commit `__ `#6418 `__ - Build: fix distribution of daemons/ipa-slapi-plugins/ipa-sidgen files - `commit `__ + `commit `__ `#6418 `__ - Build: fix distribution of daemons/ipa-slapi-plugins/ipa-pwd-extop files - `commit `__ + `commit `__ `#6418 `__ - Build: fix distribution of daemons/ipa-slapi-plugins/ipa-otp-lasttoken files - `commit `__ + `commit `__ `#6418 `__ - Build: fix distribution of daemons/ipa-slapi-plugins/ipa-otp-counter files - `commit `__ + `commit `__ `#6418 `__ - Build: fix distribution of daemons/ipa-slapi-plugins/ipa-exdom-extop files - `commit `__ + `commit `__ `#6418 `__ - Build: fix distribution of daemons/ipa-slapi-plugins/ipa-cldap files - `commit `__ + `commit `__ `#6418 `__ - Build: fix distribution of ipa-slapi-plugins/common files - `commit `__ + `commit `__ `#6418 `__ - Build: fix distribution of daemon/ipa-kdb files - `commit `__ + `commit `__ `#6418 `__ - Build: fix distribution of client header file - `commit `__ + `commit `__ `#6418 `__ - Build: fix distribution of asn1/asn1c files - `commit `__ + `commit `__ `#6418 `__ - Build: fix distribution of install/REDME.schema file - `commit `__ + `commit `__ `#6418 `__ - Build: fix distribution of oddjob files - `commit `__ + `commit `__ `#6418 `__ - Build: Remove spurious EXTRA_DIST from install/share/Makefile.am - `commit `__ + `commit `__ `#6418 `__ - Build: cleanup unused LDIFs from install/share - `commit `__ + `commit `__ `#6418 `__ - Build: fix distribution of libexec scripts - `commit `__ + `commit `__ `#6418 `__ - Build: fix distribution and installation of update LDIFs - `commit `__ + `commit `__ `#6418 `__ - Web UI: Remove offline version of Web UI - `commit `__ + `commit `__ `#6447 `__ - Build: fix distribution of static files for web UI - `commit `__ + `commit `__ `#6418 `__ - Build: stop build when a step in web UI build fails - `commit `__ + `commit `__ `#6418 `__ - Build: fix distribution and installation of static files in top-level directory - `commit `__ + `commit `__ `#6418 `__ - Build: fix man page distribution - `commit `__ + `commit `__ `#6418 `__ - Build: fix distdir target for translations - `commit `__ + `commit `__ `#6418 `__ - Build: rename project from ipa-server to freeipa - `commit `__ + `commit `__ `#6418 `__ - Build: remove non-existing README files from Makefile.am - `commit `__ + `commit `__ `#6418 `__ - Build: fix Makefile.am files to separate source and build directories - `commit `__ + `commit `__ `#6418 `__ - Build: respect --prefix for systemdsystemunitdir - `commit `__ + `commit `__ `#6418 `__ - Build: fix make install in asn1 subdirectory - `commit `__ + `commit `__ `#6418 `__ - Build: fix ipaplatform detection for out-of-tree builds - `commit `__ + `commit `__ `#6418 `__ - Build: Makefiles for Python packages - `commit `__ + `commit `__ `#6418 `__ - Build: fix module name in ipaserver/setup.py - `commit `__ + `commit `__ `#6418 `__ - Build: replace hand-made Makefile with one generated by Automake - `commit `__ + `commit `__ `#6418 `__ - Build: move version handling from Makefile to configure - `commit `__ + `commit `__ `#6418 `__ - Docs: update docs about ipaplatform to match reality - `commit `__ + `commit `__ `#6418 `__ - Build: replace ipaplatform magic with symlinks generated by configure - `commit `__ + `commit `__ `#6418 `__ - Build docs: update platform selection instructions - `commit `__ + `commit `__ `#6418 `__ - Build: split out egg-info Makefile target from version-update target - `commit `__ + `commit `__ `#6418 `__ - Build: split API/ACI checks into separate Makefile targets - `commit `__ + `commit `__ `#6418 `__ - Build: use default error handling for PKG_CHECK_MODULES - `commit `__ + `commit `__ `#6418 `__ - Build: use libutil convenience library for client - `commit `__ + `commit `__ `#6418 `__ - Build: cleanup INI library detection - `commit `__ + `commit `__ `#6418 `__ - Build: modernize XMLRPC-client library detection - `commit `__ + `commit `__ `#6418 `__ - Build: modernize CURL library detection - `commit `__ + `commit `__ `#6418 `__ - Build: modernize SASL library detection - `commit `__ + `commit `__ `#6418 `__ - Build: modernize POPT library detection - `commit `__ + `commit `__ `#6418 `__ - Build: merge client/configure.ac into top-level configure.ac - `commit `__ + `commit `__ `#6418 `__ - Build: remove Transifex support - `commit `__ + `commit `__ `#6418 `__ - Build: move translations from install/po/ to top-level po/ - `commit `__ + `commit `__ `#6418 `__ - Build: merge install/configure.ac into top-level configure.ac - `commit `__ + `commit `__ `#6418 `__ - Build: merge ipatests/man/configure.ac to top-level configure.ac - `commit `__ + `commit `__ `#6418 `__ - Build: merge asn1/configure.ac to top-level configure.ac - `commit `__ + `commit `__ `#6418 `__ - Build: transform util directory to libutil convenience library - `commit `__ + `commit `__ `#6418 `__ - Build: promote daemons/configure.ac to top-level configure.ac - `commit `__ + `commit `__ `#6418 `__ - Build: adjust include paths in daemons/ipa-kdb/tests/ipa_kdb_tests.c - `commit `__ + `commit `__ `#6418 `__ - Build: pass down LIBDIR definition from RPM SPEC to Makefile - `commit `__ + `commit `__ `#6418 `__ - Build: remove deprecated AC_STDC_HEADERS macro - `commit `__ + `commit `__ - Build: require Python >= 2.7 - `commit `__ + `commit `__ - Build: remove traces of mozldap library - `commit `__ + `commit `__ - Build: modernize crypto library detection - `commit `__ + `commit `__ - Build: modernize UUID library detection - `commit `__ + `commit `__ - Build: modernize Kerberos library detection - `commit `__ + `commit `__ - Build: add missing KRB5_LIBS to daemons/ipa-otpd - `commit `__ + `commit `__ - Tests: print what was expected from callables in xmlrpc_tests - `commit `__ + `commit `__ - DNS: Improve field descriptions for SRV records - `commit `__ + `commit `__ - DNS: Support URI resource record type - `commit `__ + `commit `__ `#6344 `__ - Fix compatibility with python-dns 1.15.0 - `commit `__ + `commit `__ `#6390 `__ - Raise errors from service.py:_ldap_mod() by default - `commit `__ + `commit `__ @@ -3024,19 +3024,19 @@ Petr Vobornik (6) - permissions: add permissions for read and mod of external group members - `commit `__ + `commit `__ `#5504 `__ - webui: do not warn about CAs if there is only one master - `commit `__ + `commit `__ `#6598 `__ - webui: fixes normalization of value in attributes widget - `commit `__ + `commit `__ - Change README to use Markdown - `commit `__ + `commit `__ - Raise errors.EnvironmentError if IPA_CONFDIR var is incorrectly used - `commit `__ + `commit `__ - replicainstall: log ACI and LDAP errors in promotion check - `commit `__ + `commit `__ @@ -3044,199 +3044,199 @@ Pavel Vomacka (69) ---------------------------------------------------------------------------------------------- - Remove allow_constrained_delegation from gssproxy.conf - `commit `__ + `commit `__ `#6225 `__ - WebUI: Add support for management of user short name resolution - `commit `__ + `commit `__ `#6372 `__ - WebUI: add link to login page which for login using certificate - `commit `__ + `commit `__ `#6225 `__ - Support certificate login after installation and upgrade - `commit `__ + `commit `__ `#6225 `__ - TESTS WebUI: Vaults management - `commit `__ + `commit `__ `#5426 `__ - TESTS: Add support for sidebar with facets - `commit `__ + `commit `__ `#5426 `__ - TESTS: Add support for KRA in ui_driver - `commit `__ + `commit `__ `#5426 `__ - WebUI: add vault management - `commit `__ + `commit `__ `#5426 `__ - WebUI: allow to show rows with same pkey in tables - `commit `__ + `commit `__ `#5426 `__ - WebUI: search facet's default actions might be overriden - `commit `__ + `commit `__ `#5426 `__ - Add possibility to hide only one tab in sidebar - `commit `__ + `commit `__ `#5426 `__ - Possibility to set list of table attributes which will be added to \_del command - `commit `__ + `commit `__ `#5426 `__ - Extend \_show command after \_find command in table facets - `commit `__ + `commit `__ `#5426 `__ - Add possibility to pass url parameter to update command of details page - `commit `__ + `commit `__ `#5426 `__ - Add property which allows refresh command to use url value - `commit `__ + `commit `__ `#5426 `__ - Added optional option in refreshing after modifying association table - `commit `__ + `commit `__ `#5426 `__ - Possibility to skip checking writable according to metadata - `commit `__ + `commit `__ `#5426 `__ - Allow to set another other_entity name - `commit `__ + `commit `__ `#5426 `__ - Additional option to add and del operations can be set - `commit `__ + `commit `__ `#5426 `__ - WebUI: Add cermapmatch module - `commit `__ + `commit `__ `#6601 `__ - WebUI: Add Adapter for certmap_match result table - `commit `__ + `commit `__ `#6601 `__ - WebUI: Possibility to choose object when API call returns list of objects - `commit `__ + `commit `__ `#6601 `__ - WebUI: Add possibility to turn of autoload when details.load is called - `commit `__ + `commit `__ `#6601 `__ - WebUI: don't change casing of Auth Indicators values - `commit `__ + `commit `__ `#6308 `__ - WebUI: Allow disabling lowering text in custom_checkbox_widget - `commit `__ + `commit `__ `#6308 `__ - Add support for custom table pagination size - `commit `__ + `commit `__ `#5742 `__ - Make singleton from config module - `commit `__ + `commit `__ `#5742 `__ - Add javascript integer validator - `commit `__ + `commit `__ `#5742 `__ - WebUI: Add certmap module - `commit `__ + `commit `__ `#6601 `__ - WebUI: Add Custom command multivalued adder dialog - `commit `__ + `commit `__ `#6601 `__ - WebUI: Create non editable row widget for mutlivalued widget - `commit `__ + `commit `__ `#6601 `__ - WebUI: Add possibility to set field always writable - `commit `__ + `commit `__ `#6601 `__ - WebUI: Change structure of Identity submenu - `commit `__ + `commit `__ `#6717 `__ - WebUI: add sizelimit:0 to cert-find - `commit `__ + `commit `__ `#6712 `__ - WebUI: fix incorrect behavior of ESC button on combobox - `commit `__ + `commit `__ `#6388 `__ - WebUI: add default on_cancel function in adder_dialog - `commit `__ + `commit `__ `#6388 `__ - Coverity: removed useless semicolon which ends statement earlier - `commit `__ + `commit `__ - Coverity: Fix possibility of access to attribute of undefined - `commit `__ + `commit `__ - Change activity text while loading metadata - `commit `__ + `commit `__ `#6144 `__ - Refactoring of rpc module - `commit `__ + `commit `__ `#6144 `__ - WebUI: update Patternfly and Bootstrap - `commit `__ + `commit `__ `#6394 `__ - WebUI: Hide incorrectly shown buttons on hosts tab in ID Views - `commit `__ + `commit `__ `#6546 `__ - Lowered the version of gettext - `commit `__ + `commit `__ `#6418 `__ - Add python-pyasn1-modules into dependencies - `commit `__ + `commit `__ `#6398 `__ - Adjustments for setup requirements v2 - `commit `__ + `commit `__ `#6468 `__ - TESTS: Update group type name - `commit `__ + `commit `__ `#6334 `__ - Coverity - null pointer dereference - `commit `__ + `commit `__ - Coverity - accessing attribute of variable which can point to null - `commit `__ + `commit `__ - Coverity - opens dialog which might not be created - `commit `__ + `commit `__ - Coverity - iterating over variable which could be null - `commit `__ + `commit `__ - Coverity - null pointer dereference - `commit `__ + `commit `__ - Coverity - true branch can't be executed - `commit `__ + `commit `__ - Coverity - true branch can't be executed - `commit `__ + `commit `__ - Coverity - removed dead code - `commit `__ + `commit `__ - Coverity - Accesing attribute of null - `commit `__ + `commit `__ - Coverity - identical code for different branches - `commit `__ + `commit `__ - Coverity - not initialized variable - `commit `__ + `commit `__ - Coverity - null pointer exception - `commit `__ + `commit `__ - Coverity - null pointer exception - `commit `__ + `commit `__ - WebUI: services without canonical name are shown correctly - `commit `__ + `commit `__ `#6397 `__ - WebUI: fix API Browser menu label - `commit `__ + `commit `__ `#6384 `__ - Add tooltip to all fields in DNS record adder dialog - `commit `__ + `commit `__ - WebUI: hide buttons in certificate widget according to acl - `commit `__ + `commit `__ `#6341 `__ - WebUI: Change group name from 'normal' to 'Non-POSIX' - `commit `__ + `commit `__ `#6334 `__ - WebUI: Add handling for HTTP error 404 - `commit `__ + `commit `__ `#4821 `__ - Add 'Restore' option to action dropdown menu - `commit `__ + `commit `__ `#5818 `__ - WebUI add support for sub-CAs while revoking certificates - `commit `__ + `commit `__ `#6216 `__ - WebUI: Fix showing certificates issued by sub-CA - `commit `__ + `commit `__ `#6238 `__ - Add support for additional options taken from table facet - `commit `__ + `commit `__ `#6238 `__ @@ -3245,7 +3245,7 @@ Gabe (1) ---------------------------------------------------------------------------------------------- - Allow nsaccountlock to be searched in user-find command - `commit `__ + `commit `__ @@ -3253,94 +3253,94 @@ Simo Sorce (31) ---------------------------------------------------------------------------------------------- - Store session cookie in a ccache option - `commit `__ + `commit `__ `#6661 `__ - Add support for searching policies in cn=accounts - `commit `__ + `commit `__ `#6568 `__ - Add code to retrieve results from multiple bases - `commit `__ + `commit `__ - Use GSS-SPNEGO if connecting locally - `commit `__ + `commit `__ `#6656 `__ - Limit sessions to 30 minutes by default - `commit `__ + `commit `__ `#5959 `__ - Remove non-sensical kdestroy on https stop - `commit `__ + `commit `__ `#6673 `__ - Fix session logout - `commit `__ + `commit `__ `#6685 `__ - Deduplicate session cookies in headers - `commit `__ + `commit `__ `#6676 `__ - Change session logout to kill only the cookie - `commit `__ + `commit `__ `#6682 `__ - Insure removal of session on identity change - `commit `__ + `commit `__ `#6543 `__ - Explicitly pass down ccache names for connections - `commit `__ + `commit `__ `#6543 `__ - Allow rpc callers to pass ccache and service names - `commit `__ + `commit `__ `#6543 `__ - Fix uninstall stopping ipa.service - `commit `__ + `commit `__ `#5959 `__ - Rationalize creation of RA and HTTPD NSS databases - `commit `__ + `commit `__ `#5959 `__ - Add a new user to run the framework code - `commit `__ + `commit `__ `#5959 `__ - Always use /etc/ipa/ca.crt as CA cert file - `commit `__ + `commit `__ `#5959 `__ - Simplify NSSDatabase password file handling - `commit `__ + `commit `__ `#5959 `__ - Separate RA cert store from the HTTP cert store - `commit `__ + `commit `__ `#5959 `__ - Configure HTTPD to work via Gss-Proxy - `commit `__ + `commit `__ `#4189 `__, `#5959 `__ - Use Anonymous user to obtain FAST armor ccache - `commit `__ + `commit `__ `#5959 `__ - Drop use of kinit_as_http from trust code - `commit `__ + `commit `__ `#5959 `__ - Generate tmpfiles config at install time - `commit `__ + `commit `__ `#5959 `__ - Change session handling - `commit `__ + `commit `__ `#5959 `__ - Use the tar Posix option for tarballs - `commit `__ + `commit `__ `#6418 `__ - Add compatibility code to retrieve headers - `commit `__ + `commit `__ `#6558 `__ - Configure Anonymous PKINIT on server install - `commit `__ + `commit `__ `#5678 `__ - Properly handle multiple cookies in rpc lib. - `commit `__ + `commit `__ - Properly handle multiple cookies in rpcclient - `commit `__ + `commit `__ - Support DAL version 5 and version 6 - `commit `__ + `commit `__ `#6466 `__ - Fix install scripts debugging - `commit `__ + `commit `__ - Fix error message encoding - `commit `__ + `commit `__ @@ -3348,237 +3348,237 @@ Stanislav Laznicka (78) ---------------------------------------------------------------------------------------------- - Remove pkinit from ipa-replica-prepare - `commit `__ + `commit `__ `#6759 `__ - Backup KDC certificate pair - `commit `__ + `commit `__ `#6748 `__ - Don't fail more if cert req/cert creation failed - `commit `__ + `commit `__ `#6755 `__ - Fix ipa-replica-prepare server-cert creation - `commit `__ + `commit `__ `#6755 `__ - Don't allow standalone KRA uninstalls - `commit `__ + `commit `__ `#6538 `__ - Add message about last KRA to WebUI Topology view - `commit `__ + `commit `__ `#6538 `__ - Add check to prevent removal of last KRA - `commit `__ + `commit `__ `#6538 `__ - Don't use weak ciphers for client HTTPS connections - `commit `__ + `commit `__ `#6730 `__ - We don't offer no quickies - `commit `__ + `commit `__ - Fix cookie with Max-Age processing - `commit `__ + `commit `__ `#6718 `__ - Fix CA-less upgrade - `commit `__ + `commit `__ `#5695 `__ - Fix replica with --setup-ca issues - `commit `__ + `commit `__ `#5695 `__ - Moving ipaCert from HTTPD_ALIAS_DIR - `commit `__ + `commit `__ `#5695 `__, `#6680 `__ - Added a PEMFileHandler for Custodia store - `commit `__ + `commit `__ `#5695 `__ - Refactor certmonger for OpenSSL certificates - `commit `__ + `commit `__ `#5695 `__ - Workaround for certmonger's "Subject" representations - `commit `__ + `commit `__ `#5695 `__ - Remove ipapython.nsslib as it is not used anymore - `commit `__ + `commit `__ `#5695 `__ - Remove NSSConnection from otptoken plugin - `commit `__ + `commit `__ `#5695 `__ - Remove pkcs12 handling functions from CertDB - `commit `__ + `commit `__ `#5695 `__ - Remove NSSConnection from Dogtag - `commit `__ + `commit `__ `#5695 `__ - Move publishing of CA cert to cainstance creation on master - `commit `__ + `commit `__ `#5695 `__ - Don't run kra.configure_instance if not necessary - `commit `__ + `commit `__ `#5695 `__ - Move RA agent certificate file export to a different location - `commit `__ + `commit `__ `#5695 `__, `#6392 `__ - Remove NSSConnection from the Python RPC module - `commit `__ + `commit `__ `#5695 `__ - Remove md5_fingerprints from IPA - `commit `__ + `commit `__ `#5695 `__ - Remove DM password files after successfull pkispawn run - `commit `__ + `commit `__ `#5695 `__ - Remove ra_db argument from CAInstance init - `commit `__ + `commit `__ `#5695 `__ - Fix ipa-server-upgrade - `commit `__ + `commit `__ `#5959 `__ - Use newer Certificate.serial_number in krainstance.py - `commit `__ + `commit `__ - Fix error in ca_cert_files validator - `commit `__ + `commit `__ `#6694 `__ - Don't prepend option names with additional '--' - `commit `__ + `commit `__ `#6392 `__ - Bump python-cryptography version in ipasetup.py.in - `commit `__ + `commit `__ `#6631 `__ - custodiainstance: don't use IPA-specific CertDB - `commit `__ + `commit `__ - Add password to certutil calls in NSSDatabase - `commit `__ + `commit `__ `#5695 `__ - Explicitly remove support of SSLv2/3 - `commit `__ + `commit `__ `#6607 `__ - Add FIPS-token password of HTTPD NSS database - `commit `__ + `commit `__ `#5695 `__ - Bump required python-cryptography version - `commit `__ + `commit `__ `#6631 `__ - Remove is_fips_enabled checks in installers and ipactl - `commit `__ + `commit `__ `#5695 `__ - Generate sha256 ssh pubkey fingerprints for hosts - `commit `__ + `commit `__ `#5695 `__ - Unify password generation across FreeIPA - `commit `__ + `commit `__ `#5695 `__ - Clarify meaning of --domain and --realm in installers - `commit `__ + `commit `__ `#6574 `__ - replicainstall: give correct error message on DL mismatch - `commit `__ + `commit `__ `#6510 `__ - Fix permission-find with sizelimit set - `commit `__ + `commit `__ `#5640 `__ - Generalize filter generation in LDAPSearch - `commit `__ + `commit `__ `#5640 `__ - permission-find: fix a sizelimit off-by-one bug - `commit `__ + `commit `__ `#5640 `__ - fix permission_find fail on low search size limit - `commit `__ + `commit `__ `#5640 `__ - Make get_entries() not ignore its limit arguments - `commit `__ + `commit `__ `#5640 `__ - Do not log DM password in ca/kra installation logs - `commit `__ + `commit `__ `#6461 `__ - Fix CA replica install on DL1 - `commit `__ + `commit `__ `#6392 `__ - Offer more general way to check domain level in replicainstall - `commit `__ + `commit `__ `#6392 `__ - Use same means of checking replication agreements on both DLs - `commit `__ + `commit `__ `#6392 `__ - replicainstall: move common checks to common_check() - `commit `__ + `commit `__ `#6392 `__ - Take advantage of the ca/kra code cleanup in replica installation - `commit `__ + `commit `__ `#6392 `__ - Use updated CA certs in replica installation - `commit `__ + `commit `__ `#6392 `__ - Use os.path.join instead of concatenation - `commit `__ + `commit `__ `#6392 `__ - Remove redundant CA cert file existance check - `commit `__ + `commit `__ `#6392 `__ - Use host keytab to connect to remote server on DL0 - `commit `__ + `commit `__ `#6392 `__ - Split install_http_certs() into two functions - `commit `__ + `commit `__ `#6392 `__ - First step of merging replica installation of both DLs - `commit `__ + `commit `__ `#6392 `__ - Properly bootstrap replica promotion api - `commit `__ + `commit `__ `#6392 `__ - Move the pki-tomcat restart to cainstance creation - `commit `__ + `commit `__ `#6392 `__ - Move httpd restart to DNS installation - `commit `__ + `commit `__ `#6392 `__ - Import just IPAChangeConf instead of the whole module - `commit `__ + `commit `__ `#6392 `__ - Added file permissions option to IPAChangeConf.newConf() - `commit `__ + `commit `__ `#6392 `__ - Fix to ipachangeconf docstrings - `commit `__ + `commit `__ `#6392 `__ - replicainstall: Unify default.conf file creation - `commit `__ + `commit `__ `#6392 `__ - Replaced EMPTY_LINE constant with a function call - `commit `__ + `commit `__ `#6392 `__ - client: Making the configure functions more readable - `commit `__ + `commit `__ `#6392 `__ - Moved update of DNA plugin among update plugins - `commit `__ + `commit `__ `#6392 `__ - Move ds.replica_populate to an update plugin - `commit `__ + `commit `__ `#6392 `__ - Remove redundant dsinstance restart - `commit `__ + `commit `__ `#6392 `__ - Fix missing file that fails DL1 replica installation - `commit `__ + `commit `__ `#6393 `__ - Make httpd publish its CA certificate on DL1 - `commit `__ + `commit `__ `#6393 `__ - Make installer quit more nicely on external CA installation - `commit `__ + `commit `__ `#6230 `__ - Fix test_util.test_assert_deepequal test - `commit `__ + `commit `__ `#6373 `__ - Pretty-print structures in assert_deepequal - `commit `__ + `commit `__ `#6212 `__ - Remove update_from_dict() method - `commit `__ + `commit `__ `#6311 `__ - Updated help/man information about hostname - `commit `__ + `commit `__ `#5754 `__ @@ -3588,7 +3588,7 @@ Thierry Bordaz (1) - IPA Allows Password Reuse with History value defined when admin resets the password. - `commit `__ + `commit `__ `#6402 `__ @@ -3597,21 +3597,21 @@ Timo Aaltonen (8) ---------------------------------------------------------------------------------------------- - ipaplatform/debian/paths: Add some missing values. - `commit `__ + `commit `__ - ipaplatform/debian/paths: Rename IPA_KEYTAB to OLD_IPA_KEYTAB. - `commit `__ + `commit `__ - ipaplatform/debian/paths: Add IPA_HTTPD_KDCPROXY. - `commit `__ + `commit `__ - ipaplatform/debian/services: Fix is_running arguments. - `commit `__ + `commit `__ - ipaplatform: Add Debian platform module. - `commit `__ + `commit `__ - client, platform: Use paths.SSH\* instead of get_config_dir(). - `commit `__ + `commit `__ - Move ipa-otpd to $libexecdir/ipa - `commit `__ + `commit `__ - Purge obsolete firefox extension - `commit `__ + `commit `__ @@ -3619,201 +3619,201 @@ Tomas Krizek (68) ---------------------------------------------------------------------------------------------- - installer: update time estimates - `commit `__ + `commit `__ `#6596 `__ - server install: require IPv6 stack to be enabled - `commit `__ + `commit `__ `#6608 `__ - Add SHA256 fingerprints for certs - `commit `__ + `commit `__ `#6701 `__ - man: update ipa-cacert-manage - `commit `__ + `commit `__ `#6648 `__ - test_config: fix fips_mode key in Env - `commit `__ + `commit `__ `#5695 `__ - Env \__setitem__: replace assert with exception - `commit `__ + `commit `__ - FIPS: perform replica installation check - `commit `__ + `commit `__ `#5695 `__ - replicainstall: add context manager for rpc client - `commit `__ + `commit `__ - check_remote_version: update exception and docstring - `commit `__ + `commit `__ - test_config: fix tests for env.fips_mode - `commit `__ + `commit `__ `#5695 `__ - Add fips_mode variable to env - `commit `__ + `commit `__ `#5695 `__ - Bump required version of bind-dyndb-ldap to 11.0-2 - `commit `__ + `commit `__ `#6565 `__ - bindinstance: fix named.conf parsing regexs - `commit `__ + `commit `__ `#6565 `__ - PEP8: fix line length for regexs in bindinstance - `commit `__ + `commit `__ - bump required version of BIND, bind-dyndb-ldap - `commit `__ + `commit `__ `#6565 `__ - named.conf template: update API for bind 9.11 - `commit `__ + `commit `__ `#6565 `__ - Remove obsolete serial_autoincrement from named.conf parsing - `commit `__ + `commit `__ `#6565 `__ - certdb: remove unused valid_months property - `commit `__ + `commit `__ - certdb: remove unused keysize property - `commit `__ + `commit `__ - Fix coverity issue - `commit `__ + `commit `__ - ipautil: check for open ports on all resolved IPs - `commit `__ + `commit `__ `#6522 `__ - replica-conncheck: improve message logging - `commit `__ + `commit `__ `#6497 `__ - replica-conncheck: improve error message during replicainstall - `commit `__ + `commit `__ `#6497 `__ - ipa-replica-conncheck: fix race condition - `commit `__ + `commit `__ `#6487 `__ - ipa-replica-conncheck: do not close listening ports until required - `commit `__ + `commit `__ `#6487 `__ - upgrade: ldap conn management - `commit `__ + `commit `__ `#6461 `__ - services: replace admin_conn with api.Backend.ldap2 - `commit `__ + `commit `__ `#6461 `__ - upgrade: do not explicitly set principal for services - `commit `__ + `commit `__ `#6500 `__ - Build: ignore rpmbuild for lint target - `commit `__ + `commit `__ `#6418 `__ - cainstance: use correct certificate for replica install check - `commit `__ + `commit `__ `#6461 `__ - dns: check if container exists using ldapi - `commit `__ + `commit `__ `#6461 `__ - ipaldap: remove do_bind from LDAPClient - `commit `__ + `commit `__ `#6461 `__ - gitignore: ignore tar ball - `commit `__ + `commit `__ `#6418 `__ - libexec scripts: ldap conn management - `commit `__ + `commit `__ `#6461 `__ - ldap2: modify arguments for create_connection - `commit `__ + `commit `__ `#6461 `__ - replicainstall: use ldap_uri in ReplicationManager - `commit `__ + `commit `__ `#6461 `__ - replicainstall: correct hostname in ReplicationManager - `commit `__ + `commit `__ `#6461 `__ - install tools: ldap conn management - `commit `__ + `commit `__ `#6461 `__ - ldap2: change default bind_dn - `commit `__ + `commit `__ `#6461 `__ - ipa-adtrust-install: ldap conn management - `commit `__ + `commit `__ `#6461 `__ - install: remove adhoc dis/connect from services - `commit `__ + `commit `__ `#6461 `__ - ldapupdate: use ldapi in LDAPUpdate - `commit `__ + `commit `__ `#6461 `__ - replicainstall: properly close adhoc connection in promote - `commit `__ + `commit `__ `#6461 `__ - install: ldap conn management - `commit `__ + `commit `__ `#6461 `__ - install: remove adhoc api.Backend.ldap2 (dis)connect - `commit `__ + `commit `__ `#6461 `__ - install: add restart_dirsrv for directory server restarts - `commit `__ + `commit `__ `#6461 `__ - upgradeinstance: ldap conn management - `commit `__ + `commit `__ `#6461 `__ - dsinstance: conn management - `commit `__ + `commit `__ `#6461 `__ - ldap2: change default time/size limit - `commit `__ + `commit `__ `#6461 `__ - cainstall: add dm_password to CA installation - `commit `__ + `commit `__ `#6461 `__ - replicainstall: set ldapi uri in replica promotion - `commit `__ + `commit `__ `#6461 `__ - dsinstance: enable ldapi and autobind in ds - `commit `__ + `commit `__ `#6461 `__ - install: remove dirman_pw from services - `commit `__ + `commit `__ `#6461 `__ - ipaldap: merge IPAdmin to LDAPClient - `commit `__ + `commit `__ `#6461 `__ - ipaldap: merge gssapi_bind to LDAPClient - `commit `__ + `commit `__ `#6461 `__ - ipaldap: merge external_bind into LDAPClient - `commit `__ + `commit `__ `#6461 `__ - ipaldap: merge simple_bind into LDAPClient - `commit `__ + `commit `__ `#6461 `__ - ipaldap: remove wait/timeout during binds - `commit `__ + `commit `__ `#6461 `__ - ipa: check if provided config file exists - `commit `__ + `commit `__ `#6114 `__ - ipa: allow relative paths for config file - `commit `__ + `commit `__ `#6114 `__ - Prompt for forwarder in dnsforwardzone-add - `commit `__ + `commit `__ `#6169 `__ - Update man/help for --server option - `commit `__ + `commit `__ `#6202 `__ - Update ipa-server-install man page for hostname - `commit `__ + `commit `__ `#6330 `__ - Add help info about certificate revocation reasons - `commit `__ + `commit `__ `#6327 `__ - Add log messages for IP checks during client install - `commit `__ + `commit `__ `#6331 `__ - Show error message for invalid IPs in client install - `commit `__ + `commit `__ `#6340 `__ - Keep NSS trust flags of existing certificates - `commit `__ + `commit `__ `#5791 `__ - Don't show error messages in bash completion - `commit `__ + `commit `__ `#6273 `__ @@ -3822,10 +3822,10 @@ Thorsten Scherf (2) ---------------------------------------------------------------------------------------------- - added ssl verification using IPA trust anchor - `commit `__ + `commit `__ `#6686 `__ - added help about default value for --external-ca-type option - `commit `__ + `commit `__ @@ -3833,4 +3833,4 @@ shanyin (1) ---------------------------------------------------------------------------------------------- - fix missing translation string - `commit `__ + `commit `__ diff --git a/src/page/Releases/4.5.1.rst b/src/page/Releases/4.5.1.rst index 9904e7b44..fe4e78d73 100644 --- a/src/page/Releases/4.5.1.rst +++ b/src/page/Releases/4.5.1.rst @@ -276,20 +276,20 @@ Alexander Bokovoy (5) ---------------------------------------------------------------------------------------------- - trust: always use oddjobd helper for fetching trust information - `commit `__ + `commit `__ - ipaserver/dcerpc: unify error processing - `commit `__ + `commit `__ `#6859 `__ - adtrust: make sure that runtime hostname result is consistent with the configuration - `commit `__ + `commit `__ `#6786 `__ - server: make sure we test for sss_nss_getlistbycert - `commit `__ + `commit `__ `#6828 `__ - ldap2: use LDAP whoami operation to retrieve bind DN for current connection - `commit `__ + `commit `__ `#6797 `__ @@ -298,10 +298,10 @@ Abhijeet Kasurde (2) ---------------------------------------------------------------------------------------------- - Hide PKI Client database password in log file - `commit `__ + `commit `__ `#6904 `__ - Hide request_type doc string in cert-request help - `commit `__ + `commit `__ `#5734 `__, `#6494 `__ @@ -311,64 +311,64 @@ Christian Heimes (21) ---------------------------------------------------------------------------------------------- - Correct PyPI package dependencies - `commit `__ + `commit `__ `#6875 `__ - Vault: Explicitly default to 3DES CBC - `commit `__ + `commit `__ `#6899 `__ - Use entry_points for ipa CLI - `commit `__ + `commit `__ `#6653 `__, `#6850 `__ - Skip test_session_storage in ipaclient unittest mode - `commit `__ + `commit `__ - Add make devcheck for developers - `commit `__ + `commit `__ `#6604 `__ - Python 3: Fix session storage - `commit `__ + `commit `__ - Use Custodia 0.3.1 features - `commit `__ + `commit `__ - Simplify KRA transport cert cache - `commit `__ + `commit `__ `#6787 `__ - Constrain wheel package versions - `commit `__ + `commit `__ `#6468 `__ - Move remaining util functions to tasks module - `commit `__ + `commit `__ `#6798 `__ - Ship ipatests.pytest_plugins.integration - `commit `__ + `commit `__ `#6798 `__ - Move function run_repeatedly to tasks module - `commit `__ + `commit `__ `#6798 `__ - Move hosts module to ipatests.pytest_plugins.integration.hosts - `commit `__ + `commit `__ `#6798 `__ - Move tasks module to ipatests.pytest_plugins.integration.tasks - `commit `__ + `commit `__ `#6798 `__ - Move env_config module to ipatests.pytest_plugins.integration.env_config - `commit `__ + `commit `__ `#6798 `__ - Move config module to ipatests.pytest_plugins.integration.config - `commit `__ + `commit `__ `#6798 `__ - Move helper code for integration plugin - `commit `__ + `commit `__ `#6798 `__ - Increase Apache HTTPD's default keep alive timeout - `commit `__ + `commit `__ - Add debug logging for keep-alive - `commit `__ + `commit `__ - Use connection keep-alive - `commit `__ + `commit `__ `#6641 `__ - Add options to run only ipaclient unittests - `commit `__ + `commit `__ `#6517 `__ @@ -378,35 +378,35 @@ David Kupka (10) - ipapython.ipautil.run: Add option to set umask before executing command - `commit `__ + `commit `__ `#6831 `__ - otptoken-add-yubikey: When --digits not provided use default value - `commit `__ + `commit `__ `#6900 `__ - Bump version of ipa.conf file - `commit `__ + `commit `__ `#6860 `__ - Create system users for FreeIPA services during package installation - `commit `__ + `commit `__ `#6743 `__ - WebUI: cert login: Configure name of parameter used to pass username - `commit `__ + `commit `__ `#6860 `__ - httpinstance.disable_system_trust: Don't fail if module 'Root Certs' is not available - `commit `__ + `commit `__ `#6803 `__ - spec file: Bump requires to make Certificate Login in WebUI work - `commit `__ + `commit `__ `#6823 `__ - rpcserver.login_x509: Actually return reply from \__call_\_ method - `commit `__ + `commit `__ `#6819 `__ - Create temporaty directories at the begining of uninstall - `commit `__ + `commit `__ `#6715 `__ - ipapython.ipautil.nolog_replace: Do not replace empty value - `commit `__ + `commit `__ `#6738 `__ @@ -415,7 +415,7 @@ felipe (1) ---------------------------------------------------------------------------------------------- - Fixing replica install: fix ldap connection in domlvl 0 - `commit `__ + `commit `__ `#6549 `__ @@ -424,7 +424,7 @@ Felipe Volpone (1) ---------------------------------------------------------------------------------------------- - Fixing adding authenticator indicators to host - `commit `__ + `commit `__ `#6911 `__ @@ -433,7 +433,7 @@ Fabiano Fidêncio (1) ---------------------------------------------------------------------------------------------- - Allow erasing ipaDomainResolutionOrder attribute - `commit `__ + `commit `__ `#6825 `__ @@ -442,54 +442,54 @@ Florence Blanc-Renaud (16) ---------------------------------------------------------------------------------------------- - ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt - `commit `__ + `commit `__ `#6925 `__ - ipa-kra-install: fix pkispawn setting for pki_security_domain_hostname - `commit `__ + `commit `__ `#6895 `__ - ipa-server-install: fix uninstall - `commit `__ + `commit `__ `#6950 `__ - ipa-kra-install manpage: document domain-level 1 - `commit `__ + `commit `__ `#6922 `__ - ipa-kra-install: fix check_host_keys - `commit `__ + `commit `__ `#6934 `__ - ipa-server-install with external CA: fix pkinit cert issuance - `commit `__ + `commit `__ `#6921 `__ - ipa-client-install: remove extra space in pkinit_anchors definition - `commit `__ + `commit `__ `#6916 `__ - vault: piped input for ipa vault-add fails - `commit `__ + `commit `__ `#6907 `__ - upgrade: adtrust update_tdo_gidnumber plugin must check if adtrust is installed - `commit `__ + `commit `__ `#6881 `__ - tests: add non-reg for idrange-add - `commit `__ + `commit `__ `#6404 `__ - Upgrade: add gidnumber to trusted domain entry - `commit `__ + `commit `__ `#6827 `__ - ipa-sam: create the gidNumber attribute in the trusted domain entry - `commit `__ + `commit `__ `#6827 `__ - idrange-add: properly handle empty --dom-name option - `commit `__ + `commit `__ `#6404 `__ - ipa-ca-install man page: Add domain level 1 help - `commit `__ + `commit `__ `#5831 `__ - dogtag-ipa-ca-renew-agent-submit: fix the is_replicated() function - `commit `__ + `commit `__ `#6813 `__ - man ipa-cacert-manage install needs clarification - `commit `__ + `commit `__ `#6795 `__ @@ -498,7 +498,7 @@ Fraser Tweedale (1) ---------------------------------------------------------------------------------------------- - Support 8192-bit RSA keys in default cert profile - `commit `__ + `commit `__ `#6319 `__ @@ -507,120 +507,120 @@ Jan Cholasta (38) ---------------------------------------------------------------------------------------------- - server certinstall: support PKINIT - `commit `__ + `commit `__ `#6831 `__ - cacert manage: support PKINIT - `commit `__ + `commit `__ `#6831 `__ - replica install: respect --pkinit-cert-file - `commit `__ + `commit `__ `#6831 `__ - server install: fix KDC certificate validation in CA-less - `commit `__ + `commit `__ `#6831 `__, `#6869 `__ - certs: do not export CA certs in install_pem_from_p12 - `commit `__ + `commit `__ `#6831 `__, `#6869 `__ - certs: do not export keys world-readable in install_key_from_p12 - `commit `__ + `commit `__ `#6831 `__ - server install: fix KDC PKINIT configuration - `commit `__ + `commit `__ `#6831 `__ - install: introduce generic Kerberos Augeas lens - `commit `__ + `commit `__ `#6831 `__ - client install: fix client PKINIT configuration - `commit `__ + `commit `__ `#6831 `__ - install: trust IPA CA for PKINIT - `commit `__ + `commit `__ `#6831 `__ - certdb: use custom object for trust flags - `commit `__ + `commit `__ `#6831 `__ - certdb, certs: make trust flags argument mandatory - `commit `__ + `commit `__ `#6831 `__ - certdb: add named trust flag constants - `commit `__ + `commit `__ `#6831 `__ - ipa-cacert-manage: add --external-ca-type - `commit `__ + `commit `__ `#5799 `__ - renew agent: get rid of virtual profiles - `commit `__ + `commit `__ `#5799 `__ - renew agent: always export CSR on IPA CA certificate renewal - `commit `__ + `commit `__ `#5799 `__ - renew agent: allow reusing existing certs - `commit `__ + `commit `__ `#5799 `__ - cainstance: use correct profile for lightweight CA certificates - `commit `__ + `commit `__ `#5799 `__ - server upgrade: always fix certmonger tracking request - `commit `__ + `commit `__ `#5799 `__ - renew agent: respect CA renewal master setting - `commit `__ + `commit `__ `#5799 `__ - spec file: bump python-netaddr Requires - `commit `__ + `commit `__ `#6894 `__ - spec file: bump krb5 Requires for certauth fixes - `commit `__ + `commit `__ `#4905 `__ - configure: fix AC_CHECK_LIB usage - `commit `__ + `commit `__ `#6846 `__ - cert: defer cert-find result post-processing - `commit `__ + `commit `__ `#6808 `__ - renew agent, restart scripts: connect to LDAP after kinit - `commit `__ + `commit `__ `#6757 `__ - renew agent: revert to host keytab authentication - `commit `__ + `commit `__ `#6757 `__ - install: request service certs after host keytab is set up - `commit `__ + `commit `__ `#6757 `__ - dsinstance, httpinstance: consolidate certificate request code - `commit `__ + `commit `__ `#6757 `__ - httpinstance: avoid httpd restart during certificate request - `commit `__ + `commit `__ `#6757 `__ - dsinstance: reconnect ldap2 after DS is restarted by certmonger - `commit `__ + `commit `__ `#6757 `__ - httpinstance: make sure NSS database is backed up - `commit `__ + `commit `__ `#4639 `__ - spec file: bump libsss_nss_idmap-devel BuildRequires - `commit `__ + `commit `__ `#6828 `__ - spec file: bump krb5-devel BuildRequires for certauth - `commit `__ + `commit `__ `#4905 `__ - cert: do not limit internal searches in cert-find - `commit `__ + `commit `__ `#6716 `__ - replica prepare: fix wrong IPA CA nickname in replica file - `commit `__ + `commit `__ `#6777 `__ - httpinstance: clean up /etc/httpd/alias on uninstall - `commit `__ + `commit `__ `#4639 `__ - certs: do not implicitly create DS pin.txt - `commit `__ + `commit `__ `#4639 `__ - tasks: run \`systemctl daemon-reload\` after httpd.service.d updates - `commit `__ + `commit `__ `#6773 `__ @@ -629,52 +629,52 @@ Martin Babinsky (16) ---------------------------------------------------------------------------------------------- - Travis CI: explicitly update pip before running the builds - `commit `__ + `commit `__ - Do not test anonymous PKINIT after install/upgrade - `commit `__ + `commit `__ `#6830 `__ - Upgrade: configure local/full PKINIT depending on the master status - `commit `__ + `commit `__ `#6830 `__ - Use local anchor when armoring password requests - `commit `__ + `commit `__ `#6830 `__ - Stop requesting anonymous keytab and purge all references of it - `commit `__ + `commit `__ `#6830 `__ - Use only anonymous PKINIT to fetch armor ccache - `commit `__ + `commit `__ `#6830 `__ - API for retrieval of master's PKINIT status and publishing it in LDAP - `commit `__ + `commit `__ `#6830 `__ - Allow for configuration of all three PKINIT variants when deploying KDC - `commit `__ + `commit `__ `#6830 `__ - separate function to set ipaConfigString values on service entry - `commit `__ + `commit `__ `#6830 `__ - Revert "Store GSSAPI session key in /var/run/ipa" - `commit `__ + `commit `__ `#6880 `__ - Remove duplicate functionality in upgrade - `commit `__ + `commit `__ `#6799 `__ - Always check and create anonymous principal during KDC install - `commit `__ + `commit `__ `#6799 `__ - Ensure KDC is propery configured after upgrade - `commit `__ + `commit `__ `#6792 `__ - Split out anonymous PKINIT test to a separate method - `commit `__ + `commit `__ `#6792 `__ - Remove unused variable from failed anonymous PKINIT handling - `commit `__ + `commit `__ `#6792 `__ - Upgrade: configure PKINIT after adding anonymous principal - `commit `__ + `commit `__ `#6792 `__ @@ -683,40 +683,40 @@ Martin Basti (13) ---------------------------------------------------------------------------------------------- - Become IPA 4.5.1 - `commit `__ + `commit `__ - 4.5.1 Translation update - `commit `__ + `commit `__ - 4.5.1 Contributors update - `commit `__ + `commit `__ - ipasetup: fix dependencies handling based on python version - `commit `__ + `commit `__ `#6875 `__ - ipaclient: fix missing RPM ownership - `commit `__ + `commit `__ `#6927 `__ - ca_status: add HTTP timeout 30 seconds - `commit `__ + `commit `__ `#6766 `__ - http_request: add timeout option - `commit `__ + `commit `__ `#6766 `__ - Use proper SELinux context with http.keytab - `commit `__ + `commit `__ `#6924 `__ - Store GSSAPI session key in /var/run/ipa - `commit `__ + `commit `__ `#6880 `__ - Fix PKCS11 helper - `commit `__ + `commit `__ `#6692 `__ - Remove surplus 'the' in output of ipa-adtrust-install - `commit `__ + `commit `__ `#6864 `__ - Set "KDC:Disable Last Success" by default - `commit `__ + `commit `__ `#5313 `__ - Set zanata version to ipa-4-5 - `commit `__ + `commit `__ @@ -724,10 +724,10 @@ Michal Reznik (2) ---------------------------------------------------------------------------------------------- - test_caless: mark TestCertinstall intermediate CA tests as xfail - `commit `__ + `commit `__ `#6959 `__ - test_caless: add pkinit option and test it - `commit `__ + `commit `__ `#6854 `__ @@ -736,7 +736,7 @@ Oliver Gutierrez (1) ---------------------------------------------------------------------------------------------- - Added plugins directory to ipaclient subpackages - `commit `__ + `commit `__ `#6927 `__ @@ -746,13 +746,13 @@ Petr Vobornik (3) - kerberos session: use CA cert with full cert chain for obtaining cookie - `commit `__ + `commit `__ `#6876 `__ - restore: restart/reload gssproxy after restore - `commit `__ + `commit `__ `#6902 `__ - automount install: fix checking of SSSD functionality on uninstall - `commit `__ + `commit `__ `#6861 `__ @@ -761,28 +761,28 @@ Pavel Vomacka (8) ---------------------------------------------------------------------------------------------- - Turn on NSSOCSP check in mod_nss conf - `commit `__ + `commit `__ `#6370 `__ - WebUI: Allow to add certs to certmapping with CERT LINES around - `commit `__ + `commit `__ `#6772 `__ - WebUI: Fix showing vault in selfservice view - `commit `__ + `commit `__ `#6812 `__ - WebUI: suppress truncation warning in select widget - `commit `__ + `commit `__ `#6618 `__ - WebUI: Add support for suppressing warnings - `commit `__ + `commit `__ `#6618 `__ - WebUI: Add support for login for AD users - `commit `__ + `commit `__ `#3242 `__ - WebUI: add method for disabling item in user dropdown menu - `commit `__ + `commit `__ `#3242 `__ - WebUI: check principals in lowercase - `commit `__ + `commit `__ `#3242 `__ @@ -792,7 +792,7 @@ Gabe (1) - Update get_attr_filter in LDAPSearch to handle nsaccountlock user searches - `commit `__ + `commit `__ `#6896 `__ @@ -801,24 +801,24 @@ Sumit Bose (7) ---------------------------------------------------------------------------------------------- - IPA-KDB: use relative path in ipa-certmap config snippet - `commit `__ + `commit `__ `#6833 `__ - extdom: improve cert request - `commit `__ + `commit `__ `#6826 `__ - extdom: do reverse search for domain separator - `commit `__ + `commit `__ - ipa-kdb: do not depend on certauth_plugin.h - `commit `__ + `commit `__ `#4905 `__ - configure: fix --disable-server with certauth plugin - `commit `__ + `commit `__ `#6816 `__ - IPA certauth plugin - `commit `__ + `commit `__ `#4905 `__ - ipa-kdb: add ipadb_fetch_principals_with_extra_filter() - `commit `__ + `commit `__ `#4905 `__ @@ -827,25 +827,25 @@ Simo Sorce (7) ---------------------------------------------------------------------------------------------- - Make sure remote hosts have our keys - `commit `__ + `commit `__ `#6838 `__ - Fix s4u2self with adtrust - `commit `__ + `commit `__ `#6862 `__ - Prevent churn on ccaches - `commit `__ + `commit `__ `#6775 `__ - Work around issues fetching session data - `commit `__ + `commit `__ `#6775 `__ - Handle failed authentication via cookie - `commit `__ + `commit `__ `#6775 `__ - Avoid growing FILE ccaches unnecessarily - `commit `__ + `commit `__ `#6775 `__ - Add options to allow ticket caching - `commit `__ + `commit `__ `#6771 `__ @@ -854,104 +854,104 @@ Stanislav Laznicka (33) ---------------------------------------------------------------------------------------------- - cert-show: writable files does not mean dirs - `commit `__ + `commit `__ `#6883 `__ - Fix wrong message on Dogtag instances stop - `commit `__ + `commit `__ `#6766 `__ - Make CA/KRA fail when they don't start - `commit `__ + `commit `__ `#6766 `__ - Remove the cachedproperty class - `commit `__ + `commit `__ `#6878 `__ - Refresh Dogtag RestClient.ca_host property - `commit `__ + `commit `__ `#6878 `__ - Fix CA/server cert validation in FIPS - `commit `__ + `commit `__ `#6897 `__ - compat plugin: Update link to slapi-nis project - `commit `__ + `commit `__ - compat: ignore cn=topology,cn=ipa,cn=etc subtree - `commit `__ + `commit `__ `#6821 `__ - Move the compat plugin setup at the end of install - `commit `__ + `commit `__ `#6821 `__ - compat-manage: behave the same for all users - `commit `__ + `commit `__ `#6821 `__ - Fix CAInstance.import_ra_cert for empty passwords - `commit `__ + `commit `__ `#6878 `__ - Fix RA cert import during DL0 replication - `commit `__ + `commit `__ `#6878 `__ - ext. CA: correctly write the cert chain - `commit `__ + `commit `__ `#6872 `__ - server-install: No double Kerberos install - `commit `__ + `commit `__ `#6757 `__ - Fix CA-less to CA-full upgrade - `commit `__ + `commit `__ `#6853 `__ - replicainstall: better client install exception handling - `commit `__ + `commit `__ `#6183 `__ - Add the force-join option to replica install - `commit `__ + `commit `__ `#6183 `__ - server-install: remove broken no-pkinit check - `commit `__ + `commit `__ `#6807 `__ - Add pki_pin only when needed - `commit `__ + `commit `__ `#6839 `__ - Remove publish_ca_cert() method from NSSDatabase - `commit `__ + `commit `__ `#6806 `__ - Get correct CA cert nickname in CA-less - `commit `__ + `commit `__ `#6806 `__ - Remove redundant option check for cert files - `commit `__ + `commit `__ `#6801 `__ - replica-prepare man: remove pkinit option refs - `commit `__ + `commit `__ `#6801 `__ - Don't allow setting pkinit-related options on DL0 - `commit `__ + `commit `__ `#6801 `__ - Fix the order of cert-files check - `commit `__ + `commit `__ `#6801 `__ - Generate PIN for PKI to help Dogtag in FIPS - `commit `__ + `commit `__ `#6824 `__ - Backup CA cert from kerberos folder - `commit `__ + `commit `__ `#6748 `__ - Allow renaming of the sudorule objects - `commit `__ + `commit `__ `#2466 `__ - Allow renaming of the HBAC rule objects - `commit `__ + `commit `__ `#6784 `__ - Reworked the renaming mechanism - `commit `__ + `commit `__ `#2466 `__, `#6784 `__ - Bump samba version for FIPS and priv. separation - `commit `__ + `commit `__ `#6671 `__, `#6697 `__ - Backup ipa-specific httpd unit-file - `commit `__ + `commit `__ `#6748 `__ - Add debug log in case cookie retrieval went wrong - `commit `__ + `commit `__ `#6774 `__ @@ -961,7 +961,7 @@ Timo Aaltonen (1) - configure: Use ODS_USER and NAMED_GROUP in daemons/dnssec/\*.service.in - `commit `__ + `commit `__ @@ -969,23 +969,23 @@ Tomas Krizek (7) ---------------------------------------------------------------------------------------------- - ca, kra install: validate DM password - `commit `__ + `commit `__ `#6892 `__ - installutils: add DM password validator - `commit `__ + `commit `__ `#6892 `__ - ca install: merge duplicated code for DM password - `commit `__ + `commit `__ `#6892 `__ - upgrade: add missing suffix to http instance - `commit `__ + `commit `__ `#6920 `__ - installer service: fix typo in service entry - `commit `__ + `commit `__ `#6920 `__ - python2-ipalib: add missing python dependency - `commit `__ + `commit `__ `#6920 `__ - kra install: update installation failure message - `commit `__ + `commit `__ `#6923 `__ diff --git a/src/page/Releases/4.5.2.rst b/src/page/Releases/4.5.2.rst index 2db8c35ec..1fdfe64c7 100644 --- a/src/page/Releases/4.5.2.rst +++ b/src/page/Releases/4.5.2.rst @@ -120,17 +120,17 @@ Alexander Bokovoy (4) ---------------------------------------------------------------------------------------------- - trust-mod: allow modifying list of UPNs of a trusted forest - `commit `__ + `commit `__ `#7015 `__ - ipa-kdb: add pkinit authentication indicator in case of a successful certauth - `commit `__ + `commit `__ `#6736 `__ - Fix index definition for ipaAnchorUUID - `commit `__ + `commit `__ `#6975 `__ - krb5: make sure KDC certificate is readable - `commit `__ + `commit `__ `#6973 `__ @@ -139,7 +139,7 @@ David Kupka (1) ---------------------------------------------------------------------------------------------- - kra: promote: Get ticket before calling custodia - `commit `__ + `commit `__ `#7020 `__ @@ -149,10 +149,10 @@ Felipe Volpone (2) - Changing cert-find to go through the proxy instead of using the port 8080 - `commit `__ + `commit `__ `#6966 `__ - Changing cert-find to do not use only primary key to search in LDAP. - `commit `__ + `commit `__ `#6948 `__ @@ -161,7 +161,7 @@ Florence Blanc-Renaud (1) ---------------------------------------------------------------------------------------------- - ipa-replica-conncheck: handle ssh not installed - `commit `__ + `commit `__ `#6935 `__ @@ -170,16 +170,16 @@ Jan Cholasta (4) ---------------------------------------------------------------------------------------------- - server upgrade: do not enable PKINIT by default - `commit `__ + `commit `__ `#7000 `__ - pkinit manage: introduce ipa-pkinit-manage - `commit `__ + `commit `__ `#7000 `__ - server certinstall: update KDC master entry - `commit `__ + `commit `__ `#7000 `__ - httpinstance: wait until the service entry is replicated - `commit `__ + `commit `__ `#6867 `__ @@ -188,35 +188,35 @@ Martin Babinsky (10) ---------------------------------------------------------------------------------------------- - Prepare advise plugin for smart card auth configuration - `commit `__ + `commit `__ `#6982 `__ - Extend the advice printing code by some useful abstractions - `commit `__ + `commit `__ `#6982 `__ - fix incorrect suffix handling in topology checks - `commit `__ + `commit `__ `#6965 `__ - only stop/disable simple service if it is installed - `commit `__ + `commit `__ `#6977 `__ - test_serverroles: Get rid of MockLDAP and use ldap2 instead - `commit `__ + `commit `__ `#6937 `__ - Add \`pkinit-status\` command - `commit `__ + `commit `__ `#6937 `__ - Add the list of PKINIT servers as a virtual attribute to global config - `commit `__ + `commit `__ `#6937 `__ - Add an attribute reporting client PKINIT-capable servers - `commit `__ + `commit `__ `#6937 `__ - Refactor the role/attribute member reporting code - `commit `__ + `commit `__ `#6937 `__ - Allow for multivalued server attributes - `commit `__ + `commit `__ `#6937 `__ @@ -225,17 +225,17 @@ Martin Basti (4) ---------------------------------------------------------------------------------------------- - Only warn when specified server IP addresses don't match intf - `commit `__ + `commit `__ `#2715 `__, `#4317 `__ - Add remote_plugins subdirectories to RPM - `commit `__ + `commit `__ `#6927 `__ - custodia dep: require explictly python2 version - `commit `__ + `commit `__ `#6962 `__ - 4.5 set back to git snapshot - `commit `__ + `commit `__ @@ -243,17 +243,17 @@ Pavel Vomacka (4) ---------------------------------------------------------------------------------------------- - WebUI: add support for changing trust UPN suffixes - `commit `__ + `commit `__ `#7015 `__ - Bump version of python-gssapi - `commit `__ + `commit `__ `#6796 `__ - Turn off OCSP check - `commit `__ + `commit `__ `#6981 `__, `#6982 `__ - Change python-cryptography to python2-cryptography - `commit `__ + `commit `__ `#6749 `__ @@ -262,10 +262,10 @@ Sumit Bose (2) ---------------------------------------------------------------------------------------------- - ipa-kdb: use canonical principal in certauth plugin - `commit `__ + `commit `__ `#6993 `__ - ipa-kdb: reload certificate mapping rules periodically - `commit `__ + `commit `__ `#6963 `__ @@ -274,13 +274,13 @@ Simo Sorce (3) ---------------------------------------------------------------------------------------------- - Revert setting sessionMaxAge for old clients - `commit `__ + `commit `__ `#7001 `__ - Add code to be able to set default kinit lifetime - `commit `__ + `commit `__ `#7001 `__ - Fix rare race condition with missing ccache file - `commit `__ + `commit `__ @@ -288,22 +288,22 @@ Stanislav Laznicka (6) ---------------------------------------------------------------------------------------------- - rpc: avoid possible recursion in create_connection - `commit `__ + `commit `__ `#6796 `__ - rpc: preparations for recursion fix - `commit `__ + `commit `__ `#6796 `__ - Avoid possible endless recursion in RPC call - `commit `__ + `commit `__ `#6796 `__ - kdc.key should not be visible to all - `commit `__ + `commit `__ `#6973 `__ - Remove pkinit-anonymous command - `commit `__ + `commit `__ `#6936 `__ - ca/cert-show: check certificate_out in options - `commit `__ + `commit `__ `#6885 `__ @@ -312,13 +312,13 @@ Tibor Dudlák (3) ---------------------------------------------------------------------------------------------- - server.py: Removes dns-server configuration from ldap - `commit `__ + `commit `__ `#6572 `__ - sssd.py: Deprecating no-sssd option. - `commit `__ + `commit `__ `#5860 `__ - client.py: Replace hardcoded 'admin' with options.principal - `commit `__ + `commit `__ `#5406 `__ @@ -327,7 +327,7 @@ Tibor Dudlák (1) ---------------------------------------------------------------------------------------------- - user.py: replace user_mod with ldap.update_entry() - `commit `__ + `commit `__ `#5788 `__ @@ -336,6 +336,6 @@ Tomas Krizek (2) ---------------------------------------------------------------------------------------------- - Become IPA 4.5.2 - `commit `__ + `commit `__ - Update translations - `commit `__ + `commit `__ diff --git a/src/page/Releases/4.5.3.rst b/src/page/Releases/4.5.3.rst index 296a0cd37..097358904 100644 --- a/src/page/Releases/4.5.3.rst +++ b/src/page/Releases/4.5.3.rst @@ -85,10 +85,10 @@ Alexander Bokovoy (2) ---------------------------------------------------------------------------------------------- - ipa-sam: use smbldap_set_bind_callback for Samba 4.7 or later - `commit `__ + `commit `__ `#6877 `__ - ipa-sam: use own private structure, not ldapsam_privates - `commit `__ + `commit `__ `#6877 `__ @@ -97,7 +97,7 @@ Fraser Tweedale (1) ---------------------------------------------------------------------------------------------- - Add CommonNameToSANDefault to default cert profile - `commit `__ + `commit `__ `#7007 `__ @@ -106,50 +106,50 @@ Martin Babinsky (15) ---------------------------------------------------------------------------------------------- - replica install: drop-in IPA specific config to tmpfiles.d - `commit `__ + `commit `__ `#7053 `__ - Do not remove the old masters when setting the attribute fails - `commit `__ + `commit `__ `#7029 `__ - \*config-show: Do not show empty roles/attributes - `commit `__ + `commit `__ `#7029 `__ - smart-card-advises: ensure that krb5-pkinit is installed on client - `commit `__ + `commit `__ `#7036 `__ - smart card advise: use password when changing trust flags on HTTP cert - `commit `__ + `commit `__ `#7036 `__ - smart card advises: use a wrapper around Bash \`for\` loops - `commit `__ + `commit `__ `#7036 `__ - Use the compound statement formatting API for configuring PKINIT - `commit `__ + `commit `__ `#7036 `__ - Fix indentation of statements in Smart card advises - `commit `__ + `commit `__ `#7036 `__ - delegate formatting of compound Bash statements to dedicated classes - `commit `__ + `commit `__ `#7036 `__ - advise: add an infrastructure for formatting Bash compound statements - `commit `__ + `commit `__ `#7036 `__ - delegate the indentation handling in advises to dedicated class - `commit `__ + `commit `__ `#7036 `__ - add a class that tracks the indentation in the generated advises - `commit `__ + `commit `__ `#7036 `__ - Allow to pass in multiple CA cert paths to the smart card advises - `commit `__ + `commit `__ `#7036 `__ - smart-card advises: add steps to store smart card signing CA cert - `commit `__ + `commit `__ `#7036 `__ - smart-card advises: configure systemwide NSS DB also on master - `commit `__ + `commit `__ `#7036 `__ @@ -158,28 +158,28 @@ Martin Basti (8) ---------------------------------------------------------------------------------------------- - python-netifaces: update to reflect upstream changes - `commit `__ + `commit `__ `#7021 `__ - Remove network and broadcast address warnings - `commit `__ + `commit `__ `#4317 `__ - replica install: add missing check for non-local IP address - `commit `__ + `commit `__ `#4317 `__ - Remove ip_netmask from option parser - `commit `__ + `commit `__ `#4317 `__ - CheckedIPAddress: remove match_local param - `commit `__ + `commit `__ `#4317 `__ - refactor CheckedIPAddress class - `commit `__ + `commit `__ `#4317 `__ - ipa-dns-install: remove check for local ip address - `commit `__ + `commit `__ `#4317 `__ - Fix local IP address validation - `commit `__ + `commit `__ `#4317 `__ @@ -188,10 +188,10 @@ Sumit Bose (2) ---------------------------------------------------------------------------------------------- - ipa_pwd_extop: do not generate NT hashes in FIPS mode - `commit `__ + `commit `__ `#7026 `__ - ipa-sam: replace encode_nt_key() with E_md4hash() - `commit `__ + `commit `__ `#7026 `__ @@ -200,9 +200,9 @@ Simo Sorce (2) ---------------------------------------------------------------------------------------------- - Always check peer has keys before connecting - `commit `__ + `commit `__ - Make sure we check ccaches in all rpcserver paths - `commit `__ + `commit `__ @@ -210,7 +210,7 @@ Stanislav Laznicka (1) ---------------------------------------------------------------------------------------------- - Ensure network is online prior to an upgrade - `commit `__ + `commit `__ `#7039 `__ @@ -219,7 +219,7 @@ Tibor Dudlák (1) ---------------------------------------------------------------------------------------------- - topology.py: Removes error message from dictionary. - `commit `__ + `commit `__ `#6533 `__ @@ -228,8 +228,8 @@ Tomas Krizek (3) ---------------------------------------------------------------------------------------------- - Become IPA 4.5.3 - `commit `__ + `commit `__ - Update translations - `commit `__ + `commit `__ - 4.5 set back to git snapshot - `commit `__ + `commit `__ diff --git a/src/page/Releases/4.5.4.rst b/src/page/Releases/4.5.4.rst index 5058cdc06..76138295d 100644 --- a/src/page/Releases/4.5.4.rst +++ b/src/page/Releases/4.5.4.rst @@ -131,10 +131,10 @@ Alexander Bokovoy (2) ---------------------------------------------------------------------------------------------- - Make sure upgrade also checks for IPv6 stack - `commit `__ + `commit `__ `#7083 `__ - OTP import: support hash names with HMAC- prefix - `commit `__ + `commit `__ `#7146 `__ @@ -143,7 +143,7 @@ Abhijeet Kasurde (1) ---------------------------------------------------------------------------------------------- - Vault testcase improvement - `commit `__ + `commit `__ `#7098 `__ @@ -152,7 +152,7 @@ Alexander Koksharov (1) ---------------------------------------------------------------------------------------------- - kra-install: better warning message - `commit `__ + `commit `__ `#6952 `__ @@ -161,10 +161,10 @@ Aleksei Slaikovskii (2) ---------------------------------------------------------------------------------------------- - ipaclient.plugins.dns: Cast DNS name to unicode. - `commit `__ + `commit `__ `#7185 `__ - Less confusing message for PKINIT configuration during install - `commit `__ + `commit `__ `#7179 `__ @@ -173,7 +173,7 @@ Christian Heimes (1) ---------------------------------------------------------------------------------------------- - Block PyOpenSSL to prevent SELinux execmem in wsgi - `commit `__ + `commit `__ `#5442 `__ @@ -182,9 +182,9 @@ David Kreitschmann (2) ---------------------------------------------------------------------------------------------- - Disable pylint in get_help function because of type confusion. - `commit `__ + `commit `__ - Store help in Schema before writing to disk - `commit `__ + `commit `__ @@ -192,40 +192,40 @@ David Kupka (11) ---------------------------------------------------------------------------------------------- - tests: Add LDAP URI to ldappasswd explicitly - `commit `__ + `commit `__ `#6622 `__ - tests: certmap: Add test for user-{add,remove}-certmap - `commit `__ + `commit `__ `#7105 `__ - tests: tracker: Add CertmapdataMixin tracker - `commit `__ + `commit `__ `#7105 `__ - tests: certmap: Add test for certmapconfig-{mod,show} - `commit `__ + `commit `__ `#7105 `__ - tests: tracker: Add CertmapconfigTracker to tests certmapconfig-\* commands - `commit `__ + `commit `__ `#7105 `__ - tests: certmap: Test permissions for certmap - `commit `__ + `commit `__ `#7105 `__ - tests: certmap: Add basic tests for certmaprule commands - `commit `__ + `commit `__ `#7105 `__ - tests: tracker: Add CertmapTracker for testing certmap-\* commands - `commit `__ + `commit `__ `#7105 `__ - tests: tracker: Add ConfigurationTracker to test \*config-{mod,show} commands - `commit `__ + `commit `__ `#7105 `__ - tests: tracker: Add EnableTracker to test \*-{enable,disable} commands - `commit `__ + `commit `__ `#7105 `__ - tests: tracker: Split Tracker into one-purpose Trackers - `commit `__ + `commit `__ `#7105 `__ @@ -234,17 +234,17 @@ Felipe Volpone (4) ---------------------------------------------------------------------------------------------- - Changing idoverrideuser-\* to treat objectClass case insensitively - `commit `__ + `commit `__ `#7074 `__ - Fixing how sssd.conf is updated when promoting a client to replica - `commit `__ + `commit `__ `#7127 `__ - Removing part of circular dependency of ipalib in ipaplaform - `commit `__ + `commit `__ `#7108 `__ - Changing how commands handles error when it can't connect to IPA server - `commit `__ + `commit `__ `#6261 `__ @@ -253,20 +253,20 @@ Florence Blanc-Renaud (5) ---------------------------------------------------------------------------------------------- - ipa-cacert-manage renew: switch from ext-signed CA to self-signed - `commit `__ + `commit `__ `#7173 `__ - Backport 4-5: Fix ipa-server-upgrade with server cert tracking - `commit `__ + `commit `__ `#7141 `__ - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists - `commit `__ + `commit `__ `#7125 `__ - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca) - `commit `__ + `commit `__ `#7106 `__ - Fix ipa config-mod --ca-renewal-master - `commit `__ + `commit `__ `#7120 `__ @@ -275,10 +275,10 @@ Fraser Tweedale (2) ---------------------------------------------------------------------------------------------- - Fix external renewal for CA with non-default subject DN - `commit `__ + `commit `__ `#7123 `__ - Restore old version of caIPAserviceCert for upgrade only - `commit `__ + `commit `__ `#7097 `__ @@ -287,7 +287,7 @@ Martin Basti (1) ---------------------------------------------------------------------------------------------- - DNS update: reduce timeout for CA records - `commit `__ + `commit `__ `#6176 `__ @@ -296,13 +296,13 @@ Michal Reznik (3) ---------------------------------------------------------------------------------------------- - test_caless: add replica ca-less to ca-full test (master caless) - `commit `__ + `commit `__ `#7086 `__ - test_caless: add server_replica ca-less to ca-full test - `commit `__ + `commit `__ `#7086 `__ - tests: fix external_ca test suite failing due to missing SKI - `commit `__ + `commit `__ `#7099 `__ @@ -311,7 +311,7 @@ Nathaniel McCallum (1) ---------------------------------------------------------------------------------------------- - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace - `commit `__ + `commit `__ `#7035 `__ @@ -320,7 +320,7 @@ Petr Čech (1) ---------------------------------------------------------------------------------------------- - ipatests: Fix on logs collection - `commit `__ + `commit `__ `#7214 `__ @@ -329,10 +329,10 @@ Petr Vobornik (2) ---------------------------------------------------------------------------------------------- - log progress of wait_for_open_ports - `commit `__ + `commit `__ `#7083 `__ - control logging of host_port_open from caller - `commit `__ + `commit `__ `#7083 `__ @@ -341,30 +341,30 @@ Pavel Vomacka (9) ---------------------------------------------------------------------------------------------- - WebUI: Fix calling undefined method during reset passwords - `commit `__ + `commit `__ `#7175 `__ - WebUI: remove unused parameter from get_whoami_command - `commit `__ + `commit `__ `#7175 `__ - Adds whoami DS plugin in case that plugin is missing - `commit `__ + `commit `__ `#7126 `__ - WebUI: remove creating js/libs symlink from makefile - `commit `__ + `commit `__ `#6447 `__ - WebUI: Remove plugins symlink as it is unused - `commit `__ + `commit `__ `#6447 `__ - Remove all old JSON files - `commit `__ + `commit `__ `#6447 `__ - Revert "Web UI: Remove offline version of Web UI" - `commit `__ + `commit `__ - WebUI: Add hyphenate versions of Host(Role) Based strings - `commit `__ + `commit `__ `#6582 `__ - WebUI: fix incorrectly shown links in association tables - `commit `__ + `commit `__ `#7066 `__ @@ -373,7 +373,7 @@ Rob Crittenden (1) ---------------------------------------------------------------------------------------------- - Collect group membership without a size limit - `commit `__ + `commit `__ `#7112 `__ @@ -382,7 +382,7 @@ Sumit Bose (1) ---------------------------------------------------------------------------------------------- - ipa-kdb: reinit trusted domain data for enterprise principals - `commit `__ + `commit `__ `#7172 `__ @@ -391,14 +391,14 @@ Stanislav Laznicka (4) ---------------------------------------------------------------------------------------------- - travis: make tests fail if pep8 does not pass - `commit `__ + `commit `__ - Use correct container for ipa-4-5 testing - `commit `__ + `commit `__ - pkinit: don't fail when no pkinit servers found - `commit `__ + `commit `__ `#7144 `__ - travis: temporary workaround for Travis CI - `commit `__ + `commit `__ @@ -406,7 +406,7 @@ Thierry Bordaz (1) ---------------------------------------------------------------------------------------------- - NULL LDAP context in call to ldap_search_ext_s during search - `commit `__ + `commit `__ `#7017 `__ @@ -415,7 +415,7 @@ Tibor Dudlák (1) ---------------------------------------------------------------------------------------------- - otptoken_yubikey.py: Removed traceback when package missing. - `commit `__ + `commit `__ `#6979 `__ @@ -424,27 +424,27 @@ Tomas Krizek (11) ---------------------------------------------------------------------------------------------- - Become IPA 4.5.4 - `commit `__ + `commit `__ - Update contributors - `commit `__ + `commit `__ - Update translations - `commit `__ + `commit `__ - prci: use f26 template for ipa-4-5 - `commit `__ + `commit `__ - ipatests: collect log after ipa-ca-install - `commit `__ + `commit `__ `#7060 `__ - dnssec: fix localhsm.py utility script - `commit `__ + `commit `__ `#7116 `__ - prci: rename template to ci-ipa-4-5-f25 - `commit `__ + `commit `__ - prci: add caless tests - `commit `__ + `commit `__ - build: checkout \*.po files at the end of makerpms.sh - `commit `__ + `commit `__ `#6605 `__ - freeipa-pr-ci: enable pull-request CI - `commit `__ + `commit `__ - 4.5 set back to git snapshot - `commit `__ + `commit `__ diff --git a/src/page/Releases/4.6.0.rst b/src/page/Releases/4.6.0.rst index f2e0941ef..09c30562d 100644 --- a/src/page/Releases/4.6.0.rst +++ b/src/page/Releases/4.6.0.rst @@ -177,45 +177,45 @@ Alexander Bokovoy (13) ---------------------------------------------------------------------------------------------- - csrgen: support openssl 1.0 and 1.1 - `commit `__ + `commit `__ `#7110 `__ - dcerpc: support Python 3 - `commit `__ + `commit `__ `#4985 `__ - ipa-sam: use smbldap_set_bind_callback for Samba 4.7 or later - `commit `__ + `commit `__ `#6877 `__ - ipa-sam: use own private structure, not ldapsam_privates - `commit `__ + `commit `__ `#6877 `__ - trust-mod: allow modifying list of UPNs of a trusted forest - `commit `__ + `commit `__ `#7015 `__ - ipa-kdb: add pkinit authentication indicator in case of a successful certauth - `commit `__ + `commit `__ `#6736 `__ - Fix index definition for ipaAnchorUUID - `commit `__ + `commit `__ `#6975 `__ - krb5: make sure KDC certificate is readable - `commit `__ + `commit `__ `#6973 `__ - trust: always use oddjobd helper for fetching trust information - `commit `__ + `commit `__ - ipaserver/dcerpc: unify error processing - `commit `__ + `commit `__ `#6859 `__ - adtrust: make sure that runtime hostname result is consistent with the configuration - `commit `__ + `commit `__ `#6786 `__ - server: make sure we test for sss_nss_getlistbycert - `commit `__ + `commit `__ `#6828 `__ - ldap2: use LDAP whoami operation to retrieve bind DN for current connection - `commit `__ + `commit `__ `#6797 `__ @@ -224,22 +224,22 @@ Abhijeet Kasurde (6) ---------------------------------------------------------------------------------------------- - Vault testcase improvement - `commit `__ + `commit `__ `#7098 `__ - Minor typo fixes - `commit `__ + `commit `__ `#6865 `__ - Minor typo in details.js - `commit `__ + `commit `__ `#6863 `__ - Hide request_type doc string in cert-request help - `commit `__ + `commit `__ `#5734 `__, `#6494 `__ - Hide PKI Client database password in log file - `commit `__ + `commit `__ - Use with statement for opening file - `commit `__ + `commit `__ @@ -247,7 +247,7 @@ Alex Zeleznikov (1) ---------------------------------------------------------------------------------------------- - Sort SRV records by priority - `commit `__ + `commit `__ @@ -255,11 +255,11 @@ Aleksei Slaikovskii (3) ---------------------------------------------------------------------------------------------- - ipapython/graph.py redundant variable fix - `commit `__ + `commit `__ - ipapython/graph.py String formatting - `commit `__ + `commit `__ - ipapython/graph.py complexity optimization - `commit `__ + `commit `__ `#7051 `__ @@ -268,17 +268,17 @@ Ben Lipton (4) ---------------------------------------------------------------------------------------------- - csrgen: Beginnings of NSS database support - `commit `__ + `commit `__ `#4899 `__ - csrgen: Modify cert_get_requestdata to return a CertificationRequestInfo - `commit `__ + `commit `__ `#4899 `__ - csrgen: Change to pure openssl config format (no script) - `commit `__ + `commit `__ `#4899 `__ - csrgen: Remove helper abstraction - `commit `__ + `commit `__ `#4899 `__ @@ -287,110 +287,110 @@ Christian Heimes (40) ---------------------------------------------------------------------------------------------- - Misc Python 3 fixes for ipaserver.secrets - `commit `__ + `commit `__ `#4985 `__ - Reimplement yield tests are parametrized tests - `commit `__ + `commit `__ `#6591 `__ - Silence pytest.yield_fixture deprecation warning - `commit `__ + `commit `__ `#6591 `__ - Slim down dependencies - `commit `__ + `commit `__ - Vault: Explicitly default to 3DES CBC - `commit `__ + `commit `__ `#6899 `__ - Band-aid for pip dependency bug - `commit `__ + `commit `__ - Correct PyPI package dependencies - `commit `__ + `commit `__ `#6875 `__ - tox: use pylint 1.6.x for now - `commit `__ + `commit `__ `#6874 `__ - Replace \_BSD_SOURCE with \_DEFAULT_SOURCE - `commit `__ + `commit `__ `#6818 `__ - Regenerate ASN.1 code with asn1c 0.9.28 - `commit `__ + `commit `__ `#6818 `__ - tox testing support for client wheel packages - `commit `__ + `commit `__ - Stabilize make pypi_packages - `commit `__ + `commit `__ - Replace hard-coded kdcproxy path with WSGI script - `commit `__ + `commit `__ `#6834 `__ - Use entry_points for ipa CLI - `commit `__ + `commit `__ `#6653 `__, `#6850 `__ - Don't hard-code with_wheels - `commit `__ + `commit `__ - Add an option to build ipaserver wheels - `commit `__ + `commit `__ - Add extra_requires for additional dependencies - `commit `__ + `commit `__ - Conditionally import pyhbac - `commit `__ + `commit `__ - Skip test_session_storage in ipaclient unittest mode - `commit `__ + `commit `__ - Add make devcheck for developers - `commit `__ + `commit `__ `#6604 `__ - session storage parameters must be bytes - `commit `__ + `commit `__ - Fix ipatests.util doc tests - `commit `__ + `commit `__ - Use Custodia 0.3.1 features - `commit `__ + `commit `__ - Simplify KRA transport cert cache - `commit `__ + `commit `__ `#6787 `__ - pytest 3.x compatibility - `commit `__ + `commit `__ - Constrain wheel package versions - `commit `__ + `commit `__ `#6468 `__ - Move remaining util functions to tasks module - `commit `__ + `commit `__ `#6798 `__ - Ship ipatests.pytest_plugins.integration - `commit `__ + `commit `__ `#6798 `__ - Move function run_repeatedly to tasks module - `commit `__ + `commit `__ `#6798 `__ - Move hosts module to ipatests.pytest_plugins.integration.hosts - `commit `__ + `commit `__ `#6798 `__ - Move tasks module to ipatests.pytest_plugins.integration.tasks - `commit `__ + `commit `__ `#6798 `__ - Move env_config module to ipatests.pytest_plugins.integration.env_config - `commit `__ + `commit `__ `#6798 `__ - Move config module to ipatests.pytest_plugins.integration.config - `commit `__ + `commit `__ `#6798 `__ - Move helper code for integration plugin - `commit `__ + `commit `__ `#6798 `__ - Increase Apache HTTPD's default keep alive timeout - `commit `__ + `commit `__ - Add debug logging for keep-alive - `commit `__ + `commit `__ - Use connection keep-alive - `commit `__ + `commit `__ `#6641 `__ - Add options to run only ipaclient unittests - `commit `__ + `commit `__ `#6517 `__ - Python 3: Fix session storage - `commit `__ + `commit `__ - Fix Python 3 pylint errors - `commit `__ + `commit `__ @@ -398,14 +398,14 @@ David Kreitschmann (4) ---------------------------------------------------------------------------------------------- - Disable pylint in get_help function because of type confusion. - `commit `__ + `commit `__ - Store help in Schema before writing to disk - `commit `__ + `commit `__ - Use os.fsync instead of os.fdatasync because macOS doesn't support fdatasync - `commit `__ + `commit `__ - Fix libkrb5 filename for macOS - `commit `__ + `commit `__ @@ -413,75 +413,75 @@ David Kupka (22) ---------------------------------------------------------------------------------------------- - tests: certmap: Add test for user-{add,remove}-certmap - `commit `__ + `commit `__ `#7105 `__ - tests: tracker: Add CertmapdataMixin tracker - `commit `__ + `commit `__ `#7105 `__ - tests: certmap: Add test for certmapconfig-{mod,show} - `commit `__ + `commit `__ `#7105 `__ - tests: tracker: Add CertmapconfigTracker to tests certmapconfig-\* commands - `commit `__ + `commit `__ `#7105 `__ - tests: certmap: Test permissions for certmap - `commit `__ + `commit `__ `#7105 `__ - tests: certmap: Add basic tests for certmaprule commands - `commit `__ + `commit `__ `#7105 `__ - tests: tracker: Add CertmapTracker for testing certmap-\* commands - `commit `__ + `commit `__ `#7105 `__ - tests: tracker: Add ConfigurationTracker to test \*config-{mod,show} commands - `commit `__ + `commit `__ `#7105 `__ - tests: tracker: Add EnableTracker to test \*-{enable,disable} commands - `commit `__ + `commit `__ `#7105 `__ - tests: tracker: Split Tracker into one-purpose Trackers - `commit `__ + `commit `__ `#7105 `__ - install: replica: Show message about key synchronization - `commit `__ + `commit `__ `#6940 `__ - kra: promote: Get ticket before calling custodia - `commit `__ + `commit `__ `#7020 `__ - ipapython.ipautil.run: Add option to set umask before executing command - `commit `__ + `commit `__ `#6831 `__ - otptoken-add-yubikey: When --digits not provided use default value - `commit `__ + `commit `__ `#6900 `__ - Bump version of ipa.conf file - `commit `__ + `commit `__ `#6860 `__ - Create system users for FreeIPA services during package installation - `commit `__ + `commit `__ `#6743 `__ - WebUI: cert login: Configure name of parameter used to pass username - `commit `__ + `commit `__ `#6860 `__ - httpinstance.disable_system_trust: Don't fail if module 'Root Certs' is not available - `commit `__ + `commit `__ `#6803 `__ - spec file: Bump requires to make Certificate Login in WebUI work - `commit `__ + `commit `__ `#6823 `__ - rpcserver.login_x509: Actually return reply from \__call_\_ method - `commit `__ + `commit `__ `#6819 `__ - Create temporaty directories at the begining of uninstall - `commit `__ + `commit `__ `#6715 `__ - ipapython.ipautil.nolog_replace: Do not replace empty value - `commit `__ + `commit `__ `#6738 `__ @@ -490,7 +490,7 @@ felipe (1) ---------------------------------------------------------------------------------------------- - Fixing replica install: fix ldap connection in domlvl 0 - `commit `__ + `commit `__ `#6549 `__ @@ -499,14 +499,14 @@ Felipe Volpone (3) ---------------------------------------------------------------------------------------------- - Removing part of circular dependency of ipalib in ipaplaform - `commit `__ + `commit `__ `#7108 `__ - Changing how commands handles error when it can't connect to IPA server - `commit `__ + `commit `__ `#6261 `__ - py3: fixing zonemgr_callback - `commit `__ + `commit `__ `#5990 `__ @@ -515,21 +515,21 @@ Felipe Volpone (5) ---------------------------------------------------------------------------------------------- - Adding section "Building FreeIPA from source" on README - `commit `__ + `commit `__ `#6725 `__ - Changing cert-find to go through the proxy instead of using the port 8080 - `commit `__ + `commit `__ `#6966 `__ - Changing cert-find to do not use only primary key to search in LDAP. - `commit `__ + `commit `__ `#6948 `__ - Fixing adding authenticator indicators to host - `commit `__ + `commit `__ `#6911 `__ - Fixing the cert-request comparing whole email address case-sensitively. - `commit `__ + `commit `__ `#5919 `__ @@ -538,7 +538,7 @@ Fabiano Fidêncio (1) ---------------------------------------------------------------------------------------------- - Allow erasing ipaDomainResolutionOrder attribute - `commit `__ + `commit `__ `#6825 `__ @@ -547,73 +547,73 @@ Florence Blanc-Renaud (22) ---------------------------------------------------------------------------------------------- - Fix Certificate renewal (with ext ca) - `commit `__ + `commit `__ `#7106 `__ - Fix ipa-server-upgrade: This entry already exists - `commit `__ + `commit `__ `#7125 `__ - ipa-replica-conncheck: handle ssh not installed - `commit `__ + `commit `__ `#6935 `__ - ipa-ca-install: append CA cert chain into /etc/ipa/ca.crt - `commit `__ + `commit `__ `#6925 `__ - ipa-replica-manage del (dl 0): remove server from defaultServerList - `commit `__ + `commit `__ `#6946 `__ - server-del: update defaultServerList in cn=default,ou=profile,$BASE - `commit `__ + `commit `__ `#6943 `__ - ipa-kra-install: fix pkispawn setting for pki_security_domain_hostname - `commit `__ + `commit `__ `#6895 `__ - ipa-server-install: fix uninstall - `commit `__ + `commit `__ `#6950 `__ - ipa-kra-install manpage: document domain-level 1 - `commit `__ + `commit `__ `#6922 `__ - ipa-kra-install: fix check_host_keys - `commit `__ + `commit `__ `#6934 `__ - ipa-server-install with external CA: fix pkinit cert issuance - `commit `__ + `commit `__ `#6921 `__ - ipa-client-install: remove extra space in pkinit_anchors definition - `commit `__ + `commit `__ `#6916 `__ - vault: piped input for ipa vault-add fails - `commit `__ + `commit `__ `#6907 `__ - upgrade: adtrust update_tdo_gidnumber plugin must check if adtrust is installed - `commit `__ + `commit `__ `#6881 `__ - tests: add non-reg for idrange-add - `commit `__ + `commit `__ `#6404 `__ - Upgrade: add gidnumber to trusted domain entry - `commit `__ + `commit `__ `#6827 `__ - ipa-sam: create the gidNumber attribute in the trusted domain entry - `commit `__ + `commit `__ `#6827 `__ - idrange-add: properly handle empty --dom-name option - `commit `__ + `commit `__ `#6404 `__ - ipa-ca-install man page: Add domain level 1 help - `commit `__ + `commit `__ `#5831 `__ - git-commit-template: update ticket url to use pagure.io instead of fedorahosted.org - `commit `__ + `commit `__ `#6822 `__ - dogtag-ipa-ca-renew-agent-submit: fix the is_replicated() function - `commit `__ + `commit `__ `#6813 `__ - man ipa-cacert-manage install needs clarification - `commit `__ + `commit `__ `#6795 `__ @@ -622,46 +622,46 @@ Fraser Tweedale (14) ---------------------------------------------------------------------------------------------- - Fix external renewal for CA with non-default subject DN - `commit `__ + `commit `__ `#7123 `__ - py3: handle bytes in schema response - `commit `__ + `commit `__ `#6809 `__ - py3: fix vault public key decoding - `commit `__ + `commit `__ `#7033 `__ - cert: fix application of 'str' to bytes when formatting otherName - `commit `__ + `commit `__ `#4985 `__ - py3: fix schema response for py2 server with py3 client - `commit `__ + `commit `__ `#4985 `__ - Fix incorrect 'with' statement in CA-less installation - `commit `__ + `commit `__ `#7118 `__ - Restore old version of caIPAserviceCert for upgrade only - `commit `__ + `commit `__ `#7097 `__ - cert-request: simplify request processing - `commit `__ + `commit `__ `#6531 `__ - Add CommonNameToSANDefault to default cert profile - `commit `__ + `commit `__ `#7007 `__ - Add a README to certificate profile templates directory - `commit `__ + `commit `__ `#7014 `__ - py3: fix regression in schemaupdate - `commit `__ + `commit `__ `#4985 `__ - ca-add: validate Subject DN name attributes - `commit `__ + `commit `__ `#6987 `__ - Add Subject Key Identifier to CA cert validity check - `commit `__ + `commit `__ `#6976 `__ - Support 8192-bit RSA keys in default cert profile - `commit `__ + `commit `__ `#6319 `__ @@ -670,174 +670,174 @@ Jan Cholasta (61) ---------------------------------------------------------------------------------------------- - pylint: enable logging checks - `commit `__ + `commit `__ - logging: do not use \`ipa_log_manager\` to create module-level loggers - `commit `__ + `commit `__ - logging: do not log into the root logger - `commit `__ + `commit `__ - logging: do not reference loggers in arguments and attributes - `commit `__ + `commit `__ - doc: sync guide.org with cli.py - `commit `__ + `commit `__ - logging: remove object-specific loggers - `commit `__ + `commit `__ - logging: use the actual root logger as the root logger - `commit `__ + `commit `__ - logging: port to standard Python logging - `commit `__ + `commit `__ - logging: do not configure any handlers by default - `commit `__ + `commit `__ - wsgi, oddjob: remove needless uses of Env - `commit `__ + `commit `__ - config: provide defaults for \`xmlrpc_uri`, \`ldap_uri\` and \`basedn\` - `commit `__ + `commit `__ - ldap2: remove URI argument from ldap2 constructor - `commit `__ + `commit `__ - test_ldap: drop redundant URI argument - `commit `__ + `commit `__ - {ca,kra}instance: drop redundant URI argument from ad-hoc ldap2 connections - `commit `__ + `commit `__ - user, migration: use LDAPClient for ad-hoc LDAP connections - `commit `__ + `commit `__ - install: do not assume /etc/krb5.conf.d exists - `commit `__ + `commit `__ `#6589 `__ - server upgrade: do not enable PKINIT by default - `commit `__ + `commit `__ `#7000 `__ - pkinit manage: introduce ipa-pkinit-manage - `commit `__ + `commit `__ `#7000 `__ - server certinstall: update KDC master entry - `commit `__ + `commit `__ `#7000 `__ - httpinstance: wait until the service entry is replicated - `commit `__ + `commit `__ `#6867 `__ - server certinstall: support PKINIT - `commit `__ + `commit `__ `#6831 `__ - cacert manage: support PKINIT - `commit `__ + `commit `__ `#6831 `__ - replica install: respect --pkinit-cert-file - `commit `__ + `commit `__ `#6831 `__ - server install: fix KDC certificate validation in CA-less - `commit `__ + `commit `__ `#6831 `__, `#6869 `__ - certs: do not export CA certs in install_pem_from_p12 - `commit `__ + `commit `__ `#6831 `__, `#6869 `__ - certs: do not export keys world-readable in install_key_from_p12 - `commit `__ + `commit `__ `#6831 `__ - server install: fix KDC PKINIT configuration - `commit `__ + `commit `__ `#6831 `__ - install: introduce generic Kerberos Augeas lens - `commit `__ + `commit `__ `#6831 `__ - client install: fix client PKINIT configuration - `commit `__ + `commit `__ `#6831 `__ - install: trust IPA CA for PKINIT - `commit `__ + `commit `__ `#6831 `__ - certdb: use custom object for trust flags - `commit `__ + `commit `__ `#6831 `__ - certdb, certs: make trust flags argument mandatory - `commit `__ + `commit `__ `#6831 `__ - certdb: add named trust flag constants - `commit `__ + `commit `__ `#6831 `__ - ipa-cacert-manage: add --external-ca-type - `commit `__ + `commit `__ `#5799 `__ - renew agent: get rid of virtual profiles - `commit `__ + `commit `__ `#5799 `__ - renew agent: always export CSR on IPA CA certificate renewal - `commit `__ + `commit `__ `#5799 `__ - renew agent: allow reusing existing certs - `commit `__ + `commit `__ `#5799 `__ - cainstance: use correct profile for lightweight CA certificates - `commit `__ + `commit `__ `#5799 `__ - server upgrade: always fix certmonger tracking request - `commit `__ + `commit `__ `#5799 `__ - renew agent: respect CA renewal master setting - `commit `__ + `commit `__ `#5799 `__ - spec file: bump krb5 Requires for certauth fixes - `commit `__ + `commit `__ `#4905 `__ - spec file: bump python-netaddr Requires - `commit `__ + `commit `__ `#6894 `__ - configure: fix AC_CHECK_LIB usage - `commit `__ + `commit `__ `#6846 `__ - cert: defer cert-find result post-processing - `commit `__ + `commit `__ `#6808 `__ - renew agent, restart scripts: connect to LDAP after kinit - `commit `__ + `commit `__ `#6757 `__ - renew agent: revert to host keytab authentication - `commit `__ + `commit `__ `#6757 `__ - install: request service certs after host keytab is set up - `commit `__ + `commit `__ `#6757 `__ - dsinstance, httpinstance: consolidate certificate request code - `commit `__ + `commit `__ `#6757 `__ - httpinstance: avoid httpd restart during certificate request - `commit `__ + `commit `__ `#6757 `__ - dsinstance: reconnect ldap2 after DS is restarted by certmonger - `commit `__ + `commit `__ `#6757 `__ - httpinstance: make sure NSS database is backed up - `commit `__ + `commit `__ `#4639 `__ - certdb: fix \`AttributeError\` in \`verify_ca_cert_validity\` - `commit `__ + `commit `__ - setup, pylint, spec file: drop python-nss dependency - `commit `__ + `commit `__ - certdb: use certutil and match_hostname for cert verification - `commit `__ + `commit `__ - spec file: bump libsss_nss_idmap-devel BuildRequires - `commit `__ + `commit `__ `#6828 `__ - spec file: bump krb5-devel BuildRequires for certauth - `commit `__ + `commit `__ `#4905 `__ - cert: do not limit internal searches in cert-find - `commit `__ + `commit `__ `#6716 `__ - replica prepare: fix wrong IPA CA nickname in replica file - `commit `__ + `commit `__ `#6777 `__ - httpinstance: clean up /etc/httpd/alias on uninstall - `commit `__ + `commit `__ `#4639 `__ - certs: do not implicitly create DS pin.txt - `commit `__ + `commit `__ `#4639 `__ - tasks: run \`systemctl daemon-reload\` after httpd.service.d updates - `commit `__ + `commit `__ `#6773 `__ @@ -846,11 +846,11 @@ René Genz (3) ---------------------------------------------------------------------------------------------- - fix minor spelling mistakes - `commit `__ + `commit `__ - fix spelling mistake; minor rewording - `commit `__ + `commit `__ - fix minor typos in ipa-adtrust-install.1 - `commit `__ + `commit `__ @@ -858,142 +858,142 @@ Martin Babinsky (45) ---------------------------------------------------------------------------------------------- - Move tmpfiles.d configuration handling back to spec file - `commit `__ + `commit `__ `#7053 `__ - Do not remove the old masters when setting the attribute fails - `commit `__ + `commit `__ `#7029 `__ - \*config-show: Do not show empty roles/attributes - `commit `__ + `commit `__ `#7029 `__ - smart-card-advises: ensure that krb5-pkinit is installed on client - `commit `__ + `commit `__ `#7036 `__ - smart card advise: use password when changing trust flags on HTTP cert - `commit `__ + `commit `__ `#7036 `__ - smart card advises: use a wrapper around Bash \`for\` loops - `commit `__ + `commit `__ `#7036 `__ - Use the compound statement formatting API for configuring PKINIT - `commit `__ + `commit `__ `#7036 `__ - Fix indentation of statements in Smart card advises - `commit `__ + `commit `__ `#7036 `__ - delegate formatting of compound Bash statements to dedicated classes - `commit `__ + `commit `__ `#7036 `__ - advise: add an infrastructure for formatting Bash compound statements - `commit `__ + `commit `__ `#7036 `__ - delegate the indentation handling in advises to dedicated class - `commit `__ + `commit `__ `#7036 `__ - add a class that tracks the indentation in the generated advises - `commit `__ + `commit `__ `#7036 `__ - Allow to pass in multiple CA cert paths to the smart card advises - `commit `__ + `commit `__ `#7036 `__ - smart-card advises: add steps to store smart card signing CA cert - `commit `__ + `commit `__ `#7036 `__ - smart-card advises: configure systemwide NSS DB also on master - `commit `__ + `commit `__ `#7036 `__ - Prepare advise plugin for smart card auth configuration - `commit `__ + `commit `__ `#6982 `__ - Extend the advice printing code by some useful abstractions - `commit `__ + `commit `__ `#6982 `__ - fix incorrect suffix handling in topology checks - `commit `__ + `commit `__ `#6965 `__ - Do not delete DS and PKI users during backup/restore tests - `commit `__ + `commit `__ `#6956 `__ - test_backup_restore: do not fail on missing KrbLastSuccessfulAuth - `commit `__ + `commit `__ `#6956 `__ - only stop/disable simple service if it is installed - `commit `__ + `commit `__ `#6977 `__ - test_serverroles: Get rid of MockLDAP and use ldap2 instead - `commit `__ + `commit `__ `#6937 `__ - Add \`pkinit-status\` command - `commit `__ + `commit `__ `#6937 `__ - Add the list of PKINIT servers as a virtual attribute to global config - `commit `__ + `commit `__ `#6937 `__ - Add an attribute reporting client PKINIT-capable servers - `commit `__ + `commit `__ `#6937 `__ - Refactor the role/attribute member reporting code - `commit `__ + `commit `__ `#6937 `__ - Allow for multivalued server attributes - `commit `__ + `commit `__ `#6937 `__ - Travis CI: Add the server uninstaller as a last step of tests - `commit `__ + `commit `__ `#6950 `__ - Travis CI: explicitly update pip before running the builds - `commit `__ + `commit `__ - Do not test anonymous PKINIT after install/upgrade - `commit `__ + `commit `__ `#6830 `__ - Upgrade: configure local/full PKINIT depending on the master status - `commit `__ + `commit `__ `#6830 `__ - Use local anchor when armoring password requests - `commit `__ + `commit `__ `#6830 `__ - Stop requesting anonymous keytab and purge all references of it - `commit `__ + `commit `__ `#6830 `__ - Use only anonymous PKINIT to fetch armor ccache - `commit `__ + `commit `__ `#6830 `__ - API for retrieval of master's PKINIT status and publishing it in LDAP - `commit `__ + `commit `__ `#6830 `__ - Allow for configuration of all three PKINIT variants when deploying KDC - `commit `__ + `commit `__ `#6830 `__ - separate function to set ipaConfigString values on service entry - `commit `__ + `commit `__ `#6830 `__ - Revert "Store GSSAPI session key in /var/run/ipa" - `commit `__ + `commit `__ `#6880 `__ - Remove duplicate functionality in upgrade - `commit `__ + `commit `__ `#6799 `__ - Always check and create anonymous principal during KDC install - `commit `__ + `commit `__ `#6799 `__ - Ensure KDC is propery configured after upgrade - `commit `__ + `commit `__ `#6792 `__ - Split out anonymous PKINIT test to a separate method - `commit `__ + `commit `__ `#6792 `__ - Remove unused variable from failed anonymous PKINIT handling - `commit `__ + `commit `__ `#6792 `__ - Upgrade: configure PKINIT after adding anonymous principal - `commit `__ + `commit `__ `#6792 `__ - Travis CI: invoke integration test helper scripts before test execution - `commit `__ + `commit `__ @@ -1001,184 +1001,184 @@ Martin Basti (63) ---------------------------------------------------------------------------------------------- - DNS update: reduce timeout for CA records - `commit `__ + `commit `__ `#6176 `__ - baseldap: fix format string - `commit `__ + `commit `__ - IPAOptionParser: fix dict comprehension - `commit `__ + `commit `__ - py3: run already ported scripts under py3 by default - `commit `__ + `commit `__ `#4985 `__ - py3: temporary set dependencies to both py2 and py3 packages - `commit `__ + `commit `__ `#4985 `__ - py3: test_otptoken_import: fix bytes usage - `commit `__ + `commit `__ `#4985 `__ - py3: ipa_otptoken_import: fix hex decoding - `commit `__ + `commit `__ `#4985 `__ - py3: ipa_otptoken_import: fix calling unicode on bytes - `commit `__ + `commit `__ `#4985 `__ - py3: ipa_otptoken_import: fix lamba code inspection - `commit `__ + `commit `__ `#4985 `__ - py3: Remove comparison >=2 of debnug log level - `commit `__ + `commit `__ `#4985 `__ - py3: vault: data must be bytes - `commit `__ + `commit `__ `#4985 `__ - py3: test_location_plugin: fix iteration over changed dict - `commit `__ + `commit `__ `#4985 `__ - py3: test_kerberos_principal_aliases: fix code scope - `commit `__ + `commit `__ `#4985 `__ - py3: dogtag.py: fix bytes warnings - `commit `__ + `commit `__ `#4985 `__ - py3: travis: enable tests for plugins that are aleready working - `commit `__ + `commit `__ `#4985 `__ - py3: secrets: remove iteritems usage - `commit `__ + `commit `__ `#4985 `__ - Travis: check for BytesWarnings in httpd error_log - `commit `__ + `commit `__ - py3: ipaldap: fix encoding of datetime objects - `commit `__ + `commit `__ `#4985 `__ - py3: LDAPClient: remove \__del_\_ method - `commit `__ + `commit `__ - LDAPEntry: rename \_orig to \_orig_raw - `commit `__ + `commit `__ `#4985 `__ - python-netifaces: update to reflect upstream changes - `commit `__ + `commit `__ `#7021 `__ - Travis: enable temporary Py3 testing - `commit `__ + `commit `__ - Travis: build only py2 packages for py2 testing - `commit `__ + `commit `__ - Build: allow to build only py2 rpms for fedora - `commit `__ + `commit `__ - Remove network and broadcast address warnings - `commit `__ + `commit `__ `#4317 `__ - replica install: add missing check for non-local IP address - `commit `__ + `commit `__ `#4317 `__ - Remove ip_netmask from option parser - `commit `__ + `commit `__ `#4317 `__ - CheckedIPAddress: remove match_local param - `commit `__ + `commit `__ `#4317 `__ - refactor CheckedIPAddress class - `commit `__ + `commit `__ `#4317 `__ - ipa-dns-install: remove check for local ip address - `commit `__ + `commit `__ `#4317 `__ - Fix local IP address validation - `commit `__ + `commit `__ `#4317 `__ - Explicitly ask for py2 dependencies in py2 packages - `commit `__ + `commit `__ `#4985 `__ - Only warn when specified server IP addresses don't match intf - `commit `__ + `commit `__ `#2715 `__, `#4317 `__ - pylint: explicitly depends on python2-pylint - `commit `__ + `commit `__ `#6986 `__ - py3: update_mod_nss_cipher_suite: ordering doesn't work with None - `commit `__ + `commit `__ `#4985 `__ - py3: urlfetch: use "file://" prefix with filenames - `commit `__ + `commit `__ `#4985 `__ - py3: cainstance: fix BytesWarning - `commit `__ + `commit `__ `#4985 `__ - py3: schemaupdate: fix BytesWarning - `commit `__ + `commit `__ `#4985 `__ - py3: LDAP updates: use only bytes/raw values - `commit `__ + `commit `__ `#4985 `__ - py3: softhsm key_id must be bytes - `commit `__ + `commit `__ `#4985 `__ - py3: ipaldap: encode Boolean as bytes - `commit `__ + `commit `__ `#4985 `__ - py3: ConfigParser: replace deprecated readfd with read - `commit `__ + `commit `__ `#4985 `__ - py3: use ConfigParser instead of SafeConfigParser - `commit `__ + `commit `__ `#4985 `__ - Add remote_plugins subdirectories to RPM - `commit `__ + `commit `__ `#6927 `__ - custodia dep: require explictly python2 version - `commit `__ + `commit `__ `#6962 `__ - pylint: ignore new checks added in 1.7 - `commit `__ + `commit `__ `#6874 `__ - Pylint: fix ipa_forbidden_import checker - `commit `__ + `commit `__ `#6874 `__ - travis: fix pylint execution with py3 - `commit `__ + `commit `__ `#4985 `__ - py3: add missing py3 pylint depedencies - `commit `__ + `commit `__ `#4985 `__, `#6874 `__ - adtrust: move SELinux settings to constants - `commit `__ + `commit `__ - httpd: move SELinux settings to constants - `commit `__ + `commit `__ - ipasetup: fix dependencies handling based on python version - `commit `__ + `commit `__ `#6875 `__ - ipaclient: fix missing RPM ownership - `commit `__ + `commit `__ `#6927 `__ - tests: add missing dependency iptables - `commit `__ + `commit `__ - ca_status: add HTTP timeout 30 seconds - `commit `__ + `commit `__ `#6766 `__ - http_request: add timeout option - `commit `__ + `commit `__ `#6766 `__ - Use proper SELinux context with http.keytab - `commit `__ + `commit `__ `#6924 `__ - Store GSSAPI session key in /var/run/ipa - `commit `__ + `commit `__ `#6880 `__ - Fix PKCS11 helper - `commit `__ + `commit `__ `#6692 `__ - Remove surplus 'the' in output of ipa-adtrust-install - `commit `__ + `commit `__ `#6864 `__ - collect audit.log for easier selinux investigation - `commit `__ + `commit `__ - Set "KDC:Disable Last Success" by default - `commit `__ + `commit `__ `#5313 `__ - Set development version to 4.5.90 - `commit `__ + `commit `__ @@ -1186,7 +1186,7 @@ Lewis Eason (1) ---------------------------------------------------------------------------------------------- - Correct typo estabilish->establish in the install scripts - `commit `__ + `commit `__ @@ -1194,32 +1194,32 @@ Michal Reznik (9) ---------------------------------------------------------------------------------------------- - test_caless: add SAN dNSName extensions for wildcard tests - `commit `__ + `commit `__ `#7100 `__ - test_caless: add replica ca-less to ca-full test (master caless) - `commit `__ + `commit `__ `#6226 `__, `#7086 `__ - test_caless: add server_replica ca-less to ca-full test - `commit `__ + `commit `__ `#7086 `__ - tests: fix external_ca test suite failing due to missing SKI - `commit `__ + `commit `__ `#7099 `__ - test_caless: remove xfail in wildcard certificate tests - `commit `__ + `commit `__ `#5603 `__ - test_caless: introduce new python makepki + fix SKI extension issue - `commit `__ + `commit `__ `#7030 `__ - test_caless: mark TestCertinstall intermediate CA tests as xfail - `commit `__ + `commit `__ `#6959 `__ - test_caless: add pkinit option and test it - `commit `__ + `commit `__ `#6854 `__ - added krb5kdc.log to pytest logging - `commit `__ + `commit `__ @@ -1227,7 +1227,7 @@ Nathaniel McCallum (1) ---------------------------------------------------------------------------------------------- - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace - `commit `__ + `commit `__ `#7035 `__ @@ -1236,7 +1236,7 @@ Oliver Gutierrez (1) ---------------------------------------------------------------------------------------------- - Added plugins directory to paclient subpackages - `commit `__ + `commit `__ @@ -1245,7 +1245,7 @@ Petr Spacek (1) - ipalib.constants: Remove default domain, realm, basedn, xmlrpc_uri, ldap_uri - `commit `__ + `commit `__ @@ -1253,20 +1253,20 @@ Petr Vobornik (5) ---------------------------------------------------------------------------------------------- - log progress of wait_for_open_ports - `commit `__ + `commit `__ `#7083 `__ - control logging of host_port_open from caller - `commit `__ + `commit `__ `#7083 `__ - kerberos session: use CA cert with full cert chain for obtaining cookie - `commit `__ + `commit `__ `#6876 `__ - restore: restart/reload gssproxy after restore - `commit `__ + `commit `__ `#6902 `__ - automount install: fix checking of SSSD functionality on uninstall - `commit `__ + `commit `__ `#6861 `__ @@ -1275,102 +1275,102 @@ Pavel Vomacka (34) ---------------------------------------------------------------------------------------------- - Fixes bug in actions creating for search facet - `commit `__ + `commit `__ `#7052 `__ - WebUI: fix showing required asterisk '*' - `commit `__ + `commit `__ `#6849 `__ - WebUI: Update unit test README - `commit `__ + `commit `__ `#6974 `__ - Fixes details_test.js - `commit `__ + `commit `__ `#6974 `__ - Fixes for widget_tests.js - `commit `__ + `commit `__ `#6974 `__ - Fixes for aci_tests.js - `commit `__ + `commit `__ `#6974 `__ - Fixes for entity_tests.js - `commit `__ + `commit `__ `#6974 `__ - Fixes for ipa_test.js - `commit `__ + `commit `__ `#6974 `__ - Add up to date JSON files - `commit `__ + `commit `__ `#6974 `__ - Add loader.js into requirements of all HTML unit test files - `commit `__ + `commit `__ `#6974 `__ - WebUI: remove creating js/libs symlink from makefile - `commit `__ + `commit `__ `#6447 `__ - WebUI: Remove plugins symlink as it is unused - `commit `__ + `commit `__ `#6447 `__ - Remove all old JSON files - `commit `__ + `commit `__ `#6447 `__ - Revert "Web UI: Remove offline version of Web UI" - `commit `__ + `commit `__ - WebUI: Add hyphenate versions of Host(Role) Based strings - `commit `__ + `commit `__ `#6582 `__ - WebUI: fix incorrectly shown links in association tables - `commit `__ + `commit `__ `#7066 `__ - WebUI: fix jslint error - `commit `__ + `commit `__ - WebUI: change validator of page size settings - `commit `__ + `commit `__ `#6980 `__ - WebUI: Add positive number validator - `commit `__ + `commit `__ `#6980 `__ - WebUI: add support for changing trust UPN suffixes - `commit `__ + `commit `__ `#7015 `__ - Bump version of python-gssapi - `commit `__ + `commit `__ `#6796 `__ - Turn off OCSP check - `commit `__ + `commit `__ `#6981 `__, `#6982 `__ - Change python-cryptography to python2-cryptography - `commit `__ + `commit `__ `#6749 `__ - Turn on NSSOCSP check in mod_nss conf - `commit `__ + `commit `__ `#6370 `__ - WebUI - Coverity: fix identical branches of if statement - `commit `__ + `commit `__ - WebUI - Coverity: fixed null pointer exception - `commit `__ + `commit `__ - WebUI: Coverity - add explicit window object to alert methods - `commit `__ + `commit `__ - WebUI: Allow to add certs to certmapping with CERT LINES around - `commit `__ + `commit `__ `#6772 `__ - WebUI: Fix showing vault in selfservice view - `commit `__ + `commit `__ `#6812 `__ - WebUI: suppress truncation warning in select widget - `commit `__ + `commit `__ `#6618 `__ - WebUI: Add support for suppressing warnings - `commit `__ + `commit `__ `#6618 `__ - WebUI: Add support for login for AD users - `commit `__ + `commit `__ `#3242 `__ - WebUI: add method for disabling item in user dropdown menu - `commit `__ + `commit `__ `#3242 `__ - WebUI: check principals in lowercase - `commit `__ + `commit `__ `#3242 `__ @@ -1379,10 +1379,10 @@ Rob Crittenden (2) ---------------------------------------------------------------------------------------------- - Include the CA basic constraint in CSRs when renewing a CA - `commit `__ + `commit `__ `#7088 `__ - Pass ipa-ca-agent credentials as PEM files - `commit `__ + `commit `__ `#7076 `__ @@ -1392,11 +1392,11 @@ Gabe (2) - Update get_attr_filter in LDAPSearch to handle nsaccountlock user searches - `commit `__ + `commit `__ `#6896 `__ - Add --password-expiration to allow admin to force user password expiration - `commit `__ + `commit `__ @@ -1404,36 +1404,36 @@ Sumit Bose (11) ---------------------------------------------------------------------------------------------- - ipa_pwd_extop: do not generate NT hashes in FIPS mode - `commit `__ + `commit `__ `#7026 `__ - ipa-sam: replace encode_nt_key() with E_md4hash() - `commit `__ + `commit `__ `#7026 `__ - ipa-kdb: use canonical principal in certauth plugin - `commit `__ + `commit `__ `#6993 `__ - ipa-kdb: reload certificate mapping rules periodically - `commit `__ + `commit `__ `#6963 `__ - IPA-KDB: use relative path in ipa-certmap config snippet - `commit `__ + `commit `__ `#6833 `__ - extdom: improve cert request - `commit `__ + `commit `__ `#6826 `__ - extdom: do reverse search for domain separator - `commit `__ + `commit `__ - ipa-kdb: do not depend on certauth_plugin.h - `commit `__ + `commit `__ `#4905 `__ - configure: fix --disable-server with certauth plugin - `commit `__ + `commit `__ `#6816 `__ - IPA certauth plugin - `commit `__ + `commit `__ `#4905 `__ - ipa-kdb: add ipadb_fetch_principals_with_extra_filter() - `commit `__ + `commit `__ `#4905 `__ @@ -1442,37 +1442,37 @@ Simo Sorce (12) ---------------------------------------------------------------------------------------------- - Always check peer has keys before connecting - `commit `__ + `commit `__ - Make sure we check ccaches in all rpcserver paths - `commit `__ + `commit `__ - Revert setting sessionMaxAge for old clients - `commit `__ + `commit `__ `#7001 `__ - Add code to be able to set default kinit lifetime - `commit `__ + `commit `__ `#7001 `__ - Fix rare race condition with missing ccache file - `commit `__ + `commit `__ - Make sure remote hosts have our keys - `commit `__ + `commit `__ `#6838 `__ - Fix s4u2self with adtrust - `commit `__ + `commit `__ `#6862 `__ - Prevent churn on ccaches - `commit `__ + `commit `__ `#6775 `__ - Work around issues fetching session data - `commit `__ + `commit `__ `#6775 `__ - Handle failed authentication via cookie - `commit `__ + `commit `__ `#6775 `__ - Avoid growing FILE ccaches unnecessarily - `commit `__ + `commit `__ `#6775 `__ - Add options to allow ticket caching - `commit `__ + `commit `__ `#6771 `__ @@ -1481,291 +1481,291 @@ Stanislav Laznicka (97) ---------------------------------------------------------------------------------------------- - spec: remove strict options from shebangs - `commit `__ + `commit `__ `#4985 `__ - spec: have the scripts depend on py3 packages - `commit `__ + `commit `__ `#4985 `__ - spec: remove python3 workaround - `commit `__ + `commit `__ `#4985 `__ - Remove unused variable - `commit `__ + `commit `__ - certmonger: remove temporary workaround - `commit `__ + `commit `__ - cert: fix wrong assumption of cert-show result type - `commit `__ + `commit `__ `#4985 `__ - rpc: don't encode bytes - `commit `__ + `commit `__ `#4985 `__ - py3: Fix searching for yubikeys - `commit `__ + `commit `__ `#7121 `__ - py3: remove relative import - `commit `__ + `commit `__ `#4985 `__, `#6874 `__ - py3: remove Exception.message appearances - `commit `__ + `commit `__ `#4985 `__, `#6874 `__ - Fix cert file creation during CA-less installation - `commit `__ + `commit `__ `#7118 `__ - Uninstall: fix BytesWarning exception - `commit `__ + `commit `__ `#4985 `__ - Unify storing certificates in LDAP - `commit `__ + `commit `__ `#4985 `__ - py3: fix caless to CA promotion on replica - `commit `__ + `commit `__ `#4985 `__ - cacert_manage: fix CA cert renewal - `commit `__ + `commit `__ `#4985 `__ - python3: port certmonger requests script - `commit `__ + `commit `__ `#4985 `__ - crtmgr: fix bug if CERTMONGER_CERTIFICATE not set - `commit `__ + `commit `__ `#4985 `__ - certmonger: finish refactoring for request script - `commit `__ + `commit `__ `#4985 `__ - certmonger: fix storing retrieved certificates - `commit `__ + `commit `__ `#4985 `__ - Make the IPA server run under Python 3 by default - `commit `__ + `commit `__ `#4985 `__ - Turn IPA scripts to python3 -bb for testing - `commit `__ + `commit `__ `#4985 `__ - py3: Depend on newer pyldap for server-upgrade - `commit `__ + `commit `__ `#4985 `__ - ipautil: port host_port_open() to python 3 - `commit `__ + `commit `__ `#4985 `__ - conncheck: fix progression on failure - `commit `__ + `commit `__ `#4985 `__ - kerberos: fix sorting Principal objects - `commit `__ + `commit `__ `#4985 `__ - host, service: fix adding host/svc with a cert - `commit `__ + `commit `__ `#7077 `__ - server plugin: pass bytes to ldap.modify_s - `commit `__ + `commit `__ `#4985 `__ - replica: fix SetuptoolsVersion comparison - `commit `__ + `commit `__ `#4985 `__ - replica-prepare: run the script in py3 by default - `commit `__ + `commit `__ `#4985 `__ - certs: write and read bytes as such - `commit `__ + `commit `__ `#4985 `__ - client: make ipa-client-install py3 compatible - `commit `__ + `commit `__ `#4985 `__ - cainstance: read cert file as bytes - `commit `__ + `commit `__ `#4985 `__ - ca: TypeError fix - `commit `__ + `commit `__ `#4985 `__ - krainstance: fix writing str to file - `commit `__ + `commit `__ `#4985 `__ - replica-conncheck: log when failed to RPC connect - `commit `__ + `commit `__ - Fixup of not-so-good PEM certs - `commit `__ + `commit `__ `#4985 `__ - x509,certdb: handle certificates as bytes - `commit `__ + `commit `__ `#4985 `__ - Create a Certificate parameter - `commit `__ + `commit `__ `#4985 `__ - parameters: relax type checks - `commit `__ + `commit `__ `#4985 `__ - tests: fix failing HTTPS connection - `commit `__ + `commit `__ `#4985 `__ - Introduce load_unknown_x509_certificate() - `commit `__ + `commit `__ `#4985 `__ - x509: Make certificates represented as objects - `commit `__ + `commit `__ `#4985 `__ - Split x509.load_certificate() into PEM/DER functions - `commit `__ + `commit `__ `#4985 `__ - README: Fix trailing whitespace - `commit `__ + `commit `__ - Ensure network is online prior to an upgrade - `commit `__ + `commit `__ `#7039 `__ - rpcserver: remove addition of str and bytes - `commit `__ + `commit `__ `#4985 `__ - wsgi plugins: mod_wsgi expects bytes as an output - `commit `__ + `commit `__ `#4985 `__ - adtrustinstance: write the conf as a string - `commit `__ + `commit `__ `#4985 `__ - adtrustinstance: pep8 fix - `commit `__ + `commit `__ - More verbose error message on kdc cert validation - `commit `__ + `commit `__ `#6945 `__ - cert-validate: keep all messages in cert validation - `commit `__ + `commit `__ `#6945 `__ - adtrustinstance: fix ID range comparison - `commit `__ + `commit `__ `#7002 `__ - Docstring+refactor of IPADiscovery.ipadnssearchkrbrealm() - `commit `__ + `commit `__ - ipadiscovery: Return realm as a string - `commit `__ + `commit `__ `#4985 `__ - session_storage: Correctly handle string/byte types - `commit `__ + `commit `__ `#4985 `__ - rpc: avoid possible recursion in create_connection - `commit `__ + `commit `__ `#6796 `__ - rpc: preparations for recursion fix - `commit `__ + `commit `__ `#6796 `__ - Avoid possible endless recursion in RPC call - `commit `__ + `commit `__ `#6796 `__ - kdc.key should not be visible to all - `commit `__ + `commit `__ `#6973 `__ - Change ConfigParser to RawConfigParser - `commit `__ + `commit `__ `#4985 `__ - ca/cert-show: check certificate_out in options - `commit `__ + `commit `__ `#6885 `__ - Remove pkinit-anonymous command - `commit `__ + `commit `__ `#6936 `__ - Make a doctext more clear - `commit `__ + `commit `__ - Provide useful messages during cert validation - `commit `__ + `commit `__ `#6945 `__ - cert-show: writable files does not mean dirs - `commit `__ + `commit `__ `#6883 `__ - fix managed-entries printing IPA not installed - `commit `__ + `commit `__ `#6928 `__ - Fix wrong message on Dogtag instances stop - `commit `__ + `commit `__ `#6766 `__ - Make CA/KRA fail when they don't start - `commit `__ + `commit `__ `#6766 `__ - Remove the cachedproperty class - `commit `__ + `commit `__ `#6878 `__ - Refresh Dogtag RestClient.ca_host property - `commit `__ + `commit `__ `#6878 `__ - compat plugin: Update link to slapi-nis project - `commit `__ + `commit `__ - compat: ignore cn=topology,cn=ipa,cn=etc subtree - `commit `__ + `commit `__ `#6821 `__ - Move the compat plugin setup at the end of install - `commit `__ + `commit `__ `#6821 `__ - compat-manage: behave the same for all users - `commit `__ + `commit `__ `#6821 `__ - Fix CAInstance.import_ra_cert for empty passwords - `commit `__ + `commit `__ `#6878 `__ - Fix RA cert import during DL0 replication - `commit `__ + `commit `__ `#6878 `__ - ext. CA: correctly write the cert chain - `commit `__ + `commit `__ `#6872 `__ - server-install: No double Kerberos install - `commit `__ + `commit `__ `#6757 `__ - Fix CA-less to CA-full upgrade - `commit `__ + `commit `__ `#6853 `__ - replicainstall: better client install exception handling - `commit `__ + `commit `__ `#6183 `__ - Add the force-join option to replica install - `commit `__ + `commit `__ `#6183 `__ - server-install: remove broken no-pkinit check - `commit `__ + `commit `__ `#6807 `__ - Add pki_pin only when needed - `commit `__ + `commit `__ `#6839 `__ - Remove publish_ca_cert() method from NSSDatabase - `commit `__ + `commit `__ `#6806 `__ - Get correct CA cert nickname in CA-less - `commit `__ + `commit `__ `#6806 `__ - Remove redundant option check for cert files - `commit `__ + `commit `__ `#6801 `__ - replica-prepare man: remove pkinit option refs - `commit `__ + `commit `__ `#6801 `__ - Don't allow setting pkinit-related options on DL0 - `commit `__ + `commit `__ `#6801 `__ - Fix the order of cert-files check - `commit `__ + `commit `__ `#6801 `__ - Generate PIN for PKI to help Dogtag in FIPS - `commit `__ + `commit `__ `#6824 `__ - Backup CA cert from kerberos folder - `commit `__ + `commit `__ `#6748 `__ - Allow renaming of the sudorule objects - `commit `__ + `commit `__ `#2466 `__ - Allow renaming of the HBAC rule objects - `commit `__ + `commit `__ `#6784 `__ - Reworked the renaming mechanism - `commit `__ + `commit `__ `#2466 `__, `#6784 `__ - Bump samba version for FIPS and priv. separation - `commit `__ + `commit `__ `#6671 `__, `#6697 `__ - Backup ipa-specific httpd unit-file - `commit `__ + `commit `__ `#6748 `__ - Add debug log in case cookie retrieval went wrong - `commit `__ + `commit `__ `#6774 `__ @@ -1774,7 +1774,7 @@ Thierry Bordaz (1) ---------------------------------------------------------------------------------------------- - NULL LDAP context in call to ldap_search_ext_s during search - `commit `__ + `commit `__ `#7017 `__ @@ -1783,37 +1783,37 @@ Tibor Dudlák (11) ---------------------------------------------------------------------------------------------- - otptoken_yubikey.py: Removed traceback when package missing. - `commit `__ + `commit `__ `#6979 `__ - topology.py: Removes error message from dictionary. - `commit `__ + `commit `__ `#6533 `__ - Add test: test_xmlrpc/test_whoami_plugin.py - `commit `__ + `commit `__ `#6745 `__ - whoami.py: Type error when running tests - `commit `__ + `commit `__ `#7050 `__ - Create indexes for 'serverhostname' attribute - `commit `__ + `commit `__ `#6939 `__ - Add --force-join into ipa-replica-install manpage - `commit `__ + `commit `__ `#7011 `__ - dnsserver.py: dnsserver-find no longer returns internal server error - `commit `__ + `commit `__ `#6571 `__ - Add Role 'Enrollment Administrator' - `commit `__ + `commit `__ `#6852 `__ - server.py: Removes dns-server configuration from ldap - `commit `__ + `commit `__ `#6572 `__ - sssd.py: Deprecating no-sssd option. - `commit `__ + `commit `__ `#5860 `__ - client.py: Replace hardcoded 'admin' with options.principal - `commit `__ + `commit `__ `#5406 `__ @@ -1822,10 +1822,10 @@ Tibor Dudlák (2) ---------------------------------------------------------------------------------------------- - user.py: replace user_mod with ldap.update_entry() - `commit `__ + `commit `__ `#5788 `__ - Add 'TIP' to enable copr repo. - `commit `__ + `commit `__ @@ -1834,11 +1834,11 @@ Timo Aaltonen (2) - ipa-otpd.socket.in: Use a platform specific value for KDC service file - `commit `__ + `commit `__ `#6845 `__ - configure: Use ODS_USER and NAMED_GROUP in daemons/dnssec/\*.service.in - `commit `__ + `commit `__ @@ -1846,70 +1846,70 @@ Tomas Krizek (25) ---------------------------------------------------------------------------------------------- - Become IPA 4.6.0 - `commit `__ + `commit `__ - Contributors.txt: update - `commit `__ + `commit `__ - zanata: update translations for ipa-4-6 - `commit `__ + `commit `__ - zanata: set project version to ipa-4-6 - `commit `__ + `commit `__ - dnssec: keep dnssec daemons in Python2 - `commit `__ + `commit `__ `#4985 `__ - ipatests: collect log after ipa-ca-install - `commit `__ + `commit `__ `#7060 `__ - dnssec: fix localhsm.py utility script - `commit `__ + `commit `__ `#7116 `__ - prci: add caless tests - `commit `__ + `commit `__ - makerpms.sh: make git checkout optional - `commit `__ + `commit `__ `#6605 `__ - build: checkout \*.po files at the end of makerpms.sh - `commit `__ + `commit `__ `#6605 `__ - freeipa-pr-ci: enable pull-request CI - `commit `__ + `commit `__ - ipactl: log check_version exception - `commit `__ + `commit `__ - logging: make sure logging level is set to proper value - `commit `__ + `commit `__ - ipatests: do not finalize api when IPA is not configured - `commit `__ + `commit `__ `#7046 `__ - ipatests: do not collect systemd journal when logfile_dir is missing - `commit `__ + `commit `__ `#6971 `__ - ipatests: add systemd journal collection for multihost tests - `commit `__ + `commit `__ `#6971 `__ - ipatests: change logdir naming pattern for multihost tests - `commit `__ + `commit `__ `#6971 `__ - named.conf template: add modification warning - `commit `__ + `commit `__ - ca, kra install: validate DM password - `commit `__ + `commit `__ `#6892 `__ - installutils: add DM password validator - `commit `__ + `commit `__ `#6892 `__ - ca install: merge duplicated code for DM password - `commit `__ + `commit `__ `#6892 `__ - upgrade: add missing suffix to http instance - `commit `__ + `commit `__ `#6920 `__ - installer service: fix typo in service entry - `commit `__ + `commit `__ `#6920 `__ - python2-ipalib: add missing python dependency - `commit `__ + `commit `__ `#6920 `__ - kra install: update installation failure message - `commit `__ + `commit `__ `#6923 `__ @@ -1918,7 +1918,7 @@ Thorsten Scherf (2) ---------------------------------------------------------------------------------------------- - Changed ownership of ldiffile to DS_USER - `commit `__ + `commit `__ `#7010 `__ - Fixed typo in ipa-client-install output - `commit `__ + `commit `__ diff --git a/src/page/Releases/4.6.1.rst b/src/page/Releases/4.6.1.rst index 8434bc9a4..29b5665d7 100644 --- a/src/page/Releases/4.6.1.rst +++ b/src/page/Releases/4.6.1.rst @@ -85,13 +85,13 @@ Alexander Bokovoy (3) ---------------------------------------------------------------------------------------------- - Make sure upgrade also checks for IPv6 stack - `commit `__ + `commit `__ `#7083 `__ - OTP import: support hash names with HMAC- prefix - `commit `__ + `commit `__ `#7146 `__ - dsinstance: Restore context after changing dse.ldif - `commit `__ + `commit `__ `#7150 `__ @@ -100,10 +100,10 @@ Felipe Volpone (2) ---------------------------------------------------------------------------------------------- - Changing idoverrideuser-\* to treat objectClass case insensitively - `commit `__ + `commit `__ `#7074 `__ - Fixing how sssd.conf is updated when promoting a client to replica - `commit `__ + `commit `__ `#7127 `__ @@ -112,13 +112,13 @@ Florence Blanc-Renaud (3) ---------------------------------------------------------------------------------------------- - Fix ipa-server-upgrade with server cert tracking - `commit `__ + `commit `__ `#7141 `__ - Python3: Fix winsync replication agreement - `commit `__ + `commit `__ `#7131 `__ - Fix ipa config-mod --ca-renewal-master - `commit `__ + `commit `__ `#7120 `__ @@ -127,10 +127,10 @@ Fraser Tweedale (2) ---------------------------------------------------------------------------------------------- - ipa-pki-retrieve-key: ensure we do not crash - `commit `__ + `commit `__ `#7115 `__ - issue_server_cert: avoid application of str to bytes - `commit `__ + `commit `__ `#7131 `__ @@ -139,7 +139,7 @@ Martin Basti (1) ---------------------------------------------------------------------------------------------- - py3: set samba dependencies - `commit `__ + `commit `__ `#7131 `__ @@ -148,7 +148,7 @@ Petr Vobornik (1) ---------------------------------------------------------------------------------------------- - browser config: cleanup after removal of Firefox extension - `commit `__ + `commit `__ `#7135 `__ @@ -157,13 +157,13 @@ Pavel Vomacka (3) ---------------------------------------------------------------------------------------------- - WebUI: Fix calling undefined method during reset passwords - `commit `__ + `commit `__ `#7143 `__ - WebUI: remove unused parameter from get_whoami_command - `commit `__ + `commit `__ `#7143 `__ - Adds whoami DS plugin in case that plugin is missing - `commit `__ + `commit `__ `#7126 `__ @@ -172,10 +172,10 @@ Rob Crittenden (2) ---------------------------------------------------------------------------------------------- - Add exec to /var/lib/ipa/sysrestore for install status inquiries - `commit `__ + `commit `__ `#7081 `__ - Use TLS for the cert-find operation - `commit `__ + `commit `__ `#7027 `__ @@ -184,86 +184,86 @@ Stanislav Laznicka (28) ---------------------------------------------------------------------------------------------- - Don't write p11-kit EKU extension object if no EKU - `commit `__ + `commit `__ `#7119 `__ - pylint: fix missing module - `commit `__ + `commit `__ - travis: run the same tests in python2/3 - `commit `__ + `commit `__ `#7131 `__ - certmap testing: fix wrong cert construction - `commit `__ + `commit `__ `#7131 `__ - ldap2: don't use decode() on str instance - `commit `__ + `commit `__ `#7131 `__ - client: fix retrieving certs from HTTP - `commit `__ + `commit `__ `#7131 `__ - uninstall: remove deprecation warning - `commit `__ + `commit `__ `#7131 `__ - ldif: handle attribute names as strings - `commit `__ + `commit `__ `#7129 `__ - pkinit: fix sorting dictionaries - `commit `__ + `commit `__ `#7131 `__ - pkinit: don't fail when no pkinit servers found - `commit `__ + `commit `__ `#7144 `__ - travis: remove "fast" from "makecache fast" - `commit `__ + `commit `__ `#6874 `__ - Change Travis CI container to FreeIPA-owned - `commit `__ + `commit `__ `#6874 `__ - Change the requirements for pylint in wheel - `commit `__ + `commit `__ `#6874 `__ - rpcserver: don't call xmlserver.Command - `commit `__ + `commit `__ `#6874 `__ - secrets: disable relative-imports for custodia - `commit `__ + `commit `__ `#6874 `__ - pylint: disable \__hash_\_ for some classes - `commit `__ + `commit `__ `#6874 `__ - install.util: disable no-value-for-parameter - `commit `__ + `commit `__ `#6874 `__ - pylint: make unsupported-assignment-operation check local - `commit `__ + `commit `__ `#6874 `__ - sudocmd: fix unsupported assignment - `commit `__ + `commit `__ `#6874 `__ - pylint: Iterate through dictionaries - `commit `__ + `commit `__ `#6874 `__ - parameters: convert Decimal.precision to int - `commit `__ + `commit `__ `#6874 `__ - dcerpc: disable unbalanced-tuple-unpacking - `commit `__ + `commit `__ `#6874 `__ - dcerpc: refactor assess_dcerpc_exception - `commit `__ + `commit `__ `#6874 `__ - pylint: fix no-member in schema plugin - `commit `__ + `commit `__ `#6874 `__ - csrgen: fix incorrect codec for pyasn BitString - `commit `__ + `commit `__ `#6874 `__ - pylint: fix not-context-manager false positives - `commit `__ + `commit `__ `#6874 `__ - Travis: archive logs of py3 jobs - `commit `__ + `commit `__ - travis: temporary workaround for Travis CI - `commit `__ + `commit `__ @@ -271,15 +271,15 @@ Tomas Krizek (6) ---------------------------------------------------------------------------------------------- - Become IPA 4.6.1 - `commit `__ + `commit `__ - Update contributors - `commit `__ + `commit `__ - Update translations - `commit `__ + `commit `__ - spec: bump python-pyasn1 to 0.3.2-2 - `commit `__ + `commit `__ `#7157 `__ - prci: use f26 template for master - `commit `__ + `commit `__ - VERSION: set back to git snapshot - `commit `__ + `commit `__ diff --git a/src/page/Releases/4.6.2.rst b/src/page/Releases/4.6.2.rst index e347ae72e..6b49f9f10 100644 --- a/src/page/Releases/4.6.2.rst +++ b/src/page/Releases/4.6.2.rst @@ -112,30 +112,30 @@ Alexander Bokovoy (10) ---------------------------------------------------------------------------------------------- - ipaserver/plugins/trust.py: pep8 compliance - `commit `__ + `commit `__ - trust: detect and error out when non-AD trust with IPA domain name exists - `commit `__ + `commit `__ `#7264 `__ - ipaserver/plugins/trust.py; fix some indenting issues - `commit `__ + `commit `__ - ipa-extdom-extop: refactor nsswitch operations - `commit `__ + `commit `__ `#5464 `__ - test_dns_plugin: cope with missing IPv6 in Travis - `commit `__ + `commit `__ - travis-ci: collect logs from cmocka tests - `commit `__ + `commit `__ - ipa-kdb: override krb5.conf when testing KDC code in cmocka - `commit `__ + `commit `__ - adtrust: filter out subdomains when defining our topology to AD - `commit `__ + `commit `__ `#6666 `__ - ipa-replica-manage: implicitly ignore initial time skew in force-sync - `commit `__ + `commit `__ `#7211 `__ - ds: ignore time skew during initial replication step - `commit `__ + `commit `__ `#7211 `__ @@ -144,12 +144,12 @@ Abhijeet Kasurde (3) ---------------------------------------------------------------------------------------------- - Trivial typo fix. - `commit `__ + `commit `__ - ipatests: Fix interactive prompt in ca_less tests - `commit `__ + `commit `__ `#7182 `__ - tests: correct usage of hostname in logger in tasks - `commit `__ + `commit `__ `#7190 `__ @@ -158,7 +158,7 @@ Alexander Koksharov (1) ---------------------------------------------------------------------------------------------- - kra-install: better warning message - `commit `__ + `commit `__ `#6952 `__ @@ -167,22 +167,22 @@ Aleksei Slaikovskii (6) ---------------------------------------------------------------------------------------------- - ipa-restore: Set umask to 0022 while restoring - `commit `__ + `commit `__ `#6844 `__ - View plugin/command help in pager - `commit `__ + `commit `__ `#7225 `__ - Add a notice to restart ipa services after certs are installed - `commit `__ + `commit `__ `#7016 `__ - Fix TypeError while ipa-restore is restoring a backup - `commit `__ + `commit `__ `#7131 `__ - ipaclient.plugins.dns: Cast DNS name to unicode - `commit `__ + `commit `__ `#7185 `__ - Less confusing message for PKINIT configuration during install - `commit `__ + `commit `__ `#7179 `__ @@ -191,62 +191,62 @@ Christian Heimes (23) ---------------------------------------------------------------------------------------------- - Update IPA_GIT_BRANCH to ipa-4-6 - `commit `__ + `commit `__ - Add make targets for fast linting and testing - `commit `__ + `commit `__ - Add marker needs_ipaapi and option to skip tests - `commit `__ + `commit `__ - Add python_requires to Python package metadata - `commit `__ + `commit `__ `#7294 `__ - Remove Custodia keys on uninstall - `commit `__ + `commit `__ `#7253 `__ - Update to python-ldap 3.0.0 - `commit `__ + `commit `__ - Update builddep command to install Python 3 and tox deps - `commit `__ + `commit `__ - Add workaround for pytest 3.3.0 bug - `commit `__ + `commit `__ - Fix dict iteration bug in dnsrecord_show - `commit `__ + `commit `__ `#7275 `__ - Reproducer for bug in structured dnsrecord_show - `commit `__ + `commit `__ `#7275 `__ - Use Python 3 on Travis - `commit `__ + `commit `__ - Prevent installation of Py2 and Py3 mod_wsgi - `commit `__ + `commit `__ `#7161 `__ - libotp: add libraries after objects - `commit `__ + `commit `__ `#7189 `__ - Require UTF-8 fs encoding - `commit `__ + `commit `__ `#5887 `__ - Run tox tests for PyPI packages on Travis - `commit `__ + `commit `__ - Py3: Fix vault tests - `commit `__ + `commit `__ `#7033 `__ - Use namespace-aware meta importer for ipaplatform - `commit `__ + `commit `__ `#6474 `__ - Test script for ipa-custodia - `commit `__ + `commit `__ - Remove ignore_import_errors - `commit `__ + `commit `__ - Backup ipa-custodia conf and keys - `commit `__ + `commit `__ `#7247 `__ - Py3: fix fetching of tar files - `commit `__ + `commit `__ `#7131 `__ - Use os.path.isfile() and isdir() - `commit `__ + `commit `__ - Block PyOpenSSL to prevent SELinux execmem in wsgi - `commit `__ + `commit `__ `#5442 `__ @@ -256,9 +256,9 @@ David Kupka (2) - schema: Fix internal error in param-{find,show} with nonexistent object - `commit `__ + `commit `__ - tests: Add LDAP URI to ldappasswd explicitly - `commit `__ + `commit `__ `#6622 `__ @@ -267,22 +267,22 @@ Felipe Barreto (6) ---------------------------------------------------------------------------------------------- - Warning the user when using a loopback IP as forwarder - `commit `__ + `commit `__ `#5801 `__ - Removing replica-s4u2proxy.ldif since it's not used anymore - `commit `__ + `commit `__ `#7174 `__ - Fix log capture when running pytests_multihosts commands - `commit `__ + `commit `__ `#7186 `__ - Checks if replica-s4u2proxy.ldif should be applied - `commit `__ + `commit `__ `#7174 `__ - Fixing tox and pylint errors - `commit `__ + `commit `__ `#7132 `__ - Fixing param-{find,show} and output-{find,show} commands - `commit `__ + `commit `__ `#7134 `__ @@ -291,34 +291,34 @@ Florence Blanc-Renaud (10) ---------------------------------------------------------------------------------------------- - Improve help message for ipa trust-add --range-type - `commit `__ + `commit `__ `#7308 `__ - Fix ca less IPA install on fips mode - `commit `__ + `commit `__ `#7280 `__ - Fix ipa-restore (python2) - `commit `__ + `commit `__ `#7231 `__ - ipa-getkeytab man page: add more details about the -r option - `commit `__ + `commit `__ `#7237 `__ - Py3: fix ipa-replica-conncheck - `commit `__ + `commit `__ `#7131 `__ - Fix ipa-replica-conncheck when called with --principal - `commit `__ + `commit `__ `#7221 `__ - py3: fix ipa cert-request --database ... - `commit `__ + `commit `__ `#7148 `__ - ipa-cacert-manage renew: switch from ext-signed CA to self-signed - `commit `__ + `commit `__ `#7173 `__ - ipa-server-upgrade: do not add untracked certs to the request list - `commit `__ + `commit `__ `#7151 `__ - ipa-server-upgrade: fix the logic for tracking certs - `commit `__ + `commit `__ `#7151 `__ @@ -327,70 +327,70 @@ Fraser Tweedale (22) ---------------------------------------------------------------------------------------------- - ipa_certupdate: avoid classmethod and staticmethod - `commit `__ + `commit `__ `#6577 `__ - Run certupdate after promoting to CA-ful deployment - `commit `__ + `commit `__ `#7230 `__ - ipa-ca-install: run certupdate as initial step - `commit `__ + `commit `__ `#6577 `__ - CertUpdate: make it easy to invoke from other programs - `commit `__ + `commit `__ `#6577 `__ - renew_ra_cert: fix update of IPA RA user entry - `commit `__ + `commit `__ `#7282 `__ - Use correct version of Python in RPM scripts - `commit `__ + `commit `__ `#7299 `__ - Re-enable some KRA installation tests - `commit `__ + `commit `__ `#7220 `__ - Remove caJarSigningCert profile and related code - `commit `__ + `commit `__ `#7226 `__ - CertDB: remove unused method issue_signing_cert - `commit `__ + `commit `__ `#7226 `__ - Remove XPI and JAR MIME types from httpd config - `commit `__ + `commit `__ `#7226 `__ - Remove mention of firefox plugin after CA-less install - `commit `__ + `commit `__ `#7226 `__ - ipa-cacert-manage: avoid some duplicate string definitions - `commit `__ + `commit `__ `#6858 `__ - ipa-cacert-manage: handle alternative tracking request CA name - `commit `__ + `commit `__ `#6858 `__ - Add tests for external CA profile specifiers - `commit `__ + `commit `__ `#6858 `__ - ipa-cacert-manage: support MS V2 template extension - `commit `__ + `commit `__ `#6858 `__ - certmonger: add support for MS V2 template - `commit `__ + `commit `__ `#6858 `__ - certmonger: refactor 'resubmit_request' and 'modify' - `commit `__ + `commit `__ `#6858 `__ - ipa-ca-install: add --external-ca-profile option - `commit `__ + `commit `__ `#6858 `__ - install: allow specifying external CA template - `commit `__ + `commit `__ `#6858 `__ - Remove duplicate references to external CA type - `commit `__ + `commit `__ `#6858 `__ - cli: simplify parsing of arbitrary types - `commit `__ + `commit `__ `#6858 `__ - py3: fix pkcs7 file processing - `commit `__ + `commit `__ `#7131 `__ @@ -399,7 +399,7 @@ John Morris (1) ---------------------------------------------------------------------------------------------- - Increase dbus client timeouts during CA install - `commit `__ + `commit `__ @@ -407,40 +407,40 @@ Michal Reznik (12) ---------------------------------------------------------------------------------------------- - test_batch_plugin: fix py2/3 failing assertion - `commit `__ + `commit `__ `#7131 `__ - test_vault: increase WAIT_AFTER_ARCHIVE - `commit `__ + `commit `__ `#7265 `__ - test_caless: fix http.p12 is not valid - `commit `__ + `commit `__ `#7254 `__ - test_caless: fix TypeError on domain_level compare - `commit `__ + `commit `__ `#7254 `__ - manpage: ipa-replica-conncheck - fix minor typo - `commit `__ + `commit `__ `#7250 `__ - test_forced_client: decode get_file_contents() result - `commit `__ + `commit `__ `#7131 `__ - test_external_dns: add missing test cases - `commit `__ + `commit `__ `#6091 `__ - test_caless: open CA cert in binary mode - `commit `__ + `commit `__ `#7131 `__ - tests: add host zone with overlap - `commit `__ + `commit `__ `#7124 `__ - tests_py3: decode get_file_contents() result - `commit `__ + `commit `__ `#7131 `__ - test_caless: add caless to external CA test - `commit `__ + `commit `__ `#7155 `__ - test_external_ca: switch to python-cryptography - `commit `__ + `commit `__ `#7154 `__ @@ -449,7 +449,7 @@ Mohammad Rizwan Yusuf (1) ---------------------------------------------------------------------------------------------- - ipatest: replica install with existing entry on master - `commit `__ + `commit `__ `#7174 `__, `#7276 `__ @@ -459,11 +459,11 @@ Petr Čech (2) ---------------------------------------------------------------------------------------------- - tests: Mark failing tests as failing - `commit `__ + `commit `__ `#7008 `__, `#7220 `__ - ipatests: Fix on logs collection - `commit `__ + `commit `__ `#7214 `__ @@ -472,7 +472,7 @@ Pavel Vomacka (1) ---------------------------------------------------------------------------------------------- - WebUI: make Domain Resolution Order writable - `commit `__ + `commit `__ `#7169 `__ @@ -481,24 +481,24 @@ Rob Crittenden (7) ---------------------------------------------------------------------------------------------- - Run server upgrade in ipactl start/restart - `commit `__ + `commit `__ `#6968 `__ - If the cafile is not present or readable then raise an exception - `commit `__ + `commit `__ `#7145 `__ - Add test to ensure that properties are being set in rpcclient - `commit `__ + `commit `__ - Use the CA chain file from the RPC context - `commit `__ + `commit `__ `#7145 `__ - Fix cert-find for CA-less installations - `commit `__ + `commit `__ `#7202 `__ - Use 389-ds provided method for file limits tuning - `commit `__ + `commit `__ `#6994 `__ - Collect group membership without a size limit - `commit `__ + `commit `__ `#7112 `__ @@ -507,7 +507,7 @@ Rishabh Dave (1) ---------------------------------------------------------------------------------------------- - ipa-ca-install: mention REPLICA_FILE as optional in help - `commit `__ + `commit `__ `#7223 `__ @@ -516,7 +516,7 @@ Sumit Bose (1) ---------------------------------------------------------------------------------------------- - ipa-kdb: reinit trusted domain data for enterprise principals - `commit `__ + `commit `__ `#7172 `__ @@ -525,63 +525,63 @@ Stanislav Laznicka (22) ---------------------------------------------------------------------------------------------- - Don't allow OTP or RADIUS in FIPS mode - `commit `__ + `commit `__ `#7168 `__ - caless tests: decode cert bytes in debug log - `commit `__ + `commit `__ - caless tests: make debug log of certificates sensible - `commit `__ + `commit `__ - Add indexing to improve host-find performance - `commit `__ + `commit `__ `#6371 `__ - Add the sub operation for fqdn index config - `commit `__ + `commit `__ `#6371 `__ - x509: remove subject_base() function - `commit `__ + `commit `__ - x509: remove the strip_header() function - `commit `__ + `commit `__ - py3: pass raw entries to LDIFWriter - `commit `__ + `commit `__ `#7131 `__ - ipatests: use python3 if built with python3 - `commit `__ + `commit `__ `#7131 `__ - PRCI: use a new template for py3 testing - `commit `__ + `commit `__ - csrgen_ffi: cast the DN value to unsigned char \* - `commit `__ + `commit `__ `#7131 `__ - Remove pkcs10 module contents - `commit `__ + `commit `__ `#7131 `__ - Add tests for CertificateSigningRequest - `commit `__ + `commit `__ `#7131 `__ - parameters: introduce CertificateSigningRequest - `commit `__ + `commit `__ `#7131 `__ - parameters: relax type checks - `commit `__ + `commit `__ `#7131 `__ - csrgen: update docstring for py3 - `commit `__ + `commit `__ `#7131 `__ - csrgen: accept public key info as Bytes - `commit `__ + `commit `__ `#7131 `__ - csrgen_ffi: pass bytes where "char \*" is required - `commit `__ + `commit `__ `#7131 `__ - travis: pep8 changes to pycodestyle - `commit `__ + `commit `__ - p11-kit: add serial number in DER format - `commit `__ + `commit `__ `#7210 `__ - travis: make tests fail if pep8 does not pass - `commit `__ + `commit `__ - Remove the \`message\` attribute from exceptions - `commit `__ + `commit `__ `#7131 `__ @@ -590,7 +590,7 @@ Thierry Bordaz (1) ---------------------------------------------------------------------------------------------- - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid - `commit `__ + `commit `__ `#7227 `__ @@ -599,11 +599,11 @@ Tibor Dudlák (3) ---------------------------------------------------------------------------------------------- - Become IPA 4.6.2 - `commit `__ + `commit `__ - Update Contributors.txt - `commit `__ + `commit `__ - Update zanata translations - `commit `__ + `commit `__ @@ -611,36 +611,36 @@ Tomas Krizek (13) ---------------------------------------------------------------------------------------------- - prci: define testing topologies - `commit `__ + `commit `__ - prci: start testing PRs on fedora 27 - `commit `__ + `commit `__ - py3 spec: remove python2 dependencies from server-trust-ad - `commit `__ + `commit `__ `#7208 `__ - py3 spec: remove python2 dependencies from freeipa-server - `commit `__ + `commit `__ `#7208 `__ - py3 spec: use proper python2 package names - `commit `__ + `commit `__ `#7131 `__ - ipatests: fix circular import for collect_logs - `commit `__ + `commit `__ - ipatests: collect logs for external_ca test suite - `commit `__ + `commit `__ - prci: add external_ca test - `commit `__ + `commit `__ - ldap: limit the retro changelog to dns subtree - `commit `__ + `commit `__ `#6515 `__ - spec: bump 389-ds-base to 1.3.7.6-1 - `commit `__ + `commit `__ - ipatests: set default 389-ds log level to 0 - `commit `__ + `commit `__ `#7162 `__ - prci: update F26 template - `commit `__ + `commit `__ - 4.6 set back to git snapshot - `commit `__ + `commit `__ @@ -649,5 +649,5 @@ Thorsten Scherf (1) - Add debug option to ipa-replica-manage and remove references to api_env var. - `commit `__ + `commit `__ `#7187 `__ diff --git a/src/page/Releases/4.6.8.rst b/src/page/Releases/4.6.8.rst index e8b128463..eee845015 100644 --- a/src/page/Releases/4.6.8.rst +++ b/src/page/Releases/4.6.8.rst @@ -263,10 +263,10 @@ Armando Neto (2) ---------------------------------------------------------------------------------------------- - Travis: Enable IPv6 support for Docker - `commit `__ + `commit `__ `#8213 `__ - prci: Update box used in branch ipa-4-6 - `commit `__ + `commit `__ @@ -274,72 +274,72 @@ Alexander Bokovoy (24) ---------------------------------------------------------------------------------------------- - Return to development snapshots - `commit `__ + `commit `__ - Become FreeIPA 4.6.8 - `commit `__ + `commit `__ - Update list of contributors - `commit `__ + `commit `__ - Allow rename of a host group - `commit `__ + `commit `__ `#6783 `__ - Add 'api' and 'aci' targets to make - `commit `__ + `commit `__ - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - `commit `__ + `commit `__ `#7181 `__ - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - `commit `__ + `commit `__ `#7181 `__ - ipatests: test sysaccount password change with a password policy applied - `commit `__ + `commit `__ `#7181 `__ - ipatests: allow changing sysaccount passwords as cn=Directory Manager - `commit `__ + `commit `__ `#7181 `__ - Fix indentation levels - `commit `__ + `commit `__ - Prevent adding IPA objects as external members of external groups - `commit `__ + `commit `__ `#8236 `__ - Secure AJP connector between Dogtag and Apache proxy - `commit `__ + `commit `__ `#8221 `__ - Tighten permissions on PKI proxy configuration - `commit `__ + `commit `__ `#8221 `__ - install/updates: move external members past schema compat update - `commit `__ + `commit `__ `#8193 `__ - covscan: free ucs2-encoded password copy when generating NTLM hash - `commit `__ + `commit `__ `#8131 `__ - covscan: free encryption types in case there is an error - `commit `__ + `commit `__ `#8131 `__ - Become FreeIPA 4.6.7 - `commit `__ + `commit `__ - Do not run trust upgrade code if master lacks Samba bindings - `commit `__ + `commit `__ `#8001 `__ - adtrust: add default read_keys permission for TDO objects - `commit `__ + `commit `__ `#8067 `__ - add default access control when migrating trust objects - `commit `__ + `commit `__ `#8067 `__ - ipasam: use SID formatting calls to libsss_idmap - `commit `__ + `commit `__ `#7893 `__ - Use unicode strings for Python 2 version - `commit `__ + `commit `__ `#6951 `__ - ipa-extdom-extop: test timed out getgrgid_r - `commit `__ + `commit `__ `#8044 `__ - Revert back to git snapshots - `commit `__ + `commit `__ @@ -347,33 +347,33 @@ Anuja More (13) ---------------------------------------------------------------------------------------------- - Mark test to skip sssd-1.16.3 [sssd/issue/4073] - `commit `__ + `commit `__ - ipatests: User and group with same name should not break reading AD user data. - `commit `__ + `commit `__ - Mark xfail for tests using sssd-1.16.3 - `commit `__ + `commit `__ - ipatests: Added test when 2FA prompting configurations is set. - `commit `__ + `commit `__ - Mark xfail for sssd-version 1.16.3 - `commit `__ + `commit `__ - ipatests: SSSD should fetch external groups without any limit. - `commit `__ + `commit `__ - Add sssd.py in nightly ipa-4-6.yaml - `commit `__ + `commit `__ - ipatests: Add test for ipa-extdom-extop plugin should allow @ in group name - `commit `__ + `commit `__ - Mark xfail for test_is_user_filtered - `commit `__ + `commit `__ - ipatests: filter_users should be applied correctly. - `commit `__ + `commit `__ - Mark xfail for test_sss_ssh_authorizedkeys() - `commit `__ + `commit `__ - ipatests: 'sss_ssh_authorizedkeys user' should return ssh key - `commit `__ + `commit `__ - Extdom plugin should not return error (32)/'No such object' - `commit `__ + `commit `__ `#8044 `__ @@ -382,23 +382,23 @@ Christian Heimes (7) ---------------------------------------------------------------------------------------------- - Add test case for OTP login - `commit `__ + `commit `__ `#7804 `__ - Cherry-picked only ldapmodify_dm() - `commit `__ + `commit `__ - Use default ssh host key algorithms - `commit `__ + `commit `__ `#8082 `__ - Log stderr in run_command - `commit `__ + `commit `__ - Fix CustodiaClient ccache handling - `commit `__ + `commit `__ `#7964 `__ - Don't configure KEYRING ccache in containers - `commit `__ + `commit `__ `#7807 `__ - Remove ZERO_STRUCT() call - `commit `__ + `commit `__ @@ -406,10 +406,10 @@ François Cami (2) ---------------------------------------------------------------------------------------------- - adtrust.py: mention restarting sssd when adding trust agents - `commit `__ + `commit `__ `#8148 `__ - prci_definitions: add master_3client topology - `commit `__ + `commit `__ `#8026 `__ @@ -418,87 +418,87 @@ Florence Blanc-Renaud (28) ---------------------------------------------------------------------------------------------- - ipatests: fix group-add-member in test_sssd - `commit `__ + `commit `__ `#8238 `__ - ipatests: fix KeyError in test_sssd - `commit `__ + `commit `__ `#8238 `__ - xmlrpc tests: add a test for idview-apply on a master - `commit `__ + `commit `__ `#5662 `__ - idviews: prevent applying to a master - `commit `__ + `commit `__ `#5662 `__ - ipa-adtrust-install: remote command fails if ipa-server-trust-ad pkg missing - `commit `__ + `commit `__ `#7600 `__ - ipatests: add test for ipa-adtrust-install --add-agents - `commit `__ + `commit `__ `#7600 `__ - ipa-adtrust-install: run remote configuration for new agents - `commit `__ + `commit `__ `#7600 `__ - Privilege: add a helper checking if a principal has a given privilege - `commit `__ + `commit `__ `#7600 `__ - ipatests: fix TestSubCAkeyReplication - `commit `__ + `commit `__ - ipatests: fix modify_sssd_conf() - `commit `__ + `commit `__ - test: add non-reg test checking pkinit after server install - `commit `__ + `commit `__ `#7795 `__ - pkinit setup: fix regression on master install - `commit `__ + `commit `__ `#7795 `__ - ipatests: add integration test for pkinit enable on replica - `commit `__ + `commit `__ `#7795 `__ - pkinit enable: use local dogtag only if host has CA - `commit `__ + `commit `__ `#7795 `__ - ipatests: fix backup and restore - `commit `__ + `commit `__ `#8170 `__ - ipa-cacert-manage man page: fix indentation - `commit `__ + `commit `__ `#8138 `__ - trust upgrade: ensure that host is member of adtrust agents - `commit `__ + `commit `__ - ipatests: fix test_ca_custom_sdn - `commit `__ + `commit `__ `#8126 `__ - smartcard: make the ipa-advise script compatible with authselect/authconfig - `commit `__ + `commit `__ `#8113 `__ - ipa-backup: fix python2 issue with os.mkdir - `commit `__ + `commit `__ `#8099 `__ - ipa-server-certinstall manpage: add missing options - `commit `__ + `commit `__ `#8086 `__ - ipatests: fix test_replica_promotion.py::TestHiddenReplicaPromotion - `commit `__ + `commit `__ `#8070 `__ - ipatests: add XMLRPC test for user-add when UPG plugin is disabled - `commit `__ + `commit `__ `#4972 `__ - ipa user_add: do not check group if UPG is disabled - `commit `__ + `commit `__ `#4972 `__ - replica install: enforce --server arg - `commit `__ + `commit `__ `#7566 `__ - check for single-label domains only during server install - `commit `__ + `commit `__ `#8058 `__ - xmlrpc test: add test for preserved > stage user - `commit `__ + `commit `__ `#7597 `__ - user-stage: transfer all attributes from preserved to stage user - `commit `__ + `commit `__ `#7597 `__ @@ -507,27 +507,27 @@ Fraser Tweedale (8) ---------------------------------------------------------------------------------------------- - Do not renew externally-signed CA as self-signed - `commit `__ + `commit `__ `#8176 `__ - test_integration: add tests for custom CA subject DN - `commit `__ + `commit `__ `#8084 `__ - upgrade: fix ipakra people entry 'description' attribute - `commit `__ + `commit `__ `#8084 `__ - krainstance: set correct issuer DN in uid=ipakra entry - `commit `__ + `commit `__ `#8084 `__ - Bump krb5 min version - `commit `__ + `commit `__ - CustodiaClient: fix IPASecStore config on ipa-4-7 - `commit `__ + `commit `__ `#7964 `__ - CustodiaClient: use ldapi when ldap_uri not specified - `commit `__ + `commit `__ `#7964 `__ - Handle missing LWCA certificate or chain - `commit `__ + `commit `__ `#7964 `__ @@ -536,7 +536,7 @@ Gaurav Talreja (1) ---------------------------------------------------------------------------------------------- - Normalize test definations titles - `commit `__ + `commit `__ @@ -544,7 +544,7 @@ Ganna Kaihorodova (1) ---------------------------------------------------------------------------------------------- - TestBasicADTrust.test_ipauser_authentication - `commit `__ + `commit `__ `#7470 `__ @@ -553,9 +553,9 @@ Jayesh Garg (2) ---------------------------------------------------------------------------------------------- - Test if ipactl starts services stopped by systemctl - `commit `__ + `commit `__ - Test for ipa-ca-install on replica - `commit `__ + `commit `__ @@ -563,7 +563,7 @@ Kaleemullah Siddiqui (1) ---------------------------------------------------------------------------------------------- - Tests for autounmembership feature - `commit `__ + `commit `__ @@ -571,24 +571,24 @@ Mohammad Rizwan Yusuf (7) ---------------------------------------------------------------------------------------------- - ipatests: Test if slew mode is not set while configuring ntpd - `commit `__ + `commit `__ `#8242 `__ - Test if schema-compat-entry-attribute is set - `commit `__ + `commit `__ `#8193 `__ - Test if schema-compat-entry-attribute is set - `commit `__ + `commit `__ `#8193 `__ - Add promote option to install_replica() method - `commit `__ + `commit `__ `#8152 `__ - Add test to nightly.yaml - `commit `__ + `commit `__ - Installation of replica against a specific server - `commit `__ + `commit `__ `#7566 `__ - Check file ownership and permission for dirsrv log instance - `commit `__ + `commit `__ `#7725 `__ @@ -597,7 +597,7 @@ ndehadra (1) ---------------------------------------------------------------------------------------------- - Hidden Replica: Add a test for Automatic CRL configuration - `commit `__ + `commit `__ `#7307 `__ @@ -606,33 +606,33 @@ Rob Crittenden (11) ---------------------------------------------------------------------------------------------- - Don't configure ntpd with -x - `commit `__ + `commit `__ `#8242 `__ - Test that pwpolicy only applied on Kerberos entries - `commit `__ + `commit `__ - Add ability to change a user password as the Directory Manager - `commit `__ + `commit `__ - Don't save password history on non-Kerberos accounts - `commit `__ + `commit `__ - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - `commit `__ + `commit `__ `#8164 `__ - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch - `commit `__ + `commit `__ - ipa-restore: Restore ownership and perms on 389-ds log directory - `commit `__ + `commit `__ `#7725 `__ - Report if a certmonger CA is missing - `commit `__ + `commit `__ `#7870 `__ - Don't log host passwords when they are set/modified - `commit `__ + `commit `__ `#8017 `__ - Disable deprecated-lambda check in adtrust upgrade code - `commit `__ + `commit `__ - Don't return SSH keys with ipa host-find --pkey-only - `commit `__ + `commit `__ `#8029 `__ @@ -641,11 +641,11 @@ Robbie Harwood (3) ---------------------------------------------------------------------------------------------- - Fix NULL pointer dereference in maybe_require_preauth() - `commit `__ + `commit `__ - Log INFO message when LDAP connection fails on startup - `commit `__ + `commit `__ - Fix segfault in ipadb_parse_ldap_entry() - `commit `__ + `commit `__ @@ -653,9 +653,9 @@ Sumit Bose (2) ---------------------------------------------------------------------------------------------- - ipa_sam: remove dependency to talloc_strackframe.h - `commit `__ + `commit `__ - extdom: unify error code handling especially LDAP_NO_SUCH_OBJECT - `commit `__ + `commit `__ `#8044 `__ @@ -664,10 +664,10 @@ Stanislav Levin (2) ---------------------------------------------------------------------------------------------- - Fix errors found by Pylint-2.4.3 - `commit `__ + `commit `__ `#8102 `__ - Fixed errors newly exposed by pylint 2.4.0 - `commit `__ + `commit `__ `#8077 `__ @@ -676,64 +676,64 @@ Sergey Orlov (24) ---------------------------------------------------------------------------------------------- - ipatests: remove test_ordering - `commit `__ + `commit `__ - ipatests: add test_trust suite to nightly runs - `commit `__ + `commit `__ - ipatests: add workaround for unfixed sssd bug in Fedora 27 - `commit `__ + `commit `__ - ipatests: use less strict check for error message - `commit `__ + `commit `__ - ipatests: provide AD admin password when trying to establish trust - `commit `__ + `commit `__ `#7895 `__ - ipatests: remove workaround for pylint error no-name-in-module - `commit `__ + `commit `__ `#8220 `__ - ipatests: temporary disable pylint check no-name-in-module - `commit `__ + `commit `__ `#8220 `__ - ipatests: remove invalid parameter from sssd.conf - `commit `__ + `commit `__ `#8219 `__ - ipatests: use remote_sssd_config to modify sssd.conf - `commit `__ + `commit `__ `#8219 `__ - ipatests: replace utility for editing sssd.conf - `commit `__ + `commit `__ `#8219 `__ - ipatests: update docstring to reflect changes in FileBackup.restore() - `commit `__ + `commit `__ - ipatests: refactor FileBackup helper - `commit `__ + `commit `__ `#8115 `__ - ipatests: fix collection of tests from test_trust suite - `commit `__ + `commit `__ - Add convenient template for temp commits - `commit `__ + `commit `__ - ipatests: add test_winsyncmigrate suite to nightly runs - `commit `__ + `commit `__ - ipatests: fix compatibility with python2 (import ConfigParser) - `commit `__ + `commit `__ - ipatests: add new utilities for file management - `commit `__ + `commit `__ - ipatests: add utility functions related to using and managing user accounts - `commit `__ + `commit `__ - ipatests: add check that ipa-adtrust-install generates sane smb.conf - `commit `__ + `commit `__ `#6951 `__ - ipatests: add test to check that only TLS 1.2 is enabled in Apache - `commit `__ + `commit `__ `#7995 `__ - ipatests: modify run_command to allow specify successful return codes - `commit `__ + `commit `__ - ipatests: in DNS zone file add A record for name server - `commit `__ + `commit `__ - ipatests: strip newline character when getting name of temp file - `commit `__ + `commit `__ - ipatests: fix DNS forwarders setup for AD trust tests with non-root domains - `commit `__ + `commit `__ @@ -742,11 +742,11 @@ Sumedh Sidhaye (2) - Added a test to check if ipa host-find --pkey-only does not return SSH public key - `commit `__ + `commit `__ `#8029 `__ - Test: Test to check whether ssh from ipa client to ipa master is successful after adding ldap_deref_threshold=0 in sssd.conf - `commit `__ + `commit `__ @@ -754,7 +754,7 @@ Simo Sorce (1) ---------------------------------------------------------------------------------------------- - Make sure to have storage space for tag - `commit `__ + `commit `__ @@ -762,10 +762,10 @@ Serhii Tsymbaliuk (2) ---------------------------------------------------------------------------------------------- - WebUI: Fix notification area layout - `commit `__ + `commit `__ `#8120 `__ - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - `commit `__ + `commit `__ `#8239 `__ @@ -774,7 +774,7 @@ Tibor Dudlák (1) ---------------------------------------------------------------------------------------------- - Add container environment check to replicainstall - `commit `__ + `commit `__ `#6210 `__ @@ -783,10 +783,10 @@ Tomas Halman (4) ---------------------------------------------------------------------------------------------- - extdom: add extdom protocol documentation - `commit `__ + `commit `__ - extdom: use sss_nss_*_timeout calls - `commit `__ + `commit `__ - extdom: plugin doesn't use timeout in blocking call - `commit `__ + `commit `__ - extdom: plugin doesn't allow @ in group name - `commit `__ + `commit `__ diff --git a/src/page/Releases/4.6.9.rst b/src/page/Releases/4.6.9.rst index a2ea34ae9..7d55a2cae 100644 --- a/src/page/Releases/4.6.9.rst +++ b/src/page/Releases/4.6.9.rst @@ -106,7 +106,7 @@ Alexander Bokovoy (1) ---------------------------------------------------------------------------------------------- - Become FreeIPA 4.6.9 - `commit `__ + `commit `__ @@ -114,5 +114,5 @@ Christian Heimes (1) ---------------------------------------------------------------------------------------------- - Prevent local account takeover - `commit `__ + `commit `__ `#8326 `__ diff --git a/src/page/Releases/4.7.5.rst b/src/page/Releases/4.7.5.rst index a13a24401..762b6f45d 100644 --- a/src/page/Releases/4.7.5.rst +++ b/src/page/Releases/4.7.5.rst @@ -238,19 +238,19 @@ Armando Neto (6) ---------------------------------------------------------------------------------------------- - Travis: Enable IPv6 support for Docker - `commit `__ + `commit `__ `#8213 `__ - prci: Bump template version - `commit `__ + `commit `__ - ipatests: Skip test_sss_ssh_authorizedkeys method - `commit `__ + `commit `__ `#8151 `__ - prci: bump template version - `commit `__ + `commit `__ - prci: increase timeout argument for test_sssd.py - `commit `__ + `commit `__ - prci: Update box used in branch ipa-4-7 - `commit `__ + `commit `__ @@ -259,63 +259,63 @@ Alexander Bokovoy (20) - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - `commit `__ + `commit `__ `#7181 `__ - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - `commit `__ + `commit `__ `#7181 `__ - ipatests: test sysaccount password change with a password policy applied - `commit `__ + `commit `__ `#7181 `__ - ipatests: allow changing sysaccount passwords as cn=Directory Manager - `commit `__ + `commit `__ `#7181 `__ - Fix indentation levels - `commit `__ + `commit `__ - ipatests: always skip additional input for group-add-member --external - `commit `__ + `commit `__ `#8236 `__ - Prevent adding IPA objects as external members of external groups - `commit `__ + `commit `__ `#8236 `__ - Secure AJP connector between Dogtag and Apache proxy - `commit `__ + `commit `__ `#8221 `__ - Tighten permissions on PKI proxy configuration - `commit `__ + `commit `__ `#8221 `__ - install/updates: move external members past schema compat update - `commit `__ + `commit `__ `#8193 `__ - covscan: free ucs2-encoded password copy when generating NTLM hash - `commit `__ + `commit `__ `#8131 `__ - covscan: free encryption types in case there is an error - `commit `__ + `commit `__ `#8131 `__ - Become FreeIPA 4.7.4 - `commit `__ + `commit `__ - Do not run trust upgrade code if master lacks Samba bindings - `commit `__ + `commit `__ `#8001 `__ - adtrust: add default read_keys permission for TDO objects - `commit `__ + `commit `__ `#8067 `__ - add default access control when migrating trust objects - `commit `__ + `commit `__ `#8067 `__ - ipa-extdom-extop: test timed out getgrgid_r - `commit `__ + `commit `__ `#8044 `__ - Update sudo test as SSSD 2.2.0 is available in the test image - `commit `__ + `commit `__ - Restore SELinux context for p11-kit config overrides - `commit `__ + `commit `__ `#7810 `__ - Back to git builds - `commit `__ + `commit `__ @@ -323,29 +323,29 @@ Anuja More (11) ---------------------------------------------------------------------------------------------- - Mark test to skip sssd-2.2.0 [sssd/issue/4073] - `commit `__ + `commit `__ - ipatests: User and group with same name should not break reading AD user data. - `commit `__ + `commit `__ - ipatests: Added test when 2FA prompting configurations is set. - `commit `__ + `commit `__ - Mark xfail for sssd-version < 2.2.2 - `commit `__ + `commit `__ - ipatests: SSSD should fetch external groups without any limit. - `commit `__ + `commit `__ - ipatests: Add test for ipa-extdom-extop plugin should allow @ in group name - `commit `__ + `commit `__ - Update topology for test_integration/test_sssd.py - `commit `__ + `commit `__ - Fix fedora version for xfail for sssd test - `commit `__ + `commit `__ - ipatests: filter_users should be applied correctly. - `commit `__ + `commit `__ - ipatests: 'sss_ssh_authorizedkeys user' should return ssh key - `commit `__ + `commit `__ - Extdom plugin should not return error (32)/'No such object' - `commit `__ + `commit `__ `#8044 `__ @@ -354,14 +354,14 @@ Christian Heimes (4) ---------------------------------------------------------------------------------------------- - Add test case for OTP login - `commit `__ + `commit `__ `#7804 `__ - Cherry-picked only ldapmodify_dm() - `commit `__ + `commit `__ - Print LDAP diagnostic messages on error - `commit `__ + `commit `__ - Use default ssh host key algorithms - `commit `__ + `commit `__ `#8082 `__ @@ -370,22 +370,22 @@ François Cami (6) ---------------------------------------------------------------------------------------------- - ipa-restore: restart services at the end - `commit `__ + `commit `__ `#8226 `__ - adtrust.py: mention restarting sssd when adding trust agents - `commit `__ + `commit `__ `#8148 `__ - test_nfs.py: switch to master_3repl - `commit `__ + `commit `__ `#8027 `__ - ipatests: rename config_replica_resolvconf_with_master_data() - `commit `__ + `commit `__ - test_nfs.py: switch to tasks.config_replica_resolvconf_with_master_data() - `commit `__ + `commit `__ `#7949 `__ - prci_definitions: add master_3client topology - `commit `__ + `commit `__ `#8026 `__ @@ -394,70 +394,70 @@ Florence Blanc-Renaud (22) ---------------------------------------------------------------------------------------------- - ipatests: wait for SSSD to become online in backup/restore tests - `commit `__ + `commit `__ `#8228 `__ - xmlrpc tests: add a test for idview-apply on a master - `commit `__ + `commit `__ `#5662 `__ - idviews: prevent applying to a master - `commit `__ + `commit `__ `#5662 `__ - ipa-adtrust-install: remote command fails if ipa-server-trust-ad pkg missing - `commit `__ + `commit `__ `#7600 `__ - ipatests: add test for ipa-adtrust-install --add-agents - `commit `__ + `commit `__ `#7600 `__ - ipa-adtrust-install: run remote configuration for new agents - `commit `__ + `commit `__ `#7600 `__ - Privilege: add a helper checking if a principal has a given privilege - `commit `__ + `commit `__ `#7600 `__ - ipatests: fix TestSubCAkeyReplication - `commit `__ + `commit `__ - ipatests: fix modify_sssd_conf() - `commit `__ + `commit `__ - ipatests: fix backup and restore - `commit `__ + `commit `__ `#8170 `__ - AD user without override receive InternalServerError with API - `commit `__ + `commit `__ `#8163 `__ - ipa-cacert-manage man page: fix indentation - `commit `__ + `commit `__ `#8138 `__ - trust upgrade: ensure that host is member of adtrust agents - `commit `__ + `commit `__ - smartcard: make the ipa-advise script compatible with authselect/authconfig - `commit `__ + `commit `__ `#8113 `__ - ipa-backup: fix python2 issue with os.mkdir - `commit `__ + `commit `__ `#8099 `__ - ipa-server-certinstall manpage: add missing options - `commit `__ + `commit `__ `#8086 `__ - ipatests: fix test_replica_promotion.py::TestHiddenReplicaPromotion - `commit `__ + `commit `__ `#8070 `__ - ipatests: add XMLRPC test for user-add when UPG plugin is disabled - `commit `__ + `commit `__ `#4972 `__ - ipa user_add: do not check group if UPG is disabled - `commit `__ + `commit `__ `#4972 `__ - replica install: enforce --server arg - `commit `__ + `commit `__ `#7566 `__ - ipatests: ensure that backup/restore restores pkcs 11 modules config file - `commit `__ + `commit `__ `#8073 `__ - ipa-backup: backup the PKCS module config files setup by IPA - `commit `__ + `commit `__ `#8073 `__ @@ -466,16 +466,16 @@ Fraser Tweedale (4) ---------------------------------------------------------------------------------------------- - Do not renew externally-signed CA as self-signed - `commit `__ + `commit `__ `#8176 `__ - test_integration: add tests for custom CA subject DN - `commit `__ + `commit `__ `#8084 `__ - upgrade: fix ipakra people entry 'description' attribute - `commit `__ + `commit `__ `#8084 `__ - krainstance: set correct issuer DN in uid=ipakra entry - `commit `__ + `commit `__ `#8084 `__ @@ -484,7 +484,7 @@ Gaurav Talreja (1) ---------------------------------------------------------------------------------------------- - Normalize test definations titles - `commit `__ + `commit `__ @@ -492,9 +492,9 @@ Jayesh Garg (2) ---------------------------------------------------------------------------------------------- - Test if ipactl starts services stopped by systemctl - `commit `__ + `commit `__ - Test for ipa-ca-install on replica - `commit `__ + `commit `__ @@ -503,15 +503,15 @@ Michal Polovka (3) - ipatests: add tests for ipa host-add with non-default maxhostnamelength - `commit `__ + `commit `__ `#2018 `__ - ipatests: fix topology for TestIpaNotConfigured in PR-CI nightly definitions - `commit `__ + `commit `__ `#6843 `__, `#8055 `__ - ipatests: Test for ipa-backup with ipa not configured - `commit `__ + `commit `__ `#6843 `__ @@ -520,18 +520,18 @@ Mohammad Rizwan Yusuf (5) ---------------------------------------------------------------------------------------------- - Test if schema-compat-entry-attribute is set - `commit `__ + `commit `__ `#8193 `__ - Test if schema-compat-entry-attribute is set - `commit `__ + `commit `__ `#8193 `__ - add test to nightly yaml - `commit `__ + `commit `__ - Installation of replica against a specific server - `commit `__ + `commit `__ `#7566 `__ - Check file ownership and permission for dirsrv log instance - `commit `__ + `commit `__ `#7725 `__ @@ -540,7 +540,7 @@ ndehadra (1) ---------------------------------------------------------------------------------------------- - Hidden Replica: Add a test for Automatic CRL configuration - `commit `__ + `commit `__ `#7307 `__ @@ -549,31 +549,31 @@ Rob Crittenden (10) ---------------------------------------------------------------------------------------------- - Test that pwpolicy only applied on Kerberos entries - `commit `__ + `commit `__ - Add ability to change a user password as the Directory Manager - `commit `__ + `commit `__ - Don't save password history on non-Kerberos accounts - `commit `__ + `commit `__ - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - `commit `__ + `commit `__ `#8164 `__ - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch - `commit `__ + `commit `__ - ipa-restore: Restore ownership and perms on 389-ds log directory - `commit `__ + `commit `__ `#7725 `__ - Report if a certmonger CA is missing - `commit `__ + `commit `__ `#7870 `__ - Re-order tasks.restore_pkcs11_modules() to run earlier - `commit `__ + `commit `__ `#8034 `__ - Don't log host passwords when they are set/modified - `commit `__ + `commit `__ `#8017 `__ - Don't return SSH keys with ipa host-find --pkey-only - `commit `__ + `commit `__ `#8029 `__ @@ -582,11 +582,11 @@ Robbie Harwood (3) ---------------------------------------------------------------------------------------------- - Fix segfault in ipadb_parse_ldap_entry() - `commit `__ + `commit `__ - Fix NULL pointer dereference in maybe_require_preauth() - `commit `__ + `commit `__ - Log INFO message when LDAP connection fails on startup - `commit `__ + `commit `__ @@ -594,7 +594,7 @@ Sumit Bose (1) ---------------------------------------------------------------------------------------------- - extdom: unify error code handling especially LDAP_NO_SUCH_OBJECT - `commit `__ + `commit `__ `#8044 `__ @@ -603,13 +603,13 @@ Stanislav Levin (3) ---------------------------------------------------------------------------------------------- - pki-proxy: Don't rely on running apache until it's configured - `commit `__ + `commit `__ `#8233 `__ - Fix errors found by Pylint-2.4.3 - `commit `__ + `commit `__ `#8102 `__ - Fixed errors newly exposed by pylint 2.4.0 - `commit `__ + `commit `__ `#8077 `__ @@ -618,52 +618,52 @@ Sergey Orlov (19) ---------------------------------------------------------------------------------------------- - ipatests: provide AD admin password when trying to establish trust - `commit `__ + `commit `__ `#7895 `__ - ipatests: remove test_ordering - `commit `__ + `commit `__ - ipatests: remove invalid parameter from sssd.conf - `commit `__ + `commit `__ `#8219 `__ - ipatests: use remote_sssd_config to modify sssd.conf - `commit `__ + `commit `__ `#8219 `__ - ipatests: replace utility for editing sssd.conf - `commit `__ + `commit `__ `#8219 `__ - ipatests: update docstring to reflect changes in FileBackup.restore() - `commit `__ + `commit `__ - ipatests: add test_trust suite to nightly runs - `commit `__ + `commit `__ - ipatests: fix collection of tests from test_trust suite - `commit `__ + `commit `__ - ipatests: add test_winsyncmigrate suite to nightly runs - `commit `__ + `commit `__ - ipatests: add check that ipa-adtrust-install generates sane smb.conf - `commit `__ + `commit `__ `#6951 `__ - ipatests: refactor FileBackup helper - `commit `__ + `commit `__ `#8115 `__ - ipatests: in DNS zone file add A record for name server - `commit `__ + `commit `__ - ipatests: strip newline character when getting name of temp file - `commit `__ + `commit `__ - ipatests: add test to check that only TLS 1.2 is enabled in Apache - `commit `__ + `commit `__ `#7995 `__ - ipatests: fix DNS forwarders setup for AD trust tests with non-root domains - `commit `__ + `commit `__ - ipatests: add tests for cached_auth_timeout in sssd.conf - `commit `__ + `commit `__ - ipatests: add new utilities for file management - `commit `__ + `commit `__ - ipatests: add utility functions related to using and managing user accounts - `commit `__ + `commit `__ - ipatests: modify run_command to allow specify successful return codes - `commit `__ + `commit `__ @@ -672,11 +672,11 @@ Sumedh Sidhaye (2) - Added a test to check if ipa host-find --pkey-only does not return SSH public key - `commit `__ + `commit `__ `#8029 `__ - Test: Test to check whether ssh from ipa client to ipa master is successful after adding ldap_deref_threshold=0 in sssd.conf - `commit `__ + `commit `__ @@ -684,7 +684,7 @@ Simo Sorce (1) ---------------------------------------------------------------------------------------------- - Make sure to have storage space for tag - `commit `__ + `commit `__ @@ -692,26 +692,26 @@ Serhii Tsymbaliuk (7) ---------------------------------------------------------------------------------------------- - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - `commit `__ + `commit `__ `#8239 `__ - WebUI tests: Fix broken reference to parent facet in table record check - `commit `__ + `commit `__ `#8157 `__ - WebUI tests: Fix 'Button is not displayed' exception - `commit `__ + `commit `__ `#8169 `__ - Fix occasional 'whoami.data is undefined' error in FreeIPA web UI - `commit `__ + `commit `__ `#7917 `__ - Fix certificate revocation tests for Web UI - `commit `__ + `commit `__ `#7834 `__ - WebUI: Fix notification area layout - `commit `__ + `commit `__ `#8120 `__ - WebUI: Make 'Unlock' option is available only on locked user page - `commit `__ + `commit `__ `#5062 `__ @@ -720,17 +720,17 @@ Tibor Dudlák (5) ---------------------------------------------------------------------------------------------- - Add container environment check to replicainstall - `commit `__ + `commit `__ `#6210 `__ - Increase ntp_options test timeout - `commit `__ + `commit `__ - ipatests: refactor TestNTPoptions - `commit `__ + `commit `__ - ipatests: Add tests for interactive chronyd config - `commit `__ + `commit `__ `#7908 `__ - ipatests: Update test tasks for client to be interactive - `commit `__ + `commit `__ `#7908 `__ @@ -739,13 +739,13 @@ Tomas Halman (4) ---------------------------------------------------------------------------------------------- - extdom: add extdom protocol documentation - `commit `__ + `commit `__ - extdom: use sss_nss_*_timeout calls - `commit `__ + `commit `__ - extdom: plugin doesn't use timeout in blocking call - `commit `__ + `commit `__ - extdom: plugin doesn't allow @ in group name - `commit `__ + `commit `__ @@ -753,4 +753,4 @@ Theodor van Nahl (1) ---------------------------------------------------------------------------------------------- - Fix UnboundLocalError in ipa-replica-manage on errors - `commit `__ + `commit `__ diff --git a/src/page/Releases/4.8.0.rst b/src/page/Releases/4.8.0.rst index 51a5185fa..6d3a9ebf3 100644 --- a/src/page/Releases/4.8.0.rst +++ b/src/page/Releases/4.8.0.rst @@ -427,103 +427,103 @@ Alexander Bokovoy (35) ---------------------------------------------------------------------------------------------- - Become IPA 4.8.0 - `commit `__ + `commit `__ - translations: update from Zanata Spanish and Ukrainian translations - `commit `__ + `commit `__ - Set up CI with Azure Pipelines - `commit `__ + `commit `__ - prci: add test_integration/test_smb to the gating set - `commit `__ + `commit `__ `#3999 `__ - ipa-client-samba: a tool to configure Samba domain member on IPA client - `commit `__ + `commit `__ `#3999 `__ - ipaserver.plugins.service: add service-add-smb to set up an SMB service - `commit `__ + `commit `__ `#3999 `__ - adtrust: update Samba domain controller keytab with host keys - `commit `__ + `commit `__ `#3999 `__ - kdb: support SMB services on IPA domain members - `commit `__ + `commit `__ `#3999 `__ - ipasam: add handling of machine accounts - `commit `__ + `commit `__ `#3999 `__ - ipasam: add lookup of an account by SID - `commit `__ + `commit `__ `#3999 `__ - ipapython.ipautil.run: allow skipping stdout/stderr logging - `commit `__ + `commit `__ `#3999 `__ - ipaserver.install.installutils: move commonly used utils to ipapython.ipautil - `commit `__ + `commit `__ `#3999 `__ - adtrust: add design document for Samba domain member on IPA client - `commit `__ + `commit `__ `#3999 `__ - trust-fetch-domains: make sure we use right KDC when --server is specified - `commit `__ + `commit `__ `#7895 `__ - adtrust upgrade: fix wrong primary principal name, part 2 - `commit `__ + `commit `__ `#7992 `__ - adtrust upgrade: fix wrong primary principal name - `commit `__ + `commit `__ `#7992 `__ - azure tests: make sure /etc/docker folder exists - `commit `__ + `commit `__ - ipa-pwd-extop: do not remove MagicRegen mod, replace it - `commit `__ + `commit `__ `#7953 `__ - test_ipagetkeytab: test retrieval of explicit encryption types - `commit `__ + `commit `__ `#7953 `__ - Keytab retrieval: allow requesting arcfour-hmac for SMB services - `commit `__ + `commit `__ - test_ipagetkeytab: factor out DM password reader - `commit `__ + `commit `__ `#7953 `__ - test_ipagetkeytab: allow testing LDAP connection beyond bind operation - `commit `__ + `commit `__ `#7953 `__ - ldap2.can_read: fix py3 compatibility - `commit `__ + `commit `__ `#7953 `__ - LDAPCreate: allow callers to override objectclasses - `commit `__ + `commit `__ `#7953 `__ - Azure Pipelines: run fast linter in case of a pull request build - `commit `__ + `commit `__ - Azure Pipelines: simplify test job definitions - `commit `__ + `commit `__ - ipa-run-tests: add support of globs for test targets and ignores - `commit `__ + `commit `__ - i18n_messages: get back a locale needed for testing - `commit `__ + `commit `__ `#7951 `__ - test_legacy_clients: fix class inheritance - `commit `__ + `commit `__ `#7940 `__ - fix selenium imports in automount web UI test - `commit `__ + `commit `__ `#7942 `__ - azure-run-tests: handle single unexpanded parameter too - `commit `__ + `commit `__ - Use nodejs 1.10 to avoid current issues with nodejs 1.11 in Fedora 30 - `commit `__ + `commit `__ - upgrade: adtrust - catch empty result when retrieving list of trusts - `commit `__ + `commit `__ `#7939 `__ - Revert "Require a minimum SASL security factor of 56" - `commit `__ + `commit `__ - Turn master branch back after pre-release tagging - `commit `__ + `commit `__ @@ -531,13 +531,13 @@ Armando Neto (4) ---------------------------------------------------------------------------------------------- - prci: fix nightly_master test definitions - `commit `__ + `commit `__ - prci: bump ci-master-f30 template - `commit `__ + `commit `__ - Add Fedora 30 test definitions and bump template version - `commit `__ + `commit `__ - Bump PR-CI template version - `commit `__ + `commit `__ @@ -545,7 +545,7 @@ Anuja More (1) ---------------------------------------------------------------------------------------------- - ipatests: POSIX attributes are no longer overwritten or missing - `commit `__ + `commit `__ @@ -553,7 +553,7 @@ Adam Williamson (1) ---------------------------------------------------------------------------------------------- - Correct default fontawesome path (broken by da2cf1c5) - `commit `__ + `commit `__ @@ -561,40 +561,40 @@ Christian Heimes (14) ---------------------------------------------------------------------------------------------- - Use system-wide crypto policy for TLS ciphers - `commit `__ + `commit `__ `#7998 `__ - Use only TLS 1.2 by default - `commit `__ + `commit `__ `#7667 `__ - Increase default debug level of certmonger - `commit `__ + `commit `__ `#7986 `__ - Replace PYTHONSHEBANG with valid shebang - `commit `__ + `commit `__ `#7984 `__ - Fix CustodiaClient ccache handling - `commit `__ + `commit `__ `#7964 `__ - Bump release number to 4.7.91 - `commit `__ + `commit `__ - Forbid imports of ipaserver and install packages - `commit `__ + `commit `__ - integration plugins import ldif - `commit `__ + `commit `__ - Don't import ipaserver in conf.py - `commit `__ + `commit `__ - Replace imports from ipaserver - `commit `__ + `commit `__ - Delay import of SSSDConfig - `commit `__ + `commit `__ - Use PKCS#8 instead of traditional privkey format - `commit `__ + `commit `__ `#7943 `__ - Load libldap_r-\*.so.2 - `commit `__ + `commit `__ `#7941 `__ - Import urllib submodules - `commit `__ + `commit `__ @@ -602,44 +602,44 @@ François Cami (14) ---------------------------------------------------------------------------------------------- - Make dnf more robust and faster - `commit `__ + `commit `__ `#7999 `__ - Makefile.am: add .in files to fastlint target - `commit `__ + `commit `__ `#7984 `__ - Introduce minimal ipa-client-automount.in and ipactl.in - `commit `__ + `commit `__ `#7984 `__ - ipa_client_automount.py and ipactl.py: fix codestyle - `commit `__ + `commit `__ `#7984 `__ - Move ipa-client-automount.in and ipactl into modules - `commit `__ + `commit `__ `#7984 `__ - test_nfs.py: change pr-ci configuration to run on master_2repl_1client - `commit `__ + `commit `__ - ipatests: add proper timeouts to nfs.py - `commit `__ + `commit `__ - ipa-client-automount: fix '--idmap-domain DNS' logic - `commit `__ + `commit `__ `#7988 `__ - nfs.py: fix user creation - `commit `__ + `commit `__ - Hidden replica documentation: fix typo - `commit `__ + `commit `__ - ipa_backup.py: replace /var/lib/ipa/backup with paths.IPA_BACKUP_DIR - `commit `__ + `commit `__ - ipa-backup: better error message if ENOSPC - `commit `__ + `commit `__ `#7647 `__ - ipatests: add tests for the new NFSv4 domain option of ipa-client-automount - `commit `__ + `commit `__ `#7918 `__ - ipa-client-automount: add knob to configure NFSv4 Domain (idmapd.conf) - `commit `__ + `commit `__ `#7918 `__ @@ -648,46 +648,46 @@ Florence Blanc-Renaud (14) ---------------------------------------------------------------------------------------------- - ipatests: fix ipatests/test_xmlrpc/test_dns_plugin.py - `commit `__ + `commit `__ `#7982 `__ - XMLRPC tests: add new test for ipa dsnrecord-mod $ZONE $RECORD --ttl - `commit `__ + `commit `__ `#7982 `__ - dnsrecord-mod: allow to modify ttl without passing the record - `commit `__ + `commit `__ `#7982 `__ - ipatests: add a test for stageuser-find with non-posix account - `commit `__ + `commit `__ `#7983 `__ - stageuser-find: fix search with non-posix user - `commit `__ + `commit `__ `#7983 `__ - ipatests: fix TestUserPermissions::test_selinux_user_optimized - `commit `__ + `commit `__ `#7974 `__ - ipatests: fix test_backup_and_restore.py::TestBackupAndRestore - `commit `__ + `commit `__ `#7970 `__ - ipatests: fix test_caless.py - `commit `__ + `commit `__ `#7969 `__ - ipatests: add integration test for ipa-replica-manage list - `commit `__ + `commit `__ `#7716 `__ - NSSDatabase: fix get_trust_chain - `commit `__ + `commit `__ `#7926 `__ - ipatests: CA renewal must refresh cn=CAcert - `commit `__ + `commit `__ `#7928 `__ - CA: set ipaconfigstring:compatCA in cn=DOMAIN IPA CA - `commit `__ + `commit `__ `#7928 `__ - ipatests: add integration test checking the files mode - `commit `__ + `commit `__ `#7934 `__ - Fix expected file permissions for ghost files - `commit `__ + `commit `__ `#7934 `__ @@ -696,48 +696,48 @@ Fraser Tweedale (15) ---------------------------------------------------------------------------------------------- - Handle missing LWCA certificate or chain - `commit `__ + `commit `__ `#7964 `__ - dn: sort AVAs when converting from x509.Name - `commit `__ + `commit `__ `#7963 `__ - .gitignore: add ipa-cert-fix program - `commit `__ + `commit `__ - avoid realm_to_serverid deprecation warning - `commit `__ + `commit `__ `#7885 `__ - ipa-cert-fix: fix spurious renewal master change - `commit `__ + `commit `__ `#7885 `__ - ipa-cert-fix: handle 'pki-server cert-fix' failure - `commit `__ + `commit `__ `#7885 `__ - require Dogtag 10.7.0-1 - `commit `__ + `commit `__ `#7885 `__ - ipa-cert-fix: use customary exit statuses - `commit `__ + `commit `__ `#7885 `__ - ipa-cert-fix: add man page - `commit `__ + `commit `__ `#7885 `__ - Add ipa-cert-fix tool - `commit `__ + `commit `__ `#7885 `__ - constants: add ca_renewal container - `commit `__ + `commit `__ `#7885 `__ - cainstance: add function to determine ca_renewal nickname - `commit `__ + `commit `__ `#7885 `__ - Extract ca_renewal cert update subroutine - `commit `__ + `commit `__ `#7885 `__ - add test for external CA key size sanity check - `commit `__ + `commit `__ `#7761 `__ - dn: handle multi-valued RDNs in Name conversion - `commit `__ + `commit `__ `#7963 `__ @@ -746,7 +746,7 @@ German Parente (1) ---------------------------------------------------------------------------------------------- - ipa-replica-manage: remove "last init status" if it's None. - `commit `__ + `commit `__ `#7716 `__ @@ -755,9 +755,9 @@ Kaleemullah Siddiqui (2) ---------------------------------------------------------------------------------------------- - Tests for autounmembership feature - `commit `__ + `commit `__ - Order of master and replica corrected in logger.info - `commit `__ + `commit `__ @@ -765,7 +765,7 @@ Mohammad Rizwan Yusuf (1) ---------------------------------------------------------------------------------------------- - Test if ipactl restart restarts the pki-tomcatd - `commit `__ + `commit `__ `#7927 `__ @@ -774,42 +774,42 @@ Rob Crittenden (14) ---------------------------------------------------------------------------------------------- - Add test_smb to night Fedora 30 test suite - `commit `__ + `commit `__ - Remove DES3 and RC4 enctypes from Kerberos - `commit `__ + `commit `__ - Don't configure disabled krb5 enctypes in FIPS mode - `commit `__ + `commit `__ - For Fedora and RHEL use system-wide crypto policy for mod_ssl - `commit `__ + `commit `__ `#7667 `__ - Log the raised message when DNS check_zone_overlap fails - `commit `__ + `commit `__ - admintool: don't display log file on errors unless logging is setup - `commit `__ + `commit `__ `#7952 `__ - tests: Wait for automember rebuild --no-wait tasks to finish - `commit `__ + `commit `__ `#7972 `__ - Fix expected return code in tests when server is uninstalled - `commit `__ + `commit `__ `#7836 `__ - Return 0 on uninstall when on_master for case of not installed - `commit `__ + `commit `__ `#7836 `__ - Drop list of return values to be ignored in AdminTool - `commit `__ + `commit `__ `#7836 `__ - When reading SSH pub key don't assume last character is newline - `commit `__ + `commit `__ `#7959 `__ - Stop using 389-ds legacy backup and restoration utilities - `commit `__ + `commit `__ `#7965 `__ - Add knob to limit hostname length - `commit `__ + `commit `__ `#2018 `__ - Use AES-128-CBC for PKCS#12 encryption when creating files (FIPS) - `commit `__ + `commit `__ `#7948 `__ @@ -818,39 +818,39 @@ Stanislav Levin (12) ---------------------------------------------------------------------------------------------- - Make use of single configuration point for SELinux - `commit `__ + `commit `__ `#7996 `__ - Fix a typo in \`replace\` rule of 50-ipaconfig.update - `commit `__ + `commit `__ `#7996 `__ - Exit on fail in azure multiline script - `commit `__ + `commit `__ - Make use of \`named\` well-known service - `commit `__ + `commit `__ `#7990 `__ - Make use of the single configuration point for the default shells - `commit `__ + `commit `__ `#7978 `__ - Fix Pytest4.x warning about \`message\` - `commit `__ + `commit `__ `#7981 `__ - Fix Pytest4.1+ warnings about pytest.config - `commit `__ + `commit `__ `#7981 `__ - Resolve tox substitutions to absolute paths - `commit `__ + `commit `__ `#7977 `__ - Make \`pycodestyle\` results identical - `commit `__ + `commit `__ `#7962 `__ - Respect TMPDIR, TEMP or TMP environment variables during testing - `commit `__ + `commit `__ `#7956 `__ - Fix \`build_requestinfo\` in LibreSSL environments - `commit `__ + `commit `__ `#7937 `__ - Fix \`build_requestinfo\` in OpenSSL1.1.0+ environments - `commit `__ + `commit `__ `#7937 `__ @@ -860,11 +860,11 @@ Sergey Orlov (2) - ipatests: allow to relax security of LDAP connection from controller to IPA host - `commit `__ + `commit `__ `#7960 `__ - ipatests: new tests for establishing one-way AD trust with shared secret - `commit `__ + `commit `__ `#6077 `__ @@ -873,17 +873,17 @@ Serhii Tsymbaliuk (4) ---------------------------------------------------------------------------------------------- - WebUI: Fix automount maps pagination - `commit `__ + `commit `__ `#6627 `__ - WebUI: Disable 'Unlock' action for users with no password - `commit `__ + `commit `__ `#5062 `__ - WebUI: Fix 'user not found' traceback on user ID override details page - `commit `__ + `commit `__ `#7139 `__ - Fix occasional 'whoami.data is undefined' error in FreeIPA web UI - `commit `__ + `commit `__ `#7917 `__ @@ -892,7 +892,7 @@ Thierry Bordaz (1) ---------------------------------------------------------------------------------------------- - Switch nsslapd-unhashed-pw-switch to nolog - `commit `__ + `commit `__ `#4812 `__ @@ -901,13 +901,13 @@ Tibor Dudlák (4) ---------------------------------------------------------------------------------------------- - Add SMB attributes for users - `commit `__ + `commit `__ `#3999 `__ - Remove unreachable code - `commit `__ + `commit `__ - ipatests: Add Unattended option to external ca task - `commit `__ + `commit `__ `#7930 `__ - Moving prompt for NTP options to install_check - `commit `__ + `commit `__ `#7930 `__ diff --git a/src/page/Releases/4.8.10.rst b/src/page/Releases/4.8.10.rst index edb8f0d1b..f8399d3c2 100644 --- a/src/page/Releases/4.8.10.rst +++ b/src/page/Releases/4.8.10.rst @@ -175,12 +175,12 @@ Armando Neto (3) ---------------------------------------------------------------------------------------------- - ipatests: Add nightly definitions for enforcing mode - `commit `__ + `commit `__ - ipatests: Bump PR-CI templates - `commit `__ + `commit `__ `#8473 `__ - ipatests: Bump PR-CI templates - `commit `__ + `commit `__ @@ -188,22 +188,22 @@ Alexander Bokovoy (6) ---------------------------------------------------------------------------------------------- - Become IPA 4.8.10 - `commit `__ + `commit `__ - Specify memory limits as strings for docker compose - `commit `__ + `commit `__ `#8494 `__ - ipa-kdb: test kadmin.local getprincs command - `commit `__ + `commit `__ `#8490 `__ - ipa-kdb: support getprincs request in kadmin.local - `commit `__ + `commit `__ `#8490 `__ - test_smb: make sure both smbserver and smbclient use IPA master for DNS - `commit `__ + `commit `__ `#8344 `__ - Return to git snapshots - `commit `__ + `commit `__ @@ -211,36 +211,36 @@ Christian Heimes (11) ---------------------------------------------------------------------------------------------- - Fix nsslapd-db-lock tuning of BDB backend - `commit `__ + `commit `__ `#5914 `__, `#8515 `__ - Create systemd-resolved configuration on update - `commit `__ + `commit `__ - Configure systemd-resolved to use IPA's BIND - `commit `__ + `commit `__ `#8275 `__ - Use new API for auto-forwarders - `commit `__ + `commit `__ `#8275 `__ - Configure NetworkManager to use systemd-resolved - `commit `__ + `commit `__ `#8275 `__ - Add helpers for resolve1 and nameservers - `commit `__ + `commit `__ `#8275 `__ - Delay import of psutil to avoid AVC - `commit `__ + `commit `__ `#8512 `__ - Make git a build requirement - `commit `__ + `commit `__ - Duplicate CA CRT: ignore expected cert - `commit `__ + `commit `__ `#7125 `__ - Add krbPrincipalName pres index correctly - `commit `__ + `commit `__ `#8491 `__ - Only restart DS when duplicate cacrt was found - `commit `__ + `commit `__ `#7125 `__ @@ -249,41 +249,41 @@ François Cami (12) ---------------------------------------------------------------------------------------------- - SELinux: do not double-define node_t and pki_tomcat_cert_t - `commit `__ + `commit `__ `#8513 `__ - SELinux Policy: Allow tomcat_t to read kerberos keytabs - `commit `__ + `commit `__ `#8488 `__ - SELinux Policy: make interfaces for kernel modules non-optional - `commit `__ + `commit `__ `#8488 `__ - SELinux Policy: flag ipa_pki_retrieve_key_exec_t as domain_type - `commit `__ + `commit `__ `#8488 `__ - SELinux Policy: ipa_custodia_pki_tomcat_exec_t => ipa_custodia_pki_tomcat_t - `commit `__ + `commit `__ `#8488 `__ - SELinux Policy: ipa_pki_retrieve_key_exec_t => ipa_pki_retrieve_key_t - `commit `__ + `commit `__ `#8488 `__ - SELinux Policy: let custodia_t map custodia_tmp_t - `commit `__ + `commit `__ `#8488 `__ - SELinux: Add dedicated policy for ipa-pki-retrieve-key - `commit `__ + `commit `__ `#8488 `__ - ipatests: enhance TestSubCAkeyReplication - `commit `__ + `commit `__ `#8488 `__ - dogtaginstance.py: add --debug to pkispawn - `commit `__ + `commit `__ `#8503 `__ - ipatests: check that pkispawn log is not empty - `commit `__ + `commit `__ `#8503 `__ - SELinux Policy: let custodia replicate keys - `commit `__ + `commit `__ `#8488 `__ @@ -292,15 +292,15 @@ Florence Blanc-Renaud (4) ---------------------------------------------------------------------------------------------- - test_smb: skip test_smb_service_s4u2self for fed31 - `commit `__ + `commit `__ `#8505 `__ - dnsforwardzone-add: support dnspython 2.0 - `commit `__ + `commit `__ `#8481 `__ - ipatests: add missing healthcheck test in PRCI nightlies - `commit `__ + `commit `__ - ipatests: run test_ipahealthcheck.py::TestIpaHealthCheck separately - `commit `__ + `commit `__ `#8472 `__ @@ -309,11 +309,11 @@ Mohammad Rizwan (3) ---------------------------------------------------------------------------------------------- - PEP8 fixes - `commit `__ + `commit `__ - ipatests: add --skip-overlap-check option to prepare_reverse_zone() - `commit `__ + `commit `__ - ipatests: Add PTR record for IP SAN - `commit `__ + `commit `__ @@ -321,61 +321,61 @@ Rob Crittenden (19) ---------------------------------------------------------------------------------------------- - Test that ccaches are cleaned up during installation - `commit `__ + `commit `__ `#8248 `__ - Clean up entire /run/ipa/ccaches directory not just files - `commit `__ + `commit `__ `#8248 `__ - Reduce the memory requirement from 1.6 to 1.2 GB - `commit `__ + `commit `__ `#8404 `__ - Require a matching server package for the selinux subpackage - `commit `__ + `commit `__ `#8511 `__ - Add index for more trust-related attributes - `commit `__ + `commit `__ `#8491 `__ - ipatests: Add test for ACI attribute and permission uniqueness - `commit `__ + `commit `__ `#8443 `__ - Use ACI class set_permissions() method to set permissions - `commit `__ + `commit `__ `#8443 `__ - De-duplicate ACI attributes and permissions - `commit `__ + `commit `__ `#8443 `__ - ipatests: Add tests for checking available memory - `commit `__ + `commit `__ `#8404 `__ - Require at least 1.6Gb of available RAM to install the server - `commit `__ + `commit `__ `#8404 `__ - ipatests: test that a zone name and name-from-ip will be rejected - `commit `__ + `commit `__ `#8446 `__ - Don't allow both a zone name and --name-from-ip to be provided - `commit `__ + `commit `__ `#8446 `__ - Set the certmonger subject with a string, not an object - `commit `__ + `commit `__ `#8204 `__ - ipatests: test ipa_server_certinstall with an IPA-issued cert - `commit `__ + `commit `__ `#8204 `__ - ipatests: Add test for is_ipa_configured - `commit `__ + `commit `__ `#8458 `__ - Use is_ipa_configured from ipalib.facts - `commit `__ + `commit `__ `#8458 `__ - Fall back to old server installation detection when needed - `commit `__ + `commit `__ `#8458 `__ - cli: When parsing options require name/value pairs - `commit `__ + `commit `__ `#6115 `__ - ipatests: Add option/arg parsing tests for the cli - `commit `__ + `commit `__ `#6115 `__ @@ -385,37 +385,37 @@ Stanislav Levin (13) - dns: Make use of \`resolve_address\` of a current resolver instead of the global one - `commit `__ + `commit `__ - dnspython: Add compatibility shim - `commit `__ + `commit `__ `#8383 `__ - tox: Don't expand symlinks - `commit `__ + `commit `__ `#8475 `__ - Azure: Increase verbosity for Tox task - `commit `__ + `commit `__ - deps: Require \`nss-tools\` for make's fasttest target - `commit `__ + `commit `__ - nss: Raise exception earlier on unsupported DB type - `commit `__ + `commit `__ `#8474 `__ - Azure: base: Collect both install and uninstall logs - `commit `__ + `commit `__ - Azure: Drop dependency on UsePythonVersion task - `commit `__ + `commit `__ - Azure: Add Rawhide definitions - `commit `__ + `commit `__ - pylint: Ignore \`raise-missing-from\` - `commit `__ + `commit `__ `#8468 `__ - pylint: Ignore \`super-with-arguments\` - `commit `__ + `commit `__ `#8468 `__ - pylint: Fix warning W0612(unused-variable) - `commit `__ + `commit `__ `#8468 `__ - pylint: Teach pylint about more RRs types - `commit `__ + `commit `__ `#8468 `__ @@ -424,9 +424,9 @@ Sergey Orlov (2) ---------------------------------------------------------------------------------------------- - ipatests: simplify fixture - `commit `__ + `commit `__ - ipatests: refactor test for login using cifs alias principal - `commit `__ + `commit `__ @@ -435,7 +435,7 @@ Sumedh Sidhaye (1) - This is a manual backport of https://github.com/freeipa/freeipa/pull/5053/ - `commit `__ + `commit `__ @@ -443,7 +443,7 @@ Serhii Tsymbaliuk (1) ---------------------------------------------------------------------------------------------- - WebUI: Fix jQuery DOM manipulation issues - `commit `__ + `commit `__ `#8507 `__ @@ -452,7 +452,7 @@ Sudhir Menon (1) ---------------------------------------------------------------------------------------------- - ipatests: Install healthcheck pkg for TestIpaHealthCheckWithADtrust - `commit `__ + `commit `__ @@ -460,5 +460,5 @@ Zdenek Pytela (1) ---------------------------------------------------------------------------------------------- - Add ipa_pki_retrieve_key_exec() interface - `commit `__ + `commit `__ `#8488 `__ diff --git a/src/page/Releases/4.8.4.rst b/src/page/Releases/4.8.4.rst index bb9f1a273..4d0d42c63 100644 --- a/src/page/Releases/4.8.4.rst +++ b/src/page/Releases/4.8.4.rst @@ -114,7 +114,7 @@ Armando Neto (1) ---------------------------------------------------------------------------------------------- - travis: Remove CI integration - `commit `__ + `commit `__ `#7323 `__ @@ -123,27 +123,27 @@ Alexander Bokovoy (8) ---------------------------------------------------------------------------------------------- - ipa-client-samba: map domain sid of trust domain properly for display - `commit `__ + `commit `__ `#8149 `__ - DNS install check: allow overlapping zone to be from the master itself - `commit `__ + `commit `__ - covscan: free ucs2-encoded password copy when generating NTLM hash - `commit `__ + `commit `__ `#8131 `__ - covscan: free encryption types in case there is an error - `commit `__ + `commit `__ `#8131 `__ - Become FreeIPA 4.8.3 - `commit `__ + `commit `__ - Add Authentication Indicator Kerberos ticket policy options - `commit `__ + `commit `__ `#8001 `__ - Allow presence of LDAP attribute options - `commit `__ + `commit `__ `#8001 `__ - Do not run trust upgrade code if master lacks Samba bindings - `commit `__ + `commit `__ `#8001 `__ @@ -152,7 +152,7 @@ Anuja More (1) ---------------------------------------------------------------------------------------------- - ipatests : Login via ssh using private-key for ipa-user should work. - `commit `__ + `commit `__ @@ -160,55 +160,55 @@ Christian Heimes (18) ---------------------------------------------------------------------------------------------- - Fix get_trusted_domain_object_from_sid() - `commit `__ + `commit `__ `#7958 `__ - Fix service ldap_disable() - `commit `__ + `commit `__ `#8143 `__ - Require idstart to be larger than UID_MAX - `commit `__ + `commit `__ `#8137 `__ - Check valid before/after of external certs - `commit `__ + `commit `__ `#8142 `__ - Fix lite-server to work with GSS_NAME - `commit `__ + `commit `__ - Fix logic of check_client_configuration - `commit `__ + `commit `__ `#8133 `__ - Optimize user-add by caching ldap2.has_upg() - `commit `__ + `commit `__ `#8134 `__ - Don't hard-code client's TLS versions and ciphers - `commit `__ + `commit `__ `#8125 `__ - Update Apache HTTPd for RHBZ#1775146 - `commit `__ + `commit `__ `#8125 `__ - Enable TLS 1.3 support on the server - `commit `__ + `commit `__ `#8125 `__ - Skip paramiko tests in FIPS mode - `commit `__ + `commit `__ `#8129 `__ - FIPS: server key has different name in FIPS mode - `commit `__ + `commit `__ - Remove FIPS noise from SSHd - `commit `__ + `commit `__ - Add test case for OTP login - `commit `__ + `commit `__ `#7804 `__ - Fix otptoken_sync plugin - `commit `__ + `commit `__ `#7804 `__ - Show group-add/remove-member-manager failures - `commit `__ + `commit `__ `#8122 `__ - Test installation with (fake) userspace FIPS - `commit `__ + `commit `__ `#8118 `__ - Use default ssh host key algorithms - `commit `__ + `commit `__ `#8082 `__ @@ -217,7 +217,7 @@ Cédric Jeanneret (1) ---------------------------------------------------------------------------------------------- - Update selinux-policy minimal requirement - `commit `__ + `commit `__ @@ -225,15 +225,15 @@ François Cami (4) ---------------------------------------------------------------------------------------------- - ipatests: fix pr-ci templates' indentation - `commit `__ + `commit `__ - ipatests/test_nfs.py: wait before umount - `commit `__ + `commit `__ `#8144 `__ - adtrust.py: mention restarting sssd when adding trust agents - `commit `__ + `commit `__ `#8148 `__ - DSU: add Design for Disable Stale Users - `commit `__ + `commit `__ `#8104 `__ @@ -242,22 +242,22 @@ Florence Blanc-Renaud (7) ---------------------------------------------------------------------------------------------- - ipa-cacert-manage man page: fix indentation - `commit `__ + `commit `__ `#8138 `__ - ipatests: fix TestMigrateDNSSECMaster teardown - `commit `__ + `commit `__ `#7985 `__ - trust upgrade: ensure that host is member of adtrust agents - `commit `__ + `commit `__ - ipatests: fix test_crlgen_manage - `commit `__ + `commit `__ - ipatests: fix teardown - `commit `__ + `commit `__ - ipatests: generic uninstall should call ipa server-del - `commit `__ + `commit `__ `#7985 `__ - Nightly definition: use right template for krbtpolicy - `commit `__ + `commit `__ `#8001 `__ @@ -267,7 +267,7 @@ MIZUTA Takeshi (1) - Add config that maintains existing content to ipa-client-install manpage - `commit `__ + `commit `__ @@ -276,9 +276,9 @@ Rob Crittenden (2) - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch - `commit `__ + `commit `__ - Add integration test for Kerberos ticket policy - `commit `__ + `commit `__ `#8001 `__ @@ -287,7 +287,7 @@ Sumit Bose (1) ---------------------------------------------------------------------------------------------- - ipa-kdb: Remove keys if password auth is disabled - `commit `__ + `commit `__ `#8001 `__ @@ -296,7 +296,7 @@ Sergey Orlov (1) ---------------------------------------------------------------------------------------------- - ipatests: add check that ipa-adtrust-install generates sane smb.conf - `commit `__ + `commit `__ `#6951 `__ @@ -305,7 +305,7 @@ Simo Sorce (1) ---------------------------------------------------------------------------------------------- - Make sure to have storage space for tag - `commit `__ + `commit `__ @@ -313,10 +313,10 @@ Serhii Tsymbaliuk (2) ---------------------------------------------------------------------------------------------- - WebUI: Fix notification area layout - `commit `__ + `commit `__ `#8120 `__ - WebUI: Fix adding member manager for groups and host groups - `commit `__ + `commit `__ `#8123 `__ @@ -325,7 +325,7 @@ Timo Aaltonen (1) ---------------------------------------------------------------------------------------------- - Debian: Fix font-awesome path. - `commit `__ + `commit `__ @@ -333,7 +333,7 @@ Thomas Woerner (2) ---------------------------------------------------------------------------------------------- - Enable TestInstallMasterDNSRepeatedly in prci_definitions - `commit `__ + `commit `__ - Test repeated installation of the primary with DNS enabled and domain set - `commit `__ + `commit `__ diff --git a/src/page/Releases/4.8.5.rst b/src/page/Releases/4.8.5.rst index f14df0f10..dc05a1013 100644 --- a/src/page/Releases/4.8.5.rst +++ b/src/page/Releases/4.8.5.rst @@ -222,14 +222,14 @@ Armando Neto (4) ---------------------------------------------------------------------------------------------- - prci: update fedora used for testing ipa-4-8 - `commit `__ + `commit `__ - prci: Bump template version - `commit `__ + `commit `__ - ipatests: Skip test_sss_ssh_authorizedkeys method - `commit `__ + `commit `__ `#8151 `__ - ipatests: Improve test_commands reliability - `commit `__ + `commit `__ @@ -237,33 +237,33 @@ Alexander Bokovoy (11) ---------------------------------------------------------------------------------------------- - Become FreeIPA 4.8.5 - `commit `__ + `commit `__ - Add new contributors to the list - `commit `__ + `commit `__ - Add more contributor emails to the mailmap - `commit `__ + `commit `__ - Secure AJP connector between Dogtag and Apache proxy - `commit `__ + `commit `__ `#8221 `__ - Tighten permissions on PKI proxy configuration - `commit `__ + `commit `__ `#8221 `__ - Azure Pipelines: re-enable nodejs:12 stream for Fedora 31+ - `commit `__ + `commit `__ - kdb: make sure audit_as_req callback signature change is preserved - `commit `__ + `commit `__ `#8200 `__ - adtrust: print DNS records for external DNS case after role is enabled - `commit `__ + `commit `__ `#8192 `__ - Update Azure Pipelines to use Fedora 31 - `commit `__ + `commit `__ - install/updates: move external members past schema compat update - `commit `__ + `commit `__ `#8193 `__ - Reset per-indicator Kerberos policy - `commit `__ + `commit `__ `#8153 `__ @@ -272,31 +272,31 @@ Anuja More (11) ---------------------------------------------------------------------------------------------- - Mark test to skip sssd-2.2.2 - `commit `__ + `commit `__ - ipatests: User and group with same name should not break reading AD user data. - `commit `__ + `commit `__ - ipatests: Added test when 2FA prompting configurations is set. - `commit `__ + `commit `__ - ipatests: SSSD should fetch external groups without any limit. - `commit `__ + `commit `__ - ipatests: Add test for ipa-extdom-extop plugin should allow @ in group name - `commit `__ + `commit `__ - Update topology for test_integration/test_sssd.py - `commit `__ + `commit `__ - After mounting "Unspecified GSS failure" should not be in logs. - `commit `__ + `commit `__ - Add xmlrpc test with input validation check for kerberos ticket policy. - `commit `__ + `commit `__ - Fix fedora version for xfail for sssd test - `commit `__ + `commit `__ - Add integration test for otp kerberos ticket policy. - `commit `__ + `commit `__ `#8001 `__ - ipatests: filter_users should be applied correctly. - `commit `__ + `commit `__ @@ -304,23 +304,23 @@ Christian Heimes (7) ---------------------------------------------------------------------------------------------- - Allow hosts to read DNS records for IP SAN - `commit `__ + `commit `__ `#8098 `__ - Cleanup SELinux policy - `commit `__ + `commit `__ `#6891 `__ - Integrate SELinux policy into build system - `commit `__ + `commit `__ - dnsrecord: Treat empty list arguments correctly - `commit `__ + `commit `__ `#8196 `__ - Remove dependency on custodia package - `commit `__ + `commit `__ - Make assert_error compatible with Python 3.6 - `commit `__ + `commit `__ `#8179 `__ - Print LDAP diagnostic messages on error - `commit `__ + `commit `__ @@ -328,7 +328,7 @@ Dinesh Prasanth M K (1) ---------------------------------------------------------------------------------------------- - Adding auto COPR builds - `commit `__ + `commit `__ @@ -336,21 +336,21 @@ François Cami (5) ---------------------------------------------------------------------------------------------- - ipa-restore: restart services at the end - `commit `__ + `commit `__ `#8226 `__ - ipatests: make sure ipa-client-automount reverts sssd.conf - `commit `__ + `commit `__ `#8190 `__ - ipa-client-automount: call save_domain() for each change - `commit `__ + `commit `__ `#8190 `__ - ipatests: expect "Dynamic Update" and "Bind update policy" in default dnszone\* output - `commit `__ + `commit `__ `#7938 `__ - ipaserver/plugins/dns.py: add "Dynamic Update" and "Bind update policy" to default dnszone\* output - `commit `__ + `commit `__ `#7938 `__ @@ -359,52 +359,52 @@ Florence Blanc-Renaud (16) ---------------------------------------------------------------------------------------------- - opendnssec2.1 support: move all ods tasks to specific file - `commit `__ + `commit `__ `#8214 `__ - DnsSecMaster migration: move the call to zonelist export later - `commit `__ + `commit `__ `#8214 `__ - Support OpenDNSSEC 2.1: new ods-signer protocol - `commit `__ + `commit `__ `#8214 `__ - With opendnssec 2, read the zone list from file - `commit `__ + `commit `__ `#8214 `__ - Remove the from opendnssec conf - `commit `__ + `commit `__ `#8214 `__ - Support opendnssec 2.1.6 - `commit `__ + `commit `__ `#8214 `__ - selinux policy: add the right context for org.freeipa.server.trust-enable-agent - `commit `__ + `commit `__ `#7600 `__ - ipa-adtrust-install: remote command fails if ipa-server-trust-ad pkg missing - `commit `__ + `commit `__ `#7600 `__ - ipatests: fix TestSubCAkeyReplication - `commit `__ + `commit `__ - ipatests: add test for ipa-adtrust-install --add-agents - `commit `__ + `commit `__ `#7600 `__ - ipa-adtrust-install: run remote configuration for new agents - `commit `__ + `commit `__ `#7600 `__ - Privilege: add a helper checking if a principal has a given privilege - `commit `__ + `commit `__ `#7600 `__ - Part2: Don't fully quality the FQDN in ssbrowser.html for Chrome - `commit `__ + `commit `__ `#8201 `__ - ipatests: fix modify_sssd_conf() - `commit `__ + `commit `__ - ipatests: fix backup and restore - `commit `__ + `commit `__ `#8170 `__ - AD user without override receive InternalServerError with API - `commit `__ + `commit `__ `#8163 `__ @@ -413,16 +413,16 @@ Fraser Tweedale (4) ---------------------------------------------------------------------------------------------- - Do not renew externally-signed CA as self-signed - `commit `__ + `commit `__ `#8176 `__ - ipatests: add test for certinstall with notBefore in the future - `commit `__ + `commit `__ `#8142 `__ - Fix test regressions caused by certificate validation changes - `commit `__ + `commit `__ `#8142 `__ - ipatests: assert_error: allow regexp match - `commit `__ + `commit `__ `#8142 `__ @@ -431,7 +431,7 @@ Gaurav Talreja (1) ---------------------------------------------------------------------------------------------- - Normalize test definations titles - `commit `__ + `commit `__ @@ -439,9 +439,9 @@ Isaac Boukris (2) ---------------------------------------------------------------------------------------------- - Fix legacy S4U2Proxy in DAL v8 support - `commit `__ + `commit `__ - Fix DAL v8 support - `commit `__ + `commit `__ @@ -449,11 +449,11 @@ Jayesh (3) ---------------------------------------------------------------------------------------------- - Test for ipa-ca-install on replica - `commit `__ + `commit `__ - Test ipa-getkeytab quiet mode, encryptons - `commit `__ + `commit `__ - Test if ipactl starts services stopped by systemctl - `commit `__ + `commit `__ @@ -461,7 +461,7 @@ Kaleemullah Siddiqui (1) ---------------------------------------------------------------------------------------------- - Tests for backup-restore when pkg required is missing - `commit `__ + `commit `__ `#7630 `__ @@ -470,19 +470,19 @@ Mohammad Rizwan Yusuf (6) ---------------------------------------------------------------------------------------------- - Test if getcert creates cacert file with -F option - `commit `__ + `commit `__ `#8105 `__ - Move wait_for_request() method to tasks.py - `commit `__ + `commit `__ - Test if server installer lock Bind9 recursion - `commit `__ + `commit `__ `#8079 `__ - Add certmonger wait_for_request that uses run_command - `commit `__ + `commit `__ - Test if certmonger reads the token in HSM - `commit `__ + `commit `__ - Test AES SHA 256 and 384 Kerberos enctypes enabled - `commit `__ + `commit `__ `#8110 `__ @@ -491,24 +491,24 @@ Rob Crittenden (7) ---------------------------------------------------------------------------------------------- - Move execution of ipa-healthcheck to a separate function - `commit `__ + `commit `__ - Fix div-by-zero when svc weight is 0 for all masters in location - `commit `__ + `commit `__ `#8135 `__ - Don't fully quality the FQDN in ssbrowser.html for Chrome - `commit `__ + `commit `__ `#8201 `__ - Add tests for ipa-cacert-manage delete command - `commit `__ + `commit `__ `#8124 `__ - ipa-certupdate removes all CA certs from db before adding new ones - `commit `__ + `commit `__ `#8124 `__ - Add delete option to ipa-cacert-manage to remove CA certificates - `commit `__ + `commit `__ `#8124 `__ - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - `commit `__ + `commit `__ `#8164 `__ @@ -517,17 +517,17 @@ Robbie Harwood (6) ---------------------------------------------------------------------------------------------- - Drop support for DAL version 5.0 - `commit `__ + `commit `__ - Support DAL version 8.0 - `commit `__ + `commit `__ - Handle the removal of KRB5_KDB_FLAG_ALIAS_OK - `commit `__ + `commit `__ - Fix several leaks in ipadb_find_principal - `commit `__ + `commit `__ - Use separate variable for client fetch in kdcpolicy - `commit `__ + `commit `__ - Make the coding style explicit - `commit `__ + `commit `__ @@ -535,69 +535,69 @@ Stanislav Levin (24) ---------------------------------------------------------------------------------------------- - spec: Take the ownership over '/usr/libexec/ipa/custodia' - `commit `__ + `commit `__ - Azure: Report elapsed time - `commit `__ + `commit `__ - Azure: Rebalance tests - `commit `__ + `commit `__ - Azure: Skip tests requiring external DNS - `commit `__ + `commit `__ - Azure: Free Docker resources after usage - `commit `__ + `commit `__ - Azure: Preliminary check for provided limits - `commit `__ + `commit `__ - Azure: Sync Gating definitions to current PR-CI - `commit `__ + `commit `__ - pylint: Run Pylint over Azure Python scripts - `commit `__ + `commit `__ `#8202 `__ - Azure: Add support for testing multi IPA environments - `commit `__ + `commit `__ `#8202 `__ - Azure: Don't collect twice systemd_journal.log - `commit `__ + `commit `__ `#8202 `__ - yamllint: Lint all the YAML files - `commit `__ + `commit `__ `#8202 `__ - Azure: Make it possible to configure distro-specific stuff - `commit `__ + `commit `__ `#8202 `__ - Azure: Allow to run integration tests - `commit `__ + `commit `__ `#8202 `__ - Azure: Allow SSH for Docker environments - `commit `__ + `commit `__ `#8202 `__ - Azure: Allow to not provide tests to be ignored - `commit `__ + `commit `__ `#8202 `__ - ipatests: Allow zero-length arguments - `commit `__ + `commit `__ `#8173 `__ - lint: Make Pylint-2.4 happy again - `commit `__ + `commit `__ `#8116 `__ - pylint: Clean up comment - `commit `__ + `commit `__ `#8116 `__ - pylint: Synchronize pylint plugin to ipatests code - `commit `__ + `commit `__ `#8116 `__ - pylint: Teach Pylint how to handle request.context - `commit `__ + `commit `__ `#8116 `__ - ipatests: Properly kill gpg-agent - `commit `__ + `commit `__ `#7989 `__ - pytest: Warn about unittest/nose/xunit tests - `commit `__ + `commit `__ `#7989 `__ - pytest: Migrate unittest/nose to Pytest fixtures - `commit `__ + `commit `__ `#7989 `__ - pytest: Migrate xunit-style setups to Pytest fixtures - `commit `__ + `commit `__ `#7989 `__ @@ -606,27 +606,27 @@ Sergey Orlov (9) ---------------------------------------------------------------------------------------------- - ipatests: add test for SSSD updating expired cache items - `commit `__ + `commit `__ - ipatests: provide docstrings instead of imporperly placed comments - `commit `__ + `commit `__ - ipatests: remove invalid parameter from sssd.conf - `commit `__ + `commit `__ `#8219 `__ - ipatests: use remote_sssd_config to modify sssd.conf - `commit `__ + `commit `__ `#8219 `__ - ipatests: replace utility for editing sssd.conf - `commit `__ + `commit `__ `#8219 `__ - ipatests: update docstring to reflect changes in FileBackup.restore() - `commit `__ + `commit `__ - ipatests: add test_trust suite to nightly runs - `commit `__ + `commit `__ - ipatests: add check for output contents of ipa-client-samba - `commit `__ + `commit `__ `#8149 `__ - ipatests: add test_winsyncmigrate suite to nightly runs - `commit `__ + `commit `__ @@ -635,7 +635,7 @@ Sumedh Sidhaye (1) - Added a test to check if ipa host-find --pkey-only does not return SSH public key - `commit `__ + `commit `__ `#8029 `__ @@ -645,10 +645,10 @@ Serhii Tsymbaliuk (2) - WebUI tests: Fix broken reference to parent facet in table record check - `commit `__ + `commit `__ `#8157 `__ - WebUI tests: Fix 'Button is not displayed' exception - `commit `__ + `commit `__ `#8169 `__ @@ -657,11 +657,11 @@ sumenon (3) ---------------------------------------------------------------------------------------------- - ipatests: check that ipa-healthcheck warns if no dna range is set - `commit `__ + `commit `__ - Nightly definition for ipa-healthcheck tool - `commit `__ + `commit `__ - Tier-1 test for ipa-healthcheck tool - `commit `__ + `commit `__ @@ -670,9 +670,9 @@ Thomas Woerner (2) - ipaserver/plugins/hbacrule: Add HBAC to memberservice_hbacsvc\* labels - `commit `__ + `commit `__ - DNS install check: Fix overlapping DNS zone from the master itself - `commit `__ + `commit `__ `#8150 `__ @@ -681,8 +681,8 @@ Vit Mojzis (3) ---------------------------------------------------------------------------------------------- - selinux: Remove obsolete memcached access - `commit `__ + `commit `__ - selinux: move BUILD_SELINUX_POLICY definition - `commit `__ + `commit `__ - Add freeipa-selinux subpackage - `commit `__ + `commit `__ diff --git a/src/page/Releases/4.8.6.rst b/src/page/Releases/4.8.6.rst index 43abab459..d194c99e5 100644 --- a/src/page/Releases/4.8.6.rst +++ b/src/page/Releases/4.8.6.rst @@ -147,85 +147,85 @@ Alexander Bokovoy (35) ---------------------------------------------------------------------------------------------- - Become FreeIPA 4.8.6 - `commit `__ + `commit `__ - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - `commit `__ + `commit `__ `#7181 `__ - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - `commit `__ + `commit `__ `#7181 `__ - ipatests: test sysaccount password change with a password policy applied - `commit `__ + `commit `__ `#7181 `__ - ipatests: allow changing sysaccount passwords as cn=Directory Manager - `commit `__ + `commit `__ `#7181 `__ - Fix indentation levels - `commit `__ + `commit `__ - ipatests: always skip additional input for group-add-member --external - `commit `__ + `commit `__ `#8236 `__ - po: update Chinese (China) translation - `commit `__ + `commit `__ - po: update Ukrainian translation - `commit `__ + `commit `__ - po: update Tajik translation timestamp - `commit `__ + `commit `__ - po: update Slovak translation timestamp - `commit `__ + `commit `__ - po: update Russian translation - `commit `__ + `commit `__ - po: update Portuguese (Brazil) translation timestamp - `commit `__ + `commit `__ - po: update Portuguese translation timestamp - `commit `__ + `commit `__ - po: update Polish translation - `commit `__ + `commit `__ - po: update Punjabi translation timestamp - `commit `__ + `commit `__ - po: update Dutch translation timestamp - `commit `__ + `commit `__ - po: update Marathi translation timestamp - `commit `__ + `commit `__ - po: update Kannada translation timestamp - `commit `__ + `commit `__ - po: update Japanese translation timestamp - `commit `__ + `commit `__ - po: update Indonesian translation timestamp - `commit `__ + `commit `__ - po: update Hungarian translation timestamp - `commit `__ + `commit `__ - po: update Hindi translation timestamp - `commit `__ + `commit `__ - po: update French translation - `commit `__ + `commit `__ - po: update Basque translation timestamp - `commit `__ + `commit `__ - po: update Spanish translation - `commit `__ + `commit `__ - po: update English (United Kingdom) translation timestamp - `commit `__ + `commit `__ - po: update German translation - `commit `__ + `commit `__ - po: update Czech translation timestamp - `commit `__ + `commit `__ - po: update Catalan translation timestamp - `commit `__ + `commit `__ - po: update Bengali translation timestamp - `commit `__ + `commit `__ - po: update ipa.pot template - `commit `__ + `commit `__ - Update translation infrastructure - `commit `__ + `commit `__ `#8159 `__ - Keep ipa.pot translation file in git for weblate - `commit `__ + `commit `__ `#8159 `__ - Prevent adding IPA objects as external members of external groups - `commit `__ + `commit `__ `#8236 `__ @@ -234,18 +234,18 @@ Christian Heimes (5) ---------------------------------------------------------------------------------------------- - po: fix LINGUAS to use whitespace separation - `commit `__ + `commit `__ `#8159 `__ - SELinux: apache_manage_pid_files for F30 - `commit `__ + `commit `__ `#8241 `__ - Add pytest OpenSSH transport with password - `commit `__ + `commit `__ - Move freeipa-selinux dependency to freeipa-common - `commit `__ + `commit `__ `#6891 `__ - Integrate ipa_custodia policy - `commit `__ + `commit `__ `#6891 `__ @@ -254,7 +254,7 @@ François Cami (1) ---------------------------------------------------------------------------------------------- - ipatests: test_replica_promotion.py: test KRA on Hidden Replica - `commit `__ + `commit `__ `#8240 `__ @@ -263,13 +263,13 @@ Florence Blanc-Renaud (3) ---------------------------------------------------------------------------------------------- - ipatests: wait for SSSD to become online in backup/restore tests - `commit `__ + `commit `__ `#8228 `__ - xmlrpc tests: add a test for idview-apply on a master - `commit `__ + `commit `__ `#5662 `__ - idviews: prevent applying to a master - `commit `__ + `commit `__ `#5662 `__ @@ -278,12 +278,12 @@ Mohammad Rizwan Yusuf (3) ---------------------------------------------------------------------------------------------- - ipatests: Skip test using paramiko when FIPS is enabled - `commit `__ + `commit `__ - Test if schema-compat-entry-attribute is set - `commit `__ + `commit `__ `#8193 `__ - Test if schema-compat-entry-attribute is set - `commit `__ + `commit `__ `#8193 `__ @@ -292,13 +292,13 @@ Rob Crittenden (4) ---------------------------------------------------------------------------------------------- - Test that pwpolicy only applied on Kerberos entries - `commit `__ + `commit `__ - Add ability to change a user password as the Directory Manager - `commit `__ + `commit `__ - Don't save password history on non-Kerberos accounts - `commit `__ + `commit `__ - Test that ipa-healthcheck human output translates error strings - `commit `__ + `commit `__ @@ -306,7 +306,7 @@ Stanislav Levin (1) ---------------------------------------------------------------------------------------------- - pki-proxy: Don't rely on running apache until it's configured - `commit `__ + `commit `__ `#8233 `__ @@ -315,10 +315,10 @@ Sergey Orlov (2) ---------------------------------------------------------------------------------------------- - ipatests: provide AD admin password when trying to establish trust - `commit `__ + `commit `__ `#7895 `__ - ipatests: remove test_ordering - `commit `__ + `commit `__ @@ -326,7 +326,7 @@ Serhii Tsymbaliuk (1) ---------------------------------------------------------------------------------------------- - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - `commit `__ + `commit `__ `#8239 `__ @@ -336,7 +336,7 @@ sumenon (1) - ipatests: Added testcase to check logrotate is added for healthcheck tool - `commit `__ + `commit `__ @@ -344,5 +344,5 @@ Vit Mojzis (1) ---------------------------------------------------------------------------------------------- - selinux: disable ipa_custodia when installing custom policy - `commit `__ + `commit `__ `#6891 `__ diff --git a/src/page/Releases/4.8.7.rst b/src/page/Releases/4.8.7.rst index 4cae89840..115d1f6ef 100644 --- a/src/page/Releases/4.8.7.rst +++ b/src/page/Releases/4.8.7.rst @@ -428,7 +428,7 @@ Armando Neto (1) ---------------------------------------------------------------------------------------------- - prci: update templates for new Fedora release - `commit `__ + `commit `__ @@ -436,102 +436,102 @@ Alexander Bokovoy (35) ---------------------------------------------------------------------------------------------- - Become FreeIPA 4.8.7 - `commit `__ + `commit `__ - ipa-4-8: update list of contributors - `commit `__ + `commit `__ - ipa-4-8: Update translation files before 4.8.7 release - `commit `__ + `commit `__ - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset - `commit `__ + `commit `__ `#8362 `__ - ipatests: test that adding Active Directory user to a role makes it an administrator - `commit `__ + `commit `__ `#8357 `__ - Web UI: allow users from trusted Active Directory forest manage IPA - `commit `__ + `commit `__ `#8335 `__ - tests: account for ID overrides as members of groups and roles - `commit `__ + `commit `__ `#7255 `__ - Support adding user ID overrides as group and role members - `commit `__ + `commit `__ `#7255 `__ - idviews: handle unqualified ID override lookups from Web UI - `commit `__ + `commit `__ `#7255 `__ - support using trust-related operations in the server console - `commit `__ + `commit `__ - kdb: handle enterprise principal lookup in AS_REQ - `commit `__ + `commit `__ `#8319 `__ - azure: do not run test_commands due to failures in low memory cases - `commit `__ + `commit `__ - test_smb: test S4U2Self operation by IPA service - `commit `__ + `commit `__ `#8319 `__ - ipa-kdb: refactor principal lookup to support S4U2Self correctly - `commit `__ + `commit `__ `#8319 `__ - ipa-kdb: cache local TGS in the driver context - `commit `__ + `commit `__ `#8319 `__ - ipa-kdb: add primary group to list of groups in MS-PAC - `commit `__ + `commit `__ `#8319 `__ - ipa-kdb: Always allow services to get PAC if needed - `commit `__ + `commit `__ `#8319 `__ - ipa-kdb: add asserted identity SIDs - `commit `__ + `commit `__ `#8319 `__ - kdb: add minimal server referrals support for enterprise principals - `commit `__ + `commit `__ `#8319 `__ - ipa-tests: add a test to make sure MS-PAC is produced by KDC - `commit `__ + `commit `__ `#8319 `__ - ipa-print-pac: acquire and print PAC record for a user - `commit `__ + `commit `__ `#8319 `__ - ipa-kdb: add UPN_DNS_INFO PAC structure - `commit `__ + `commit `__ `#8319 `__ - baseldap: de-duplicate passed attributes when checking for limits - `commit `__ + `commit `__ `#8328 `__ - service delegation: allow to add and remove host principals - `commit `__ + `commit `__ `#8289 `__ - WebUI: use python3-rjsmin to minify JavaScript files - `commit `__ + `commit `__ `#8300 `__ - test_smb: test that we can auth as NetBIOS alias - `commit `__ + `commit `__ `#8291 `__ - kdb: fix memory handling in ipadb_find_principal - `commit `__ + `commit `__ `#8291 `__ - kdb: initialize flags in ipadb_delete_principal() - `commit `__ + `commit `__ `#8291 `__ - Azure Pipelines: switch to Fedora 32 - `commit `__ + `commit `__ - Azure Pipelines: Override services known to not work in containers - `commit `__ + `commit `__ - Add pytest.skip_if_container() - `commit `__ + `commit `__ - CVE-2020-1722: prevent use of too long passwords - `commit `__ + `commit `__ `#8268 `__ - Allow rename of a host group - `commit `__ + `commit `__ `#6783 `__ - Add 'api' and 'aci' targets to make - `commit `__ + `commit `__ - Remove Fedora repository fastmirror selection - `commit `__ + `commit `__ @@ -539,33 +539,33 @@ Peter Keresztes Schmidt (10) ---------------------------------------------------------------------------------------------- - Split named custom config to allow changes in options stanza - `commit `__ + `commit `__ `#8287 `__ - util: replace NSS usage with OpenSSL - `commit `__ + `commit `__ `#6857 `__ - util: add unit test for pw hashing - `commit `__ + `commit `__ `#6857 `__ - po: remove zanata config since translation was moved to weblate - `commit `__ + `commit `__ `#8159 `__ - Specify min and max values for TTL of a DNS record - `commit `__ + `commit `__ `#8358 `__ - WebUI: Add units to some DNS zone and IPA config fields - `commit `__ + `commit `__ - WebUI: Expose TTL of DNS records - `commit `__ + `commit `__ `#3827 `__ - WebUI: Refresh DNS record data correctly after mod operation - `commit `__ + `commit `__ `#8359 `__ - WebUI: Fix invalid RPC calls when link widget has no pkey passed - `commit `__ + `commit `__ `#8338 `__ - WebUI: Use data adapter to load facet header data - `commit `__ + `commit `__ `#8339 `__ @@ -574,123 +574,123 @@ Christian Heimes (43) ---------------------------------------------------------------------------------------------- - Overhaul bind upgrade process - `commit `__ + `commit `__ - Fix named.conf named_conf_include_re - `commit `__ + `commit `__ - Remove named_validate_dnssec update step - `commit `__ + `commit `__ - More upgrade tests - `commit `__ + `commit `__ - Fix named.conf update bug NAMED_DNSSEC_VALIDATION - `commit `__ + `commit `__ `#8363 `__ - Auto-generated ipa-epn files to gitignore - `commit `__ + `commit `__ - libotp: Replace NSS with OpenSSL HMAC - `commit `__ + `commit `__ `#6857 `__ - Include named config files in backup - `commit `__ + `commit `__ - Handle DatabaseError in RPC-Server connect() - `commit `__ + `commit `__ `#8352 `__ - Allow permissions with 'self' bindruletype - `commit `__ + `commit `__ `#8348 `__ - make: serialize strip-po / strip-pot - `commit `__ + `commit `__ `#8323 `__ - Remove obsolete BIND named.conf options - `commit `__ + `commit `__ `#8349 `__, `#8350 `__ - Add ipa-print-pac to gitignore - `commit `__ + `commit `__ - Allow dnsrecord-add --force on clients - `commit `__ + `commit `__ `#8317 `__ - Check for freeipa-server-dns package early - `commit `__ + `commit `__ `#7577 `__ - Hard-code in_tree=True for tests - `commit `__ + `commit `__ `#8317 `__ - Fix detection logic for api.env.in_tree - `commit `__ + `commit `__ `#8312 `__ - Make api.env.mode consistent - `commit `__ + `commit `__ `#8313 `__ - Disable password schema update on LDAP bind - `commit `__ + `commit `__ `#8315 `__ - Use httpd 2.4 syntax for access control - `commit `__ + `commit `__ - Fix make devcheck - `commit `__ + `commit `__ `#8307 `__ - Make ipaplatform a regular top-level package - `commit `__ + `commit `__ `#6474 `__, `#8309 `__ - Reconfigure pycodestyle - `commit `__ + `commit `__ `#8306 `__ - Manually reformat ipapython/version.py.in - `commit `__ + `commit `__ `#8306 `__ - Silence W601 .has_key() is deprecated - `commit `__ + `commit `__ `#8306 `__ - Fix E722 do not use bare 'except' - `commit `__ + `commit `__ `#8306 `__ - Fix E721 do not compare types, use 'isinstance()' - `commit `__ + `commit `__ `#8306 `__ - Fix E714 test for object identity should be 'is not' - `commit `__ + `commit `__ `#8306 `__ - Fix E713 test for membership should be 'not in' - `commit `__ + `commit `__ `#8306 `__ - Fix E712 comparison to True / False - `commit `__ + `commit `__ `#8306 `__ - Fix E711 comparison to None - `commit `__ + `commit `__ `#8306 `__ - Fix E266 too many leading '#' for block comment - `commit `__ + `commit `__ `#8306 `__ - Simplify pki proxy conf - `commit `__ + `commit `__ - Make check_required_principal() case-insensitive - `commit `__ + `commit `__ `#8308 `__ - Address issues found by new pylint 2.5.0 - `commit `__ + `commit `__ `#8297 `__ - Add skip_if_platform marker - `commit `__ + `commit `__ - Define default password policy for sysaccounts - `commit `__ + `commit `__ `#8276 `__ - Use api.env.container_sysaccounts - `commit `__ + `commit `__ `#8276 `__ - Fix exception escape warning - `commit `__ + `commit `__ - Fix APIVersion.__getnewargs_\_ - `commit `__ + `commit `__ - servrole: takes_params must be a tuple - `commit `__ + `commit `__ `#8290 `__ - Fix various OpenDNSSEC 2.1 issues - `commit `__ + `commit `__ `#8283 `__ - Use /run and /run/lock instead of /var - `commit `__ + `commit `__ `#8272 `__ @@ -699,39 +699,39 @@ François Cami (13) ---------------------------------------------------------------------------------------------- - IPA-EPN: Test suite. - `commit `__ + `commit `__ `#3687 `__ - IPA-EPN: First version. - `commit `__ + `commit `__ `#3687 `__ - ipatests: add KRB5_TRACE to kinit in test_adtrust_install.py - `commit `__ + `commit `__ - tasks.py: add krb5_trace to create_active_user and kinit_as_user - `commit `__ + `commit `__ - tox.ini: switch from W503 to W504 - `commit `__ + `commit `__ - ipatests: increase test_webui_server timeout - `commit `__ + `commit `__ `#8266 `__ - ipatests: increase test_ipahealthcheck timeout - `commit `__ + `commit `__ `#8262 `__ - ipatests: move ipa_backup to tasks - `commit `__ + `commit `__ `#8217 `__ - ipa-backup: Make sure all roles are installed on the current master. - `commit `__ + `commit `__ `#8217 `__ - test_backup_and_restore: add server role verification steps - `commit `__ + `commit `__ `#8217 `__ - ipatests: test ipa-backup with different role configurations. - `commit `__ + `commit `__ `#8217 `__ - nightly_ipa-4-8_previous.yaml: fix typo - `commit `__ + `commit `__ - pr-ci templates: update test_fips timeouts - `commit `__ + `commit `__ `#8247 `__ @@ -741,17 +741,17 @@ Florence Blanc-Renaud (4) - ipatests: Check if user with 'User Administrator' role can delete group. - `commit `__ + `commit `__ `#6884 `__ - ipatests: enable 389-ds audit log and collect audit file - `commit `__ + `commit `__ `#8064 `__ - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - `commit `__ + `commit `__ `#8311 `__ - Man pages: fix syntax issues - `commit `__ + `commit `__ `#8273 `__ @@ -760,7 +760,7 @@ Francisco Trivino (1) ---------------------------------------------------------------------------------------------- - prci_definitions: remove test_smb from ipa-4-8 gating workflow - `commit `__ + `commit `__ @@ -768,34 +768,34 @@ Fraser Tweedale (10) ---------------------------------------------------------------------------------------------- - upgrade: avoid stopping certmonger when fixing requests - `commit `__ + `commit `__ `#8186 `__ - httpinstance: retry request without ipa-ca.$DOMAIN dnsName on failure - `commit `__ + `commit `__ `#8186 `__ - ipatests: check HTTP certificate contains ipa-ca.$DOMAIN dnsname - `commit `__ + `commit `__ `#8186 `__ - upgrade: add ipa-ca.$DOMAIN alias to HTTP certificate - `commit `__ + `commit `__ `#8186 `__ - httpinstance: add ipa-ca.$DOMAIN alias in initial request - `commit `__ + `commit `__ `#8186 `__ - cert-request: allow ipa-ca.$DOMAIN dNSName for IPA servers - `commit `__ + `commit `__ `#8186 `__ - httpinstance: add fqdn and ipa-ca alias to Certmonger request - `commit `__ + `commit `__ `#8186 `__ - certmonger: support dnsname as request search criterion - `commit `__ + `commit `__ `#8186 `__ - certmonger: move 'criteria' description to module docstring - `commit `__ + `commit `__ `#8186 `__ - certmonger: avoid mutable default argument - `commit `__ + `commit `__ `#8186 `__ @@ -804,7 +804,7 @@ Kaleemullah Siddiqui (1) ---------------------------------------------------------------------------------------------- - Test for check of HostKeyAlgorithms option in ssh_config - `commit `__ + `commit `__ `#8082 `__ @@ -813,7 +813,7 @@ Miro Hrončok (1) ---------------------------------------------------------------------------------------------- - Fix a syntax typo - `commit `__ + `commit `__ @@ -821,10 +821,10 @@ Michal Polovka (2) ---------------------------------------------------------------------------------------------- - Test for healthcheck being run on replica with stopped master - `commit `__ + `commit `__ - Test for output being indented by default value if not stated implicitly. - `commit `__ + `commit `__ @@ -832,22 +832,22 @@ Mohammad Rizwan Yusuf (6) ---------------------------------------------------------------------------------------------- - ipatests: Test deletion of required principal throws proper error - `commit `__ + `commit `__ `#7695 `__ - Display principal name while del required principal - `commit `__ + `commit `__ `#7695 `__ - WebUI tests: fix PEP8 issues in test_webui/test_user.py - `commit `__ + `commit `__ - webui: check if notification area doesn't intercept menu button - `commit `__ + `commit `__ `#8120 `__ - ipatests: Test to check password leak in apache error log - `commit `__ + `commit `__ `#8017 `__ - ipatests:Test if proper error thrown when AD user tries to run IPA commands - `commit `__ + `commit `__ `#8163 `__ @@ -856,41 +856,41 @@ Rob Crittenden (12) ---------------------------------------------------------------------------------------------- - IPA-EPN: Don't treat givenname differently - `commit `__ + `commit `__ `#3687 `__ - IPA-EPN: add test to validate smtp_delay value - `commit `__ + `commit `__ `#3687 `__ - IPA-EPN: add smtp_delay to limit the velocity of e-mails sent - `commit `__ + `commit `__ `#3687 `__ - IPA-EPN: Add tests for --mail-test option - `commit `__ + `commit `__ `#3687 `__ - IPA-EPN: Add mail-test option for testing sending live email - `commit `__ + `commit `__ `#3687 `__ - IPA-EPN: test using SSL against port 465 - `commit `__ + `commit `__ `#3687 `__ - IPA-EPN: Add test for starttls mode - `commit `__ + `commit `__ `#3687 `__ - IPA-EPN: Add tests for sending real mail with auth and templates - `commit `__ + `commit `__ `#3687 `__ - IPA-EPN: Fixes to starttls mode, convert some log errors to exceptions - `commit `__ + `commit `__ `#3687 `__ - Add index for krbPasswordExpiration for EPN - `commit `__ + `commit `__ `#3687 `__ - Add a jinja2 e-mail template for EPN - `commit `__ + `commit `__ `#3687 `__ - Perform baseline healthcheck - `commit `__ + `commit `__ @@ -898,7 +898,7 @@ Sam Morris (1) ---------------------------------------------------------------------------------------------- - Debian: write out only one CA certificate per file - `commit `__ + `commit `__ `#8106 `__ @@ -907,7 +907,7 @@ Sergio Oliveira Campos (1) ---------------------------------------------------------------------------------------------- - Add test for sssd ad trust lookup with dn in certmaprule - `commit `__ + `commit `__ @@ -915,57 +915,57 @@ Stanislav Levin (18) ---------------------------------------------------------------------------------------------- - Azure: Make dnf repos consistent - `commit `__ + `commit `__ `#8330 `__ - Azure: Always update apt cache - `commit `__ + `commit `__ - Azure: Allow chronyd to sync time - `commit `__ + `commit `__ `#8316 `__ - Azure: Add custom seccomp profile - `commit `__ + `commit `__ `#8316 `__ - Azure: Increase memory limit - `commit `__ + `commit `__ `#8264 `__ - ipatests: Collect all logs on all Unix hosts - `commit `__ + `commit `__ `#8265 `__ - ipatests: Pretty print multihost config - `commit `__ + `commit `__ `#8265 `__ - ipatests: Cleanup 'collect_logs' decorator - `commit `__ + `commit `__ `#8265 `__ - ipatests: Specify shell implementation - `commit `__ + `commit `__ `#8101 `__ - ipatests: Specify Pytest XML report schema - `commit `__ + `commit `__ `#8101 `__ - ipatests: Remove no longer needed 'skip' compatibility - `commit `__ + `commit `__ `#8101 `__ - ipatests: Remove no longer needed 'capture' compatibility - `commit `__ + `commit `__ `#8101 `__ - ipatests: Remove no longer needed 'get_marker' - `commit `__ + `commit `__ `#8101 `__ - ipatests: Remove deprecated yield_fixture - `commit `__ + `commit `__ `#8101 `__ - ipatests: Bump required Pytest - `commit `__ + `commit `__ `#8101 `__ - ipatests: Mark firewalld commands as no-op on non-firewalld distros - `commit `__ + `commit `__ `#8261 `__ - Azure: Gather coredumps - `commit `__ + `commit `__ `#8251 `__ - Azure: Allow distros to install Python they want - `commit `__ + `commit `__ `#8254 `__ @@ -974,26 +974,26 @@ Sergey Orlov (10) ---------------------------------------------------------------------------------------------- - ipatests: mark test_trustdomain_disable test as expectedly failing - `commit `__ + `commit `__ - ipatests: add context manager for declaring part of test as xfail - `commit `__ + `commit `__ - ipatests: add utility for getting sssd version on remote host - `commit `__ + `commit `__ - update prci definitions for test_sssd.py - `commit `__ + `commit `__ - ipatests: add test for sssd behavior with disabled trustdomains - `commit `__ + `commit `__ - ipatests: run all cases from test_integration/test_idviews.py in nightlies - `commit `__ + `commit `__ - ipatests: explicitly save output of certutil - `commit `__ + `commit `__ - ipatests: add AD DC as a DNS forwarder before establishing trust - `commit `__ + `commit `__ - ipatests: add missing classes from test_installation in nightly runs - `commit `__ + `commit `__ - ipatests: run test_integration/test_cert.py in PR-CI - `commit `__ + `commit `__ @@ -1001,10 +1001,10 @@ Sumedh Sidhaye (2) ---------------------------------------------------------------------------------------------- - Test for removing a subgroup - `commit `__ + `commit `__ - Test to check if Certmonger tracks certs in between reboots/interruptions and while in "CA_WORKING" state - `commit `__ + `commit `__ `#8164 `__ @@ -1013,7 +1013,7 @@ Stasiek Michalski (1) ---------------------------------------------------------------------------------------------- - Support for SUSE/openSUSE ipaplatform - `commit `__ + `commit `__ @@ -1021,23 +1021,23 @@ Serhii Tsymbaliuk (6) ---------------------------------------------------------------------------------------------- - WebUI: Apply jQuery patch to fix htmlPrefilter issue - `commit `__ + `commit `__ `#8325 `__ - WebUI tests: Add confirmation step after changing default group in automember tests - `commit `__ + `commit `__ `#8322 `__ - WebUI: Add confirmation dialog for changing default user/host group - `commit `__ + `commit `__ `#8322 `__ - WebUI tests: cover membership management with UI tests - `commit `__ + `commit `__ `#8298 `__ - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - `commit `__ + `commit `__ `#8284 `__ - Web UI: Upgrade Dojo version 1.13.0 -> 1.16.2 - `commit `__ + `commit `__ `#8222 `__ @@ -1047,21 +1047,21 @@ sumenon (7) - ipatests: Test to check warning state for TomcatFileCheck in ipahealthcheck.ipa.files - `commit `__ + `commit `__ - ipatests: Test for ipahealthcheck.ipa.files for TomcatFilecheck - `commit `__ + `commit `__ - ipatests: Test for ipahealthcheck DogtagCertsConnectivityCheck - `commit `__ + `commit `__ - ipatests: Added testcase to check that ipa-adtrust-install command runs successfully with locale set as LANG=en_IN.UTF-8 - `commit `__ + `commit `__ `#8066 `__ - ipatests: Test for ipahealthcheck tool for IPADomainCheck. - `commit `__ + `commit `__ - ipatests: Test for ipahealthcheck.ds.ruv check - `commit `__ + `commit `__ - Test for ipahealthcheck.ipa.idns check when integrated DNS is setup - `commit `__ + `commit `__ @@ -1070,13 +1070,13 @@ Timo Aaltonen (4) - ipatests/test_installation: Use knownservices to map the service name. - `commit `__ + `commit `__ - ipatests/test_commands: Check sssd version like on test_sssd - `commit `__ + `commit `__ - Debian: Use parse_ipa_version from redhat. - `commit `__ + `commit `__ - Debian: Use enable/disable_ldap_automount() from base - `commit `__ + `commit `__ @@ -1084,5 +1084,5 @@ Viktor Ashirov (1) ---------------------------------------------------------------------------------------------- - Update ACIs with the correct syntax - `commit `__ + `commit `__ `#8301 `__ diff --git a/src/page/Releases/4.8.8.rst b/src/page/Releases/4.8.8.rst index 18b3bf918..50e9f705b 100644 --- a/src/page/Releases/4.8.8.rst +++ b/src/page/Releases/4.8.8.rst @@ -108,7 +108,7 @@ Alexander Bokovoy (1) ---------------------------------------------------------------------------------------------- - Become FreeIPA 4.8.8 - `commit `__ + `commit `__ @@ -116,5 +116,5 @@ Christian Heimes (1) ---------------------------------------------------------------------------------------------- - Prevent local account takeover - `commit `__ + `commit `__ `#8326 `__ diff --git a/src/page/Releases/4.8.9.rst b/src/page/Releases/4.8.9.rst index d80da4694..2b70f6572 100644 --- a/src/page/Releases/4.8.9.rst +++ b/src/page/Releases/4.8.9.rst @@ -307,13 +307,13 @@ Armando Neto (4) ---------------------------------------------------------------------------------------------- - ipatests: bump pr-ci templates - `commit `__ + `commit `__ - ipatests: bump pr-ci templates - `commit `__ + `commit `__ - ipatests: bump prci templates - `commit `__ + `commit `__ - ipatests: bump prci templates - `commit `__ + `commit `__ @@ -321,29 +321,29 @@ Alexander Bokovoy (10) ---------------------------------------------------------------------------------------------- - Become FreeIPA 4.8.9 - `commit `__ + `commit `__ - ipa-4-8: Add new contributors - `commit `__ + `commit `__ - ipa-4-8: update po/ipa.pot - `commit `__ + `commit `__ - Add alternative email to the mailmap for myself - `commit `__ + `commit `__ - extdom-extop: refactor tests to use unshare+chroot to override nss_files configuration - `commit `__ + `commit `__ `#8437 `__ - selinux: support running ipa-custodia with PrivateTmp=yes - `commit `__ + `commit `__ `#8395 `__ - selinux: allow oddjobd to set up ipa_helper_t context for execution - `commit `__ + `commit `__ `#8395 `__ - Get back to git snapshots - `commit `__ + `commit `__ - Become FreeIPA 4.8.8 - `commit `__ + `commit `__ - VERSION: back to git snapshots - `commit `__ + `commit `__ @@ -352,16 +352,16 @@ Anuja More (5) - ipatests: cleanup in test_subdomain_lookup_with_certmaprule_containing_dn - `commit `__ + `commit `__ - ipatests: xfail test with older versions of sssd - `commit `__ + `commit `__ - ipatests : Test to verify override_gid works with subdomain. - `commit `__ + `commit `__ - ipatests: xfail test with older versions of sssd - `commit `__ + `commit `__ - ipatests: Test that trusted AD users should not lose their AD domains. - `commit `__ + `commit `__ @@ -369,13 +369,13 @@ Alexander Scheel (3) ---------------------------------------------------------------------------------------------- - Specify cert_paths when calling PKIConnection - `commit `__ + `commit `__ `#8379 `__ - Configure PKI AJP Secret with 256-bit secret - `commit `__ + `commit `__ `#8372 `__ - Clarify AJP connector creation process - `commit `__ + `commit `__ @@ -383,25 +383,25 @@ Peter Keresztes Schmidt (7) ---------------------------------------------------------------------------------------------- - WebUI: Unify adapter property definition for state evaluators - `commit `__ + `commit `__ `#8336 `__ - WebUI: Make object_class_evaluator evaluator compatible with batch responses - `commit `__ + `commit `__ `#8336 `__ - Populate nshardwareplatform and nsosversion during join operation - `commit `__ + `commit `__ `#8370 `__ - WebUI: Fix rendering of boolean_status_formatter - `commit `__ + `commit `__ `#8396 `__ - Unify spelling of "One-Time Password" - `commit `__ + `commit `__ - WebUI: reword OTP info message displayed during PW reset - `commit `__ + `commit `__ `#5628 `__ - WebUI: move OTP to be the last field in the PW reset form - `commit `__ + `commit `__ `#5628 `__ @@ -410,50 +410,50 @@ Christian Heimes (17) ---------------------------------------------------------------------------------------------- - Treat container subplatforms like main platform - `commit `__ + `commit `__ `#8401 `__ - Don't configure authselect in containers - `commit `__ + `commit `__ `#8401 `__ - Convert ipa-httpd-pwdreader into Python script - `commit `__ + `commit `__ `#8401 `__ - Explicitly pass keytab to ipa-join - `commit `__ + `commit `__ - Write state dir to smb.conf - `commit `__ + `commit `__ `#8401 `__ - Add ipaplatform for Fedora and RHEL container - `commit `__ + `commit `__ `#8401 `__ - Allow to override ipaplatform with env var - `commit `__ + `commit `__ `#8401 `__ - Teach pylint how dnspython 2.x works - `commit `__ + `commit `__ `#8419 `__ - Add missing SELinux rule for ipa-custodia.sock - `commit `__ + `commit `__ `#8412 `__ - Make tab completion in console more useful - `commit `__ + `commit `__ - Add \__signature_\_ to plugins - `commit `__ + `commit `__ `#8388 `__ - SELinux: Backport dirsrv_systemctl interface - `commit `__ + `commit `__ - RHEL 8.3 has KRB5 1.18 with KDB 8.0 - `commit `__ + `commit `__ - Use old uglifyjs on RHEL 8 - `commit `__ + `commit `__ `#8300 `__ - Build ipa-selinux package on RHEL 8 - `commit `__ + `commit `__ - Prevent local account takeover - `commit `__ + `commit `__ `#8326 `__ - Move ipa-epn systemd files and run RPM hooks - `commit `__ + `commit `__ `#8367 `__ @@ -462,88 +462,88 @@ François Cami (28) ---------------------------------------------------------------------------------------------- - IPA-EPN: enhance input validation - `commit `__ + `commit `__ `#8444 `__ - ipatests: test_epn: update error messages - `commit `__ + `commit `__ `#8449 `__ - IPA-EPN: Fix SMTP connection error handling - `commit `__ + `commit `__ `#8445 `__ - ipatests: test_epn: add test_EPN_connection_refused - `commit `__ + `commit `__ `#8445 `__ - IPA-EPN: fix configuration file typo - `commit `__ + `commit `__ - IPA-EPN: Use a helper to retrieve LDAP attributes from an entry - `commit `__ + `commit `__ - ipatests: test_epn: test_EPN_nbdays enhancements - `commit `__ + `commit `__ `#8449 `__ - ipatests: tasks.py: fix ipa-epn invocation - `commit `__ + `commit `__ `#8449 `__ - ipatests: test_otp: convert test_2fa_enable_single_prompt to run_ssh_cmd - `commit `__ + `commit `__ `#8129 `__ - ipatests: ui_driver: convert run_cmd_on_ui_host to tasks.py::run_ssh_cmd - `commit `__ + `commit `__ `#8129 `__ - ipatests: test_commands: test_login_wrong_password: Paramiko=>OpenSSH - `commit `__ + `commit `__ `#8129 `__ - ipatests: test_commands: test_ssh_from_controller: Paramiko=>OpenSSH - `commit `__ + `commit `__ `#8129 `__ - ipatests: test_commands: test_ssh_from_controller: refactor - `commit `__ + `commit `__ `#8129 `__ - ipatests: test_user_permissions: test_selinux_user_optimized Paramiko=>OpenSSH - `commit `__ + `commit `__ `#8129 `__ - ipatests: test_commands: test_ssh_key_connection: Paramiko=>OpenSSH - `commit `__ + `commit `__ `#8129 `__ - tasks: add run_ssh_cmd - `commit `__ + `commit `__ `#8129 `__ - ipatests: test_commands: test_login_wrong_password: look farther in time - `commit `__ + `commit `__ `#8432 `__ - ipatests: test_sss_ssh_authorizedkeys - `commit `__ + `commit `__ `#8151 `__ - ipatests: re-enable test_sss_ssh_authorizedkeys - `commit `__ + `commit `__ `#8151 `__ - ipatests: xfail TestIpaClientAutomountFileRestore's final test - `commit `__ + `commit `__ `#8189 `__ - ipatests: remove dnf workaround from test_epn.py - `commit `__ + `commit `__ `#8391 `__ - ipatests: display SSSD kdcinfo in test_adtrust_install.py - `commit `__ + `commit `__ - ipatests: increase test_caless_TestReplicaInstall timeout - `commit `__ + `commit `__ `#8377 `__ - ipatests: ipa_epn: uninstall/reinstall ipa-client-epn - `commit `__ + `commit `__ `#8374 `__ - ipatests: check that EPN's configuration file is installed. - `commit `__ + `commit `__ `#8374 `__ - man pages: fix epn.conf.5 and ipa-epn.1 formatting - `commit `__ + `commit `__ - EPN: ship the configuration file. - `commit `__ + `commit `__ `#8374 `__ - .mailmap: add fcami - `commit `__ + `commit `__ @@ -551,64 +551,64 @@ Florence Blanc-Renaud (20) ---------------------------------------------------------------------------------------------- - ipatests: remove xfail from test_dnssec - `commit `__ + `commit `__ - ipatests: fix TestIpaHealthCheckWithoutDNS failure - `commit `__ + `commit `__ `#8447 `__ - ipatests: fix test_ipahealthcheck.py::TestIpaHealthCheck - `commit `__ + `commit `__ `#8439 `__ - ipatests: increase test_trust timeout - `commit `__ + `commit `__ - ipatests: check KDC cert permissions in CA less install - `commit `__ + `commit `__ `#8440 `__ - CAless installation: set the perms on KDC cert file - `commit `__ + `commit `__ `#8440 `__ - ipatests: fix test_authselect - `commit `__ + `commit `__ `#8189 `__ - ipatests: remove the xfail for test_nfs.py - `commit `__ + `commit `__ `#8189 `__ - ipa-client-install: use the authselect backup during uninstall - `commit `__ + `commit `__ `#8189 `__ - ipatests: Fix TestReplicaPromotionLevel1 - `commit `__ + `commit `__ `#8414 `__ - ipatests: fix TestUnprivilegedUserPermissions - `commit `__ + `commit `__ `#8413 `__ - sshd template must be part of client package - `commit `__ + `commit `__ `#8400 `__ - Bump requires for selinux-policy - `commit `__ + `commit `__ - ipatests: fix the method adding ifp to sssd.conf - `commit `__ + `commit `__ `#8371 `__ - Unify spelling of "One-Time Password" (take 2) - `commit `__ + `commit `__ `#5628 `__, `#8381 `__ - client install: fix broken sshd config - `commit `__ + `commit `__ `#8304 `__ - ipa-client-install: use sshd drop-in configuration - `commit `__ + `commit `__ `#8304 `__ - ipatests: add a test for ipa-replica-install --setup-ca --http-cert-file - `commit `__ + `commit `__ `#8366 `__ - ipa-replica-install: --setup-ca and \*-cert-file are mutually exclusive - `commit `__ + `commit `__ `#8366 `__ - ipatests: fix the disable_dnssec_validation method - `commit `__ + `commit `__ `#8364 `__ @@ -617,18 +617,18 @@ Fraser Tweedale (5) ---------------------------------------------------------------------------------------------- - certupdate: only add LWCA tracking requests on CA servers - `commit `__ + `commit `__ `#8399 `__ - cainstance.is_crlgen_enabled: handle missing ipa-pki-proxy.conf - `commit `__ + `commit `__ - Define errors_by_code in ipalib.errors - `commit `__ + `commit `__ `#5011 `__ - fix iPAddress cert issuance for >1 host/service - `commit `__ + `commit `__ `#8368 `__ - fix cert-find errors in CA-less deployment - `commit `__ + `commit `__ `#8369 `__ @@ -638,10 +638,10 @@ Jeremy Frasier (2) - replica: Add tests to ensure the ipaapi user is allowed access to ifp on replicas - `commit `__ + `commit `__ `#8403 `__ - replica: Ensure the ipaapi user is allowed to access ifp on replicas - `commit `__ + `commit `__ `#8403 `__ @@ -650,7 +650,7 @@ Kaleemullah Siddiqui (1) ---------------------------------------------------------------------------------------------- - Tests for fake_mname parameter setup - `commit `__ + `commit `__ @@ -658,9 +658,9 @@ Michal Polovka (2) ---------------------------------------------------------------------------------------------- - ipatests: test_epn: test_EPN_config_file: Package name fix - `commit `__ + `commit `__ - ipatests: test_epn: Fix package installation - `commit `__ + `commit `__ @@ -668,13 +668,13 @@ Mark Reynolds (3) ---------------------------------------------------------------------------------------------- - Increase replication changelog trimming to 30 days - `commit `__ + `commit `__ `#8464 `__ - Issue 8456 - Add new aci's for the new replication changelog entries - `commit `__ + `commit `__ `#8456 `__ - Issue 8407 - Support changelog integration into main database - `commit `__ + `commit `__ `#8407 `__ @@ -683,11 +683,11 @@ Mohammad Rizwan (3) ---------------------------------------------------------------------------------------------- - ipatests: Test certmonger rekey command works fine - `commit `__ + `commit `__ - Xfail test for sssd < 2.3.0 - `commit `__ + `commit `__ - ipatests: Test ipa user login with wrong password - `commit `__ + `commit `__ @@ -695,9 +695,9 @@ Petr Voborník (2) ---------------------------------------------------------------------------------------------- - baseuser: fix ipanthomedirectorydrive option name - `commit `__ + `commit `__ - webui: hide user attributes for SMB services section if empty - `commit `__ + `commit `__ `#8336 `__ @@ -706,61 +706,61 @@ Rob Crittenden (23) ---------------------------------------------------------------------------------------------- - ipatests: stop the CA during healthcheck expiration test - `commit `__ + `commit `__ `#8463 `__ - Improve performance of ipa-server-guard - `commit `__ + `commit `__ `#8425 `__ - IPA-EPN: Test that EPN can be install, uninstalled and re-installed - `commit `__ + `commit `__ - Added negative test case for --list-sources option - `commit `__ + `commit `__ - ipatests: CLI validation of ipa-healthcheck command - `commit `__ + `commit `__ - IPA-EPN: Test that users without givenname and/or mail are handled - `commit `__ + `commit `__ - Address legacy pylint issues in sysrestore.py - `commit `__ + `commit `__ `#8384 `__ - Update check_client_configuration to use new client fact - `commit `__ + `commit `__ `#8384 `__ - Don't use the has_files() to know if client/server is configured - `commit `__ + `commit `__ `#8384 `__ - Create a common place to retrieve facts about an IPA installation - `commit `__ + `commit `__ `#8384 `__ - Simplify determining if IPA client configuration is complete - `commit `__ + `commit `__ `#8384 `__ - Simplify determining if an IPA server installation is complete - `commit `__ + `commit `__ `#8384 `__ - ipatests: Check permissions of /etc/ipa/ca.crt new installations - `commit `__ + `commit `__ `#8441 `__ - Set mode of /etc/ipa/ca.crt to 0644 in CA-less installations - `commit `__ + `commit `__ `#8441 `__ - ipatests: Test healthcheck revocation checker - `commit `__ + `commit `__ - ipatests: Use healthcheck namespacing in stopped server test - `commit `__ + `commit `__ - ipatests: lib389 is now providing healthchecks, update naming - `commit `__ + `commit `__ - ipatests: Add healthcheck test for FileSystemSpaceCheck - `commit `__ + `commit `__ - ipatests: verify that all services can be detected by healthcheck - `commit `__ + `commit `__ - ipatests: Test that healthcheck detects and reports expiration - `commit `__ + `commit `__ - ipatests: Test cases for healthcheck File checker(s) - `commit `__ + `commit `__ - Replace SSLCertVerificationError with CertificateError for py36 - `commit `__ + `commit `__ - Add fips-mode-setup to ipaplatform.paths to determine FIPS status - `commit `__ + `commit `__ `#8429 `__ @@ -769,28 +769,28 @@ Stanislav Levin (9) ---------------------------------------------------------------------------------------------- - spec: Move ipa-cldap plugin out to freeipa-server-trust-ad package - `commit `__ + `commit `__ - uninstall: Clean up no longer used flag - `commit `__ + `commit `__ `#8461 `__ - uninstall: Don't fail on missing /var/lib/samba - `commit `__ + `commit `__ `#8461 `__ - rpm-spec: Don't fail on missing /etc/ssh/ssh_config - `commit `__ + `commit `__ `#8459 `__ - ipatests: Skip keyring tests on containerized platforms - `commit `__ + `commit `__ - Azure: Switch to dockerhub provider - `commit `__ + `commit `__ - ipatests: Add compatibility against python-cryptography 3.0 - `commit `__ + `commit `__ `#8428 `__ - pylint: Fix warning and error - `commit `__ + `commit `__ `#8442 `__ - ipatests: Don't turn Pytest IPA deprecation warnings into errors - `commit `__ + `commit `__ `#8435 `__ @@ -799,7 +799,7 @@ Sergey Orlov (1) ---------------------------------------------------------------------------------------------- - Fix password file permission - `commit `__ + `commit `__ @@ -807,21 +807,21 @@ Serhii Tsymbaliuk (5) ---------------------------------------------------------------------------------------------- - WebUI tests: Add test case to cover user ID override feature - `commit `__ + `commit `__ `#8416 `__ - WebUI: Fix error "unknown command 'idoverrideuser_add_member'" - `commit `__ + `commit `__ `#8416 `__ - WebUI tests: Change navigation tests to find menu items using data-name instead of href - `commit `__ + `commit `__ `#7137 `__ - WebUI: Fix issue with opening links in new tab/window - `commit `__ + `commit `__ `#7137 `__ - WebUI: Fix "IPA Error 3007: RequirmentError" while adding idoverrideuser association - `commit `__ + `commit `__ `#8335 `__ @@ -830,27 +830,27 @@ sumenon (9) ---------------------------------------------------------------------------------------------- - Modified YAML files to include healthcheck externalCA tests - `commit `__ + `commit `__ - ipatests: Tests for ipahealthcheck tool with IPA external - `commit `__ + `commit `__ - ipatests: Test IPACertNSSTrust check when trust attributes is modified for specific cert - `commit `__ + `commit `__ - ipatests: Test to check IPACAChainExpirationCheck when IPA cacrt is renamed - `commit `__ + `commit `__ - ipatests: Increase timeout value in test_getcert_list_profile_using_subca - `commit `__ + `commit `__ - ipatests: Test for ipa-nis-manage CLI tool. - `commit `__ + `commit `__ - ipatests: Tests to check profile is displayed for getcert request. - `commit `__ + `commit `__ - Modified YAML to include healthcheck IPA-AD trust scenario - `commit `__ + `commit `__ - ipatests: Tests to check ipahealthcheck tool with IPA-AD trust scenario - `commit `__ + `commit `__ @@ -858,4 +858,4 @@ Zdenek Pytela (1) ---------------------------------------------------------------------------------------------- - Allow ipa-adtrust-install restart sssd and dirsrv services - `commit `__ + `commit `__ diff --git a/src/page/Releases/4.9.0.rst b/src/page/Releases/4.9.0.rst index 7bac992f0..3cf61ecf6 100644 --- a/src/page/Releases/4.9.0.rst +++ b/src/page/Releases/4.9.0.rst @@ -1547,61 +1547,61 @@ Armando Neto (26) ---------------------------------------------------------------------------------------------- - ipatests: Bump PR-CI templates - `commit `__ + `commit `__ - ipatests: Update PRCI Fedora 32 templates - `commit `__ + `commit `__ - ipatests: Add nightly definitions for enforcing mode - `commit `__ + `commit `__ - ipatests: Bump PR-CI templates - `commit `__ + `commit `__ `#8473 `__ - ipatests: Bump PR-CI templates - `commit `__ + `commit `__ - ipatests: bump pr-ci templates - `commit `__ + `commit `__ - ipatests: bump pr-ci templates - `commit `__ + `commit `__ - ipatests: bump prci templates - `commit `__ + `commit `__ - ipatests: bump prci templates - `commit `__ + `commit `__ - prci: update templates for new Fedora release - `commit `__ + `commit `__ - Update instructions for Fedora 28 / FreeIPA 4.6.90 - `commit `__ + `commit `__ - prci: bump version for latest and previous templates - `commit `__ + `commit `__ - prci: Bump version of all templates - `commit `__ + `commit `__ - prci: update packages for rawhide nightly runs - `commit `__ + `commit `__ - ipatests: Skip test_sss_ssh_authorizedkeys method - `commit `__ + `commit `__ `#8151 `__ - ipatests: Improve test_commands reliability - `commit `__ + `commit `__ - travis: Remove CI integration - `commit `__ + `commit `__ `#7323 `__ - prci: bump template version for temp_commit and nightly_latest - `commit `__ + `commit `__ - prci: bump fedora release - `commit `__ + `commit `__ - prci: rename definitions files and jobs to change how fedora releases are referenced - `commit `__ + `commit `__ - prci: increase timeout argument for test_sssd.py - `commit `__ + `commit `__ - prci: increase timeout for jobs that required AD - `commit `__ + `commit `__ - prci: update packages for pki and testing nightly runs - `commit `__ + `commit `__ - Update definitions for nightly tests - `commit `__ + `commit `__ - prci: fix typo on nightly test definitions - `commit `__ + `commit `__ - prci: update test definitions - `commit `__ + `commit `__ @@ -1609,486 +1609,486 @@ Alexander Bokovoy (189) ---------------------------------------------------------------------------------------------- - Become FreeIPA 4.9.0 - `commit `__ + `commit `__ - Update list of contributors - `commit `__ + `commit `__ - odsexporterinstance: use late binding for UID/GID resolution - `commit `__ + `commit `__ `#8630 `__ - dnskeysyncinstance: use late binding for UID/GID resolution - `commit `__ + `commit `__ `#8630 `__ - opendnssecinstance: use late binding for UID/GID resolution - `commit `__ + `commit `__ `#8630 `__ - tests_webui: fix wrong user name key for trail space case - `commit `__ + `commit `__ `#8629 `__ - tests_webui: flip leading and trailing space password test - `commit `__ + `commit `__ `#8629 `__ - Update IPA translation template before release - `commit `__ + `commit `__ - Update po/zh_CN translation before release - `commit `__ + `commit `__ - Update po/uk translation before release - `commit `__ + `commit `__ - Update po/tr translation before release - `commit `__ + `commit `__ - Update po/tg translation before release - `commit `__ + `commit `__ - Update po/sk translation before release - `commit `__ + `commit `__ - Update po/ru translation before release - `commit `__ + `commit `__ - Update po/pt translation before release - `commit `__ + `commit `__ - Update po/pt_BR translation before release - `commit `__ + `commit `__ - Update po/pl translation before release - `commit `__ + `commit `__ - Update po/pa translation before release - `commit `__ + `commit `__ - Update po/nl translation before release - `commit `__ + `commit `__ - Update po/mr translation before release - `commit `__ + `commit `__ - Update po/kn translation before release - `commit `__ + `commit `__ - Update po/ja translation before release - `commit `__ + `commit `__ - Update po/id translation before release - `commit `__ + `commit `__ - Update po/hu translation before release - `commit `__ + `commit `__ - Update po/hi translation before release - `commit `__ + `commit `__ - Update po/fr translation before release - `commit `__ + `commit `__ - Update po/eu translation before release - `commit `__ + `commit `__ - Update po/es translation before release - `commit `__ + `commit `__ - Update po/en_GB translation before release - `commit `__ + `commit `__ - Update po/de translation before release - `commit `__ + `commit `__ - Update po/cs translation before release - `commit `__ + `commit `__ - Update po/ca translation before release - `commit `__ + `commit `__ - Update po/bn_IN translation before release - `commit `__ + `commit `__ - upgrade: ensure service state is synchronized with the server state - `commit `__ + `commit `__ `#8623 `__ - upgrade: do not overshadow service module in upgrade_configuration - `commit `__ + `commit `__ - service: handle empty list of services to update their state - `commit `__ + `commit `__ `#8623 `__ - ipa-kdb: use predefined filters for a wild-card searches - `commit `__ + `commit `__ `#8624 `__ - Back to git snapshots - `commit `__ + `commit `__ - Become FreeIPA 4.9.0rc3 - `commit `__ + `commit `__ - systemd: enforce en_US.UTF-8 locale in systemd units - `commit `__ + `commit `__ `#8617 `__ - upgrade: provide DOMAIN to the server upgrade dictionary - `commit `__ + `commit `__ `#8595 `__, `#8615 `__ - Allow mod_auth_gssapi to create and access ccaches in /run/ipa/ccaches - `commit `__ + `commit `__ `#8613 `__ - Correct SELinux policy requirements - `commit `__ + `commit `__ - Back to git snapshots - `commit `__ + `commit `__ - Become FreeIPA 4.9.0rc2 - `commit `__ + `commit `__ - Update contributors - `commit `__ + `commit `__ - freeipa.spec.in: unify spec files across upstream RHEL, and Fedora - `commit `__ + `commit `__ - ad trust: accept subordinate domains of the forest trust root - `commit `__ + `commit `__ `#8554 `__ - util: Fix client-only build - `commit `__ + `commit `__ `#8587 `__ - Become FreeIPA 4.9.0 release candidate 1 - `commit `__ + `commit `__ - Translations: update translations template - `commit `__ + `commit `__ - Add contributors from translations project at Weblate - `commit `__ + `commit `__ - Azure CI: mask chronyd in the container - `commit `__ + `commit `__ - spec: use pkgconf to find out krb5 version - `commit `__ + `commit `__ - Azure CI: use PPA to provide newer libseccomp version - `commit `__ + `commit `__ - Azure CI: use Ubuntu-20.04 image by default - `commit `__ + `commit `__ - ipa-acme-manage: user a cookie created for the communication with dogtag REST endpoints - `commit `__ + `commit `__ `#8584 `__ - ipa-otpd: fix gcc complaints in Rawhide - `commit `__ + `commit `__ `#8585 `__ - ipa-sam: fix gcc complaints on Rawhide - `commit `__ + `commit `__ `#8585 `__ - ipa-kdb: fix gcc complaints in kdb tests - `commit `__ + `commit `__ `#8585 `__ - ipa-kdb: fix gcc complaints - `commit `__ + `commit `__ `#8585 `__ - wgi/plugins.py: ignore empty plugin directories - `commit `__ + `commit `__ `#8567 `__ - ipa-kdb: fix crash in MS-PAC cache init code - `commit `__ + `commit `__ `#8566 `__ - rpcserver: fix exception handling for FAST armor failure - `commit `__ + `commit `__ - rpcserver: fallback to non-armored kinit in case of trusted domains - `commit `__ + `commit `__ - pylint: remove unused variable - `commit `__ + `commit `__ - ipa-kdb: support subordinate/superior UPN suffixes - `commit `__ + `commit `__ `#8554 `__ - Pre-populate IP addresses for the name server upgrades - `commit `__ + `commit `__ `#8518 `__ - Specify memory limits as strings for docker compose - `commit `__ + `commit `__ `#8494 `__ - ipa-kdb: test kadmin.local getprincs command - `commit `__ + `commit `__ `#8490 `__ - ipa-kdb: support getprincs request in kadmin.local - `commit `__ + `commit `__ `#8490 `__ - test_smb: make sure both smbserver and smbclient use IPA master for DNS - `commit `__ + `commit `__ `#8344 `__ - Add new contributors - `commit `__ + `commit `__ - Add alternative email to the mailmap for myself - `commit `__ + `commit `__ - master: update po/ipa.pot - `commit `__ + `commit `__ - extdom-extop: refactor tests to use unshare+chroot to override nss_files configuration - `commit `__ + `commit `__ `#8437 `__ - selinux: support running ipa-custodia with PrivateTmp=yes - `commit `__ + `commit `__ `#8395 `__ - selinux: allow oddjobd to set up ipa_helper_t context for execution - `commit `__ + `commit `__ `#8395 `__ - handle Y2038 in timestamp to datetime conversions - `commit `__ + `commit `__ `#8378 `__ - update list of contributors - `commit `__ + `commit `__ - Update translation files - `commit `__ + `commit `__ - ipatests: test that adding Active Directory user to a role makes it an administrator - `commit `__ + `commit `__ `#8357 `__ - Web UI: allow users from trusted Active Directory forest manage IPA - `commit `__ + `commit `__ `#8335 `__ - tests: account for ID overrides as members of groups and roles - `commit `__ + `commit `__ `#7255 `__ - Support adding user ID overrides as group and role members - `commit `__ + `commit `__ `#7255 `__ - idviews: handle unqualified ID override lookups from Web UI - `commit `__ + `commit `__ `#7255 `__ - support using trust-related operations in the server console - `commit `__ + `commit `__ - Add design page for managing IPA resources as a user from a trusted Active Directory forest - `commit `__ + `commit `__ `#7816 `__, `#8357 `__ - kdb: handle enterprise principal lookup in AS_REQ - `commit `__ + `commit `__ `#8319 `__ - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset - `commit `__ + `commit `__ `#8362 `__ - azure: do not run test_commands due to failures in low memory cases - `commit `__ + `commit `__ - test_smb: test S4U2Self operation by IPA service - `commit `__ + `commit `__ `#8319 `__ - ipa-kdb: refactor principal lookup to support S4U2Self correctly - `commit `__ + `commit `__ `#8319 `__ - ipa-kdb: cache local TGS in the driver context - `commit `__ + `commit `__ `#8319 `__ - ipa-kdb: add primary group to list of groups in MS-PAC - `commit `__ + `commit `__ `#8319 `__ - ipa-kdb: Always allow services to get PAC if needed - `commit `__ + `commit `__ `#8319 `__ - ipa-kdb: add asserted identity SIDs - `commit `__ + `commit `__ `#8319 `__ - kdb: add minimal server referrals support for enterprise principals - `commit `__ + `commit `__ `#8319 `__ - ipa-tests: add a test to make sure MS-PAC is produced by KDC - `commit `__ + `commit `__ `#8319 `__ - ipa-print-pac: acquire and print PAC record for a user - `commit `__ + `commit `__ `#8319 `__ - ipa-kdb: add UPN_DNS_INFO PAC structure - `commit `__ + `commit `__ `#8319 `__ - baseldap: de-duplicate passed attributes when checking for limits - `commit `__ + `commit `__ `#8328 `__ - service delegation: allow to add and remove host principals - `commit `__ + `commit `__ `#8289 `__ - WebUI: use python3-rjsmin to minify JavaScript files - `commit `__ + `commit `__ `#8300 `__ - test_smb: test that we can auth as NetBIOS alias - `commit `__ + `commit `__ `#8291 `__ - kdb: fix memory handling in ipadb_find_principal - `commit `__ + `commit `__ `#8291 `__ - kdb: initialize flags in ipadb_delete_principal() - `commit `__ + `commit `__ `#8291 `__ - Azure Pipelines: switch to Fedora 32 - `commit `__ + `commit `__ - Azure Pipelines: Override services known to not work in containers - `commit `__ + `commit `__ - Add pytest.skip_if_container() - `commit `__ + `commit `__ - CVE-2020-1722: prevent use of too long passwords - `commit `__ + `commit `__ `#8268 `__ - Allow rename of a host group - `commit `__ + `commit `__ `#6783 `__ - Add 'api' and 'aci' targets to make - `commit `__ + `commit `__ - Remove Fedora repository fastmirror selection - `commit `__ + `commit `__ - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - `commit `__ + `commit `__ `#7181 `__ - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - `commit `__ + `commit `__ `#7181 `__ - ipatests: test sysaccount password change with a password policy applied - `commit `__ + `commit `__ `#7181 `__ - ipatests: allow changing sysaccount passwords as cn=Directory Manager - `commit `__ + `commit `__ `#7181 `__ - Fix indentation levels - `commit `__ + `commit `__ - ipatests: always skip additional input for group-add-member --external - `commit `__ + `commit `__ `#8236 `__ - po: update Chinese (China) translation - `commit `__ + `commit `__ - po: update Ukrainian translation - `commit `__ + `commit `__ - po: update Tajik translation timestamp - `commit `__ + `commit `__ - po: update Slovak translation timestamp - `commit `__ + `commit `__ - po: update Russian translation - `commit `__ + `commit `__ - po: