rpms/ipa
7
0
Fork 0
Code Issues Pull Requests Releases Activity
4de77e9638
ipa/freeipa.spec

2919 lines
109 KiB
RPMSpec
Raw Normal View History

FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
# ipatests enabled by default, can be disabled with --without ipatests
%bcond_without ipatests
# default to not use XML-RPC in Rawhide, can be turned around with --with ipa_join_xml
# On RHEL 8 we should use --with ipa_join_xml
%bcond_with ipa_join_xml
# Linting is disabled by default, needed for upstream testing
%bcond_with lint
# Build documentation with sphinx
%bcond_with doc
# Build Python wheels
%bcond_with wheels
Disable i686 server build: 389-ds no longer provides that arch Build only the client pieces. Resolves: #1544386
2018-02-20 18:24:55 +00:00
# 389-ds-base 1.4 no longer supports i686 platform, build only client
# packages, https://bugzilla.redhat.com/show_bug.cgi?id=1544386
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
%ifarch %{ix86}
%{!?ONLY_CLIENT:%global ONLY_CLIENT 1}
Disable i686 server build: 389-ds no longer provides that arch Build only the client pieces. Resolves: #1544386
2018-02-20 18:24:55 +00:00
%endif
Committing for Christian Heimes: - Remove Python 2 support from Fedora 30 - https://fedoraproject.org/wiki/Changes/FreeIPA_Python_2_Removal
2018-09-25 09:09:19 +00:00
Update to upstream 4.4.1 release
2016-09-01 13:47:48 +00:00
# Define ONLY_CLIENT to only make the ipa-client and ipa-python
Update to upstream 4.1.0 see http://www.freeipa.org/page/Releases/4.1.0
2014-10-21 14:35:27 +00:00
# subpackages
Initial import (#672986).
2011-01-28 04:33:55 +00:00
%{!?ONLY_CLIENT:%global ONLY_CLIENT 0}
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
%if %{ONLY_CLIENT}
%global enable_server_option --disable-server
%else
%global enable_server_option --enable-server
%endif
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
%if %{ONLY_CLIENT}
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
%global with_ipatests 0
%endif
Update to upstream 4.7.0 - New BuildRequires for nodejs and uglify-js - New Requires for 389-ds-base-legacy-tools in server (RHBZ#1606541) - Do not build python2-ipaserver and python2-ipatests for Fedora 29 and up - Do not build any python2 packages for Fedora 30 - Added ipatest man pages to python3-ipatests packages also - Added ipatest bindir links to python3-ipatests for Fedora up to 28 - Dropped explicit copy of freeipa.template, install is doing this now - Added upstream fix: (f3faecb) Fix $-style format string in ipa_ldap_init - Added upstream fix: (4b592fe,1a7baa2) Added reason to raise of errors.NotFound
2018-07-26 11:37:30 +00:00
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
# Whether to build ipatests
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
%if %{with ipatests}
%global with_ipatests_option --with-ipatests
%else
%global with_ipatests_option --without-ipatests
%endif
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
# Whether to use XML-RPC with ipa-join
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
%if %{with ipa_join_xml}
%global with_ipa_join_xml_option --with-ipa-join-xml
%else
%global with_ipa_join_xml_option --without-ipa-join-xml
%endif
4.6.3-1: rebase to upstream 4.6.3
2018-01-31 17:01:27 +00:00
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
# lint is not executed during rpmbuild
# %%global with_lint 1
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
%if %{with lint}
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
%global linter_options --enable-pylint --with-jslint
%else
%global linter_options --disable-pylint --without-jslint
%endif
FreeIPA 4.8.5
2020-03-17 14:12:01 +00:00
# Include SELinux subpackage
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
%if 0%{?fedora} >= 30 || 0%{?rhel} >= 8
FreeIPA 4.8.5
2020-03-17 14:12:01 +00:00
%global with_selinux 1
%global selinuxtype targeted
%global modulename ipa
%endif
Update to upstream 4.1.0 see http://www.freeipa.org/page/Releases/4.1.0
2014-10-21 14:35:27 +00:00
%if 0%{?rhel}
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
%global package_name ipa
%global alt_name freeipa
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
%global krb5_version 1.18.2-2
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
%global krb5_kdb_version 8.0
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
# 0.7.16: https://github.com/drkjam/netaddr/issues/71
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
%global python_netaddr_version 0.7.19
4.6.1-1: rebase to upstream 4.6.1 - Fixes #1491053 Firefox reports insecure TLS configuration when visiting FreeIPA web UI after standard server deployment Signed-off-by: Tomas Krizek <tkrizek@redhat.com>
2017-09-22 11:44:05 +00:00
# Require 4.7.0 which brings Python 3 bindings
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
%global samba_version 4.12.3-12
%global selinux_policy_version 3.14.3-52
%global slapi_nis_version 0.56.4
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
%global python_ldap_version 3.1.0-1
Update spec file
2019-04-29 20:01:26 +00:00
# python3-lib389
Update to FreeIPA 4.7.2
2018-12-03 11:34:40 +00:00
# Fix for "Installation fails: Replica Busy"
Update spec file
2019-04-29 20:01:26 +00:00
# https://pagure.io/389-ds-base/issue/49818
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
%global ds_version 1.4.2.4-6
Update dependencies for FreeIPA 4.8.4 release
2019-12-14 12:53:43 +00:00
# Fix for TLS 1.3 PHA, RHBZ#1775158
%global httpd_version 2.4.37-21
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
%global bind_version 9.11.20-6
Update spec file
2019-04-29 20:01:26 +00:00
Update to upstream 4.1.0 see http://www.freeipa.org/page/Releases/4.1.0
2014-10-21 14:35:27 +00:00
%else
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
# Fedora
%global package_name freeipa
%global alt_name ipa
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
# Fix for CVE-2020-28196
%global krb5_version 1.18.2-29
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
# 0.7.16: https://github.com/drkjam/netaddr/issues/71
%global python_netaddr_version 0.7.16
4.6.1-1: rebase to upstream 4.6.1 - Fixes #1491053 Firefox reports insecure TLS configuration when visiting FreeIPA web UI after standard server deployment Signed-off-by: Tomas Krizek <tkrizek@redhat.com>
