https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.2
Resolves: RHEL-67567
- ipareplica: Pass ipareplica_ip_addresses to ipaclient
Resolves: RHEL-40228
- ipagroup: Correctly handle externalmember in member actions
Resolves: RHEL-70023
- ipasudorule: Evaluate all members related to hosts and users
Resolves: RHEL-68441
- ipacert: Correctly handle removFromCRL revocation
Resolves: RHEL-70021
- Collection: No more role module duplication
Resolves: RHEL-71124
https://github.com/freeipa/ansible-freeipa/releases/tag/v1.12.1
Highlights:
- Fix ipaserver deployment on CentOS 8 Stream
- Fix ipaclient deployment with automount
- Fix ipaclient OTP error reporting
- Add missing support for renaming groups and users
- Idempotency fixes in several modules
https://github.com/freeipa/ansible-freeipa/releases/tag/v1.11.1
Highlights:
- Support for GECOS, street, smb and idp attributes in ipauser module
- Support for indirect maps in ipaautomountmap module
- Update of user_auth_type choices in ipaconfig and ipauser modules
- Update of auth_ind choices in ipahost and ipaservice modules
- Upstream test and environment enhancements
- Documentation updates
https://github.com/freeipa/ansible-freeipa/releases/tag/v1.11.0
Highlights:
- Multiple service management with ipaservice module
- New ipacert module for certificate management
- Action group support for the Ansible collections on Ansible Galaxy and
Ansible AutomationHub
- Fixed maxsequence handling in ipapwpolicy module
- Even more Ansible lint driven changes
https://github.com/freeipa/ansible-freeipa/releases/tag/v1.10.0
Highlights:
- ipagroup: Allow multiple group management.
- ipaclient: Add subid option to select the sssd profile with-subid.
- ipaclient: Fix allow_repair with removed krb5.conf and DNS lookup.
- ipaclient: Keep server affinity while deploying by deferring the
creation the final krb5.conf.
- ipaserver: Allow deployments with random serial numbers.
- ipareplica/server: Enable removal from domain with undeployment.
- More Ansible lint fixes.
https://github.com/freeipa/ansible-freeipa/releases/tag/v1.9.0
Highlights:
- New netgroup management module
- sudorule: Add support for 'hostmask' parameter
- pwpolicy: Add support for password check and grace limit
- ipaclient: No kinit on controller for deployment using OTP
- ipaclient: Configure DNS resolver
- Support for ansible-core 2.14 tests
- Lots of documentation updates in READMEs and modules
- library/ipaclient_get_otp: Enable force mode for host_add call (fixes#74)
- Flake8 and pylint reated fixes
- Fixed wrong path to CheckedIPAddress class in ipareplica_test
- Remove unused ipaserver/library/ipaserver.py
- No not use wildcard imports for modules
- ipareplica: Add support for pki_config_override
- ipareplica: Initialize dns.ip_addresses and dns.reverse_zones for dns setup
- ipareplica_prepare: Properly initialize pin and cert_name variables
- ipareplica: Fail with proper error messages
- ipaserver: Properly set settings related to pkcs12 files
- ipaclient: RawConfigParser is not always provided by six.moves.configparser
- ipaclient_setup_nss: paths.GETENT is not available before
freeipa-4.6.90.pre1
- ipaserver_test: Initialize value from options.zonemgr
- ipareplica_setup_custodia: create_replica only available in newer releases
- ipaclient: Fix typo in dnsok assignment for ipaclient_setup_nss
- ipa[server,replica]: Set _packages_adtrust for Ubuntu
- New build script for galaxy release
- New utils script to update module docs
- Support for IPA 4.8.0
- New user management module
- New group management module
- ipaserver: Support external signed CA
- RHEL-8 specific vars files to be able to install needed modules
automatically
- ipareplica: Fixes for certmonger and kra setup
- New tests folder
- OTP related updates to README files
- Updates of version 0.1.4
- ipatopologysegment: Use commands, not command
- Updates of version 0.1.3
- ipaclient_test: Fix Python2 decode use with Python3
- Fixed: #86 (AttributeError: 'str' object has no attribute 'decode')
- ipaclient_get_otp: Remove ansible_python_interpreter handling
- ipaclient: Use omit (None) for password, keytab, no string length checks
- ipaclient_join: Support to use ipaadmin_keytab without ipaclient_use_otp
- ipaclient: Report error message if ipaclient_get_otp failed
- Fixes#17 Improve how tasks manage package installation
- ipareplica: The dm password is not needed for ipareplica_master_password
- ipareplica: Use ipareplica_server if set
- ipatopologysegment: Allow domain+ca suffix, new state: checked
- Documentation updates
- Cleanups
- Update of version 0.1.2
- Now a new Ansible Collection
- Fix gssapi requirement for OTP: It is only needed if keytab is used with
OTP now.
- Fix wrong ansible argument types
- Do not fail on textwrap for replica deployments with CA
- Ansible lint and galaxy fixes
- Disable automatic removal of replication agreements in uninstall
- Enable freeipa-trust service if adtrust is enabled
- Add support for hidden replica
- New topology managament modules
- Add support for pki_config_override
- Fix host name setup in server deployment
- Fix errors when ipaservers variable is not set
- Fix ipaclient install role length typo
- Cleanups