update Portuguese (Brazil) translation timestamp - `commit `__ + `commit `__ - po: update Portuguese translation timestamp - `commit `__ + `commit `__ - po: update Polish translation - `commit `__ + `commit `__ - po: update Punjabi translation timestamp - `commit `__ + `commit `__ - po: update Dutch translation timestamp - `commit `__ + `commit `__ - po: update Marathi translation timestamp - `commit `__ + `commit `__ - po: update Kannada translation timestamp - `commit `__ + `commit `__ - po: update Japanese translation timestamp - `commit `__ + `commit `__ - po: update Indonesian translation timestamp - `commit `__ + `commit `__ - po: update Hungarian translation timestamp - `commit `__ + `commit `__ - po: update Hindi translation timestamp - `commit `__ + `commit `__ - po: update French translation - `commit `__ + `commit `__ - po: update Basque translation timestamp - `commit `__ + `commit `__ - po: update Spanish translation - `commit `__ + `commit `__ - po: update English (United Kingdom) translation timestamp - `commit `__ + `commit `__ - po: update German translation - `commit `__ + `commit `__ - po: update Czech translation timestamp - `commit `__ + `commit `__ - po: update Catalan translation timestamp - `commit `__ + `commit `__ - po: update Bengali translation timestamp - `commit `__ + `commit `__ - po: update ipa.pot template - `commit `__ + `commit `__ - Update translation infrastructure - `commit `__ + `commit `__ `#8159 `__ - Keep ipa.pot translation file in git for weblate - `commit `__ + `commit `__ `#8159 `__ - Do not force any particular sphinx theme - `commit `__ + `commit `__ - Override master document for ReadTheDocs - `commit `__ + `commit `__ - Move workshop documents to doc/workshop - `commit `__ + `commit `__ - Add unit 11: Kerberos ticket policy - `commit `__ + `commit `__ - Prevent adding IPA objects as external members of external groups - `commit `__ + `commit `__ `#8236 `__ - Secure AJP connector between Dogtag and Apache proxy - `commit `__ + `commit `__ `#8221 `__ - Tighten permissions on PKI proxy configuration - `commit `__ + `commit `__ `#8221 `__ - Azure Pipelines: re-enable nodejs:12 stream for Fedora 31+ - `commit `__ + `commit `__ - kdb: make sure audit_as_req callback signature change is preserved - `commit `__ + `commit `__ `#8200 `__ - adtrust: print DNS records for external DNS case after role is enabled - `commit `__ + `commit `__ `#8192 `__ - Update Azure Pipelines to use Fedora 31 - `commit `__ + `commit `__ - install/updates: move external members past schema compat update - `commit `__ + `commit `__ `#8193 `__ - Reset per-indicator Kerberos policy - `commit `__ + `commit `__ `#8153 `__ - ipa-client-samba: map domain sid of trust domain properly for display - `commit `__ + `commit `__ `#8149 `__ - DNS install check: allow overlapping zone to be from the master itself - `commit `__ + `commit `__ - covscan: free ucs2-encoded password copy when generating NTLM hash - `commit `__ + `commit `__ `#8131 `__ - covscan: free encryption types in case there is an error - `commit `__ + `commit `__ `#8131 `__ - Add Authentication Indicator Kerberos ticket policy options - `commit `__ + `commit `__ `#8001 `__ - Allow presence of LDAP attribute options - `commit `__ + `commit `__ `#8001 `__ - Do not run trust upgrade code if master lacks Samba bindings - `commit `__ + `commit `__ `#8001 `__ - Update contributors - `commit `__ + `commit `__ - Update translations - `commit `__ + `commit `__ - Add local helpers to handle unixid structure - `commit `__ + `commit `__ - adtrust: add default read_keys permission for TDO objects - `commit `__ + `commit `__ `#8067 `__ - add default access control when migrating trust objects - `commit `__ + `commit `__ `#8067 `__ - adtrust: avoid using timestamp in klist output - `commit `__ + `commit `__ `#8066 `__ - Mark failing test as xfail for use of python-dns make_ds method - `commit `__ + `commit `__ - ipa-extdom-extop: test timed out getgrgid_r - `commit `__ + `commit `__ `#8044 `__ - Update contributors - `commit `__ + `commit `__ - Update translations - `commit `__ + `commit `__ - Add Theodor van Nahl to the Contributors.txt - `commit `__ + `commit `__ - Restore SELinux context for p11-kit config overrides - `commit `__ + `commit `__ `#7810 `__ - Change RA agent certificate profile to caSubsystemCert - `commit `__ + `commit `__ - certmaprule: add negative test for altSecurityIdentities - `commit `__ + `commit `__ `#7932 `__ - certmap rules: altSecurityIdentities should only be used for trusted domains - `commit `__ + `commit `__ `#7932 `__ - Create indexes for altSecurityIdentities and ipaCertmapData attributes - `commit `__ + `commit `__ `#7932 `__, `#7933 `__ - Add altSecurityIdentities attribute from MS-WSPP schema definition - `commit `__ + `commit `__ `#7932 `__, `#7933 `__ - Use stage and phase attempt counters when saving test artifacts - `commit `__ + `commit `__ - Use any nodejs version instead of forcing a version before nodejs 11 - `commit `__ + `commit `__ - Fix rpmlint errors for Rawhide - `commit `__ + `commit `__ - Set git master to 4.9.0 - `commit `__ + `commit `__ - Changing IPA master back to git snapshots - `commit `__ + `commit `__ @@ -2096,7 +2096,7 @@ Abhijeet (1) ---------------------------------------------------------------------------------------------- - Update workshop.rst - `commit `__ + `commit `__ @@ -2104,10 +2104,10 @@ Alexandre Mulatinho (2) ---------------------------------------------------------------------------------------------- - ipa-join: allowing call with jsonrpc into freeipa API - `commit `__ + `commit `__ `#7966 `__ - ipa-scripts: fix all ipa command line scripts to operate with -I - `commit `__ + `commit `__ `#7987 `__ @@ -2117,46 +2117,46 @@ Anuja More (18) - ipatests: cleanup in test_subdomain_lookup_with_certmaprule_containing_dn - `commit `__ + `commit `__ - ipatests: xfail test with older versions of sssd - `commit `__ + `commit `__ - ipatests : Test to verify override_gid works with subdomain. - `commit `__ + `commit `__ - ipatests: xfail test with older versions of sssd - `commit `__ + `commit `__ - ipatests: Test that trusted AD users should not lose their AD domains. - `commit `__ + `commit `__ - Mark test to skip sssd-2.2.2 - `commit `__ + `commit `__ - ipatests: User and group with same name should not break reading AD user data. - `commit `__ + `commit `__ - ipatests: Added test when 2FA prompting configurations is set. - `commit `__ + `commit `__ - ipatests: SSSD should fetch external groups without any limit. - `commit `__ + `commit `__ - Update topology for test_integration/test_sssd.py - `commit `__ + `commit `__ - ipatests: Add test for ipa-extdom-extop plugin should allow @ in group name - `commit `__ + `commit `__ - After mounting "Unspecified GSS failure" should not be in logs. - `commit `__ + `commit `__ - Add xmlrpc test with input validation check for kerberos ticket policy. - `commit `__ + `commit `__ - Fix fedora version for xfail for sssd test - `commit `__ + `commit `__ - Add integration test for otp kerberos ticket policy. - `commit `__ + `commit `__ `#8001 `__ - ipatests: filter_users should be applied correctly. - `commit `__ + `commit `__ - ipatests : Login via ssh using private-key for ipa-user should work. - `commit `__ + `commit `__ - Extdom plugin should not return error (32)/'No such object' - `commit `__ + `commit `__ `#8044 `__ @@ -2165,7 +2165,7 @@ Andika Triwidada (1) ---------------------------------------------------------------------------------------------- - Translated using Weblate (Indonesian) - `commit `__ + `commit `__ @@ -2173,7 +2173,7 @@ Ariel O. Barria (1) ---------------------------------------------------------------------------------------------- - vagrant user does not have permission to write to /etc/resolv.conf - `commit `__ + `commit `__ @@ -2181,15 +2181,15 @@ Alexander Scheel (4) ---------------------------------------------------------------------------------------------- - Fix spelling mistake: filen ame -> filename - `commit `__ + `commit `__ - Specify cert_paths when calling PKIConnection - `commit `__ + `commit `__ `#8379 `__ - Configure PKI AJP Secret with 256-bit secret - `commit `__ + `commit `__ `#8372 `__ - Clarify AJP connector creation process - `commit `__ + `commit `__ @@ -2197,7 +2197,7 @@ Antonio Torres Moríñigo (1) ---------------------------------------------------------------------------------------------- - ipa-client-install manpage: add ipa.p11-kit to list of files created - `commit `__ + `commit `__ `#8424 `__ @@ -2206,103 +2206,103 @@ Peter Keresztes Schmidt (33) ---------------------------------------------------------------------------------------------- - WebUI: Unify adapter property definition for state evaluators - `commit `__ + `commit `__ `#8336 `__ - WebUI: Make object_class_evaluator evaluator compatible with batch responses - `commit `__ + `commit `__ `#8336 `__ - ipa-backup/restore: remove remaining chdir calls - `commit `__ + `commit `__ `#7416 `__ - ipa-join: handle JSON-RPC error codes - `commit `__ + `commit `__ `#8408 `__ - ipa-join: extract common JSON-RPC response parsing to common function - `commit `__ + `commit `__ `#8408 `__ - ipa-join: Generalize XML-RPC references in man page - `commit `__ + `commit `__ `#7966 `__ - ipa-join: Use bool type where appropriate - `commit `__ + `commit `__ `#7966 `__ - ipa-join: select {JSON,XML}-RPC at build time - `commit `__ + `commit `__ `#7966 `__ - ipa-join: implement JSON-RPC based unenrollment - `commit `__ + `commit `__ `#7966 `__ - ipa-join: extract unenrollment code common to JSON and XML-RPC to separate function - `commit `__ + `commit `__ `#7966 `__ - ipa-join: switch to jansson for json handling - `commit `__ + `commit `__ `#7966 `__ - ipa-join: buffer curl response before parsing json - `commit `__ + `commit `__ `#7966 `__ - ipa-join: improve curl error handling in JSON-RPC code - `commit `__ + `commit `__ `#7966 `__ - ipa-join: don't set TLS related curl options for JSON-RPC - `commit `__ + `commit `__ `#7966 `__ - Populate nshardwareplatform and nsosversion during join operation - `commit `__ + `commit `__ `#8370 `__ - WebUI: Fix rendering of boolean_status_formatter - `commit `__ + `commit `__ `#8396 `__ - Unify spelling of "One-Time Password" - `commit `__ + `commit `__ - WebUI: reword OTP info message displayed during PW reset - `commit `__ + `commit `__ `#5628 `__ - WebUI: move OTP to be the last field in the PW reset form - `commit `__ + `commit `__ `#5628 `__ - Split named custom config to allow changes in options stanza - `commit `__ + `commit `__ `#8287 `__ - lite-server: Fix werkzeug deprecation warnings - `commit `__ + `commit `__ `#8360 `__ - util: replace NSS usage with OpenSSL - `commit `__ + `commit `__ `#6857 `__ - util: add unit test for pw hashing - `commit `__ + `commit `__ `#6857 `__ - po: remove zanata config since translation was moved to weblate - `commit `__ + `commit `__ `#8159 `__ - Remove unused support for dm_password arg from ldapupdate.connect - `commit `__ + `commit `__ `#7610 `__ - Use ipaldap exceptions rather than ldap error codes in LDAP updater - `commit `__ + `commit `__ `#7610 `__ - Specify min and max values for TTL of a DNS record - `commit `__ + `commit `__ `#8358 `__ - WebUI: Add units to some DNS zone and IPA config fields - `commit `__ + `commit `__ - WebUI: Expose TTL of DNS records - `commit `__ + `commit `__ `#3827 `__ - WebUI: Refresh DNS record data correctly after mod operation - `commit `__ + `commit `__ `#8359 `__ - WebUI: Use data adapter to load facet header data - `commit `__ + `commit `__ `#8339 `__ - WebUI: Fix invalid RPC calls when link widget has no pkey passed - `commit `__ + `commit `__ `#8338 `__ - Remove remains of unused config options - `commit `__ + `commit `__ `#6708 `__ @@ -2311,7 +2311,7 @@ Carl George (1) ---------------------------------------------------------------------------------------------- - Use uglifyjs on CentOS too - `commit `__ + `commit `__ @@ -2319,490 +2319,490 @@ Christian Heimes (182) ---------------------------------------------------------------------------------------------- - Change mkdir logic in DNSSEC - `commit `__ + `commit `__ - Easier to use ipa_gethostfqdn() - `commit `__ + `commit `__ - Update debug strings to reflect new calls - `commit `__ + `commit `__ - Remove problematic optimization from gethostfqdn() - `commit `__ + `commit `__ - Replace nodename with ipa_gethostfqdn() - `commit `__ + `commit `__ `#8501 `__ - Unify access to FQDN - `commit `__ + `commit `__ `#8501 `__ - Reuse main LDAP connection - `commit `__ + `commit `__ `#8521 `__ - Speed up cainstance.migrate_profiles_to_ldap - `commit `__ + `commit `__ `#8521 `__, `#8522 `__ - Lookup ipa-ca record with NSS - `commit `__ + `commit `__ `#8501 `__, `#8521 `__, `#8529 `__ - Simplify update code - `commit `__ + `commit `__ `#8275 `__ - Don't add 127.0.0.1 to resolv.conf twice - `commit `__ + `commit `__ `#8275 `__ - Require(post) systemd with resolved enabled on F33 - `commit `__ + `commit `__ `#8275 `__ - Replace sudo with runuser - `commit `__ + `commit `__ `#8530 `__ - Use separate install logs for AD and DNS instance - `commit `__ + `commit `__ `#8528 `__ - Spawn PKI: Execute more steps early - `commit `__ + `commit `__ `#8521 `__ - Dogtag: Remove set_audit_renewal step - `commit `__ + `commit `__ `#8521 `__ - Skip offline dse.ldif patching by default - `commit `__ + `commit `__ `#8521 `__ - Remove magic sleep from create_index_task - `commit `__ + `commit `__ `#8521 `__ - Remove root-autobind configuration - `commit `__ + `commit `__ `#8521 `__ - Verify freeipa-selinux's ipa module is loaded - `commit `__ + `commit `__ - Check ca_wrapped in ipa-custodia-check - `commit `__ + `commit `__ `#8488 `__ - Retry chronyc waitsync only once - `commit `__ + `commit `__ `#8521 `__ - configure_dns_resolver: call self.restore_context - `commit `__ + `commit `__ `#8518 `__ - Drop unused extended sleep feature from Sleeper - `commit `__ + `commit `__ `#8521 `__ - Faster certmonger wait_for_request() - `commit `__ + `commit `__ `#8521 `__ - Add helper for poll/sleep loops with timeout - `commit `__ + `commit `__ `#8521 `__ - Add missing fedora_container platform members - `commit `__ + `commit `__ `#8519 `__ - Add more indices - `commit `__ + `commit `__ - Use single update LDIF for indices - `commit `__ + `commit `__ `#8493 `__ - Also backup DNS config drop-ins - `commit `__ + `commit `__ `#8275 `__ - Ensure that resolved.conf.d is accessible - `commit `__ + `commit `__ `#8275 `__ - Fix compiler warning in ipa-kdb - `commit `__ + `commit `__ - Fix compiler warnings in libotp - `commit `__ + `commit `__ - Fix compiler warning in ipa-pwd-extop - `commit `__ + `commit `__ - trust-add: Catch correct exception when chown SSSD - `commit `__ + `commit `__ `#8516 `__ - Fix nsslapd-db-lock tuning of BDB backend - `commit `__ + `commit `__ `#5914 `__, `#8515 `__ - Create systemd-resolved configuration on update - `commit `__ + `commit `__ - Configure systemd-resolved to use IPA's BIND - `commit `__ + `commit `__ `#8275 `__ - Use new API for auto-forwarders - `commit `__ + `commit `__ `#8275 `__ - Configure NetworkManager to use systemd-resolved - `commit `__ + `commit `__ `#8275 `__ - Add helpers for resolve1 and nameservers - `commit `__ + `commit `__ `#8275 `__ - Make git a build requirement - `commit `__ + `commit `__ - Delay import of psutil to avoid AVC - `commit `__ + `commit `__ `#8512 `__ - Add User and Group to all ipaplatform.constants - `commit `__ + `commit `__ - Use new classes for run_command and Service - `commit `__ + `commit `__ - Add user and group wrappers - `commit `__ + `commit `__ - Simplify LDAPUpdater - `commit `__ + `commit `__ - Add ldap_update() helper to service class - `commit `__ + `commit `__ - Don't create DS SSCA and self-signed cert - `commit `__ + `commit `__ `#8502 `__ - Duplicate CA CRT: ignore expected cert - `commit `__ + `commit `__ `#7125 `__ - Add krbPrincipalName pres index correctly - `commit `__ + `commit `__ `#8491 `__ - Only restart DS when duplicate cacrt was found - `commit `__ + `commit `__ `#7125 `__ - Treat container subplatforms like main platform - `commit `__ + `commit `__ `#8401 `__ - Don't configure authselect in containers - `commit `__ + `commit `__ `#8401 `__ - Convert ipa-httpd-pwdreader into Python script - `commit `__ + `commit `__ `#8401 `__ - Explicitly pass keytab to ipa-join - `commit `__ + `commit `__ - Write state dir to smb.conf - `commit `__ + `commit `__ `#8401 `__ - Add ipaplatform for Fedora and RHEL container - `commit `__ + `commit `__ `#8401 `__ - Allow to override ipaplatform with env var - `commit `__ + `commit `__ `#8401 `__ - Teach pylint how dnspython 2.x works - `commit `__ + `commit `__ `#8419 `__ - Add missing SELinux rule for ipa-custodia.sock - `commit `__ + `commit `__ `#8412 `__ - Make tab completion in console more useful - `commit `__ + `commit `__ - Add \__signature_\_ to plugins - `commit `__ + `commit `__ `#8388 `__ - Run test_fips in DS and PKI nightly - `commit `__ + `commit `__ - SELinux: Backport dirsrv_systemctl interface - `commit `__ + `commit `__ - RHEL 8.3 has KRB5 1.18 with KDB 8.0 - `commit `__ + `commit `__ - Terminology improvements: use block list - `commit `__ + `commit `__ - Terminology improvements: use allow list - `commit `__ + `commit `__ - Grammar: whitespace is a word - `commit `__ + `commit `__ - Terminology improvements: CA renewal - `commit `__ + `commit `__ - Use old uglifyjs on RHEL 8 - `commit `__ + `commit `__ `#8300 `__ - Build ipa-selinux package on RHEL 8 - `commit `__ + `commit `__ - Prevent local account takeover - `commit `__ + `commit `__ `#8326 `__ - Move ipa-epn systemd files and run RPM hooks - `commit `__ + `commit `__ `#8367 `__ - Auto-generated ipa-epn files to gitignore - `commit `__ + `commit `__ - Overhaul bind upgrade process - `commit `__ + `commit `__ - More upgrade tests - `commit `__ + `commit `__ - Fix named.conf named_conf_include_re - `commit `__ + `commit `__ - Remove named_validate_dnssec update step - `commit `__ + `commit `__ - Fix named.conf update bug NAMED_DNSSEC_VALIDATION - `commit `__ + `commit `__ `#8363 `__ - libotp: Replace NSS with OpenSSL HMAC - `commit `__ + `commit `__ `#6857 `__ - Include named config files in backup - `commit `__ + `commit `__ - Handle DatabaseError in RPC-Server connect() - `commit `__ + `commit `__ `#8352 `__ - Allow permissions with 'self' bindruletype - `commit `__ + `commit `__ `#8348 `__ - make: serialize strip-po / strip-pot - `commit `__ + `commit `__ `#8323 `__ - Remove obsolete BIND named.conf options - `commit `__ + `commit `__ `#8349 `__, `#8350 `__ - Add ipa-print-pac to gitignore - `commit `__ + `commit `__ - Allow dnsrecord-add --force on clients - `commit `__ + `commit `__ `#8317 `__ - Explain the effect of OPT_X_TLS_PROTOCOL_MIN - `commit `__ + `commit `__ - Check for freeipa-server-dns package early - `commit `__ + `commit `__ `#7577 `__ - Hard-code in_tree=True for tests - `commit `__ + `commit `__ `#8317 `__ - Fix detection logic for api.env.in_tree - `commit `__ + `commit `__ `#8312 `__ - Make api.env.mode consistent - `commit `__ + `commit `__ `#8313 `__ - Disable password schema update on LDAP bind - `commit `__ + `commit `__ `#8315 `__ - Use httpd 2.4 syntax for access control - `commit `__ + `commit `__ - Let GH auto-notify and auto-close stale PRs - `commit `__ + `commit `__ - Fix make devcheck - `commit `__ + `commit `__ `#8307 `__ - Simplify pki proxy conf - `commit `__ + `commit `__ - Make check_required_principal() case-insensitive - `commit `__ + `commit `__ `#8308 `__ - Make ipaplatform a regular top-level package - `commit `__ + `commit `__ `#6474 `__, `#8309 `__ - Reconfigure pycodestyle - `commit `__ + `commit `__ `#8306 `__ - Manually reformat ipapython/version.py.in - `commit `__ + `commit `__ `#8306 `__ - Silence W601 .has_key() is deprecated - `commit `__ + `commit `__ `#8306 `__ - Fix E722 do not use bare 'except' - `commit `__ + `commit `__ `#8306 `__ - Fix E721 do not compare types, use 'isinstance()' - `commit `__ + `commit `__ `#8306 `__ - Fix E714 test for object identity should be 'is not' - `commit `__ + `commit `__ `#8306 `__ - Fix E713 test for membership should be 'not in' - `commit `__ + `commit `__ `#8306 `__ - Fix E712 comparison to True / False - `commit `__ + `commit `__ `#8306 `__ - Fix E711 comparison to None - `commit `__ + `commit `__ `#8306 `__ - Fix E266 too many leading '#' for block comment - `commit `__ + `commit `__ `#8306 `__ - Address issues found by new pylint 2.5.0 - `commit `__ + `commit `__ `#8297 `__ - Require Sphinx >2.1 - `commit `__ + `commit `__ - Fix /doc/workshop subtree merge - `commit `__ + `commit `__ - Create ipasphinx package for Sphinx plugins - `commit `__ + `commit `__ - Add skip_if_platform marker - `commit `__ + `commit `__ - Define default password policy for sysaccounts - `commit `__ + `commit `__ `#8276 `__ - Use api.env.container_sysaccounts - `commit `__ + `commit `__ `#8276 `__ - Fix exception escape warning - `commit `__ + `commit `__ - Fix APIVersion.__getnewargs_\_ - `commit `__ + `commit `__ - servrole: takes_params must be a tuple - `commit `__ + `commit `__ `#8290 `__ - Improve Sphinx building and linting - `commit `__ + `commit `__ - Fix various OpenDNSSEC 2.1 issues - `commit `__ + `commit `__ `#8283 `__ - Use /run and /run/lock instead of /var - `commit `__ + `commit `__ `#8272 `__ - po: fix LINGUAS to use whitespace separation - `commit `__ + `commit `__ `#8159 `__ - SELinux: apache_manage_pid_files for F30 - `commit `__ + `commit `__ `#8241 `__ - Add pytest OpenSSH transport with password - `commit `__ + `commit `__ - Add explicit syntax language to code blocks - `commit `__ + `commit `__ - Use m2r instead of recommonmark - `commit `__ + `commit `__ - Include workshop in sphinx build - `commit `__ + `commit `__ - Fix codestyle - `commit `__ + `commit `__ - Test documentation builds in Azure - `commit `__ + `commit `__ - Include design documentation - `commit `__ + `commit `__ - Introduce FreeIPA - `commit `__ + `commit `__ - Bootstrap Sphinx documentation - `commit `__ + `commit `__ - Move freeipa-selinux dependency to freeipa-common - `commit `__ + `commit `__ `#6891 `__ - Integrate ipa_custodia policy - `commit `__ + `commit `__ `#6891 `__ - Allow hosts to read DNS records for IP SAN - `commit `__ + `commit `__ `#8098 `__ - Cleanup SELinux policy - `commit `__ + `commit `__ `#6891 `__ - Integrate SELinux policy into build system - `commit `__ + `commit `__ - dnsrecord: Treat empty list arguments correctly - `commit `__ + `commit `__ `#8196 `__ - Remove dependency on custodia package - `commit `__ + `commit `__ - lite-setup: configure lite-server test env - `commit `__ + `commit `__ - Add tracemalloc support to profile memory usage - `commit `__ + `commit `__ - Make assert_error compatible with Python 3.6 - `commit `__ + `commit `__ `#8179 `__ - Print LDAP diagnostic messages on error - `commit `__ + `commit `__ - Fix get_trusted_domain_object_from_sid() - `commit `__ + `commit `__ `#7958 `__ - Check valid before/after of external certs - `commit `__ + `commit `__ `#8142 `__ - Fix service ldap_disable() - `commit `__ + `commit `__ `#8143 `__ - Require idstart to be larger than UID_MAX - `commit `__ + `commit `__ `#8137 `__ - Fix lite-server to work with GSS_NAME - `commit `__ + `commit `__ - Fix logic of check_client_configuration - `commit `__ + `commit `__ `#8133 `__ - Optimize user-add by caching ldap2.has_upg() - `commit `__ + `commit `__ `#8134 `__ - Don't run test_smb in gating tests - `commit `__ + `commit `__ - Don't hard-code client's TLS versions and ciphers - `commit `__ + `commit `__ `#8125 `__ - Update Apache HTTPd for RHBZ#1775146 - `commit `__ + `commit `__ `#8125 `__ - Enable TLS 1.3 support on the server - `commit `__ + `commit `__ `#8125 `__ - Skip paramiko tests in FIPS mode - `commit `__ + `commit `__ `#8129 `__ - FIPS: server key has different name in FIPS mode - `commit `__ + `commit `__ - Remove FIPS noise from SSHd - `commit `__ + `commit `__ - Fix otptoken_sync plugin - `commit `__ + `commit `__ `#7804 `__ - Add test case for OTP login - `commit `__ + `commit `__ `#7804 `__ - Show group-add/remove-member-manager failures - `commit `__ + `commit `__ `#8122 `__ - Test installation with (fake) userspace FIPS - `commit `__ + `commit `__ `#8118 `__ - Use default ssh host key algorithms - `commit `__ + `commit `__ `#8082 `__ - Add tests for member management - `commit `__ + `commit `__ - Add group membership management - `commit `__ + `commit `__ `#8114 `__ - Skip commented lines after substitution - `commit `__ + `commit `__ `#8111 `__ - Block camellia in krbenctypes update in FIPS - `commit `__ + `commit `__ `#8111 `__ - Don't install a preexec_fn by default - `commit `__ + `commit `__ - Don't create log files from help scripts - `commit `__ + `commit `__ `#8075 `__ - Add new env vars to pylint plugin - `commit `__ + `commit `__ `#3999 `__ - Fix wrong use of identity operation - `commit `__ + `commit `__ `#8057 `__ - Enable literal-comparison linter again - `commit `__ + `commit `__ `#8057 `__ - Replace %{_libdir} macro in BuildRequires - `commit `__ + `commit `__ `#8056 `__ - Fix ca_initialize_hsm_state - `commit `__ + `commit `__ `#5608 `__ - Store HSM token and state - `commit `__ + `commit `__ `#5608 `__ - Allow insecure binds for migration - `commit `__ + `commit `__ `#8040 `__ - Don't move keys when key backup is disabled - `commit `__ + `commit `__ `#7677 `__ - Update comments to explain caSubsystemCert switch - `commit `__ + `commit `__ - Test external CA with DNS name constraints - `commit `__ + `commit `__ - Add PKCS#11 module name to p11helper errors - `commit `__ + `commit `__ `#8015 `__ - Use nis-domainname.service on all RH platforms - `commit `__ + `commit `__ `#8004 `__ @@ -2811,12 +2811,12 @@ Cédric Jeanneret (3) ---------------------------------------------------------------------------------------------- - Update selinux-policy minimal requirement - `commit `__ + `commit `__ - Prevents DNS Amplification Attack and allow to customize named - `commit `__ + `commit `__ `#8079 `__ - Add new tip for dependencies - `commit `__ + `commit `__ @@ -2824,19 +2824,19 @@ Changmin Teng (5) ---------------------------------------------------------------------------------------------- - Add design document - `commit `__ + `commit `__ `#8001 `__ - Modify webUI to adhere to new IPA server API - `commit `__ + `commit `__ `#8001 `__ - Implement user pre-authentication control with kdcpolicy plugin - `commit `__ + `commit `__ `#8001 `__ - Extend the list of supported pre-auth mechanisms in IPA server API - `commit `__ + `commit `__ `#8001 `__ - Add new authentication indicators in kdc.conf.template - `commit `__ + `commit `__ `#8001 `__ @@ -2845,7 +2845,7 @@ Daniel Lara Souza (1) ---------------------------------------------------------------------------------------------- - Translated using Weblate (Portuguese (Brazil)) - `commit `__ + `commit `__ @@ -2853,7 +2853,7 @@ Dinesh Prasanth M K (1) ---------------------------------------------------------------------------------------------- - Adding auto COPR builds - `commit `__ + `commit `__ @@ -2861,7 +2861,7 @@ Endi Sukma Dewata (1) ---------------------------------------------------------------------------------------------- - Removed hard-coded default profile subsystem class name - `commit `__ + `commit `__ @@ -2869,7 +2869,7 @@ Emilio Herrera (1) ---------------------------------------------------------------------------------------------- - Translated using Weblate (Spanish) - `commit `__ + `commit `__ @@ -2877,282 +2877,282 @@ François Cami (97) ---------------------------------------------------------------------------------------------- - set SELinux back to Permissive in gating.xml - `commit `__ + `commit `__ - set SELinux to Enforcing in gating.xml - `commit `__ + `commit `__ - ipa-client-install: unilaterally set dns_lookup_kdc to True - `commit `__ + `commit `__ `#6523 `__ - ipatests: make sure dns_lookup_kdc is always true - `commit `__ + `commit `__ `#6523 `__ - ipatests: run freeipa-healthcheck on hidden replica - `commit `__ + `commit `__ `#8536 `__ - ipatests: tasks: add user_del - `commit `__ + `commit `__ `#8536 `__ - ipatests: kinit_as_user improvements - `commit `__ + `commit `__ `#8510 `__ - ipatests: create_active_user improvements - `commit `__ + `commit `__ `#8510 `__ - ipatests: add get_kdcinfo - `commit `__ + `commit `__ `#8510 `__ - ipatests: add check_if_sssd_is_online - `commit `__ + `commit `__ `#8510 `__ - SELinux: do not double-define node_t and pki_tomcat_cert_t - `commit `__ + `commit `__ `#8513 `__ - SELinux Policy: Allow tomcat_t to read kerberos keytabs - `commit `__ + `commit `__ `#8488 `__ - SELinux Policy: make interfaces for kernel modules non-optional - `commit `__ + `commit `__ `#8488 `__ - SELinux Policy: flag ipa_pki_retrieve_key_exec_t as domain_type - `commit `__ + `commit `__ `#8488 `__ - SELinux Policy: ipa_custodia_pki_tomcat_exec_t => ipa_custodia_pki_tomcat_t - `commit `__ + `commit `__ `#8488 `__ - SELinux Policy: ipa_pki_retrieve_key_exec_t => ipa_pki_retrieve_key_t - `commit `__ + `commit `__ `#8488 `__ - SELinux Policy: let custodia_t map custodia_tmp_t - `commit `__ + `commit `__ `#8488 `__ - SELinux: Add dedicated policy for ipa-pki-retrieve-key - `commit `__ + `commit `__ `#8488 `__ - ipatests: enhance TestSubCAkeyReplication - `commit `__ + `commit `__ `#8488 `__ - dogtaginstance.py: add --debug to pkispawn - `commit `__ + `commit `__ `#8503 `__ - ipatests: check that pkispawn log is not empty - `commit `__ + `commit `__ `#8503 `__ - SELinux Policy: let custodia replicate keys - `commit `__ + `commit `__ `#8488 `__ - ipatests: test_epn: update error messages - `commit `__ + `commit `__ `#8449 `__ - IPA-EPN: enhance input validation - `commit `__ + `commit `__ `#8444 `__ - IPA-EPN: Fix SMTP connection error handling - `commit `__ + `commit `__ `#8445 `__ - ipatests: test_epn: add test_EPN_connection_refused - `commit `__ + `commit `__ `#8445 `__ - IPA-EPN: fix configuration file typo - `commit `__ + `commit `__ - IPA-EPN: Use a helper to retrieve LDAP attributes from an entry - `commit `__ + `commit `__ - ipatests: test_epn: test_EPN_nbdays enhancements - `commit `__ + `commit `__ `#8449 `__ - ipatests: tasks.py: fix ipa-epn invocation - `commit `__ + `commit `__ `#8449 `__ - ipatests: test_otp: convert test_2fa_enable_single_prompt to run_ssh_cmd - `commit `__ + `commit `__ `#8129 `__ - ipatests: ui_driver: convert run_cmd_on_ui_host to tasks.py::run_ssh_cmd - `commit `__ + `commit `__ `#8129 `__ - ipatests: test_commands: test_login_wrong_password: Paramiko=>OpenSSH - `commit `__ + `commit `__ `#8129 `__ - ipatests: test_commands: test_ssh_from_controller: Paramiko=>OpenSSH - `commit `__ + `commit `__ `#8129 `__ - ipatests: test_commands: test_ssh_from_controller: refactor - `commit `__ + `commit `__ `#8129 `__ - ipatests: test_user_permissions: test_selinux_user_optimized Paramiko=>OpenSSH - `commit `__ + `commit `__ `#8129 `__ - ipatests: test_commands: test_ssh_key_connection: Paramiko=>OpenSSH - `commit `__ + `commit `__ `#8129 `__ - tasks: add run_ssh_cmd - `commit `__ + `commit `__ `#8129 `__ - ipatests: test_sss_ssh_authorizedkeys - `commit `__ + `commit `__ `#8151 `__ - ipatests: re-enable test_sss_ssh_authorizedkeys - `commit `__ + `commit `__ `#8151 `__ - ipatests: test_commands: test_login_wrong_password: look farther in time - `commit `__ + `commit `__ `#8432 `__ - ipatests: xfail TestIpaClientAutomountFileRestore's final test - `commit `__ + `commit `__ `#8189 `__ - ipatests: remove dnf workaround from test_epn.py - `commit `__ + `commit `__ `#8391 `__ - ipatests: display SSSD kdcinfo in test_adtrust_install.py - `commit `__ + `commit `__ - ipatests: ipa_epn: uninstall/reinstall ipa-client-epn - `commit `__ + `commit `__ `#8374 `__ - ipatests: check that EPN's configuration file is installed. - `commit `__ + `commit `__ `#8374 `__ - man pages: fix epn.conf.5 and ipa-epn.1 formatting - `commit `__ + `commit `__ - EPN: ship the configuration file. - `commit `__ + `commit `__ `#8374 `__ - ipatests: increase test_caless_TestReplicaInstall timeout - `commit `__ + `commit `__ `#8377 `__ - .mailmap: add fcami - `commit `__ + `commit `__ - IPA-EPN: Test suite. - `commit `__ + `commit `__ `#3687 `__ - IPA-EPN: First version. - `commit `__ + `commit `__ `#3687 `__ - ipatests: add KRB5_TRACE to kinit in test_adtrust_install.py - `commit `__ + `commit `__ - tasks.py: add krb5_trace to create_active_user and kinit_as_user - `commit `__ + `commit `__ - tox.ini: switch from W503 to W504 - `commit `__ + `commit `__ - IPA-EPN: Add design draft - `commit `__ + `commit `__ `#3687 `__ - doc/Makefile: use sphinx-build -W by default - `commit `__ + `commit `__ - Makefile.am: add doclint to fastcheck - `commit `__ + `commit `__ - ipatests: increase test_webui_server timeout - `commit `__ + `commit `__ `#8266 `__ - ipatests: increase test_ipahealthcheck timeout - `commit `__ + `commit `__ `#8262 `__ - ipatests: move ipa_backup to tasks - `commit `__ + `commit `__ `#8217 `__ - pr-ci templates: update test_fips timeouts - `commit `__ + `commit `__ `#8247 `__ - ipa-backup: Make sure all roles are installed on the current master. - `commit `__ + `commit `__ `#8217 `__ - test_backup_and_restore: add server role verification steps - `commit `__ + `commit `__ `#8217 `__ - ipatests: test ipa-backup with different role configurations. - `commit `__ + `commit `__ `#8217 `__ - pr-ci templates: update test_fips timeouts - `commit `__ + `commit `__ `#8247 `__ - ipatests: test_replica_promotion.py: test KRA on Hidden Replica - `commit `__ + `commit `__ `#8240 `__ - 8-sudorule.rst: add sudo and su-l as services for bob's HBAC rule. - `commit `__ + `commit `__ - ipa-restore: restart services at the end - `commit `__ + `commit `__ `#8226 `__ - ipatests: make sure ipa-client-automount reverts sssd.conf - `commit `__ + `commit `__ `#8190 `__ - ipa-client-automount: call save_domain() for each change - `commit `__ + `commit `__ `#8190 `__ - ipatests: expect "Dynamic Update" and "Bind update policy" in default dnszone\* output - `commit `__ + `commit `__ `#7938 `__ - ipaserver/plugins/dns.py: add "Dynamic Update" and "Bind update policy" to default dnszone\* output - `commit `__ + `commit `__ `#7938 `__ - ipatests/test_nfs.py: wait before umount - `commit `__ + `commit `__ `#8144 `__ - ipatests: fix pr-ci templates' indentation - `commit `__ + `commit `__ - adtrust.py: mention restarting sssd when adding trust agents - `commit `__ + `commit `__ `#8148 `__ - DSU: add Design for Disable Stale Users - `commit `__ + `commit `__ `#8104 `__ - ipatests: nightly_f29: disable TestIpaClientAutomountFileRestore - `commit `__ + `commit `__ `#8063 `__ - ipatests: temporarily remove test_smb from gating - `commit `__ + `commit `__ - ipa_client_automount.py: fix typo (idmap.conf => idmapd.conf) - `commit `__ + `commit `__ - ipapython/ipachangeconf.py: change "is not 0" for "!= 0" - `commit `__ + `commit `__ `#8057 `__ - authconfig.py: restore user-nsswitch.conf at uninstall time - `commit `__ + `commit `__ `#8054 `__ - ipatests: remove xfail in TestIpaClientAutomountFileRestore - `commit `__ + `commit `__ - ipa-client-automount: always restore nsswitch.conf at uninstall time - `commit `__ + `commit `__ `#8038 `__ - ipatests: check that ipa-client-automount restores nsswitch.conf at uninstall time - `commit `__ + `commit `__ - travis-ci: make dnf invocations more resilient - `commit `__ + `commit `__ `#8048 `__ - azure-pipelines.yml: switch to Python 3.7 - `commit `__ + `commit `__ `#8030 `__ - test_nfs.py: switch to master_3repl - `commit `__ + `commit `__ `#8027 `__ - ipatests: rename config_replica_resolvconf_with_master_data() - `commit `__ + `commit `__ - test_nfs.py: switch to tasks.config_replica_resolvconf_with_master_data() - `commit `__ + `commit `__ `#7949 `__ - prci_definitions: add master_3client topology - `commit `__ + `commit `__ `#8026 `__ - ipapython/admintool.py: use SERVER_NOT_CONFIGURED - `commit `__ + `commit `__ - ipa-client-samba: remove state on uninstall - `commit `__ + `commit `__ `#8021 `__ - ipatests: test ipa-client-samba after --uninstall - `commit `__ + `commit `__ - ipa-client-samba: remove and restore smb.conf only on first uninstall - `commit `__ + `commit `__ `#8019 `__ - ipatests: test multiple invocations of ipa-client-samba --uninstall - `commit `__ + `commit `__ - ipatests/azure: display actual dnf repo URLs - `commit `__ + `commit `__ @@ -3160,282 +3160,282 @@ Florence Blanc-Renaud (94) ---------------------------------------------------------------------------------------------- - ipatests: add test for PKI subsystem detection - `commit `__ + `commit `__ `#8596 `__ - Improve PKI subsystem detection - `commit `__ + `commit `__ `#8596 `__ - xmlrpctests: remove harcoded expiration date from test_user_plugin - `commit `__ + `commit `__ `#8616 `__ - ipatests: fix TestTrust::test_subordinate_suffix - `commit `__ + `commit `__ `#8601 `__ - Always define the path DNSSEC_OPENSSL_CONF - `commit `__ + `commit `__ `#8597 `__ - ipatests: temporarily remove test_dnssec.py::TestInstallDNSSECFirst from gating - `commit `__ + `commit `__ `#8496 `__ - ipatests: ipa-acme-manage status returns 3 on a CA-less server - `commit `__ + `commit `__ `#8572 `__ - ipatests: IPADNSSystemRecordsCheck also checks for AAAA records - `commit `__ + `commit `__ `#8573 `__ - ipatests: curl outputs the cookie in stderr and not in sdtout - `commit `__ + `commit `__ `#8559 `__ - ipatests: properly handle journalctl return code - `commit `__ + `commit `__ `#8541 `__ - rpmspec: ensure ipa snippet for sshd is always included - `commit `__ + `commit `__ `#8535 `__ - ipatests: add tests to 389ds regression - `commit `__ + `commit `__ - test_smb: skip test_smb_service_s4u2self for fed31 - `commit `__ + `commit `__ `#8505 `__ - dnsforwardzone-add: support dnspython 2.0 - `commit `__ + `commit `__ `#8481 `__ - ipatests: fix bind service name - `commit `__ + `commit `__ `#8482 `__ - ipatests: add missing healthcheck test in PRCI nightlies - `commit `__ + `commit `__ - ipatests: run test_ipahealthcheck.py::TestIpaHealthCheck separately - `commit `__ + `commit `__ `#8472 `__ - ipatests: remove xfail from test_dnssec - `commit `__ + `commit `__ - ipatests: fix TestIpaHealthCheckWithoutDNS failure - `commit `__ + `commit `__ `#8447 `__ - ipatests: collect IPA_RENEWAL_LOCK file - `commit `__ + `commit `__ - ipatests: fix test_ipahealthcheck.py::TestIpaHealthCheck - `commit `__ + `commit `__ `#8439 `__ - ipatests: check KDC cert permissions in CA less install - `commit `__ + `commit `__ `#8440 `__ - CAless installation: set the perms on KDC cert file - `commit `__ + `commit `__ `#8440 `__ - ipatests: increase test_trust timeout - `commit `__ + `commit `__ - ipatests: fix test_authselect - `commit `__ + `commit `__ `#8189 `__ - ipatests: remove the xfail for test_nfs.py - `commit `__ + `commit `__ `#8189 `__ - ipa-client-install: use the authselect backup during uninstall - `commit `__ + `commit `__ `#8189 `__ - ipatests: Fix TestReplicaPromotionLevel1 - `commit `__ + `commit `__ `#8414 `__ - ipatests: fix TestUnprivilegedUserPermissions - `commit `__ + `commit `__ `#8413 `__ - sshd template must be part of client package - `commit `__ + `commit `__ `#8400 `__ - Add test_dnssec to 389ds nightly tests - `commit `__ + `commit `__ - ipa cert-show: fix the code setting revocation reason - `commit `__ + `commit `__ `#8394 `__ - Bump requires for selinux-policy - `commit `__ + `commit `__ - ipatests: fix the method adding ifp to sssd.conf - `commit `__ + `commit `__ `#8371 `__ - Unify spelling of "One-Time Password" (take 2) - `commit `__ + `commit `__ `#5628 `__, `#8381 `__ - client install: fix broken sshd config - `commit `__ + `commit `__ `#8304 `__ - ipa-client-install: use sshd drop-in configuration - `commit `__ + `commit `__ `#8304 `__ - ipatests: Update the pki-master-f32 image version - `commit `__ + `commit `__ - ipatests: add a test for ipa-replica-install --setup-ca --http-cert-file - `commit `__ + `commit `__ `#8366 `__ - ipa-replica-install: --setup-ca and \*-cert-file are mutually exclusive - `commit `__ + `commit `__ `#8366 `__ - ipatests: fix the disable_dnssec_validation method - `commit `__ + `commit `__ `#8364 `__ - ipatests: Check if user with 'User Administrator' role can delete group. - `commit `__ + `commit `__ `#6884 `__ - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - `commit `__ + `commit `__ `#8311 `__ - Man pages: fix syntax issues - `commit `__ + `commit `__ `#8273 `__ - ipatests: wait for SSSD to become online in backup/restore tests - `commit `__ + `commit `__ `#8228 `__ - xmlrpc tests: add a test for idview-apply on a master - `commit `__ + `commit `__ `#5662 `__ - idviews: prevent applying to a master - `commit `__ + `commit `__ `#5662 `__ - opendnssec2.1 support: move all ods tasks to specific file - `commit `__ + `commit `__ `#8214 `__ - DnsSecMaster migration: move the call to zonelist export later - `commit `__ + `commit `__ `#8214 `__ - Support OpenDNSSEC 2.1: new ods-signer protocol - `commit `__ + `commit `__ `#8214 `__ - With opendnssec 2, read the zone list from file - `commit `__ + `commit `__ `#8214 `__ - Remove the from opendnssec conf - `commit `__ + `commit `__ `#8214 `__ - Support opendnssec 2.1.6 - `commit `__ + `commit `__ `#8214 `__ - selinux policy: add the right context for org.freeipa.server.trust-enable-agent - `commit `__ + `commit `__ `#7600 `__ - ipa-adtrust-install: remote command fails if ipa-server-trust-ad pkg missing - `commit `__ + `commit `__ `#7600 `__ - ipatests: add test for ipa-adtrust-install --add-agents - `commit `__ + `commit `__ `#7600 `__ - ipa-adtrust-install: run remote configuration for new agents - `commit `__ + `commit `__ `#7600 `__ - Privilege: add a helper checking if a principal has a given privilege - `commit `__ + `commit `__ `#7600 `__ - ipatests: fix TestSubCAkeyReplication - `commit `__ + `commit `__ - Part2: Don't fully quality the FQDN in ssbrowser.html for Chrome - `commit `__ + `commit `__ `#8201 `__ - ipatests: fix modify_sssd_conf() - `commit `__ + `commit `__ - ipatests: update packages for rawhide and updates-testing nightlies - `commit `__ + `commit `__ - ipatests: fix backup and restore - `commit `__ + `commit `__ `#8170 `__ - AD user without override receive InternalServerError with API - `commit `__ + `commit `__ `#8163 `__ - ipa-cacert-manage man page: fix indentation - `commit `__ + `commit `__ `#8138 `__ - ipatests: fix TestMigrateDNSSECMaster teardown - `commit `__ + `commit `__ `#7985 `__ - trust upgrade: ensure that host is member of adtrust agents - `commit `__ + `commit `__ - ipatests: fix test_crlgen_manage - `commit `__ + `commit `__ - ipatests: fix teardown - `commit `__ + `commit `__ - ipatests: generic uninstall should call ipa server-del - `commit `__ + `commit `__ `#7985 `__ - Nightly definition: use right template for krbtpolicy - `commit `__ + `commit `__ `#8001 `__ - test_ipalib: add test for DNParam class - `commit `__ + `commit `__ `#8097 `__ - XMLRPCtest: add a test for add-certmapdata with multiple subject/issuer - `commit `__ + `commit `__ `#8097 `__ - DNParam: raise Exception when multiple values provided to a 1-val param - `commit `__ + `commit `__ `#8097 `__ - smartcard: make the ipa-advise script compatible with authselect/authconfig - `commit `__ + `commit `__ `#8113 `__ - ipa-backup: fix python2 issue with os.mkdir - `commit `__ + `commit `__ `#8099 `__ - ipa-server-certinstall manpage: add missing options - `commit `__ + `commit `__ `#8086 `__ - ipatests: fix test_replica_promotion.py::TestHiddenReplicaPromotion - `commit `__ + `commit `__ `#8070 `__ - ipatests: add XMLRPC test for user-add when UPG plugin is disabled - `commit `__ + `commit `__ `#4972 `__ - ipa user_add: do not check group if UPG is disabled - `commit `__ + `commit `__ `#4972 `__ - ipatests: fix fedora29 nightly definition - `commit `__ + `commit `__ - replica install: enforce --server arg - `commit `__ + `commit `__ `#7566 `__ - ipatests: ensure that backup/restore restores pkcs 11 modules config file - `commit `__ + `commit `__ `#8073 `__ - ipa-backup: backup the PKCS module config files setup by IPA - `commit `__ + `commit `__ `#8073 `__ - ipatests: enable 389-ds audit log and collect audit file - `commit `__ + `commit `__ `#8064 `__ - ipatests: add nightly definition for DS integration tests - `commit `__ + `commit `__ - config plugin: replace 'is 0' with '== 0' - `commit `__ + `commit `__ `#8057 `__ - ipatests: fix wrong xfail in test_domain_resolution_order - `commit `__ + `commit `__ `#8052 `__ - Nightly test definition: add missing tests - `commit `__ + `commit `__ - xmlrpc test: add test for preserved > stage user - `commit `__ + `commit `__ `#7597 `__ - user-stage: transfer all attributes from preserved to stage user - `commit `__ + `commit `__ `#7597 `__ - test_xmlrpc: fix TestAutomemberFindOrphans.test_find_orphan_automember_rules - `commit `__ + `commit `__ `#7902 `__ - Azure pipeline: report failure in prepare-build step - `commit `__ + `commit `__ `#8022 `__ - upgrade: remove ipaCert and key from /etc/httpd/alias - `commit `__ + `commit `__ `#7329 `__ @@ -3444,9 +3444,9 @@ Francisco Trivino (2) ---------------------------------------------------------------------------------------------- - prci: bump template version and fix test_smb gating definition - `commit `__ + `commit `__ - prci: increase gating tasks priority - `commit `__ + `commit `__ @@ -3454,368 +3454,368 @@ Fraser Tweedale (141) ---------------------------------------------------------------------------------------------- - mailmap: add ftweedal - `commit `__ + `commit `__ - dns: allow PTR records in arbitrary zones - `commit `__ + `commit `__ `#5566 `__ - ipa_sam: do not modify static buffer holding fqdn - `commit `__ + `commit `__ `#8501 `__ - spec: require pki-acme if pki-ca >= 10.10 - `commit `__ + `commit `__ - install: simplify host name verification - `commit `__ + `commit `__ - delete unused subroutine get_host_name() - `commit `__ + `commit `__ - certupdate: update config after deployment becomes CA-ful - `commit `__ + `commit `__ `#7188 `__ - cainstance: extract function import_ra_key - `commit `__ + `commit `__ `#7188 `__ - cainstance.update_ipa_conf: allow specifying ca_host - `commit `__ + `commit `__ `#7188 `__ - acme: delete ACME RA account on server uninstall - `commit `__ + `commit `__ `#4751 `__ - acme: enable mod_md tests on Fedora - `commit `__ + `commit `__ `#4751 `__ - acme: add certbot dns-01 test - `commit `__ + `commit `__ `#4751 `__ - acme: add certbot dns script - `commit `__ + `commit `__ `#4751 `__ - acme: add revocation test - `commit `__ + `commit `__ `#4751 `__ - acme: handle alternative schema ldif location - `commit `__ + `commit `__ `#4751 `__ - acme: add mod_md integration test - `commit `__ + `commit `__ `#4751 `__ - acme: add integration tests to gating - `commit `__ + `commit `__ `#4751 `__ - acme: add integration test to nightly CI - `commit `__ + `commit `__ `#4751 `__ - acme: add integration test - `commit `__ + `commit `__ `#4751 `__ - acme: add ipa-acme-manage command - `commit `__ + `commit `__ `#4751 `__ - acme: configure engine.conf and disable by default - `commit `__ + `commit `__ `#4751 `__ - acme: configure ACME service on upgrade - `commit `__ + `commit `__ `#4751 `__ - acme: add certificate profile - `commit `__ + `commit `__ `#4751 `__ - acme: add Dogtag ACL to allow ACME agents to revoke certs - `commit `__ + `commit `__ `#4751 `__ - acme: create ACME RA account - `commit `__ + `commit `__ `#4751 `__ - dogtaginstance: add ensure_group method - `commit `__ + `commit `__ `#4751 `__ - dogtaginstance: extract user creation to subroutine. - `commit `__ + `commit `__ `#4751 `__ - acme: set up ACME service when configuring CA - `commit `__ + `commit `__ `#4751 `__ - acme: ipa-pki-proxy: proxy /acme to Dogtag - `commit `__ + `commit `__ `#4751 `__ - certupdate: only add LWCA tracking requests on CA servers - `commit `__ + `commit `__ `#8399 `__ - tests: fix cleanup for CATracker - `commit `__ + `commit `__ `#5011 `__ - ca plugin: improve doc - `commit `__ + `commit `__ `#5011 `__ - ca-del: require CA to already be disabled - `commit `__ + `commit `__ `#5011 `__ - cainstance.is_crlgen_enabled: handle missing ipa-pki-proxy.conf - `commit `__ + `commit `__ - ra.get_certificate: use REST API - `commit `__ + `commit `__ `#3473 `__, `#5011 `__ - extract virtual operation access check subroutine - `commit `__ + `commit `__ `#5011 `__, `#6423 `__ - Define errors_by_code in ipalib.errors - `commit `__ + `commit `__ `#5011 `__ - fix iPAddress cert issuance for >1 host/service - `commit `__ + `commit `__ `#8368 `__ - fix cert-find errors in CA-less deployment - `commit `__ + `commit `__ `#8369 `__ - upgrade: avoid stopping certmonger when fixing requests - `commit `__ + `commit `__ `#8186 `__ - httpinstance: retry request without ipa-ca.$DOMAIN dnsName on failure - `commit `__ + `commit `__ `#8186 `__ - ipatests: check HTTP certificate contains ipa-ca.$DOMAIN dnsname - `commit `__ + `commit `__ `#8186 `__ - upgrade: add ipa-ca.$DOMAIN alias to HTTP certificate - `commit `__ + `commit `__ `#8186 `__ - httpinstance: add ipa-ca.$DOMAIN alias in initial request - `commit `__ + `commit `__ `#8186 `__ - cert-request: allow ipa-ca.$DOMAIN dNSName for IPA servers - `commit `__ + `commit `__ `#8186 `__ - httpinstance: add fqdn and ipa-ca alias to Certmonger request - `commit `__ + `commit `__ `#8186 `__ - certmonger: support dnsname as request search criterion - `commit `__ + `commit `__ `#8186 `__ - certmonger: move 'criteria' description to module docstring - `commit `__ + `commit `__ `#8186 `__ - certmonger: avoid mutable default argument - `commit `__ + `commit `__ `#8186 `__ - add resources section - `commit `__ + `commit `__ - typospotting - `commit `__ + `commit `__ - suggest \`ipa help topics\` - `commit `__ + `commit `__ - lots of minor tweaks and updates - `commit `__ + `commit `__ - rename certificates module - `commit `__ + `commit `__ - Vagrantfile: set DNS configuration in network-scripts - `commit `__ + `commit `__ - add more prerequisites and fix some links - `commit `__ + `commit `__ - add inter-module links - `commit `__ + `commit `__ - split workshop into separate files - `commit `__ + `commit `__ - add sudorule and selinux units to TOC - `commit `__ + `commit `__ - add selinuxusermap unit - `commit `__ + `commit `__ - add sudorule unit - `commit `__ + `commit `__ - minor editoral improvements - `commit `__ + `commit `__ - Change workshop "Modules" to "Units" - `commit `__ + `commit `__ - prep: updates for f24, box version 0.0.7 - `commit `__ + `commit `__ - certs: request SAN DNS name - `commit `__ + `commit `__ - updates for FreeIPA 4.3 - `commit `__ + `commit `__ - typospotting - `commit `__ + `commit `__ - add facilitator notes; remove feedback link - `commit `__ + `commit `__ - building: note disk and memory requirements - `commit `__ + `commit `__ - bump libvirt vm mem to 1G; other fixes - `commit `__ + `commit `__ - update feedback url - `commit `__ + `commit `__ - update clone url - `commit `__ + `commit `__ - add internal links to modules - `commit `__ + `commit `__ - symlink README to workshop.rst - `commit `__ + `commit `__ - add replica installation module - `commit `__ + `commit `__ - update to f23 - `commit `__ + `commit `__ - add vagrant box building instructions - `commit `__ + `commit `__ - workshop: remove references to freeipa-workshop-vagrantfile repo - `commit `__ + `commit `__ - enable and start httpd on client - `commit `__ + `commit `__ - typospotting - `commit `__ + `commit `__ - initial commit - `commit `__ + `commit `__ - remove proposal - `commit `__ + `commit `__ - add copyright notice - `commit `__ + `commit `__ - freeipa-workshop: fix mod_authnz_pam link - `commit `__ + `commit `__ - merge (most of) zdover's edits - `commit `__ + `commit `__ - 20151029-osdc-freeipa-workshop: add app.py - `commit `__ + `commit `__ - osdc-freeipa-workshop: add certificate management module - `commit `__ + `commit `__ - osdc-freeipa-workshop: add OS X and update Debian/Ubuntu details - `commit `__ + `commit `__ - osdc-freeipa-workshop: add debian/ubuntu prep instructions - `commit `__ + `commit `__ - osdc-freeipa-workshop: support vagrant-libvirt on Fedora - `commit `__ + `commit `__ - osdc-freeipa-workshop: presentation, minor curriculum edits - `commit `__ + `commit `__ - osdc-freeipa-workshop: typospotting - `commit `__ + `commit `__ - osdc-freeipa-workshop: remove definition list of VMs - `commit `__ + `commit `__ - osdc-freeipa-workshop: add missing dnf install vagrant - `commit `__ + `commit `__ - osdc-freeipa-workshop: clarify prep goals and VirtualBox version - `commit `__ + `commit `__ - osdc-freeipa-workshop: update troubleshooting doc - `commit `__ + `commit `__ - osdc-freeipa-workshop: incorporate wibrown\'s feedback - `commit `__ + `commit `__ - osdc-freeipa-workshop: update f22 installation steps - `commit `__ + `commit `__ - osdc-freeipa-workshop: add Windows prep details - `commit `__ + `commit `__ - osdc-freeipa-workshop: add Vagrantfile clone instructions and curriculum overview - `commit `__ + `commit `__ - osdc-freeipa-workshop: remove vagrant-hostmanager steps, add editing notes - `commit `__ + `commit `__ - osdc-freeipa-workshop: selinux and other minor fixes - `commit `__ + `commit `__ - osdc-freeipa-workshop: add mod_lookup_identity and mod_authnz_pam sections - `commit `__ + `commit `__ - osdc-freeipa-workshop: add mod_auth_gssapi section - `commit `__ + `commit `__ - sudo make me a sandwich - `commit `__ + `commit `__ - osdc-freeipa-workshop: add rpmfusion instructions - `commit `__ + `commit `__ - osdc-freeipa-workshop: external authnz module (WIP); minor fixes - `commit `__ + `commit `__ - osdc-freeipa-workshop: add initial workshop modules - `commit `__ + `commit `__ - fix osdc2015 and lca2016 dates - `commit `__ + `commit `__ - Do not renew externally-signed CA as self-signed - `commit `__ + `commit `__ `#8176 `__ - ipatests: add test for certinstall with notBefore in the future - `commit `__ + `commit `__ `#8142 `__ - Fix test regressions caused by certificate validation changes - `commit `__ + `commit `__ `#8142 `__ - ipatests: assert_error: allow regexp match - `commit `__ + `commit `__ `#8142 `__ - removed unused function export_pem_p12 - `commit `__ + `commit `__ - test_integration: add tests for custom CA subject DN - `commit `__ + `commit `__ `#8084 `__ - upgrade: fix ipakra people entry 'description' attribute - `commit `__ + `commit `__ `#8084 `__ - krainstance: set correct issuer DN in uid=ipakra entry - `commit `__ + `commit `__ `#8084 `__ - Bump Dogtag min version to 10.7.3 - `commit `__ + `commit `__ `#8020 `__ - ipa-pki-retrieve-key: request AES encryption (with fallback) - `commit `__ + `commit `__ `#8020 `__ - NSSWrappedCertDB: accept optional symmetric algorithm - `commit `__ + `commit `__ `#8020 `__ - IPASecStore: support extra key arguments - `commit `__ + `commit `__ `#8020 `__ - dsinstance: add proflie when tracking certificate - `commit `__ + `commit `__ `#7991 `__ - ipatests: test ipa-server-upgrade in CA-less deployment - `commit `__ + `commit `__ `#7991 `__ - Use RENEWAL_CA_NAME and RA_AGENT_PROFILE constants - `commit `__ + `commit `__ `#7991 `__ - cainstance: add profile to IPA RA tracking request - `commit `__ + `commit `__ `#7991 `__ - upgrade: fix spurious certmonger re-tracking - `commit `__ + `commit `__ `#7991 `__ - upgrade: log missing/misconfigured tracking requests - `commit `__ + `commit `__ `#7991 `__ - upgrade: update KRA tracking requests - `commit `__ + `commit `__ `#7991 `__ - upgrade: always add profile to tracking requests - `commit `__ + `commit `__ `#7991 `__ - dogtaginstance: avoid special cases for Server-Cert - `commit `__ + `commit `__ `#7991 `__ - dogtag-ipa-ca-renew-agent: always use profile-based renewal - `commit `__ + `commit `__ `#7991 `__ - certmonger: use long options when invoking dogtag-ipa-renew-agent - `commit `__ + `commit `__ `#7991 `__ - upgrade: add profile to Dogtag tracking requests - `commit `__ + `commit `__ `#7991 `__ - dogtaginstance: add profile to tracking requests - `commit `__ + `commit `__ `#7991 `__ - ci: add --external-ca-profile tests to gating - `commit `__ + `commit `__ `#7548 `__ - ci: add --external-ca-profile tests to nightly - `commit `__ + `commit `__ `#7548 `__ - Collapse --external-ca-profile tests into single class - `commit `__ + `commit `__ `#7548 `__ - Add more tests for --external-ca-profile handling - `commit `__ + `commit `__ `#7548 `__ - Fix use of incorrect variable - `commit `__ + `commit `__ `#5608 `__, `#7548 `__ - install: fix --external-ca-profile option - `commit `__ + `commit `__ `#5608 `__, `#7548 `__ - move MSCSTemplate classes to ipalib - `commit `__ + `commit `__ `#7548 `__ @@ -3824,11 +3824,11 @@ Gaurav Talreja (3) ---------------------------------------------------------------------------------------------- - Normalize title of test external_ca in prci-definition - `commit `__ + `commit `__ - Normalize test definations titles - `commit `__ + `commit `__ - prci: bump template version for nightly_rawhide - `commit `__ + `commit `__ @@ -3836,9 +3836,9 @@ Isaac Boukris (2) ---------------------------------------------------------------------------------------------- - Fix legacy S4U2Proxy in DAL v8 support - `commit `__ + `commit `__ - Fix DAL v8 support - `commit `__ + `commit `__ @@ -3847,10 +3847,10 @@ Jeremy Frasier (2) - replica: Add tests to ensure the ipaapi user is allowed access to ifp on replicas - `commit `__ + `commit `__ `#8403 `__ - replica: Ensure the ipaapi user is allowed to access ifp on replicas - `commit `__ + `commit `__ `#8403 `__ @@ -3859,13 +3859,13 @@ Jayesh Garg (4) ---------------------------------------------------------------------------------------------- - Nightly definations commit - `commit `__ + `commit `__ - Test for ipa-ca-install on replica - `commit `__ + `commit `__ - Test ipa-getkeytab quiet mode, encryptons - `commit `__ + `commit `__ - Test if ipactl starts services stopped by systemctl - `commit `__ + `commit `__ @@ -3873,7 +3873,7 @@ Julian Gethmann (1) ---------------------------------------------------------------------------------------------- - Fix typo in idrange.py docstring - `commit `__ + `commit `__ @@ -3881,14 +3881,14 @@ Kaleemullah Siddiqui (4) ---------------------------------------------------------------------------------------------- - Tests for fake_mname parameter setup - `commit `__ + `commit `__ - Test for check of HostKeyAlgorithms option in ssh_config - `commit `__ + `commit `__ `#8082 `__ - Fix for regression from PR#3962 - `commit `__ + `commit `__ - Tests for backup-restore when pkg required is missing - `commit `__ + `commit `__ `#7630 `__ @@ -3897,7 +3897,7 @@ Christian Hermann (1) ---------------------------------------------------------------------------------------------- - configure.ac: don't rely on bashisms - `commit `__ + `commit `__ @@ -3905,7 +3905,7 @@ Miro Hrončok (1) ---------------------------------------------------------------------------------------------- - Fix a syntax typo - `commit `__ + `commit `__ @@ -3914,7 +3914,7 @@ MIZUTA Takeshi (1) - Add config that maintains existing content to ipa-client-install manpage - `commit `__ + `commit `__ @@ -3922,25 +3922,25 @@ Michal Polovka (7) ---------------------------------------------------------------------------------------------- - ipatests: test_epn: test_EPN_config_file: Package name fix - `commit `__ + `commit `__ - ipatests: test_epn: Fix package installation - `commit `__ + `commit `__ - Test for healthcheck being run on replica with stopped master - `commit `__ + `commit `__ - Test for output being indented by default value if not stated implicitly. - `commit `__ + `commit `__ - ipatests: add tests for ipa host-add with non-default maxhostnamelength - `commit `__ + `commit `__ `#2018 `__ - ipatests: fix topology for TestIpaNotConfigured in PR-CI nightly definitions - `commit `__ + `commit `__ `#6843 `__, `#8055 `__ - ipatests: Test for ipa-backup with ipa not configured - `commit `__ + `commit `__ `#6843 `__ @@ -3949,19 +3949,19 @@ Mark Reynolds (5) ---------------------------------------------------------------------------------------------- - Accept 389-ds JSON replication status messages - `commit `__ + `commit `__ `#7975 `__ - Reorder creation of the CA mapping tree and database backend - `commit `__ + `commit `__ `#8558 `__ - Increase replication changelog trimming to 30 days - `commit `__ + `commit `__ `#8464 `__ - Issue 8456 - Add new aci's for the new replication changelog entries - `commit `__ + `commit `__ `#8456 `__ - Issue 8407 - Support changelog integration into main database - `commit `__ + `commit `__ `#8407 `__ @@ -3970,78 +3970,78 @@ Mohammad Rizwan (29) ---------------------------------------------------------------------------------------------- - ipatests: Test certmonger IPA responder switched to JSONRPC - `commit `__ + `commit `__ `#3299 `__ - Move acme client installation part to classmethod - `commit `__ + `commit `__ - PEP8 fixes for test_acme.py - `commit `__ + `commit `__ - External-CA scenarios for ACME service - `commit `__ + `commit `__ `#4751 `__ - ipatests: Check if ACME is enabled on all CA servers - `commit `__ + `commit `__ `#8524 `__ - PEP8 fixes - `commit `__ + `commit `__ - ipatests: add --skip-overlap-check option to prepare_reverse_zone() - `commit `__ + `commit `__ - ipatests: Add PTR record for IP SAN - `commit `__ + `commit `__ - ipatests: Test certmonger rekey command works fine - `commit `__ + `commit `__ - Xfail test for sssd < 2.3.0 - `commit `__ + `commit `__ - ipatests: Test ipa user login with wrong password - `commit `__ + `commit `__ - WebUI tests: fix PEP8 issues in test_webui/test_user.py - `commit `__ + `commit `__ - webui: check if notification area doesn't intercept menu button - `commit `__ + `commit `__ `#8120 `__ - ipatests: Test deletion of required principal throws proper error - `commit `__ + `commit `__ `#7695 `__ - Display principal name while del required principal - `commit `__ + `commit `__ `#7695 `__ - ipatests: Test to check password leak in apache error log - `commit `__ + `commit `__ `#8017 `__ - ipatests:Test if proper error thrown when AD user tries to run IPA commands - `commit `__ + `commit `__ `#8163 `__ - ipatests: Skip test using paramiko when FIPS is enabled - `commit `__ + `commit `__ - Test if schema-compat-entry-attribute is set - `commit `__ + `commit `__ `#8193 `__ - Test if schema-compat-entry-attribute is set - `commit `__ + `commit `__ `#8193 `__ - Test if getcert creates cacert file with -F option - `commit `__ + `commit `__ `#8105 `__ - Move wait_for_request() method to tasks.py - `commit `__ + `commit `__ - Test if server installer lock Bind9 recursion - `commit `__ + `commit `__ `#8079 `__ - Add certmonger wait_for_request that uses run_command - `commit `__ + `commit `__ - Test if certmonger reads the token in HSM - `commit `__ + `commit `__ - Test AES SHA 256 and 384 Kerberos enctypes enabled - `commit `__ + `commit `__ `#8110 `__ - Add test to nightly yamls - `commit `__ + `commit `__ - Installation of replica against a specific server - `commit `__ + `commit `__ `#7566 `__ - Check file ownership and permission for dirsrv log instance - `commit `__ + `commit `__ `#7725 `__ @@ -4050,7 +4050,7 @@ ndehadra (1) ---------------------------------------------------------------------------------------------- - Hidden Replica: Add a test for Automatic CRL configuration - `commit `__ + `commit `__ `#7307 `__ @@ -4059,15 +4059,15 @@ Weblate (5) ---------------------------------------------------------------------------------------------- - Update translation files - `commit `__ + `commit `__ - Update translation files - `commit `__ + `commit `__ - Update translation files - `commit `__ + `commit `__ - Update translation files - `commit `__ + `commit `__ - Update translation files - `commit `__ + `commit `__ @@ -4075,9 +4075,9 @@ Oğuz Ersen (2) ---------------------------------------------------------------------------------------------- - Translated using Weblate (Turkish) - `commit `__ + `commit `__ - Translated using Weblate (Turkish) - `commit `__ + `commit `__ @@ -4085,7 +4085,7 @@ Spencer E. Olson (1) ---------------------------------------------------------------------------------------------- - Fixes debian path for IPA_CUSTODIA_HANDLER - `commit `__ + `commit `__ @@ -4093,7 +4093,7 @@ Piotr Drąg (1) ---------------------------------------------------------------------------------------------- - Translated using Weblate (Polish) - `commit `__ + `commit `__ @@ -4101,7 +4101,7 @@ Slava Aseev (1) ---------------------------------------------------------------------------------------------- - ipa-kdb: handle dates up to 2106-02-07 06:28:16 - `commit `__ + `commit `__ `#8028 `__ @@ -4110,9 +4110,9 @@ Petr Voborník (2) ---------------------------------------------------------------------------------------------- - baseuser: fix ipanthomedirectorydrive option name - `commit `__ + `commit `__ - webui: hide user attributes for SMB services section if empty - `commit `__ + `commit `__ `#8336 `__ @@ -4121,7 +4121,7 @@ Rafael Fontenelle (1) ---------------------------------------------------------------------------------------------- - Translated using Weblate (Portuguese (Brazil)) - `commit `__ + `commit `__ @@ -4129,443 +4129,443 @@ Rob Crittenden (141) ---------------------------------------------------------------------------------------------- - Skip the ACME mod_md test when the client is in enforcing mode - `commit `__ + `commit `__ `#8514 `__ - Increase timeout for krbtpolicy to 4800 - `commit `__ + `commit `__ `#8589 `__ - Enable the ccache sweep systemd timer - `commit `__ + `commit `__ `#8589 `__ - ipatests: test that stale caches are removed using the sweeper - `commit `__ + `commit `__ `#8589 `__ - Generate a unique cache for each connection - `commit `__ + `commit `__ `#8589 `__ - Convert reset_to_default_policy into a pytest fixture - `commit `__ + `commit `__ `#8589 `__ - VERSION: back to git snapshots - `commit `__ + `commit `__ - ipatests: Test that ipa-ca.$domain can retrieve CRLs without redirect - `commit `__ + `commit `__ `#8595 `__ - Allow Apache to answer to ipa-ca requests without a redirect - `commit `__ + `commit `__ `#8595 `__ - Move where the restore state is marked during IPA server upgrade - `commit `__ + `commit `__ `#7534 `__ - Reorder when ACME is enabled to fix failure on upgrade - `commit `__ + `commit `__ `#8603 `__ - Remove test for minimum ACME support and rely on package deps - `commit `__ + `commit `__ - Require PKI 10.10+ for KRA profile and ACME support - `commit `__ + `commit `__ `#8524 `__, `#8545 `__ - Test that the KRA profiles can renewal its three certificates - `commit `__ + `commit `__ `#8545 `__ - Change KRA profiles in certmonger tracking so they can renew - `commit `__ + `commit `__ `#8545 `__ - ipatests: Increase timeout for ACME in gating.yaml - `commit `__ + `commit `__ `#8581 `__ - ipatests: honor class inheritance in TestACMEwithExternalCA - `commit `__ + `commit `__ `#8581 `__ - ipatests: configure MDStoreDir for mod_md ACME test - `commit `__ + `commit `__ `#8581 `__ - ipatests: Clean up existing ACME registration and certs - `commit `__ + `commit `__ `#8581 `__ - ipatests: Configure a replica in TestACMEwithExternalCA - `commit `__ + `commit `__ `#8581 `__ - ipatests: call the CALess install method to generate the CA - `commit `__ + `commit `__ `#8581 `__ - ipatests: Test that Match ProxyCommand masks on no shell exec - `commit `__ + `commit `__ `#7676 `__ - Create IPA ssh client configuration and move ProxyCommand - `commit `__ + `commit `__ `#7676 `__ - ipatests: Test that ipa-certupdate can run without credentials - `commit `__ + `commit `__ `#8531 `__ - Use host keytab to obtain credentials needed for ipa-certupdate - `commit `__ + `commit `__ `#8531 `__ - ipatests: Test that password reset unlocks users too - `commit `__ + `commit `__ `#8551 `__ - On password reset also set krbLastAdminUnlock to unlock account - `commit `__ + `commit `__ `#8551 `__ - Wrap libpwquality PKG_CHECK_MODULES in ENABLE_SERVER test - `commit `__ + `commit `__ `#2445 `__, `#298 `__, `#5948 `__, `#6964 `__ - Catch EmptyResult exception in update_idranges - `commit `__ + `commit `__ `#8555 `__ - Test that ipapwpolicy objectclass is added on upgrade - `commit `__ + `commit `__ `#8555 `__ - Add ipwpwdpolicy objectclass to all policies on upgrade - `commit `__ + `commit `__ `#8555 `__ - ipatests: Add tests for requiring ipa-ca SAN when ACME is enabled - `commit `__ + `commit `__ `#8498 `__ - Change the return codes of ipa-acme-manage - `commit `__ + `commit `__ `#8498 `__ - Require an ipa-ca SAN on 3rd party certs if ACME is enabled - `commit `__ + `commit `__ `#8498 `__ - ipatests: Collect the let's encrypt log - `commit `__ + `commit `__ `#8524 `__ - Add a status option to ipa-acme-manage - `commit `__ + `commit `__ `#8524 `__ - Don't install ACME if full support is not available - `commit `__ + `commit `__ `#8524 `__ - Centralize enable/disable of the ACME service - `commit `__ + `commit `__ `#8524 `__ - Let dogtag.py be imported if the api is not initialized - `commit `__ + `commit `__ `#8524 `__ - Enable importing LDIF files not shipped by IPA - `commit `__ + `commit `__ `#8524 `__ - Use a state to determine if a 389-ds upgrade is in progress - `commit `__ + `commit `__ `#7534 `__ - ipatests: Add test_pwpolicy to nightly runs - `commit `__ + `commit `__ `#2445 `__, `#298 `__, `#5948 `__, `#6964 `__ - Requirements and design for libpwquality integration - `commit `__ + `commit `__ `#2445 `__, `#298 `__, `#5948 `__, `#6964 `__ - Add SELinux policy so kadmind can read the crackdb dictionary - `commit `__ + `commit `__ `#2445 `__, `#298 `__, `#5948 `__, `#6964 `__ - ipatests: add test for password policies - `commit `__ + `commit `__ `#2445 `__, `#298 `__, `#5948 `__, `#6964 `__ - Add a raiseonerr option to ldappasswd_user_change - `commit `__ + `commit `__ `#2445 `__, `#298 `__, `#5948 `__, `#6964 `__ - Pass the user to the password policy check in the kdb driver - `commit `__ + `commit `__ `#2445 `__, `#298 `__, `#5948 `__, `#6964 `__ - Add a unit test for libpwquality-based password policy - `commit `__ + `commit `__ `#2445 `__, `#298 `__, `#5948 `__, `#6964 `__ - Extend password policy to evaluate passwords using libpwpolicy - `commit `__ + `commit `__ `#2445 `__, `#298 `__, `#5948 `__, `#6964 `__ - Require libpwolicy and configure it in the build system - `commit `__ + `commit `__ `#2445 `__, `#298 `__, `#5948 `__, `#6964 `__ - Add new pwpolicy objectclass to test_xmprpc/objectclasses.py - `commit `__ + `commit `__ `#2445 `__, `#298 `__, `#5948 `__, `#6964 `__ - Extend IPA pwquality plugin to include libpwquality support - `commit `__ + `commit `__ `#2445 `__, `#298 `__, `#5948 `__, `#6964 `__ - Add LDAP schema for new libpwquality attributes - `commit `__ + `commit `__ `#2445 `__, `#298 `__, `#5948 `__, `#6964 `__ - Don't restart certmonger after stopping tracking in uninstall - `commit `__ + `commit `__ `#8533 `__ - Reduce the memory requirement from 1.6 to 1.2 GB - `commit `__ + `commit `__ `#8404 `__ - Test that ccaches are cleaned up during installation - `commit `__ + `commit `__ `#8248 `__ - Clean up entire /run/ipa/ccaches directory not just files - `commit `__ + `commit `__ `#8248 `__ - Require a matching server package for the selinux subpackage - `commit `__ + `commit `__ `#8511 `__ - Add index for more trust-related attributes - `commit `__ + `commit `__ `#8491 `__ - ipatests: Add tests for checking available memory - `commit `__ + `commit `__ `#8404 `__ - Require at least 1.6Gb of available RAM to install the server - `commit `__ + `commit `__ `#8404 `__ - ipatests: Add test for ACI attribute and permission uniqueness - `commit `__ + `commit `__ `#8443 `__ - Use ACI class set_permissions() method to set permissions - `commit `__ + `commit `__ `#8443 `__ - De-duplicate ACI attributes and permissions - `commit `__ + `commit `__ `#8443 `__ - ipatests: test that a zone name and name-from-ip will be rejected - `commit `__ + `commit `__ `#8446 `__ - Don't allow both a zone name and --name-from-ip to be provided - `commit `__ + `commit `__ `#8446 `__ - Set the certmonger subject with a string, not an object - `commit `__ + `commit `__ `#8204 `__ - ipatests: test ipa_server_certinstall with an IPA-issued cert - `commit `__ + `commit `__ `#8204 `__ - cli: When parsing options require name/value pairs - `commit `__ + `commit `__ `#6115 `__ - ipatests: Add option/arg parsing tests for the cli - `commit `__ + `commit `__ `#6115 `__ - ipatests: stop the CA during healthcheck expiration test - `commit `__ + `commit `__ `#8463 `__ - Improve performance of ipa-server-guard - `commit `__ + `commit `__ `#8425 `__ - ipatests: Add test for is_ipa_configured - `commit `__ + `commit `__ `#8458 `__ - Use is_ipa_configured from ipalib.facts - `commit `__ + `commit `__ `#8458 `__ - Fall back to old server installation detection when needed - `commit `__ + `commit `__ `#8458 `__ - IPA-EPN: Test that EPN can be install, uninstalled and re-installed - `commit `__ + `commit `__ - Added negative test case for --list-sources option - `commit `__ + `commit `__ - ipatests: CLI validation of ipa-healthcheck command - `commit `__ + `commit `__ - IPA-EPN: Test that users without givenname and/or mail are handled - `commit `__ + `commit `__ - Address legacy pylint issues in sysrestore.py - `commit `__ + `commit `__ `#8384 `__ - Update check_client_configuration to use new client fact - `commit `__ + `commit `__ `#8384 `__ - Don't use the has_files() to know if client/server is configured - `commit `__ + `commit `__ `#8384 `__ - Create a common place to retrieve facts about an IPA installation - `commit `__ + `commit `__ `#8384 `__ - Simplify determining if IPA client configuration is complete - `commit `__ + `commit `__ `#8384 `__ - Simplify determining if an IPA server installation is complete - `commit `__ + `commit `__ `#8384 `__ - ipatests: Check permissions of /etc/ipa/ca.crt new installations - `commit `__ + `commit `__ `#8441 `__ - Set mode of /etc/ipa/ca.crt to 0644 in CA-less installations - `commit `__ + `commit `__ `#8441 `__ - ipatests: Test healthcheck revocation checker - `commit `__ + `commit `__ - ipatests: Use healthcheck namespacing in stopped server test - `commit `__ + `commit `__ - ipatests: lib389 is now providing healthchecks, update naming - `commit `__ + `commit `__ - ipatests: verify that all services can be detected by healthcheck - `commit `__ + `commit `__ - ipatests: Add healthcheck test for FileSystemSpaceCheck - `commit `__ + `commit `__ - ipatests: Test that healthcheck detects and reports expiration - `commit `__ + `commit `__ - ipatests: Test cases for healthcheck File checker(s) - `commit `__ + `commit `__ - Replace SSLCertVerificationError with CertificateError for py36 - `commit `__ + `commit `__ - Add fips-mode-setup to ipaplatform.paths to determine FIPS status - `commit `__ + `commit `__ `#8429 `__ - Don't delegate the TGT in ipa-join - `commit `__ + `commit `__ `#8405 `__ - IPA-EPN: Don't treat givenname differently - `commit `__ + `commit `__ `#3687 `__ - IPA-EPN: add test to validate smtp_delay value - `commit `__ + `commit `__ `#3687 `__ - IPA-EPN: add smtp_delay to limit the velocity of e-mails sent - `commit `__ + `commit `__ `#3687 `__ - IPA-EPN: Add tests for --mail-test option - `commit `__ + `commit `__ `#3687 `__ - IPA-EPN: Add mail-test option for testing sending live email - `commit `__ + `commit `__ `#3687 `__ - IPA-EPN: test using SSL against port 465 - `commit `__ + `commit `__ `#3687 `__ - IPA-EPN: Add test for starttls mode - `commit `__ + `commit `__ `#3687 `__ - IPA-EPN: Add tests for sending real mail with auth and templates - `commit `__ + `commit `__ `#3687 `__ - IPA-EPN: Fixes to starttls mode, convert some log errors to exceptions - `commit `__ + `commit `__ `#3687 `__ - Add index for krbPasswordExpiration for EPN - `commit `__ + `commit `__ `#3687 `__ - Add a jinja2 e-mail template for EPN - `commit `__ + `commit `__ `#3687 `__ - Perform baseline healthcheck - `commit `__ + `commit `__ - Test that pwpolicy only applied on Kerberos entries - `commit `__ + `commit `__ - Add ability to change a user password as the Directory Manager - `commit `__ + `commit `__ - Don't save password history on non-Kerberos accounts - `commit `__ + `commit `__ - Test that ipa-healthcheck human output translates error strings - `commit `__ + `commit `__ - Move execution of ipa-healthcheck to a separate function - `commit `__ + `commit `__ - Fix div-by-zero when svc weight is 0 for all masters in location - `commit `__ + `commit `__ `#8135 `__ - Don't fully quality the FQDN in ssbrowser.html for Chrome - `commit `__ + `commit `__ `#8201 `__ - Add tests for ipa-cacert-manage delete command - `commit `__ + `commit `__ `#8124 `__ - ipa-certupdate removes all CA certs from db before adding new ones - `commit `__ + `commit `__ `#8124 `__ - Add delete option to ipa-cacert-manage to remove CA certificates - `commit `__ + `commit `__ `#8124 `__ - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - `commit `__ + `commit `__ `#8164 `__ - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch - `commit `__ + `commit `__ - Add integration test for Kerberos ticket policy - `commit `__ + `commit `__ `#8001 `__ - Conditionally restart certmonger after client installation - `commit `__ + `commit `__ `#8105 `__ - Add conditional restart (try-restart) capability to services - `commit `__ + `commit `__ `#8105 `__ - Enable AES SHA 256 and 384-bit enctypes in Kerberos - `commit `__ + `commit `__ `#8110 `__ - Disable dogtag cert publishing - `commit `__ + `commit `__ `#7522 `__ - ipa-restore: Restore ownership and perms on 389-ds log directory - `commit `__ + `commit `__ `#7725 `__ - Report if a certmonger CA is missing - `commit `__ + `commit `__ `#7870 `__ - Re-order tasks.restore_pkcs11_modules() to run earlier - `commit `__ + `commit `__ `#8034 `__ - Don't log host passwords when they are set/modified - `commit `__ + `commit `__ `#8017 `__ - Skip lock and fork in ipa-server-guard on unsupported ops - `commit `__ + `commit `__ - Defer initializing the API in dogtag-ipa-ca-renew-agent-submit - `commit `__ + `commit `__ - Add missing timeout option to logging statement - `commit `__ + `commit `__ - Log dogtag auth timeout in install, provide hint to increase it - `commit `__ + `commit `__ `#7971 `__ - Log the replication wait timeout for debugging purposes - `commit `__ + `commit `__ `#7971 `__ - Replace replication_wait_timeout with certmonger_wait_timeout - `commit `__ + `commit `__ `#7971 `__ - Use tasks to configure automount nsswitch settings - `commit `__ + `commit `__ - Move ipachangeconf from ipaclient.install to ipapython - `commit `__ + `commit `__ - Don't return SSH keys with ipa host-find --pkey-only - `commit `__ + `commit `__ `#8029 `__ - httpinstance: add pinfile when tracking certificate - `commit `__ + `commit `__ `#7991 `__ - Remove posixAccount from service_find search filter - `commit `__ + `commit `__ `#8013 `__ @@ -4574,41 +4574,41 @@ Robbie Harwood (17) ---------------------------------------------------------------------------------------------- - Fix krbtpolicy tests - `commit `__ + `commit `__ `#8590 `__ - Drop upper bound on krb5 version in freeipa.spec - `commit `__ + `commit `__ - ipa-kdb: implement AS-REQ lifetime jitter - `commit `__ + `commit `__ `#8010 `__ - Update kdcpolicy design doc for jitter implementation - `commit `__ + `commit `__ - Drop support for DAL version 5.0 - `commit `__ + `commit `__ - Support DAL version 8.0 - `commit `__ + `commit `__ - Handle the removal of KRB5_KDB_FLAG_ALIAS_OK - `commit `__ + `commit `__ - Fix several leaks in ipadb_find_principal - `commit `__ + `commit `__ - Use separate variable for client fetch in kdcpolicy - `commit `__ + `commit `__ - Make the coding style explicit - `commit `__ + `commit `__ - Provide modern example enctypes in ipa-getkeytab(1) - `commit `__ + `commit `__ - Fix segfault in ipadb_parse_ldap_entry() - `commit `__ + `commit `__ - Add a skeleton kdcpolicy plugin - `commit `__ + `commit `__ - Move certauth configuration into a server krb5.conf template - `commit `__ + `commit `__ - Enable krb5 snippet updates on client update - `commit `__ + `commit `__ - Fix NULL pointer dereference in maybe_require_preauth() - `commit `__ + `commit `__ - Log INFO message when LDAP connection fails on startup - `commit `__ + `commit `__ @@ -4616,7 +4616,7 @@ Rafael Guterres Jeffman (1) ---------------------------------------------------------------------------------------------- - Fixes pylint errors introduced by version 2.4.0. - `commit `__ + `commit `__ @@ -4624,17 +4624,17 @@ Rafael Guterres Jeffman (6) ---------------------------------------------------------------------------------------------- - Removed unnecessary imports after code review. - `commit `__ + `commit `__ - Removes several pylint warnings. - `commit `__ + `commit `__ - Removed unnecessary imports after code review. - `commit `__ + `commit `__ - Removes several pylint warnings. - `commit `__ + `commit `__ - Removes rpmlint warning on freeipa.spec. - `commit `__ + `commit `__ - Re-add function façades removed by commit 2da9088. - `commit `__ + `commit `__ `#8062 `__ @@ -4643,7 +4643,7 @@ Robert Collins (1) ---------------------------------------------------------------------------------------------- - Note sss_cache -E. - `commit `__ + `commit `__ @@ -4651,7 +4651,7 @@ Sam Bristow (1) ---------------------------------------------------------------------------------------------- - Workaround networking issues with Libvirt - `commit `__ + `commit `__ @@ -4659,7 +4659,7 @@ Sam Morris (1) ---------------------------------------------------------------------------------------------- - Debian: write out only one CA certificate per file - `commit `__ + `commit `__ `#8106 `__ @@ -4668,10 +4668,10 @@ Sumit Bose (2) ---------------------------------------------------------------------------------------------- - ipa-kdb: Remove keys if password auth is disabled - `commit `__ + `commit `__ `#8001 `__ - extdom: unify error code handling especially LDAP_NO_SUCH_OBJECT - `commit `__ + `commit `__ `#8044 `__ @@ -4680,7 +4680,7 @@ Sergio Oliveira Campos (1) ---------------------------------------------------------------------------------------------- - Add test for sssd ad trust lookup with dn in certmaprule - `commit `__ + `commit `__ @@ -4688,256 +4688,256 @@ Stanislav Levin (91) ---------------------------------------------------------------------------------------------- - ipatests: Collect EPN log for debugging - `commit `__ + `commit `__ - EPN: Allow authentication by SMTP client's certificate - `commit `__ + `commit `__ `#8580 `__ - EPN: Enable certificate validation and hostname checking - `commit `__ + `commit `__ `#8579 `__ - test_epn: Standardize EPN configs for deduplication - `commit `__ + `commit `__ - EPN: Don't downgrade security - `commit `__ + `commit `__ `#8578 `__ - ipatests: Respect platform's openssl dir - `commit `__ + `commit `__ - dns: Make use of \`resolve_address\` of a current resolver instead of the global one - `commit `__ + `commit `__ - dnspython: Add compatibility shim - `commit `__ + `commit `__ `#8383 `__ - tox: Don't expand symlinks - `commit `__ + `commit `__ `#8475 `__ - Azure: Increase verbosity for Tox task - `commit `__ + `commit `__ - deps: Require \`nss-tools\` for make's fasttest target - `commit `__ + `commit `__ - nss: Raise exception earlier on unsupported DB type - `commit `__ + `commit `__ `#8474 `__ - Azure: base: Collect both install and uninstall logs - `commit `__ + `commit `__ - Azure: Drop dependency on UsePythonVersion task - `commit `__ + `commit `__ - Azure: Add Rawhide definitions - `commit `__ + `commit `__ - ipa-dnskeysyncd: Raise loglevel to DEBUG - `commit `__ + `commit `__ `#8094 `__ - named: Include crypto policy in openssl config - `commit `__ + `commit `__ `#8094 `__ - named: Don't override custom command line options for named - `commit `__ + `commit `__ `#8094 `__ - service: Allow service to clean up its state - `commit `__ + `commit `__ `#8094 `__ - spec: Bump required openssl-pkcs11 and softhsm - `commit `__ + `commit `__ `#8094 `__ - named: Make use of 'pkcs11' OpenSSL engine for BIND on Fedora31 - `commit `__ + `commit `__ `#8094 `__ - upgrade: Handle migration of BIND OpenSSL engine - `commit `__ + `commit `__ `#8094 `__ - DNSKeySyncInstance: Populate named/ods uid/gid on instantiation - `commit `__ + `commit `__ `#8094 `__ - named: Allow using of a custom OpenSSL engine for BIND - `commit `__ + `commit `__ `#8094 `__ - named: Remove no longer used paths - `commit `__ + `commit `__ `#8094 `__ - spec: Require ldns-utils - `commit `__ + `commit `__ `#8094 `__ - pylint: Ignore \`raise-missing-from\` - `commit `__ + `commit `__ `#8468 `__ - pylint: Ignore \`super-with-arguments\` - `commit `__ + `commit `__ `#8468 `__ - pylint: Fix warning W0612(unused-variable) - `commit `__ + `commit `__ `#8468 `__ - pylint: Teach pylint about more RRs types - `commit `__ + `commit `__ `#8468 `__ - spec: Move ipa-cldap plugin out to freeipa-server-trust-ad package - `commit `__ + `commit `__ - uninstall: Clean up no longer used flag - `commit `__ + `commit `__ `#8461 `__ - uninstall: Don't fail on missing /var/lib/samba - `commit `__ + `commit `__ `#8461 `__ - rpm-spec: Don't fail on missing /etc/ssh/ssh_config - `commit `__ + `commit `__ `#8459 `__ - ipatests: Skip keyring tests on containerized platforms - `commit `__ + `commit `__ - Azure: Switch to dockerhub provider - `commit `__ + `commit `__ - ipatests: Add compatibility against python-cryptography 3.0 - `commit `__ + `commit `__ `#8428 `__ - pylint: Fix warning and error - `commit `__ + `commit `__ `#8442 `__ - ipatests: Don't turn Pytest IPA deprecation warnings into errors - `commit `__ + `commit `__ `#8435 `__ - Azure: Make dnf repos consistent - `commit `__ + `commit `__ `#8330 `__ - Azure: Always update apt cache - `commit `__ + `commit `__ - Azure: Allow chronyd to sync time - `commit `__ + `commit `__ `#8316 `__ - Azure: Add custom seccomp profile - `commit `__ + `commit `__ `#8316 `__ - Azure: Increase memory limit - `commit `__ + `commit `__ `#8264 `__ - ipatests: Collect all logs on all Unix hosts - `commit `__ + `commit `__ `#8265 `__ - ipatests: Pretty print multihost config - `commit `__ + `commit `__ `#8265 `__ - ipatests: Cleanup 'collect_logs' decorator - `commit `__ + `commit `__ `#8265 `__ - ipatests: Specify shell implementation - `commit `__ + `commit `__ `#8101 `__ - ipatests: Specify Pytest XML report schema - `commit `__ + `commit `__ `#8101 `__ - ipatests: Remove no longer needed 'skip' compatibility - `commit `__ + `commit `__ `#8101 `__ - ipatests: Remove no longer needed 'capture' compatibility - `commit `__ + `commit `__ `#8101 `__ - ipatests: Remove no longer needed 'get_marker' - `commit `__ + `commit `__ `#8101 `__ - ipatests: Remove deprecated yield_fixture - `commit `__ + `commit `__ `#8101 `__ - ipatests: Bump required Pytest - `commit `__ + `commit `__ `#8101 `__ - ipatests: Mark firewalld commands as no-op on non-firewalld distros - `commit `__ + `commit `__ `#8261 `__ - Azure: Gather coredumps - `commit `__ + `commit `__ `#8251 `__ - Azure: Allow distros to install Python they want - `commit `__ + `commit `__ `#8254 `__ - pki-proxy: Don't rely on running apache until it's configured - `commit `__ + `commit `__ `#8233 `__ - spec: Take the ownership over '/usr/libexec/ipa/custodia' - `commit `__ + `commit `__ - Azure: Report elapsed time - `commit `__ + `commit `__ - Azure: Rebalance tests - `commit `__ + `commit `__ - Azure: Skip tests requiring external DNS - `commit `__ + `commit `__ - Azure: Free Docker resources after usage - `commit `__ + `commit `__ - Azure: Preliminary check for provided limits - `commit `__ + `commit `__ - Azure: Sync Gating definitions to current PR-CI - `commit `__ + `commit `__ - pylint: Run Pylint over Azure Python scripts - `commit `__ + `commit `__ `#8202 `__ - Azure: Add support for testing multi IPA environments - `commit `__ + `commit `__ `#8202 `__ - Azure: Don't collect twice systemd_journal.log - `commit `__ + `commit `__ `#8202 `__ - yamllint: Lint all the YAML files - `commit `__ + `commit `__ `#8202 `__ - Azure: Make it possible to configure distro-specific stuff - `commit `__ + `commit `__ `#8202 `__ - Azure: Allow to run integration tests - `commit `__ + `commit `__ `#8202 `__ - Azure: Allow SSH for Docker environments - `commit `__ + `commit `__ `#8202 `__ - Azure: Allow to not provide tests to be ignored - `commit `__ + `commit `__ `#8202 `__ - ipatests: Allow zero-length arguments - `commit `__ + `commit `__ `#8173 `__ - lint: Make Pylint-2.4 happy again - `commit `__ + `commit `__ `#8116 `__ - pylint: Clean up comment - `commit `__ + `commit `__ `#8116 `__ - pylint: Synchronize pylint plugin to ipatests code - `commit `__ + `commit `__ `#8116 `__ - pylint: Teach Pylint how to handle request.context - `commit `__ + `commit `__ `#8116 `__ - ipatests: Properly kill gpg-agent - `commit `__ + `commit `__ `#7989 `__ - pytest: Warn about unittest/nose/xunit tests - `commit `__ + `commit `__ `#7989 `__ - pytest: Migrate unittest/nose to Pytest fixtures - `commit `__ + `commit `__ `#7989 `__ - pytest: Migrate xunit-style setups to Pytest fixtures - `commit `__ + `commit `__ `#7989 `__ - Fix errors found by Pylint-2.4.3 - `commit `__ + `commit `__ `#8102 `__ - Install language packs for tests - `commit `__ + `commit `__ - Restore running of 'test_ipaserver' tests on Azure - `commit `__ + `commit `__ - Setup DNS for AP Docker container - `commit `__ + `commit `__ `#8077 `__ - Fixed errors newly exposed by pylint 2.4.0 - `commit `__ + `commit `__ `#8077 `__ - Avoid use of '/tmp' for pip operations - `commit `__ + `commit `__ `#8009 `__ - Make use of Azure Pipeline slicing - `commit `__ + `commit `__ `#8008 `__ - Simplify ipa-run-tests script - `commit `__ + `commit `__ `#8007 `__ - Fix \`test_webui.test_selinuxusermap\` - `commit `__ + `commit `__ `#7996 `__, `#8005 `__ @@ -4947,110 +4947,110 @@ Sergey Orlov (45) ---------------------------------------------------------------------------------------------- - ipatests: simplify fixture - `commit `__ + `commit `__ - ipatests: refactor test for login using cifs alias principal - `commit `__ + `commit `__ - Fix password file permission - `commit `__ + `commit `__ - ipatests: mark test_trustdomain_disable test as expectedly failing - `commit `__ + `commit `__ - ipatests: add context manager for declaring part of test as xfail - `commit `__ + `commit `__ - ipatests: add utility for getting sssd version on remote host - `commit `__ + `commit `__ - update prci definitions for test_sssd.py - `commit `__ + `commit `__ - ipatests: add test for sssd behavior with disabled trustdomains - `commit `__ + `commit `__ - ipatests: add missing classes from test_nfs in nightly_previous run - `commit `__ + `commit `__ - ipatests: add missing classes from test_installation in nightly runs - `commit `__ + `commit `__ - ipatests: run test_integration/test_cert.py in PR-CI - `commit `__ + `commit `__ - ipatests: run all cases from test_integration/test_idviews.py in nightlies - `commit `__ + `commit `__ - ipatests: explicitly save output of certutil - `commit `__ + `commit `__ - ipatests: add AD DC as a DNS forwarder before establishing trust - `commit `__ + `commit `__ - ipatests: add test_automember to "previous" nightly run - `commit `__ + `commit `__ - ipatests: add test_fips to testing-fedora nightly run - `commit `__ + `commit `__ - ipatests: provide AD admin password when trying to establish trust - `commit `__ + `commit `__ `#7895 `__ - ipatests: remove test_ordering - `commit `__ + `commit `__ - ipatests: add test for SSSD updating expired cache items - `commit `__ + `commit `__ - ipatests: provide docstrings instead of imporperly placed comments - `commit `__ + `commit `__ - ipatests: remove invalid parameter from sssd.conf - `commit `__ + `commit `__ `#8219 `__ - ipatests: use remote_sssd_config to modify sssd.conf - `commit `__ + `commit `__ `#8219 `__ - ipatests: replace utility for editing sssd.conf - `commit `__ + `commit `__ `#8219 `__ - ipatests: update docstring to reflect changes in FileBackup.restore() - `commit `__ + `commit `__ - ipatests: add test_trust suite to nightly runs - `commit `__ + `commit `__ - ipatests: add check for output contents of ipa-client-samba - `commit `__ + `commit `__ `#8149 `__ - ipatests: add test_winsyncmigrate suite to nightly runs - `commit `__ + `commit `__ - ipatests: add check that ipa-adtrust-install generates sane smb.conf - `commit `__ + `commit `__ `#6951 `__ - ipatests: enable test_smb.py in gating.yaml - `commit `__ + `commit `__ - ipatests: replace ad hoc backup with FileBackup helper - `commit `__ + `commit `__ `#8115 `__ - ipatests: refactor FileBackup helper - `commit `__ + `commit `__ `#8115 `__ - ipatests: in DNS zone file add A record for name server - `commit `__ + `commit `__ - ipatests: strip newline character when getting name of temp file - `commit `__ + `commit `__ - ipatests: add test to check that only TLS 1.2 is enabled in Apache - `commit `__ + `commit `__ `#7995 `__ - ipatests: fix DNS forwarders setup for AD trust tests with non-root domains - `commit `__ + `commit `__ - ipatests: add tests for cached_auth_timeout in sssd.conf - `commit `__ + `commit `__ - ipatests: refactoring: use library function to check if selinux is enabled - `commit `__ + `commit `__ - ipatests: add new utilities for file management - `commit `__ + `commit `__ - ipatests: refactor and extend tests for IPA-Samba integration - `commit `__ + `commit `__ `#3999 `__ - ipatests: modify run_command to allow specify successful return codes - `commit `__ + `commit `__ - ipatests: add utility functions related to using and managing user accounts - `commit `__ + `commit `__ - ipatests: allow to pass additional options for clients installation - `commit `__ + `commit `__ - ipatests: new test for trust with partially unreachable AD topology - `commit `__ + `commit `__ - ipatests: mark test_domain_resolution_order as expectedly failing - `commit `__ + `commit `__ - ipatests: add test for sudo with runAsUser and domain resolution order. - `commit `__ + `commit `__ @@ -5061,22 +5061,22 @@ Sumedh Sidhaye (6) test_cert.py::TestCertmongerRekey which needs more time to execute. Adding additional 30 mins to the timeout in order to complete the test run - `commit `__ + `commit `__ - Test for removing a subgroup - `commit `__ + `commit `__ - Test to check if Certmonger tracks certs in between reboots/interruptions and while in "CA_WORKING" state - `commit `__ + `commit `__ `#8164 `__ - Added a test to check if ipa host-find --pkey-only does not return SSH public key - `commit `__ + `commit `__ `#8029 `__ - Test: Test to check whether ssh from ipa client to ipa master is successful after adding ldap_deref_threshold=0 in sssd.conf - `commit `__ + `commit `__ - Test: To check ipa replica-manage del does not fail - `commit `__ + `commit `__ `#7929 `__ @@ -5085,7 +5085,7 @@ Simo Sorce (1) ---------------------------------------------------------------------------------------------- - Make sure to have storage space for tag - `commit `__ + `commit `__ @@ -5093,7 +5093,7 @@ Stasiek Michalski (1) ---------------------------------------------------------------------------------------------- - Support for SUSE/openSUSE ipaplatform - `commit `__ + `commit `__ @@ -5102,94 +5102,94 @@ Serhii Tsymbaliuk (28) - WebUI tests: Add simple test to check topology graph page is available - `commit `__ + `commit `__ `#8523 `__ - WebUI: Fix topology graph navigation crash - `commit `__ + `commit `__ `#8523 `__ - WebUI: Fix jQuery DOM manipulation issues - `commit `__ + `commit `__ `#8507 `__ - WebUI tests: Add test case to cover user ID override feature - `commit `__ + `commit `__ `#8416 `__ - WebUI: Fix error "unknown command 'idoverrideuser_add_member'" - `commit `__ + `commit `__ `#8416 `__ - WebUI tests: Change navigation tests to find menu items using data-name instead of href - `commit `__ + `commit `__ `#7137 `__ - WebUI: Fix issue with opening links in new tab/window - `commit `__ + `commit `__ `#7137 `__ - WebUI: Fix "IPA Error 3007: RequirmentError" while adding idoverrideuser association - `commit `__ + `commit `__ `#8335 `__ - WebUI: Apply jQuery patch to fix htmlPrefilter issue - `commit `__ + `commit `__ `#8325 `__ - WebUI tests: Test all available fields on "Kerberos Ticket Policy" page - `commit `__ + `commit `__ `#8207 `__ - WebUI: Add authentication indicator specific fields to "Kerberos Ticket Policy" page - `commit `__ + `commit `__ `#8207 `__ - WebUI tests: Add confirmation step after changing default group in automember tests - `commit `__ + `commit `__ `#8322 `__ - WebUI: Add confirmation dialog for changing default user/host group - `commit `__ + `commit `__ `#8322 `__ - WebUI tests: cover membership management with UI tests - `commit `__ + `commit `__ `#8298 `__ - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - `commit `__ + `commit `__ `#8284 `__ - Web UI: Upgrade Dojo version 1.13.0 -> 1.16.2 - `commit `__ + `commit `__ `#8222 `__ - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - `commit `__ + `commit `__ `#8239 `__ - WebUI tests: Fix broken reference to parent facet in table record check - `commit `__ + `commit `__ `#8157 `__ - WebUI tests: Fix 'Button is not displayed' exception - `commit `__ + `commit `__ `#8169 `__ - WebUI: Fix notification area layout - `commit `__ + `commit `__ `#8120 `__ - WebUI: Fix adding member manager for groups and host groups - `commit `__ + `commit `__ `#8123 `__ - WebUI: Fix new test initialization on "HBAC Test" page - `commit `__ + `commit `__ `#8031 `__ - WebUI: Fix changing category on HBAC/Sudo/etc Rule pages - `commit `__ + `commit `__ `#7961 `__ - WebUI: Make 'Unlock' option is available only on locked user page - `commit `__ + `commit `__ `#5062 `__ - WebUI tests: Fix login screen loading issue - `commit `__ + `commit `__ `#8053 `__ - WebUI tests: Fix request timeout for test_trust - `commit `__ + `commit `__ `#8024 `__ - WebUI: Add PKINIT status field to 'Configuration' page - `commit `__ + `commit `__ `#7305 `__ - WebUI tests: Fix timeout issues for reset password tests - `commit `__ + `commit `__ `#8012 `__ @@ -5198,89 +5198,89 @@ Sudhir Menon (36) ---------------------------------------------------------------------------------------------- - Modified YAML files - `commit `__ + `commit `__ - ipatests: Test for IPATrustDomainsCheck with external trust to AD - `commit `__ + `commit `__ - ipatests: support subordinate upn suffixes - `commit `__ + `commit `__ - ipatests: Tests for ipahealthcheck.ds.nss_ssl - `commit `__ + `commit `__ - Added nsslapd-logging-hr-timestamps-enabled attribute in \_SINGLE_VALUE_OVERRIDE table - `commit `__ + `commit `__ - ipatests: ipa-healthcheck tests for DS checks - `commit `__ + `commit `__ - ipatests: Fix for test_ipahealthcheck_ds_riplugincheck - `commit `__ + `commit `__ `#8563 `__ - ipatests: Fix for test_ipahealthcheck_ds_encryption - `commit `__ + `commit `__ `#8560 `__ - ipatests: ipa-healthcheck test for DS RIPluginCheck - `commit `__ + `commit `__ - ipatests: ipa-healthcheck test for EncryptionCheck - `commit `__ + `commit `__ - ipatests: ipa-healthcheck test for DS BackendsCheck - `commit `__ + `commit `__ - ipatests: ipa-healthcheck fixes for tests running on RHEL - `commit `__ + `commit `__ - ipatests: ipa-healthcheck test fixes running on RHEL - `commit `__ + `commit `__ - ipatests: Install healthcheck pkg for TestIpaHealthCheckWithADtrust - `commit `__ + `commit `__ - Modified nightly YAML files to include ipa-healthcheck ExternalCA Tests - `commit `__ + `commit `__ - ipatests: Tests for ipahealthcheck tool with IPA external - `commit `__ + `commit `__ - ipatests: Test IPACertNSSTrust check when trust attributes is modified for specific cert - `commit `__ + `commit `__ - ipatests: Test to check IPACAChainExpirationCheck when IPA cacrt is renamed - `commit `__ + `commit `__ - ipatests: Test for ipa-nis-manage CLI tool. - `commit `__ + `commit `__ - ipatests: Increase timeout value in test_getcert_list_profile_using_subca - `commit `__ + `commit `__ - ipatests: Tests to check profile is displayed for getcert request. - `commit `__ + `commit `__ - Modified YAML to include healthcheck AD tests - `commit `__ + `commit `__ - ipatests: Tests to check ipahealthcheck tool with IPA-AD trust scenario - `commit `__ + `commit `__ - ipatests: Test to check warning state for TomcatFileCheck in ipahealthcheck.ipa.files - `commit `__ + `commit `__ - ipatests: Test for ipahealthcheck.ipa.files for TomcatFilecheck - `commit `__ + `commit `__ - ipatests: Test for ipahealthcheck DogtagCertsConnectivityCheck - `commit `__ + `commit `__ - ipatests: Added testcase to check that ipa-adtrust-install command runs successfully with locale set as LANG=en_IN.UTF-8 - `commit `__ + `commit `__ `#8066 `__ - ipatests: Test for ipahealthcheck tool for IPADomainCheck. - `commit `__ + `commit `__ - ipatests: Test for ipahealthcheck.ds.ruv check - `commit `__ + `commit `__ - Test for ipahealthcheck.ipa.idns check when integrated DNS is setup - `commit `__ + `commit `__ - ipatests: Added testcase to check logrotate is added for healthcheck tool - `commit `__ + `commit `__ - ipatests: check that ipa-healthcheck warns if no dna range is set - `commit `__ + `commit `__ - Adding back temp config definition removed - `commit `__ + `commit `__ - Nightly definition for ipa-healthcheck tool - `commit `__ + `commit `__ - Tier-1 test for ipa-healthcheck tool - `commit `__ + `commit `__ - Added testcase to check capitalization fix while running ipa user-mod - `commit `__ + `commit `__ `#5879 `__ @@ -5289,17 +5289,17 @@ Tibor Dudlák (5) ---------------------------------------------------------------------------------------------- - Add container environment check to replicainstall - `commit `__ + `commit `__ `#6210 `__ - Increase ntp_options test timeout - `commit `__ + `commit `__ - ipatests: refactor TestNTPoptions - `commit `__ + `commit `__ - ipatests: Add tests for interactive chronyd config - `commit `__ + `commit `__ `#7908 `__ - ipatests: Update test tasks for client to be interactive - `commit `__ + `commit `__ `#7908 `__ @@ -5308,13 +5308,13 @@ Tomas Halman (4) ---------------------------------------------------------------------------------------------- - extdom: add extdom protocol documentation - `commit `__ + `commit `__ - extdom: use sss_nss_*_timeout calls - `commit `__ + `commit `__ - extdom: plugin doesn't use timeout in blocking call - `commit `__ + `commit `__ - extdom: plugin doesn't allow @ in group name - `commit `__ + `commit `__ @@ -5322,24 +5322,24 @@ Timo Aaltonen (9) ---------------------------------------------------------------------------------------------- - ipaplatform: Use gpg instead of gpg2 - `commit `__ + `commit `__ - Debian: Fix chrony service name - `commit `__ + `commit `__ - Debian: Fix paths and service names for bind 9.16 - `commit `__ + `commit `__ - ipatests/test_installation: Use knownservices to map the service name. - `commit `__ + `commit `__ - ipatests/test_commands: Check sssd version like on test_sssd - `commit `__ + `commit `__ - Debian: Use parse_ipa_version from redhat. - `commit `__ + `commit `__ - Debian: Use enable/disable_ldap_automount() from base - `commit `__ + `commit `__ - Debian: Fix font-awesome path. - `commit `__ + `commit `__ - install: Add missing scripts to app_DATA. - `commit `__ + `commit `__ @@ -5348,15 +5348,15 @@ Thorsten Scherf (5) - Corrected some typos and added improvements to some setup instructions - `commit `__ + `commit `__ - Module added about ssh pubkey management - `commit `__ + `commit `__ - Added bash-completion rpm to build instructions. - `commit `__ + `commit `__ - Added --mkhomedir option for server and replica. - `commit `__ + `commit `__ - Added vagrant-libvirt-doc rpm and polkit rule - `commit `__ + `commit `__ @@ -5364,7 +5364,7 @@ Theodor van Nahl (1) ---------------------------------------------------------------------------------------------- - Fix UnboundLocalError in ipa-replica-manage on errors - `commit `__ + `commit `__ @@ -5373,15 +5373,15 @@ Thomas Woerner (4) - ipaserver/plugins/hbacrule: Add HBAC to memberservice_hbacsvc\* labels - `commit `__ + `commit `__ - DNS install check: Fix overlapping DNS zone from the master itself - `commit `__ + `commit `__ `#8150 `__ - Enable TestInstallMasterDNSRepeatedly in prci_definitions - `commit `__ + `commit `__ - Test repeated installation of the primary with DNS enabled and domain set - `commit `__ + `commit `__ @@ -5389,7 +5389,7 @@ Viktor Ashirov (1) ---------------------------------------------------------------------------------------------- - Update ACIs with the correct syntax - `commit `__ + `commit `__ `#8301 `__ @@ -5398,16 +5398,16 @@ Vit Mojzis (5) ---------------------------------------------------------------------------------------------- - selinux: Fix/waive issues reported by SELint - `commit `__ + `commit `__ - selinux: disable ipa_custodia when installing custom policy - `commit `__ + `commit `__ `#6891 `__ - selinux: Remove obsolete memcached access - `commit `__ + `commit `__ - selinux: move BUILD_SELINUX_POLICY definition - `commit `__ + `commit `__ - Add freeipa-selinux subpackage - `commit `__ + `commit `__ @@ -5415,9 +5415,9 @@ Yuri Chornoivan (2) ---------------------------------------------------------------------------------------------- - Translated using Weblate (Ukrainian) - `commit `__ + `commit `__ - Translated using Weblate (Ukrainian) - `commit `__ + `commit `__ @@ -5425,15 +5425,15 @@ zdover (5) ---------------------------------------------------------------------------------------------- - 100 percent complete edit - `commit `__ + `commit `__ - sixty percent edited - `commit `__ + `commit `__ - thirty percent edited - `commit `__ + `commit `__ - first tranche of edits - `commit `__ + `commit `__ - making a list's items agree with one another - `commit `__ + `commit `__ @@ -5441,7 +5441,7 @@ Zdenek Pytela (2) ---------------------------------------------------------------------------------------------- - Add ipa_pki_retrieve_key_exec() interface - `commit `__ + `commit `__ `#8488 `__ - Allow ipa-adtrust-install restart sssd and dirsrv services - `commit `__ + `commit `__ diff --git a/src/page/Releases/4.9.0rc1.rst b/src/page/Releases/4.9.0rc1.rst index ce9d8de2f..3daeca9c9 100644 --- a/src/page/Releases/4.9.0rc1.rst +++ b/src/page/Releases/4.9.0rc1.rst @@ -1420,59 +1420,59 @@ Armando Neto (25) ---------------------------------------------------------------------------------------------- - ipatests: Update PRCI Fedora 32 templates - `commit `__ + `commit `__ - ipatests: Add nightly definitions for enforcing mode - `commit `__ + `commit `__ - ipatests: Bump PR-CI templates - `commit `__ + `commit `__ `#8473 `__ - ipatests: Bump PR-CI templates - `commit `__ + `commit `__ - ipatests: bump pr-ci templates - `commit `__ + `commit `__ - ipatests: bump pr-ci templates - `commit `__ + `commit `__ - ipatests: bump prci templates - `commit `__ + `commit `__ - ipatests: bump prci templates - `commit `__ + `commit `__ - prci: update templates for new Fedora release - `commit `__ + `commit `__ - Update instructions for Fedora 28 / FreeIPA 4.6.90 - `commit `__ + `commit `__ - prci: bump version for latest and previous templates - `commit `__ + `commit `__ - prci: Bump version of all templates - `commit `__ + `commit `__ - prci: update packages for rawhide nightly runs - `commit `__ + `commit `__ - ipatests: Skip test_sss_ssh_authorizedkeys method - `commit `__ + `commit `__ `#8151 `__ - ipatests: Improve test_commands reliability - `commit `__ + `commit `__ - travis: Remove CI integration - `commit `__ + `commit `__ `#7323 `__ - prci: bump template version for temp_commit and nightly_latest - `commit `__ + `commit `__ - prci: bump fedora release - `commit `__ + `commit `__ - prci: rename definitions files and jobs to change how fedora releases are referenced - `commit `__ + `commit `__ - prci: increase timeout argument for test_sssd.py - `commit `__ + `commit `__ - prci: increase timeout for jobs that required AD - `commit `__ + `commit `__ - prci: update packages for pki and testing nightly runs - `commit `__ + `commit `__ - Update definitions for nightly tests - `commit `__ + `commit `__ - prci: fix typo on nightly test definitions - `commit `__ + `commit `__ - prci: update test definitions - `commit `__ + `commit `__ @@ -1480,373 +1480,373 @@ Alexander Bokovoy (140) ---------------------------------------------------------------------------------------------- - Become FreeIPA 4.9.0 release candidate 1 - `commit `__ + `commit `__ - Translations: update translations template - `commit `__ + `commit `__ - Add contributors from translations project at Weblate - `commit `__ + `commit `__ - Azure CI: mask chronyd in the container - `commit `__ + `commit `__ - spec: use pkgconf to find out krb5 version - `commit `__ + `commit `__ - Azure CI: use PPA to provide newer libseccomp version - `commit `__ + `commit `__ - Azure CI: use Ubuntu-20.04 image by default - `commit `__ + `commit `__ - ipa-acme-manage: user a cookie created for the communication with dogtag REST endpoints - `commit `__ + `commit `__ `#8584 `__ - ipa-otpd: fix gcc complaints in Rawhide - `commit `__ + `commit `__ `#8585 `__ - ipa-sam: fix gcc complaints on Rawhide - `commit `__ + `commit `__ `#8585 `__ - ipa-kdb: fix gcc complaints in kdb tests - `commit `__ + `commit `__ `#8585 `__ - ipa-kdb: fix gcc complaints - `commit `__ + `commit `__ `#8585 `__ - wgi/plugins.py: ignore empty plugin directories - `commit `__ + `commit `__ `#8567 `__ - ipa-kdb: fix crash in MS-PAC cache init code - `commit `__ + `commit `__ `#8566 `__ - rpcserver: fix exception handling for FAST armor failure - `commit `__ + `commit `__ - rpcserver: fallback to non-armored kinit in case of trusted domains - `commit `__ + `commit `__ - pylint: remove unused variable - `commit `__ + `commit `__ - ipa-kdb: support subordinate/superior UPN suffixes - `commit `__ + `commit `__ `#8554 `__ - Pre-populate IP addresses for the name server upgrades - `commit `__ + `commit `__ `#8518 `__ - Specify memory limits as strings for docker compose - `commit `__ + `commit `__ `#8494 `__ - ipa-kdb: test kadmin.local getprincs command - `commit `__ + `commit `__ `#8490 `__ - ipa-kdb: support getprincs request in kadmin.local - `commit `__ + `commit `__ `#8490 `__ - test_smb: make sure both smbserver and smbclient use IPA master for DNS - `commit `__ + `commit `__ `#8344 `__ - Add new contributors - `commit `__ + `commit `__ - Add alternative email to the mailmap for myself - `commit `__ + `commit `__ - master: update po/ipa.pot - `commit `__ + `commit `__ - extdom-extop: refactor tests to use unshare+chroot to override nss_files configuration - `commit `__ + `commit `__ `#8437 `__ - selinux: support running ipa-custodia with PrivateTmp=yes - `commit `__ + `commit `__ `#8395 `__ - selinux: allow oddjobd to set up ipa_helper_t context for execution - `commit `__ + `commit `__ `#8395 `__ - handle Y2038 in timestamp to datetime conversions - `commit `__ + `commit `__ `#8378 `__ - update list of contributors - `commit `__ + `commit `__ - Update translation files - `commit `__ + `commit `__ - ipatests: test that adding Active Directory user to a role makes it an administrator - `commit `__ + `commit `__ `#8357 `__ - Web UI: allow users from trusted Active Directory forest manage IPA - `commit `__ + `commit `__ `#8335 `__ - tests: account for ID overrides as members of groups and roles - `commit `__ + `commit `__ `#7255 `__ - Support adding user ID overrides as group and role members - `commit `__ + `commit `__ `#7255 `__ - idviews: handle unqualified ID override lookups from Web UI - `commit `__ + `commit `__ `#7255 `__ - support using trust-related operations in the server console - `commit `__ + `commit `__ - Add design page for managing IPA resources as a user from a trusted Active Directory forest - `commit `__ + `commit `__ `#7816 `__, `#8357 `__ - kdb: handle enterprise principal lookup in AS_REQ - `commit `__ + `commit `__ `#8319 `__ - ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset - `commit `__ + `commit `__ `#8362 `__ - azure: do not run test_commands due to failures in low memory cases - `commit `__ + `commit `__ - test_smb: test S4U2Self operation by IPA service - `commit `__ + `commit `__ `#8319 `__ - ipa-kdb: refactor principal lookup to support S4U2Self correctly - `commit `__ + `commit `__ `#8319 `__ - ipa-kdb: cache local TGS in the driver context - `commit `__ + `commit `__ `#8319 `__ - ipa-kdb: add primary group to list of groups in MS-PAC - `commit `__ + `commit `__ `#8319 `__ - ipa-kdb: Always allow services to get PAC if needed - `commit `__ + `commit `__ `#8319 `__ - ipa-kdb: add asserted identity SIDs - `commit `__ + `commit `__ `#8319 `__ - kdb: add minimal server referrals support for enterprise principals - `commit `__ + `commit `__ `#8319 `__ - ipa-tests: add a test to make sure MS-PAC is produced by KDC - `commit `__ + `commit `__ `#8319 `__ - ipa-print-pac: acquire and print PAC record for a user - `commit `__ + `commit `__ `#8319 `__ - ipa-kdb: add UPN_DNS_INFO PAC structure - `commit `__ + `commit `__ `#8319 `__ - baseldap: de-duplicate passed attributes when checking for limits - `commit `__ + `commit `__ `#8328 `__ - service delegation: allow to add and remove host principals - `commit `__ + `commit `__ `#8289 `__ - WebUI: use python3-rjsmin to minify JavaScript files - `commit `__ + `commit `__ `#8300 `__ - test_smb: test that we can auth as NetBIOS alias - `commit `__ + `commit `__ `#8291 `__ - kdb: fix memory handling in ipadb_find_principal - `commit `__ + `commit `__ `#8291 `__ - kdb: initialize flags in ipadb_delete_principal() - `commit `__ + `commit `__ `#8291 `__ - Azure Pipelines: switch to Fedora 32 - `commit `__ + `commit `__ - Azure Pipelines: Override services known to not work in containers - `commit `__ + `commit `__ - Add pytest.skip_if_container() - `commit `__ + `commit `__ - CVE-2020-1722: prevent use of too long passwords - `commit `__ + `commit `__ `#8268 `__ - Allow rename of a host group - `commit `__ + `commit `__ `#6783 `__ - Add 'api' and 'aci' targets to make - `commit `__ + `commit `__ - Remove Fedora repository fastmirror selection - `commit `__ + `commit `__ - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager - `commit `__ + `commit `__ `#7181 `__ - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN - `commit `__ + `commit `__ `#7181 `__ - ipatests: test sysaccount password change with a password policy applied - `commit `__ + `commit `__ `#7181 `__ - ipatests: allow changing sysaccount passwords as cn=Directory Manager - `commit `__ + `commit `__ `#7181 `__ - Fix indentation levels - `commit `__ + `commit `__ - ipatests: always skip additional input for group-add-member --external - `commit `__ + `commit `__ `#8236 `__ - po: update Chinese (China) translation - `commit `__ + `commit `__ - po: update Ukrainian translation - `commit `__ + `commit `__ - po: update Tajik translation timestamp - `commit `__ + `commit `__ - po: update Slovak translation timestamp - `commit `__ + `commit `__ - po: update Russian translation - `commit `__ + `commit `__ - po: update Portuguese (Brazil) translation timestamp - `commit `__ + `commit `__ - po: update Portuguese translation timestamp - `commit `__ + `commit `__ - po: update Polish translation - `commit `__ + `commit `__ - po: update Punjabi translation timestamp - `commit `__ + `commit `__ - po: update Dutch translation timestamp - `commit `__ + `commit `__ - po: update Marathi translation timestamp - `commit `__ + `commit `__ - po: update Kannada translation timestamp - `commit `__ + `commit `__ - po: update Japanese translation timestamp - `commit `__ + `commit `__ - po: update Indonesian translation timestamp - `commit `__ + `commit `__ - po: update Hungarian translation timestamp - `commit `__ + `commit `__ - po: update Hindi translation timestamp - `commit `__ + `commit `__ - po: update French translation - `commit `__ + `commit `__ - po: update Basque translation timestamp - `commit `__ + `commit `__ - po: update Spanish translation - `commit `__ + `commit `__ - po: update English (United Kingdom) translation timestamp - `commit `__ + `commit `__ - po: update German translation - `commit `__ + `commit `__ - po: update Czech translation timestamp - `commit `__ + `commit `__ - po: update Catalan translation timestamp - `commit `__ + `commit `__ - po: update Bengali translation timestamp - `commit `__ + `commit `__ - po: update ipa.pot template - `commit `__ + `commit `__ - Update translation infrastructure - `commit `__ + `commit `__ `#8159 `__ - Keep ipa.pot translation file in git for weblate - `commit `__ + `commit `__ `#8159 `__ - Do not force any particular sphinx theme - `commit `__ + `commit `__ - Override master document for ReadTheDocs - `commit `__ + `commit `__ - Move workshop documents to doc/workshop - `commit `__ + `commit `__ - Add unit 11: Kerberos ticket policy - `commit `__ + `commit `__ - Prevent adding IPA objects as external members of external groups - `commit `__ + `commit `__ `#8236 `__ - Secure AJP connector between Dogtag and Apache proxy - `commit `__ + `commit `__ `#8221 `__ - Tighten permissions on PKI proxy configuration - `commit `__ + `commit `__ `#8221 `__ - Azure Pipelines: re-enable nodejs:12 stream for Fedora 31+ - `commit `__ + `commit `__ - kdb: make sure audit_as_req callback signature change is preserved - `commit `__ + `commit `__ `#8200 `__ - adtrust: print DNS records for external DNS case after role is enabled - `commit `__ + `commit `__ `#8192 `__ - Update Azure Pipelines to use Fedora 31 - `commit `__ + `commit `__ - install/updates: move external members past schema compat update - `commit `__ + `commit `__ `#8193 `__ - Reset per-indicator Kerberos policy - `commit `__ + `commit `__ `#8153 `__ - ipa-client-samba: map domain sid of trust domain properly for display - `commit `__ + `commit `__ `#8149 `__ - DNS install check: allow overlapping zone to be from the master itself - `commit `__ + `commit `__ - covscan: free ucs2-encoded password copy when generating NTLM hash - `commit `__ + `commit `__ `#8131 `__ - covscan: free encryption types in case there is an error - `commit `__ + `commit `__ `#8131 `__ - Add Authentication Indicator Kerberos ticket policy options - `commit `__ + `commit `__ `#8001 `__ - Allow presence of LDAP attribute options - `commit `__ + `commit `__ `#8001 `__ - Do not run trust upgrade code if master lacks Samba bindings - `commit `__ + `commit `__ `#8001 `__ - Update contributors - `commit `__ + `commit `__ - Update translations - `commit `__ + `commit `__ - Add local helpers to handle unixid structure - `commit `__ + `commit `__ - adtrust: add default read_keys permission for TDO objects - `commit `__ + `commit `__ `#8067 `__ - add default access control when migrating trust objects - `commit `__ + `commit `__ `#8067 `__ - adtrust: avoid using timestamp in klist output - `commit `__ + `commit `__ `#8066 `__ - Mark failing test as xfail for use of python-dns make_ds method - `commit `__ + `commit `__ - ipa-extdom-extop: test timed out getgrgid_r - `commit `__ + `commit `__ `#8044 `__ - Update contributors - `commit `__ + `commit `__ - Update translations - `commit `__ + `commit `__ - Add Theodor van Nahl to the Contributors.txt - `commit `__ + `commit `__ - Restore SELinux context for p11-kit config overrides - `commit `__ + `commit `__ `#7810 `__ - Change RA agent certificate profile to caSubsystemCert - `commit `__ + `commit `__ - certmaprule: add negative test for altSecurityIdentities - `commit `__ + `commit `__ `#7932 `__ - certmap rules: altSecurityIdentities should only be used for trusted domains - `commit `__ + `commit `__ `#7932 `__ - Create indexes for altSecurityIdentities and ipaCertmapData attributes - `commit `__ + `commit `__ `#7932 `__, `#7933 `__ - Add altSecurityIdentities attribute from MS-WSPP schema definition - `commit `__ + `commit `__ `#7932 `__, `#7933 `__ - Use stage and phase attempt counters when saving test artifacts - `commit `__ + `commit `__ - Use any nodejs version instead of forcing a version before nodejs 11 - `commit `__ + `commit `__ - Fix rpmlint errors for Rawhide - `commit `__ + `commit `__ - Set git master to 4.9.0 - `commit `__ + `commit `__ - Changing IPA master back to git snapshots - `commit `__ + `commit `__ @@ -1854,7 +1854,7 @@ Abhijeet (1) ---------------------------------------------------------------------------------------------- - Update workshop.rst - `commit `__ + `commit `__ @@ -1862,10 +1862,10 @@ Alexandre Mulatinho (2) ---------------------------------------------------------------------------------------------- - ipa-join: allowing call with jsonrpc into freeipa API - `commit `__ + `commit `__ `#7966 `__ - ipa-scripts: fix all ipa command line scripts to operate with -I - `commit `__ + `commit `__ `#7987 `__ @@ -1875,46 +1875,46 @@ Anuja More (18) - ipatests: cleanup in test_subdomain_lookup_with_certmaprule_containing_dn - `commit `__ + `commit `__ - ipatests: xfail test with older versions of sssd - `commit `__ + `commit `__ - ipatests : Test to verify override_gid works with subdomain. - `commit `__ + `commit `__ - ipatests: xfail test with older versions of sssd - `commit `__ + `commit `__ - ipatests: Test that trusted AD users should not lose their AD domains. - `commit `__ + `commit `__ - Mark test to skip sssd-2.2.2 - `commit `__ + `commit `__ - ipatests: User and group with same name should not break reading AD user data. - `commit `__ + `commit `__ - ipatests: Added test when 2FA prompting configurations is set. - `commit `__ + `commit `__ - ipatests: SSSD should fetch external groups without any limit. - `commit `__ + `commit `__ - Update topology for test_integration/test_sssd.py - `commit `__ + `commit `__ - ipatests: Add test for ipa-extdom-extop plugin should allow @ in group name - `commit `__ + `commit `__ - After mounting "Unspecified GSS failure" should not be in logs. - `commit `__ + `commit `__ - Add xmlrpc test with input validation check for kerberos ticket policy. - `commit `__ + `commit `__ - Fix fedora version for xfail for sssd test - `commit `__ + `commit `__ - Add integration test for otp kerberos ticket policy. - `commit `__ + `commit `__ `#8001 `__ - ipatests: filter_users should be applied correctly. - `commit `__ + `commit `__ - ipatests : Login via ssh using private-key for ipa-user should work. - `commit `__ + `commit `__ - Extdom plugin should not return error (32)/'No such object' - `commit `__ + `commit `__ `#8044 `__ @@ -1923,7 +1923,7 @@ Andika Triwidada (1) ---------------------------------------------------------------------------------------------- - Translated using Weblate (Indonesian) - `commit `__ + `commit `__ @@ -1931,7 +1931,7 @@ Ariel O. Barria (1) ---------------------------------------------------------------------------------------------- - vagrant user does not have permission to write to /etc/resolv.conf - `commit `__ + `commit `__ @@ -1939,13 +1939,13 @@ Alexander Scheel (3) ---------------------------------------------------------------------------------------------- - Specify cert_paths when calling PKIConnection - `commit `__ + `commit `__ `#8379 `__ - Configure PKI AJP Secret with 256-bit secret - `commit `__ + `commit `__ `#8372 `__ - Clarify AJP connector creation process - `commit `__ + `commit `__ @@ -1953,103 +1953,103 @@ Peter Keresztes Schmidt (33) ---------------------------------------------------------------------------------------------- - WebUI: Unify adapter property definition for state evaluators - `commit `__ + `commit `__ `#8336 `__ - WebUI: Make object_class_evaluator evaluator compatible with batch responses - `commit `__ + `commit `__ `#8336 `__ - ipa-backup/restore: remove remaining chdir calls - `commit `__ + `commit `__ `#7416 `__ - ipa-join: handle JSON-RPC error codes - `commit `__ + `commit `__ `#8408 `__ - ipa-join: extract common JSON-RPC response parsing to common function - `commit `__ + `commit `__ `#8408 `__ - ipa-join: Generalize XML-RPC references in man page - `commit `__ + `commit `__ `#7966 `__ - ipa-join: Use bool type where appropriate - `commit `__ + `commit `__ `#7966 `__ - ipa-join: select {JSON,XML}-RPC at build time - `commit `__ + `commit `__ `#7966 `__ - ipa-join: implement JSON-RPC based unenrollment - `commit `__ + `commit `__ `#7966 `__ - ipa-join: extract unenrollment code common to JSON and XML-RPC to separate function - `commit `__ + `commit `__ `#7966 `__ - ipa-join: switch to jansson for json handling - `commit `__ + `commit `__ `#7966 `__ - ipa-join: buffer curl response before parsing json - `commit `__ + `commit `__ `#7966 `__ - ipa-join: improve curl error handling in JSON-RPC code - `commit `__ + `commit `__ `#7966 `__ - ipa-join: don't set TLS related curl options for JSON-RPC - `commit `__ + `commit `__ `#7966 `__ - Populate nshardwareplatform and nsosversion during join operation - `commit `__ + `commit `__ `#8370 `__ - WebUI: Fix rendering of boolean_status_formatter - `commit `__ + `commit `__ `#8396 `__ - Unify spelling of "One-Time Password" - `commit `__ + `commit `__ - WebUI: reword OTP info message displayed during PW reset - `commit `__ + `commit `__ `#5628 `__ - WebUI: move OTP to be the last field in the PW reset form - `commit `__ + `commit `__ `#5628 `__ - Split named custom config to allow changes in options stanza - `commit `__ + `commit `__ `#8287 `__ - lite-server: Fix werkzeug deprecation warnings - `commit `__ + `commit `__ `#8360 `__ - util: replace NSS usage with OpenSSL - `commit `__ + `commit `__ `#6857 `__ - util: add unit test for pw hashing - `commit `__ + `commit `__ `#6857 `__ - po: remove zanata config since translation was moved to weblate - `commit `__ + `commit `__ `#8159 `__ - Remove unused support for dm_password arg from ldapupdate.connect - `commit `__ + `commit `__ `#7610 `__ - Use ipaldap exceptions rather than ldap error codes in LDAP updater - `commit `__ + `commit `__ `#7610 `__ - Specify min and max values for TTL of a DNS record - `commit `__ + `commit `__ `#8358 `__ - WebUI: Add units to some DNS zone and IPA config fields - `commit `__ + `commit `__ - WebUI: Expose TTL of DNS records - `commit `__ + `commit `__ `#3827 `__ - WebUI: Refresh DNS record data correctly after mod operation - `commit `__ + `commit `__ `#8359 `__ - WebUI: Use data adapter to load facet header data - `commit `__ + `commit `__ `#8339 `__ - WebUI: Fix invalid RPC calls when link widget has no pkey passed - `commit `__ + `commit `__ `#8338 `__ - Remove remains of unused config options - `commit `__ + `commit `__ `#6708 `__ @@ -2058,488 +2058,488 @@ Christian Heimes (181) ---------------------------------------------------------------------------------------------- - Easier to use ipa_gethostfqdn() - `commit `__ + `commit `__ - Update debug strings to reflect new calls - `commit `__ + `commit `__ - Remove problematic optimization from gethostfqdn() - `commit `__ + `commit `__ - Replace nodename with ipa_gethostfqdn() - `commit `__ + `commit `__ `#8501 `__ - Unify access to FQDN - `commit `__ + `commit `__ `#8501 `__ - Reuse main LDAP connection - `commit `__ + `commit `__ `#8521 `__ - Speed up cainstance.migrate_profiles_to_ldap - `commit `__ + `commit `__ `#8521 `__, `#8522 `__ - Lookup ipa-ca record with NSS - `commit `__ + `commit `__ `#8501 `__, `#8521 `__, `#8529 `__ - Simplify update code - `commit `__ + `commit `__ `#8275 `__ - Don't add 127.0.0.1 to resolv.conf twice - `commit `__ + `commit `__ `#8275 `__ - Require(post) systemd with resolved enabled on F33 - `commit `__ + `commit `__ `#8275 `__ - Replace sudo with runuser - `commit `__ + `commit `__ `#8530 `__ - Use separate install logs for AD and DNS instance - `commit `__ + `commit `__ `#8528 `__ - Spawn PKI: Execute more steps early - `commit `__ + `commit `__ `#8521 `__ - Dogtag: Remove set_audit_renewal step - `commit `__ + `commit `__ `#8521 `__ - Skip offline dse.ldif patching by default - `commit `__ + `commit `__ `#8521 `__ - Remove magic sleep from create_index_task - `commit `__ + `commit `__ `#8521 `__ - Remove root-autobind configuration - `commit `__ + `commit `__ `#8521 `__ - Verify freeipa-selinux's ipa module is loaded - `commit `__ + `commit `__ - Check ca_wrapped in ipa-custodia-check - `commit `__ + `commit `__ `#8488 `__ - Retry chronyc waitsync only once - `commit `__ + `commit `__ `#8521 `__ - configure_dns_resolver: call self.restore_context - `commit `__ + `commit `__ `#8518 `__ - Drop unused extended sleep feature from Sleeper - `commit `__ + `commit `__ `#8521 `__ - Faster certmonger wait_for_request() - `commit `__ + `commit `__ `#8521 `__ - Add helper for poll/sleep loops with timeout - `commit `__ + `commit `__ `#8521 `__ - Add missing fedora_container platform members - `commit `__ + `commit `__ `#8519 `__ - Add more indices - `commit `__ + `commit `__ - Use single update LDIF for indices - `commit `__ + `commit `__ `#8493 `__ - Also backup DNS config drop-ins - `commit `__ + `commit `__ `#8275 `__ - Ensure that resolved.conf.d is accessible - `commit `__ + `commit `__ `#8275 `__ - Fix compiler warning in ipa-kdb - `commit `__ + `commit `__ - Fix compiler warnings in libotp - `commit `__ + `commit `__ - Fix compiler warning in ipa-pwd-extop - `commit `__ + `commit `__ - trust-add: Catch correct exception when chown SSSD - `commit `__ + `commit `__ `#8516 `__ - Fix nsslapd-db-lock tuning of BDB backend - `commit `__ + `commit `__ `#5914 `__, `#8515 `__ - Create systemd-resolved configuration on update - `commit `__ + `commit `__ - Configure systemd-resolved to use IPA's BIND - `commit `__ + `commit `__ `#8275 `__ - Use new API for auto-forwarders - `commit `__ + `commit `__ `#8275 `__ - Configure NetworkManager to use systemd-resolved - `commit `__ + `commit `__ `#8275 `__ - Add helpers for resolve1 and nameservers - `commit `__ + `commit `__ `#8275 `__ - Make git a build requirement - `commit `__ + `commit `__ - Delay import of psutil to avoid AVC - `commit `__ + `commit `__ `#8512 `__ - Add User and Group to all ipaplatform.constants - `commit `__ + `commit `__ - Use new classes for run_command and Service - `commit `__ + `commit `__ - Add user and group wrappers - `commit `__ + `commit `__ - Simplify LDAPUpdater - `commit `__ + `commit `__ - Add ldap_update() helper to service class - `commit `__ + `commit `__ - Don't create DS SSCA and self-signed cert - `commit `__ + `commit `__ `#8502 `__ - Duplicate CA CRT: ignore expected cert - `commit `__ + `commit `__ `#7125 `__ - Add krbPrincipalName pres index correctly - `commit `__ + `commit `__ `#8491 `__ - Only restart DS when duplicate cacrt was found - `commit `__ + `commit `__ `#7125 `__ - Treat container subplatforms like main platform - `commit `__ + `commit `__ `#8401 `__ - Don't configure authselect in containers - `commit `__ + `commit `__ `#8401 `__ - Convert ipa-httpd-pwdreader into Python script - `commit `__ + `commit `__ `#8401 `__ - Explicitly pass keytab to ipa-join - `commit `__ + `commit `__ - Write state dir to smb.conf - `commit `__ + `commit `__ `#8401 `__ - Add ipaplatform for Fedora and RHEL container - `commit `__ + `commit `__ `#8401 `__ - Allow to override ipaplatform with env var - `commit `__ + `commit `__ `#8401 `__ - Teach pylint how dnspython 2.x works - `commit `__ + `commit `__ `#8419 `__ - Add missing SELinux rule for ipa-custodia.sock - `commit `__ + `commit `__ `#8412 `__ - Make tab completion in console more useful - `commit `__ + `commit `__ - Add \__signature_\_ to plugins - `commit `__ + `commit `__ `#8388 `__ - Run test_fips in DS and PKI nightly - `commit `__ + `commit `__ - SELinux: Backport dirsrv_systemctl interface - `commit `__ + `commit `__ - RHEL 8.3 has KRB5 1.18 with KDB 8.0 - `commit `__ + `commit `__ - Terminology improvements: use block list - `commit `__ + `commit `__ - Terminology improvements: use allow list - `commit `__ + `commit `__ - Grammar: whitespace is a word - `commit `__ + `commit `__ - Terminology improvements: CA renewal - `commit `__ + `commit `__ - Use old uglifyjs on RHEL 8 - `commit `__ + `commit `__ `#8300 `__ - Build ipa-selinux package on RHEL 8 - `commit `__ + `commit `__ - Prevent local account takeover - `commit `__ + `commit `__ `#8326 `__ - Move ipa-epn systemd files and run RPM hooks - `commit `__ + `commit `__ `#8367 `__ - Auto-generated ipa-epn files to gitignore - `commit `__ + `commit `__ - Overhaul bind upgrade process - `commit `__ + `commit `__ - More upgrade tests - `commit `__ + `commit `__ - Fix named.conf named_conf_include_re - `commit `__ + `commit `__ - Remove named_validate_dnssec update step - `commit `__ + `commit `__ - Fix named.conf update bug NAMED_DNSSEC_VALIDATION - `commit `__ + `commit `__ `#8363 `__ - libotp: Replace NSS with OpenSSL HMAC - `commit `__ + `commit `__ `#6857 `__ - Include named config files in backup - `commit `__ + `commit `__ - Handle DatabaseError in RPC-Server connect() - `commit `__ + `commit `__ `#8352 `__ - Allow permissions with 'self' bindruletype - `commit `__ + `commit `__ `#8348 `__ - make: serialize strip-po / strip-pot - `commit `__ + `commit `__ `#8323 `__ - Remove obsolete BIND named.conf options - `commit `__ + `commit `__ `#8349 `__, `#8350 `__ - Add ipa-print-pac to gitignore - `commit `__ + `commit `__ - Allow dnsrecord-add --force on clients - `commit `__ + `commit `__ `#8317 `__ - Explain the effect of OPT_X_TLS_PROTOCOL_MIN - `commit `__ + `commit `__ - Check for freeipa-server-dns package early - `commit `__ + `commit `__ `#7577 `__ - Hard-code in_tree=True for tests - `commit `__ + `commit `__ `#8317 `__ - Fix detection logic for api.env.in_tree - `commit `__ + `commit `__ `#8312 `__ - Make api.env.mode consistent - `commit `__ + `commit `__ `#8313 `__ - Disable password schema update on LDAP bind - `commit `__ + `commit `__ `#8315 `__ - Use httpd 2.4 syntax for access control - `commit `__ + `commit `__ - Let GH auto-notify and auto-close stale PRs - `commit `__ + `commit `__ - Fix make devcheck - `commit `__ + `commit `__ `#8307 `__ - Simplify pki proxy conf - `commit `__ + `commit `__ - Make check_required_principal() case-insensitive - `commit `__ + `commit `__ `#8308 `__ - Make ipaplatform a regular top-level package - `commit `__ + `commit `__ `#6474 `__, `#8309 `__ - Reconfigure pycodestyle - `commit `__ + `commit `__ `#8306 `__ - Manually reformat ipapython/version.py.in - `commit `__ + `commit `__ `#8306 `__ - Silence W601 .has_key() is deprecated - `commit `__ + `commit `__ `#8306 `__ - Fix E722 do not use bare 'except' - `commit `__ + `commit `__ `#8306 `__ - Fix E721 do not compare types, use 'isinstance()' - `commit `__ + `commit `__ `#8306 `__ - Fix E714 test for object identity should be 'is not' - `commit `__ + `commit `__ `#8306 `__ - Fix E713 test for membership should be 'not in' - `commit `__ + `commit `__ `#8306 `__ - Fix E712 comparison to True / False - `commit `__ + `commit `__ `#8306 `__ - Fix E711 comparison to None - `commit `__ + `commit `__ `#8306 `__ - Fix E266 too many leading '#' for block comment - `commit `__ + `commit `__ `#8306 `__ - Address issues found by new pylint 2.5.0 - `commit `__ + `commit `__ `#8297 `__ - Require Sphinx >2.1 - `commit `__ + `commit `__ - Fix /doc/workshop subtree merge - `commit `__ + `commit `__ - Create ipasphinx package for Sphinx plugins - `commit `__ + `commit `__ - Add skip_if_platform marker - `commit `__ + `commit `__ - Define default password policy for sysaccounts - `commit `__ + `commit `__ `#8276 `__ - Use api.env.container_sysaccounts - `commit `__ + `commit `__ `#8276 `__ - Fix exception escape warning - `commit `__ + `commit `__ - Fix APIVersion.__getnewargs_\_ - `commit `__ + `commit `__ - servrole: takes_params must be a tuple - `commit `__ + `commit `__ `#8290 `__ - Improve Sphinx building and linting - `commit `__ + `commit `__ - Fix various OpenDNSSEC 2.1 issues - `commit `__ + `commit `__ `#8283 `__ - Use /run and /run/lock instead of /var - `commit `__ + `commit `__ `#8272 `__ - po: fix LINGUAS to use whitespace separation - `commit `__ + `commit `__ `#8159 `__ - SELinux: apache_manage_pid_files for F30 - `commit `__ + `commit `__ `#8241 `__ - Add pytest OpenSSH transport with password - `commit `__ + `commit `__ - Add explicit syntax language to code blocks - `commit `__ + `commit `__ - Use m2r instead of recommonmark - `commit `__ + `commit `__ - Include workshop in sphinx build - `commit `__ + `commit `__ - Fix codestyle - `commit `__ + `commit `__ - Test documentation builds in Azure - `commit `__ + `commit `__ - Include design documentation - `commit `__ + `commit `__ - Introduce FreeIPA - `commit `__ + `commit `__ - Bootstrap Sphinx documentation - `commit `__ + `commit `__ - Move freeipa-selinux dependency to freeipa-common - `commit `__ + `commit `__ `#6891 `__ - Integrate ipa_custodia policy - `commit `__ + `commit `__ `#6891 `__ - Allow hosts to read DNS records for IP SAN - `commit `__ + `commit `__ `#8098 `__ - Cleanup SELinux policy - `commit `__ + `commit `__ `#6891 `__ - Integrate SELinux policy into build system - `commit `__ + `commit `__ - dnsrecord: Treat empty list arguments correctly - `commit `__ + `commit `__ `#8196 `__ - Remove dependency on custodia package - `commit `__ + `commit `__ - lite-setup: configure lite-server test env - `commit `__ + `commit `__ - Add tracemalloc support to profile memory usage - `commit `__ + `commit `__ - Make assert_error compatible with Python 3.6 - `commit `__ + `commit `__ `#8179 `__ - Print LDAP diagnostic messages on error - `commit `__ + `commit `__ - Fix get_trusted_domain_object_from_sid() - `commit `__ + `commit `__ `#7958 `__ - Check valid before/after of external certs - `commit `__ + `commit `__ `#8142 `__ - Fix service ldap_disable() - `commit `__ + `commit `__ `#8143 `__ - Require idstart to be larger than UID_MAX - `commit `__ + `commit `__ `#8137 `__ - Fix lite-server to work with GSS_NAME - `commit `__ + `commit `__ - Fix logic of check_client_configuration - `commit `__ + `commit `__ `#8133 `__ - Optimize user-add by caching ldap2.has_upg() - `commit `__ + `commit `__ `#8134 `__ - Don't run test_smb in gating tests - `commit `__ + `commit `__ - Don't hard-code client's TLS versions and ciphers - `commit `__ + `commit `__ `#8125 `__ - Update Apache HTTPd for RHBZ#1775146 - `commit `__ + `commit `__ `#8125 `__ - Enable TLS 1.3 support on the server - `commit `__ + `commit `__ `#8125 `__ - Skip paramiko tests in FIPS mode - `commit `__ + `commit `__ `#8129 `__ - FIPS: server key has different name in FIPS mode - `commit `__ + `commit `__ - Remove FIPS noise from SSHd - `commit `__ + `commit `__ - Fix otptoken_sync plugin - `commit `__ + `commit `__ `#7804 `__ - Add test case for OTP login - `commit `__ + `commit `__ `#7804 `__ - Show group-add/remove-member-manager failures - `commit `__ + `commit `__ `#8122 `__ - Test installation with (fake) userspace FIPS - `commit `__ + `commit `__ `#8118 `__ - Use default ssh host key algorithms - `commit `__ + `commit `__ `#8082 `__ - Add tests for member management - `commit `__ + `commit `__ - Add group membership management - `commit `__ + `commit `__ `#8114 `__ - Skip commented lines after substitution - `commit `__ + `commit `__ `#8111 `__ - Block camellia in krbenctypes update in FIPS - `commit `__ + `commit `__ `#8111 `__ - Don't install a preexec_fn by default - `commit `__ + `commit `__ - Don't create log files from help scripts - `commit `__ + `commit `__ `#8075 `__ - Add new env vars to pylint plugin - `commit `__ + `commit `__ `#3999 `__ - Fix wrong use of identity operation - `commit `__ + `commit `__ `#8057 `__ - Enable literal-comparison linter again - `commit `__ + `commit `__ `#8057 `__ - Replace %{_libdir} macro in BuildRequires - `commit `__ + `commit `__ `#8056 `__ - Fix ca_initialize_hsm_state - `commit `__ + `commit `__ `#5608 `__ - Store HSM token and state - `commit `__ + `commit `__ `#5608 `__ - Allow insecure binds for migration - `commit `__ + `commit `__ `#8040 `__ - Don't move keys when key backup is disabled - `commit `__ + `commit `__ `#7677 `__ - Update comments to explain caSubsystemCert switch - `commit `__ + `commit `__ - Test external CA with DNS name constraints - `commit `__ + `commit `__ - Add PKCS#11 module name to p11helper errors - `commit `__ + `commit `__ `#8015 `__ - Use nis-domainname.service on all RH platforms - `commit `__ + `commit `__ `#8004 `__ @@ -2548,12 +2548,12 @@ Cédric Jeanneret (3) ---------------------------------------------------------------------------------------------- - Update selinux-policy minimal requirement - `commit `__ + `commit `__ - Prevents DNS Amplification Attack and allow to customize named - `commit `__ + `commit `__ `#8079 `__ - Add new tip for dependencies - `commit `__ + `commit `__ @@ -2561,19 +2561,19 @@ Changmin Teng (5) ---------------------------------------------------------------------------------------------- - Add design document - `commit `__ + `commit `__ `#8001 `__ - Modify webUI to adhere to new IPA server API - `commit `__ + `commit `__ `#8001 `__ - Implement user pre-authentication control with kdcpolicy plugin - `commit `__ + `commit `__ `#8001 `__ - Extend the list of supported pre-auth mechanisms in IPA server API - `commit `__ + `commit `__ `#8001 `__ - Add new authentication indicators in kdc.conf.template - `commit `__ + `commit `__ `#8001 `__ @@ -2582,7 +2582,7 @@ Daniel Lara Souza (1) ---------------------------------------------------------------------------------------------- - Translated using Weblate (Portuguese (Brazil)) - `commit `__ + `commit `__ @@ -2590,7 +2590,7 @@ Dinesh Prasanth M K (1) ---------------------------------------------------------------------------------------------- - Adding auto COPR builds - `commit `__ + `commit `__ @@ -2598,7 +2598,7 @@ Endi Sukma Dewata (1) ---------------------------------------------------------------------------------------------- - Removed hard-coded default profile subsystem class name - `commit `__ + `commit `__ @@ -2606,7 +2606,7 @@ Emilio Herrera (1) ---------------------------------------------------------------------------------------------- - Translated using Weblate (Spanish) - `commit `__ + `commit `__ @@ -2614,272 +2614,272 @@ François Cami (93) ---------------------------------------------------------------------------------------------- - ipatests: run freeipa-healthcheck on hidden replica - `commit `__ + `commit `__ `#8536 `__ - ipatests: tasks: add user_del - `commit `__ + `commit `__ `#8536 `__ - ipatests: kinit_as_user improvements - `commit `__ + `commit `__ `#8510 `__ - ipatests: create_active_user improvements - `commit `__ + `commit `__ `#8510 `__ - ipatests: add get_kdcinfo - `commit `__ + `commit `__ `#8510 `__ - ipatests: add check_if_sssd_is_online - `commit `__ + `commit `__ `#8510 `__ - SELinux: do not double-define node_t and pki_tomcat_cert_t - `commit `__ + `commit `__ `#8513 `__ - SELinux Policy: Allow tomcat_t to read kerberos keytabs - `commit `__ + `commit `__ `#8488 `__ - SELinux Policy: make interfaces for kernel modules non-optional - `commit `__ + `commit `__ `#8488 `__ - SELinux Policy: flag ipa_pki_retrieve_key_exec_t as domain_type - `commit `__ + `commit `__ `#8488 `__ - SELinux Policy: ipa_custodia_pki_tomcat_exec_t => ipa_custodia_pki_tomcat_t - `commit `__ + `commit `__ `#8488 `__ - SELinux Policy: ipa_pki_retrieve_key_exec_t => ipa_pki_retrieve_key_t - `commit `__ + `commit `__ `#8488 `__ - SELinux Policy: let custodia_t map custodia_tmp_t - `commit `__ + `commit `__ `#8488 `__ - SELinux: Add dedicated policy for ipa-pki-retrieve-key - `commit `__ + `commit `__ `#8488 `__ - ipatests: enhance TestSubCAkeyReplication - `commit `__ + `commit `__ `#8488 `__ - dogtaginstance.py: add --debug to pkispawn - `commit `__ + `commit `__ `#8503 `__ - ipatests: check that pkispawn log is not empty - `commit `__ + `commit `__ `#8503 `__ - SELinux Policy: let custodia replicate keys - `commit `__ + `commit `__ `#8488 `__ - ipatests: test_epn: update error messages - `commit `__ + `commit `__ `#8449 `__ - IPA-EPN: enhance input validation - `commit `__ + `commit `__ `#8444 `__ - IPA-EPN: Fix SMTP connection error handling - `commit `__ + `commit `__ `#8445 `__ - ipatests: test_epn: add test_EPN_connection_refused - `commit `__ + `commit `__ `#8445 `__ - IPA-EPN: fix configuration file typo - `commit `__ + `commit `__ - IPA-EPN: Use a helper to retrieve LDAP attributes from an entry - `commit `__ + `commit `__ - ipatests: test_epn: test_EPN_nbdays enhancements - `commit `__ + `commit `__ `#8449 `__ - ipatests: tasks.py: fix ipa-epn invocation - `commit `__ + `commit `__ `#8449 `__ - ipatests: test_otp: convert test_2fa_enable_single_prompt to run_ssh_cmd - `commit `__ + `commit `__ `#8129 `__ - ipatests: ui_driver: convert run_cmd_on_ui_host to tasks.py::run_ssh_cmd - `commit `__ + `commit `__ `#8129 `__ - ipatests: test_commands: test_login_wrong_password: Paramiko=>OpenSSH - `commit `__ + `commit `__ `#8129 `__ - ipatests: test_commands: test_ssh_from_controller: Paramiko=>OpenSSH - `commit `__ + `commit `__ `#8129 `__ - ipatests: test_commands: test_ssh_from_controller: refactor - `commit `__ + `commit `__ `#8129 `__ - ipatests: test_user_permissions: test_selinux_user_optimized Paramiko=>OpenSSH - `commit `__ + `commit `__ `#8129 `__ - ipatests: test_commands: test_ssh_key_connection: Paramiko=>OpenSSH - `commit `__ + `commit `__ `#8129 `__ - tasks: add run_ssh_cmd - `commit `__ + `commit `__ `#8129 `__ - ipatests: test_sss_ssh_authorizedkeys - `commit `__ + `commit `__ `#8151 `__ - ipatests: re-enable test_sss_ssh_authorizedkeys - `commit `__ + `commit `__ `#8151 `__ - ipatests: test_commands: test_login_wrong_password: look farther in time - `commit `__ + `commit `__ `#8432 `__ - ipatests: xfail TestIpaClientAutomountFileRestore's final test - `commit `__ + `commit `__ `#8189 `__ - ipatests: remove dnf workaround from test_epn.py - `commit `__ + `commit `__ `#8391 `__ - ipatests: display SSSD kdcinfo in test_adtrust_install.py - `commit `__ + `commit `__ - ipatests: ipa_epn: uninstall/reinstall ipa-client-epn - `commit `__ + `commit `__ `#8374 `__ - ipatests: check that EPN's configuration file is installed. - `commit `__ + `commit `__ `#8374 `__ - man pages: fix epn.conf.5 and ipa-epn.1 formatting - `commit `__ + `commit `__ - EPN: ship the configuration file. - `commit `__ + `commit `__ `#8374 `__ - ipatests: increase test_caless_TestReplicaInstall timeout - `commit `__ + `commit `__ `#8377 `__ - .mailmap: add fcami - `commit `__ + `commit `__ - IPA-EPN: Test suite. - `commit `__ + `commit `__ `#3687 `__ - IPA-EPN: First version. - `commit `__ + `commit `__ `#3687 `__ - ipatests: add KRB5_TRACE to kinit in test_adtrust_install.py - `commit `__ + `commit `__ - tasks.py: add krb5_trace to create_active_user and kinit_as_user - `commit `__ + `commit `__ - tox.ini: switch from W503 to W504 - `commit `__ + `commit `__ - IPA-EPN: Add design draft - `commit `__ + `commit `__ `#3687 `__ - doc/Makefile: use sphinx-build -W by default - `commit `__ + `commit `__ - Makefile.am: add doclint to fastcheck - `commit `__ + `commit `__ - ipatests: increase test_webui_server timeout - `commit `__ + `commit `__ `#8266 `__ - ipatests: increase test_ipahealthcheck timeout - `commit `__ + `commit `__ `#8262 `__ - ipatests: move ipa_backup to tasks - `commit `__ + `commit `__ `#8217 `__ - pr-ci templates: update test_fips timeouts - `commit `__ + `commit `__ `#8247 `__ - ipa-backup: Make sure all roles are installed on the current master. - `commit `__ + `commit `__ `#8217 `__ - test_backup_and_restore: add server role verification steps - `commit `__ + `commit `__ `#8217 `__ - ipatests: test ipa-backup with different role configurations. - `commit `__ + `commit `__ `#8217 `__ - pr-ci templates: update test_fips timeouts - `commit `__ + `commit `__ `#8247 `__ - ipatests: test_replica_promotion.py: test KRA on Hidden Replica - `commit `__ + `commit `__ `#8240 `__ - 8-sudorule.rst: add sudo and su-l as services for bob's HBAC rule. - `commit `__ + `commit `__ - ipa-restore: restart services at the end - `commit `__ + `commit `__ `#8226 `__ - ipatests: make sure ipa-client-automount reverts sssd.conf - `commit `__ + `commit `__ `#8190 `__ - ipa-client-automount: call save_domain() for each change - `commit `__ + `commit `__ `#8190 `__ - ipatests: expect "Dynamic Update" and "Bind update policy" in default dnszone\* output - `commit `__ + `commit `__ `#7938 `__ - ipaserver/plugins/dns.py: add "Dynamic Update" and "Bind update policy" to default dnszone\* output - `commit `__ + `commit `__ `#7938 `__ - ipatests/test_nfs.py: wait before umount - `commit `__ + `commit `__ `#8144 `__ - ipatests: fix pr-ci templates' indentation - `commit `__ + `commit `__ - adtrust.py: mention restarting sssd when adding trust agents - `commit `__ + `commit `__ `#8148 `__ - DSU: add Design for Disable Stale Users - `commit `__ + `commit `__ `#8104 `__ - ipatests: nightly_f29: disable TestIpaClientAutomountFileRestore - `commit `__ + `commit `__ `#8063 `__ - ipatests: temporarily remove test_smb from gating - `commit `__ + `commit `__ - ipa_client_automount.py: fix typo (idmap.conf => idmapd.conf) - `commit `__ + `commit `__ - ipapython/ipachangeconf.py: change "is not 0" for "!= 0" - `commit `__ + `commit `__ `#8057 `__ - authconfig.py: restore user-nsswitch.conf at uninstall time - `commit `__ + `commit `__ `#8054 `__ - ipatests: remove xfail in TestIpaClientAutomountFileRestore - `commit `__ + `commit `__ - ipa-client-automount: always restore nsswitch.conf at uninstall time - `commit `__ + `commit `__ `#8038 `__ - ipatests: check that ipa-client-automount restores nsswitch.conf at uninstall time - `commit `__ + `commit `__ - travis-ci: make dnf invocations more resilient - `commit `__ + `commit `__ `#8048 `__ - azure-pipelines.yml: switch to Python 3.7 - `commit `__ + `commit `__ `#8030 `__ - test_nfs.py: switch to master_3repl - `commit `__ + `commit `__ `#8027 `__ - ipatests: rename config_replica_resolvconf_with_master_data() - `commit `__ + `commit `__ - test_nfs.py: switch to tasks.config_replica_resolvconf_with_master_data() - `commit `__ + `commit `__ `#7949 `__ - prci_definitions: add master_3client topology - `commit `__ + `commit `__ `#8026 `__ - ipapython/admintool.py: use SERVER_NOT_CONFIGURED - `commit `__ + `commit `__ - ipa-client-samba: remove state on uninstall - `commit `__ + `commit `__ `#8021 `__ - ipatests: test ipa-client-samba after --uninstall - `commit `__ + `commit `__ - ipa-client-samba: remove and restore smb.conf only on first uninstall - `commit `__ + `commit `__ `#8019 `__ - ipatests: test multiple invocations of ipa-client-samba --uninstall - `commit `__ + `commit `__ - ipatests/azure: display actual dnf repo URLs - `commit `__ + `commit `__ @@ -2888,266 +2888,266 @@ Florence Blanc-Renaud (89) - ipatests: temporarily remove test_dnssec.py::TestInstallDNSSECFirst from gating - `commit `__ + `commit `__ `#8496 `__ - ipatests: ipa-acme-manage status returns 3 on a CA-less server - `commit `__ + `commit `__ `#8572 `__ - ipatests: IPADNSSystemRecordsCheck also checks for AAAA records - `commit `__ + `commit `__ `#8573 `__ - ipatests: curl outputs the cookie in stderr and not in sdtout - `commit `__ + `commit `__ `#8559 `__ - ipatests: properly handle journalctl return code - `commit `__ + `commit `__ `#8541 `__ - rpmspec: ensure ipa snippet for sshd is always included - `commit `__ + `commit `__ `#8535 `__ - ipatests: add tests to 389ds regression - `commit `__ + `commit `__ - test_smb: skip test_smb_service_s4u2self for fed31 - `commit `__ + `commit `__ `#8505 `__ - dnsforwardzone-add: support dnspython 2.0 - `commit `__ + `commit `__ `#8481 `__ - ipatests: fix bind service name - `commit `__ + `commit `__ `#8482 `__ - ipatests: add missing healthcheck test in PRCI nightlies - `commit `__ + `commit `__ - ipatests: run test_ipahealthcheck.py::TestIpaHealthCheck separately - `commit `__ + `commit `__ `#8472 `__ - ipatests: remove xfail from test_dnssec - `commit `__ + `commit `__ - ipatests: fix TestIpaHealthCheckWithoutDNS failure - `commit `__ + `commit `__ `#8447 `__ - ipatests: collect IPA_RENEWAL_LOCK file - `commit `__ + `commit `__ - ipatests: fix test_ipahealthcheck.py::TestIpaHealthCheck - `commit `__ + `commit `__ `#8439 `__ - ipatests: check KDC cert permissions in CA less install - `commit `__ + `commit `__ `#8440 `__ - CAless installation: set the perms on KDC cert file - `commit `__ + `commit `__ `#8440 `__ - ipatests: increase test_trust timeout - `commit `__ + `commit `__ - ipatests: fix test_authselect - `commit `__ + `commit `__ `#8189 `__ - ipatests: remove the xfail for test_nfs.py - `commit `__ + `commit `__ `#8189 `__ - ipa-client-install: use the authselect backup during uninstall - `commit `__ + `commit `__ `#8189 `__ - ipatests: Fix TestReplicaPromotionLevel1 - `commit `__ + `commit `__ `#8414 `__ - ipatests: fix TestUnprivilegedUserPermissions - `commit `__ + `commit `__ `#8413 `__ - sshd template must be part of client package - `commit `__ + `commit `__ `#8400 `__ - Add test_dnssec to 389ds nightly tests - `commit `__ + `commit `__ - ipa cert-show: fix the code setting revocation reason - `commit `__ + `commit `__ `#8394 `__ - Bump requires for selinux-policy - `commit `__ + `commit `__ - ipatests: fix the method adding ifp to sssd.conf - `commit `__ + `commit `__ `#8371 `__ - Unify spelling of "One-Time Password" (take 2) - `commit `__ + `commit `__ `#5628 `__, `#8381 `__ - client install: fix broken sshd config - `commit `__ + `commit `__ `#8304 `__ - ipa-client-install: use sshd drop-in configuration - `commit `__ + `commit `__ `#8304 `__ - ipatests: Update the pki-master-f32 image version - `commit `__ + `commit `__ - ipatests: add a test for ipa-replica-install --setup-ca --http-cert-file - `commit `__ + `commit `__ `#8366 `__ - ipa-replica-install: --setup-ca and \*-cert-file are mutually exclusive - `commit `__ + `commit `__ `#8366 `__ - ipatests: fix the disable_dnssec_validation method - `commit `__ + `commit `__ `#8364 `__ - ipatests: Check if user with 'User Administrator' role can delete group. - `commit `__ + `commit `__ `#6884 `__ - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found - `commit `__ + `commit `__ `#8311 `__ - Man pages: fix syntax issues - `commit `__ + `commit `__ `#8273 `__ - ipatests: wait for SSSD to become online in backup/restore tests - `commit `__ + `commit `__ `#8228 `__ - xmlrpc tests: add a test for idview-apply on a master - `commit `__ + `commit `__ `#5662 `__ - idviews: prevent applying to a master - `commit `__ + `commit `__ `#5662 `__ - opendnssec2.1 support: move all ods tasks to specific file - `commit `__ + `commit `__ `#8214 `__ - DnsSecMaster migration: move the call to zonelist export later - `commit `__ + `commit `__ `#8214 `__ - Support OpenDNSSEC 2.1: new ods-signer protocol - `commit `__ + `commit `__ `#8214 `__ - With opendnssec 2, read the zone list from file - `commit `__ + `commit `__ `#8214 `__ - Remove the from opendnssec conf - `commit `__ + `commit `__ `#8214 `__ - Support opendnssec 2.1.6 - `commit `__ + `commit `__ `#8214 `__ - selinux policy: add the right context for org.freeipa.server.trust-enable-agent - `commit `__ + `commit `__ `#7600 `__ - ipa-adtrust-install: remote command fails if ipa-server-trust-ad pkg missing - `commit `__ + `commit `__ `#7600 `__ - ipatests: add test for ipa-adtrust-install --add-agents - `commit `__ + `commit `__ `#7600 `__ - ipa-adtrust-install: run remote configuration for new agents - `commit `__ + `commit `__ `#7600 `__ - Privilege: add a helper checking if a principal has a given privilege - `commit `__ + `commit `__ `#7600 `__ - ipatests: fix TestSubCAkeyReplication - `commit `__ + `commit `__ - Part2: Don't fully quality the FQDN in ssbrowser.html for Chrome - `commit `__ + `commit `__ `#8201 `__ - ipatests: fix modify_sssd_conf() - `commit `__ + `commit `__ - ipatests: update packages for rawhide and updates-testing nightlies - `commit `__ + `commit `__ - ipatests: fix backup and restore - `commit `__ + `commit `__ `#8170 `__ - AD user without override receive InternalServerError with API - `commit `__ + `commit `__ `#8163 `__ - ipa-cacert-manage man page: fix indentation - `commit `__ + `commit `__ `#8138 `__ - ipatests: fix TestMigrateDNSSECMaster teardown - `commit `__ + `commit `__ `#7985 `__ - trust upgrade: ensure that host is member of adtrust agents - `commit `__ + `commit `__ - ipatests: fix test_crlgen_manage - `commit `__ + `commit `__ - ipatests: fix teardown - `commit `__ + `commit `__ - ipatests: generic uninstall should call ipa server-del - `commit `__ + `commit `__ `#7985 `__ - Nightly definition: use right template for krbtpolicy - `commit `__ + `commit `__ `#8001 `__ - test_ipalib: add test for DNParam class - `commit `__ + `commit `__ `#8097 `__ - XMLRPCtest: add a test for add-certmapdata with multiple subject/issuer - `commit `__ + `commit `__ `#8097 `__ - DNParam: raise Exception when multiple values provided to a 1-val param - `commit `__ + `commit `__ `#8097 `__ - smartcard: make the ipa-advise script compatible with authselect/authconfig - `commit `__ + `commit `__ `#8113 `__ - ipa-backup: fix python2 issue with os.mkdir - `commit `__ + `commit `__ `#8099 `__ - ipa-server-certinstall manpage: add missing options - `commit `__ + `commit `__ `#8086 `__ - ipatests: fix test_replica_promotion.py::TestHiddenReplicaPromotion - `commit `__ + `commit `__ `#8070 `__ - ipatests: add XMLRPC test for user-add when UPG plugin is disabled - `commit `__ + `commit `__ `#4972 `__ - ipa user_add: do not check group if UPG is disabled - `commit `__ + `commit `__ `#4972 `__ - ipatests: fix fedora29 nightly definition - `commit `__ + `commit `__ - replica install: enforce --server arg - `commit `__ + `commit `__ `#7566 `__ - ipatests: ensure that backup/restore restores pkcs 11 modules config file - `commit `__ + `commit `__ `#8073 `__ - ipa-backup: backup the PKCS module config files setup by IPA - `commit `__ + `commit `__ `#8073 `__ - ipatests: enable 389-ds audit log and collect audit file - `commit `__ + `commit `__ `#8064 `__ - ipatests: add nightly definition for DS integration tests - `commit `__ + `commit `__ - config plugin: replace 'is 0' with '== 0' - `commit `__ + `commit `__ `#8057 `__ - ipatests: fix wrong xfail in test_domain_resolution_order - `commit `__ + `commit `__ `#8052 `__ - Nightly test definition: add missing tests - `commit `__ + `commit `__ - xmlrpc test: add test for preserved > stage user - `commit `__ + `commit `__ `#7597 `__ - user-stage: transfer all attributes from preserved to stage user - `commit `__ + `commit `__ `#7597 `__ - test_xmlrpc: fix TestAutomemberFindOrphans.test_find_orphan_automember_rules - `commit `__ + `commit `__ `#7902 `__ - Azure pipeline: report failure in prepare-build step - `commit `__ + `commit `__ `#8022 `__ - upgrade: remove ipaCert and key from /etc/httpd/alias - `commit `__ + `commit `__ `#7329 `__ @@ -3156,9 +3156,9 @@ Francisco Trivino (2) ---------------------------------------------------------------------------------------------- - prci: bump template version and fix test_smb gating definition - `commit `__ + `commit `__ - prci: increase gating tasks priority - `commit `__ + `commit `__ @@ -3166,368 +3166,368 @@ Fraser Tweedale (141) ---------------------------------------------------------------------------------------------- - mailmap: add ftweedal - `commit `__ + `commit `__ - dns: allow PTR records in arbitrary zones - `commit `__ + `commit `__ `#5566 `__ - ipa_sam: do not modify static buffer holding fqdn - `commit `__ + `commit `__ `#8501 `__ - spec: require pki-acme if pki-ca >= 10.10 - `commit `__ + `commit `__ - install: simplify host name verification - `commit `__ + `commit `__ - delete unused subroutine get_host_name() - `commit `__ + `commit `__ - certupdate: update config after deployment becomes CA-ful - `commit `__ + `commit `__ `#7188 `__ - cainstance: extract function import_ra_key - `commit `__ + `commit `__ `#7188 `__ - cainstance.update_ipa_conf: allow specifying ca_host - `commit `__ + `commit `__ `#7188 `__ - acme: delete ACME RA account on server uninstall - `commit `__ + `commit `__ `#4751 `__ - acme: enable mod_md tests on Fedora - `commit `__ + `commit `__ `#4751 `__ - acme: add certbot dns-01 test - `commit `__ + `commit `__ `#4751 `__ - acme: add certbot dns script - `commit `__ + `commit `__ `#4751 `__ - acme: add revocation test - `commit `__ + `commit `__ `#4751 `__ - acme: handle alternative schema ldif location - `commit `__ + `commit `__ `#4751 `__ - acme: add mod_md integration test - `commit `__ + `commit `__ `#4751 `__ - acme: add integration tests to gating - `commit `__ + `commit `__ `#4751 `__ - acme: add integration test to nightly CI - `commit `__ + `commit `__ `#4751 `__ - acme: add integration test - `commit `__ + `commit `__ `#4751 `__ - acme: add ipa-acme-manage command - `commit `__ + `commit `__ `#4751 `__ - acme: configure engine.conf and disable by default - `commit `__ + `commit `__ `#4751 `__ - acme: configure ACME service on upgrade - `commit `__ + `commit `__ `#4751 `__ - acme: add certificate profile - `commit `__ + `commit `__ `#4751 `__ - acme: add Dogtag ACL to allow ACME agents to revoke certs - `commit `__ + `commit `__ `#4751 `__ - acme: create ACME RA account - `commit `__ + `commit `__ `#4751 `__ - dogtaginstance: add ensure_group method - `commit `__ + `commit `__ `#4751 `__ - dogtaginstance: extract user creation to subroutine. - `commit `__ + `commit `__ `#4751 `__ - acme: set up ACME service when configuring CA - `commit `__ + `commit `__ `#4751 `__ - acme: ipa-pki-proxy: proxy /acme to Dogtag - `commit `__ + `commit `__ `#4751 `__ - certupdate: only add LWCA tracking requests on CA servers - `commit `__ + `commit `__ `#8399 `__ - tests: fix cleanup for CATracker - `commit `__ + `commit `__ `#5011 `__ - ca plugin: improve doc - `commit `__ + `commit `__ `#5011 `__ - ca-del: require CA to already be disabled - `commit `__ + `commit `__ `#5011 `__ - cainstance.is_crlgen_enabled: handle missing ipa-pki-proxy.conf - `commit `__ + `commit `__ - ra.get_certificate: use REST API - `commit `__ + `commit `__ `#3473 `__, `#5011 `__ - extract virtual operation access check subroutine - `commit `__ + `commit `__ `#5011 `__, `#6423 `__ - Define errors_by_code in ipalib.errors - `commit `__ + `commit `__ `#5011 `__ - fix iPAddress cert issuance for >1 host/service - `commit `__ + `commit `__ `#8368 `__ - fix cert-find errors in CA-less deployment - `commit `__ + `commit `__ `#8369 `__ - upgrade: avoid stopping certmonger when fixing requests - `commit `__ + `commit `__ `#8186 `__ - httpinstance: retry request without ipa-ca.$DOMAIN dnsName on failure - `commit `__ + `commit `__ `#8186 `__ - ipatests: check HTTP certificate contains ipa-ca.$DOMAIN dnsname - `commit `__ + `commit `__ `#8186 `__ - upgrade: add ipa-ca.$DOMAIN alias to HTTP certificate - `commit `__ + `commit `__ `#8186 `__ - httpinstance: add ipa-ca.$DOMAIN alias in initial request - `commit `__ + `commit `__ `#8186 `__ - cert-request: allow ipa-ca.$DOMAIN dNSName for IPA servers - `commit `__ + `commit `__ `#8186 `__ - httpinstance: add fqdn and ipa-ca alias to Certmonger request - `commit `__ + `commit `__ `#8186 `__ - certmonger: support dnsname as request search criterion - `commit `__ + `commit `__ `#8186 `__ - certmonger: move 'criteria' description to module docstring - `commit `__ + `commit `__ `#8186 `__ - certmonger: avoid mutable default argument - `commit `__ + `commit `__ `#8186 `__ - add resources section - `commit `__ + `commit `__ - typospotting - `commit `__ + `commit `__ - suggest \`ipa help topics\` - `commit `__ + `commit `__ - lots of minor tweaks and updates - `commit `__ + `commit `__ - rename certificates module - `commit `__ + `commit `__ - Vagrantfile: set DNS configuration in network-scripts - `commit `__ + `commit `__ - add more prerequisites and fix some links - `commit `__ + `commit `__ - add inter-module links - `commit `__ + `commit `__ - split workshop into separate files - `commit `__ + `commit `__ - add sudorule and selinux units to TOC - `commit `__ + `commit `__ - add selinuxusermap unit - `commit `__ + `commit `__ - add sudorule unit - `commit `__ + `commit `__ - minor editoral improvements - `commit `__ + `commit `__ - Change workshop "Modules" to "Units" - `commit `__ + `commit `__ - prep: updates for f24, box version 0.0.7 - `commit `__ + `commit `__ - certs: request SAN DNS name - `commit `__ + `commit `__ - updates for FreeIPA 4.3 - `commit `__ + `commit `__ - typospotting - `commit `__ + `commit `__ - add facilitator notes; remove feedback link - `commit `__ + `commit `__ - building: note disk and memory requirements - `commit `__ + `commit `__ - bump libvirt vm mem to 1G; other fixes - `commit `__ + `commit `__ - update feedback url - `commit `__ + `commit `__ - update clone url - `commit `__ + `commit `__ - add internal links to modules - `commit `__ + `commit `__ - symlink README to workshop.rst - `commit `__ + `commit `__ - add replica installation module - `commit `__ + `commit `__ - update to f23 - `commit `__ + `commit `__ - add vagrant box building instructions - `commit `__ + `commit `__ - workshop: remove references to freeipa-workshop-vagrantfile repo - `commit `__ + `commit `__ - enable and start httpd on client - `commit `__ + `commit `__ - typospotting - `commit `__ + `commit `__ - initial commit - `commit `__ + `commit `__ - remove proposal - `commit `__ + `commit `__ - add copyright notice - `commit `__ + `commit `__ - freeipa-workshop: fix mod_authnz_pam link - `commit `__ + `commit `__ - merge (most of) zdover's edits - `commit `__ + `commit `__ - 20151029-osdc-freeipa-workshop: add app.py - `commit `__ + `commit `__ - osdc-freeipa-workshop: add certificate management module - `commit `__ + `commit `__ - osdc-freeipa-workshop: add OS X and update Debian/Ubuntu details - `commit `__ + `commit `__ - osdc-freeipa-workshop: add debian/ubuntu prep instructions - `commit `__ + `commit `__ - osdc-freeipa-workshop: support vagrant-libvirt on Fedora - `commit `__ + `commit `__ - osdc-freeipa-workshop: presentation, minor curriculum edits - `commit `__ + `commit `__ - osdc-freeipa-workshop: typospotting - `commit `__ + `commit `__ - osdc-freeipa-workshop: remove definition list of VMs - `commit `__ + `commit `__ - osdc-freeipa-workshop: add missing dnf install vagrant - `commit `__ + `commit `__ - osdc-freeipa-workshop: clarify prep goals and VirtualBox version - `commit `__ + `commit `__ - osdc-freeipa-workshop: update troubleshooting doc - `commit `__ + `commit `__ - osdc-freeipa-workshop: incorporate wibrown\'s feedback - `commit `__ + `commit `__ - osdc-freeipa-workshop: update f22 installation steps - `commit `__ + `commit `__ - osdc-freeipa-workshop: add Windows prep details - `commit `__ + `commit `__ - osdc-freeipa-workshop: add Vagrantfile clone instructions and curriculum overview - `commit `__ + `commit `__ - osdc-freeipa-workshop: remove vagrant-hostmanager steps, add editing notes - `commit `__ + `commit `__ - osdc-freeipa-workshop: selinux and other minor fixes - `commit `__ + `commit `__ - osdc-freeipa-workshop: add mod_lookup_identity and mod_authnz_pam sections - `commit `__ + `commit `__ - osdc-freeipa-workshop: add mod_auth_gssapi section - `commit `__ + `commit `__ - sudo make me a sandwich - `commit `__ + `commit `__ - osdc-freeipa-workshop: add rpmfusion instructions - `commit `__ + `commit `__ - osdc-freeipa-workshop: external authnz module (WIP); minor fixes - `commit `__ + `commit `__ - osdc-freeipa-workshop: add initial workshop modules - `commit `__ + `commit `__ - fix osdc2015 and lca2016 dates - `commit `__ + `commit `__ - Do not renew externally-signed CA as self-signed - `commit `__ + `commit `__ `#8176 `__ - ipatests: add test for certinstall with notBefore in the future - `commit `__ + `commit `__ `#8142 `__ - Fix test regressions caused by certificate validation changes - `commit `__ + `commit `__ `#8142 `__ - ipatests: assert_error: allow regexp match - `commit `__ + `commit `__ `#8142 `__ - removed unused function export_pem_p12 - `commit `__ + `commit `__ - test_integration: add tests for custom CA subject DN - `commit `__ + `commit `__ `#8084 `__ - upgrade: fix ipakra people entry 'description' attribute - `commit `__ + `commit `__ `#8084 `__ - krainstance: set correct issuer DN in uid=ipakra entry - `commit `__ + `commit `__ `#8084 `__ - Bump Dogtag min version to 10.7.3 - `commit `__ + `commit `__ `#8020 `__ - ipa-pki-retrieve-key: request AES encryption (with fallback) - `commit `__ + `commit `__ `#8020 `__ - NSSWrappedCertDB: accept optional symmetric algorithm - `commit `__ + `commit `__ `#8020 `__ - IPASecStore: support extra key arguments - `commit `__ + `commit `__ `#8020 `__ - dsinstance: add proflie when tracking certificate - `commit `__ + `commit `__ `#7991 `__ - ipatests: test ipa-server-upgrade in CA-less deployment - `commit `__ + `commit `__ `#7991 `__ - Use RENEWAL_CA_NAME and RA_AGENT_PROFILE constants - `commit `__ + `commit `__ `#7991 `__ - cainstance: add profile to IPA RA tracking request - `commit `__ + `commit `__ `#7991 `__ - upgrade: fix spurious certmonger re-tracking - `commit `__ + `commit `__ `#7991 `__ - upgrade: log missing/misconfigured tracking requests - `commit `__ + `commit `__ `#7991 `__ - upgrade: update KRA tracking requests - `commit `__ + `commit `__ `#7991 `__ - upgrade: always add profile to tracking requests - `commit `__ + `commit `__ `#7991 `__ - dogtaginstance: avoid special cases for Server-Cert - `commit `__ + `commit `__ `#7991 `__ - dogtag-ipa-ca-renew-agent: always use profile-based renewal - `commit `__ + `commit `__ `#7991 `__ - certmonger: use long options when invoking dogtag-ipa-renew-agent - `commit `__ + `commit `__ `#7991 `__ - upgrade: add profile to Dogtag tracking requests - `commit `__ + `commit `__ `#7991 `__ - dogtaginstance: add profile to tracking requests - `commit `__ + `commit `__ `#7991 `__ - ci: add --external-ca-profile tests to gating - `commit `__ + `commit `__ `#7548 `__ - ci: add --external-ca-profile tests to nightly - `commit `__ + `commit `__ `#7548 `__ - Collapse --external-ca-profile tests into single class - `commit `__ + `commit `__ `#7548 `__ - Add more tests for --external-ca-profile handling - `commit `__ + `commit `__ `#7548 `__ - Fix use of incorrect variable - `commit `__ + `commit `__ `#5608 `__, `#7548 `__ - install: fix --external-ca-profile option - `commit `__ + `commit `__ `#5608 `__, `#7548 `__ - move MSCSTemplate classes to ipalib - `commit `__ + `commit `__ `#7548 `__ @@ -3536,11 +3536,11 @@ Gaurav Talreja (3) ---------------------------------------------------------------------------------------------- - Normalize title of test external_ca in prci-definition - `commit `__ + `commit `__ - Normalize test definations titles - `commit `__ + `commit `__ - prci: bump template version for nightly_rawhide - `commit `__ + `commit `__ @@ -3548,9 +3548,9 @@ Isaac Boukris (2) ---------------------------------------------------------------------------------------------- - Fix legacy S4U2Proxy in DAL v8 support - `commit `__ + `commit `__ - Fix DAL v8 support - `commit `__ + `commit `__ @@ -3559,10 +3559,10 @@ Jeremy Frasier (2) - replica: Add tests to ensure the ipaapi user is allowed access to ifp on replicas - `commit `__ + `commit `__ `#8403 `__ - replica: Ensure the ipaapi user is allowed to access ifp on replicas - `commit `__ + `commit `__ `#8403 `__ @@ -3571,13 +3571,13 @@ Jayesh Garg (4) ---------------------------------------------------------------------------------------------- - Nightly definations commit - `commit `__ + `commit `__ - Test for ipa-ca-install on replica - `commit `__ + `commit `__ - Test ipa-getkeytab quiet mode, encryptons - `commit `__ + `commit `__ - Test if ipactl starts services stopped by systemctl - `commit `__ + `commit `__ @@ -3585,7 +3585,7 @@ Julian Gethmann (1) ---------------------------------------------------------------------------------------------- - Fix typo in idrange.py docstring - `commit `__ + `commit `__ @@ -3593,14 +3593,14 @@ Kaleemullah Siddiqui (4) ---------------------------------------------------------------------------------------------- - Tests for fake_mname parameter setup - `commit `__ + `commit `__ - Test for check of HostKeyAlgorithms option in ssh_config - `commit `__ + `commit `__ `#8082 `__ - Fix for regression from PR#3962 - `commit `__ + `commit `__ - Tests for backup-restore when pkg required is missing - `commit `__ + `commit `__ `#7630 `__ @@ -3609,7 +3609,7 @@ Christian Hermann (1) ---------------------------------------------------------------------------------------------- - configure.ac: don't rely on bashisms - `commit `__ + `commit `__ @@ -3617,7 +3617,7 @@ Miro Hrončok (1) ---------------------------------------------------------------------------------------------- - Fix a syntax typo - `commit `__ + `commit `__ @@ -3626,7 +3626,7 @@ MIZUTA Takeshi (1) - Add config that maintains existing content to ipa-client-install manpage - `commit `__ + `commit `__ @@ -3634,25 +3634,25 @@ Michal Polovka (7) ---------------------------------------------------------------------------------------------- - ipatests: test_epn: test_EPN_config_file: Package name fix - `commit `__ + `commit `__ - ipatests: test_epn: Fix package installation - `commit `__ + `commit `__ - Test for healthcheck being run on replica with stopped master - `commit `__ + `commit `__ - Test for output being indented by default value if not stated implicitly. - `commit `__ + `commit `__ - ipatests: add tests for ipa host-add with non-default maxhostnamelength - `commit `__ + `commit `__ `#2018 `__ - ipatests: fix topology for TestIpaNotConfigured in PR-CI nightly definitions - `commit `__ + `commit `__ `#6843 `__, `#8055 `__ - ipatests: Test for ipa-backup with ipa not configured - `commit `__ + `commit `__ `#6843 `__ @@ -3661,16 +3661,16 @@ Mark Reynolds (4) ---------------------------------------------------------------------------------------------- - Reorder creation of the CA mapping tree and database backend - `commit `__ + `commit `__ `#8558 `__ - Increase replication changelog trimming to 30 days - `commit `__ + `commit `__ `#8464 `__ - Issue 8456 - Add new aci's for the new replication changelog entries - `commit `__ + `commit `__ `#8456 `__ - Issue 8407 - Support changelog integration into main database - `commit `__ + `commit `__ `#8407 `__ @@ -3679,75 +3679,75 @@ Mohammad Rizwan (28) ---------------------------------------------------------------------------------------------- - Move acme client installation part to classmethod - `commit `__ + `commit `__ - PEP8 fixes for test_acme.py - `commit `__ + `commit `__ - External-CA scenarios for ACME service - `commit `__ + `commit `__ `#4751 `__ - ipatests: Check if ACME is enabled on all CA servers - `commit `__ + `commit `__ `#8524 `__ - PEP8 fixes - `commit `__ + `commit `__ - ipatests: add --skip-overlap-check option to prepare_reverse_zone() - `commit `__ + `commit `__ - ipatests: Add PTR record for IP SAN - `commit `__ + `commit `__ - ipatests: Test certmonger rekey command works fine - `commit `__ + `commit `__ - Xfail test for sssd < 2.3.0 - `commit `__ + `commit `__ - ipatests: Test ipa user login with wrong password - `commit `__ + `commit `__ - WebUI tests: fix PEP8 issues in test_webui/test_user.py - `commit `__ + `commit `__ - webui: check if notification area doesn't intercept menu button - `commit `__ + `commit `__ `#8120 `__ - ipatests: Test deletion of required principal throws proper error - `commit `__ + `commit `__ `#7695 `__ - Display principal name while del required principal - `commit `__ + `commit `__ `#7695 `__ - ipatests: Test to check password leak in apache error log - `commit `__ + `commit `__ `#8017 `__ - ipatests:Test if proper error thrown when AD user tries to run IPA commands - `commit `__ + `commit `__ `#8163 `__ - ipatests: Skip test using paramiko when FIPS is enabled - `commit `__ + `commit `__ - Test if schema-compat-entry-attribute is set - `commit `__ + `commit `__ `#8193 `__ - Test if schema-compat-entry-attribute is set - `commit `__ + `commit `__ `#8193 `__ - Test if getcert creates cacert file with -F option - `commit `__ + `commit `__ `#8105 `__ - Move wait_for_request() method to tasks.py - `commit `__ + `commit `__ - Test if server installer lock Bind9 recursion - `commit `__ + `commit `__ `#8079 `__ - Add certmonger wait_for_request that uses run_command - `commit `__ + `commit `__ - Test if certmonger reads the token in HSM - `commit `__ + `commit `__ - Test AES SHA 256 and 384 Kerberos enctypes enabled - `commit `__ + `commit `__ `#8110 `__ - Add test to nightly yamls - `commit `__ + `commit `__ - Installation of replica against a specific server - `commit `__ + `commit `__ `#7566 `__ - Check file ownership and permission for dirsrv log instance - `commit `__ + `commit `__ `#7725 `__ @@ -3756,7 +3756,7 @@ ndehadra (1) ---------------------------------------------------------------------------------------------- - Hidden Replica: Add a test for Automatic CRL configuration - `commit `__ + `commit `__ `#7307 `__ @@ -3765,13 +3765,13 @@ Weblate (4) ---------------------------------------------------------------------------------------------- - Update translation files - `commit `__ + `commit `__ - Update translation files - `commit `__ + `commit `__ - Update translation files - `commit `__ + `commit `__ - Update translation files - `commit `__ + `commit `__ @@ -3779,9 +3779,9 @@ Oğuz Ersen (2) ---------------------------------------------------------------------------------------------- - Translated using Weblate (Turkish) - `commit `__ + `commit `__ - Translated using Weblate (Turkish) - `commit `__ + `commit `__ @@ -3789,7 +3789,7 @@ Spencer E. Olson (1) ---------------------------------------------------------------------------------------------- - Fixes debian path for IPA_CUSTODIA_HANDLER - `commit `__ + `commit `__ @@ -3797,7 +3797,7 @@ Piotr Drąg (1) ---------------------------------------------------------------------------------------------- - Translated using Weblate (Polish) - `commit `__ + `commit `__ @@ -3805,9 +3805,9 @@ Petr Voborník (2) ---------------------------------------------------------------------------------------------- - baseuser: fix ipanthomedirectorydrive option name - `commit `__ + `commit `__ - webui: hide user attributes for SMB services section if empty - `commit `__ + `commit `__ `#8336 `__ @@ -3816,7 +3816,7 @@ Rafael Fontenelle (1) ---------------------------------------------------------------------------------------------- - Translated using Weblate (Portuguese (Brazil)) - `commit `__ + `commit `__ @@ -3824,369 +3824,369 @@ Rob Crittenden (116) ---------------------------------------------------------------------------------------------- - ipatests: Test that password reset unlocks users too - `commit `__ + `commit `__ `#8551 `__ - On password reset also set krbLastAdminUnlock to unlock account - `commit `__ + `commit `__ `#8551 `__ - Wrap libpwquality PKG_CHECK_MODULES in ENABLE_SERVER test - `commit `__ + `commit `__ `#2445 `__, `#298 `__, `#5948 `__, `#6964 `__ - Catch EmptyResult exception in update_idranges - `commit `__ + `commit `__ `#8555 `__ - Test that ipapwpolicy objectclass is added on upgrade - `commit `__ + `commit `__ `#8555 `__ - Add ipwpwdpolicy objectclass to all policies on upgrade - `commit `__ + `commit `__ `#8555 `__ - ipatests: Add tests for requiring ipa-ca SAN when ACME is enabled - `commit `__ + `commit `__ `#8498 `__ - Change the return codes of ipa-acme-manage - `commit `__ + `commit `__ `#8498 `__ - Require an ipa-ca SAN on 3rd party certs if ACME is enabled - `commit `__ + `commit `__ `#8498 `__ - ipatests: Collect the let's encrypt log - `commit `__ + `commit `__ `#8524 `__ - Add a status option to ipa-acme-manage - `commit `__ + `commit `__ `#8524 `__ - Don't install ACME if full support is not available - `commit `__ + `commit `__ `#8524 `__ - Centralize enable/disable of the ACME service - `commit `__ + `commit `__ `#8524 `__ - Let dogtag.py be imported if the api is not initialized - `commit `__ + `commit `__ `#8524 `__ - Enable importing LDIF files not shipped by IPA - `commit `__ + `commit `__ `#8524 `__ - Use a state to determine if a 389-ds upgrade is in progress - `commit `__ + `commit `__ `#7534 `__ - ipatests: Add test_pwpolicy to nightly runs - `commit `__ + `commit `__ `#2445 `__, `#298 `__, `#5948 `__, `#6964 `__ - Requirements and design for libpwquality integration - `commit `__ + `commit `__ `#2445 `__, `#298 `__, `#5948 `__, `#6964 `__ - Add SELinux policy so kadmind can read the crackdb dictionary - `commit `__ + `commit `__ `#2445 `__, `#298 `__, `#5948 `__, `#6964 `__ - ipatests: add test for password policies - `commit `__ + `commit `__ `#2445 `__, `#298 `__, `#5948 `__, `#6964 `__ - Add a raiseonerr option to ldappasswd_user_change - `commit `__ + `commit `__ `#2445 `__, `#298 `__, `#5948 `__, `#6964 `__ - Pass the user to the password policy check in the kdb driver - `commit `__ + `commit `__ `#2445 `__, `#298 `__, `#5948 `__, `#6964 `__ - Add a unit test for libpwquality-based password policy - `commit `__ + `commit `__ `#2445 `__, `#298 `__, `#5948 `__, `#6964 `__ - Extend password policy to evaluate passwords using libpwpolicy - `commit `__ + `commit `__ `#2445 `__, `#298 `__, `#5948 `__, `#6964 `__ - Require libpwolicy and configure it in the build