2017-09-22 11:44:05 +00:00
# Require 4.7.0 which brings Python 3 bindings
Rebuild against krb5 1.18 beta
2020-01-28 08:22:32 +00:00
# Require 4.12 which has DsRGetForestTrustInformation access rights fixes
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
%global samba_version 2:4.12.10
FreeIPA 4.8.7 upstream release
2020-06-10 20:45:00 +00:00
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
# 3.14.5-45 or later includes a number of interfaces fixes for IPA interface
%global selinux_policy_version 3.14.5-45
FreeIPA 4.8.7 upstream release
2020-06-10 20:45:00 +00:00
%global slapi_nis_version 0.56.5
FreeIPA 4.8.5
2020-03-17 14:12:01 +00:00
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
%global krb5_kdb_version 8.0
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
# fix for segfault in python3-ldap, https://pagure.io/freeipa/issue/7324
%global python_ldap_version 3.1.0-1
Update to FreeIPA 4.8.10
2020-09-26 09:23:38 +00:00
# 1.4.3 moved nsslapd-db-locks to cn=bdb sub-entry
# https://pagure.io/freeipa/issue/8515
%global ds_version 1.4.3
Update to upstream 4.6.90.pre2 Resolves: #1562606
2018-05-15 20:22:52 +00:00
Update dependencies for FreeIPA 4.8.4 release
2019-12-14 12:53:43 +00:00
# Fix for TLS 1.3 PHA, RHBZ#1775146
%global httpd_version 2.4.41-9
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
%global bind_version 9.11.24-1
# Don't use Fedora's Python dependency generator on Fedora 30/rawhide yet.
# Some packages don't provide new dist aliases.
# https://docs.fedoraproject.org/en-US/packaging-guidelines/Python/
%{?python_disable_dependency_generator}
# Fedora
Update dependencies for FreeIPA 4.8.4 release
2019-12-14 12:53:43 +00:00
%endif
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
# BIND employs 'pkcs11' OpenSSL engine instead of native PKCS11
# Fedora 31+ uses OpenSSL engine, as well as Fedora ELN (RHEL9)
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
%if 0%{?fedora} || 0%{?rhel} >= 9
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
%global openssl_pkcs11_version 0.4.10-6
%global softhsm_version 2.5.0-4
%else
%global with_bind_pkcs11 1
%endif
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
%if 0%{?rhel} == 8
Update to FreeIPA 4.8.10
2020-09-26 09:23:38 +00:00
# PKIConnection has been modified to always validate certs.
# https://pagure.io/freeipa/issue/8379
%global pki_version 10.9.0-0.4
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
%else
# New KRA profile, ACME support
# https://pagure.io/freeipa/issue/8545
%global pki_version 10.10.0-2
%endif
Update to upstream 4.6.90.pre2 Resolves: #1562606
2018-05-15 20:22:52 +00:00
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
# RHEL 8.3+, F32+ has 0.79.13
%global certmonger_version 0.79.7-3
4.6.3-1: rebase to upstream 4.6.3
2018-01-31 17:01:27 +00:00
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
# RHEL 8.2+, F32+ has 3.58
%global nss_version 3.44.0-4
Update spec file
2019-04-29 20:01:26 +00:00
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