system - `commit `__ + `commit `__ `#2445 `__, `#298 `__, `#5948 `__, `#6964 `__ - Add new pwpolicy objectclass to test_xmprpc/objectclasses.py - `commit `__ + `commit `__ `#2445 `__, `#298 `__, `#5948 `__, `#6964 `__ - Extend IPA pwquality plugin to include libpwquality support - `commit `__ + `commit `__ `#2445 `__, `#298 `__, `#5948 `__, `#6964 `__ - Add LDAP schema for new libpwquality attributes - `commit `__ + `commit `__ `#2445 `__, `#298 `__, `#5948 `__, `#6964 `__ - Don't restart certmonger after stopping tracking in uninstall - `commit `__ + `commit `__ `#8533 `__ - Reduce the memory requirement from 1.6 to 1.2 GB - `commit `__ + `commit `__ `#8404 `__ - Test that ccaches are cleaned up during installation - `commit `__ + `commit `__ `#8248 `__ - Clean up entire /run/ipa/ccaches directory not just files - `commit `__ + `commit `__ `#8248 `__ - Require a matching server package for the selinux subpackage - `commit `__ + `commit `__ `#8511 `__ - Add index for more trust-related attributes - `commit `__ + `commit `__ `#8491 `__ - ipatests: Add tests for checking available memory - `commit `__ + `commit `__ `#8404 `__ - Require at least 1.6Gb of available RAM to install the server - `commit `__ + `commit `__ `#8404 `__ - ipatests: Add test for ACI attribute and permission uniqueness - `commit `__ + `commit `__ `#8443 `__ - Use ACI class set_permissions() method to set permissions - `commit `__ + `commit `__ `#8443 `__ - De-duplicate ACI attributes and permissions - `commit `__ + `commit `__ `#8443 `__ - ipatests: test that a zone name and name-from-ip will be rejected - `commit `__ + `commit `__ `#8446 `__ - Don't allow both a zone name and --name-from-ip to be provided - `commit `__ + `commit `__ `#8446 `__ - Set the certmonger subject with a string, not an object - `commit `__ + `commit `__ `#8204 `__ - ipatests: test ipa_server_certinstall with an IPA-issued cert - `commit `__ + `commit `__ `#8204 `__ - cli: When parsing options require name/value pairs - `commit `__ + `commit `__ `#6115 `__ - ipatests: Add option/arg parsing tests for the cli - `commit `__ + `commit `__ `#6115 `__ - ipatests: stop the CA during healthcheck expiration test - `commit `__ + `commit `__ `#8463 `__ - Improve performance of ipa-server-guard - `commit `__ + `commit `__ `#8425 `__ - ipatests: Add test for is_ipa_configured - `commit `__ + `commit `__ `#8458 `__ - Use is_ipa_configured from ipalib.facts - `commit `__ + `commit `__ `#8458 `__ - Fall back to old server installation detection when needed - `commit `__ + `commit `__ `#8458 `__ - IPA-EPN: Test that EPN can be install, uninstalled and re-installed - `commit `__ + `commit `__ - Added negative test case for --list-sources option - `commit `__ + `commit `__ - ipatests: CLI validation of ipa-healthcheck command - `commit `__ + `commit `__ - IPA-EPN: Test that users without givenname and/or mail are handled - `commit `__ + `commit `__ - Address legacy pylint issues in sysrestore.py - `commit `__ + `commit `__ `#8384 `__ - Update check_client_configuration to use new client fact - `commit `__ + `commit `__ `#8384 `__ - Don't use the has_files() to know if client/server is configured - `commit `__ + `commit `__ `#8384 `__ - Create a common place to retrieve facts about an IPA installation - `commit `__ + `commit `__ `#8384 `__ - Simplify determining if IPA client configuration is complete - `commit `__ + `commit `__ `#8384 `__ - Simplify determining if an IPA server installation is complete - `commit `__ + `commit `__ `#8384 `__ - ipatests: Check permissions of /etc/ipa/ca.crt new installations - `commit `__ + `commit `__ `#8441 `__ - Set mode of /etc/ipa/ca.crt to 0644 in CA-less installations - `commit `__ + `commit `__ `#8441 `__ - ipatests: Test healthcheck revocation checker - `commit `__ + `commit `__ - ipatests: Use healthcheck namespacing in stopped server test - `commit `__ + `commit `__ - ipatests: lib389 is now providing healthchecks, update naming - `commit `__ + `commit `__ - ipatests: verify that all services can be detected by healthcheck - `commit `__ + `commit `__ - ipatests: Add healthcheck test for FileSystemSpaceCheck - `commit `__ + `commit `__ - ipatests: Test that healthcheck detects and reports expiration - `commit `__ + `commit `__ - ipatests: Test cases for healthcheck File checker(s) - `commit `__ + `commit `__ - Replace SSLCertVerificationError with CertificateError for py36 - `commit `__ + `commit `__ - Add fips-mode-setup to ipaplatform.paths to determine FIPS status - `commit `__ + `commit `__ `#8429 `__ - Don't delegate the TGT in ipa-join - `commit `__ + `commit `__ `#8405 `__ - IPA-EPN: Don't treat givenname differently - `commit `__ + `commit `__ `#3687 `__ - IPA-EPN: add test to validate smtp_delay value - `commit `__ + `commit `__ `#3687 `__ - IPA-EPN: add smtp_delay to limit the velocity of e-mails sent - `commit `__ + `commit `__ `#3687 `__ - IPA-EPN: Add tests for --mail-test option - `commit `__ + `commit `__ `#3687 `__ - IPA-EPN: Add mail-test option for testing sending live email - `commit `__ + `commit `__ `#3687 `__ - IPA-EPN: test using SSL against port 465 - `commit `__ + `commit `__ `#3687 `__ - IPA-EPN: Add test for starttls mode - `commit `__ + `commit `__ `#3687 `__ - IPA-EPN: Add tests for sending real mail with auth and templates - `commit `__ + `commit `__ `#3687 `__ - IPA-EPN: Fixes to starttls mode, convert some log errors to exceptions - `commit `__ + `commit `__ `#3687 `__ - Add index for krbPasswordExpiration for EPN - `commit `__ + `commit `__ `#3687 `__ - Add a jinja2 e-mail template for EPN - `commit `__ + `commit `__ `#3687 `__ - Perform baseline healthcheck - `commit `__ + `commit `__ - Test that pwpolicy only applied on Kerberos entries - `commit `__ + `commit `__ - Add ability to change a user password as the Directory Manager - `commit `__ + `commit `__ - Don't save password history on non-Kerberos accounts - `commit `__ + `commit `__ - Test that ipa-healthcheck human output translates error strings - `commit `__ + `commit `__ - Move execution of ipa-healthcheck to a separate function - `commit `__ + `commit `__ - Fix div-by-zero when svc weight is 0 for all masters in location - `commit `__ + `commit `__ `#8135 `__ - Don't fully quality the FQDN in ssbrowser.html for Chrome - `commit `__ + `commit `__ `#8201 `__ - Add tests for ipa-cacert-manage delete command - `commit `__ + `commit `__ `#8124 `__ - ipa-certupdate removes all CA certs from db before adding new ones - `commit `__ + `commit `__ `#8124 `__ - Add delete option to ipa-cacert-manage to remove CA certificates - `commit `__ + `commit `__ `#8124 `__ - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit - `commit `__ + `commit `__ `#8164 `__ - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch - `commit `__ + `commit `__ - Add integration test for Kerberos ticket policy - `commit `__ + `commit `__ `#8001 `__ - Conditionally restart certmonger after client installation - `commit `__ + `commit `__ `#8105 `__ - Add conditional restart (try-restart) capability to services - `commit `__ + `commit `__ `#8105 `__ - Enable AES SHA 256 and 384-bit enctypes in Kerberos - `commit `__ + `commit `__ `#8110 `__ - Disable dogtag cert publishing - `commit `__ + `commit `__ `#7522 `__ - ipa-restore: Restore ownership and perms on 389-ds log directory - `commit `__ + `commit `__ `#7725 `__ - Report if a certmonger CA is missing - `commit `__ + `commit `__ `#7870 `__ - Re-order tasks.restore_pkcs11_modules() to run earlier - `commit `__ + `commit `__ `#8034 `__ - Don't log host passwords when they are set/modified - `commit `__ + `commit `__ `#8017 `__ - Skip lock and fork in ipa-server-guard on unsupported ops - `commit `__ + `commit `__ - Defer initializing the API in dogtag-ipa-ca-renew-agent-submit - `commit `__ + `commit `__ - Add missing timeout option to logging statement - `commit `__ + `commit `__ - Log dogtag auth timeout in install, provide hint to increase it - `commit `__ + `commit `__ `#7971 `__ - Log the replication wait timeout for debugging purposes - `commit `__ + `commit `__ `#7971 `__ - Replace replication_wait_timeout with certmonger_wait_timeout - `commit `__ + `commit `__ `#7971 `__ - Use tasks to configure automount nsswitch settings - `commit `__ + `commit `__ - Move ipachangeconf from ipaclient.install to ipapython - `commit `__ + `commit `__ - Don't return SSH keys with ipa host-find --pkey-only - `commit `__ + `commit `__ `#8029 `__ - httpinstance: add pinfile when tracking certificate - `commit `__ + `commit `__ `#7991 `__ - Remove posixAccount from service_find search filter - `commit `__ + `commit `__ `#8013 `__ @@ -4195,38 +4195,38 @@ Robbie Harwood (16) ---------------------------------------------------------------------------------------------- - Drop upper bound on krb5 version in freeipa.spec - `commit `__ + `commit `__ - ipa-kdb: implement AS-REQ lifetime jitter - `commit `__ + `commit `__ `#8010 `__ - Update kdcpolicy design doc for jitter implementation - `commit `__ + `commit `__ - Drop support for DAL version 5.0 - `commit `__ + `commit `__ - Support DAL version 8.0 - `commit `__ + `commit `__ - Handle the removal of KRB5_KDB_FLAG_ALIAS_OK - `commit `__ + `commit `__ - Fix several leaks in ipadb_find_principal - `commit `__ + `commit `__ - Use separate variable for client fetch in kdcpolicy - `commit `__ + `commit `__ - Make the coding style explicit - `commit `__ + `commit `__ - Provide modern example enctypes in ipa-getkeytab(1) - `commit `__ + `commit `__ - Fix segfault in ipadb_parse_ldap_entry() - `commit `__ + `commit `__ - Add a skeleton kdcpolicy plugin - `commit `__ + `commit `__ - Move certauth configuration into a server krb5.conf template - `commit `__ + `commit `__ - Enable krb5 snippet updates on client update - `commit `__ + `commit `__ - Fix NULL pointer dereference in maybe_require_preauth() - `commit `__ + `commit `__ - Log INFO message when LDAP connection fails on startup - `commit `__ + `commit `__ @@ -4234,7 +4234,7 @@ Rafael Guterres Jeffman (1) ---------------------------------------------------------------------------------------------- - Fixes pylint errors introduced by version 2.4.0. - `commit `__ + `commit `__ @@ -4242,17 +4242,17 @@ Rafael Guterres Jeffman (6) ---------------------------------------------------------------------------------------------- - Removed unnecessary imports after code review. - `commit `__ + `commit `__ - Removes several pylint warnings. - `commit `__ + `commit `__ - Removed unnecessary imports after code review. - `commit `__ + `commit `__ - Removes several pylint warnings. - `commit `__ + `commit `__ - Removes rpmlint warning on freeipa.spec. - `commit `__ + `commit `__ - Re-add function façades removed by commit 2da9088. - `commit `__ + `commit `__ `#8062 `__ @@ -4261,7 +4261,7 @@ Robert Collins (1) ---------------------------------------------------------------------------------------------- - Note sss_cache -E. - `commit `__ + `commit `__ @@ -4269,7 +4269,7 @@ Sam Bristow (1) ---------------------------------------------------------------------------------------------- - Workaround networking issues with Libvirt - `commit `__ + `commit `__ @@ -4277,7 +4277,7 @@ Sam Morris (1) ---------------------------------------------------------------------------------------------- - Debian: write out only one CA certificate per file - `commit `__ + `commit `__ `#8106 `__ @@ -4286,10 +4286,10 @@ Sumit Bose (2) ---------------------------------------------------------------------------------------------- - ipa-kdb: Remove keys if password auth is disabled - `commit `__ + `commit `__ `#8001 `__ - extdom: unify error code handling especially LDAP_NO_SUCH_OBJECT - `commit `__ + `commit `__ `#8044 `__ @@ -4298,7 +4298,7 @@ Sergio Oliveira Campos (1) ---------------------------------------------------------------------------------------------- - Add test for sssd ad trust lookup with dn in certmaprule - `commit `__ + `commit `__ @@ -4306,256 +4306,256 @@ Stanislav Levin (91) ---------------------------------------------------------------------------------------------- - ipatests: Collect EPN log for debugging - `commit `__ + `commit `__ - EPN: Allow authentication by SMTP client's certificate - `commit `__ + `commit `__ `#8580 `__ - EPN: Enable certificate validation and hostname checking - `commit `__ + `commit `__ `#8579 `__ - test_epn: Standardize EPN configs for deduplication - `commit `__ + `commit `__ - EPN: Don't downgrade security - `commit `__ + `commit `__ `#8578 `__ - ipatests: Respect platform's openssl dir - `commit `__ + `commit `__ - dns: Make use of \`resolve_address\` of a current resolver instead of the global one - `commit `__ + `commit `__ - dnspython: Add compatibility shim - `commit `__ + `commit `__ `#8383 `__ - tox: Don't expand symlinks - `commit `__ + `commit `__ `#8475 `__ - Azure: Increase verbosity for Tox task - `commit `__ + `commit `__ - deps: Require \`nss-tools\` for make's fasttest target - `commit `__ + `commit `__ - nss: Raise exception earlier on unsupported DB type - `commit `__ + `commit `__ `#8474 `__ - Azure: base: Collect both install and uninstall logs - `commit `__ + `commit `__ - Azure: Drop dependency on UsePythonVersion task - `commit `__ + `commit `__ - Azure: Add Rawhide definitions - `commit `__ + `commit `__ - ipa-dnskeysyncd: Raise loglevel to DEBUG - `commit `__ + `commit `__ `#8094 `__ - named: Include crypto policy in openssl config - `commit `__ + `commit `__ `#8094 `__ - named: Don't override custom command line options for named - `commit `__ + `commit `__ `#8094 `__ - service: Allow service to clean up its state - `commit `__ + `commit `__ `#8094 `__ - spec: Bump required openssl-pkcs11 and softhsm - `commit `__ + `commit `__ `#8094 `__ - named: Make use of 'pkcs11' OpenSSL engine for BIND on Fedora31 - `commit `__ + `commit `__ `#8094 `__ - upgrade: Handle migration of BIND OpenSSL engine - `commit `__ + `commit `__ `#8094 `__ - DNSKeySyncInstance: Populate named/ods uid/gid on instantiation - `commit `__ + `commit `__ `#8094 `__ - named: Allow using of a custom OpenSSL engine for BIND - `commit `__ + `commit `__ `#8094 `__ - named: Remove no longer used paths - `commit `__ + `commit `__ `#8094 `__ - spec: Require ldns-utils - `commit `__ + `commit `__ `#8094 `__ - pylint: Ignore \`raise-missing-from\` - `commit `__ + `commit `__ `#8468 `__ - pylint: Ignore \`super-with-arguments\` - `commit `__ + `commit `__ `#8468 `__ - pylint: Fix warning W0612(unused-variable) - `commit `__ + `commit `__ `#8468 `__ - pylint: Teach pylint about more RRs types - `commit `__ + `commit `__ `#8468 `__ - spec: Move ipa-cldap plugin out to freeipa-server-trust-ad package - `commit `__ + `commit `__ - uninstall: Clean up no longer used flag - `commit `__ + `commit `__ `#8461 `__ - uninstall: Don't fail on missing /var/lib/samba - `commit `__ + `commit `__ `#8461 `__ - rpm-spec: Don't fail on missing /etc/ssh/ssh_config - `commit `__ + `commit `__ `#8459 `__ - ipatests: Skip keyring tests on containerized platforms - `commit `__ + `commit `__ - Azure: Switch to dockerhub provider - `commit `__ + `commit `__ - ipatests: Add compatibility against python-cryptography 3.0 - `commit `__ + `commit `__ `#8428 `__ - pylint: Fix warning and error - `commit `__ + `commit `__ `#8442 `__ - ipatests: Don't turn Pytest IPA deprecation warnings into errors - `commit `__ + `commit `__ `#8435 `__ - Azure: Make dnf repos consistent - `commit `__ + `commit `__ `#8330 `__ - Azure: Always update apt cache - `commit `__ + `commit `__ - Azure: Allow chronyd to sync time - `commit `__ + `commit `__ `#8316 `__ - Azure: Add custom seccomp profile - `commit `__ + `commit `__ `#8316 `__ - Azure: Increase memory limit - `commit `__ + `commit `__ `#8264 `__ - ipatests: Collect all logs on all Unix hosts - `commit `__ + `commit `__ `#8265 `__ - ipatests: Pretty print multihost config - `commit `__ + `commit `__ `#8265 `__ - ipatests: Cleanup 'collect_logs' decorator - `commit `__ + `commit `__ `#8265 `__ - ipatests: Specify shell implementation - `commit `__ + `commit `__ `#8101 `__ - ipatests: Specify Pytest XML report schema - `commit `__ + `commit `__ `#8101 `__ - ipatests: Remove no longer needed 'skip' compatibility - `commit `__ + `commit `__ `#8101 `__ - ipatests: Remove no longer needed 'capture' compatibility - `commit `__ + `commit `__ `#8101 `__ - ipatests: Remove no longer needed 'get_marker' - `commit `__ + `commit `__ `#8101 `__ - ipatests: Remove deprecated yield_fixture - `commit `__ + `commit `__ `#8101 `__ - ipatests: Bump required Pytest - `commit `__ + `commit `__ `#8101 `__ - ipatests: Mark firewalld commands as no-op on non-firewalld distros - `commit `__ + `commit `__ `#8261 `__ - Azure: Gather coredumps - `commit `__ + `commit `__ `#8251 `__ - Azure: Allow distros to install Python they want - `commit `__ + `commit `__ `#8254 `__ - pki-proxy: Don't rely on running apache until it's configured - `commit `__ + `commit `__ `#8233 `__ - spec: Take the ownership over '/usr/libexec/ipa/custodia' - `commit `__ + `commit `__ - Azure: Report elapsed time - `commit `__ + `commit `__ - Azure: Rebalance tests - `commit `__ + `commit `__ - Azure: Skip tests requiring external DNS - `commit `__ + `commit `__ - Azure: Free Docker resources after usage - `commit `__ + `commit `__ - Azure: Preliminary check for provided limits - `commit `__ + `commit `__ - Azure: Sync Gating definitions to current PR-CI - `commit `__ + `commit `__ - pylint: Run Pylint over Azure Python scripts - `commit `__ + `commit `__ `#8202 `__ - Azure: Add support for testing multi IPA environments - `commit `__ + `commit `__ `#8202 `__ - Azure: Don't collect twice systemd_journal.log - `commit `__ + `commit `__ `#8202 `__ - yamllint: Lint all the YAML files - `commit `__ + `commit `__ `#8202 `__ - Azure: Make it possible to configure distro-specific stuff - `commit `__ + `commit `__ `#8202 `__ - Azure: Allow to run integration tests - `commit `__ + `commit `__ `#8202 `__ - Azure: Allow SSH for Docker environments - `commit `__ + `commit `__ `#8202 `__ - Azure: Allow to not provide tests to be ignored - `commit `__ + `commit `__ `#8202 `__ - ipatests: Allow zero-length arguments - `commit `__ + `commit `__ `#8173 `__ - lint: Make Pylint-2.4 happy again - `commit `__ + `commit `__ `#8116 `__ - pylint: Clean up comment - `commit `__ + `commit `__ `#8116 `__ - pylint: Synchronize pylint plugin to ipatests code - `commit `__ + `commit `__ `#8116 `__ - pylint: Teach Pylint how to handle request.context - `commit `__ + `commit `__ `#8116 `__ - ipatests: Properly kill gpg-agent - `commit `__ + `commit `__ `#7989 `__ - pytest: Warn about unittest/nose/xunit tests - `commit `__ + `commit `__ `#7989 `__ - pytest: Migrate unittest/nose to Pytest fixtures - `commit `__ + `commit `__ `#7989 `__ - pytest: Migrate xunit-style setups to Pytest fixtures - `commit `__ + `commit `__ `#7989 `__ - Fix errors found by Pylint-2.4.3 - `commit `__ + `commit `__ `#8102 `__ - Install language packs for tests - `commit `__ + `commit `__ - Restore running of 'test_ipaserver' tests on Azure - `commit `__ + `commit `__ - Setup DNS for AP Docker container - `commit `__ + `commit `__ `#8077 `__ - Fixed errors newly exposed by pylint 2.4.0 - `commit `__ + `commit `__ `#8077 `__ - Avoid use of '/tmp' for pip operations - `commit `__ + `commit `__ `#8009 `__ - Make use of Azure Pipeline slicing - `commit `__ + `commit `__ `#8008 `__ - Simplify ipa-run-tests script - `commit `__ + `commit `__ `#8007 `__ - Fix \`test_webui.test_selinuxusermap\` - `commit `__ + `commit `__ `#7996 `__, `#8005 `__ @@ -4565,110 +4565,110 @@ Sergey Orlov (45) ---------------------------------------------------------------------------------------------- - ipatests: simplify fixture - `commit `__ + `commit `__ - ipatests: refactor test for login using cifs alias principal - `commit `__ + `commit `__ - Fix password file permission - `commit `__ + `commit `__ - ipatests: mark test_trustdomain_disable test as expectedly failing - `commit `__ + `commit `__ - ipatests: add context manager for declaring part of test as xfail - `commit `__ + `commit `__ - ipatests: add utility for getting sssd version on remote host - `commit `__ + `commit `__ - update prci definitions for test_sssd.py - `commit `__ + `commit `__ - ipatests: add test for sssd behavior with disabled trustdomains - `commit `__ + `commit `__ - ipatests: add missing classes from test_nfs in nightly_previous run - `commit `__ + `commit `__ - ipatests: add missing classes from test_installation in nightly runs - `commit `__ + `commit `__ - ipatests: run test_integration/test_cert.py in PR-CI - `commit `__ + `commit `__ - ipatests: run all cases from test_integration/test_idviews.py in nightlies - `commit `__ + `commit `__ - ipatests: explicitly save output of certutil - `commit `__ + `commit `__ - ipatests: add AD DC as a DNS forwarder before establishing trust - `commit `__ + `commit `__ - ipatests: add test_automember to "previous" nightly run - `commit `__ + `commit `__ - ipatests: add test_fips to testing-fedora nightly run - `commit `__ + `commit `__ - ipatests: provide AD admin password when trying to establish trust - `commit `__ + `commit `__ `#7895 `__ - ipatests: remove test_ordering - `commit `__ + `commit `__ - ipatests: add test for SSSD updating expired cache items - `commit `__ + `commit `__ - ipatests: provide docstrings instead of imporperly placed comments - `commit `__ + `commit `__ - ipatests: remove invalid parameter from sssd.conf - `commit `__ + `commit `__ `#8219 `__ - ipatests: use remote_sssd_config to modify sssd.conf - `commit `__ + `commit `__ `#8219 `__ - ipatests: replace utility for editing sssd.conf - `commit `__ + `commit `__ `#8219 `__ - ipatests: update docstring to reflect changes in FileBackup.restore() - `commit `__ + `commit `__ - ipatests: add test_trust suite to nightly runs - `commit `__ + `commit `__ - ipatests: add check for output contents of ipa-client-samba - `commit `__ + `commit `__ `#8149 `__ - ipatests: add test_winsyncmigrate suite to nightly runs - `commit `__ + `commit `__ - ipatests: add check that ipa-adtrust-install generates sane smb.conf - `commit `__ + `commit `__ `#6951 `__ - ipatests: enable test_smb.py in gating.yaml - `commit `__ + `commit `__ - ipatests: replace ad hoc backup with FileBackup helper - `commit `__ + `commit `__ `#8115 `__ - ipatests: refactor FileBackup helper - `commit `__ + `commit `__ `#8115 `__ - ipatests: in DNS zone file add A record for name server - `commit `__ + `commit `__ - ipatests: strip newline character when getting name of temp file - `commit `__ + `commit `__ - ipatests: add test to check that only TLS 1.2 is enabled in Apache - `commit `__ + `commit `__ `#7995 `__ - ipatests: fix DNS forwarders setup for AD trust tests with non-root domains - `commit `__ + `commit `__ - ipatests: add tests for cached_auth_timeout in sssd.conf - `commit `__ + `commit `__ - ipatests: refactoring: use library function to check if selinux is enabled - `commit `__ + `commit `__ - ipatests: add new utilities for file management - `commit `__ + `commit `__ - ipatests: refactor and extend tests for IPA-Samba integration - `commit `__ + `commit `__ `#3999 `__ - ipatests: modify run_command to allow specify successful return codes - `commit `__ + `commit `__ - ipatests: add utility functions related to using and managing user accounts - `commit `__ + `commit `__ - ipatests: allow to pass additional options for clients installation - `commit `__ + `commit `__ - ipatests: new test for trust with partially unreachable AD topology - `commit `__ + `commit `__ - ipatests: mark test_domain_resolution_order as expectedly failing - `commit `__ + `commit `__ - ipatests: add test for sudo with runAsUser and domain resolution order. - `commit `__ + `commit `__ @@ -4679,22 +4679,22 @@ Sumedh Sidhaye (6) test_cert.py::TestCertmongerRekey which needs more time to execute. Adding additional 30 mins to the timeout in order to complete the test run - `commit `__ + `commit `__ - Test for removing a subgroup - `commit `__ + `commit `__ - Test to check if Certmonger tracks certs in between reboots/interruptions and while in "CA_WORKING" state - `commit `__ + `commit `__ `#8164 `__ - Added a test to check if ipa host-find --pkey-only does not return SSH public key - `commit `__ + `commit `__ `#8029 `__ - Test: Test to check whether ssh from ipa client to ipa master is successful after adding ldap_deref_threshold=0 in sssd.conf - `commit `__ + `commit `__ - Test: To check ipa replica-manage del does not fail - `commit `__ + `commit `__ `#7929 `__ @@ -4703,7 +4703,7 @@ Simo Sorce (1) ---------------------------------------------------------------------------------------------- - Make sure to have storage space for tag - `commit `__ + `commit `__ @@ -4711,7 +4711,7 @@ Stasiek Michalski (1) ---------------------------------------------------------------------------------------------- - Support for SUSE/openSUSE ipaplatform - `commit `__ + `commit `__ @@ -4720,94 +4720,94 @@ Serhii Tsymbaliuk (28) - WebUI tests: Add simple test to check topology graph page is available - `commit `__ + `commit `__ `#8523 `__ - WebUI: Fix topology graph navigation crash - `commit `__ + `commit `__ `#8523 `__ - WebUI: Fix jQuery DOM manipulation issues - `commit `__ + `commit `__ `#8507 `__ - WebUI tests: Add test case to cover user ID override feature - `commit `__ + `commit `__ `#8416 `__ - WebUI: Fix error "unknown command 'idoverrideuser_add_member'" - `commit `__ + `commit `__ `#8416 `__ - WebUI tests: Change navigation tests to find menu items using data-name instead of href - `commit `__ + `commit `__ `#7137 `__ - WebUI: Fix issue with opening links in new tab/window - `commit `__ + `commit `__ `#7137 `__ - WebUI: Fix "IPA Error 3007: RequirmentError" while adding idoverrideuser association - `commit `__ + `commit `__ `#8335 `__ - WebUI: Apply jQuery patch to fix htmlPrefilter issue - `commit `__ + `commit `__ `#8325 `__ - WebUI tests: Test all available fields on "Kerberos Ticket Policy" page - `commit `__ + `commit `__ `#8207 `__ - WebUI: Add authentication indicator specific fields to "Kerberos Ticket Policy" page - `commit `__ + `commit `__ `#8207 `__ - WebUI tests: Add confirmation step after changing default group in automember tests - `commit `__ + `commit `__ `#8322 `__ - WebUI: Add confirmation dialog for changing default user/host group - `commit `__ + `commit `__ `#8322 `__ - WebUI tests: cover membership management with UI tests - `commit `__ + `commit `__ `#8298 `__ - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1 - `commit `__ + `commit `__ `#8284 `__ - Web UI: Upgrade Dojo version 1.13.0 -> 1.16.2 - `commit `__ + `commit `__ `#8222 `__ - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1 - `commit `__ + `commit `__ `#8239 `__ - WebUI tests: Fix broken reference to parent facet in table record check - `commit `__ + `commit `__ `#8157 `__ - WebUI tests: Fix 'Button is not displayed' exception - `commit `__ + `commit `__ `#8169 `__ - WebUI: Fix notification area layout - `commit `__ + `commit `__ `#8120 `__ - WebUI: Fix adding member manager for groups and host groups - `commit `__ + `commit `__ `#8123 `__ - WebUI: Fix new test initialization on "HBAC Test" page - `commit `__ + `commit `__ `#8031 `__ - WebUI: Fix changing category on HBAC/Sudo/etc Rule pages - `commit `__ + `commit `__ `#7961 `__ - WebUI: Make 'Unlock' option is available only on locked user page - `commit `__ + `commit `__ `#5062 `__ - WebUI tests: Fix login screen loading issue - `commit `__ + `commit `__ `#8053 `__ - WebUI tests: Fix request timeout for test_trust - `commit `__ + `commit `__ `#8024 `__ - WebUI: Add PKINIT status field to 'Configuration' page - `commit `__ + `commit `__ `#7305 `__ - WebUI tests: Fix timeout issues for reset password tests - `commit `__ + `commit `__ `#8012 `__ @@ -4817,80 +4817,80 @@ Sudhir Menon (32) - Added nsslapd-logging-hr-timestamps-enabled attribute in \_SINGLE_VALUE_OVERRIDE table - `commit `__ + `commit `__ - ipatests: ipa-healthcheck tests for DS checks - `commit `__ + `commit `__ - ipatests: Fix for test_ipahealthcheck_ds_riplugincheck - `commit `__ + `commit `__ `#8563 `__ - ipatests: Fix for test_ipahealthcheck_ds_encryption - `commit `__ + `commit `__ `#8560 `__ - ipatests: ipa-healthcheck test for DS RIPluginCheck - `commit `__ + `commit `__ - ipatests: ipa-healthcheck test for EncryptionCheck - `commit `__ + `commit `__ - ipatests: ipa-healthcheck test for DS BackendsCheck - `commit `__ + `commit `__ - ipatests: ipa-healthcheck fixes for tests running on RHEL - `commit `__ + `commit `__ - ipatests: ipa-healthcheck test fixes running on RHEL - `commit `__ + `commit `__ - ipatests: Install healthcheck pkg for TestIpaHealthCheckWithADtrust - `commit `__ + `commit `__ - Modified nightly YAML files to include ipa-healthcheck ExternalCA Tests - `commit `__ + `commit `__ - ipatests: Tests for ipahealthcheck tool with IPA external - `commit `__ + `commit `__ - ipatests: Test IPACertNSSTrust check when trust attributes is modified for specific cert - `commit `__ + `commit `__ - ipatests: Test to check IPACAChainExpirationCheck when IPA cacrt is renamed - `commit `__ + `commit `__ - ipatests: Test for ipa-nis-manage CLI tool. - `commit `__ + `commit `__ - ipatests: Increase timeout value in test_getcert_list_profile_using_subca - `commit `__ + `commit `__ - ipatests: Tests to check profile is displayed for getcert request. - `commit `__ + `commit `__ - Modified YAML to include healthcheck AD tests - `commit `__ + `commit `__ - ipatests: Tests to check ipahealthcheck tool with IPA-AD trust scenario - `commit `__ + `commit `__ - ipatests: Test to check warning state for TomcatFileCheck in ipahealthcheck.ipa.files - `commit `__ + `commit `__ - ipatests: Test for ipahealthcheck.ipa.files for TomcatFilecheck - `commit `__ + `commit `__ - ipatests: Test for ipahealthcheck DogtagCertsConnectivityCheck - `commit `__ + `commit `__ - ipatests: Added testcase to check that ipa-adtrust-install command runs successfully with locale set as LANG=en_IN.UTF-8 - `commit `__ + `commit `__ `#8066 `__ - ipatests: Test for ipahealthcheck tool for IPADomainCheck. - `commit `__ + `commit `__ - ipatests: Test for ipahealthcheck.ds.ruv check - `commit `__ + `commit `__ - Test for ipahealthcheck.ipa.idns check when integrated DNS is setup - `commit `__ + `commit `__ - ipatests: Added testcase to check logrotate is added for healthcheck tool - `commit `__ + `commit `__ - ipatests: check that ipa-healthcheck warns if no dna range is set - `commit `__ + `commit `__ - Adding back temp config definition removed - `commit `__ + `commit `__ - Nightly definition for ipa-healthcheck tool - `commit `__ + `commit `__ - Tier-1 test for ipa-healthcheck tool - `commit `__ + `commit `__ - Added testcase to check capitalization fix while running ipa user-mod - `commit `__ + `commit `__ `#5879 `__ @@ -4899,17 +4899,17 @@ Tibor Dudlák (5) ---------------------------------------------------------------------------------------------- - Add container environment check to replicainstall - `commit `__ + `commit `__ `#6210 `__ - Increase ntp_options test timeout - `commit `__ + `commit `__ - ipatests: refactor TestNTPoptions - `commit `__ + `commit `__ - ipatests: Add tests for interactive chronyd config - `commit `__ + `commit `__ `#7908 `__ - ipatests: Update test tasks for client to be interactive - `commit `__ + `commit `__ `#7908 `__ @@ -4918,13 +4918,13 @@ Tomas Halman (4) ---------------------------------------------------------------------------------------------- - extdom: add extdom protocol documentation - `commit `__ + `commit `__ - extdom: use sss_nss_*_timeout calls - `commit `__ + `commit `__ - extdom: plugin doesn't use timeout in blocking call - `commit `__ + `commit `__ - extdom: plugin doesn't allow @ in group name - `commit `__ + `commit `__ @@ -4933,17 +4933,17 @@ Timo Aaltonen (6) - ipatests/test_installation: Use knownservices to map the service name. - `commit `__ + `commit `__ - ipatests/test_commands: Check sssd version like on test_sssd - `commit `__ + `commit `__ - Debian: Use parse_ipa_version from redhat. - `commit `__ + `commit `__ - Debian: Use enable/disable_ldap_automount() from base - `commit `__ + `commit `__ - Debian: Fix font-awesome path. - `commit `__ + `commit `__ - install: Add missing scripts to app_DATA. - `commit `__ + `commit `__ @@ -4952,15 +4952,15 @@ Thorsten Scherf (5) - Corrected some typos and added improvements to some setup instructions - `commit `__ + `commit `__ - Module added about ssh pubkey management - `commit `__ + `commit `__ - Added bash-completion rpm to build instructions. - `commit `__ + `commit `__ - Added --mkhomedir option for server and replica. - `commit `__ + `commit `__ - Added vagrant-libvirt-doc rpm and polkit rule - `commit `__ + `commit `__ @@ -4968,7 +4968,7 @@ Theodor van Nahl (1) ---------------------------------------------------------------------------------------------- - Fix UnboundLocalError in ipa-replica-manage on errors - `commit `__ + `commit `__ @@ -4977,15 +4977,15 @@ Thomas Woerner (4) - ipaserver/plugins/hbacrule: Add HBAC to memberservice_hbacsvc\* labels - `commit `__ + `commit `__ - DNS install check: Fix overlapping DNS zone from the master itself - `commit `__ + `commit `__ `#8150 `__ - Enable TestInstallMasterDNSRepeatedly in prci_definitions - `commit `__ + `commit `__ - Test repeated installation of the primary with DNS enabled and domain set - `commit `__ + `commit `__ @@ -4993,7 +4993,7 @@ Viktor Ashirov (1) ---------------------------------------------------------------------------------------------- - Update ACIs with the correct syntax - `commit `__ + `commit `__ `#8301 `__ @@ -5002,14 +5002,14 @@ Vit Mojzis (4) ---------------------------------------------------------------------------------------------- - selinux: disable ipa_custodia when installing custom policy - `commit `__ + `commit `__ `#6891 `__ - selinux: Remove obsolete memcached access - `commit `__ + `commit `__ - selinux: move BUILD_SELINUX_POLICY definition - `commit `__ + `commit `__ - Add freeipa-selinux subpackage - `commit `__ + `commit `__ @@ -5017,9 +5017,9 @@ Yuri Chornoivan (2) ---------------------------------------------------------------------------------------------- - Translated using Weblate (Ukrainian) - `commit `__ + `commit `__ - Translated using Weblate (Ukrainian) - `commit `__ + `commit `__ @@ -5027,15 +5027,15 @@ zdover (5) ---------------------------------------------------------------------------------------------- - 100 percent complete edit - `commit `__ + `commit `__ - sixty percent edited - `commit `__ + `commit `__ - thirty percent edited - `commit `__ + `commit `__ - first tranche of edits - `commit `__ + `commit `__ - making a list's items agree with one another - `commit `__ + `commit `__ @@ -5043,7 +5043,7 @@ Zdenek Pytela (2) ---------------------------------------------------------------------------------------------- - Add ipa_pki_retrieve_key_exec() interface - `commit `__ + `commit `__ `#8488 `__ - Allow ipa-adtrust-install restart sssd and dirsrv services - `commit `__ + `commit `__ diff --git a/src/page/Releases/4.9.0rc2.rst b/src/page/Releases/4.9.0rc2.rst index 8250399c5..5c06a0439 100644 --- a/src/page/Releases/4.9.0rc2.rst +++ b/src/page/Releases/4.9.0rc2.rst @@ -102,7 +102,7 @@ Armando Neto (1) ---------------------------------------------------------------------------------------------- - ipatests: Bump PR-CI templates - `commit `__ + `commit `__ @@ -110,16 +110,16 @@ Alexander Bokovoy (5) ---------------------------------------------------------------------------------------------- - Become FreeIPA 4.9.0rc2 - `commit `__ + `commit `__ - Update contributors - `commit `__ + `commit `__ - freeipa.spec.in: unify spec files across upstream RHEL, and Fedora - `commit `__ + `commit `__ - ad trust: accept subordinate domains of the forest trust root - `commit `__ + `commit `__ `#8554 `__ - util: Fix client-only build - `commit `__ + `commit `__ `#8587 `__ @@ -128,7 +128,7 @@ Antonio Torres Moríñigo (1) ---------------------------------------------------------------------------------------------- - ipa-client-install manpage: add ipa.p11-kit to list of files created - `commit `__ + `commit `__ `#8424 `__ @@ -137,10 +137,10 @@ Florence Blanc-Renaud (2) ---------------------------------------------------------------------------------------------- - ipatests: fix TestTrust::test_subordinate_suffix - `commit `__ + `commit `__ `#8601 `__ - Always define the path DNSSEC_OPENSSL_CONF - `commit `__ + `commit `__ `#8597 `__ @@ -149,7 +149,7 @@ Mark Reynolds (1) ---------------------------------------------------------------------------------------------- - Accept 389-ds JSON replication status messages - `commit `__ + `commit `__ `#7975 `__ @@ -158,7 +158,7 @@ Mohammad Rizwan (1) ---------------------------------------------------------------------------------------------- - ipatests: Test certmonger IPA responder switched to JSONRPC - `commit `__ + `commit `__ `#3299 `__ @@ -167,78 +167,78 @@ Rob Crittenden (25) ---------------------------------------------------------------------------------------------- - Skip the ACME mod_md test when the client is in enforcing mode - `commit `__ + `commit `__ `#8514 `__ - Increase timeout for krbtpolicy to 4800 - `commit `__ + `commit `__ `#8589 `__ - Enable the ccache sweep systemd timer - `commit `__ + `commit `__ `#8589 `__ - ipatests: test that stale caches are removed using the sweeper - `commit `__ + `commit `__ `#8589 `__ - Generate a unique cache for each connection - `commit `__ + `commit `__ `#8589 `__ - Convert reset_to_default_policy into a pytest fixture - `commit `__ + `commit `__ `#8589 `__ - VERSION: back to git snapshots - `commit `__ + `commit `__ - ipatests: Test that ipa-ca.$domain can retrieve CRLs without redirect - `commit `__ + `commit `__ `#8595 `__ - Allow Apache to answer to ipa-ca requests without a redirect - `commit `__ + `commit `__ `#8595 `__ - Move where the restore state is marked during IPA server upgrade - `commit `__ + `commit `__ `#7534 `__ - Reorder when ACME is enabled to fix failure on upgrade - `commit `__ + `commit `__ `#8603 `__ - Remove test for minimum ACME support and rely on package deps - `commit `__ + `commit `__ - Require PKI 10.10+ for KRA profile and ACME support - `commit `__ + `commit `__ `#8524 `__, `#8545 `__ - Test that the KRA profiles can renewal its three certificates - `commit `__ + `commit `__ `#8545 `__ - Change KRA profiles in certmonger tracking so they can renew - `commit `__ + `commit `__ `#8545 `__ - ipatests: Increase timeout for ACME in gating.yaml - `commit `__ + `commit `__ `#8581 `__ - ipatests: honor class inheritance in TestACMEwithExternalCA - `commit `__ + `commit `__ `#8581 `__ - ipatests: configure MDStoreDir for mod_md ACME test - `commit `__ + `commit `__ `#8581 `__ - ipatests: Clean up existing ACME registration and certs - `commit `__ + `commit `__ `#8581 `__ - ipatests: Configure a replica in TestACMEwithExternalCA - `commit `__ + `commit `__ `#8581 `__ - ipatests: call the CALess install method to generate the CA - `commit `__ + `commit `__ `#8581 `__ - ipatests: Test that Match ProxyCommand masks on no shell exec - `commit `__ + `commit `__ `#7676 `__ - Create IPA ssh client configuration and move ProxyCommand - `commit `__ + `commit `__ `#7676 `__ - ipatests: Test that ipa-certupdate can run without credentials - `commit `__ + `commit `__ `#8531 `__ - Use host keytab to obtain credentials needed for ipa-certupdate - `commit `__ + `commit `__ `#8531 `__ @@ -247,7 +247,7 @@ Robbie Harwood (1) ---------------------------------------------------------------------------------------------- - Fix krbtpolicy tests - `commit `__ + `commit `__ `#8590 `__ @@ -256,6 +256,6 @@ Sudhir Menon (2) ---------------------------------------------------------------------------------------------- - ipatests: support subordinate upn suffixes - `commit `__ + `commit `__ - ipatests: Tests for ipahealthcheck.ds.nss_ssl - `commit `__ + `commit `__ diff --git a/src/page/Releases/4.9.0rc3.rst b/src/page/Releases/4.9.0rc3.rst index c8c623a07..7c4dbfd37 100644 --- a/src/page/Releases/4.9.0rc3.rst +++ b/src/page/Releases/4.9.0rc3.rst @@ -68,22 +68,22 @@ Alexander Bokovoy (6) ---------------------------------------------------------------------------------------------- - Become FreeIPA 4.9.0rc3 - `commit `__ + `commit `__ - systemd: enforce en_US.UTF-8 locale in systemd units - `commit `__ + `commit `__ `#8617 `__ - upgrade: provide DOMAIN to the server upgrade dictionary - `commit `__ + `commit `__ `#8595 `__, `#8615 `__ - Allow mod_auth_gssapi to create and access ccaches in /run/ipa/ccaches - `commit `__ + `commit `__ `#8613 `__ - Correct SELinux policy requirements - `commit `__ + `commit `__ - Back to git snapshots - `commit `__ + `commit `__ @@ -91,11 +91,11 @@ Florence Blanc-Renaud (3) ---------------------------------------------------------------------------------------------- - ipatests: add test for PKI subsystem detection - `commit `__ + `commit `__ `#8596 `__ - Improve PKI subsystem detection - `commit `__ + `commit `__ `#8596 `__ - xmlrpctests: remove harcoded expiration date from test_user_plugin - `commit `__ + `commit `__ `#8616 `__ diff --git a/src/page/Releases/4.9.1.rst b/src/page/Releases/4.9.1.rst index e02e4f90a..241095557 100644 --- a/src/page/Releases/4.9.1.rst +++ b/src/page/Releases/4.9.1.rst @@ -238,7 +238,7 @@ Armando Neto (1) ---------------------------------------------------------------------------------------------- - ipatests: Update PR-CI definitions for ipa-4-9 - `commit `__ + `commit `__ @@ -246,92 +246,92 @@ Alexander Bokovoy (30) ---------------------------------------------------------------------------------------------- - Become FreeIPA 4.9.1 - `commit `__ + `commit `__ - Force-update translation po/uk.po - `commit `__ + `commit `__ - Force-update translation po/ipa.pot - `commit `__ + `commit `__ - Force-update translation po/hu.po - `commit `__ + `commit `__ - Force-update translation po/de.po - `commit `__ + `commit `__ - Update contributors list - `commit `__ + `commit `__ - baseldap: allow rejecting unknown objects instead of adding to an external attr - `commit `__ + `commit `__ `#3226 `__ - ipatests: when talking to AD DCs, use FQDN credentials - `commit `__ + `commit `__ `#8678 `__ - test_trust: add tests for using AD users and groups in SUDO rules - `commit `__ + `commit `__ `#3226 `__ - ipatests: fix test_sudorule_plugin's wrong argument use - `commit `__ + `commit `__ `#3226 `__ - sudorule runAs: allow to add users and groups from trusted domains directly - `commit `__ + `commit `__ `#3226 `__ - sudorule-add-user: allow to reference users and groups from trusted domains directly - `commit `__ + `commit `__ `#3226 `__ - idviews: add extended validator for users from trusted domains - `commit `__ + `commit `__ `#3226 `__ - baseldap: when adding external objects, differentiate between them and failures - `commit `__ + `commit `__ `#3226 `__ - baseldap: refactor validator support in add_external_pre_callback - `commit `__ + `commit `__ `#3226 `__ - Add design document for using AD users/groups in SUDO rules - `commit `__ + `commit `__ `#3226 `__ - use a constant instead of /var/lib/sss/keytabs - `commit `__ + `commit `__ - trust-fetch-domains: use custom krb5.conf overlay for all trust operations - `commit `__ + `commit `__ `#8655 `__, `#8664 `__ - ipaserver/dcerpc: store forest topology as a blob in ipasam - `commit `__ + `commit `__ `#8576 `__ - ipasam: derive parent domain for subdomains automatically - `commit `__ + `commit `__ `#8576 `__ - ipasam: free trusted domain context on failure - `commit `__ + `commit `__ `#8576 `__ - ipasam: allow search of users by user principal name (UPN) - `commit `__ + `commit `__ `#8661 `__ - ipasam: implement PASSDB getgrnam call - `commit `__ + `commit `__ `#8660 `__ - ipa-kdb: provide correct logon time in MS-PAC from authentication time - `commit `__ + `commit `__ `#8659 `__ - ipaserver/dcerpc.py: enforce SMB encryption on LSA pipe if available - `commit `__ + `commit `__ `#8655 `__ - ipaserver/dcerpc.py: use Kerberos authentication for discovery - `commit `__ + `commit `__ `#8655 `__ - ipaserver/dcerpc: use Samba-provided trust helper to establish trust - `commit `__ + `commit `__ `#8655 `__ - ipatests: fix race condition in finalizer of encrypted backup test - `commit `__ + `commit `__ - ipaplatform: add constant for systemd-run binary - `commit `__ + `commit `__ - Get back to git snapshots - `commit `__ + `commit `__ @@ -339,10 +339,10 @@ Antonio Torres (2) ---------------------------------------------------------------------------------------------- - Check that IPA cert is added to trust store after server install - `commit `__ + `commit `__ `#8614 `__ - Test that IPA certs are removed on server uninstall - `commit `__ + `commit `__ `#8614 `__ @@ -352,9 +352,9 @@ Antonio Torres Moríñigo (2) - ipatests: test that trailing/leading whitespaces in passwords are allowed - `commit `__ + `commit `__ - Allow leading/trailing whitespaces in passwords - `commit `__ + `commit `__ `#7599 `__ @@ -363,7 +363,7 @@ Christian Heimes (1) ---------------------------------------------------------------------------------------------- - Add ccache sweeper files to gitignore - `commit `__ + `commit `__ `#8589 `__ @@ -372,7 +372,7 @@ François Cami (1) ---------------------------------------------------------------------------------------------- - ipatests: test_ipahealthcheck: fix units - `commit `__ + `commit `__ `#8674 `__ @@ -381,40 +381,40 @@ Florence Blanc-Renaud (12) ---------------------------------------------------------------------------------------------- - ipatests: fix discrepancies in nightly defs - `commit `__ + `commit `__ - ipatests: fix expected output for ipahealthcheck.ipa.files - `commit `__ + `commit `__ `#8662 `__ - ipatests: fix healthcheck test for ipahealthcheck.ds.encryption - `commit `__ + `commit `__ `#8670 `__ - ipatests: fix expected errmsg in TestTrust::test_ipa_commands_run_as_aduser - `commit `__ + `commit `__ `#8668 `__ - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection - `commit `__ + `commit `__ `#8596 `__, `#8653 `__ - selinux: modify policy to allow one-way trust - `commit `__ + `commit `__ `#8508 `__ - ipatests: add test_ipa_cert_fix to the nightly definitions - `commit `__ + `commit `__ `#8618 `__ - ipa-cert-fix: do not fail when CSR is missing from CS.cfg - `commit `__ + `commit `__ `#8618 `__ - ipatests: add a test for ipa-cert-fix - `commit `__ + `commit `__ `#8618 `__ - ipatests: clear initgroups cache in clear_sssd_cache - `commit `__ + `commit `__ - ipatests: remove test_acme from gating - `commit `__ + `commit `__ `#8602 `__ - ipatests: fix expected error message in test_commands - `commit `__ + `commit `__ `#8631 `__ @@ -423,7 +423,7 @@ JoeDrane (1) ---------------------------------------------------------------------------------------------- - Update ipa_sam.c - `commit `__ + `commit `__ @@ -431,48 +431,48 @@ Rob Crittenden (16) ---------------------------------------------------------------------------------------------- - ipatests: test the cgroup v2 memory restrictions - `commit `__ + `commit `__ `#8635 `__ - Add support for cgroup v2 to the installer memory checker - `commit `__ + `commit `__ `#8635 `__ - ipa-rmkeytab: Check return value of krb5_kt_(start|end)_seq_get - `commit `__ + `commit `__ `#8658 `__ - ipa-rmkeytab: convert numeric return values to #defines - `commit `__ + `commit `__ `#8658 `__ - ipa_pwd: Remove unnecessary conditional - `commit `__ + `commit `__ - ipa_kdb: Fix memory leak - `commit `__ + `commit `__ - ipa-kdb: Fix logic to prevent NULL pointer dereference - `commit `__ + `commit `__ - ipa-kdb: Change mspac base RID logic from OR to AND - `commit `__ + `commit `__ - Add missing break statement to password quality switch - `commit `__ + `commit `__ - Revert "Remove test for minimum ACME support and rely on package deps" - `commit `__ + `commit `__ `#8634 `__ - ipatests: See if nologin supports -c before asserting message - `commit `__ + `commit `__ `#7676 `__ - ipatests: test that modifying a permission attrs handles failure - `commit `__ + `commit `__ `#8646 `__ - Remove virtual attributes before rolling back a permission - `commit `__ + `commit `__ `#8646 `__ - Remove invalid test case for DNS SRV priority - `commit `__ + `commit `__ `#8650 `__ - ipatests: test that no errors are reported after ipa-certupdate - `commit `__ + `commit `__ `#8644 `__ - Don't change the CA profile when modifying request in ipa_certupdate - `commit `__ + `commit `__ `#8644 `__ @@ -481,7 +481,7 @@ Robbie Harwood (1) ---------------------------------------------------------------------------------------------- - Set client keytab location for 389ds - `commit `__ + `commit `__ `#8656 `__ @@ -490,10 +490,10 @@ Stanislav Levin (2) ---------------------------------------------------------------------------------------------- - ipatests: Don't assume sshd flush its logs immediately - `commit `__ + `commit `__ `#8682 `__ - ipatests: Raise log level of 389-ds replication - `commit `__ + `commit `__ @@ -502,9 +502,9 @@ Sergey Orlov (2) - ipatests: use fully qualified name for AD admin when establishing trust - `commit `__ + `commit `__ - ipatests: do not set dns_lookup to true - `commit `__ + `commit `__ @@ -512,6 +512,6 @@ Sudhir Menon (2) ---------------------------------------------------------------------------------------------- - ipatests: Test for IPATrustControllerPrincipalCheck - `commit `__ + `commit `__ - ipatests: ipahealthcheck remove test skipped in pytest run - `commit `__ + `commit `__ diff --git a/src/page/Releases/4.9.10.rst b/src/page/Releases/4.9.10.rst index 87d88b431..49080cb0b 100644 --- a/src/page/Releases/4.9.10.rst +++ b/src/page/Releases/4.9.10.rst @@ -204,9 +204,9 @@ Armando Neto (2) ---------------------------------------------------------------------------------------------- - ipatests: bump pr-ci templates - `commit `__ + `commit `__ - workshop: Update docs and support default cloud image - `commit `__ + `commit `__ @@ -215,88 +215,88 @@ Alexander Bokovoy (29) - idviews: use cached ipaOriginalUid value when resolving ID override anchor - `commit `__ + `commit `__ `#9178 `__ - ipaldap: fix conversion from boolean OID to Python - `commit `__ + `commit `__ `#9171 `__ - ipa-kdb: avoid additional checks for a well-known anonymous principal - `commit `__ + `commit `__ `#9165 `__ - Ignore dnssec-enable-related named-checkonf errors in test - `commit `__ + `commit `__ `#9157 `__ - Support dnssec utils from bind 9.17.2+ - `commit `__ + `commit `__ `#9157 `__ - ipa-kdb: apply per-indicator settings from inherited ticket policy - `commit `__ + `commit `__ `#9121 `__ - freeipa.spec.in: Depend on sssd-idp directly to help RHEL BaseOS/AppStream repository split - `commit `__ + `commit `__ `#9155 `__ - docs: tune RTD to display lists with disc and left margin - `commit `__ + `commit `__ - workshop: add chapter 12: External IdP support - `commit `__ + `commit `__ - freeipa.spec.in: use SSSD 2.7.0 to add IdP pre-auth mechanism - `commit `__ + `commit `__ `#8805 `__ - doc/workshop: document use of pam_sss_gss PAM module - `commit `__ + `commit `__ - External IdP: initial SELinux policy - `commit `__ + `commit `__ - External IdP: add Web UI to manage IdP references - `commit `__ + `commit `__ - KDB: support external IdP configuration - `commit `__ + `commit `__ `#8804 `__ - ipa-otpd: add support for SSSD OIDC helper - `commit `__ + `commit `__ `#8805 `__ - external-idp: add XMLRPC tests for External IdP objects and idp indicator - `commit `__ + `commit `__ `#8803 `__, `#8804 `__ - external-idp: add support to manage external IdP objects - `commit `__ + `commit `__ `#8803 `__, `#8804 `__ - external-idp: add LDAP schema, indices and other LDAP objects - `commit `__ + `commit `__ `#8803 `__ - doc/designs: add External IdP support design documents - `commit `__ + `commit `__ `#8803 `__, `#8804 `__, `#8805 `__ - js tests: use latest grunt - `commit `__ + `commit `__ - Azure CI: don't force non-existing OpenSSL configuration anymore - `commit `__ + `commit `__ - Azure CI: temporarily add libldap_r.so symlink for python-ldap PIP use - `commit `__ + `commit `__ - Switch Azure CI to Fedora 36 pre-release - `commit `__ + `commit `__ - web ui: do not provide Remove button in subid page - `commit `__ + `commit `__ `#9150 `__ - docs: force sphinx version above 3.0 to avoid caching in RTD - `commit `__ + `commit `__ - docs: update Sphinx requirements in ipasphinx package - `commit `__ + `commit `__ `#9148 `__ - docs: add the readthedocs configuration - `commit `__ + `commit `__ `#9148 `__ - docs: add plantuml and use virtual environment to generate docs - `commit `__ + `commit `__ `#9148 `__ - doc: migrate to m2r2 and newer sphinx, add plantuml to venv - `commit `__ + `commit `__ `#9148 `__ @@ -305,9 +305,9 @@ Anuja More (2) ---------------------------------------------------------------------------------------------- - pr-ci definitions: add external idp related jobs. - `commit `__ + `commit `__ - ipatests: Add integration tests for External IdP support - `commit `__ + `commit `__ `#8803 `__, `#8804 `__, `#8805 `__ @@ -318,7 +318,7 @@ Antonio Torres (1) ---------------------------------------------------------------------------------------------- - Back to git snapshots - `commit `__ + `commit `__ @@ -326,7 +326,7 @@ Matthew Davis (1) ---------------------------------------------------------------------------------------------- - Create missing SSSD_PUBCONF_KRB5_INCLUDE_D_DIR - `commit `__ + `commit `__ `#9174 `__ @@ -335,41 +335,41 @@ Florence Blanc-Renaud (12) ---------------------------------------------------------------------------------------------- - ACI: define "Read DNS entries from a zone" aci during install - `commit `__ + `commit `__ `#9173 `__ - ipatests: update expected output for boolean attribute - `commit `__ + `commit `__ `#9171 `__ - ipa-replica-install: nsds5replicaUpdateInProgress is a Boolean - `commit `__ + `commit `__ `#9171 `__ - ipatest: update expected out for ipa-healthcheck's DogtagCertsConnectivityCheck - `commit `__ + `commit `__ `#9175 `__ - ipatests: add new test with --subid installer option - `commit `__ + `commit `__ `#9159 `__ - man pages: document the --subid installer option - `commit `__ + `commit `__ `#9159 `__ - Installer: add --subid option to select the sssd profile with-subid - `commit `__ + `commit `__ `#9159 `__ - client uninstall: handle uninstall with authconfig - `commit `__ + `commit `__ `#9147 `__ - ipatests: --no-dnssec-validation requires --setup-dns - `commit `__ + `commit `__ `#9152 `__ - ipatests: remove test_rekey_keytype_DSA - `commit `__ + `commit `__ `#9140 `__ - ipatests: update the expected sha256sum of epn.conf file - `commit `__ + `commit `__ `#9146 `__ - EPN: document missing option msg_subject - `commit `__ + `commit `__ `#9145 `__ @@ -378,12 +378,12 @@ Francisco Trivino (3) ---------------------------------------------------------------------------------------------- - Update subordinate design doc - `commit `__ + `commit `__ - Update ipa-replica-install replication agreement error message - `commit `__ + `commit `__ `#9162 `__ - ipatests: Bump PR-CI latest templates to Fedora 36 - `commit `__ + `commit `__ @@ -391,7 +391,7 @@ Matthew Davis (1) ---------------------------------------------------------------------------------------------- - Suse compatibility fix - `commit `__ + `commit `__ `#9174 `__ @@ -401,15 +401,15 @@ Michal Polovka (4) - ipatests: xfail for test_ipahealthcheck_hidden_replica to respect pki version - `commit `__ + `commit `__ `#8582 `__ - ipatests: tasks: add ipactl start, stop and restart - `commit `__ + `commit `__ - ipatests: RFE: Improve ipa-replica-install error message - `commit `__ + `commit `__ `#9162 `__ - ipatests: test_subids: test subid-match shows UID of the owner - `commit `__ + `commit `__ `#8977 `__ @@ -418,46 +418,46 @@ Rob Crittenden (14) ---------------------------------------------------------------------------------------------- - Add switch for LDAP cache debug output - `commit `__ + `commit `__ `#9180 `__ - Remove extraneous AJP secret from server.xml on upgrades - `commit `__ + `commit `__ `#9176 `__ - graceperiod: ignore case when checking for missing objectclass - `commit `__ + `commit `__ `#1539 `__ - Set default LDAP password grace period to -1 - `commit `__ + `commit `__ `#1539 `__ - doc: Design document for LDAP graceperiod - `commit `__ + `commit `__ `#1539 `__ - Don't duplicate the LDAP gracelimit set in the previous test - `commit `__ + `commit `__ `#9167 `__ - Configure and enable the graceperiod plugin on upgrades - `commit `__ + `commit `__ `#1539 `__ - dnssec daemons: read the dns context config file for debug state - `commit `__ + `commit `__ `#9128 `__ - healthcheck: add tests for setting cli options in config file - `commit `__ + `commit `__ `#9136 `__ - Exclude passwordgraceusertime from replication - `commit `__ + `commit `__ `#1539 `__ - Remove the replicated attribute constants - `commit `__ + `commit `__ `#1539 `__ - Implement LDAP bind grace period 389-ds plugin - `commit `__ + `commit `__ `#1539 `__ - If the password auth type is enabled also enable the hardened policy - `commit `__ + `commit `__ `#9121 `__ - kdb: The jitter offset should always be positive - `commit `__ + `commit `__ `#9121 `__ @@ -467,9 +467,9 @@ Sudhir Menon (2) - ipatests: ipahealthcheck tests to check change in permission of ipaserver log files - `commit `__ + `commit `__ - ipatests: Adding --no-dnssec-validation option for healthcheck - `commit `__ + `commit `__ `#9151 `__ @@ -478,6 +478,6 @@ Thorsten Scherf (2) ---------------------------------------------------------------------------------------------- - workshop: add freeipa version requirements - `commit `__ + `commit `__ - workshop: add freeipa version requirements - `commit `__ + `commit `__ diff --git a/src/page/Releases/4.9.11.rst b/src/page/Releases/4.9.11.rst index 164b2d1b9..8bed1e2e8 100644 --- a/src/page/Releases/4.9.11.rst +++ b/src/page/Releases/4.9.11.rst @@ -188,7 +188,7 @@ Armando Neto (1) ---------------------------------------------------------------------------------------------- - webui: Do not allow empty pagination size - `commit `__ + `commit `__ `#9192 `__ @@ -198,33 +198,33 @@ Alexander Bokovoy (10) - ipa-kdb: for delegation check, use different error codes before and after krb5 1.20 - `commit `__ + `commit `__ `#9083 `__ - ipa-kdb: fix comment to make sure we talk about krb5 1.20 or later - `commit `__ + `commit `__ - ipa-kdb: fix PAC requester check - `commit `__ + `commit `__ `#9083 `__ - ipa-kdb: handle empty S4U proxy in allowed_to_delegate - `commit `__ + `commit `__ `#9083 `__ - ipa-kdb: handle cross-realm TGT entries when generating PAC - `commit `__ + `commit `__ `#9083 `__ - ipa-kdb: add krb5 1.20 support - `commit `__ + `commit `__ `#9083 `__ - ipa-kdb: refactor MS-PAC processing to prepare for krb5 1.20 - `commit `__ + `commit `__ `#9083 `__ - ipaclient: do not set TLS CA options in ldap.conf anymore - `commit `__ + `commit `__ `#9258 `__ - fix canonicalization issue in Web UI - `commit `__ + `commit `__ `#9226 `__ - ipa-otpd: initialize local pointers and handle gcc 10 - `commit `__ + `commit `__ `#9230 `__ @@ -233,15 +233,15 @@ Anuja More (4) ---------------------------------------------------------------------------------------------- - ipatests : Test query to AD specific attributes is successful. - `commit `__ + `commit `__ `#9127 `__ - ipatests: Fix install_master for test_idp.py - `commit `__ + `commit `__ `#9189 `__ - ipatests: update prci definitions for test_idp.py - `commit `__ + `commit `__ - Add end to end integration tests for external IdP - `commit `__ + `commit `__ `#8803 `__, `#8804 `__, `#8805 `__ @@ -252,15 +252,15 @@ Antonio Torres (5) ---------------------------------------------------------------------------------------------- - Update list of contributors - `commit `__ + `commit `__ - Update translations to FreeIPA ipa-4-9 state - `commit `__ + `commit `__ - Add basic API usage guide - `commit `__ + `commit `__ - doc: generate API Reference - `commit `__ + `commit `__ - Back to git snapshots - `commit `__ + `commit `__ @@ -269,12 +269,12 @@ Alexey Tikhonov (3) - extdom: avoid sss_nss_getorigby*() calls when get*_r_wrapper() returns object from a wrong domain (performance optimization) - `commit `__ + `commit `__ - extdom: make sure result doesn't miss domain part - `commit `__ + `commit `__ `#9245 `__ - extdom: internal functions should be static - `commit `__ + `commit `__ @@ -282,31 +282,31 @@ Carla Martinez (9) ---------------------------------------------------------------------------------------------- - webui: Add name to 'Certificates' table - `commit `__ + `commit `__ `#8946 `__ - webui: Add label name to 'Certificates' section - `commit `__ + `commit `__ `#8946 `__ - Update API and VERSION - `commit `__ + `commit `__ `#9249 `__ - webui: Set 'SOA serial' field as read-only - `commit `__ + `commit `__ `#9249 `__ - ipatest: Remove warning message for 'idnssoaserial' - `commit `__ + `commit `__ `#9249 `__ - Set 'idnssoaserial' to deprecated - `commit `__ + `commit `__ `#9249 `__ - webui: Show 'Sudo order' column - `commit `__ + `commit `__ `#9237 `__ - Set pkeys in test_selinuxusermap.py::test_misc::delete_record - `commit `__ + `commit `__ `#9161 `__ - webui: Allow grace login limit - `commit `__ + `commit `__ `#9211 `__ @@ -315,7 +315,7 @@ Christian Heimes (1) ---------------------------------------------------------------------------------------------- - Add PKINIT support to ipa-client-install - `commit `__ + `commit `__ `#9269 `__, `#9271 `__ @@ -325,45 +325,45 @@ Jan Kuparinen (20) ---------------------------------------------------------------------------------------------- - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Added translation using Weblate (Finnish) - `commit `__ + `commit `__ @@ -371,9 +371,9 @@ David Pascual (2) ---------------------------------------------------------------------------------------------- - ipatest: fix prci checker target masked return code & add pylint - `commit `__ + `commit `__ - ipatests: Checker script for prci definitions - `commit `__ + `commit `__ @@ -381,13 +381,13 @@ Erik Belko (3) ---------------------------------------------------------------------------------------------- - ipatests: Add test for grace login limit - `commit `__ + `commit `__ `#9211 `__ - ipatests: test for root using admin password in webUI - `commit `__ + `commit `__ `#9226 `__ - ipatests: healthcheck: test if system is FIPS enabled - `commit `__ + `commit `__ `#8951 `__ @@ -396,46 +396,46 @@ Florence Blanc-Renaud (15) ---------------------------------------------------------------------------------------------- - API doc: adapt the generated doc for 4.9 branch - `commit `__ + `commit `__ - API reference: update dnszone_add generated doc - `commit `__ + `commit `__ `#9249 `__ - API reference: update vault doc - `commit `__ + `commit `__ `#9259 `__ - ipatests: update vagrant boxes - `commit `__ + `commit `__ - Spec file: bump the selinux-policy version - `commit `__ + `commit `__ `#9198 `__ - webui tests: fix test_subid suite - `commit `__ + `commit `__ `#9214 `__ - ipa man page: format the EXAMPLES section - `commit `__ + `commit `__ `#9252 `__ - ipatests: add negative test for otptoken-sync - `commit `__ + `commit `__ `#9248 `__ - ipa otptoken-sync: return error when sync fails - `commit `__ + `commit `__ `#9248 `__ - gitignore: add install/oddjob/org.freeipa.server.config-enable-sid - `commit `__ + `commit `__ - ipatests: Fix expected object classes - `commit `__ + `commit `__ `#9062 `__ - check_repl_update: in progress is a boolean - `commit `__ + `commit `__ `#9218 `__ - azure tests: disable TestInstallDNSSECFirst - `commit `__ + `commit `__ `#9216 `__ - xmlrpc tests: updated expected output for preserved user - `commit `__ + `commit `__ `#9187 `__ - Preserve user: fix the confusing summary - `commit `__ + `commit `__ `#9187 `__ @@ -444,7 +444,7 @@ Francisco Trivino (1) ---------------------------------------------------------------------------------------------- - Vault: fix interoperability issues with older RHEL systems - `commit `__ + `commit `__ `#9259 `__ @@ -453,10 +453,10 @@ Fraser Tweedale (2) ---------------------------------------------------------------------------------------------- - install: suggest --skip-mem-check when mem check fails - `commit `__ + `commit `__ `#8404 `__ - man: add --skip-mem-check to man pages - `commit `__ + `commit `__ `#8404 `__ @@ -465,7 +465,7 @@ Matthew Davis (1) ---------------------------------------------------------------------------------------------- - Add missing parameter to Suse modify_nsswitch_pam_stack - `commit `__ + `commit `__ `#9185 `__ @@ -474,7 +474,7 @@ Jesse Sandberg (1) ---------------------------------------------------------------------------------------------- - Fix ipa-ccache-sweeper activation timer and clean up service file - `commit `__ + `commit `__ `#9231 `__ @@ -483,7 +483,7 @@ Julien Rische (1) ---------------------------------------------------------------------------------------------- - Generate CNAMEs for TXT+URI location krb records - `commit `__ + `commit `__ `#9257 `__ @@ -492,12 +492,12 @@ Michal Polovka (3) ---------------------------------------------------------------------------------------------- - ipatests: Healthcheck use subject base from IPA not REALM - `commit `__ + `commit `__ - ipatests: Healthcheck should ignore pki errors when CA is not configured - `commit `__ + `commit `__ - ipatests: Increase expect timeout for interactive mode - `commit `__ + `commit `__ `#9183 `__ @@ -506,7 +506,7 @@ Marcin Stanclik (1) ---------------------------------------------------------------------------------------------- - Translated using Weblate (Polish) - `commit `__ + `commit `__ @@ -514,7 +514,7 @@ Mohammad Rizwan (1) ---------------------------------------------------------------------------------------------- - ipatests: Test newly added certificate lable - `commit `__ + `commit `__ @@ -522,7 +522,7 @@ Nikola Knazekova (1) ---------------------------------------------------------------------------------------------- - Exclude installed policy module file from RPM verification - `commit `__ + `commit `__ `#9254 `__ @@ -531,7 +531,7 @@ Pavel Březina (1) ---------------------------------------------------------------------------------------------- - docs: add security section to idp - `commit `__ + `commit `__ `#8803 `__, `#8804 `__, `#8805 `__ @@ -542,7 +542,7 @@ Piotr Drąg (1) ---------------------------------------------------------------------------------------------- - Translated using Weblate (Polish) - `commit `__ + `commit `__ @@ -550,11 +550,11 @@ Hela Basa (3) ---------------------------------------------------------------------------------------------- - Added translation using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Sinhala) - `commit `__ + `commit `__ - Added translation using Weblate (Sinhala) - `commit `__ + `commit `__ @@ -562,40 +562,40 @@ Rob Crittenden (12) ---------------------------------------------------------------------------------------------- - Pass the curl write callback by name instead of address - `commit `__ + `commit `__ `#9274 `__ - Move client certificate request after krb5.conf is created - `commit `__ + `commit `__ `#9246 `__ - Defer creating the final krb5.conf on clients - `commit `__ + `commit `__ `#9228 `__ - Fix upper bound of password policy grace limit - `commit `__ + `commit `__ `#9243 `__ - Set default on group pwpolicy with no grace limit in upgrade - `commit `__ + `commit `__ `#9212 `__ - Set default gracelimit on group password policies to -1 - `commit `__ + `commit `__ `#9212 `__ - doc: Update LDAP grace period design with default values - `commit `__ + `commit `__ `#9212 `__ - upgrades: Don't restart the CA on ACME and profile schema change - `commit `__ + `commit `__ `#9204 `__ - Disabling gracelimit does not prevent LDAP binds - `commit `__ + `commit `__ `#9206 `__ - Warn for permissions with read/write/search/compare and no attrs - `commit `__ + `commit `__ `#9188 `__ - Only calculate LDAP password grace when the password is expired - `commit `__ + `commit `__ `#1539 `__ - Fix test_secure_ajp_connector.py failing with Python 3.6.8 - `commit `__ + `commit `__ `#9190 `__ @@ -604,13 +604,13 @@ Ricky Tigg (4) ---------------------------------------------------------------------------------------------- - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ @@ -618,7 +618,7 @@ Sumit Bose (1) ---------------------------------------------------------------------------------------------- - ipa-kdb: do not fail if certmap rule cannot be added - `commit `__ + `commit `__ @@ -626,93 +626,93 @@ Sumit Bose (1) ---------------------------------------------------------------------------------------------- - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ @@ -720,22 +720,22 @@ Stanislav Levin (6) ---------------------------------------------------------------------------------------------- - ipapython: Support openldap 2.6 - `commit `__ + `commit `__ `#9255 `__ - x509: Replace removed register_interface with subclassing - `commit `__ + `commit `__ `#9160 `__ - ap: Constrain supported docutils - `commit `__ + `commit `__ `#9208 `__ - ap: Rearrange overloaded jobs - `commit `__ + `commit `__ `#9207 `__ - ap: Disable azure's security daemon - `commit `__ + `commit `__ `#9207 `__ - ap: Raise dbus timeout - `commit `__ + `commit `__ `#9207 `__ @@ -744,7 +744,7 @@ Scott Poore (1) ---------------------------------------------------------------------------------------------- - ipatests: Rename create_quarkus to create_keycloak - `commit `__ + `commit `__ `#9225 `__ @@ -753,10 +753,10 @@ Sudhir Menon (2) ---------------------------------------------------------------------------------------------- - ipatests: WebUI: do not allow subid range deletion - `commit `__ + `commit `__ `#9150 `__ - ipatests: ipa-client-install --subid adds entry in nsswitch.conf - `commit `__ + `commit `__ `#9159 `__ @@ -765,9 +765,9 @@ Timo Aaltonen (2) ---------------------------------------------------------------------------------------------- - ipaplatform/debian: Drop the path for ldap.so - `commit `__ + `commit `__ - ipaplatform/debian: Use multiarch path for libsofthsm2.so - `commit `__ + `commit `__ @@ -775,7 +775,7 @@ Thomas Woerner (1) ---------------------------------------------------------------------------------------------- - DNSResolver: Fix use of nameservers with ports - `commit `__ + `commit `__ `#9158 `__ @@ -784,8 +784,8 @@ Yuri Chornoivan (3) ---------------------------------------------------------------------------------------------- - Translated using Weblate (Ukrainian) - `commit `__ + `commit `__ - Translated using Weblate (Ukrainian) - `commit `__ + `commit `__ - Translated using Weblate (Ukrainian) - `commit `__ + `commit `__ diff --git a/src/page/Releases/4.9.12.rst b/src/page/Releases/4.9.12.rst index 36e0e221a..c4a5f1e3a 100644 --- a/src/page/Releases/4.9.12.rst +++ b/src/page/Releases/4.9.12.rst @@ -150,24 +150,24 @@ Alexander Bokovoy (6) - ipalib/x509: Implement abstract method Certificate.verify_directly_issued_by - `commit `__ + `commit `__ `#9355 `__ - Fix tox in Azure CI - `commit `__ + `commit `__ `#9347 `__ - Use system-wide chromium for webui tests - `commit `__ + `commit `__ `#9347 `__ - Don't fail if optional RPM macros file is missing - `commit `__ + `commit `__ `#9347 `__ - ipa-kdb: PAC consistency checker needs to handle child domains as well - `commit `__ + `commit `__ `#9316 `__ - updates: fix memberManager ACI to allow managers from a specified group - `commit `__ + `commit `__ `#9286 `__ @@ -176,16 +176,16 @@ Anuja More (4) ---------------------------------------------------------------------------------------------- - ipatests: Test that non admin user can search hbac rule. - `commit `__ + `commit `__ `#5130 `__ - ipatests: Test ipa-advise is not failing with error. - `commit `__ + `commit `__ `#6044 `__ - PRCI: update test_trust.py for nightly pipelines. - `commit `__ + `commit `__ `#9326 `__ - Add test for SSH with GSSAPI auth. - `commit `__ + `commit `__ `#9316 `__ @@ -194,23 +194,23 @@ Antonio Torres (8) ---------------------------------------------------------------------------------------------- - Extend API documentation - `commit `__ + `commit `__ - doc: allow notes on Param API Reference pages - `commit `__ + `commit `__ - ipaserver: deepcopy objectclasses list from IPA config - `commit `__ + `commit `__ `#9349 `__ - API doc: add usage guides for groups, HBAC and sudo rules - `commit `__ + `commit `__ - API doc: add note about ipa show-mappings to usage guide - `commit `__ + `commit `__ - API doc: validate generated reference - `commit `__ + `commit `__ `#9287 `__ - API doc: add basic user management guide - `commit `__ + `commit `__ - Back to git snapshots - `commit `__ + `commit `__ @@ -218,7 +218,7 @@ Carla Martinez (1) ---------------------------------------------------------------------------------------------- - Update 'Auth indicators' doc string - `commit `__ + `commit `__ `#9338 `__ @@ -227,13 +227,13 @@ Christian Heimes (3) ---------------------------------------------------------------------------------------------- - Speed up installer by restarting DS after DNA plugin - `commit `__ + `commit `__ `#9358 `__ - Don't block when kinit_pkinit() fails - `commit `__ + `commit `__ `#9333 `__ - ipa-certupdate: Update client certs before KDC/HTTPd restart - `commit `__ + `commit `__ `#9285 `__ @@ -242,7 +242,7 @@ Chris Kelley (1) ---------------------------------------------------------------------------------------------- - Check that CADogtagCertsConfigCheck can handle cert renewal - `commit `__ + `commit `__ @@ -250,9 +250,9 @@ David Pascual (2) ---------------------------------------------------------------------------------------------- - doc: Use case examples for PR-CI checker tool - `commit `__ + `commit `__ - ipatests: fix (prci_checker) duplicated check & error return code - `commit `__ + `commit `__ @@ -261,7 +261,7 @@ Erik Belko (1) - ipatests: Test MemberManager ACI to allow managers from a specified group after upgrade scenario - `commit `__ + `commit `__ `#9286 `__ @@ -270,49 +270,49 @@ Florence Blanc-Renaud (16) ---------------------------------------------------------------------------------------------- - ipatests: increase timeout for test_trust - `commit `__ + `commit `__ `#9326 `__ - ipatests: remove wrong job definition TestACMEPrune - `commit `__ + `commit `__ `#9324 `__ - ipatests: increase timeout for test_acme - `commit `__ + `commit `__ `#9324 `__ - automember-rebuild: add a notice about high CPU usage - `commit `__ + `commit `__ `#9320 `__ - trust-add: handle missing msSFU30MaxGidNumber - `commit `__ + `commit `__ `#9310 `__ - Tests: force key type in ACME tests - `commit `__ + `commit `__ `#9298 `__ - server install: remove error log about missing bkup file - `commit `__ + `commit `__ `#9306 `__ - ipatests: mark test_smb as xfail - `commit `__ + `commit `__ `#9124 `__ - ipatests: update the xfail annotation for test_number_of_zones - `commit `__ + `commit `__ `#9135 `__ - Spec file: bump krb5_kdb_version on rawhide - `commit `__ + `commit `__ - FIPS setup: fix typo filtering camellia encryption - `commit `__ + `commit `__ - cert utilities: MAC verification is incompatible with FIPS mode - `commit `__ + `commit `__ - ipatests: update the fake fips mode expected message - `commit `__ + `commit `__ `#9002 `__ - Spec file: ipa-client depends on krb5-pkinit-openssl - `commit `__ + `commit `__ `#9290 `__ - webui tests: fix assertion in test_subid.py - `commit `__ + `commit `__ `#9282 `__ - PRCI: update memory reqs for each topology - `commit `__ + `commit `__ @@ -320,16 +320,16 @@ mbhalodi (4) ---------------------------------------------------------------------------------------------- - ipatests: Test for sequence processing failures with server context - `commit `__ + `commit `__ `#9349 `__ - ipatests: add missing automember-cli tests - `commit `__ + `commit `__ `#9332 `__ - ipatests: WebUI - ensure that ipa automember-rebuild prints a warning - `commit `__ + `commit `__ `#9320 `__ - ipatests: ensure that ipa automember-rebuild prints a warning - `commit `__ + `commit `__ `#9320 `__ @@ -338,7 +338,7 @@ Michal Polovka (1) ---------------------------------------------------------------------------------------------- - ipatest: loginscreen: do not use hardcoded password - `commit `__ + `commit `__ `#9226 `__ @@ -347,13 +347,13 @@ Rob Crittenden (3) ---------------------------------------------------------------------------------------------- - Wipe the ipa-ca DNS record when updating system records - `commit `__ + `commit `__ `#9195 `__ - tests: Add new ipa-ca error messages to IPADNSSystemRecordsCheck - `commit `__ + `commit `__ `#9291 `__ - tests: Add ipa_ca_name checking to DNS system records - `commit `__ + `commit `__ `#9291 `__ @@ -362,31 +362,31 @@ Stanislav Levin (9) ---------------------------------------------------------------------------------------------- - fastlint: Correct concatenation of file lists - `commit `__ + `commit `__ `#9318 `__ - dns: Fix support for dnspython 1.1x - `commit `__ + `commit `__ `#9339 `__ - tests: webui: Update vendored qunit - `commit `__ + `commit `__ `#9329 `__ - AP: webui: List installed nodejs packages - `commit `__ + `commit `__ `#9329 `__ - tests: webui: Load qunit only once - `commit `__ + `commit `__ `#9329 `__ - tests: webui: Allow file access from files in tests - `commit `__ + `commit `__ `#9329 `__ - tests: Configure DNSResolver as platform agnostic resolver - `commit `__ + `commit `__ `#9319 `__ - spec: Drop no longer used build dependency on paste - `commit `__ + `commit `__ `#9314 `__ - ipatests: healthcheck: Handle missing fips-mode-setup - `commit `__ + `commit `__ `#9315 `__ @@ -396,7 +396,7 @@ Sumedh Sidhaye (1) - With the commit #99a74d7, 389-ds changed the message returned in ipa-healthcheck. - `commit `__ + `commit `__ `#9238 `__ @@ -405,7 +405,7 @@ Sudhir Menon (1) ---------------------------------------------------------------------------------------------- - Fixes: ipa-otpd@.service: deprecated syslog setting - `commit `__ + `commit `__ `#9279 `__ @@ -414,4 +414,4 @@ Thorsten Scherf (1) ---------------------------------------------------------------------------------------------- - external-idp: change idp server name to reference name - `commit `__ + `commit `__ diff --git a/src/page/Releases/4.9.2.rst b/src/page/Releases/4.9.2.rst index 9c9fe7f05..af80fca59 100644 --- a/src/page/Releases/4.9.2.rst +++ b/src/page/Releases/4.9.2.rst @@ -101,36 +101,36 @@ Alexander Bokovoy (14) ---------------------------------------------------------------------------------------------- - Back to git commits - `commit `__ + `commit `__ - Become IPA 4.9.2 - `commit `__ + `commit `__ - po: refresh translations to remove outdated strings - `commit `__ + `commit `__ - po: update translations template - `commit `__ + `commit `__ - test_installutils: run gpg-agent under a specific SELinux context - `commit `__ + `commit `__ `#8699 `__ - Force-update translation after FreeIPA to IPA change: po/fr.po - `commit `__ + `commit `__ - Force-update translation after FreeIPA to IPA change: po/es.po - `commit `__ + `commit `__ - Force-update translation po/id.po - `commit `__ + `commit `__ - Force-update translation po/fr.po - `commit `__ + `commit `__ - Force-update translation po/es.po - `commit `__ + `commit `__ - Force-update translation po/de.po - `commit `__ + `commit `__ - client: synchronize ignored return codes with ipa-rmkeytab - `commit `__ + `commit `__ `#8658 `__ - ipa-sam: return NetBIOS domain name instead of DNS one - `commit `__ + `commit `__ `#8636 `__ - Back to git commits - `commit `__ + `commit `__ @@ -138,15 +138,15 @@ Antonio Torres (4) ---------------------------------------------------------------------------------------------- - ipatests: test addition of invalid sudo command - `commit `__ + `commit `__ - sudocmd: ensure command doesn't contain trailing dot before adding it - `commit `__ + `commit `__ - WebUI: change FreeIPA naming to IPA in About dialog - `commit `__ + `commit `__ `#8669 `__ - Update samba configuration on IPA master to explicitly use 'server role' setting - `commit `__ + `commit `__ `#8452 `__ @@ -155,16 +155,16 @@ Christian Heimes (4) ---------------------------------------------------------------------------------------------- - configure: ipaplatform falls back to ID_LIKE - `commit `__ + `commit `__ `#8689 `__ - Don't install csrgen extra dependencies - `commit `__ + `commit `__ `#8669 `__ - Ensure that KDC cert has SAN DNS entry - `commit `__ + `commit `__ `#8685 `__ - Fix cert_request for KDC cert - `commit `__ + `commit `__ `#6739 `__, `#8686 `__ @@ -174,26 +174,26 @@ Florence Blanc-Renaud (8) ---------------------------------------------------------------------------------------------- - ipatests: update expected error message - `commit `__ + `commit `__ `#8704 `__ - xmlrpc tests: add a test for cert-remove-hold - `commit `__ + `commit `__ `#8704 `__ - cert plugin: propagate the error for non-existent cert - `commit `__ + `commit `__ `#8704 `__ - ipatests: ipactl status now exits with 3 when a service is stopped - `commit `__ + `commit `__ `#8588 `__ - ipatests: fix ipahealthcheck fixture \_modify_permission - `commit `__ + `commit `__ - OpenDNSSEC: fix timezone in key creation date - `commit `__ + `commit `__ - ipatests: add a test for ZSK/KSK keytype in DNSKEY record - `commit `__ + `commit `__ `#8647 `__ - dnssec: fix the key type with OpenDNSSEC 2.1 - `commit `__ + `commit `__ `#8647 `__ @@ -202,7 +202,7 @@ Mohammad Rizwan (1) ---------------------------------------------------------------------------------------------- - ipatests: Test if server setup without dns uninstall properly - `commit `__ + `commit `__ `#8630 `__ @@ -211,62 +211,62 @@ Rob Crittenden (20) ---------------------------------------------------------------------------------------------- - Remove the option stop_certmonger from stop_tracking\_\* - `commit `__ + `commit `__ `#8506 `__, `#8533 `__ - Add some logging around initial ACME deployment - `commit `__ + `commit `__ `#8712 `__ - Add versions to the ACME config templates and update on upgrade - `commit `__ + `commit `__ `#8712 `__ - Set the ACME baseURL in order to pin a client to a single IPA server - `commit `__ + `commit `__ `#8712 `__ - Add RHEL 9 UI branding patch reference - `commit `__ + `commit `__ `#8669 `__ - Force-update translation after FreeIPA to IPA change: po/ipa.pot - `commit `__ + `commit `__ - Remove references to rjsmin in UI compile.sh - `commit `__ + `commit `__ `#8669 `__ - Remove support for csrgen - `commit `__ + `commit `__ `#8669 `__ - Change FreeIPA references to IPA and Identity Management - `commit `__ + `commit `__ `#8669 `__ - ipatests: Handle non-zero return code in test_ipactl_scenario_check - `commit `__ + `commit `__ `#8550 `__ - Add exit status to the ipactl man page - `commit `__ + `commit `__ `#8550 `__ - Ensure IPA is running (ideally) before uninstalling the KRA - `commit `__ + `commit `__ `#8550 `__ - ipactl: support script status 3, program is not running - `commit `__ + `commit `__ `#8588 `__ - Use the new API introduced in PKI 10.8 - `commit `__ + `commit `__ - Change CA profile migration message from info to debug - `commit `__ + `commit `__ - Only build the UI with uglifyjs on RHEL 8 - `commit `__ + `commit `__ `#8669 `__ - Provide more detailed logging around memory detection - `commit `__ + `commit `__ `#8404 `__ - ipatests: Update NSSDatabase DBM test on non-DBM-capable installs - `commit `__ + `commit `__ `#8675 `__ - Ignore database errors when trying to extract ipaCert on upgrade - `commit `__ + `commit `__ `#8675 `__ - Report the NSS database directory if it cannot be opened - `commit `__ + `commit `__ `#8675 `__ @@ -275,12 +275,12 @@ Stanislav Levin (3) ---------------------------------------------------------------------------------------------- - rpm-spec: Require crypto-policies-scripts - `commit `__ + `commit `__ - ipatests: Handle AAAA records in test_ipa_dns_systemrecords_check - `commit `__ + `commit `__ `#8683 `__ - Azure: Populate containers with self-AAAA records - `commit `__ + `commit `__ `#8683 `__ @@ -290,19 +290,19 @@ Sergey Orlov (5) - ipatests: use pexpect to control inetractive session of ipa-adtrust-install - `commit `__ + `commit `__ `#8690 `__ - ipatests: use pexpect to invoke ktutil - `commit `__ + `commit `__ `#8690 `__ - ipatests: add a tests-oriented wrapper for pexpect module - `commit `__ + `commit `__ `#8690 `__ - ipatests: rewrite test for requests routing to subordinate suffixes - `commit `__ + `commit `__ `#8554 `__ - fix collecting log files which are symlinks - `commit `__ + `commit `__ @@ -310,4 +310,4 @@ Thorsten Scherf (1) ---------------------------------------------------------------------------------------------- - man: fix ipa-client-samba.1 typos - `commit `__ + `commit `__ diff --git a/src/page/Releases/4.9.3.rst b/src/page/Releases/4.9.3.rst index 7f03c706a..bb238c917 100644 --- a/src/page/Releases/4.9.3.rst +++ b/src/page/Releases/4.9.3.rst @@ -140,7 +140,7 @@ Armando Neto (1) ---------------------------------------------------------------------------------------------- - ipatests: Update gating to Fedora 33 - `commit `__ + `commit `__ @@ -148,27 +148,27 @@ Alexander Bokovoy (10) ---------------------------------------------------------------------------------------------- - Become FreeIPA 4.9.3 - `commit `__ + `commit `__ - Update list of contributors - `commit `__ + `commit `__ - Update ipa.pot translations file - `commit `__ + `commit `__ - freeipa.spec: synchronize with Fedora for 389-ds and PKI versions - `commit `__ + `commit `__ `#8705 `__ - ipa-kdb: mark test functions as static - `commit `__ + `commit `__ - ipa-kdb: reformat ipa_kdb_certauth - `commit `__ + `commit `__ - ipa-kdb: add missing prototypes - `commit `__ + `commit `__ - ipa-kdb: fix compiler warnings - `commit `__ + `commit `__ - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context - `commit `__ + `commit `__ `#8681 `__ - Back to git commits - `commit `__ + `commit `__ @@ -176,35 +176,35 @@ Antonio Torres (11) ---------------------------------------------------------------------------------------------- - sudorule: reduce number of LDAP searches during modification - `commit `__ + `commit `__ `#8780 `__ - ipa passwd: make help for \`--otp\` option clearer - `commit `__ + `commit `__ `#8244 `__ - ipatests: add test for multiple permitopen entries in SSH keys - `commit `__ + `commit `__ - Allow multiple permitopen/permitlisten in SSH keys - `commit `__ + `commit `__ `#8423 `__ - ipatests: add test for group creation with GID and nonposix option - `commit `__ + `commit `__ - Enhance error message when adding non-posix group with a GID - `commit `__ + `commit `__ `#8155 `__ - ipatests: expect boolean type for nsaccountlock in user module - `commit `__ + `commit `__ `#8743 `__ - Return nsaccountlock in user-add as boolean - `commit `__ + `commit `__ `#8743 `__ - Extend logging to include execution time - `commit `__ + `commit `__ `#8759 `__ - ipatests: check that zonemgr is set correctly during server install - `commit `__ + `commit `__ `#8718 `__ - ipaserver: don't ignore zonemgr option on install - `commit `__ + `commit `__ `#8718 `__ @@ -213,7 +213,7 @@ Alexander Scheel (1) ---------------------------------------------------------------------------------------------- - Handle multiple AJP adapters during upgrade - `commit `__ + `commit `__ @@ -221,32 +221,32 @@ François Cami (10) ---------------------------------------------------------------------------------------------- - ipatests: check for the "no sudo present" string absence - `commit `__ + `commit `__ `#8530 `__ - ipa-client-install: output a warning if sudo is not present (2) - `commit `__ + `commit `__ `#8530 `__ - ipa-csreplica-manage, ipa-replica-manage: refactor - `commit `__ + `commit `__ `#8605 `__ - ipalib/util.py: add print_replication_status - `commit `__ + `commit `__ - ipa-replica-manage: handle missing attributes - `commit `__ + `commit `__ `#8605 `__ - ipa-replica-manage: always display nsds5replicalastinitstatus - `commit `__ + `commit `__ `#8605 `__ - freeipa.spec: client: depend on libsss_sudo and sudo - `commit `__ + `commit `__ `#8530 `__ - ipa-client-install: output a warning if sudo is not present - `commit `__ + `commit `__ `#8530 `__ - ipatests: tasks: handle uninstalling packages with nodeps - `commit `__ + `commit `__ - ipatests: add TestInstallWithoutSudo - `commit `__ + `commit `__ `#8530 `__ @@ -255,36 +255,36 @@ Florence Blanc-Renaud (11) ---------------------------------------------------------------------------------------------- - ipatests: update expected message - `commit `__ + `commit `__ `#8779 `__ - Adapt redhat ipaplatform to RHEL9/ELN - `commit `__ + `commit `__ `#8753 `__ - ipatests: fix TestInstalDNSSECFirst::test_resolvconf logic - `commit `__ + `commit `__ `#8695 `__ - ipatests: re-add test_dnssec.py::TestInstallDNSSECFirst in gating - `commit `__ + `commit `__ `#8496 `__ - ipatests: filter_users belongs to nss section - `commit `__ + `commit `__ `#8747 `__ - dnssec: concurrency issue when disabling old replica key - `commit `__ + `commit `__ `#8654 `__ - dnssec: fix ipa-ods-exporter crash when master key missing - `commit `__ + `commit `__ `#8654 `__ - ipatests: use whole date when calling journalctl --since - `commit `__ + `commit `__ `#8728 `__ - freeipa.spec: bump the required version of 389ds - `commit `__ + `commit `__ `#8496 `__ - ipatests: Update PRCI templates for ipa-4-9 - `commit `__ + `commit `__ - pylint: fix inconsistent-return-statements - `commit `__ + `commit `__ `#8720 `__ @@ -293,7 +293,7 @@ Fraser Tweedale (1) ---------------------------------------------------------------------------------------------- - ipa-cert-fix: improve handling of 'pki-server cert-fix' failure - `commit `__ + `commit `__ `#8721 `__ @@ -302,7 +302,7 @@ Jan Pazdziora (1) ---------------------------------------------------------------------------------------------- - Avoid comparing 'max' with 'max\n'. - `commit `__ + `commit `__ @@ -310,7 +310,7 @@ Kaleemullah Siddiqui (1) ---------------------------------------------------------------------------------------------- - ipatests: error message check in uninstall log for KRA - `commit `__ + `commit `__ `#8550 `__ @@ -319,23 +319,23 @@ Mohammad Rizwan (7) ---------------------------------------------------------------------------------------------- - ipatests: Don't rely on certmonger's assigned request id - `commit `__ + `commit `__ `#8725 `__ - ipatests: Enable certbot test on rhel - `commit `__ + `commit `__ - ipatests: introduce wait_for_replication in test_rolecheck_Trust - `commit `__ + `commit `__ `#8553 `__ - ipatests: update nightly definition for ipa_cert_fix suite - `commit `__ + `commit `__ - ipatests: Test if ipa-cert-fix renews expired certs with kra installed - `commit `__ + `commit `__ `#7885 `__ - Move fixture outside the class and add setup_kra capability - `commit `__ + `commit `__ - ipatests: Test if ipa-cert-fix renews expired certs - `commit `__ + `commit `__ `#7885 `__ @@ -344,34 +344,34 @@ Rob Crittenden (11) ---------------------------------------------------------------------------------------------- - Increase timeout for TestIpaHealthCheck to 5400s - `commit `__ + `commit `__ `#8506 `__ - Uninstall without starting the CA in cert expiration test - `commit `__ + `commit `__ `#8506 `__ - ipatests: Test secure_ajp_connector works with multiple connectors - `commit `__ + `commit `__ - Allow overriding is_newer_tomcat_version() - `commit `__ + `commit `__ - Don't renew non-IPA issued certs in ipa-cert-fix - `commit `__ + `commit `__ `#8600 `__ - Set pki-core dependency to 10.3.3 for pki-server cert-fix bug - `commit `__ + `commit `__ - ipatests: test third-party 389-ds cert with ipa-cert-fix - `commit `__ + `commit `__ `#8600 `__ - ipa-cert-fix: Don't hardcode the NSS certificate nickname - `commit `__ + `commit `__ `#8600 `__ - Remove a remaining file used with csrgen - `commit `__ + `commit `__ `#8669 `__ - Don't double-report any errors from pki-spawn failures - `commit `__ + `commit `__ `#8565 `__ - Suppress error message if the CRL directory doesn't exist - `commit `__ + `commit `__ `#8565 `__ @@ -380,43 +380,43 @@ Stanislav Levin (16) ---------------------------------------------------------------------------------------------- - ipatests: Skip test_jsplugins in server less environments - `commit `__ + `commit `__ `#8781 `__ - Azure: Run Lint task as separate job - `commit `__ + `commit `__ `#8772 `__ - pylint: Fix several warnings - `commit `__ + `commit `__ `#8772 `__ - Azure: Don't install pypi's docker - `commit `__ + `commit `__ - Azure: Disable AppArmor profile for chrony - `commit `__ + `commit `__ - Azure: Warn about Host's AVC and SECCOMP - `commit `__ + `commit `__ - Azure: Collect Host's systemd journal - `commit `__ + `commit `__ - Azure: Run chronyd in Docker - `commit `__ + `commit `__ - Azure: Template docs build - `commit `__ + `commit `__ - Azure: Show disk usage - `commit `__ + `commit `__ - Azure: Make it possible to pass additional Pytest args - `commit `__ + `commit `__ - Azure: Run rpmlint on Fedora - `commit `__ + `commit `__ `#8768 `__ - configure: Make rpmlint optional - `commit `__ + `commit `__ `#8768 `__ - ipatests: Fix expectation about GSS error in test for healthcheck - `commit `__ + `commit `__ `#8737 `__ - cleanup: Drop never used path for httpd's ccache - `commit `__ + `commit `__ - ccache_sweeper: Add gssproxy service - `commit `__ + `commit `__ `#8735 `__ @@ -425,49 +425,49 @@ Sergey Orlov (16) ---------------------------------------------------------------------------------------------- - ipatests: log command spawned by pexpect - `commit `__ + `commit `__ - ipatests: allocate pseudo-terminal only for specific command - `commit `__ + `commit `__ - ipatests: update prci definitions for test_http_kdc_proxy - `commit `__ + `commit `__ - ipatests: add test for kdcproxy handling reply split to several TCP packets - `commit `__ + `commit `__ - ipatests: return result of kinit_as_user, pass raiseonerr parameter - `commit `__ + `commit `__ - ipatests: use proper template for TestMaskInstall - `commit `__ + `commit `__ - ipatests: do not configure nameserver when installing client and replica - `commit `__ + `commit `__ `#8703 `__ - ipatests: always try to create A records for hosts in IPA domain - `commit `__ + `commit `__ `#8703 `__ - ipatests: mock resolver factory - `commit `__ + `commit `__ `#8703 `__ - ipatests: disable systemd-resolved cache - `commit `__ + `commit `__ `#8703 `__ - ipatests: do not manually modify /etc/resolv.conf in tests - `commit `__ + `commit `__ `#8703 `__ - ipatests: setup resolvers during replica and client installations - `commit `__ + `commit `__ `#8703 `__ - ipatests: add utility for managing domain name resolvers - `commit `__ + `commit `__ `#8703 `__ - ipatests: collect config files for NetworkManager and systemd-resolved - `commit `__ + `commit `__ `#8703 `__ - ipatests: test Samba mount with NTLM authentication - `commit `__ + `commit `__ `#8636 `__ - ipatests: skip tests for AD trust with shared secret in FIPS mode - `commit `__ + `commit `__ `#8715 `__ @@ -476,7 +476,7 @@ Sudhir Menon (1) ---------------------------------------------------------------------------------------------- - ipatests: Test to check sosreport collects healthcheck.log file - `commit `__ + `commit `__ @@ -484,7 +484,7 @@ Troy Dawson (1) ---------------------------------------------------------------------------------------------- - platform-python only on RHEL8 - `commit `__ + `commit `__ @@ -492,6 +492,6 @@ Thorsten Scherf (2) ---------------------------------------------------------------------------------------------- - Update 10-ssh-key-management.rst - `commit `__ + `commit `__ - Fix lgtm file classification - `commit `__ + `commit `__ diff --git a/src/page/Releases/4.9.4.rst b/src/page/Releases/4.9.4.rst index e90742b09..f2b5b547e 100644 --- a/src/page/Releases/4.9.4.rst +++ b/src/page/Releases/4.9.4.rst @@ -187,7 +187,7 @@ Armando Neto (1) ---------------------------------------------------------------------------------------------- - ipatests: Bump PR-CI templates to Fedora 34 - `commit `__ + `commit `__ @@ -195,85 +195,85 @@ Alexander Bokovoy (37) ---------------------------------------------------------------------------------------------- - Become FreeIPA 4.9.4 - `commit `__ + `commit `__ - po/uk.po: Update translations to FreeIPA ipa-4-9 state - `commit `__ + `commit `__ - po/ru.po: Update translations to FreeIPA ipa-4-9 state - `commit `__ + `commit `__ - po/ipa.pot: Update translations to FreeIPA ipa-4-9 state - `commit `__ + `commit `__ - po/es.po: Update translations to FreeIPA ipa-4-9 state - `commit `__ + `commit `__ - Depend on system-logos-ipa on RHEL/CentOS Stream - `commit `__ + `commit `__ `#8874 `__ - service: enforce keytab user when retrieving the keytab - `commit `__ + `commit `__ `#8872 `__ - po/zh_CN.po: Update translations to FreeIPA ipa-4-9 state - `commit `__ + `commit `__ - po/tr.po: Update translations to FreeIPA ipa-4-9 state - `commit `__ + `commit `__ - po/tg.po: Update translations to FreeIPA ipa-4-9 state - `commit `__ + `commit `__ - po/sk.po: Update translations to FreeIPA ipa-4-9 state - `commit `__ + `commit `__ - po/ru.po: Update translations to FreeIPA ipa-4-9 state - `commit `__ + `commit `__ - po/pt_BR.po: Update translations to FreeIPA ipa-4-9 state - `commit `__ + `commit `__ - po/pt.po: Update translations to FreeIPA ipa-4-9 state - `commit `__ + `commit `__ - po/pa.po: Update translations to FreeIPA ipa-4-9 state - `commit `__ + `commit `__ - po/nl.po: Update translations to FreeIPA ipa-4-9 state - `commit `__ + `commit `__ - po/mr.po: Update translations to FreeIPA ipa-4-9 state - `commit `__ + `commit `__ - po/kn.po: Update translations to FreeIPA ipa-4-9 state - `commit `__ + `commit `__ - po/ja.po: Update translations to FreeIPA ipa-4-9 state - `commit `__ + `commit `__ - po/ipa.pot: Update translations to FreeIPA ipa-4-9 state - `commit `__ + `commit `__ - po/id.po: Update translations to FreeIPA ipa-4-9 state - `commit `__ + `commit `__ - po/hu.po: Update translations to FreeIPA ipa-4-9 state - `commit `__ + `commit `__ - po/hi.po: Update translations to FreeIPA ipa-4-9 state - `commit `__ + `commit `__ - po/fr.po: Update translations to FreeIPA ipa-4-9 state - `commit `__ + `commit `__ - po/eu.po: Update translations to FreeIPA ipa-4-9 state - `commit `__ + `commit `__ - po/es.po: Update translations to FreeIPA ipa-4-9 state - `commit `__ + `commit `__ - po/en_GB.po: Update translations to FreeIPA ipa-4-9 state - `commit `__ + `commit `__ - po/de.po: Update translations to FreeIPA ipa-4-9 state - `commit `__ + `commit `__ - po/cs.po: Update translations to FreeIPA ipa-4-9 state - `commit `__ + `commit `__ - po/ca.po: Update translations to FreeIPA ipa-4-9 state - `commit `__ + `commit `__ - po/bn_IN.po: Update translations to FreeIPA ipa-4-9 state - `commit `__ + `commit `__ - ds: Support renaming of a replication plugin in 389-ds - `commit `__ + `commit `__ `#8799 `__ - Update IRC links to point to Libera.chat - `commit `__ + `commit `__ - freeipa.spec: do not use jsl for linting on Fedora 34+ - `commit `__ + `commit `__ `#8847 `__ - ipa-otpd: handle LDAP timeout in a better way - `commit `__ + `commit `__ `#6587 `__ - ipaserver/install/dns: handle SERVFAIL when checking reverse zone - `commit `__ + `commit `__ `#8794 `__ - Back to git snapshots - `commit `__ + `commit `__ @@ -281,7 +281,7 @@ Antonio Torres (1) ---------------------------------------------------------------------------------------------- - hbacrule: reduce number of LDAP searches during deletion - `commit `__ + `commit `__ `#8784 `__ @@ -290,7 +290,7 @@ Carl George (1) ---------------------------------------------------------------------------------------------- - Also use uglifyjs on CentOS Stream 8 - `commit `__ + `commit `__ @@ -298,24 +298,24 @@ Christian Heimes (7) ---------------------------------------------------------------------------------------------- - Move constants, document timeout loop - `commit `__ + `commit `__ - Fix update_dna_shared_config to wait for both entries - `commit `__ + `commit `__ `#8831 `__ - Constrain pylint to supported versions - `commit `__ + `commit `__ `#8818 `__ - Add max/min safe integer - `commit `__ + `commit `__ `#8361 `__, `#8802 `__ - Use PyCA crypto provider for KRAClient - `commit `__ + `commit `__ `#8814 `__ - Improve wsgi app loading - `commit `__ + `commit `__ - Better mod_wsgi configuration - `commit `__ + `commit `__ @@ -323,26 +323,26 @@ François Cami (7) ---------------------------------------------------------------------------------------------- - ipatests: mark test_ipahealthcheck_hidden_replica as expected failure - `commit `__ + `commit `__ `#8534 `__, `#8582 `__ - ipatests: hidden replica: misc fixes - `commit `__ + `commit `__ `#8534 `__ - ipatests: hidden replica: use dns_update_system_records - `commit `__ + `commit `__ `#8534 `__ - ipatests: use wait_for_replication for hidden replica checks - `commit `__ + `commit `__ `#8534 `__ - ipatests: hiddenreplica: use wait_for_ipa_to_start after restore - `commit `__ + `commit `__ `#8534 `__ - ipatests: tasks.py: add dns_update_system_records - `commit `__ + `commit `__ `#8534 `__ - ipatests: tasks.py: add wait_for_ipa_to_start - `commit `__ + `commit `__ `#8534 `__ @@ -351,39 +351,39 @@ Florence Blanc-Renaud (12) ---------------------------------------------------------------------------------------------- - pkispawn: override AJP connector address - `commit `__ + `commit `__ `#8851 `__ - Spec file: bump augeas-libs version - `commit `__ + `commit `__ `#8676 `__ - xmlrpc tests: add test for idrange auto-private-groups option - `commit `__ + `commit `__ `#8807 `__ - Trust: add auto private groups option - `commit `__ + `commit `__ `#8807 `__ - LDAP schema: new attribute ipaautoprivategroups - `commit `__ + `commit `__ `#8807 `__ - Design doc for idrange option "auto-private-groups" - `commit `__ + `commit `__ `#8807 `__ - ipatests: check that the output of sudo -V is not displayed - `commit `__ + `commit `__ `#8767 `__ - client install: do not capture sudo -V stdout - `commit `__ + `commit `__ `#8767 `__ - Bumps openssl requires - `commit `__ + `commit `__ `#8632 `__ - ipatests: TestIpaHealthCheck now needs 1 client - `commit `__ + `commit `__ - ipatests: call server-del before replica uninstall - `commit `__ + `commit `__ `#8792 `__ - ipatests: collect PKI config files and NSSDB - `commit `__ + `commit `__ @@ -391,22 +391,22 @@ MIZUTA Takeshi (8) ---------------------------------------------------------------------------------------------- - Add --keyfile option to ipa-otptoken-import.1 - `commit `__ + `commit `__ - Add argument for --entry option in ipa-managed-entries.1 - `commit `__ + `commit `__ - Remove -s option from ipa-ldap-updater usage - `commit `__ + `commit `__ - Add argument for --schema-file option in ipa-ldap-updater.1 - `commit `__ + `commit `__ - Add arguments to the description of OPTIONS in ipa-winsync-migrate.1 - `commit `__ + `commit `__ - Fix the option to match in the ipa-client-automount usage and man-page - `commit `__ + `commit `__ - Add -d option to match in the ipa-client-samba usage and man-page - `commit `__ + `commit `__ - man: fix typos in ipa-epn.1 - `commit `__ + `commit `__ @@ -414,16 +414,16 @@ Michal Polovka (3) ---------------------------------------------------------------------------------------------- - ipatests: test_installation: add install test scenarios - `commit `__ + `commit `__ `#2575 `__, `#2692 `__, `#4011 `__, `#4166 `__ - WebUI: Handle assertion if multiple notifications are present - `commit `__ + `commit `__ `#8641 `__ - WebUI: test_user: test if user is enabled by default - `commit `__ + `commit `__ `#8203 `__ @@ -432,7 +432,7 @@ Mohammad Rizwan (1) ---------------------------------------------------------------------------------------------- - ipatests: Test if ACME renews the issued cert with cerbot - `commit `__ + `commit `__ `#4751 `__ @@ -441,49 +441,49 @@ Rob Crittenden (15) ---------------------------------------------------------------------------------------------- - Catch ValueError when trying to retrieve existing credentials - `commit `__ + `commit `__ `#8873 `__ - ipatests: kinit on server for test_proxycommand_invalid_shell - `commit `__ + `commit `__ `#8785 `__ - Add ability to search on certificate revocation status - `commit `__ + `commit `__ `#7835 `__ - Load dogtag RA plugin in installers so profiles can be loaded - `commit `__ + `commit `__ `#8738 `__ - Parse the debugging cache log to determine the read savings - `commit `__ + `commit `__ `#8798 `__ - Add a unit test for the LDAP cache layer - `commit `__ + `commit `__ `#8798 `__ - Add LDAP cache options to the default.conf man page - `commit `__ + `commit `__ `#8798 `__ - Implement simple LDAP cache layer - `commit `__ + `commit `__ `#8798 `__ - Unify installer context to be 'installer' - `commit `__ + `commit `__ `#8798 `__ - Call the LDAPClient layer when modifying values - `commit `__ + `commit `__ `#8798 `__ - Only attempt to upgrade ACME configuration files if deployed - `commit `__ + `commit `__ `#8832 `__ - Parse Apache log etime and display average per command - `commit `__ + `commit `__ `#8809 `__ - Retrieve the user objectclasses when checking for existence - `commit `__ + `commit `__ `#8801 `__ - Cache the value of ca_is_enabled in the request context - `commit `__ + `commit `__ `#8797 `__ - Add pkey_only to the service_find calls in host del and disable - `commit `__ + `commit `__ `#8787 `__ @@ -492,66 +492,66 @@ Stanislav Levin (27) ---------------------------------------------------------------------------------------------- - ipatests: Fetch sudo rules without time offset - `commit `__ + `commit `__ `#8844 `__ - azure: Make it possible to adjust Docker resources per test env - `commit `__ + `commit `__ - azure: coredump: Wait for systemd fully booted - `commit `__ + `commit `__ - azure: Re-balance tests envs - `commit `__ + `commit `__ - azure: Warn about extra and missing gating tests compared to PR-CI - `commit `__ + `commit `__ - ipatests: dnssec: Add alternative approach for checking chain of trust - `commit `__ + `commit `__ `#8793 `__ - azure: Collect installed packages - `commit `__ + `commit `__ - ipatests: Suppress list trust or certificates - `commit `__ + `commit `__ - ipatests: Ignore warnings on failed to read files on tarring - `commit `__ + `commit `__ - pytest: Show extra summary information for all except passed tests - `commit `__ + `commit `__ - dns: get_reverse_zone: Ignore resolver's timeout - `commit `__ + `commit `__ `#7397 `__ - dnsutil: Improvements for IPA DNS Resolver - `commit `__ + `commit `__ - ipatests: Handle network-isolated mode - `commit `__ + `commit `__ - azure: Run Base and XMLRPC tests is isolated network - `commit `__ + `commit `__ - ipatests: Setup and collect BIND logs - `commit `__ + `commit `__ - BIND: Setup logging - `commit `__ + `commit `__ `#8856 `__ - azure: Warn about memory issues - `commit `__ + `commit `__ - azure: Add workaround for PhantomJS against OpenSSL 1.1.1 - `commit `__ + `commit `__ - ipatests: Update expectations for test_detect_container - `commit `__ + `commit `__ - azure: Mask systemd-resolved - `commit `__ + `commit `__ - azure: Remove no longer needed repo - `commit `__ + `commit `__ - azure: Wait for systemd booted - `commit `__ + `commit `__ - azure: Enforce multi-user.target as default systemd's target - `commit `__ + `commit `__ - azure: Collect systemd boot log - `commit `__ + `commit `__ - azure: bump F32->F34 - `commit `__ + `commit `__ `#8848 `__ - pkispawn: Make timeout consistent with IPA's startup_timeout - `commit `__ + `commit `__ `#8830 `__ - pylint: Adapt to new Pylint 2.8 - `commit `__ + `commit `__ `#8818 `__ @@ -560,7 +560,7 @@ Sergey Orlov (1) ---------------------------------------------------------------------------------------------- - ipatests: increase timeout for test_commands up to 1.5 hours - `commit `__ + `commit `__ @@ -569,11 +569,11 @@ Serhii Tsymbaliuk (2) - WebUI tests: Add test for 'ipaautoprivategroups' field on 'ID Ranges' page - `commit `__ + `commit `__ `#8837 `__ - WebUI: Add support of 'ipaautoprivategroups' LDAP attribute on 'ID Ranges' page - `commit `__ + `commit `__ `#8837 `__ @@ -583,4 +583,4 @@ Sudhir Menon (1) - ipatests: Test to check ipa-healthcheck tool displays warning when run on ipa-client - `commit `__ + `commit `__ diff --git a/src/page/Releases/4.9.5.rst b/src/page/Releases/4.9.5.rst index e47fb6b14..338097769 100644 --- a/src/page/Releases/4.9.5.rst +++ b/src/page/Releases/4.9.5.rst @@ -67,7 +67,7 @@ Armando Neto (1) ---------------------------------------------------------------------------------------------- - ipatests: Bump PR-CI boxes - `commit `__ + `commit `__ @@ -75,12 +75,12 @@ Alexander Bokovoy (3) ---------------------------------------------------------------------------------------------- - Become FreeIPA 4.9.5 - `commit `__ + `commit `__ - get_credentials: return ValueError for missing creds - `commit `__ + `commit `__ `#8873 `__ - Back to git snapshots - `commit `__ + `commit `__ @@ -88,17 +88,17 @@ Florence Blanc-Renaud (4) ---------------------------------------------------------------------------------------------- - ipa-cert-fix man page: add note about certmonger renewal - `commit `__ + `commit `__ `#8702 `__ - freeipa.spec: bump 389-ds version - `commit `__ + `commit `__ `#8691 `__, `#8756 `__ - ipatests: delete the replica before uninstallation - `commit `__ + `commit `__ `#8876 `__ - ipatests: set selinux context for fips mode - `commit `__ + `commit `__ `#8868 `__ @@ -107,9 +107,9 @@ Stanislav Levin (2) ---------------------------------------------------------------------------------------------- - gssproxy: Don't refresh expired delegated credentials - `commit `__ + `commit `__ - krb_utils: Simplify get_credentials - `commit `__ + `commit `__ `#8873 `__ @@ -118,9 +118,9 @@ Sergey Orlov (2) ---------------------------------------------------------------------------------------------- - ipatests: disable test_nfs.py::TestNFS in nightly runs on Fedora 33 - `commit `__ + `commit `__ `#8877 `__ - ipatests: temporary disable execution of test_nfs.py::TestNFS in nightly runs - `commit `__ + `commit `__ `#8877 `__ diff --git a/src/page/Releases/4.9.6.rst b/src/page/Releases/4.9.6.rst index 7781575a2..b4a74b284 100644 --- a/src/page/Releases/4.9.6.rst +++ b/src/page/Releases/4.9.6.rst @@ -109,9 +109,9 @@ Alexander Bokovoy (2) ---------------------------------------------------------------------------------------------- - Become IPA v.4.9.6 - `commit `__ + `commit `__ - Back to git snapshots - `commit `__ + `commit `__ @@ -119,16 +119,16 @@ Antonio Torres (3) ---------------------------------------------------------------------------------------------- - ipatests: test host update using shortname - `commit `__ + `commit `__ `#8726 `__, `#8884 `__ - host: try to resolve FQDN before command execution - `commit `__ + `commit `__ `#8726 `__, `#8884 `__ - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server - `commit `__ + `commit `__ `#8532 `__ @@ -137,24 +137,24 @@ Christian Heimes (7) ---------------------------------------------------------------------------------------------- - Also drop Custodia client and forwarder - `commit `__ + `commit `__ `#8882 `__ - Add Custodia tests - `commit `__ + `commit `__ - Remove more unused Custodia code - `commit `__ + `commit `__ `#8882 `__ - Fix Custodia pylint issues - `commit `__ + `commit `__ `#8882 `__ - Fix Custodia imports - `commit `__ + `commit `__ `#8882 `__ - Remove unused Custodia modules - `commit `__ + `commit `__ `#8882 `__ - Add Custodia 0.6.0 to ipaserver package - `commit `__ + `commit `__ `#8882 `__ @@ -163,13 +163,13 @@ François Cami (3) ---------------------------------------------------------------------------------------------- - ipa-client-install: update sssd.conf if nsupdate requires -g - `commit `__ + `commit `__ `#8402 `__ - ipa-client-install: invoke nsupdate twice (GSS-TSIG, plain) - `commit `__ + `commit `__ `#8402 `__ - ipa-client-install: remove fsync in do_nsupdate() - `commit `__ + `commit `__ `#8402 `__ @@ -178,10 +178,10 @@ Florence Blanc-Renaud (2) ---------------------------------------------------------------------------------------------- - ipatests: use non-ascii chars in CA-less install - `commit `__ + `commit `__ `#8880 `__ - CA-less install: non-ASCII chars in CA cert subject - `commit `__ + `commit `__ `#8880 `__ @@ -190,13 +190,13 @@ Rob Crittenden (3) ---------------------------------------------------------------------------------------------- - Return a copy of cached entries, only with requested attributes - `commit `__ + `commit `__ `#8897 `__ - Use get_replication_plugin_name in LDAP updater - `commit `__ + `commit `__ `#8885 `__ - When loading certificates verify that it is X.509 v3 - `commit `__ + `commit `__ `#8817 `__ @@ -205,15 +205,15 @@ Stanislav Levin (4) ---------------------------------------------------------------------------------------------- - ipatests: Add tests for \`env\` plugin - `commit `__ + `commit `__ - ipatests: Add tests for \`plugins\` plugin - `commit `__ + `commit `__ `#8898 `__ - plugins: Don't treat keys of api as bytes - `commit `__ + `commit `__ `#8898 `__ - ipatests: healthcheck: Update IPAHostKeytab assumptions - `commit `__ + `commit `__ `#8889 `__ @@ -222,7 +222,7 @@ Serhii Tsymbaliuk (1) ---------------------------------------------------------------------------------------------- - WebUI: Fix certificate serial number representation - `commit `__ + `commit `__ `#8754 `__ @@ -231,8 +231,8 @@ Sudhir Menon (2) ---------------------------------------------------------------------------------------------- - Increase timeout for test_commands.py - `commit `__ + `commit `__ - ipatests: Test to check that ResponseNotReady error is not displayed when user session cache is deleted - `commit `__ + `commit `__ `#7752 `__ diff --git a/src/page/Releases/4.9.7.rst b/src/page/Releases/4.9.7.rst index daf89dbe3..c5ec40796 100644 --- a/src/page/Releases/4.9.7.rst +++ b/src/page/Releases/4.9.7.rst @@ -196,7 +196,7 @@ Armando Neto (1) ---------------------------------------------------------------------------------------------- - ipatests: bump prci boxes + move gating to f34 - `commit `__ + `commit `__ `#8935 `__ @@ -205,10 +205,10 @@ Alexander Bokovoy (2) ---------------------------------------------------------------------------------------------- - rhel platform: add a named crypto-policy support - `commit `__ + `commit `__ `#8925 `__ - Back to git snapshots - `commit `__ + `commit `__ @@ -216,17 +216,17 @@ Anuja More (5) ---------------------------------------------------------------------------------------------- - ipatests: Test unsecure nsupdate. - `commit `__ + `commit `__ `#8402 `__ - ipatests: Refactor test_check_otpd_after_idle_timeout - `commit `__ + `commit `__ `#6587 `__ - ipatests: skip test_basesearch_compat_tree on fedora. - `commit `__ + `commit `__ - ipatests: Test ldapsearch with base scope works with compat tree. - `commit `__ + `commit `__ - ipatests: Test for OTP when the LDAP connection timed out. - `commit `__ + `commit `__ `#6587 `__ @@ -235,23 +235,23 @@ Antonio Torres (6) ---------------------------------------------------------------------------------------------- - ipatests: expect SOA serial option deprecation warning - `commit `__ + `commit `__ `#8227 `__ - dnszone: deprecate option for setting SOA serial - `commit `__ + `commit `__ `#8227 `__ - ipatests: test if KRA install fails when ca_host is overriden - `commit `__ + `commit `__ `#8245 `__ - ipa-kra-install: exit if ca_host is overriden - `commit `__ + `commit `__ `#8245 `__ - ipatests: ensure auth indicators can't be added to internal IPA services - `commit `__ + `commit `__ `#8206 `__ - Add checks to prevent adding auth indicators to internal IPA services - `commit `__ + `commit `__ `#8206 `__ @@ -260,23 +260,23 @@ Christian Heimes (8) ---------------------------------------------------------------------------------------------- - Fix string check in uninstall helper - `commit `__ + `commit `__ `#8937 `__ - Fix ldapupdate.get_sub_dict() for missing named user - `commit `__ + `commit `__ `#8936 `__ - Test DNA plugin configuration - `commit `__ + `commit `__ - Fix oid of ipaUserDefaultSubordinateId - `commit `__ + `commit `__ - Fix ipa-server-upgrade - `commit `__ + `commit `__ - Use 389-DS' dnaInterval setting to assign intervals - `commit `__ + `commit `__ - Redesign subid feature - `commit `__ + `commit `__ - Add basic support for subordinate user/group ids - `commit `__ + `commit `__ `#8361 `__ @@ -285,9 +285,9 @@ Chris Kelley (2) ---------------------------------------------------------------------------------------------- - Parse cert chain as JSON not XML - `commit `__ + `commit `__ - Parse getStatus as JSON not XML - `commit `__ + `commit `__ @@ -295,40 +295,40 @@ François Cami (13) ---------------------------------------------------------------------------------------------- - Update list of contributors - `commit `__ + `commit `__ - ipatests: use krb5_trace in TestIpaAdTrustInstall - `commit `__ + `commit `__ `#8944 `__ - freeipa.spec.in: remove python3-pexpect from Requires - `commit `__ + `commit `__ `#8938 `__ - gating.yaml: Fix TestInstallMaster timeout - `commit `__ + `commit `__ - Azure: temporarily disable problematic tests, #2 - `commit `__ + `commit `__ `#8864 `__ - Azure: temporarily disable problematic tests, #1 - `commit `__ + `commit `__ `#8864 `__ - tasks.py: fix flake8-reported issues - `commit `__ + `commit `__ `#8931 `__ - test_acme: make password renewal more robust - `commit `__ + `commit `__ `#8929 `__ - test_acme: refactor with tasks - `commit `__ + `commit `__ - ipatests: smbclient "-k" => "--use-kerberos=desired" - `commit `__ + `commit `__ `#8926 `__ - rpcserver.py: perf_counter_ns is Python 3.7+ - `commit `__ + `commit `__ `#8891 `__ - ipatests: smoke test for server debug mode. - `commit `__ + `commit `__ `#8891 `__ - paths: add IPA_SERVER_CONF - `commit `__ + `commit `__ `#8891 `__ @@ -337,41 +337,41 @@ Florence Blanc-Renaud (12) ---------------------------------------------------------------------------------------------- - webui tests: fix algo for finding available idrange - `commit `__ + `commit `__ `#8919 `__ - Index: Fix definition for memberOf - `commit `__ + `commit `__ `#8920 `__ - spec file: Trust controller role should pull sssd-winbind-idmap package - `commit `__ + `commit `__ `#8923 `__ - webui tests: close notification when revoking cert - `commit `__ + `commit `__ `#8911 `__ - pr-ci definitions: add subid-related jobs - `commit `__ + `commit `__ `#8361 `__ - ipatests: use whole date when calling journalctl --since - `commit `__ + `commit `__ `#8918 `__ - Server install: do not use unchecked ip addr for ipa-ca record - `commit `__ + `commit `__ `#8810 `__ - man page: update ipa-server-upgrade.1 - `commit `__ + `commit `__ `#8913 `__ - augeas: bump version for rhel9 - `commit `__ + `commit `__ `#8676 `__ - XMLRPC test: add a test for stageuser-add --user-auth-type - `commit `__ + `commit `__ `#8909 `__ - stageuser: add ipauserauthtypeclass when required - `commit `__ + `commit `__ `#8909 `__ - Remove unneeded dependency on python-coverage - `commit `__ + `commit `__ `#8905 `__ @@ -380,15 +380,15 @@ Michal Polovka (3) ---------------------------------------------------------------------------------------------- - ipatests: test_ipahealthcheck: Verify permissions for /var/log/ files - `commit `__ + `commit `__ `#8949 `__ - ipatests: test_installation: move tracking_reqs dependency to ipalib constants ipaserver: krainstance: utilize moved tracking_reqs dependency - `commit `__ + `commit `__ `#8795 `__ - ipatests: test_ipahealthcheck: print a message if a system is healthy - `commit `__ + `commit `__ `#8892 `__ @@ -397,11 +397,11 @@ Mohammad Rizwan (2) ---------------------------------------------------------------------------------------------- - ipatests: Look for warning into stderr instead of stdout - `commit `__ + `commit `__ `#8890 `__ - ipatests: Test ipa-cert-fix warns when startup directive is missing from CS.cfg - `commit `__ + `commit `__ `#8890 `__ @@ -410,66 +410,66 @@ Rob Crittenden (21) ---------------------------------------------------------------------------------------------- - Only call add_agent_to_security_domain_admins() when CA is installed - `commit `__ + `commit `__ `#8956 `__ - ipatests: Verify that securitydomain is updated on server-del - `commit `__ + `commit `__ `#8930 `__ - Clean up the PKI securitydomain when removing a server - `commit `__ + `commit `__ `#8930 `__ - pr-ci definitions: add custom plugin-related jobs - `commit `__ + `commit `__ `#8415 `__ - ipatests: add suite for testing custom plugins - `commit `__ + `commit `__ `#8415 `__ - Don't assume that plugin attributes and objectclasses are lowercase - `commit `__ + `commit `__ `#8415 `__ - Add index for sudoorder - `commit `__ + `commit `__ `#8939 `__ - ipatests: verify that getcert output includes the issued date - `commit `__ + `commit `__ - ipa-advise: Define the domain used when looking up ipa-ca - `commit `__ + `commit `__ `#8934 `__ - ipa-advise: if p11-kit provides opensc, don't add to NSS db - `commit `__ + `commit `__ `#8934 `__ - ipatests: test ipa-getkeytab server option - `commit `__ + `commit `__ `#8478 `__ - ipa-getkeytab: fix compiler warnings - `commit `__ + `commit `__ `#8478 `__ - ipa-getkeytab: add option to discover servers using DNS SRV - `commit `__ + `commit `__ `#8478 `__ - Provide more information in ipa-certupdate on ccache failure - `commit `__ + `commit `__ `#8257 `__ - Fix automountlocation-tofiles expected output in xmlrpc test - `commit `__ + `commit `__ `#7814 `__ - ipatests: Add test for ipa automountlocation-tofiles - `commit `__ + `commit `__ `#7814 `__ - Display all orphaned keys in automountlocation-tofiles - `commit `__ + `commit `__ `#7814 `__ - ipatests: test removing last KRA when it is not running - `commit `__ + `commit `__ `#8397 `__ - Use new method in check to prevent removal of last KRA - `commit `__ + `commit `__ `#8397 `__ - Fall back to krbprincipalname when validating host auth indicators - `commit `__ + `commit `__ `#8206 `__ - Add SHA384withRSA as a certificate signing algorithm - `commit `__ + `commit `__ `#8906 `__ @@ -478,7 +478,7 @@ Stanislav Levin (1) ---------------------------------------------------------------------------------------------- - ipatests: Fix TestAJPSecretUpgrade tests on systems without pkiuser - `commit `__ + `commit `__ `#8942 `__ @@ -487,7 +487,7 @@ Serhii Tsymbaliuk (1) ---------------------------------------------------------------------------------------------- - WebUI: Improve subordinate ids user workflow - `commit `__ + `commit `__ `#8361 `__ @@ -497,5 +497,5 @@ Sudhir Menon (1) - ipatests: Fix for test_source_ipahealthcheck_ipa_host_check_ipahostkeytab - `commit `__ + `commit `__ `#8889 `__ diff --git a/src/page/Releases/4.9.8.rst b/src/page/Releases/4.9.8.rst index 9329b9b66..c7682a517 100644 --- a/src/page/Releases/4.9.8.rst +++ b/src/page/Releases/4.9.8.rst @@ -322,10 +322,10 @@ Armando Neto (2) ---------------------------------------------------------------------------------------------- - ipatests: Fix UI_driver method after Selenium upgrade - `commit `__ + `commit `__ `#9029 `__ - ipatests: Bump PR-CI latest templates to Fedora 35 - `commit `__ + `commit `__ @@ -333,41 +333,41 @@ Alexander Bokovoy (12) ---------------------------------------------------------------------------------------------- - freeipa.spec.in: -server subpackage should require samba-client-libs - `commit `__ + `commit `__ `#9031 `__ - ipa-kdb: validate domain SID in incoming PAC for trusted domains for S4U - `commit `__ + `commit `__ `#9031 `__ - ipa-kdb: honor SID from the host or service entry - `commit `__ + `commit `__ `#9031 `__ - SMB: switch IPA domain controller role - `commit `__ + `commit `__ `#9031 `__ - ipa-kdb: Use proper account flags for Kerberos principal in PAC - `commit `__ + `commit `__ `#9031 `__ - ipa-kdb: add PAC_ATTRIBUTES_INFO PAC buffer support - `commit `__ + `commit `__ `#9031 `__ - ipa-kdb: add support for PAC_REQUESTER_SID buffer - `commit `__ + `commit `__ `#9031 `__ - ipa-kdb: add support for PAC_UPN_DNS_INFO_EX - `commit `__ + `commit `__ `#9031 `__ - ipa-kdb: S4U2Proxy target should use a service name without realm - `commit `__ + `commit `__ `#9031 `__ - ipa-kdb: use entry DN to compare aliased entries in S4U operations - `commit `__ + `commit `__ `#9031 `__ - ipa-kdb: enforce SID checks when generating PAC - `commit `__ + `commit `__ `#9031 `__ - ipa-kdb: store SID in the principal entry - `commit `__ + `commit `__ `#9031 `__ @@ -376,13 +376,13 @@ Antonio Torres (4) ---------------------------------------------------------------------------------------------- - Back to git snapshots - `commit `__ + `commit `__ - Become IPA 4.9.8 - `commit `__ + `commit `__ - Update list of contributors - `commit `__ + `commit `__ - Update translations to FreeIPA ipa-4-9 state - `commit `__ + `commit `__ @@ -390,7 +390,7 @@ Christian Heimes (1) ---------------------------------------------------------------------------------------------- - Add URI system records for KDC - `commit `__ + `commit `__ `#8968 `__ @@ -399,7 +399,7 @@ Chris Kelley (1) ---------------------------------------------------------------------------------------------- - Make Dogtag return XML for ipa cert-find - `commit `__ + `commit `__ `#8980 `__ @@ -408,7 +408,7 @@ Endi Sukma Dewata (1) ---------------------------------------------------------------------------------------------- - Specify PKI installation log paths - `commit `__ + `commit `__ `#8966 `__ @@ -417,20 +417,20 @@ François Cami (6) ---------------------------------------------------------------------------------------------- - freeipa.spec: depend on bind-dnssec-utils - `commit `__ + `commit `__ `#9026 `__ - pwpolicy: change lifetime error message - `commit `__ + `commit `__ `#9038 `__ - subid: subid-match: display the owner's ID not DN - `commit `__ + `commit `__ - ipatests: refactor test_ipa_cert_fix with tasks - `commit `__ + `commit `__ `#8932 `__ - freeipa.spec.in: update 389-DS version - `commit `__ + `commit `__ - Back to git snapshots - `commit `__ + `commit `__ @@ -438,85 +438,85 @@ Florence Blanc-Renaud (27) ---------------------------------------------------------------------------------------------- - ipatests: remove xfail on f35+ for test_number_of_zones - `commit `__ + `commit `__ `#8700 `__ - ipatests: mark test_installation_TestInstallWithCA_DNS3 as xfail - `commit `__ + `commit `__ `#8700 `__ - ipatests: fix get_user_result method - `commit `__ + `commit `__ `#8995 `__ - ipatests: update the expected output of user-add cmd - `commit `__ + `commit `__ `#8995 `__ - User plugin: do not return the SID on user creation - `commit `__ + `commit `__ `#8995 `__ - Webui tests: new idrange now requires base RID - `commit `__ + `commit `__ `#8995 `__ - ipatests: backup-reinstall-restore needs to clear sssd cache - `commit `__ + `commit `__ `#8995 `__ - User lifecycle: ignore SID when moving from preserved to staged - `commit `__ + `commit `__ `#8995 `__ - ipatests: adapt expected output with SID - `commit `__ + `commit `__ `#8995 `__ - ipatests: interactive install prompts for netbios name - `commit `__ + `commit `__ `#8995 `__ - ipatests: add test ensuring SIDs are generated for new installs - `commit `__ + `commit `__ `#8995 `__ - ipa config: add --enable-sid option - `commit `__ + `commit `__ `#8995 `__ - adtrust install: define constants for rid bases - `commit `__ + `commit `__ `#8995 `__ - Installers: configure sid generation in server/replica installer - `commit `__ + `commit `__ `#8995 `__ - SID generation: define SIDInstallInterface - `commit `__ + `commit `__ `#8995 `__ - ipa-server-install uninstall: remove tdb files - `commit `__ + `commit `__ `#8687 `__ - ipa-client-samba uninstall: remove tdb files - `commit `__ + `commit `__ `#8687 `__ - ipatests: Update the subca used in TestIPACommand::test_cacert_manage - `commit `__ + `commit `__ `#9006 `__ - webui test: close notification after selinux user map update - `commit `__ + `commit `__ `#8846 `__ - ipatests: increase sosreport verbosity - `commit `__ + `commit `__ `#9000 `__ - ipatests: update expected error message for openssl verify - `commit `__ + `commit `__ `#8999 `__ - ipatests: fix expected msg in tasks.run_ssh_cmd - `commit `__ + `commit `__ `#8989 `__ - ipatests: fix logic waiting for repl in TestIPACommand - `commit `__ + `commit `__ `#8975 `__ - migrate-ds: workaround to detect compat tree - `commit `__ + `commit `__ `#8984 `__ - ipatests: rpcclient now uses --use-kerberos=desired - `commit `__ + `commit `__ `#8979 `__ - selinux policy: allow custodia to access /proc/cpuinfo - `commit `__ + `commit `__ `#8972 `__ - ipatests: use whole date for journalctl --since - `commit `__ + `commit `__ `#8953 `__ @@ -525,7 +525,7 @@ Jochen Kellner (1) ---------------------------------------------------------------------------------------------- - Remove duplicate \_() in the error path - `commit `__ + `commit `__ `#9046 `__ @@ -534,7 +534,7 @@ Michal Polovka (1) ---------------------------------------------------------------------------------------------- - ipatests: webui: Specify configuration loader - `commit `__ + `commit `__ `#9009 `__ @@ -543,14 +543,14 @@ Mohammad Rizwan (4) ---------------------------------------------------------------------------------------------- - ipatests: remove redundant kinit from test - `commit `__ + `commit `__ - ipatests: update the timemout for test_ipa_cert_fix.py in nightlies - `commit `__ + `commit `__ - ipatests: wait while http/ldap/pkinit cert get renew on replica - `commit `__ + `commit `__ `#8815 `__ - ipatests: test to renew certs on replica using ipa-cert-fix - `commit `__ + `commit `__ `#7885 `__ @@ -559,7 +559,7 @@ Pavel Březina (1) ---------------------------------------------------------------------------------------------- - kdb: fix typo in ipa_kdcpolicy_check_as - `commit `__ + `commit `__ @@ -567,10 +567,10 @@ Petr Voborník (2) ---------------------------------------------------------------------------------------------- - webui tests: remove unnecessary code in add_record - `commit `__ + `commit `__ `#9036 `__ - fix(webui): create correct PTR record when navigated from host page - `commit `__ + `commit `__ `#9036 `__ @@ -579,25 +579,25 @@ Rob Crittenden (7) ---------------------------------------------------------------------------------------------- - Don't limit role-find by hostname when searching for last KRA - `commit `__ + `commit `__ `#8397 `__ - Make the schema cache TTL user-configurable - `commit `__ + `commit `__ `#8492 `__ - On redhat-based platforms rely on authselect to enable sudo - `commit `__ + `commit `__ `#8755 `__ - ipatests: Test that a user can be issued multiple certificates - `commit `__ + `commit `__ `#8986 `__ - Don't store entries with a usercertificate in the LDAP cache - `commit `__ + `commit `__ `#8986 `__ - Increase default limit on LDAP searches to 100k - `commit `__ + `commit `__ `#8962 `__ - Catch and log errors when adding CA profiles - `commit `__ + `commit `__ `#8974 `__ @@ -606,7 +606,7 @@ Sumit Bose (1) ---------------------------------------------------------------------------------------------- - extdom: return LDAP_NO_SUCH_OBJECT if domains differ - `commit `__ + `commit `__ `#8965 `__ @@ -615,50 +615,50 @@ Stanislav Levin (15) ---------------------------------------------------------------------------------------------- - ipatests: TestMultipleExternalCA: Create tempfiles on remote host - `commit `__ + `commit `__ `#9013 `__ - azure: Don't customize pip's builddir - `commit `__ + `commit `__ `#9011 `__ - seccomp profile: Default to ENOSYS instead of EPERM - `commit `__ + `commit `__ `#9008 `__ - test_schema_plugin: Add missing tests for command, class and topic commands - `commit `__ + `commit `__ `#8954 `__ - test_schema_plugin: Drop dependency on Tracker - `commit `__ + `commit `__ `#8954 `__ - command_defaults: Don't crash on nonexistent command - `commit `__ + `commit `__ `#8954 `__ - schema plugin: Fix commands without metaobject arg - `commit `__ + `commit `__ `#8954 `__ - ipatests: Log debug messages for locator plugin - `commit `__ + `commit `__ `#8353 `__ - krb5: Pin kpasswd server to a primary one - `commit `__ + `commit `__ `#8353 `__ - azure: Ignore tar errors - `commit `__ + `commit `__ `#8983 `__ - docs: Make use of \`text\` highlighting - `commit `__ + `commit `__ `#8985 `__ - ipatests: Add tests for \`schema\` Command - `commit `__ + `commit `__ `#8955 `__ - schema plugin: Generate stable fingerprint - `commit `__ + `commit `__ `#8955 `__ - pycodestyle: Check \*.in Python files - `commit `__ + `commit `__ `#8961 `__ - Azure: Run pycodestyle check in Lint job - `commit `__ + `commit `__ `#8961 `__ @@ -667,10 +667,10 @@ Sergey Orlov (2) ---------------------------------------------------------------------------------------------- - ipatests: use AD domain name from config instead of hardcoded value - `commit `__ + `commit `__ - ipatests: check for message in sssd log only during actual test action - `commit `__ + `commit `__ `#8987 `__ @@ -680,7 +680,7 @@ Sumedh Sidhaye (1) - Test to verify if the case of a request for /ca/rest/authority/{id}/cert (or .../chain) - `commit `__ + `commit `__ @@ -688,4 +688,4 @@ Vit Mojzis (1) ---------------------------------------------------------------------------------------------- - selinux: Fix file context definition for /var/run - `commit `__ + `commit `__ diff --git a/src/page/Releases/4.9.9.rst b/src/page/Releases/4.9.9.rst index 33de0e25f..8d0e34245 100644 --- a/src/page/Releases/4.9.9.rst +++ b/src/page/Releases/4.9.9.rst @@ -227,67 +227,67 @@ Alexander Bokovoy (20) ---------------------------------------------------------------------------------------------- - ipatests: collect samba logs when setting up trust to AD - `commit `__ + `commit `__ - ipa-sam: retrieve trusted domain account credential from the TDO itself - `commit `__ + `commit `__ `#9134 `__ - ipa-pwd-extop: allow ipasam to request RC4-HMAC in Kerberos keys for trusted domain objects - `commit `__ + `commit `__ `#9134 `__ - ipatests: fix check for AD topology being present - `commit `__ + `commit `__ `#9133 `__ - tests: ensure AD-SUPPORT subpolicy is active in more cases - `commit `__ + `commit `__ `#9119 `__ - ipalib/util.py: switch to ssl.PROTOCOL_TLS_CLIENT by default - `commit `__ + `commit `__ `#9129 `__ - test_krbtpolicy: skip SPAKE-related tests in FIPS mode - `commit `__ + `commit `__ `#9119 `__ - test_otp: do not use paramiko unless it is really needed - `commit `__ + `commit `__ `#9119 `__ - Kerberos instance: default to AES256-SHA2 for master key encryption - `commit `__ + `commit `__ `#9119 `__ - freeipa.spec: bump crypto-policies dependency for CentOS 9 Stream - `commit `__ + `commit `__ `#9119 `__ - ipatests: extend AES keyset to SHA2-based ones - `commit `__ + `commit `__ `#9119 `__ - tests: ensure AD-SUPPORT subpolicy is active - `commit `__ + `commit `__ `#9119 `__ - KRB instance: make provision to work with crypto policy without SHA-1 HMAC types - `commit `__ + `commit `__ `#9119 `__ - translations: regenerate translations after changes in help message in sudorule - `commit `__ + `commit `__ `#9106 `__ - pylint: workaround incorrect pylint detection of a local function - `commit `__ + `commit `__ - OpenLDAP 2.6+: use only -H option to specify LDAP url - `commit `__ + `commit `__ `#9106 `__ - ipa-kdb: refactor KDB driver to prepare for KDB version 9 - `commit `__ + `commit `__ `#9083 `__ - Support building against OpenLDAP 2.6+ - `commit `__ + `commit `__ `#9080 `__ - ipa-kdb: fix requester SID check according to MS-KILE and MS-SFU updates - `commit `__ + `commit `__ `#9031 `__ - ipa-kdb: issue PAC_REQUESTER_SID only for TGTs - `commit `__ + `commit `__ `#9031 `__ @@ -297,20 +297,20 @@ Anuja More (6) - Mark xfail test_gidnumber_not_corresponding_existing_group[true,hybrid] - `commit `__ + `commit `__ - mark xfail for test_idoverride_with_auto_private_group[hybrid] - `commit `__ + `commit `__ - ipatests: Tests for Autoprivate group. - `commit `__ + `commit `__ `#8807 `__ - ipatests: remove additional check for failed units. - `commit `__ + `commit `__ `#9108 `__ - ipatests: webui: Tests for subordinate ids. - `commit `__ + `commit `__ `#8361 `__ - ipatests: Test default value of nsslapd-sizelimit. - `commit `__ + `commit `__ `#8962 `__ @@ -319,7 +319,7 @@ Antonio Torres (1) ---------------------------------------------------------------------------------------------- - Back to git snapshots - `commit `__ + `commit `__ @@ -327,7 +327,7 @@ Brian Turek (1) ---------------------------------------------------------------------------------------------- - ipalib: Handle percent signs in saved values - `commit `__ + `commit `__ `#9085 `__ @@ -336,7 +336,7 @@ Christian Heimes (1) ---------------------------------------------------------------------------------------------- - Support AES for KRA archival wrapping - `commit `__ + `commit `__ `#6524 `__ @@ -345,47 +345,47 @@ Florence Blanc-Renaud (14) ---------------------------------------------------------------------------------------------- - ipatests: fix wrong condition in xfail_context for auto private grp - `commit `__ + `commit `__ `#9141 `__ - ipatests: Fix a call to run_command with wildcard - `commit `__ + `commit `__ `#8506 `__ - ipatests: remove certmonger tracking before uninstall - `commit `__ + `commit `__ `#9123 `__ - ipatests: add missing test in the nightly defs - `commit `__ + `commit `__ - Commit template: use either Fixes or Related - `commit `__ + `commit `__ - ipatests: update images for f34 and f35 - `commit `__ + `commit `__ `#9051 `__, `#9069 `__ - ipa-pki-proxy.conf: provide access to /kra/admin/kra/getStatus - `commit `__ + `commit `__ `#8582 `__, `#9099 `__ - ipatests: fix expected automount config in nsswitch.conf - `commit `__ + `commit `__ `#9067 `__ - ipatests: update images for f34 and f35 - `commit `__ + `commit `__ `#9087 `__ - config plugin: add a test ensuring EmptyModlist is returned - `commit `__ + `commit `__ `#9063 `__ - Config plugin: return EmptyModlist when no change is applied - `commit `__ + `commit `__ `#9063 `__ - automember default group: remove --desc parameter - `commit `__ + `commit `__ `#9068 `__ - ipatests: update images for f34 and f35 - `commit `__ + `commit `__ `#8865 `__, `#9024 `__ - ipatests: fix TestOTPToken::test_check_otpd_after_idle_timeout - `commit `__ + `commit `__ `#9044 `__ @@ -394,13 +394,13 @@ Francisco Trivino (3) ---------------------------------------------------------------------------------------------- - Set AES as default for KRA archival wrapping - `commit `__ + `commit `__ `#6524 `__ - ipa_cldap: fix memory leak - `commit `__ + `commit `__ `#9110 `__ - Custodia: use a stronger encryption algo when exporting keys - `commit `__ + `commit `__ `#9101 `__ @@ -409,7 +409,7 @@ Fraser Tweedale (1) ---------------------------------------------------------------------------------------------- - allow overriding systemd-tmpfiles program - `commit `__ + `commit `__ `#9126 `__ @@ -418,7 +418,7 @@ jh23453 (1) ---------------------------------------------------------------------------------------------- - Remove deprecation warning when installing a CA replica - `commit `__ + `commit `__ @@ -426,9 +426,9 @@ Julien Rische (2) ---------------------------------------------------------------------------------------------- - ipatests: add case for hardened-only ticket policy - `commit `__ + `commit `__ - ipa-kdb: do not remove keys for hardened auth-enabled users - `commit `__ + `commit `__ `#8001 `__, `#9065 `__ @@ -438,10 +438,10 @@ Michal Polovka (2) ---------------------------------------------------------------------------------------------- - ipatests: webui: Use safe-loader for loading YAML configuration file - `commit `__ + `commit `__ `#9009 `__ - pr-ci definitions: add web-ui subid-related jobs - `commit `__ + `commit `__ `#8361 `__ @@ -450,27 +450,27 @@ Mohammad Rizwan (8) ---------------------------------------------------------------------------------------------- - ipatests: extend find_segment with suffix param - `commit `__ + `commit `__ - ipatests: fix the topologysegment-reinitialize command - `commit `__ + `commit `__ `#9137 `__ - ipatests: Check maxlife error message where minlife > maxlife specified - `commit `__ + `commit `__ `#9038 `__ - Test ipa-ccache-sweep.timer enabled by default during installation - `commit `__ + `commit `__ `#9107 `__ - PEP8 Fixes - `commit `__ + `commit `__ - Test cases for ipa-replica-conncheck command - `commit `__ + `commit `__ `#9047 `__ - ipatests: Test empty cert request doesn't force certmonger to segfault - `commit `__ + `commit `__ - ipatests: Fix test_ipa_cert_fix.py::TestCertFixReplica teardown - `commit `__ + `commit `__ `#9052 `__ @@ -479,38 +479,38 @@ Rob Crittenden (11) ---------------------------------------------------------------------------------------------- - Remove the --no-sssd option from ipa-client-automount - `commit `__ + `commit `__ `#7671 `__, `#9084 `__ - Convert values using \_SYNTAX_MAPPING with --delattr - `commit `__ + `commit `__ `#9004 `__ - ipatests: Give the subCA more time to be loaded by the CA - `commit `__ + `commit `__ `#9096 `__ - Strip off trailing period of a user-provided FQDN in installer - `commit `__ + `commit `__ `#9111 `__ - Verify the user-provided hostname in the server installer - `commit `__ + `commit `__ `#9111 `__ - ipa-restore: Mark a restored server as enabled - `commit `__ + `commit `__ `#9095 `__ - Set the mode on ipaupgrade.log during RPM %post snipppet - `commit `__ + `commit `__ `#8899 `__ - ipatests: Remove certmonger tracking before uninstall in cert tests - `commit `__ + `commit `__ `#8506 `__ - Enable the ccache sweep timer during installation - `commit `__ + `commit `__ `#9107 `__ - Remove ipa-join errors from behind the debug option - `commit `__ + `commit `__ `#9103 `__ - Don't always override the port in import_included_profiles - `commit `__ + `commit `__ `#9100 `__ @@ -519,10 +519,10 @@ Sumit Bose (2) ---------------------------------------------------------------------------------------------- - ipa-kdb: fix make check - `commit `__ + `commit `__ `#9083 `__ - extdom: user getorigby{user|group}name if available - `commit `__ + `commit `__ `#9127 `__ @@ -531,107 +531,107 @@ Stanislav Levin (34) ---------------------------------------------------------------------------------------------- - azure: Bump supported Pylint - `commit `__ + `commit `__ `#9117 `__ - pylint: Skip false-positive invalid-sequence-index - `commit `__ + `commit `__ `#9117 `__ - pylint: Fix useless-suppression - `commit `__ + `commit `__ `#9117 `__ - pylint: Fix format-string-without-interpolation - `commit `__ + `commit `__ `#9117 `__ - pylint: Skip unsupported-assignment-operation - `commit `__ + `commit `__ `#9117 `__ - pylint: Fix deprecated-method for threading - `commit `__ + `commit `__ `#9117 `__ - pylint: Skip deprecated-method for match_hostname - `commit `__ + `commit `__ `#9117 `__ - pylint: Fix consider-using-in - `commit `__ + `commit `__ `#9117 `__ - pylint: Fix arguments-renamed - `commit `__ + `commit `__ `#9117 `__ - pylint: Skip use-implicit-booleaness-not-comparison - `commit `__ + `commit `__ `#9117 `__ - pylint: Enable useless-suppression - `commit `__ + `commit `__ `#9117 `__ - pylint: Skip raising-bad-type - `commit `__ + `commit `__ `#9117 `__ - pylint: Fix consider-using-dict-items - `commit `__ + `commit `__ `#9117 `__ - pylint: Skip not-callable - `commit `__ + `commit `__ `#9117 `__ - pylint: Fix unused-variable - `commit `__ + `commit `__ `#9117 `__ - pylint: Fix no-member - `commit `__ + `commit `__ `#9117 `__ - pylint: Skip isinstance-second-argument-not-valid-type - `commit `__ + `commit `__ `#9117 `__ - pylint: Fix deprecated-decorator - `commit `__ + `commit `__ `#9117 `__ - pylint: Fix unnecessary-dict-index-lookup - `commit `__ + `commit `__ `#9117 `__ - pylint: Fix deprecated-class - `commit `__ + `commit `__ `#9117 `__ - pylint: Remove unused \__convert_iter - `commit `__ + `commit `__ `#9117 `__ - pylint: Drop no longer used \__home - `commit `__ + `commit `__ `#9117 `__ - pylint: Fix unused-private-member - `commit `__ + `commit `__ `#9117 `__ - pylint: Skip unused-private-member for unsupported cases - `commit `__ + `commit `__ `#9117 `__ - pylint: Skip unused-private-member for property case - `commit `__ + `commit `__ `#9117 `__ - pylint: Drop no longer used \__finalized - `commit `__ + `commit `__ `#9117 `__ - pylint: Drop never used \__remove_lightweight_ca_key_retrieval_custodia - `commit `__ + `commit `__ `#9117 `__ - pylint: Clean up \__convert_to_gssapi_replication - `commit `__ + `commit `__ `#9117 `__ - pylint: Fix use-maxsplit-arg - `commit `__ + `commit `__ `#9117 `__ - pylint: Skip unspecified-encoding - `commit `__ + `commit `__ `#9117 `__ - pylint: Skip use-dict-literal/use-list-literal - `commit `__ + `commit `__ `#9117 `__ - pylint: Skip consider-using-f-string - `commit `__ + `commit `__ `#9117 `__ - pylint: Skip redundant-u-string-prefix - `commit `__ + `commit `__ `#9117 `__ - ipatests: healthcheck: Sync the expected system RRs - `commit `__ + `commit `__ `#9054 `__ @@ -640,13 +640,13 @@ Sumedh Sidhaye (3) ---------------------------------------------------------------------------------------------- - Added nightly job definitions - `commit `__ + `commit `__ - Added test automation for SHA384withRSA CSR support - `commit `__ + `commit `__ `#8906 `__ - Extend test to see if replica is not shown when running \`ipa-replica-manage list -v \` - `commit `__ + `commit `__ `#8605 `__ @@ -656,7 +656,7 @@ Sudhir Menon (1) - ipatests: Test for pki.server.healthcheck.clones.connectivity_and_data - `commit `__ + `commit `__ @@ -664,18 +664,18 @@ Timo Aaltonen (7) ---------------------------------------------------------------------------------------------- - configure: Use HTTPD_GROUP in init/tmpfiles/ipa.conf.in - `commit `__ + `commit `__ `#9014 `__ - ipaplatform: Modify paths to fips-mode-setup and systemd-tmpfiles - `commit `__ + `commit `__ - ipatests/test_ipaplatform: Skip test_ipa_version on Debian - `commit `__ + `commit `__ - ipaplatform/debian: Fix ntpd service name - `commit `__ + `commit `__ - ipaplatform/debian: Fix named keytab name - `commit `__ + `commit `__ - ipaplatform: Add support for recognizing systemd-timesyncd - `commit `__ + `commit `__ - ipaplatform/debian: Fix HTTPD_ALIAS_DIR, and drop some obsolete paths. - `commit `__ + `commit `__ diff --git a/src/page/Roadmap.rst b/src/page/Roadmap.rst index 66e3e77ad..9e5550d34 100644 --- a/src/page/Roadmap.rst +++ b/src/page/Roadmap.rst @@ -16,10 +16,7 @@ Requests for upstream --------------------- A primary and authoritative source of enhancement/bug tickets is our -upstream `Pagure page `__. It contains the -planned fixes for both current development and maintenance branch (see -`FreeIPA roadmap `__ for more -details). +upstream `Codeberg page `__. diff --git a/src/page/Troubleshooting.rst b/src/page/Troubleshooting.rst index fdc124ed0..ec9717ac1 100644 --- a/src/page/Troubleshooting.rst +++ b/src/page/Troubleshooting.rst @@ -12,8 +12,8 @@ Feedback is expected to be sent either to: - `freeipa-users mailing list `__ -- or by filing an issue to `FreeIPA Pagure ticketing - system `__ or `Red Hat +- or by filing an issue to `FreeIPA Codeberg ticketing + system `__ or `Red Hat Bugzilla `__. Before we dive into particular scenarios we offer you presentation about diff --git a/src/release-notes/4-10-2.rst b/src/release-notes/4-10-2.rst index 49d0d2a5d..443472f82 100644 --- a/src/release-notes/4-10-2.rst +++ b/src/release-notes/4-10-2.rst @@ -62,11 +62,11 @@ Highlights in 4.10.2 1.21 or later. On older MIT Kerberos versions, the lack of the new ticket signature will be tolerated to allow gradual upgrades. More details are available at - https://pagure.io/freeipa/c/3f1b373cb2028416e40a26e3dd99b0f4c82525c7. + https://codeberg.org/freeipa/freeipa/commit/3f1b373cb2028416e40a26e3dd99b0f4c82525c7. In addition, a 'full PAC' signature type was added to MIT Kerberos 1.21. FreeIPA will support the new signature when running against newer MIT Kerberos version. For older versions, please see - https://pagure.io/freeipa/c/9cd5f49c74f28dbe070b072b394747a039cef463. + https://codeberg.org/freeipa/freeipa/commit/9cd5f49c74f28dbe070b072b394747a039cef463. This new PAC signature will be required by default by Active Directory in July 2023 for S4U requests, and opt-out will no longer be possible after October 2023. We recommend upgrading to @@ -304,73 +304,73 @@ Alexander Bokovoy (23) - ipa-kdb: be compatible with krb5 1.19 when checking for server referral - `commit `__ + `commit `__ `#9164 `__ - ipalib/x509.py: Add signature_algorithm_parameters - `commit `__ + `commit `__ - ipa-kdb: skip verification of PAC full checksum - `commit `__ + `commit `__ `#9371 `__ - ipa-kdb: process out of realm server lookup during S4U - `commit `__ + `commit `__ `#9164 `__ - ipa-kdb: postpone ticket checksum configuration - `commit `__ + `commit `__ - ipa-kdb: protect against context corruption - `commit `__ + `commit `__ - ipa-kdb: hint KDC to use aes256-sha1 for forest trust TGT - `commit `__ + `commit `__ `#9124 `__ - Change doc theme to 'book' - `commit `__ + `commit `__ - doc/designs/rbcd.md: document use of S-1-18-\* SIDs - `commit `__ + `commit `__ `#9354 `__ - doc/designs/rbcd.md: add usage examples - `commit `__ + `commit `__ `#9354 `__ - RBCD: add basic test for RBCD handling - `commit `__ + `commit `__ `#9354 `__ - kdb: implement RBCD handling in KDB driver - `commit `__ + `commit `__ `#9354 `__ - IPA API changes to support RBCD - `commit `__ + `commit `__ `#9354 `__ - doc: add design document for Kerberos constrained delegation - `commit `__ + `commit `__ `#9354 `__ - ipa-kdb: search S4U2Proxy ACLs in cn=s4u2proxy,cn=etc,$BASEDN subtree only - `commit `__ + `commit `__ `#5444 `__ - test_xmlrpc: adopt to automember plugin message changes in 389-ds - `commit `__ + `commit `__ - Ignore empty modification error in case cifs/.. principal already added - `commit `__ + `commit `__ `#9354 `__ - ipalib/x509: Implement abstract method Certificate.verify_directly_issued_by - `commit `__ + `commit `__ `#9355 `__ - Fix tox in Azure CI - `commit `__ + `commit `__ `#9347 `__ - Use system-wide chromium for webui tests - `commit `__ + `commit `__ `#9347 `__ - Don't fail if optional RPM macros file is missing - `commit `__ + `commit `__ `#9347 `__ - ipa-kdb: PAC consistency checker needs to handle child domains as well - `commit `__ + `commit `__ `#9316 `__ - updates: fix memberManager ACI to allow managers from a specified group - `commit `__ + `commit `__ `#9286 `__ @@ -379,16 +379,16 @@ Anuja More (4) ---------------------------------------------------------------------------------------------- - ipatests: Test that non admin user can search hbac rule. - `commit `__ + `commit `__ `#5130 `__ - ipatests: Test ipa-advise is not failing with error. - `commit `__ + `commit `__ `#6044 `__ - PRCI: update test_trust.py for nightly pipelines. - `commit `__ + `commit `__ `#9326 `__ - Add test for SSH with GSSAPI auth. - `commit `__ + `commit `__ `#9316 `__ @@ -397,27 +397,27 @@ Antonio Torres (10) ---------------------------------------------------------------------------------------------- - Update list of contributors - `commit `__ + `commit `__ - Update translations to FreeIPA ipa-4-10 state - `commit `__ + `commit `__ - Extend API documentation - `commit `__ + `commit `__ - doc: allow notes on Param API Reference pages - `commit `__ + `commit `__ - ipaserver: deepcopy objectclasses list from IPA config - `commit `__ + `commit `__ `#9349 `__ - API doc: add usage guides for groups, HBAC and sudo rules - `commit `__ + `commit `__ - API doc: add note about ipa show-mappings to usage guide - `commit `__ + `commit `__ - API doc: validate generated reference - `commit `__ + `commit `__ `#9287 `__ - API doc: add basic user management guide - `commit `__ + `commit `__ - Back to git snapshots - `commit `__ + `commit `__ @@ -425,7 +425,7 @@ Carla Martinez (1) ---------------------------------------------------------------------------------------------- - Update 'Auth indicators' doc string - `commit `__ + `commit `__ `#9338 `__ @@ -434,13 +434,13 @@ Christian Heimes (3) ---------------------------------------------------------------------------------------------- - Speed up installer by restarting DS after DNA plugin - `commit `__ + `commit `__ `#9358 `__ - Don't block when kinit_pkinit() fails - `commit `__ + `commit `__ `#9333 `__ - ipa-certupdate: Update client certs before KDC/HTTPd restart - `commit `__ + `commit `__ `#9285 `__ @@ -449,7 +449,7 @@ Chris Kelley (1) ---------------------------------------------------------------------------------------------- - Check that CADogtagCertsConfigCheck can handle cert renewal - `commit `__ + `commit `__ @@ -457,9 +457,9 @@ David Pascual (2) ---------------------------------------------------------------------------------------------- - doc: Use case examples for PR-CI checker tool - `commit `__ + `commit `__ - ipatests: fix (prci_checker) duplicated check & error return code - `commit `__ + `commit `__ @@ -468,7 +468,7 @@ Erik Belko (1) - ipatests: Test MemberManager ACI to allow managers from a specified group after upgrade scenario - `commit `__ + `commit `__ `#9286 `__ @@ -478,7 +478,7 @@ Filip Dvorak (1) - ipa tests: Add LANG before kinit command to fix issue with locale settings - `commit `__ + `commit `__ @@ -486,159 +486,159 @@ Florence Blanc-Renaud (55) ---------------------------------------------------------------------------------------------- - ipatest: remove xfail from test_smb - `commit `__ + `commit `__ `#9124 `__ - ACME tests: fix issue_and_expire_acme_cert method - `commit `__ + `commit `__ `#9383 `__ - user or group name: explain the supported format - `commit `__ + `commit `__ - azure tests: move to fedora 38 - `commit `__ + `commit `__ - Tests: test on f37 and f38 - `commit `__ + `commit `__ - idview: improve performance of idview-show - `commit `__ + `commit `__ `#9372 `__ - spec file: force nodejs < 20 on fedora < 39 - `commit `__ + `commit `__ `#9374 `__ - Nightly test: add +15min for test_ipahealthcheck - `commit `__ + `commit `__ `#9362 `__ - cert_find: fix call with --all - `commit `__ + `commit `__ `#9331 `__ - ipatests: mark known failures for autoprivategroup - `commit `__ + `commit `__ `#9295 `__ - ipatests: fix test definition for test_trust - `commit `__ + `commit `__ `#9326 `__ - ipatests: increase timeout for test_trust - `commit `__ + `commit `__ `#9326 `__ - ipatests: adapt for new automembership fixup behavior - `commit `__ + `commit `__ `#9313 `__ - ipatests: increase timeout for test_acme - `commit `__ + `commit `__ `#9324 `__ - automember-rebuild: add a notice about high CPU usage - `commit `__ + `commit `__ `#9320 `__ - trust-add: handle missing msSFU30MaxGidNumber - `commit `__ + `commit `__ `#9310 `__ - Spec file: use %autosetup instead of %setup - `commit `__ + `commit `__ - Spec file: unify with RHEL9 spec - `commit `__ + `commit `__ - Installer: create RID base before domain object - `commit `__ + `commit `__ `#9309 `__ - Tests: force key type in ACME tests - `commit `__ + `commit `__ `#9298 `__ - server install: remove error log about missing bkup file - `commit `__ + `commit `__ `#9306 `__ - ipatests: mark test_smb as xfail - `commit `__ + `commit `__ `#9124 `__ - pylint: disable deprecated-module message - `commit `__ + `commit `__ `#9278 `__ - pylint: fix comparison-of-constants - `commit `__ + `commit `__ `#9278 `__ - pylint: disable comparison-of-constants - `commit `__ + `commit `__ `#9278 `__ - pylint: fix consider-iterating-dictionary - `commit `__ + `commit `__ `#9278 `__ - pylint: globally disable useless-object-inheritance - `commit `__ + `commit `__ `#9278 `__ - pylint: disable unhashable-member - `commit `__ + `commit `__ `#9278 `__ - pylint: disable invalid-sequence-index - `commit `__ + `commit `__ `#9278 `__ - pylint: fix deprecated-class SafeConfigParser - `commit `__ + `commit `__ `#9278 `__ - pylint: fix duplicate-value - `commit `__ + `commit `__ `#9278 `__ - pylint: fix implicit-str-concat - `commit `__ + `commit `__ `#9278 `__ - pylint: disable missing-timeout message - `commit `__ + `commit `__ `#9278 `__ - pylint: globally disable unnecessary-lambda-assignment message - `commit `__ + `commit `__ `#9278 `__ - pylint: disable unnecessary-dunder-call message - `commit `__ + `commit `__ `#9278 `__ - pylint: disable using-constant-test - `commit `__ + `commit `__ `#9278 `__ - pylint: remove arguments-renamed warnings - `commit `__ + `commit `__ `#9278 `__ - pylint: disable modified-iterating-list - `commit `__ + `commit `__ `#9278 `__ - pylint: replace deprecated distutils module - `commit `__ + `commit `__ `#9278 `__ - pylint: disable used-before-assignment - `commit `__ + `commit `__ `#9278 `__ - pylint: disable redefined-slots-in-subclass - `commit `__ + `commit `__ `#9278 `__ - pylint: remove useless suppression - `commit `__ + `commit `__ `#9278 `__ - pylint: remove unneeded disable=unused-private-member - `commit `__ + `commit `__ `#9278 `__ - azure tests: move to fedora 37 - `commit `__ + `commit `__ - ipatests: update the xfail annotation for test_number_of_zones - `commit `__ + `commit `__ `#9135 `__ - Spec file: bump krb5_kdb_version on rawhide - `commit `__ + `commit `__ - FIPS setup: fix typo filtering camellia encryption - `commit `__ + `commit `__ - cert utilities: MAC verification is incompatible with FIPS mode - `commit `__ + `commit `__ - ipatests: update the fake fips mode expected message - `commit `__ + `commit `__ `#9002 `__ - ipatests: xfail on all fedora for test_ipa_login_with_sso_user - `commit `__ + `commit `__ `#9264 `__ - Spec file: ipa-client depends on krb5-pkinit-openssl - `commit `__ + `commit `__ `#9290 `__ - webui tests: fix assertion in test_subid.py - `commit `__ + `commit `__ `#9282 `__ - PRCI: update memory reqs for each topology - `commit `__ + `commit `__ - API reference: update dnszone_add generated doc - `commit `__ + `commit `__ `#9249 `__ - API reference: update vault doc - `commit `__ + `commit `__ `#9259 `__ @@ -647,7 +647,7 @@ s1341 (1) ---------------------------------------------------------------------------------------------- - ipaplatform: add initial nixos support - `commit `__ + `commit `__ `#9299 `__ @@ -656,10 +656,10 @@ Jarl Gullberg (2) ---------------------------------------------------------------------------------------------- - install: Fix missing dyndb keytab directive - `commit `__ + `commit `__ `#9344 `__ - ipaplatform/debian: fix path to ldap.so - `commit `__ + `commit `__ @@ -667,13 +667,13 @@ Julien Rische (3) ---------------------------------------------------------------------------------------------- - Filter out constrained delegation ACL from KDB entry - `commit `__ + `commit `__ - Tolerate absence of PAC ticket signature depending of server capabilities - `commit `__ + `commit `__ `#9371 `__ - kdb: Use krb5_pac_full_sign_compat() when available - `commit `__ + `commit `__ `#9373 `__ @@ -682,7 +682,7 @@ Jerry James (1) ---------------------------------------------------------------------------------------------- - Change fontawesome-fonts requires to match fontawesome 4.x - `commit `__ + `commit `__ @@ -690,19 +690,19 @@ mbhalodi (5) ---------------------------------------------------------------------------------------------- - ipatests: add remove automember condition tests - `commit `__ + `commit `__ `#9332 `__ - ipatests: Test for sequence processing failures with server context - `commit `__ + `commit `__ `#9349 `__ - ipatests: add missing automember-cli tests - `commit `__ + `commit `__ `#9332 `__ - ipatests: WebUI - ensure that ipa automember-rebuild prints a warning - `commit `__ + `commit `__ `#9320 `__ - ipatests: ensure that ipa automember-rebuild prints a warning - `commit `__ + `commit `__ `#9320 `__ @@ -711,10 +711,10 @@ Michal Polovka (2) ---------------------------------------------------------------------------------------------- - ipatests: commands: Wait for the SSSD to become available - `commit `__ + `commit `__ `#9377 `__ - ipatest: loginscreen: do not use hardcoded password - `commit `__ + `commit `__ `#9226 `__ @@ -723,12 +723,12 @@ Mohammad Rizwan (3) ---------------------------------------------------------------------------------------------- - ipatests: wait for sssd-kcm to settle after date change - `commit `__ + `commit `__ - ipatests: fix tests in TestACMEPrune - `commit `__ + `commit `__ `#9294 `__ - ipatests: tests for certificate pruning - `commit `__ + `commit `__ `#9294 `__ @@ -737,49 +737,49 @@ Rob Crittenden (15) ---------------------------------------------------------------------------------------------- - Don't allow a group to be converted to POSIX and external - `commit `__ + `commit `__ `#8990 `__ - Replace usage of #!/usr/bin/env python3 with #!/usr/bin/python3 - `commit `__ + `commit `__ `#8941 `__ - Mention in ipa-client-install that nscd is disabled - `commit `__ + `commit `__ `#9086 `__ - Return the value cert-find failures from the CA - `commit `__ + `commit `__ `#9369 `__ - Use the OpenSSL certificate parser in cert-find - `commit `__ + `commit `__ `#9331 `__ - Enforce sizelimit in cert-find - `commit `__ + `commit `__ `#9331 `__ - doc: Update pruning design with implement enable/disable options - `commit `__ + `commit `__ `#9323 `__ - Wipe the ipa-ca DNS record when updating system records - `commit `__ + `commit `__ `#9195 `__ - Fix setting values of 0 in ACME pruning - `commit `__ + `commit `__ `#9325 `__ - tests: add wrapper around ACME RSNv3 test - `commit `__ + `commit `__ `#9322 `__ - doc: add the --run command for manual job execution - `commit `__ + `commit `__ `#9294 `__ - ipa-acme-manage: add certificate/request pruning management - `commit `__ + `commit `__ `#9294 `__ - tests: Add new ipa-ca error messages to IPADNSSystemRecordsCheck - `commit `__ + `commit `__ `#9291 `__ - tests: Add ipa_ca_name checking to DNS system records - `commit `__ + `commit `__ `#9291 `__ - doc: Design for certificate pruning - `commit `__ + `commit `__ `#9294 `__ @@ -788,10 +788,10 @@ Rafael Guterres Jeffman (2) ---------------------------------------------------------------------------------------------- - Fix "no entry" condition when searching PAC info - `commit `__ + `commit `__ `#9368 `__ - Migrated to SPDX license. - `commit `__ + `commit `__ `#9342 `__ @@ -800,68 +800,68 @@ Stanislav Levin (21) ---------------------------------------------------------------------------------------------- - ipasphinx: Correct import of progress_message for Sphinx 6.1.0+ - `commit `__ + `commit `__ `#9361 `__ - fastlint: Correct concatenation of file lists - `commit `__ + `commit `__ `#9318 `__ - dns: Fix support for dnspython 1.1x - `commit `__ + `commit `__ `#9339 `__ - tests: webui: Update vendored qunit - `commit `__ + `commit `__ `#9329 `__ - AP: webui: List installed nodejs packages - `commit `__ + `commit `__ `#9329 `__ - tests: webui: Load qunit only once - `commit `__ + `commit `__ `#9329 `__ - tests: webui: Allow file access from files in tests - `commit `__ + `commit `__ `#9329 `__ - tests: Configure DNSResolver as platform agnostic resolver - `commit `__ + `commit `__ `#9319 `__ - spec: Drop no longer used build dependency on paste - `commit `__ + `commit `__ `#9314 `__ - ipatests: healthcheck: Handle missing fips-mode-setup - `commit `__ + `commit `__ `#9315 `__ - pylint: Replace deprecated cgi module - `commit `__ + `commit `__ `#9278 `__ - pylint: Fix useless-object-inheritance - `commit `__ + `commit `__ `#9278 `__ - pylint: Fix unhashable-member - `commit `__ + `commit `__ `#9278 `__ - pylint: Fix unnecessary-lambda-assignment - `commit `__ + `commit `__ `#9278 `__ - pylint: Fix modified-iterating-list - `commit `__ + `commit `__ `#9278 `__ - pylint: Fix used-before-assignment - `commit `__ + `commit `__ `#9278 `__ - pylint: Replace deprecated pipes - `commit `__ + `commit `__ `#9278 `__ - pylint: Fix cyclic-import - `commit `__ + `commit `__ `#9232 `__, `#9278 `__ - pylint: Replace deprecated extension-pkg-whitelist - `commit `__ + `commit `__ `#9278 `__ - pylint: More allowed C extensions - `commit `__ + `commit `__ `#9278 `__ - pylint: Lint in single process mode - `commit `__ + `commit `__ `#9278 `__ @@ -870,9 +870,9 @@ Sudhir Menon (2) ---------------------------------------------------------------------------------------------- - ipatests: ipa-adtrust-install command test scenarios - `commit `__ + `commit `__ - Fixes: ipa-otpd@.service: deprecated syslog setting - `commit `__ + `commit `__ `#9279 `__ @@ -881,7 +881,7 @@ Timo Aaltonen (1) ---------------------------------------------------------------------------------------------- - Drop duplicate includedir from krb5.conf - `commit `__ + `commit `__ `#9267 `__ @@ -890,9 +890,9 @@ Todd Zullinger (2) ---------------------------------------------------------------------------------------------- - spec: silence krb5 pkgconf errors in %krb5_base_version - `commit `__ + `commit `__ - spec: verify upstream source signature - `commit `__ + `commit `__ @@ -900,4 +900,4 @@ Thorsten Scherf (1) ---------------------------------------------------------------------------------------------- - external-idp: change idp server name to reference name - `commit `__ + `commit `__ diff --git a/src/release-notes/4-10-3.rst b/src/release-notes/4-10-3.rst index bd3200ba9..7838efe5b 100644 --- a/src/release-notes/4-10-3.rst +++ b/src/release-notes/4-10-3.rst @@ -66,7 +66,7 @@ Antonio Torres (1) ~~~~~~~~~~~~~~~~~~ - Become IPA 4.10.3 - `commit `__ + `commit `__ .. _rob_crittenden_2: @@ -74,6 +74,6 @@ Rob Crittenden (2) ~~~~~~~~~~~~~~~~~~ - Integration tests for verifying Referer header in the UI - `commit `__ + `commit `__ - Check the HTTP Referer header on all requests - `commit `__ + `commit `__ diff --git a/src/release-notes/4-11-0-beta.rst b/src/release-notes/4-11-0-beta.rst index 6b2ad32b9..987a0085e 100644 --- a/src/release-notes/4-11-0-beta.rst +++ b/src/release-notes/4-11-0-beta.rst @@ -207,7 +207,7 @@ Armando Neto (1) ~~~~~~~~~~~~~~~~ - ipatests: update rawhide template - `commit `__ + `commit `__ .. _alexander_bokovoy_36: @@ -215,29 +215,29 @@ Alexander Bokovoy (10) ~~~~~~~~~~~~~~~~~~~~~~ - ipalib/x509.py: Add signature_algorithm_parameters - `commit `__ + `commit `__ - ipa-kdb: postpone ticket checksum configuration - `commit `__ + `commit `__ - ipa-kdb: protect against context corruption - `commit `__ + `commit `__ - doc/designs: update link to SSSD passkey design page - `commit `__ + `commit `__ - ipa-kdb: initial support for passkeys - `commit `__ + `commit `__ `#9263 `__ - Change doc theme to 'book' - `commit `__ + `commit `__ - idp: when adding an IdP allow to override IdP options - `commit `__ + `commit `__ `#9421 `__ - ipa-epn: don't use too general exception - `commit `__ + `commit `__ `#9425 `__ - python 3.12: utcnow function is deprecated - `commit `__ + `commit `__ `#9425 `__ - support more DateTime attributes in LDAP searches in IPA API - `commit `__ + `commit `__ `#9395 `__ @@ -247,7 +247,7 @@ Andika Triwidada (1) ~~~~~~~~~~~~~~~~~~~~ - Translated using Weblate (Indonesian) - `commit `__ + `commit `__ .. _antonio_torres_14: @@ -255,11 +255,11 @@ Antonio Torres (3) ~~~~~~~~~~~~~~~~~~~ - Update contributors list - `commit `__ + `commit `__ - Update translations to FreeIPA master state - `commit `__ + `commit `__ - Bump to IPA 4.11 - `commit `__ + `commit `__ .. _alexey_tikhonov_3: @@ -268,9 +268,9 @@ Alexey Tikhonov (2) - extdom: avoid sss_nss_getorigby*() calls when get*_r_wrapper() returns object from a wrong domain (performance optimization) - `commit `__ + `commit `__ - extdom: internal functions should be static - `commit `__ + `commit `__ .. _chris_kelley_1: @@ -278,7 +278,7 @@ Chris Kelley (1) ~~~~~~~~~~~~~~~~ - Check that CADogtagCertsConfigCheck can handle cert renewal - `commit `__ + `commit `__ .. _jan_kuparinen_14: @@ -286,33 +286,33 @@ Jan Kuparinen (14) ~~~~~~~~~~~~~~~~~~ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ .. _david_pascual_4: @@ -320,13 +320,13 @@ David Pascual (4) ~~~~~~~~~~~~~~~~~ - doc: Use case examples for PR-CI checker tool - `commit `__ + `commit `__ - ipatests: fix (prci_checker) duplicated check & error return code - `commit `__ + `commit `__ - ipatest: fix prci checker target masked return code & add pylint - `commit `__ + `commit `__ - ipatests: Checker script for prci definitions - `commit `__ + `commit `__ .. _erik_belko_5: @@ -334,7 +334,7 @@ Erik Belko (1) ~~~~~~~~~~~~~~ - test: add tests for descriptive error message in ipa user-add - `commit `__ + `commit `__ `#9378 `__ .. _endi_sukma_dewata_2: @@ -343,17 +343,17 @@ Endi Sukma Dewata (6) ~~~~~~~~~~~~~~~~~~~~~ - Explicitly use legacy ID generators by default - `commit `__ + `commit `__ - Remove pki_restart_configured_instance - `commit `__ + `commit `__ - Remove default values for pki_ca_signing_*_path - `commit `__ + `commit `__ - Remove non-existent default pki_cert_chain_path - `commit `__ + `commit `__ - Add pki_share_dbuser_dn for CA - `commit `__ + `commit `__ - Remove unused subsystem.count - `commit `__ + `commit `__ .. _filip_dvorak_1: @@ -362,7 +362,7 @@ Filip Dvorak (1) - ipa tests: Add LANG before kinit command to fix issue with locale settings - `commit `__ + `commit `__ .. _florence_blanc_renaud_109: @@ -370,151 +370,151 @@ Florence Blanc-Renaud (56) ~~~~~~~~~~~~~~~~~~~~~~~~~~~ - xmlrpc tests: add a test for user plugin with non-existing idp - `commit `__ + `commit `__ `#9416 `__ - User plugin: improve error related to non existing idp - `commit `__ + `commit `__ `#9416 `__ - OTP: fix data type to avoid endianness issue - `commit `__ + `commit `__ `#9402 `__ - ipatests: use dnf download to download pkgs - `commit `__ + `commit `__ `#9399 `__ - tests: fix backup-restore scenario with replica - `commit `__ + `commit `__ `#9404 `__ - Detection of PKI subsystem - `commit `__ + `commit `__ `#9330 `__ - Uninstaller: uninstall PKI before shutting down services - `commit `__ + `commit `__ `#9330 `__ - Integration tests: add a test to ipa-server-upgrade - `commit `__ + `commit `__ `#9385 `__ - Upgrade: fix replica agreement - `commit `__ + `commit `__ `#9385 `__ - Integration test: add a test for upgrade and PKI drop-in file - `commit `__ + `commit `__ `#9381 `__ - Upgrade: add PKI drop-in file if missing - `commit `__ + `commit `__ `#9381 `__ - xmlrpc tests: add test renaming user or group with setattr - `commit `__ + `commit `__ `#9396 `__ - User and groups: rename with --setattr must check format - `commit `__ + `commit `__ `#9396 `__ - webuitests: close notification which hides Add button - `commit `__ + `commit `__ `#9389 `__ - Spec file: bump SSSD version for passkey support - `commit `__ + `commit `__ - Passkey: add a weak dependency on sssd-passkey - `commit `__ + `commit `__ - Webui tests: fix test failure - `commit `__ + `commit `__ - passkey: adjust selinux security context for passkey_child - `commit `__ + `commit `__ - passkeyconfig: require-user-verification is a boolean - `commit `__ + `commit `__ - Passkey: update the API doc - `commit `__ + `commit `__ - Passkey: extract the passkey from stdout - `commit `__ + `commit `__ - Passkey: add "passkey configuration" to webui - `commit `__ + `commit `__ `#9261 `__ - WebUI: improve passkey display - `commit `__ + `commit `__ `#9261 `__ - Passkey support: show the passkey in webui - `commit `__ + `commit `__ `#9261 `__ - Passkey: add support for discoverable credentials - `commit `__ + `commit `__ - WebUI tests: add test for krbtpolicy passkey maxlife/maxrenew - `commit `__ + `commit `__ `#9262 `__ - WebUI: add support for passkey auth type and auth indicator - `commit `__ + `commit `__ `#9262 `__ - XMLRPC tests: add new tests for passkey auth type - `commit `__ + `commit `__ - CLI: add support for passkey authentication type - `commit `__ + `commit `__ `#9262 `__ - XMLRPC tests: test new passkey commands - `commit `__ + `commit `__ `#9261 `__ - API: add new commands for passkey mappings - `commit `__ + `commit `__ `#9261 `__ - API: add new commands for ipa passkeyconfig-show \| mod - `commit `__ + `commit `__ `#9261 `__ - New schema for Passkey mappings - `commit `__ + `commit `__ `#9261 `__ - Design for passkey support - `commit `__ + `commit `__ `#9261 `__ - PRCI: update rawhide box - `commit `__ + `commit `__ - user or group name: explain the supported format - `commit `__ + `commit `__ - azure tests: move to fedora 38 - `commit `__ + `commit `__ - Tests: test on f37 and f38 - `commit `__ + `commit `__ - cert_find: fix call with --all - `commit `__ + `commit `__ `#9331 `__ - Spec file: use %autosetup instead of %setup - `commit `__ + `commit `__ - Spec file: unify with RHEL9 spec - `commit `__ + `commit `__ - azure tests: move to fedora 37 - `commit `__ + `commit `__ - Spec file: bump krb5_kdb_version on rawhide - `commit `__ + `commit `__ - FIPS setup: fix typo filtering camellia encryption - `commit `__ + `commit `__ - cert utilities: MAC verification is incompatible with FIPS mode - `commit `__ + `commit `__ - PRCI: update memory reqs for each topology - `commit `__ + `commit `__ - ipatests: update vagrant boxes - `commit `__ + `commit `__ - Tests: test on f37 and f36 - `commit `__ + `commit `__ - gitignore: add install/oddjob/org.freeipa.server.config-enable-sid - `commit `__ + `commit `__ - ipatests: update expected cksum for epn.conf - `commit `__ + `commit `__ `#9419 `__ - ipatests: update expected webui msg for admin deletion - `commit `__ + `commit `__ `#8878 `__ - ipatests: fixture can produce IndexError - `commit `__ + `commit `__ `#9348 `__ - ipatests: fix test_topology - `commit `__ + `commit `__ - Installer: activate nss and pam services in sssd.conf - `commit `__ + `commit `__ `#9427 `__ - ipa-server-guard: make the lock timezone aware - `commit `__ + `commit `__ `#9425 `__ - ipa-cert-fix: use timezone-aware datetime - `commit `__ + `commit `__ `#9425 `__ - ipa-epn: include timezone info - `commit `__ + `commit `__ `#9425 `__ .. _fraser_tweedale_3: @@ -523,7 +523,7 @@ Fraser Tweedale (1) ~~~~~~~~~~~~~~~~~~~ - BUILD.txt: remove redundant dnf-builddep option - `commit `__ + `commit `__ .. _iker_pedrosa_4: @@ -531,13 +531,13 @@ Iker Pedrosa (4) ~~~~~~~~~~~~~~~~ - Passkey design: add second sssd design page - `commit `__ + `commit `__ - Passkey design: user verification clarification - `commit `__ + `commit `__ - Passkey design: fix user verification - `commit `__ + `commit `__ - ipatests: definitions for SSSD COPR nightly - `commit `__ + `commit `__ .. _jarl_gullberg_2: @@ -545,7 +545,7 @@ Jarl Gullberg (1) ~~~~~~~~~~~~~~~~~ - ipaplatform/debian: fix path to ldap.so - `commit `__ + `commit `__ .. _julien_rische_4: @@ -553,9 +553,9 @@ Julien Rische (2) ~~~~~~~~~~~~~~~~~ - Filter out constrained delegation ACL from KDB entry - `commit `__ + `commit `__ - ipa-kdb: fix error handling of is_master_host() - `commit `__ + `commit `__ `#9422 `__ .. _lenz_grimmer_1: @@ -564,7 +564,7 @@ Lenz Grimmer (1) ~~~~~~~~~~~~~~~~ - doc: Fix incorrect URL format - `commit `__ + `commit `__ .. _jerry_james_1: @@ -572,7 +572,7 @@ Jerry James (1) ~~~~~~~~~~~~~~~ - Change fontawesome-fonts requires to match fontawesome 4.x - `commit `__ + `commit `__ .. _miro_hrončok_1: @@ -582,7 +582,7 @@ Miro Hrončok (1) - Use ssl.match_hostname from urllib3 as it was removed from Python 3.12 - `commit `__ + `commit `__ `#9409 `__ .. _mohammad_rizwan_5: @@ -591,13 +591,13 @@ Mohammad Rizwan (4) ~~~~~~~~~~~~~~~~~~~ - ipatests: enable firewall rule for http service on acme client - `commit `__ + `commit `__ - ipatests: wait for sssd-kcm to settle after date change - `commit `__ + `commit `__ - ipatests: Test newly added certificate lable - `commit `__ + `commit `__ - ipatests: remove fixture call and wait to get things settle - `commit `__ + `commit `__ `#9348 `__ .. _weblate_5: @@ -606,15 +606,15 @@ Weblate (5) ~~~~~~~~~~~ - Update translation files - `commit `__ + `commit `__ - Update translation files - `commit `__ + `commit `__ - Update translation files - `commit `__ + `commit `__ - Update translation files - `commit `__ + `commit `__ - Update translation files - `commit `__ + `commit `__ .. _piotr_drąg_2: @@ -622,9 +622,9 @@ Piotr Drąg (2) ~~~~~~~~~~~~~~ - Translated using Weblate (Polish) - `commit `__ + `commit `__ - Translated using Weblate (Polish) - `commit `__ + `commit `__ .. _rob_crittenden_33: @@ -632,34 +632,34 @@ Rob Crittenden (10) ~~~~~~~~~~~~~~~~~~~ - Differentiate location meaning between host and server - `commit `__ + `commit `__ `#9317 `__ - Use the python-cryptography parser directly in cert-find - `commit `__ + `commit `__ `#9331 `__ - Revert "cert_find: fix call with --all" - `commit `__ + `commit `__ `#9331 `__ - Revert "Use the OpenSSL certificate parser in cert-find" - `commit `__ + `commit `__ `#9331 `__ - Don't allow the FQDN to match the domain on server installs - `commit `__ + `commit `__ `#9003 `__ - Use the OpenSSL certificate parser in cert-find - `commit `__ + `commit `__ `#9331 `__ - Enforce sizelimit in cert-find - `commit `__ + `commit `__ `#9331 `__ - Fix memory leak in the OTP last token plugin - `commit `__ + `commit `__ `#9403 `__ - Prevent the admin user from being deleted - `commit `__ + `commit `__ `#8878 `__ - Remove all references to deleted indirect map from parent map - `commit `__ + `commit `__ `#9397 `__ .. _ricky_tigg_3: @@ -668,11 +668,11 @@ Ricky Tigg (3) ~~~~~~~~~~~~~~ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ .. _rafael_guterres_jeffman_3: @@ -680,10 +680,10 @@ Rafael Guterres Jeffman (2) ~~~~~~~~~~~~~~~~~~~~~~~~~~~ - selinux: Update SELinux policy - `commit `__ + `commit `__ `#9386 `__ - Fix typo in "Subordinate ID Selfservice User" role - `commit `__ + `commit `__ `#9418 `__ .. _sumit_bose_7: @@ -692,20 +692,20 @@ Sumit Bose (7) ~~~~~~~~~~~~~~ - ipa-otpd: add passkey_child_debug_level option - `commit `__ + `commit `__ - ipa-otpd: add support for passkey authentication - `commit `__ + `commit `__ - ipa-otpd: make get_krad_attr_from_packet() public - `commit `__ + `commit `__ - ipa-otpd: make auth_type_is(), get_string() and get_string_array() public - `commit `__ + `commit `__ - ipa-otpd: make add_krad_attr_to_set() public - `commit `__ + `commit `__ - ipa-otpd: suppress "function declaration isn't a prototype" warning - `commit `__ + `commit `__ - ipa-kdb: do not fail if certmap rule cannot be added - `commit `__ + `commit `__ .. _김인수_4: @@ -713,13 +713,13 @@ Sumit Bose (7) ~~~~~~~~~~ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Added translation using Weblate (Korean) - `commit `__ + `commit `__ .. _simon_nussbaum_1: @@ -727,7 +727,7 @@ Simon Nussbaum (1) ~~~~~~~~~~~~~~~~~~ - component: mail_from_realname config setting added to IPA-EPN - `commit `__ + `commit `__ `#9336 `__ @@ -737,7 +737,7 @@ Scott Poore (1) ~~~~~~~~~~~~~~~ - ipatests: add prci definitions for test_sso jobs - `commit `__ + `commit `__ .. _sudhir_menon_4: @@ -745,9 +745,9 @@ Sudhir Menon (2) ~~~~~~~~~~~~~~~~ - ipatests: ipa-adtrust-install command test scenarios - `commit `__ + `commit `__ - ipatests: idm api related tests. - `commit `__ + `commit `__ .. _temuri_doghonadze_4: @@ -755,13 +755,13 @@ Temuri Doghonadze (4) ~~~~~~~~~~~~~~~~~~~~~ - Translated using Weblate (Georgian) - `commit `__ + `commit `__ - Translated using Weblate (Georgian) - `commit `__ + `commit `__ - Translated using Weblate (Georgian) - `commit `__ + `commit `__ - Added translation using Weblate (Georgian) - `commit `__ + `commit `__ .. _todd_zullinger_2: @@ -769,9 +769,9 @@ Todd Zullinger (2) ~~~~~~~~~~~~~~~~~~ - spec: silence krb5 pkgconf errors in %krb5_base_version - `commit `__ + `commit `__ - spec: verify upstream source signature - `commit `__ + `commit `__ .. _thorsten_scherf_1: @@ -779,7 +779,7 @@ Thorsten Scherf (1) ~~~~~~~~~~~~~~~~~~~ - external-idp: change idp server name to reference name - `commit `__ + `commit `__ .. _viacheslav_sychov_1: @@ -787,7 +787,7 @@ Viacheslav Sychov (1) ~~~~~~~~~~~~~~~~~~~~~ - fix: Handle /proc/1/sched missing error - `commit `__ + `commit `__ .. _yuri_chornoivan_6: @@ -795,14 +795,14 @@ Yuri Chornoivan (6) ~~~~~~~~~~~~~~~~~~~ - Translated using Weblate (Ukrainian) - `commit `__ + `commit `__ - Translated using Weblate (Ukrainian) - `commit `__ + `commit `__ - Translated using Weblate (Ukrainian) - `commit `__ + `commit `__ - Translated using Weblate (Ukrainian) - `commit `__ + `commit `__ - Translated using Weblate (Ukrainian) - `commit `__ + `commit `__ - Translated using Weblate (Ukrainian) - `commit `__ + `commit `__ diff --git a/src/release-notes/4-11-0.rst b/src/release-notes/4-11-0.rst index 986db987b..1c2a7d626 100644 --- a/src/release-notes/4-11-0.rst +++ b/src/release-notes/4-11-0.rst @@ -189,16 +189,16 @@ Alexander Bokovoy (4) ~~~~~~~~~~~~~~~~~~~~~ - Allow ipa-otpd to access USB devices for passkeys - `commit `__ + `commit `__ `#9434 `__ - Restore selinux states if they exist at uninstall time - `commit `__ + `commit `__ `#9434 `__ - ipa-client-install: enable SELinux for SSSD - `commit `__ + `commit `__ `#9434 `__ - updates: add ACIs for RBCD self-management - `commit `__ + `commit `__ `#9354 `__ .. _alexandra_nikandrova_1: @@ -207,7 +207,7 @@ Alexandra Nikandrova (1) ~~~~~~~~~~~~~~~~~~~~~~~~ - doc: typo in basic_usage.md - `commit `__ + `commit `__ .. _antonio_torres_2: @@ -215,10 +215,10 @@ Antonio Torres (2) ~~~~~~~~~~~~~~~~~~ - ipatests: rename 'ipatuura' directory to 'scim' in bridge tests - `commit `__ + `commit `__ `#9447 `__ - Back to git snapshots - `commit `__ + `commit `__ .. _christian_heimes_1: @@ -226,10 +226,10 @@ Christian Heimes (2) ~~~~~~~~~~~~~~~~~~~~ - Use find_spec() in meta importer - `commit `__ + `commit `__ `#9437 `__ - Add context manager to ipalib.API - `commit `__ + `commit `__ `#9443 `__ .. _florence_blanc_renaud_1: @@ -238,7 +238,7 @@ Florence Blanc-Renaud (1) ~~~~~~~~~~~~~~~~~~~~~~~~~ - idp: add the ipaidpuser objectclass when needed - `commit `__ + `commit `__ `#9433 `__ .. _francisco_trivino_1: @@ -247,7 +247,7 @@ Francisco Trivino (1) ~~~~~~~~~~~~~~~~~~~~~ - Workshop: fix broken Sphinx cross-references. - `commit `__ + `commit `__ .. _mohammad_rizwan_2: @@ -255,10 +255,10 @@ Mohammad Rizwan (2) ~~~~~~~~~~~~~~~~~~~ - ipatests: restart ipa services after moving date - `commit `__ + `commit `__ `#9379 `__ - ipatests: accommodate DST in ACME cert expiry - `commit `__ + `commit `__ `#9428 `__ .. _rob_crittenden_4: @@ -267,19 +267,19 @@ Rob Crittenden (5) ~~~~~~~~~~~~~~~~~~ - Don't assume KRB5CCNAME is in the environment in replica install - `commit `__ + `commit `__ `#9446 `__ - Configure affinity during server installation - `commit `__ + `commit `__ `#9289 `__ - Adjust test to handle revocation reason REMOVE_FROM_CRL - `commit `__ + `commit `__ `#9345 `__ - Use the PKI REST API wherever possible instead of XML - `commit `__ + `commit `__ `#9345 `__ - Covscan issues: deadcode and Use after free - `commit `__ + `commit `__ `#9345 `__ .. _viktor_ashirov_1: @@ -288,5 +288,5 @@ Viktor Ashirov (1) ~~~~~~~~~~~~~~~~~~ - BDB tuning should be applied only when BDB backend is used - `commit `__ + `commit `__ `#9435 `__ diff --git a/src/release-notes/4-11-1.rst b/src/release-notes/4-11-1.rst index 5f8158888..f7cc797c1 100644 --- a/src/release-notes/4-11-1.rst +++ b/src/release-notes/4-11-1.rst @@ -66,7 +66,7 @@ Antonio Torres (1) ~~~~~~~~~~~~~~~~~~ - Become IPA 4.11.1 - `commit `__ + `commit `__ .. _rob_crittenden_2: @@ -74,6 +74,6 @@ Rob Crittenden (2) ~~~~~~~~~~~~~~~~~~ - Integration tests for verifying Referer header in the UI - `commit `__ + `commit `__ - Check the HTTP Referer header on all requests - `commit `__ + `commit `__ diff --git a/src/release-notes/4-11-2.rst b/src/release-notes/4-11-2.rst index eb906f116..b933da75f 100644 --- a/src/release-notes/4-11-2.rst +++ b/src/release-notes/4-11-2.rst @@ -106,7 +106,7 @@ Antonio Torres (1) ~~~~~~~~~~~~~~~~~~ - Become IPA 4.11.2 - `commit `__ + `commit `__ .. _julien_rische_2: @@ -114,6 +114,6 @@ Julien Rische (2) ~~~~~~~~~~~~~~~~~ - kdb: apply combinatorial logic for ticket flags - `commit `__ + `commit `__ - kdb: fix vulnerability in GCD rules handling - `commit `__ + `commit `__ diff --git a/src/release-notes/4-12-0.rst b/src/release-notes/4-12-0.rst index c1169dee8..77fb5fb3e 100644 --- a/src/release-notes/4-12-0.rst +++ b/src/release-notes/4-12-0.rst @@ -371,7 +371,7 @@ Detailed changelog since 4.11.1 ~~~~~~~~~~~~~~~ - webui: Unify user group members columns with users columns - `commit `__ + `commit `__ `#9390 `__ .. _alexander_bokovoy_31: @@ -380,123 +380,123 @@ Alexander Bokovoy (43) ~~~~~~~~~~~~~~~~~~~~~~ - console: for public errors only print a final one - `commit `__ + `commit `__ `#9590 `__ - custodia: do not use deprecated jwcrypto wrappers - `commit `__ + `commit `__ `#9597 `__ - frontend: add systemd journal audit of executed API commands - `commit `__ + `commit `__ `#9589 `__ - ipalib/rpc: Reformat after moving json code around - `commit `__ + `commit `__ - ipalib: move json formatter to a separate file - `commit `__ + `commit `__ - batch: add keeponly option - `commit `__ + `commit `__ `#9583 `__ - pylint: use yield_from for trivial cases - `commit `__ + `commit `__ - user: handle LDAP auto-bind for whoami case - `commit `__ + `commit `__ `#9583 `__ - passwd: handle LDAP auto-bind use case as well - `commit `__ + `commit `__ - cert: use context.principal only when it is defined - `commit `__ + `commit `__ `#9583 `__ - trust: handle stray pylint warning - `commit `__ + `commit `__ - trust: use context.principal only when it is defined - `commit `__ + `commit `__ `#9583 `__ - server: use context.principal only when it is defined - `commit `__ + `commit `__ `#9583 `__ - config: use context.principal only when it is defined - `commit `__ + `commit `__ `#9583 `__ - batch: account for auto-binding in server context - `commit `__ + `commit `__ `#9583 `__ - privilege: use context.principal only when it is defined - `commit `__ + `commit `__ `#9583 `__ - internal: fix 'tokensfor' typo and regenerate pot file - `commit `__ + `commit `__ - Use raw strings for Python 3 compatibility in old API client code - `commit `__ + `commit `__ `#9565 `__ - idrange: only issue warning to restart services for a local range - `commit `__ + `commit `__ `#9558 `__ - dcerpc: invalidate forest trust info cache when filtering out realm domains - `commit `__ + `commit `__ `#9551 `__ - ipa-pwd-extop: declare operation notes support from 389-ds locally - `commit `__ + `commit `__ `#9554 `__ - ipa-pwd-extop: add MFA note in case of a successful LDAP bind with OTP - `commit `__ + `commit `__ `#5169 `__ - ipa-pwd-extop: allow enforcing 2FA-only over LDAP bind - `commit `__ + `commit `__ `#5169 `__ - rpcserver: validate Kerberos principal name before running kinit - `commit `__ + `commit `__ `#9541 `__ - ipa-kdb: support Samba 4.20 private libraries - `commit `__ + `commit `__ - kdb: PAC generator: do not fail if canonical principal is missing - `commit `__ + `commit `__ `#9465 `__ - sidgen: fix missing prototypes - `commit `__ + `commit `__ - sidgen: ignore staged users when generating SIDs - `commit `__ + `commit `__ `#9517 `__ - doc/designs/id-mapping.md: expand on ID range allocation details - `commit `__ + `commit `__ `#9477 `__ - doc/Makefile: run sphinx in serial mode - `commit `__ + `commit `__ - ipasam: make krbtgt TDO principal canonical - `commit `__ + `commit `__ `#9471 `__ - adtrustinstance: make sure NetBIOS name defaults are set properly - `commit `__ + `commit `__ `#9514 `__ - host: update System: Manage Host Keytab permission - `commit `__ + `commit `__ `#9496 `__ - ipatests: make sure PKINIT enrollment works with a strict policy - `commit `__ + `commit `__ `#9485 `__ - ipa-kdb: clarify user auth table mapping use of \_AUTH_PASSWORD - `commit `__ + `commit `__ `#9485 `__ - ipa-kdb: when applying ticket policy, do not deny PKINIT - `commit `__ + `commit `__ `#9485 `__ - ipa-kdb: add better detection of allowed user auth type - `commit `__ + `commit `__ `#9485 `__ - doc/designs: add description of identity mapping in IPA - `commit `__ + `commit `__ `#9477 `__ - Remove upgrade test from Azure CI - `commit `__ + `commit `__ - Remove ipaserver.custodia.