# RHEL 8.3+, F32+
%global sssd_version 2.4.0
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
%define krb5_base_version %(LC_ALL=C /usr/bin/pkgconf --modversion krb5 | grep -Eo '^[^.]+\.[^.]+' || echo %krb5_version)
%global kdcproxy_version 0.4-3
Update to upstream 4.7.1
2018-10-05 19:51:43 +00:00
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
%if 0%{?fedora} >= 33 || 0%{?rhel} >= 9
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
# systemd with resolved enabled
# see https://pagure.io/freeipa/issue/8275
%global systemd_version 246.6-3
%else
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
%global systemd_version 239
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
%endif
Update to upstream 4.2.1
2015-09-07 16:41:00 +00:00
Initial import (#672986).
2011-01-28 04:33:55 +00:00
%global plugin_dir %{_libdir}/dirsrv/plugins
Update to upstream 4.2.1
2015-09-07 16:41:00 +00:00
%global etc_systemd_dir %{_sysconfdir}/systemd/system
Initial import (#672986).
2011-01-28 04:33:55 +00:00
%global gettext_domain ipa
Update to upstream 4.1.0 see http://www.freeipa.org/page/Releases/4.1.0
2014-10-21 14:35:27 +00:00
3.3.4-2 - Fix hardened build
2014-01-29 07:54:27 +00:00
%define _hardened_build 1
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
# Work-around fact that RPM SPEC parser does not accept
# "Version: @VERSION@" in freeipa.spec.in used for Autoconf string replacement
Update to FreeIPA 4.9.2 New upstream release. Add RHEL/Fedora ELN-only branding patch. Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2021-02-15 19:02:25 +00:00
%define IPA_VERSION 4.9.2
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
# Release candidate version -- uncomment with one percent for RC versions
FreeIPA 4.9.0 release Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2020-12-23 15:06:18 +00:00
#%%global rc_version %%nil
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
%define AT_SIGN @
# redefine IPA_VERSION only if its value matches the Autoconf placeholder
%if "%{IPA_VERSION}" == "%{AT_SIGN}VERSION%{AT_SIGN}"
Update to 4.8.2 - Replace %%{_libdir} macro in BuildRequires (#1746882) - Restore user-nsswitch.conf before calling authselect (#1746557) - ipa service-find does not list cifs service created by ipa-client-samba (#1731433) - Occasional 'whoami.data is undefined' error in FreeIPA web UI (#1699109) - ipa-kra-install fails due to fs.protected_regular=1 (#1698384)
2019-11-12 19:43:05 +00:00
%define IPA_VERSION nonsense.to.please.RPM.SPEC.parser
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
%endif
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
%define NON_DEVELOPER_BUILD ("%{lua: print(rpm.expand('%{suffix:%IPA_VERSION}'):find('^dev'))}" == "nil")
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
Name: %{package_name}
Version: %{IPA_VERSION}
Fix ipatests dependency to python3-pexpect Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2021-02-15 19:34:30 +00:00
Release: 2%{?rc_version:.%rc_version}%{?dist}
Initial import (#672986).