\__init\_\_.py - `commit `__ + `commit `__ `#9467 `__ - Azure CI: increase memory for forced reenrollment test - `commit `__ + `commit `__ - Increase memory usage for Azure CI upgrade test - `commit `__ + `commit `__ - Use datetime.timezone.utc instead of newer datetime.UTC alias - `commit `__ + `commit `__ `#9454 `__ .. _alexandra_nikandrova_1: @@ -505,7 +505,7 @@ Alexandra Nikandrova (1) ~~~~~~~~~~~~~~~~~~~~~~~~ - doc: typo in basic_usage.md - `commit `__ + `commit `__ .. _andika_triwidada_1: @@ -513,7 +513,7 @@ Andika Triwidada (1) ~~~~~~~~~~~~~~~~~~~~ - Translated using Weblate (Indonesian) - `commit `__ + `commit `__ .. _antonio_torres_5: @@ -521,13 +521,13 @@ Antonio Torres (4) ~~~~~~~~~~~~~~~~~~ - Update translations to FreeIPA master state - `commit `__ + `commit `__ - Update list of contributors - `commit `__ + `commit `__ - Update translations to FreeIPA master state - `commit `__ + `commit `__ - Bump to IPA 4.12 - `commit `__ + `commit `__ .. _carla_martinez_1: @@ -535,7 +535,7 @@ Carla Martinez (1) ~~~~~~~~~~~~~~~~~~ - ipatests: test new columns in group details - `commit `__ + `commit `__ .. _christian_heimes_8: @@ -543,20 +543,20 @@ Christian Heimes (6) ~~~~~~~~~~~~~~~~~~~~ - Move ipalib.install.kinit to ipalib - `commit `__ + `commit `__ - test_acme: Use ipalib.x509 - `commit `__ + `commit `__ `#9518 `__ - Compatibility fix for PyCA cryptography 42.0.0 - `commit `__ + `commit `__ `#9518 `__ - Add 'cache_dir' option to api.env - `commit `__ + `commit `__ `#9438 `__ - docs: Mention that Keycloak requires openid scope - `commit `__ + `commit `__ - Refactor CA file handling in replica installer - `commit `__ + `commit `__ `#9272 `__ .. _jan_kuparinen_1: @@ -565,7 +565,7 @@ Jan Kuparinen (1) ~~~~~~~~~~~~~~~~~ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ .. _erik_belko_1: @@ -573,10 +573,10 @@ Erik Belko (2) ~~~~~~~~~~~~~~ - ipatests: Update ipa-adtrust-install test - `commit `__ + `commit `__ `#9575 `__ - xmlrpc tests: Create user with manager option set using user-add - `commit `__ + `commit `__ `#9515 `__ .. _endi_sukma_dewata_4: @@ -585,13 +585,13 @@ Endi Sukma Dewata (4) ~~~~~~~~~~~~~~~~~~~~~ - Remove unused pki_theme\_\* params - `commit `__ + `commit `__ - Replace subsystem.select with CAInstance.is_crlgen_enabled() - `commit `__ + `commit `__ - Remove unused hierarchy.select - `commit `__ + `commit `__ - Enable LWCA monitor explicitly - `commit `__ + `commit `__ .. _emilio_herrera_1: @@ -599,7 +599,7 @@ Emilio Herrera (1) ~~~~~~~~~~~~~~~~~~ - Translated using Weblate (Spanish) - `commit `__ + `commit `__ .. _florence_blanc_renaud_31: @@ -607,87 +607,87 @@ Florence Blanc-Renaud (30) ~~~~~~~~~~~~~~~~~~~~~~~~~~ - ipa-replica-manage list-ruvs: display FQDN in the output - `commit `__ + `commit `__ `#9598 `__ - Spec file: depend on nfs-utils or nfsv4-client-utils - `commit `__ + `commit `__ `#9586 `__ - webui test: Update message for admin disable - `commit `__ + `commit `__ `#9489 `__, `#9574 `__ - xmlrpc: adapt range plugin test - `commit `__ + `commit `__ `#9558 `__ - idrange-add: add a warning because 389ds restart is required - `commit `__ + `commit `__ `#9558 `__ - ipatests: some tests are date-sensitive and fail Feb 29 - `commit `__ + `commit `__ `#9548 `__ - ipatests: fix tasks.wait_for_replication method - `commit `__ + `commit `__ `#9530 `__ - ipatests: add xfail for autoprivate group test with override - `commit `__ + `commit `__ - ipatests: remove xfail thanks to sssd 2.9.4 - `commit `__ + `commit `__ `#9295 `__ - ipatests: test_idp fails calling yum list wget - `commit `__ + `commit `__ `#9522 `__ - ipa-backup: adapt for 389ds switch to LMDB - `commit `__ + `commit `__ `#9516 `__ - Nightly tests: test on f38 and f39 - `commit `__ + `commit `__ - Tox: use sitepackages - `commit `__ + `commit `__ - pylint: fix errors - `commit `__ + `commit `__ - pylint: disable new checks - `commit `__ + `commit `__ - pylint: updates related to deprecations - `commit `__ + `commit `__ - azure tests: move to fedora 39 - `commit `__ + `commit `__ - ipatests: disable dnssec validation in tests using dnf - `commit `__ + `commit `__ `#9498 `__ - Webui: use service options to init Firefox driver - `commit `__ + `commit `__ `#9492 `__ - test_install: restart services after date change - `commit `__ + `commit `__ `#9405 `__ - test_external_idp: update code for selenium 4.10 - `commit `__ + `commit `__ `#9493 `__ - Make test_external_ca.py compatible with crypto 41.0.0 - `commit `__ + `commit `__ `#9490 `__ - Integration tests: disable test_sso - `commit `__ + `commit `__ `#9476 `__ - ipatests: fix expected output for ipahealthcheck.meta.services - `commit `__ + `commit `__ `#9460 `__ - Handle samba changes in samba.security.dom_sid() - `commit `__ + `commit `__ `#9466 `__ - group-add-member fails with an external member - `commit `__ + `commit `__ `#9466 `__ - ipalib: fix the IPACertificate validity dates - `commit `__ + `commit `__ `#9462 `__ - ipatests: fix test_ipactl_scenario_check - `commit `__ + `commit `__ `#9415 `__ - ipatests: fix healthcheck test for --indent option - `commit `__ + `commit `__ - ipatests: fix healthcheck test without DNS - `commit `__ + `commit `__ `#9459 `__ @@ -697,22 +697,22 @@ Francisco Trivino (6) ~~~~~~~~~~~~~~~~~~~~~ - Spec file: add support for sss_ssh_knownhosts - `commit `__ + `commit `__ `#9536 `__ - ipa-client-install: add support for sss_ssh_knownhosts - `commit `__ + `commit `__ `#9536 `__ - kra: set RSA-OAEP as default wrapping algo when FIPS is enabled - `commit `__ + `commit `__ `#9191 `__ - Vault: improve vault server archival/retrieval calls error handling - `commit `__ + `commit `__ `#9191 `__ - Vault: add support for RSA-OAEP wrapping algo - `commit `__ + `commit `__ `#9191 `__ - Workshop: fix broken Sphinx cross-references. - `commit `__ + `commit `__ .. _jeremy_frasier_1: @@ -720,7 +720,7 @@ Jeremy Frasier (1) ~~~~~~~~~~~~~~~~~~ - Fixes: Python SyntaxWarnings about invalid escape sequences - `commit `__ + `commit `__ `#9483 `__ .. _julien_rische_3: @@ -729,13 +729,13 @@ Julien Rische (3) ~~~~~~~~~~~~~~~~~ - ipa-kdb: Fix double free in ipadb_reinit_mspac() - `commit `__ + `commit `__ `#9535 `__ - ipa-kdb: Rework ipadb_reinit_mspac() - `commit `__ + `commit `__ `#9535 `__ - ipa-kdb: Fix memory leak during PAC verification - `commit `__ + `commit `__ `#9520 `__ .. _masahiro_matsuya_1: @@ -744,7 +744,7 @@ Masahiro Matsuya (1) ~~~~~~~~~~~~~~~~~~~~ - ipatests: wait for replica update in test_dns_locations - `commit `__ + `commit `__ `#9504 `__ .. _mark_reynolds_16: @@ -753,52 +753,52 @@ Mark Reynolds (16) ~~~~~~~~~~~~~~~~~~ - Issue 9591 - Allow get_ruv() to handle incomplete RUV elements - `commit `__ + `commit `__ `#9591 `__ - Issue 9579 - Remove bash_completions_dir for RHEL - `commit `__ + `commit `__ `#9579 `__ - Issue 9570 - migrate nsaccountlock - `commit `__ + `commit `__ `#9570 `__ - Issue 9568 - Update IPA to IPA migration design doc - `commit `__ + `commit `__ `#9568 `__ - IPA-to-IPA migration tool (beta) - `commit `__ + `commit `__ `#3656 `__ - Issue 9547 - Update IPA to IPA migration design doc - `commit `__ + `commit `__ `#9547 `__ - Issue 9497 - update debug logging in ipa_uuid - `commit `__ + `commit `__ `#9497 `__ - Issue 9497 - update debug logging in ipa-pwd-extop - `commit `__ + `commit `__ `#9497 `__ - Issue 9497 - update debug logging in ipa_otp_lasttoken - `commit `__ + `commit `__ `#9497 `__ - Issue 9497 - update debug logging in ipa_otp_counter - `commit `__ + `commit `__ `#9497 `__ - Issue 9497 - update debug logging in ipa_modrdn - `commit `__ + `commit `__ `#9497 `__ - Issue 9497 - update debug logging in ipa_lockout - `commit `__ + `commit `__ `#9497 `__ - Issue 9497 - update debug logging in ipa_graceperiod - `commit `__ + `commit `__ `#9497 `__ - Issue 9497 - Update logging in ipa_enrollment - `commit `__ + `commit `__ `#9497 `__ - Issue 9497 - Add new password policy logging function - `commit `__ + `commit `__ `#9497 `__ - Issue 3656 - Extend schema function to return MAY or MUST attrs - `commit `__ + `commit `__ `#3656 `__ .. _mohammad_rizwan_4: @@ -807,10 +807,10 @@ Mohammad Rizwan (2) ~~~~~~~~~~~~~~~~~~~ - ipatests: test software HSM installation with server & replica - `commit `__ + `commit `__ `#9273 `__ - ipatests: test software HSM installation with server & replica - `commit `__ + `commit `__ `#9273 `__ .. _weblate_translation_memory_19: @@ -819,43 +819,43 @@ Weblate Translation Memory (19) ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Georgian) - `commit `__ + `commit `__ - Translated using Weblate (Georgian) - `commit `__ + `commit `__ - Translated using Weblate (Georgian) - `commit `__ + `commit `__ .. _weblate_1: @@ -863,7 +863,7 @@ Weblate (1) ~~~~~~~~~~~ - Update translation files - `commit `__ + `commit `__ .. _pavel_březina_1: @@ -871,7 +871,7 @@ Pavel Březina (1) ~~~~~~~~~~~~~~~~~ - ipaserver: fix incorrect double negative in exception message - `commit `__ + `commit `__ .. _piotr_drąg_1: @@ -879,7 +879,7 @@ Piotr Drąg (1) ~~~~~~~~~~~~~~ - Translated using Weblate (Polish) - `commit `__ + `commit `__ .. _rafael_fontenelle_2: @@ -887,9 +887,9 @@ Rafael Fontenelle (2) ~~~~~~~~~~~~~~~~~~~~~ - Translated using Weblate (Portuguese (Brazil)) - `commit `__ + `commit `__ - Translated using Weblate (Portuguese (Brazil)) - `commit `__ + `commit `__ .. _rob_crittenden_62: @@ -897,162 +897,162 @@ Rob Crittenden (55) ~~~~~~~~~~~~~~~~~~~ - Add permissions for topologysegment - `commit `__ + `commit `__ `#9594 `__ - Don't try to validate the HSM arguments on a non-HSM installation - `commit `__ + `commit `__ `#9593 `__ - docs: Add a section on SELinux modules to the HSM design - `commit `__ + `commit `__ `#9273 `__ - Add SELinux module checking to hsm_validator - `commit `__ + `commit `__ `#9273 `__ - Call hsm_validator on KRA installs and validate the HSM password - `commit `__ + `commit `__ `#9273 `__ - Include the HSM tests in the nightlies - `commit `__ + `commit `__ `#9273 `__ - Require certmonger 0.79.17+ for required HSM changes - `commit `__ + `commit `__ `#9273 `__ - After an HSM replica install ensure all certs are visible - `commit `__ + `commit `__ `#9273 `__ - KRA: force OAEP for some HSM-based installations - `commit `__ + `commit `__ `#9191 `__ - Prompt for token password if not provided in replica/ipa-ca-install - `commit `__ + `commit `__ `#9273 `__ - dogtag-ipa-ca-renew-agent-submit: expect certs to be on HSMs - `commit `__ + `commit `__ `#9273 `__ - tests: Fix failing test test_testconfig.py with missing token variables - `commit `__ + `commit `__ - Add SELinux subpackage for Thales Luna HSM support - `commit `__ + `commit `__ - Add SELinux subpackage for nCipher nfast HSM support - `commit `__ + `commit `__ - Remove caSigningCert from list of certs to renew - `commit `__ + `commit `__ - Validate the HSM token library path and name during installation - `commit `__ + `commit `__ `#9273 `__ - After installing a KRA, copy the updated token to other machines - `commit `__ + `commit `__ - tests: helper to copy files from one host to another - `commit `__ + `commit `__ - renew_ca_cert: set peer trust on the KRA audit certificate - `commit `__ + `commit `__ `#9353 `__ - renew_ca_cert: skip removing non-CA certs, fix nickname - `commit `__ + `commit `__ `#9273 `__ - If HSM is configured add the token name to config-show output - `commit `__ + `commit `__ `#9273 `__ - Add token support to the renew_ca_cert certmonger helper - `commit `__ + `commit `__ `#9273 `__ - Update SELinux policy to allow certmonger to PKI config files - `commit `__ + `commit `__ `#9273 `__ - Add attribute ipacahsmconfiguration to the "Read CAs" ACI - `commit `__ + `commit `__ `#9273 `__ - Add HSM configuration options to installer scripts - `commit `__ + `commit `__ `#9273 `__ - Add LDAP attribute ipaCaHSMConfiguration to store HSM state - `commit `__ + `commit `__ `#9273 `__ - doc: Add token-password-file to HSM design, set new OID - `commit `__ + `commit `__ `#9273 `__ - Don't move KRA keys when key backup is disabled - `commit `__ + `commit `__ `#7677 `__, `#9273 `__ - Only generate kracert.p12 when not installing with HSM - `commit `__ + `commit `__ `#9273 `__ - Add token support to installer certificate handling - `commit `__ + `commit `__ `#9273 `__ - Don't generate a cafile on HSM instalations - `commit `__ + `commit `__ `#9273 `__ - Support the certmonger nss-user option - `commit `__ + `commit `__ `#9273 `__ - ipa-crlgen-manage: manage the cert status task execution time - `commit `__ + `commit `__ `#9569 `__ - Allow the admin user to be disabled - `commit `__ + `commit `__ `#9489 `__ - ipatests: Ignore spacing in OpenSSL validation error message - `commit `__ + `commit `__ `#9567 `__ - Return 2 when certificates are not found during requests - `commit `__ + `commit `__ `#9562 `__ - Check for file permissions after the ca/cert-show is complete - `commit `__ + `commit `__ `#9562 `__ - Vault: add additional fallback to RSA-OAEP wrapping algo - `commit `__ + `commit `__ `#9191 `__ - ipa-restore: adapt for 389-ds switch to LMDB - `commit `__ + `commit `__ `#9526 `__ - validate_principal: Don't try to verify that the realm is known - `commit `__ + `commit `__ `#9541 `__ - Server affinity: call ca.install() if there is a CA in the topology - `commit `__ + `commit `__ `#9510 `__ - Server affinity: Don't rely just on [ca|kra]_enabled for installs - `commit `__ + `commit `__ `#9510 `__ - get_directive: don't error out on substring mismatch - `commit `__ + `commit `__ `#9506 `__ - ipa-client-automount: Don't use deprecated ipadiscovery.IPADiscovery - `commit `__ + `commit `__ `#9487 `__ - ipatests: Test client install/uninstall with automount enabled - `commit `__ + `commit `__ `#9487 `__ - Fix ipa-client-automount install/uninstall with new install states - `commit `__ + `commit `__ `#9487 `__ - ACME: Don't treat pki-server ca-config-show failures as fatal - `commit `__ + `commit `__ `#9503 `__ - Include supported migration scenarios in the ipa-to-ipa docs - `commit `__ + `commit `__ - ipatests: Verify that hbactest will return messages - `commit `__ + `commit `__ `#9486 `__ - hbactest was not collecting or returning messages - `commit `__ + `commit `__ `#9486 `__ - ipatests: fix expected output for ipahealthcheck.ipa.host - `commit `__ + `commit `__ `#9482 `__ - ipatests: ignore nsslapd-accesslog-logbuffering WARN in healthcheck - `commit `__ + `commit `__ `#9400 `__ - WIP: Get the PKI version from the remote to determine the argument - `commit `__ + `commit `__ - ipa-client: correct directory location by using constants instead - `commit `__ + `commit `__ - Allow password policy minlength to be removed like other values - `commit `__ + `commit `__ `#9297 `__ @@ -1062,10 +1062,10 @@ Rafael Guterres Jeffman (2) ~~~~~~~~~~~~~~~~~~~~~~~~~~~ - Replace netifaces with ifaddr - `commit `__ + `commit `__ `#9555 `__ - ipaserver/dcerpc: avoid logging stack trace in retrieve_anonymously - `commit `__ + `commit `__ `#9484 `__ .. _김인수_19: @@ -1074,43 +1074,43 @@ Rafael Guterres Jeffman (2) ~~~~~~~~~~~ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ .. _stanislav_levin_4: @@ -1118,16 +1118,16 @@ Stanislav Levin (4) ~~~~~~~~~~~~~~~~~~~ - ap: Migrate to docker compose V2 - `commit `__ + `commit `__ `#9566 `__ - ipapython: Propagate KRB5Error exceptions on iterating ccache - `commit `__ + `commit `__ `#9519 `__ - ipapython: Correct return type of krb5_free_cred_contents - `commit `__ + `commit `__ `#9519 `__ - ipapython: Clean up krb5_error - `commit `__ + `commit `__ `#9519 `__ .. _sudhir_menon_4: @@ -1137,13 +1137,13 @@ Sudhir Menon (4) - ipatests: Fixes for test_ipahealthcheck_ipansschainvalidation testcases. - `commit `__ + `commit `__ - ipatests: Skip tests for ipahealtcheck tests for specific pki version - `commit `__ + `commit `__ - ipatests: Skip ds_encryption tests on RHEL9 SUT. - `commit `__ + `commit `__ - ipatests: Skip the test failing due to FIPS policy - `commit `__ + `commit `__ .. _temuri_doghonadze_7: @@ -1151,19 +1151,19 @@ Temuri Doghonadze (7) ~~~~~~~~~~~~~~~~~~~~~ - Translated using Weblate (Georgian) - `commit `__ + `commit `__ - Translated using Weblate (Georgian) - `commit `__ + `commit `__ - Translated using Weblate (Georgian) - `commit `__ + `commit `__ - Translated using Weblate (Georgian) - `commit `__ + `commit `__ - Translated using Weblate (Georgian) - `commit `__ + `commit `__ - Translated using Weblate (Georgian) - `commit `__ + `commit `__ - Translated using Weblate (Georgian) - `commit `__ + `commit `__ .. _thorsten_scherf_1: @@ -1171,7 +1171,7 @@ Thorsten Scherf (1) ~~~~~~~~~~~~~~~~~~~ - ipa-client: Check if IPA CA cert is empty - `commit `__ + `commit `__ `#9499 `__ .. _thomas_woerner_1: @@ -1180,10 +1180,10 @@ Thomas Woerner (2) ~~~~~~~~~~~~~~~~~~ - idviews: Use ipaAnchorUUID without DCERPC bindings for SID anchors - `commit `__ + `commit `__ `#9544 `__ - principal_has_privilege: Check also idoverriseuser (ipaOriginalUid) - `commit `__ + `commit `__ `#9542 `__ .. _viktor_ashirov_2: @@ -1192,7 +1192,7 @@ Viktor Ashirov (1) ~~~~~~~~~~~~~~~~~~ - WebUI: update favicon.ico - `commit `__ + `commit `__ `#9449 `__ .. _yuri_chornoivan_1: @@ -1201,7 +1201,7 @@ Yuri Chornoivan (1) ~~~~~~~~~~~~~~~~~~~ - Translated using Weblate (Ukrainian) - `commit `__ + `commit `__ .. _zoedong_1: @@ -1209,5 +1209,5 @@ zoedong (1) ~~~~~~~~~~~ - ipaplatform: add opencloudos/tencentos support - `commit `__ + `commit `__ `#9501 `__ diff --git a/src/release-notes/4-12-1.rst b/src/release-notes/4-12-1.rst index 202af81bd..393e7fa45 100644 --- a/src/release-notes/4-12-1.rst +++ b/src/release-notes/4-12-1.rst @@ -106,7 +106,7 @@ Antonio Torres (1) ~~~~~~~~~~~~~~~~~~ - Become IPA 4.12.1 - `commit `__ + `commit `__ .. _julien_rische_2: @@ -114,6 +114,6 @@ Julien Rische (2) ~~~~~~~~~~~~~~~~~ - kdb: apply combinatorial logic for ticket flags - `commit `__ + `commit `__ - kdb: fix vulnerability in GCD rules handling - `commit `__ + `commit `__ diff --git a/src/release-notes/4-12-2.rst b/src/release-notes/4-12-2.rst index adf373ff6..e1dba55f7 100644 --- a/src/release-notes/4-12-2.rst +++ b/src/release-notes/4-12-2.rst @@ -186,19 +186,19 @@ Alexander Bokovoy (5) ~~~~~~~~~~~~~~~~~~~~~ - Get rid of unicode and long helpers in ipa-otptoken-import - `commit `__ + `commit `__ `#9641 `__ - ipalib/constants.py: factor out TripleDES use - `commit `__ + `commit `__ `#9641 `__ - ipalib/x509.py: get rid of unicode helper - `commit `__ + `commit `__ `#9644 `__ - ipalib/x509.py: support Cryptography 43 - `commit `__ + `commit `__ `#9641 `__ - ipa-pwd-extop: differentiate OTP requirements in LDAP binds - `commit `__ + `commit `__ `#5169 `__ .. _anuja_more_1: @@ -207,7 +207,7 @@ Anuja More (1) ~~~~~~~~~~~~~~ - ipatests: Test replica installation using AD admin. - `commit `__ + `commit `__ `#9542 `__ .. _antonio_torres_2: @@ -216,9 +216,9 @@ Antonio Torres (2) ~~~~~~~~~~~~~~~~~~ - Bump minor version number - `commit `__ + `commit `__ - Back to git snapshots - `commit `__ + `commit `__ .. _florence_blanc_renaud_20: @@ -226,62 +226,62 @@ Florence Blanc-Renaud (20) ~~~~~~~~~~~~~~~~~~~~~~~~~~ - trust-add: handle unavailable domain - `commit `__ + `commit `__ `#9488 `__ - HSM: fix the module name - `commit `__ + `commit `__ `#9636 `__ - ipatests: skip HSM test if pki < 11.5.9 - `commit `__ + `commit `__ `#9648 `__ - ipatests: increase the timeout for test_hsm.py::TestHSMInstall - `commit `__ + `commit `__ - Replica CA installation: ignore time skew during initial replication - `commit `__ + `commit `__ `#9635 `__ - spec file: do not use nodejs-22 on f39 and f40 - `commit `__ + `commit `__ `#9643 `__ - ipatests: remove xfail for test_ipa_migrate_stage_mode - `commit `__ + `commit `__ `#9621 `__ - ipatests: remove xfail for test_ipa_migrate_version_option - `commit `__ + `commit `__ `#9620 `__ - test_replica_install_after_restore: kinit after restore - `commit `__ + `commit `__ `#9613 `__ - Uninstall: stop sssd-kcm before removing KCM ccaches database - `commit `__ + `commit `__ `#9616 `__ - ipa-ods-enforcer: stop must also stop the socket - `commit `__ + `commit `__ `#9613 `__ - ipatests: fix / permissions for test_nested_group_members - `commit `__ + `commit `__ `#9615 `__ - ipatests: fix / permissions to allow ssh with private key - `commit `__ + `commit `__ `#9607 `__ - ipatests: mark test_ca_show_error_handling as xfail - `commit `__ + `commit `__ `#9606 `__ - ipatests: configure gating and nightly tests on ipa-4-12 branch - `commit `__ + `commit `__ - ipatests: add test for PKINIT renewal on hidden replica - `commit `__ + `commit `__ `#9611 `__ - PKINIT certificate: fix renewal on hidden replica - `commit `__ + `commit `__ `#9611 `__ - ipatests: add test for ticket 9610 - `commit `__ + `commit `__ `#9610 `__ - spec file: do not create /etc/ssh/ssh_config.orig if unchanged - `commit `__ + `commit `__ `#9610 `__ - ipa-otptoken-import: open the key file in binary mode - `commit `__ + `commit `__ `#9609 `__ .. _julien_rische_4: @@ -290,15 +290,15 @@ Julien Rische (4) ~~~~~~~~~~~~~~~~~ - Remove RC4 and 3DES default encryption types on update - `commit `__ + `commit `__ `#9633 `__ - Unconditionally add MS-PAC to global config on update - `commit `__ + `commit `__ `#9632 `__ - kdb: apply combinatorial logic for ticket flags - `commit `__ + `commit `__ - kdb: fix vulnerability in GCD rules handling - `commit `__ + `commit `__ .. _takahashi_masatsuna_1: @@ -306,7 +306,7 @@ TAKAHASHI Masatsuna (1) ~~~~~~~~~~~~~~~~~~~~~~~ - ipa-advise ipa-backup ipa-restore: Fix --v option of the manual. - `commit `__ + `commit `__ `#9617 `__ .. _shunsuke_matsumoto_1: @@ -315,7 +315,7 @@ Shunsuke matsumoto (1) ~~~~~~~~~~~~~~~~~~~~~~ - The -d option of the ipa-advise command was able to used. - `commit `__ + `commit `__ `#9625 `__ .. _mark_reynolds_4: @@ -324,17 +324,17 @@ Mark Reynolds (4) ~~~~~~~~~~~~~~~~~ - ipa-migrate - properly handle invalid certificates - `commit `__ + `commit `__ `#9642 `__ - Issue 9621 - ipa-migrate - should not update mapped attributes in managed entries - `commit `__ + `commit `__ `#9621 `__ - ipa-migrate - starttls does not work - `commit `__ + `commit `__ `#9619 `__ - ipa-migrate - remove -V option - `commit `__ + `commit `__ `#9620 `__ .. _mohammad_rizwan_2: @@ -344,10 +344,10 @@ Mohammad Rizwan (2) - ipatests: Verify that SIDgen task continue even if it fails to assign sid - `commit `__ + `commit `__ `#9618 `__ - ipatests: tests related to --token-password-file - `commit `__ + `commit `__ `#9603 `__ .. _rob_crittenden_14: @@ -356,46 +356,46 @@ Rob Crittenden (14) ~~~~~~~~~~~~~~~~~~~ - Fix some resource leaks identified by a static analyzer - `commit `__ + `commit `__ `#9367 `__ - Ignore TripleDES python-cryptography import warnings - `commit `__ + `commit `__ `#9641 `__ - Correct usage of public_key_algorithm_oid in ipalib/x509 - `commit `__ + `commit `__ `#9641 `__ - Log errors reported by adtrustinstance.check_inst() using logger - `commit `__ + `commit `__ `#9637 `__ - Force a logout in KerberosSession if a login is needed - `commit `__ + `commit `__ `#9624 `__ - Run HSM validation as pkiuser to verify token permissions - `commit `__ + `commit `__ `#9626 `__ - ipatests: Fix usage of token_password_file - `commit `__ + `commit `__ `#9603 `__ - Fix a copy/paste issue when detecting the HSM SELinux subpackage - `commit `__ + `commit `__ `#9636 `__ - Include token password options in ipa-kra-install man page - `commit `__ + `commit `__ `#9603 `__ - Re-organize HSM validation to be more consistent/less duplication - `commit `__ + `commit `__ `#9603 `__ - Fix syntax error in the selinux-luna %postun script - `commit `__ + `commit `__ `#9629 `__ - Clean up more files and directories created by the installer(s) - `commit `__ + `commit `__ `#8080 `__ - Add iparepltopoconf objectclass to topology permissions - `commit `__ + `commit `__ `#9594 `__ - Use a unique task name for each backend in ipa-backup - `commit `__ + `commit `__ `#9584 `__ .. _sudhir_menon_4: @@ -405,14 +405,14 @@ Sudhir Menon (4) - ipatests: Replace 'usermod -r' command with 'gpasswd -d' in test_hsm.py - `commit `__ + `commit `__ `#9626 `__ - ipatests: ipa-migrate tool with -Z option (CACERTFILE) - `commit `__ + `commit `__ - Added new testsuite(ipa_ipa_migration) in prci definitions - `commit `__ + `commit `__ - ipatests: Tests for ipa-ipa migration tool - `commit `__ + `commit `__ .. _thomas_woerner_1: @@ -420,5 +420,5 @@ Thomas Woerner (1) ~~~~~~~~~~~~~~~~~~ - ipa_sidgen: Allow sidgen_task to continue after finding issues - `commit `__ + `commit `__ `#9618 `__ diff --git a/src/release-notes/4-12-3.rst b/src/release-notes/4-12-3.rst index 1918dd3ba..5c37caffa 100644 --- a/src/release-notes/4-12-3.rst +++ b/src/release-notes/4-12-3.rst @@ -84,9 +84,9 @@ Alexander Bokovoy (2) ~~~~~~~~~~~~~~~~~~~~~ - ipa tools: remove sensitive material from the commandline - `commit `__ + `commit `__ - Unify use of option parsers - `commit `__ + `commit `__ .. _sumit_bose_1: @@ -94,4 +94,4 @@ Sumit Bose (1) ~~~~~~~~~~~~~~ - ipa-otpd: use oidc_child's --client-secret-stdin option - `commit `__ + `commit `__ diff --git a/src/release-notes/4-12-4.rst b/src/release-notes/4-12-4.rst index a187009c9..8fcda97c9 100644 --- a/src/release-notes/4-12-4.rst +++ b/src/release-notes/4-12-4.rst @@ -106,7 +106,7 @@ Antonio Torres (1) ~~~~~~~~~~~~~~~~~~ - Become IPA 4.12.4 - `commit `__ + `commit `__ .. _julien_rische_1: @@ -115,7 +115,7 @@ Julien Rische (1) - kdb: keep ipadb_get_connection() from succeeding with null LDAP context - `commit `__ + `commit `__ `#9777 `__ .. _rob_crittenden_1: @@ -124,4 +124,4 @@ Rob Crittenden (1) ~~~~~~~~~~~~~~~~~~ - Set krbCanonicalName=admin@REALM on the admin user - `commit `__ + `commit `__ diff --git a/src/release-notes/4-12-5.rst b/src/release-notes/4-12-5.rst index 33fb4dede..75db7b3a6 100644 --- a/src/release-notes/4-12-5.rst +++ b/src/release-notes/4-12-5.rst @@ -115,7 +115,7 @@ Antonio Torres (1) ~~~~~~~~~~~~~~~~~~ - Become IPA 4.12.5 - `commit `__ + `commit `__ .. _florence_blanc_renaud_1: @@ -123,7 +123,7 @@ Florence Blanc-Renaud (1) ~~~~~~~~~~~~~~~~~~~~~~~~~ - ipatests: extend test for unique krbcanonicalname - `commit `__ + `commit `__ .. _julien_rische_1: @@ -131,7 +131,7 @@ Julien Rische (1) ~~~~~~~~~~~~~~~~~ - ipa-kdb: enforce PAC presence on TGT for TGS-REQ context - `commit `__ + `commit `__ .. _rob_crittenden_1: @@ -139,4 +139,4 @@ Rob Crittenden (1) ~~~~~~~~~~~~~~~~~~ - Enforce uniqueness across krbprincipalname and krbcanonicalname - `commit `__ + `commit `__ diff --git a/src/release-notes/4-13-0.rst b/src/release-notes/4-13-0.rst index e0f38ff5f..8a542783a 100644 --- a/src/release-notes/4-13-0.rst +++ b/src/release-notes/4-13-0.rst @@ -577,160 +577,160 @@ Alexander Bokovoy (60) - sysaccounts: extend permissions to include description and account lock - `commit `__ + `commit `__ `#9875 `__ - sysaccount: make sure nsaccountlock is always present - `commit `__ + `commit `__ `#9842 `__ - freeipa.spec: use proper package name when installing Web UI license - `commit `__ + `commit `__ - sysaccounts: add integration test - `commit `__ + `commit `__ `#9842 `__ - Add system accounts (sysaccounts) - `commit `__ + `commit `__ `#9842 `__ - ipa-pwd-extop: add SysAcctManagersDNs support - `commit `__ + `commit `__ `#9842 `__ - Require krb5.conf.d because we install snippets there - `commit `__ + `commit `__ - krb5.conf templates: move IPA domain configuration into a separate snippet - `commit `__ + `commit `__ - krb5.conf templates: remove Kerberos 4 support - `commit `__ + `commit `__ - API: correct ordering for password policy credits - `commit `__ + `commit `__ - makeapi: enforce en_US.UTF-8 locale when sorting API files - `commit `__ + `commit `__ - doc/api: regenerate notes - `commit `__ + `commit `__ - ipasam: remove definitions which included from ndr_drsblobs.h - `commit `__ + `commit `__ - GetEntryFromLDIF: handle DNs case-insensitive - `commit `__ + `commit `__ `#9854 `__ - ipasam: define prototypes - `commit `__ + `commit `__ - ipasam: address signedness warnings - `commit `__ + `commit `__ - ipasam: simplify error handling in fill_pdb_trusted_domain - `commit `__ + `commit `__ `#9852 `__ - dcerpc: Support Samba 4.23 - `commit `__ + `commit `__ `#9852 `__ - dcerpc: make sure forest trust info structure version is 1 - `commit `__ + `commit `__ `#9852 `__ - kdb: prevent double crash in RBCD ACL free - `commit `__ + `commit `__ `#9367 `__ - freeipa.spec.in: protect scriptlets in environment where dbus or systemd do not run - `commit `__ + `commit `__ `#9826 `__ - test_schema: do not fool pytest with a non-test class name - `commit `__ + `commit `__ - Azure CI: do not run test_ipaserver/test_migratepw - `commit `__ + `commit `__ - Make IPAAbstractVersion available to all platforms - `commit `__ + `commit `__ - test_console: rework matching to adjust to Python 3.13 - `commit `__ + `commit `__ - pylint: do not use return at the end of flow - `commit `__ + `commit `__ - fix used-before-assignment errors where pylint cannot infer logic - `commit `__ + `commit `__ - Move wheel constraints to F41+ - `commit `__ + `commit `__ - freeipa.spec.in: do not recommend encrypted DNS on pre-F42 systems - `commit `__ + `commit `__ - freeipa.spec.in: update BIND-related dependencies - `commit `__ + `commit `__ `#9696 `__ - ipa-dnskeysyncd: use systemd-tmpfiles to handle tokens - `commit `__ + `commit `__ `#9696 `__ - DNS: detect when OpenSSL engine should be removed on upgrade - `commit `__ + `commit `__ `#9696 `__ - Use OpenSSL provider with BIND for Fedora 42+ and RHEL10+ - `commit `__ + `commit `__ `#9696 `__ - Revert "add sourcery.ai github action" - `commit `__ + `commit `__ - add sourcery.ai github action - `commit `__ + `commit `__ - ipatests: add a test to use full 32-bit ID range space - `commit `__ + `commit `__ `#9757 `__ - baseuser: allow uidNumber and gidNumber of 32-bit range - `commit `__ + `commit `__ `#9757 `__ - update_dna_shared_config: do not fail when config is not found - `commit `__ + `commit `__ `#9757 `__ - config-mod: allow disabling subordinate ID integration - `commit `__ + `commit `__ `#9757 `__ - Reintroduce test_idp to gating tests - `commit `__ + `commit `__ `#9734 `__ - Migrate Keycloak tests to JDK 21 and Keycloak 26 - `commit `__ + `commit `__ - ipa-otpd: do not pass OIDC client secret if there is none to pass - `commit `__ + `commit `__ `#9734 `__ - ipa tools: remove sensitive material from the commandline - `commit `__ + `commit `__ - Unify use of option parsers - `commit `__ + `commit `__ - ipa-pwd-extop: clarify OTP use over LDAP binds - `commit `__ + `commit `__ `#9699 `__, `#9711 `__ - ipalib/x509: support PyCA 44.0 - `commit `__ + `commit `__ `#9708 `__ - Revert "readthedocs: install crypto 43.0.0" - `commit `__ + `commit `__ - ipaserver/dcerpc: support Samba 4.21 - `commit `__ + `commit `__ `#9702 `__ - vault: handle pyca InternalError exception for PKCS#1 v1.5 padding - `commit `__ + `commit `__ `#9689 `__ - web ui: Add explicit white border for QR code widget - `commit `__ + `commit `__ `#9202 `__ - Extend nightly tests with Cockpit test - `commit `__ + `commit `__ `#9675 `__ - Minimal test for Cockpit integration on IPA master - `commit `__ + `commit `__ `#9675 `__ - selinux: allow Cockpit to use HTTP keytab on IPA servers - `commit `__ + `commit `__ `#9675 `__ - selinux: add all IPA log files to ipa_log_t file context - `commit `__ + `commit `__ `#9654 `__ - Remove NIS server support - `commit `__ + `commit `__ `#9363 `__ - Get rid of unicode and long helpers in ipa-otptoken-import - `commit `__ + `commit `__ `#9641 `__ - ipalib/constants.py: factor out TripleDES use - `commit `__ + `commit `__ `#9641 `__ - ipalib/x509.py: get rid of unicode helper - `commit `__ + `commit `__ `#9644 `__ - ipalib/x509.py: support Cryptography 43 - `commit `__ + `commit `__ `#9641 `__ .. _anuja_more_5: @@ -739,25 +739,25 @@ Anuja More (7) ~~~~~~~~~~~~~~ - ipatests: Refactor and port trust functional SUDO tests. - `commit `__ + `commit `__ `#9845 `__ - Revert "Temp commit" - `commit `__ + `commit `__ - ipatests: Refactor and port trust functional HBAC tests. - `commit `__ + `commit `__ `#9845 `__ - ipatests: Add comprehensive tests for ipa-client-automount --domain option - `commit `__ + `commit `__ `#9780 `__ - ipatests: Remove xfail from test_installation::test_number_of_zones - `commit `__ + `commit `__ `#9135 `__ - ipatests: Update ipatests to test topology with multiple domain. - `commit `__ + `commit `__ `#9657 `__ - Added template for ad_master_1replica_1client - `commit `__ + `commit `__ .. _andi_chandler_2: @@ -765,11 +765,11 @@ Andi Chandler (3) ~~~~~~~~~~~~~~~~~ - Translated using Weblate (English (United Kingdom)) - `commit `__ + `commit `__ - Translated using Weblate (English (United Kingdom)) - `commit `__ + `commit `__ - Translated using Weblate (English (United Kingdom)) - `commit `__ + `commit `__ .. _antonio_torres_10: @@ -777,32 +777,32 @@ Antonio Torres (11) ~~~~~~~~~~~~~~~~~~~ - eDNS: disable dnsconfd before configuring Unbound - `commit `__ + `commit `__ `#9859 `__ - dns: disable all previous Unbound configuration before deploying ours - `commit `__ + `commit `__ `#9814 `__ - dns: only overwrite resolv.conf during eDNS setup when needed - `commit `__ + `commit `__ `#9813 `__ - Fix inconsistency in manpage for DoT forwarder option - `commit `__ + `commit `__ `#9804 `__ - dns: don't populate forwarders with DoT forwarders - `commit `__ + `commit `__ `#9748 `__ - dns: only disable unbound when DoT is enabled - `commit `__ + `commit `__ - spec: add unbound requirement and template file - `commit `__ + `commit `__ - PRCI: add definitions for DNS over TLS tests - `commit `__ + `commit `__ - ipatests: add tests for DNS over TLS - `commit `__ + `commit `__ - Add DNS over TLS support - `commit `__ + `commit `__ - Bump to IPA 4.13 - `commit `__ + `commit `__ .. _arif_budiman_2: @@ -810,9 +810,9 @@ Arif Budiman (2) ~~~~~~~~~~~~~~~~ - Translated using Weblate (Indonesian) - `commit `__ + `commit `__ - Translated using Weblate (Indonesian) - `commit `__ + `commit `__ .. _aleksandr_sharov_4: @@ -821,23 +821,23 @@ Aleksandr Sharov (6) - Correctly recognize OID 2.5.4.97, organizationIdentifier as a subject/issuer DN of the CA certificate - `commit `__ + `commit `__ `#9866 `__ - Allow ipa tool to force specific server - `commit `__ + `commit `__ `#9744 `__ - Test fix for the update - `commit `__ + `commit `__ `#9760 `__ - Add a check into ipa-cert-fix tool to avoid updating certs if CA is close to being expired. - `commit `__ + `commit `__ `#9760 `__ - Add PR-CI definitions - `commit `__ + `commit `__ `#9612 `__ - Add ipa-idrange-fix - `commit `__ + `commit `__ `#9612 `__ .. _carla_martinez_1: @@ -846,9 +846,9 @@ Carla Martinez (2) ~~~~~~~~~~~~~~~~~~ - Modern WebUI version v0.1.7 - `commit `__ + `commit `__ - Fix: 'Organization' field in Okta not required - `commit `__ + `commit `__ `#9687 `__ .. _david_hanina_8: @@ -857,34 +857,34 @@ David Hanina (11) ~~~~~~~~~~~~~~~~ - Fix webui submodule copr build - `commit `__ + `commit `__ - Add info about modern webui - `commit `__ + `commit `__ - Add modern webui build - `commit `__ + `commit `__ - Fix terminal height for Rawhide - `commit `__ + `commit `__ `#9824 `__ - Warn when UID is out of local ID ranges - `commit `__ + `commit `__ `#9781 `__ - Require baserid and secondarybaserid - `commit `__ + `commit `__ `#9779 `__ - Correct dnsrecord\_\* tests for --raw --structured - `commit `__ + `commit `__ `#9768 `__ - Disallow removal of dogtag and ipa-dnskeysyncd services on IPA servers - `commit `__ + `commit `__ `#9764 `__ - Disable --raw and --structured together - `commit `__ + `commit `__ `#9756 `__ - Skip for unpatched freeipa-healthcheck - `commit `__ + `commit `__ - Replace fips-mode-setup - `commit `__ + `commit `__ `#9750 `__ .. _erik_belko_2: @@ -893,9 +893,9 @@ Erik Belko (2) ~~~~~~~~~~~~~~ - man: fix formatting and syntax issues - `commit `__ + `commit `__ - ipatests: Update ipa-adtrust-install test - `commit `__ + `commit `__ `#9655 `__ .. _emilio_herrera_1: @@ -904,7 +904,7 @@ Emilio Herrera (1) ~~~~~~~~~~~~~~~~~~ - Translated using Weblate (Spanish) - `commit `__ + `commit `__ .. _finn_krein_schuch_1: @@ -912,7 +912,7 @@ Finn Krein-Schuch (1) ~~~~~~~~~~~~~~~~~~~~~ - Use mod_auth_gssapi option GssapiNegotiateOnce - `commit `__ + `commit `__ `#5614 `__ .. _florence_blanc_renaud_84: @@ -921,301 +921,301 @@ Florence Blanc-Renaud (112) ~~~~~~~~~~~~~~~~~~~~~~~~~~ - ipatests: fix teardown of TestIpaCertFix - `commit `__ + `commit `__ `#9888 `__ - test_ipahealthcheck_dogtag_ca_connectivity_check: update expected msg - `commit `__ + `commit `__ `#9881 `__ - temp_commit: revert to the version pre 0b521f7 - `commit `__ + `commit `__ - ipatests: mark test_dnssec as xfail in fips mode - `commit `__ + `commit `__ `#9785 `__ - FIPS mode: openssl pkcs12 command needs -nomacver option - `commit `__ + `commit `__ `#9878 `__ - test_sudo: do not clean the cache for offline cache tests - `commit `__ + `commit `__ `#9874 `__ - test_idp: use more recent keycloak server - `commit `__ + `commit `__ `#9833 `__ - PRCI: switch testing from f41 and f42 to f42 and f43 - `commit `__ + `commit `__ - Backup-restore: backup krb5.conf.d snippet files - `commit `__ + `commit `__ `#9870 `__ - TestHttpKdcProxy: use the snippet file for krb5 config - `commit `__ + `commit `__ `#9871 `__ - Localization: remove zh_Hant file - `commit `__ + `commit `__ - Modern webui: refresh to the tip of main branch - `commit `__ + `commit `__ - Azure: fix WebUI tests - `commit `__ + `commit `__ - Azure: fix the configuration issue - `commit `__ + `commit `__ - Azure CI: Use F43 - `commit `__ + `commit `__ - ipatests: mark test_scale_add_subca as xfail - `commit `__ + `commit `__ - Integration test: fix teardown of test_expiration_date_post_2038 - `commit `__ + `commit `__ - test_cert: adapt the expect error message to PKI 11.7.0-5 - `commit `__ + `commit `__ - Revert "Tests xmlrpc: mark xfail tests requesting cert with subca" - `commit `__ + `commit `__ - PRCI tests: update vagrant image with latest PKI / certmonger package - `commit `__ + `commit `__ - ipatests: fix TestIpaClientAutomountDiscovery - `commit `__ + `commit `__ - Spec file: bump version for 389-ds - `commit `__ + `commit `__ - Tests xmlrpc: mark xfail tests requesting cert with subca - `commit `__ + `commit `__ - ipatests: extend test for unique krbcanonicalname - `commit `__ + `commit `__ - ipatests: fix TestIPAMigratewithBackupRestore setup - `commit `__ + `commit `__ `#9858 `__ - ipatests: add xfail for TestKRAinstallAfterCertRenew - `commit `__ + `commit `__ `#9763 `__ - ipatests: exclude TomcatFileCheck when RSN are enabled - `commit `__ + `commit `__ - ipatests: update the Let's Encrypt cert chain - `commit `__ + `commit `__ `#9857 `__ - azure webui tests: force chromium version - `commit `__ + `commit `__ - ipatests: fix test_otp - `commit `__ + `commit `__ `#9849 `__ - xmlrpc test: fix test_find_orphan_automember_rules - `commit `__ + `commit `__ `#9850 `__ - ipatests: remove xfail for PKI 11.7 - `commit `__ + `commit `__ `#9606 `__ - ipatests: fix test_certmonger_ipa_responder_jsonrpc - `commit `__ + `commit `__ `#9848 `__ - DNS over TLS: use system trust store - `commit `__ + `commit `__ `#9838 `__ - Spec file: bump samba version to 4.23.0 in f43 and above - `commit `__ + `commit `__ `#9843 `__ - Spec file: use nodejs22 on fedora 41+ - `commit `__ + `commit `__ `#9836 `__ - ipatests: fix test_adtrust_install_with_non_ipa_user - `commit `__ + `commit `__ `#9812 `__ - ipa-idrange-fix: check that IPA server is installed - `commit `__ + `commit `__ `#9809 `__ - ipatests: fix invalid range creation in test_ipa_idrange_fix.py - `commit `__ + `commit `__ `#9801 `__ - ipatests: fix xfail annotation for test_ipa_healthcheck_fips_enabled - `commit `__ + `commit `__ `#9791 `__ - ipatests: skip encrypted dns tests on fedora 41 - `commit `__ + `commit `__ `#9799 `__ - ipa config-mod: fix internalerror when setting an empty ipaconfigstring - `commit `__ + `commit `__ `#9794 `__ - ipatests: test_manual_renewal_master_transfer must wait for replication - `commit `__ + `commit `__ `#9790 `__ - azure pipeline: disable InstallDNSSECFirst - `commit `__ + `commit `__ - ipatests: add extensions to server certificates for CAless mode - `commit `__ + `commit `__ `#9787 `__ - dns install: fix selinux avc relabelto - `commit `__ + `commit `__ `#9782 `__ - PRCI tests: update vagrant image with latest bind package - `commit `__ + `commit `__ - Azure CI: use podman instead of docker through emulation - `commit `__ + `commit `__ - azure pipeline: skip step disabling conflicting apparmor profile - `commit `__ + `commit `__ - azure pipeline: replace ubuntu-20.04 with 24.04 - `commit `__ + `commit `__ - ipatests: fix test_idp - `commit `__ + `commit `__ `#9769 `__ - PRCI: switch testing from f40 and f41 to f41 and f42 - `commit `__ + `commit `__ - PRCI definitions: update vagrant box version for rawhide - `commit `__ + `commit `__ - ipatests: update fedora41 vagrant box to 0.0.2 - `commit `__ + `commit `__ - gating tests: add test_ipahealthcheck.py::TestIpaHealthCheckWithADtrust - `commit `__ + `commit `__ - idrange: use minvalue=0 for baserid and secondarybaserid - `commit `__ + `commit `__ `#9765 `__ - ipatest: make test_cert more robust to replication delays - `commit `__ + `commit `__ `#9762 `__ - Leapp upgrade: skip systemctl calls - `commit `__ + `commit `__ - ipatests: adapt error code and message for samba 4.22 - `commit `__ + `commit `__ `#9751 `__ - WebUI: fix the tooltip for Search Size limit - `commit `__ + `commit `__ `#9758 `__ - vault: remove PKIConnection deprecation warning - `commit `__ + `commit `__ `#9754 `__ - ipatests: use "sos report" instead of "sosreport" command - `commit `__ + `commit `__ `#9752 `__ - ipatests: simulate FIPS mode and install replica - `commit `__ + `commit `__ `#9002 `__ - ipatests: on rhel10 do not install firefox - `commit `__ + `commit `__ - ipatests: restart dirsrv after time jumps - `commit `__ + `commit `__ - ipatests: skip test_ipahealthcheck_ds_configcheck for recent versions - `commit `__ + `commit `__ `#9730 `__ - Nightly tests: add test_ipahelthcheck to 389ds pipeline - `commit `__ + `commit `__ - ipatests: force the version for uninstall/reinstall - `commit `__ + `commit `__ `#9723 `__ - Fix pylint issue in ipatests/i18n.py - `commit `__ + `commit `__ - ipatests: certbot removed the --manual-public-ip-logging-ok parameter - `commit `__ + `commit `__ `#9724 `__ - Temp commit: move to fedora 41 - `commit `__ + `commit `__ - Cert renewal: update the trust flags for audit cert - `commit `__ + `commit `__ `#9705 `__ - Dogtag instance: add method to create temp password file - `commit `__ + `commit `__ `#9705 `__ - KRA cert renewal: update ca.connector.KRA.transportCert - `commit `__ + `commit `__ `#9692 `__ - Installation test: KRA on replica after cert renewal - `commit `__ + `commit `__ `#9692 `__ - Fix copr build - `commit `__ + `commit `__ - readthedocs: install crypto 43.0.0 - `commit `__ + `commit `__ - webuitests: adapt to Random Serial Numbers - `commit `__ + `commit `__ `#9707 `__ - ipatests: pruning is enabled by default with LMDB - `commit `__ + `commit `__ `#9706 `__ - ipatests: install master with allow-zone-overlap - `commit `__ + `commit `__ `#9697 `__ - Nightly test def: fix topology for test_IPAMigrateADTrust - `commit `__ + `commit `__ - Tests: migrate to f40/f41 - `commit `__ + `commit `__ - ipa-migrate man page: fix typos and errors - `commit `__ + `commit `__ `#9681 `__ - test_ipahealthcheck: skip connectivity_and_data check - `commit `__ + `commit `__ `#9668 `__ - Nightly test definition: use master_1repl topology for idrange_fix - `commit `__ + `commit `__ - test_adtrust_install: add --use-krb5-ccache to smbclient command - `commit `__ + `commit `__ `#9666 `__ - ipatests: provide a ccache to rpcclient deletetrustdom - `commit `__ + `commit `__ `#9667 `__ - azure pipeline: use latest version of DownloadPipelineArtifact task - `commit `__ + `commit `__ - UnsafeIPAddress: pass flag=0 to IPNetwork - `commit `__ + `commit `__ `#9645 `__ - azure tests: move to fedora 40 - `commit `__ + `commit `__ - Custodia: in fips mode add -nomac or -nomacver to openssl pkcs12 - `commit `__ + `commit `__ `#9577 `__ - ipatests: Add missing comma in test_idrange_no_rid_bases_reversed - `commit `__ + `commit `__ `#9656 `__ - HSM: fix the module name - `commit `__ + `commit `__ `#9636 `__ - trust-add: handle unavailable domain - `commit `__ + `commit `__ `#9488 `__ - ipatests: skip HSM test if pki < 11.5.9 - `commit `__ + `commit `__ `#9648 `__ - ipatests: increase the timeout for test_hsm.py::TestHSMInstall - `commit `__ + `commit `__ - Replica CA installation: ignore time skew during initial replication - `commit `__ + `commit `__ `#9635 `__ - spec file: do not use nodejs-22 on f39 and f40 - `commit `__ + `commit `__ `#9643 `__ - ipatests: remove xfail for test_ipa_migrate_stage_mode - `commit `__ + `commit `__ `#9621 `__ - ipatests: remove xfail for test_ipa_migrate_version_option - `commit `__ + `commit `__ `#9620 `__ - test_replica_install_after_restore: kinit after restore - `commit `__ + `commit `__ `#9613 `__ - Uninstall: stop sssd-kcm before removing KCM ccaches database - `commit `__ + `commit `__ `#9616 `__ - ipa-ods-enforcer: stop must also stop the socket - `commit `__ + `commit `__ `#9613 `__ - ipatests: fix / permissions for test_nested_group_members - `commit `__ + `commit `__ `#9615 `__ - ipatests: fix / permissions to allow ssh with private key - `commit `__ + `commit `__ `#9607 `__ - ipatests: mark test_ca_show_error_handling as xfail - `commit `__ + `commit `__ `#9606 `__ - Gating and nightly tests: move to f39/f40 - `commit `__ + `commit `__ - ipatests: add test for PKINIT renewal on hidden replica - `commit `__ + `commit `__ `#9611 `__ - PKINIT certificate: fix renewal on hidden replica - `commit `__ + `commit `__ `#9611 `__ - ipatests: add test for ticket 9610 - `commit `__ + `commit `__ `#9610 `__ - spec file: do not create /etc/ssh/ssh_config.orig if unchanged - `commit `__ + `commit `__ `#9610 `__ - ipa-otptoken-import: open the key file in binary mode - `commit `__ + `commit `__ `#9609 `__ .. _frederik_himpe_2: @@ -1225,9 +1225,9 @@ Frederik Himpe (2) - Make path of Samba lock directory configurable and use /run/samba on Debian - `commit `__ + `commit `__ - Make name of nobody group configurable and use nogroup on Debian - `commit `__ + `commit `__ `#9753 `__ .. _fco._javier_f._serrador_2: @@ -1236,9 +1236,9 @@ Fco. Javier F. Serrador (2) ~~~~~~~~~~~~~~~~~~~~~~~~~~~ - Translated using Weblate (Spanish) - `commit `__ + `commit `__ - Translated using Weblate (Spanish) - `commit `__ + `commit `__ .. _francisco_trivino_3: @@ -1247,10 +1247,10 @@ Francisco Trivino (2) ~~~~~~~~~~~~~~~~~~~~~ - doc/designs: add encrypted DNS design documents - `commit `__ + `commit `__ `#9605 `__ - ipatests: increase delays for WebUI host test - `commit `__ + `commit `__ `#9721 `__ .. _fraser_tweedale_1: @@ -1259,7 +1259,7 @@ Fraser Tweedale (1) ~~~~~~~~~~~~~~~~~~~ - Refactor installer cert issuance to use pki python lib - `commit `__ + `commit `__ `#9738 `__ .. _dmytro_markevych_1: @@ -1268,7 +1268,7 @@ Dmytro Markevych (1) ~~~~~~~~~~~~~~~~~~~~ - Translated using Weblate (Ukrainian) - `commit `__ + `commit `__ .. _ian_brown_1: @@ -1276,7 +1276,7 @@ Ian Brown (1) ~~~~~~~~~~~~~ - Replace instances of del os.environ with os.environ.pop - `commit `__ + `commit `__ `#9450 `__ .. _julien_rische_9: @@ -1285,33 +1285,33 @@ Julien Rische (11) ~~~~~~~~~~~~~~~~~ - ipatests: fix kdcproxy tests against AD - `commit `__ + `commit `__ - ipa-kdb: enforce PAC presence on TGT for TGS-REQ - `commit `__ + `commit `__ - Add test for master key upgrade - `commit `__ + `commit `__ - Use ipaplatform tasks for krb5 enctypes - `commit `__ + `commit `__ - ipa-kdb: support storing multiple KVNO for the same principal - `commit `__ + `commit `__ `#9370 `__ - kdb: keep ipadb_get_connection() from succeeding with null LDAP context - `commit `__ + `commit `__ `#9777 `__ - ipa-sidgen: fix memory leak in ipa_sidgen_add_post_op - `commit `__ + `commit `__ `#9772 `__ - Remove RC4 and 3DES default encryption types on update - `commit `__ + `commit `__ `#9633 `__ - Unconditionally add MS-PAC to global config on update - `commit `__ + `commit `__ `#9632 `__ - kdb: apply combinatorial logic for ticket flags - `commit `__ + `commit `__ - kdb: fix vulnerability in GCD rules handling - `commit `__ + `commit `__ .. _jonathan_steffan_1: @@ -1319,7 +1319,7 @@ Jonathan Steffan (1) ~~~~~~~~~~~~~~~~~~~~ - workshop: Increase RAM for VMs to Avoid OOM - `commit `__ + `commit `__ `#9720 `__ .. _léane_grasser_1: @@ -1328,7 +1328,7 @@ Léane GRASSER (1) ~~~~~~~~~~~~~~~~~ - Translated using Weblate (French) - `commit `__ + `commit `__ .. _takahashi_masatsuna_1: @@ -1336,7 +1336,7 @@ TAKAHASHI Masatsuna (1) ~~~~~~~~~~~~~~~~~~~~~~~ - ipa-advise ipa-backup ipa-restore: Fix --v option of the manual. - `commit `__ + `commit `__ `#9617 `__ .. _shunsuke_matsumoto_1: @@ -1345,7 +1345,7 @@ Shunsuke matsumoto (1) ~~~~~~~~~~~~~~~~~~~~~~ - The -d option of the ipa-advise command was able to used. - `commit `__ + `commit `__ `#9625 `__ .. _miro_hrončok_1: @@ -1354,7 +1354,7 @@ Miro Hrončok (1) ~~~~~~~~~~~~~~~~ - Stop using deprecated pkg_resources - `commit `__ + `commit `__ `#9676 `__ .. _michal_polovka_1: @@ -1363,7 +1363,7 @@ Michal Polovka (1) ~~~~~~~~~~~~~~~~~~ - ipatests: test_fips: Remove obsolete patch - `commit `__ + `commit `__ `#9810 `__ .. _mark_reynolds_14: @@ -1372,50 +1372,50 @@ Mark Reynolds (14) ~~~~~~~~~~~~~~~~~~ - ipa-migrate - only remove repl state attribute options - `commit `__ + `commit `__ `#9784 `__ - ipa-migrate - improve suffix replacement - `commit `__ + `commit `__ `#9776 `__ - ipa-migrate - do not process AD entgries in staging mode - `commit `__ + `commit `__ `#9776 `__ - ipa-migrate - remove replication state information - `commit `__ + `commit `__ `#9776 `__ - ipa-migrate - do not migrate tombstone entries, ignore MidairCollisions, and krbpwdpolicyreference - `commit `__ + `commit `__ `#9737 `__ - ipa-migrate should migrate dns forward zones - `commit `__ + `commit `__ `#9686 `__ - ipa-migrate - dryrun write updates crashes when removing values - `commit `__ + `commit `__ `#9682 `__ - Do not let user with an expired OTP token to log in if only OTP is allowed - `commit `__ + `commit `__ `#9387 `__ - ipa-migrate - fix alternate entry search filter - `commit `__ + `commit `__ `#9658 `__ - ipa-migrate - fix migration issues with entries using ipaUniqueId in the RDN - `commit `__ + `commit `__ `#9640 `__ - ipa-migrate - properly handle invalid certificates - `commit `__ + `commit `__ `#9642 `__ - Issue 9621 - ipa-migrate - should not update mapped attributes in managed entries - `commit `__ + `commit `__ `#9621 `__ - ipa-migrate - starttls does not work - `commit `__ + `commit `__ `#9619 `__ - ipa-migrate - remove -V option - `commit `__ + `commit `__ `#9620 `__ .. _madhuri_upadhye_1: @@ -1424,7 +1424,7 @@ Madhuri Upadhye (1) ~~~~~~~~~~~~~~~~~~~ - ipatests: 2FA test cases - `commit `__ + `commit `__ .. _mohammad_rizwan_3: @@ -1432,13 +1432,13 @@ Mohammad Rizwan (3) ~~~~~~~~~~~~~~~~~~~ - ipatests: refactor password file handling in TestHSMInstall - `commit `__ + `commit `__ - ipatests: Verify that SIDgen task continue even if it fails to assign sid - `commit `__ + `commit `__ `#9618 `__ - ipatests: tests related to --token-password-file - `commit `__ + `commit `__ `#9603 `__ .. _n_m_1: @@ -1447,7 +1447,7 @@ N M (1) ~~~~~~~ - Translated using Weblate (Spanish) - `commit `__ + `commit `__ .. _weblate_translation_memory_1: @@ -1455,9 +1455,9 @@ Weblate Translation Memory (2) ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ - Translated using Weblate (Georgian) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ .. _weblate_1: @@ -1465,9 +1465,9 @@ Weblate (2) ~~~~~~~~~~~ - Update translation files - `commit `__ + `commit `__ - Update translation files - `commit `__ + `commit `__ .. _oğuz_ersen_1: @@ -1475,7 +1475,7 @@ Oğuz Ersen (1) ~~~~~~~~~~~~~~ - Translated using Weblate (Turkish) - `commit `__ + `commit `__ .. _piotr_drąg_1: @@ -1483,7 +1483,7 @@ Piotr Drąg (1) ~~~~~~~~~~~~~~ - Translated using Weblate (Polish) - `commit `__ + `commit `__ .. _pejman_rezaei_1: @@ -1491,7 +1491,7 @@ Pejman Rezaei (1) ~~~~~~~~~~~~~~~~~ - Translated using Weblate (Persian) - `commit `__ + `commit `__ .. _pranav_thube_1: @@ -1500,15 +1500,15 @@ PRANAV THUBE (4) - ipatests: Add new test cases with extended automount plugin attributes - `commit `__ + `commit `__ - Port bash sudo tests. - `commit `__ + `commit `__ - Extended eDNS testsuite with Relaxed policy testcases. 1. Relaxed policy without certs and including --no-dnssec-validation 2. Relaxed policy with external CA and including --no-dnssec-validation - `commit `__ + `commit `__ - ipatests: Ignore /run/log/journal in test_uninstallation.py - `commit `__ + `commit `__ `#9788 `__ .. _rafael_fontenelle_1: @@ -1517,7 +1517,7 @@ Rafael Fontenelle (1) ~~~~~~~~~~~~~~~~~~~~~ - Translated using Weblate (Spanish) - `commit `__ + `commit `__ .. _rob_crittenden_49: @@ -1525,215 +1525,215 @@ Rob Crittenden (73) ~~~~~~~~~~~~~~~~~~~ - Don't assume the server has a CA service when issuing certificates - `commit `__ + `commit `__ `#9879 `__ - Revert "Temp commit" - `commit `__ + `commit `__ - PR-CI: Run test_installation_TestInstallKeySizes in the nightlies - `commit `__ + `commit `__ `#9738 `__ - Move some functions to installutils to be more independent - `commit `__ + `commit `__ `#9738 `__ - Detect the highest API version the remote server supports - `commit `__ + `commit `__ `#9738 `__ - Refine restricting CA profiles to known subjects - `commit `__ + `commit `__ `#9738 `__ - Sort when comparing tuples in the xmlrpc tests - `commit `__ + `commit `__ - Set minimum version of certmonger and PKI for PKI-API - `commit `__ + `commit `__ `#9738 `__ - Reduce the log level before calling PKI functions - `commit `__ + `commit `__ `#9738 `__ - Retrieve all cert profiles from the CA with --all - `commit `__ + `commit `__ `#9738 `__ - Configure renewals to use the IPA JSON API - `commit `__ + `commit `__ `#9738 `__ - Use PKIClient instead of deprecated PKIConnection - `commit `__ + `commit `__ `#9738 `__ - Remove the RestClient class - `commit `__ + `commit `__ `#9738 `__ - Use the APIClient instead of direct REST calls for ACME - `commit `__ + `commit `__ `#9738 `__ - Replace REST with PKI python API for cert and LWCA - `commit `__ + `commit `__ `#9738 `__ - Add config option for RSA key size for HTTP, DS, PKINIT, RA certs - `commit `__ + `commit `__ `#9738 `__ - Use the pki tool to bootstrap certificates during installation - `commit `__ + `commit `__ `#9738 `__ - Temp commit - `commit `__ + `commit `__ - Include the HSM token name when creating LWCAs - `commit `__ + `commit `__ `#9865 `__ - Use Augeas when updating dbmodules in krb5.conf - `commit `__ + `commit `__ `#5913 `__, `#9862 `__ - Add support for libpwpolicy credit to password policy - `commit `__ + `commit `__ `#9835 `__ - Enforce uniqueness across krbprincipalname and krbcanonicalname - `commit `__ + `commit `__ - Catch decoding errors in CertificateSigningRequest parameters - `commit `__ + `commit `__ `#9738 `__ - Don't let lack of subca in PKI prevent LDAP deletion - `commit `__ + `commit `__ `#9738 `__ - Test that password expiration date past 2038 works - `commit `__ + `commit `__ `#2496 `__ - Test that certificates beyond 2038 can be parsed - `commit `__ + `commit `__ `#2496 `__ - Add token options to immutables for pki override - `commit `__ + `commit `__ - Set krbCanonicalName=admin@REALM on the admin user - `commit `__ + `commit `__ - Fix some issues identified by a static analyzer - `commit `__ + `commit `__ `#9365 `__, `#9468 `__ - Add --domain option to ipa-client-automount for DNS discovery - `commit `__ + `commit `__ `#9780 `__ - Test: dnf5 handles updating itself differently than dnf4 - `commit `__ + `commit `__ - Make the Azure template work with both dnf4 and dnf5 - `commit `__ + `commit `__ - Azure CI: Use F42 - `commit `__ + `commit `__ - Address deprecation warning in ipa-replica-manage - `commit `__ + `commit `__ `#9771 `__ - Don't require certificates to have unique ipaCertSubject - `commit `__ + `commit `__ `#9652 `__ - Drop python 2 support in ipaserver/install/ca.py - `commit `__ + `commit `__ - Drop python 2 support in installutils.py - `commit `__ + `commit `__ - Drop python v2 in ipaserver/install/certs.py for lint errors - `commit `__ + `commit `__ `#9738 `__ - Log failed auth attempts over LDAP when a user is locked - `commit `__ + `commit `__ `#9742 `__ - Remove the migration of the RA cert from mod_nss to mod_ssl - `commit `__ + `commit `__ `#9739 `__ - Remove migration from mod_nss to mod_ssl - `commit `__ + `commit `__ `#9739 `__ - Fix some memory errors identified by a static analyzer - `commit `__ + `commit `__ `#9698 `__ - Use new(er) PKI connection API in ipa-pki-wait-running - `commit `__ + `commit `__ `#9691 `__ - Validate the default e-mail domain in the config plugin - `commit `__ + `commit `__ `#9680 `__ - Align startup_timeout with the systemd default and document it - `commit `__ + `commit `__ `#9743 `__ - Configure the pki-tomcatd service systemd timeout - `commit `__ + `commit `__ `#9743 `__ - Suppress spurious failure messages when uninstalling ACME - `commit `__ + `commit `__ `#9740 `__ - Add a message where the ipa service restarted at end of install - `commit `__ + `commit `__ `#9741 `__ - Write out the PKI admin certificate as a PEM file - `commit `__ + `commit `__ `#9735 `__ - Apply certmonger_timeout to start_tracking and request_cert - `commit `__ + `commit `__ `#9725 `__ - Add 30-second timeout for certmonger request/start tracking - `commit `__ + `commit `__ `#9725 `__ - Pass all pkiuser groups as suplementary when validating an HSM - `commit `__ + `commit `__ `#9709 `__ - Allow looking up constants.Group by gid in addition to name - `commit `__ + `commit `__ `#9709 `__ - Don't drop certificates in cert-find if the LWCA was removed - `commit `__ + `commit `__ `#9661 `__ - Enable pruning when Random Serial Numbers are enabled - `commit `__ + `commit `__ `#9661 `__ - Set required version of 389-ds for VLV fix on F40/41 - `commit `__ + `commit `__ - Add RSN-by-default test to nightly builds - `commit `__ + `commit `__ `#9661 `__ - ipatests: Test that when lmdb is available, enable RSN - `commit `__ + `commit `__ `#9661 `__ - Change default to RSN when 389-ds uses the mdb backend - `commit `__ + `commit `__ `#9661 `__ - Small fixup to determine which ACME uninstaller to use - `commit `__ + `commit `__ `#9673 `__, `#9674 `__ - Don't rely on removing the CA to uninstall the ACME depoyment - `commit `__ + `commit `__ `#9673 `__, `#9674 `__ - Fix some resource leaks identified by a static analyzer - `commit `__ + `commit `__ `#9367 `__ - Ignore TripleDES python-cryptography import warnings - `commit `__ + `commit `__ `#9641 `__ - Correct usage of public_key_algorithm_oid in ipalib/x509 - `commit `__ + `commit `__ `#9641 `__ - Force a logout in KerberosSession if a login is needed - `commit `__ + `commit `__ `#9624 `__ - Log errors reported by adtrustinstance.check_inst() using logger - `commit `__ + `commit `__ `#9637 `__ - ipatests: Fix usage of token_password_file - `commit `__ + `commit `__ `#9603 `__ - Run HSM validation as pkiuser to verify token permissions - `commit `__ + `commit `__ `#9626 `__ - Fix a copy/paste issue when detecting the HSM SELinux subpackage - `commit `__ + `commit `__ `#9636 `__ - Include token password options in ipa-kra-install man page - `commit `__ + `commit `__ `#9603 `__ - Re-organize HSM validation to be more consistent/less duplication - `commit `__ + `commit `__ `#9603 `__ - Fix syntax error in the selinux-luna %postun script - `commit `__ + `commit `__ `#9629 `__ - Use a unique task name for each backend in ipa-backup - `commit `__ + `commit `__ `#9584 `__ .. _ricky_tigg_3: @@ -1742,11 +1742,11 @@ Ricky Tigg (3) ~~~~~~~~~~~~~~ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ - Translated using Weblate (Finnish) - `commit `__ + `commit `__ .. _rafael_guterres_jeffman_1: @@ -1754,10 +1754,10 @@ Rafael Guterres Jeffman (2) ~~~~~~~~~~~~~~~~~~~~~~~~~~~ - ipa-idrange-fix: Fix typo when ID under 1000 is present. - `commit `__ + `commit `__ `#9885 `__ - Use correct capitalization for GitHub and GitLab - `commit `__ + `commit `__ `#9811 `__ .. _sam_morris_2: @@ -1767,11 +1767,11 @@ Sam Morris (2) - Fix ipa-client-install failure when a trusted CA's distinguished name contains slash characters - `commit `__ + `commit `__ `#8924 `__ - Fix a couple of instances of the "no-break control character" being used inadvertently - `commit `__ + `commit `__ `#9665 `__ .. _sumit_bose_1: @@ -1780,7 +1780,7 @@ Sumit Bose (1) ~~~~~~~~~~~~~~ - ipa-otpd: use oidc_child's --client-secret-stdin option - `commit `__ + `commit `__ .. _김인수_2: @@ -1788,9 +1788,9 @@ Sumit Bose (1) ~~~~~~~~~~ - Translated using Weblate (Korean) - `commit `__ + `commit `__ - Translated using Weblate (Korean) - `commit `__ + `commit `__ .. _stanislav_levin_4: @@ -1798,17 +1798,17 @@ Stanislav Levin (4) ~~~~~~~~~~~~~~~~~~~ - install: make use of shared temp directory for hsm validation - `commit `__ + `commit `__ `#9831 `__ - adtrust: add missing ipaAllowedOperations objectclass - `commit `__ + `commit `__ `#9471 `__, `#9712 `__ - pyca: adapt import paths for TripleDES cipher - `commit `__ + `commit `__ `#9708 `__ - ipatests: make TestDuplicates teardowns order agnostic - `commit `__ + `commit `__ `#9571 `__ .. _sumedh_sidhaye_2: @@ -1817,10 +1817,10 @@ Sumedh Sidhaye (2) ~~~~~~~~~~~~~~~~~~ - Temp commit - `commit `__ + `commit `__ - Validate message to check if not a trust agent/controller Previously the check would return an empty SUCCESS message. - `commit `__ + `commit `__ .. _sudhir_menon_23: @@ -1829,60 +1829,60 @@ Sudhir Menon (22) ~~~~~~~~~~~~~~~~~ - ipatests: Nightly definitions for TestIPAMigratewithBackupRestore - `commit `__ + `commit `__ - ipatests: Tests for ipa-migrate tool with ldif file - `commit `__ + `commit `__ `#9776 `__ - ipatests: prci nightly definitions for 32BitIdranges - `commit `__ + `commit `__ - ipatests: Tests for 32BitIdranges. - `commit `__ + `commit `__ - Added TestIPAHealthcheckWithCALess to nightly yaml file. - `commit `__ + `commit `__ - ipatests: ipahealthcheck warns for user provided certificates about to expire - `commit `__ + `commit `__ - ipatests: Tests for krbLastSuccessfulAuth warning - `commit `__ + `commit `__ - ipatests: Test to check dot forwarders are added to unbound. - `commit `__ + `commit `__ - ipatests: Fix for ipa-healthcheck test in FIPS Mode - `commit `__ + `commit `__ - ipatests: Tests to check data in journal log - `commit `__ + `commit `__ - Fix the typo in ipa_migrate_constants. - `commit `__ + `commit `__ `#9715 `__ - ipatests: Updated nightly definitions for ipa-ipa-migration - `commit `__ + `commit `__ - ipatests: Tests for ipa-migrate tool - `commit `__ + `commit `__ - ipatests: Test for ipa hbac rule duplication - `commit `__ + `commit `__ `#9640 `__ - ipatests: Activate ssh in sssd.conf - `commit `__ + `commit `__ `#9649 `__ - ipatests: Fixes for ipa-idrange-fix testsuite - `commit `__ + `commit `__ - ipatests: Check Default PAC type is added to config - `commit `__ + `commit `__ `#9632 `__ - ipatests: Test to check that the configured value for "nsslapd-ignore-time-skew" remains on even after a "force-sync" is done - `commit `__ + `commit `__ `#9635 `__ - ipatests: Replace 'usermod -r' command with 'gpasswd -d' in test_hsm.py - `commit `__ + `commit `__ `#9626 `__ - ipatests: ipa-migrate tool with -Z option (CACERTFILE) - `commit `__ + `commit `__ - Added new testsuite(ipa_ipa_migration) in prci definitions - `commit `__ + `commit `__ - ipatests: Tests for ipa-ipa migration tool - `commit `__ + `commit `__ .. _temuri_doghonadze_3: @@ -1890,15 +1890,15 @@ Temuri Doghonadze (5) ~~~~~~~~~~~~~~~~~~~~~ - Translated using Weblate (Georgian) - `commit `__ + `commit `__ - Translated using Weblate (Georgian) - `commit `__ + `commit `__ - Translated using Weblate (Georgian) - `commit `__ + `commit `__ - Translated using Weblate (Georgian) - `commit `__ + `commit `__ - Translated using Weblate (Georgian) - `commit `__ + `commit `__ .. _thomas_woerner_5: @@ -1906,20 +1906,20 @@ Thomas Woerner (5) ~~~~~~~~~~~~~~~~~~ - Replica: Request cert for DoT before setting up bind - `commit `__ + `commit `__ `#9808 `__ - ipaserver/install/dns.py: Allow to Turn off DNSSEC validation for unbound - `commit `__ + `commit `__ `#9805 `__ - ipa-client-install: New --no-dnssec-validation option - `commit `__ + `commit `__ `#9805 `__ - ipa-client-install: Fix nsupdate issues when dns_over_tls is enabled - `commit `__ + `commit `__ `#9806 `__ - ipa_sidgen: Allow sidgen_task to continue after finding issues - `commit `__ + `commit `__ `#9618 `__ .. _vectinx_1: @@ -1928,7 +1928,7 @@ vectinx (1) ~~~~~~~~~~~ - slapi-plugins: Add replication checking to the Modrdn plugin - `commit `__ + `commit `__ `#9867 `__ .. _vasily_parfenov_1: @@ -1937,7 +1937,7 @@ Vasily Parfenov (1) ~~~~~~~~~~~~~~~~~~~ - man: fix incorrect groff syntax in man pages - `commit `__ + `commit `__ .. _wouter_schoot_1: @@ -1945,7 +1945,7 @@ Wouter Schoot (1) ~~~~~~~~~~~~~~~~~ - Update 11-kerberos-ticket-policy.rst - `commit `__ + `commit `__ .. _yaakov_selkowitz_1: @@ -1953,7 +1953,7 @@ Yaakov Selkowitz (1) ~~~~~~~~~~~~~~~~~~~~ - spec: Use nodejs22 on RHEL 10 and ELN - `commit `__ + `commit `__ .. _yuri_chornoivan_1: @@ -1961,4 +1961,4 @@ Yuri Chornoivan (1) ~~~~~~~~~~~~~~~~~~~ - Translated using Weblate (Ukrainian) - `commit `__ + `commit `__ diff --git a/src/release-notes/4-13-1.rst b/src/release-notes/4-13-1.rst index 244495c9b..74f1f7053 100644 --- a/src/release-notes/4-13-1.rst +++ b/src/release-notes/4-13-1.rst @@ -105,7 +105,7 @@ MOHAMMAD SAMI (1) ~~~~~~~~~~~~~~~~~ - Fix incorrect error handling in ipapython/graph.py - `commit `__ + `commit `__ `#9876 `__ .. _anuja_more_2: @@ -114,11 +114,11 @@ Anuja More (2) ~~~~~~~~~~~~~~ - ipatests: sysaccounts: add missing integration/webui/xmlrpc tests - `commit `__ + `commit `__ `#9842 `__ - sysaccount_mod: Use object.\__setattr\_\_ to set allow_empty_update in exception handler - `commit `__ + `commit `__ .. _antonio_torres_1: @@ -126,7 +126,7 @@ Antonio Torres (1) ~~~~~~~~~~~~~~~~~~ - Back to git snapshots - `commit `__ + `commit `__ .. _aleksandr_sharov_1: @@ -135,7 +135,7 @@ Aleksandr Sharov (1) - Adding option --force-server to specify a server to ipa-certupdate tool. - `commit `__ + `commit `__ `#9839 `__ .. _carla_martinez_1: @@ -144,7 +144,7 @@ Carla Martinez (1) ~~~~~~~~~~~~~~~~~~ - Fix: Incorrect auth error message - `commit `__ + `commit `__ `#9891 `__ .. _david_hanina_2: @@ -153,9 +153,9 @@ David Hanina (2) ~~~~~~~~~~~~~~~~ - Update webui to v.0.1.9 - `commit `__ + `commit `__ - Delete modern-ui images for RHEL - `commit `__ + `commit `__ `#9915 `__ .. _florence_blanc_renaud_6: @@ -164,22 +164,22 @@ Florence Blanc-Renaud (6) ~~~~~~~~~~~~~~~~~~~~~~~~~ - ipa-migrate: avoid KeyError before attributes are normalized - `commit `__ + `commit `__ `#9910 `__ - Upgrade: use openssl_engine on rhel9 - `commit `__ + `commit `__ `#9913 `__ - ipatests: do not allow zone overlap for TestInstallWithCA_DNS4 - `commit `__ + `commit `__ `#9902 `__ - ipatest: add an integration test for samba upgrade - `commit `__ + `commit `__ `#9892 `__ - Trust: fix tdo with WITH_FOREST - `commit `__ + `commit `__ `#9892 `__ - Nightly test definitions: configure 4.13 branch - `commit `__ + `commit `__ .. _mohammad_rizwan_1: @@ -187,7 +187,7 @@ Mohammad Rizwan (1) ~~~~~~~~~~~~~~~~~~~ - ipatests: allow dns zone overlap where dns is handled externaly - `commit `__ + `commit `__ .. _pranav_thube_2: @@ -195,9 +195,9 @@ PRANAV THUBE (2) ~~~~~~~~~~~~~~~~ - ipatests: Refactor and port hbac functional tests. - `commit `__ + `commit `__ - Extended eDNS testsuite with Enforced DNS policy testcases. - `commit `__ + `commit `__ .. _rob_crittenden_2: @@ -205,10 +205,10 @@ Rob Crittenden (2) ~~~~~~~~~~~~~~~~~~ - ipa-pwd-extop: Don't manipulate the config if not retrieved - `commit `__ + `commit `__ `#9914 `__ - ipatests: Add the remote IP before running ipa-migrate - `commit `__ + `commit `__ `#9884 `__ .. _viktor_ashirov_17: @@ -217,53 +217,53 @@ Viktor Ashirov (17) ~~~~~~~~~~~~~~~~~~~ - ipa-pwd-extop: fix valueset memory leak in \`ipapwd_get_cur_kvno()\` - `commit `__ + `commit `__ `#9895 `__ - ipa-pwd-extop: fix memory leaks in \`ipapwd_gen_hashes()\` error path - `commit `__ + `commit `__ `#9895 `__ - ipa-pwd-extop: fix password history values memory leak - `commit `__ + `commit `__ `#9895 `__ - ipa-pwd-extop: fix NT hash string memory leak - `commit `__ + `commit `__ `#9895 `__ - ipa-pwd-extop: fix bind DN memory leaks in pre-op handlers - `commit `__ + `commit `__ `#9895 `__ - ipa-pwd-extop: fix memory leaks in \`ipapwd_pre_add()\` - `commit `__ + `commit `__ `#9895 `__ - ipa-pwd-extop: fix memory leaks of bind DN - `commit `__ + `commit `__ `#9895 `__ - ipa-pwd-extop: fix memory leaks - `commit `__ + `commit `__ `#9895 `__ - ipa-pwd-extop: free krbcfg in all exit paths - `commit `__ + `commit `__ `#9895 `__ - topology: fix memory leaks - `commit `__ + `commit `__ `#9895 `__ - ipa-enrollment: fix memory leaks - `commit `__ + `commit `__ `#9895 `__ - ipa-extdom-extop: fix memory leaks - `commit `__ + `commit `__ `#9895 `__ - ipa-range-check: fix memory leak - `commit `__ + `commit `__ `#9895 `__ - ipa-sidgen: fix memory leaks - `commit `__ + `commit `__ `#9895 `__ - ipa-pwd-extop: fix memory leaks - `commit `__ + `commit `__ `#9895 `__ - ipa-lockout: fix memory leaks - `commit `__ + `commit `__ `#9895 `__ - ipa-graceperiod: fix memory leaks - `commit `__ + `commit `__ `#9895 `__ diff --git a/src/release-notes/4-6-10.rst b/src/release-notes/4-6-10.rst index f15b861dc..d6cf4eb3b 100644 --- a/src/release-notes/4-6-10.rst +++ b/src/release-notes/4-6-10.rst @@ -68,7 +68,7 @@ Antonio Torres (1) ~~~~~~~~~~~~~~~~~~ - Become IPA 4.6.10 - `commit `__ + `commit `__ .. _florence_blanc_renaud_2: @@ -76,6 +76,6 @@ Florence Blanc-Renaud (2) ~~~~~~~~~~~~~~~~~~~~~~~~~ - Integration tests for verifying Referer header in the UI - `commit `__ + `commit `__ - Check the HTTP Referer header on all requests - `commit `__ + `commit `__ diff --git a/src/release-notes/4-9-12.rst b/src/release-notes/4-9-12.rst index 096aea3e7..22dec32e4 100644 --- a/src/release-notes/4-9-12.rst +++ b/src/release-notes/4-9-12.rst @@ -157,24 +157,24 @@ Alexander Bokovoy (6) - ipalib/x509: Implement abstract method Certificate.verify_directly_issued_by - `commit `__ + `commit `__ `#9355 `__ - Fix tox in Azure CI - `commit `__ + `commit `__ `#9347 `__ - Use system-wide chromium for webui tests - `commit `__ + `commit `__ `#9347 `__ - Don't fail if optional RPM macros file is missing - `commit `__ + `commit `__ `#9347 `__ - ipa-kdb: PAC consistency checker needs to handle child domains as well - `commit `__ + `commit `__ `#9316 `__ - updates: fix memberManager ACI to allow managers from a specified group - `commit `__ + `commit `__ `#9286 `__ @@ -183,16 +183,16 @@ Anuja More (4) ---------------------------------------------------------------------------------------------- - ipatests: Test that non admin user can search hbac rule. - `commit `__ + `commit `__ `#5130 `__ - ipatests: Test ipa-advise is not failing with error. - `commit `__ + `commit `__ `#6044 `__ - PRCI: update test_trust.py for nightly pipelines. - `commit `__ + `commit `__ `#9326 `__ - Add test for SSH with GSSAPI auth. - `commit `__ + `commit `__ `#9316 `__ @@ -201,23 +201,23 @@ Antonio Torres (8) ---------------------------------------------------------------------------------------------- - Extend API documentation - `commit `__ + `commit `__ - doc: allow notes on Param API Reference pages - `commit `__ + `commit `__ - ipaserver: deepcopy objectclasses list from IPA config - `commit `__ + `commit `__ `#9349 `__ - API doc: add usage guides for groups, HBAC and sudo rules - `commit `__ + `commit `__ - API doc: add note about ipa show-mappings to usage guide - `commit `__ + `commit `__ - API doc: validate generated reference - `commit `__ + `commit `__ `#9287 `__ - API doc: add basic user management guide - `commit `__ + `commit `__ - Back to git snapshots - `commit `__ + `commit `__ @@ -225,7 +225,7 @@ Carla Martinez (1) ---------------------------------------------------------------------------------------------- - Update 'Auth indicators' doc string - `commit `__ + `commit `__ `#9338 `__ @@ -234,13 +234,13 @@ Christian Heimes (3) ---------------------------------------------------------------------------------------------- - Speed up installer by restarting DS after DNA plugin - `commit `__ + `commit `__ `#9358 `__ - Don't block when kinit_pkinit() fails - `commit `__ + `commit `__ `#9333 `__ - ipa-certupdate: Update client certs before KDC/HTTPd restart - `commit `__ + `commit `__ `#9285 `__ @@ -249,7 +249,7 @@ Chris Kelley (1) ---------------------------------------------------------------------------------------------- - Check that CADogtagCertsConfigCheck can handle cert renewal - `commit `__ + `commit `__ @@ -257,9 +257,9 @@ David Pascual (2) ---------------------------------------------------------------------------------------------- - doc: Use case examples for PR-CI checker tool - `commit `__ + `commit `__ - ipatests: fix (prci_checker) duplicated check & error return code - `commit `__ + `commit `__ @@ -268,7 +268,7 @@ Erik Belko (1) - ipatests: Test MemberManager ACI to allow managers from a specified group after upgrade scenario - `commit `__ + `commit `__ `#9286 `__ @@ -277,49 +277,49 @@ Florence Blanc-Renaud (16) ---------------------------------------------------------------------------------------------- - ipatests: increase timeout for test_trust - `commit `__ + `commit `__ `#9326 `__ - ipatests: remove wrong job definition TestACMEPrune - `commit `__ + `commit `__ `#9324 `__ - ipatests: increase timeout for test_acme - `commit `__ + `commit `__ `#9324 `__ - automember-rebuild: add a notice about high CPU usage - `commit `__ + `commit `__ `#9320 `__ - trust-add: handle missing msSFU30MaxGidNumber - `commit `__ + `commit `__ `#9310 `__ - Tests: force key type in ACME tests - `commit `__ + `commit `__ `#9298 `__ - server install: remove error log about missing bkup file - `commit `__ + `commit `__ `#9306 `__ - ipatests: mark test_smb as xfail - `commit `__ + `commit `__ `#9124 `__ - ipatests: update the xfail annotation for test_number_of_zones - `commit `__ + `commit `__ `#9135 `__ - Spec file: bump krb5_kdb_version on rawhide - `commit `__ + `commit `__ - FIPS setup: fix typo filtering camellia encryption - `commit `__ + `commit `__ - cert utilities: MAC verification is incompatible with FIPS mode - `commit `__ + `commit `__ - ipatests: update the fake fips mode expected message - `commit `__ + `commit `__ `#9002 `__ - Spec file: ipa-client depends on krb5-pkinit-openssl - `commit `__ + `commit `__ `#9290 `__ - webui tests: fix assertion in test_subid.py - `commit `__ + `commit `__ `#9282 `__ - PRCI: update memory reqs for each topology - `commit `__ + `commit `__ @@ -327,16 +327,16 @@ mbhalodi (4) ---------------------------------------------------------------------------------------------- - ipatests: Test for sequence processing failures with server context - `commit `__ + `commit `__ `#9349 `__ - ipatests: add missing automember-cli tests - `commit `__ + `commit `__ `#9332 `__ - ipatests: WebUI - ensure that ipa automember-rebuild prints a warning - `commit `__ + `commit `__ `#9320 `__ - ipatests: ensure that ipa automember-rebuild prints a warning - `commit `__ + `commit `__ `#9320 `__ @@ -345,7 +345,7 @@ Michal Polovka (1) ---------------------------------------------------------------------------------------------- - ipatest: loginscreen: do not use hardcoded password - `commit `__ + `commit `__ `#9226 `__ @@ -354,13 +354,13 @@ Rob Crittenden (3) ---------------------------------------------------------------------------------------------- - Wipe the ipa-ca DNS record when updating system records - `commit `__ + `commit `__ `#9195 `__ - tests: Add new ipa-ca error messages to IPADNSSystemRecordsCheck - `commit `__ + `commit `__ `#9291 `__ - tests: Add ipa_ca_name checking to DNS system records - `commit `__ + `commit `__ `#9291 `__ @@ -369,31 +369,31 @@ Stanislav Levin (9) ---------------------------------------------------------------------------------------------- - fastlint: Correct concatenation of file lists - `commit `__ + `commit `__ `#9318 `__ - dns: Fix support for dnspython 1.1x - `commit `__ + `commit `__ `#9339 `__ - tests: webui: Update vendored qunit - `commit `__ + `commit `__ `#9329 `__ - AP: webui: List installed nodejs packages - `commit `__ + `commit `__ `#9329 `__ - tests: webui: Load qunit only once - `commit `__ + `commit `__ `#9329 `__ - tests: webui: Allow file access from files in tests - `commit `__ + `commit `__ `#9329 `__ - tests: Configure DNSResolver as platform agnostic resolver - `commit `__ + `commit `__ `#9319 `__ - spec: Drop no longer used build dependency on paste - `commit `__ + `commit `__ `#9314 `__ - ipatests: healthcheck: Handle missing fips-mode-setup - `commit `__ + `commit `__ `#9315 `__ @@ -403,7 +403,7 @@ Sumedh Sidhaye (1) - With the commit #99a74d7, 389-ds changed the message returned in ipa-healthcheck. - `commit `__ + `commit `__ `#9238 `__ @@ -412,7 +412,7 @@ Sudhir Menon (1) ---------------------------------------------------------------------------------------------- - Fixes: ipa-otpd@.service: deprecated syslog setting - `commit `__ + `commit `__ `#9279 `__ @@ -421,4 +421,4 @@ Thorsten Scherf (1) ---------------------------------------------------------------------------------------------- - external-idp: change idp server name to reference name - `commit `__ + `commit `__ diff --git a/src/release-notes/4-9-13.rst b/src/release-notes/4-9-13.rst index 39707d1ab..e255a67cf 100644 --- a/src/release-notes/4-9-13.rst +++ b/src/release-notes/4-9-13.rst @@ -220,14 +220,14 @@ Alexander Bokovoy (4) ~~~~~~~~~~~~~~~~~~~~~ - Azure CI: increase memory for forced reenrollment test - `commit `__ + `commit `__ - Increase memory usage for Azure CI upgrade test - `commit `__ + `commit `__ - support more DateTime attributes in LDAP searches in IPA API - `commit `__ + `commit `__ `#9395 `__ - ipalib/x509.py: Add signature_algorithm_parameters - `commit `__ + `commit `__ .. _alexandra_nikandrova_1: @@ -235,7 +235,7 @@ Alexandra Nikandrova (1) ~~~~~~~~~~~~~~~~~~~~~~~~ - doc: typo in basic_usage.md - `commit `__ + `commit `__ .. _anuja_more_1: @@ -244,7 +244,7 @@ Anuja More (1) - ipatests: Check that SSSD_PUBCONF_KRB5_INCLUDE_D_DIR is not included in krb5.conf - `commit `__ + `commit `__ `#9267 `__ .. _antonio_torres_1: @@ -253,7 +253,7 @@ Antonio Torres (1) ~~~~~~~~~~~~~~~~~~ - Back to git snapshots - `commit `__ + `commit `__ .. _erik_belko_1: @@ -261,7 +261,7 @@ Erik Belko (1) ~~~~~~~~~~~~~~ - test: add tests for descriptive error message in ipa user-add - `commit `__ + `commit `__ `#9378 `__ .. _florence_blanc_renaud_19: @@ -270,60 +270,60 @@ Florence Blanc-Renaud (19) ~~~~~~~~~~~~~~~~~~~~~~~~~~ - ipatests: fix test_ipactl_scenario_check - `commit `__ + `commit `__ `#9415 `__ - Covscan issues: Use after free - `commit `__ + `commit `__ `#9431 `__ - idp: add the ipaidpuser objectclass when needed - `commit `__ + `commit `__ `#9433 `__ - Installer: activate nss and pam services in sssd.conf - `commit `__ + `commit `__ `#9427 `__ - ipatests: fix test_topology - `commit `__ + `commit `__ - ipatests: update expected webui msg for admin deletion - `commit `__ + `commit `__ `#8878 `__ - xmlrpc tests: add a test for user plugin with non-existing idp - `commit `__ + `commit `__ `#9416 `__ - User plugin: improve error related to non existing idp - `commit `__ + `commit `__ `#9416 `__ - OTP: fix data type to avoid endianness issue - `commit `__ + `commit `__ `#9402 `__ - Integration tests: add a test to ipa-server-upgrade - `commit `__ + `commit `__ `#9385 `__ - Upgrade: fix replica agreement - `commit `__ + `commit `__ `#9385 `__ - Integration test: add a test for upgrade and PKI drop-in file - `commit `__ + `commit `__ `#9381 `__ - Upgrade: add PKI drop-in file if missing - `commit `__ + `commit `__ `#9381 `__ - xmlrpc tests: add test renaming user or group with setattr - `commit `__ + `commit `__ `#9396 `__ - User and groups: rename with --setattr must check format - `commit `__ + `commit `__ `#9396 `__ - webuitests: close notification which hides Add button - `commit `__ + `commit `__ `#9389 `__ - ipatest: remove xfail from test_smb - `commit `__ + `commit `__ `#9124 `__ - ACME tests: fix issue_and_expire_acme_cert method - `commit `__ + `commit `__ `#9383 `__ - user or group name: explain the supported format - `commit `__ + `commit `__ .. _francisco_trivino_1: @@ -331,7 +331,7 @@ Francisco Trivino (1) ~~~~~~~~~~~~~~~~~~~~~ - Workshop: fix broken Sphinx cross-references. - `commit `__ + `commit `__ .. _julien_rische_2: @@ -339,10 +339,10 @@ Julien Rische (2) ~~~~~~~~~~~~~~~~~ - ipa-kdb: Make AD-SIGNEDPATH optional with krb5 DAL 8 and older - `commit `__ + `commit `__ `#9448 `__ - ipa-kdb: fix error handling of is_master_host() - `commit `__ + `commit `__ `#9422 `__ .. _mohammad_rizwan_2: @@ -351,10 +351,10 @@ Mohammad Rizwan (2) ~~~~~~~~~~~~~~~~~~~ - ipatests: restart ipa services after moving date - `commit `__ + `commit `__ `#9379 `__ - ipatests: enable firewall rule for http service on acme client - `commit `__ + `commit `__ .. _rob_crittenden_14: @@ -362,46 +362,46 @@ Rob Crittenden (14) ~~~~~~~~~~~~~~~~~~~ - Allow password policy minlength to be removed like other values - `commit `__ + `commit `__ `#9297 `__ - Don't assume KRB5CCNAME is in the environment in replica install - `commit `__ + `commit `__ `#9446 `__ - Configure affinity during server installation - `commit `__ + `commit `__ `#9289 `__ - Remove all references to deleted indirect map from parent map - `commit `__ + `commit `__ `#9397 `__ - Prevent the admin user from being deleted - `commit `__ + `commit `__ `#8878 `__ - Fix memory leak in the OTP last token plugin - `commit `__ + `commit `__ `#9403 `__ - Differentiate location meaning between host and server - `commit `__ + `commit `__ `#9317 `__ - Use the python-cryptography parser directly in cert-find - `commit `__ + `commit `__ `#9331 `__ - Revert "cert_find: fix call with --all" - `commit `__ + `commit `__ `#9331 `__ - Revert "Use the OpenSSL certificate parser in cert-find" - `commit `__ + `commit `__ `#9331 `__ - Don't allow the FQDN to match the domain on server installs - `commit `__ + `commit `__ `#9003 `__ - Don't allow a group to be converted to POSIX and external - `commit `__ + `commit `__ `#8990 `__ - Replace usage of #!/usr/bin/env python3 with #!/usr/bin/python3 - `commit `__ + `commit `__ `#8941 `__ - Mention in ipa-client-install that nscd is disabled - `commit `__ + `commit `__ `#9086 `__ .. _rafael_guterres_jeffman_1: @@ -410,7 +410,7 @@ Rafael Guterres Jeffman (1) ~~~~~~~~~~~~~~~~~~~~~~~~~~~ - Fix typo in "Subordinate ID Selfservice User" role - `commit `__ + `commit `__ `#9418 `__ .. _sudhir_menon_1: @@ -419,7 +419,7 @@ Sudhir Menon (1) ~~~~~~~~~~~~~~~~ - ipatests: Skip the test failing due to FIPS policy - `commit `__ + `commit `__ .. _viktor_ashirov_1: @@ -427,5 +427,5 @@ Viktor Ashirov (1) ~~~~~~~~~~~~~~~~~~ - WebUI: update favicon.ico - `commit `__ + `commit `__ `#9449 `__ diff --git a/src/release-notes/4-9-14.rst b/src/release-notes/4-9-14.rst index 414193d7d..253477209 100644 --- a/src/release-notes/4-9-14.rst +++ b/src/release-notes/4-9-14.rst @@ -87,7 +87,7 @@ Antonio Torres (1) ~~~~~~~~~~~~~~~~~~ - Become IPA 4.9.14 - `commit `__ + `commit `__ .. _julien_rische_1: @@ -95,7 +95,7 @@ Julien Rische (1) ~~~~~~~~~~~~~~~~~ - ipa-kdb: Detect and block Bronze-Bit attacks - `commit `__ + `commit `__ .. _rob_crittenden_2: @@ -103,6 +103,6 @@ Rob Crittenden (2) ~~~~~~~~~~~~~~~~~~ - Integration tests for verifying Referer header in the UI - `commit `__ + `commit `__ - Check the HTTP Referer header on all requests - `commit `__ + `commit `__