2011-01-28 04:33:55 +00:00
Summary: The Identity, Policy and Audit system
License: GPLv3+
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
URL: http://www.freeipa.org/
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
Source0: https://releases.pagure.org/freeipa/freeipa-%{version}%{?rc_version}.tar.gz
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
# Only use detached signature for the distribution builds. If it is a developer build, skip it
%if %{NON_DEVELOPER_BUILD}
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
Source1: https://releases.pagure.org/freeipa/freeipa-%{version}%{?rc_version}.tar.gz.asc
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
%endif
# RHEL spec file only: START: Change branding to IPA and Identity Management
# Moved branding logos and background to redhat-logos-ipa-80.4:
# header-logo.png, login-screen-background.jpg, login-screen-logo.png,
# product-name.png
# RHEL spec file only: END: Change branding to IPA and Identity Management
# RHEL spec file only: START
Update to FreeIPA 4.9.2 New upstream release. Add RHEL/Fedora ELN-only branding patch. Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2021-02-15 19:02:25 +00:00
%if %{NON_DEVELOPER_BUILD}
%if 0%{?rhel} >= 8
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
Patch1001: 1001-Change-branding-to-IPA-and-Identity-Management.patch
Update to FreeIPA 4.9.2 New upstream release. Add RHEL/Fedora ELN-only branding patch. Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2021-02-15 19:02:25 +00:00
%endif
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
%endif
# RHEL spec file only: END
Apply 4.9.0rc2 fixes from upstream Allow mod_auth_gssapi to create and access ccaches in /run/ipa/ccaches Fixes: https://pagure.io/freeipa/issue/8613 upgrade: provide DOMAIN to the server upgrade dictionary Fixes: https://pagure.io/freeipa/issue/8615
2020-12-09 18:07:18 +00:00
Fixed bad comment line
2018-09-03 16:03:41 +00:00
# For the timestamp trick in patch application
BuildRequires: diffstat
Workarounds for SELinux execmem violations in crypto
2015-12-14 23:05:41 +00:00
Initial import (#672986).
2011-01-28 04:33:55 +00:00
BuildRequires: openldap-devel
Add support for KRB DAL 6.1 and bind-dyndb-ldap 11.0
2017-02-15 14:48:51 +00:00
# For KDB DAL version, make explicit dependency so that increase of version
# will cause the build to fail due to unsatisfied dependencies.
# DAL version change may cause code crash or memory leaks, it is better to fail early.
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
BuildRequires: krb5-kdb-version = %{krb5_kdb_version}
FreeIPA 4.8.7 upstream release
2020-06-10 20:45:00 +00:00
BuildRequires: krb5-kdb-devel-version = %{krb5_kdb_version}
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
BuildRequires: krb5-devel >= %{krb5_version}
BuildRequires: pkgconfig(krb5)
%if %{with ipa_join_xml}
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
# 1.27.4: xmlrpc_curl_xportparms.gssapi_delegation
Update to upstream 3.2.0 Prerelease 1 Spec file was also merged with up-to-date upstream reference spec file to keep them consistent.
2013-04-02 16:47:49 +00:00
BuildRequires: xmlrpc-c-devel >= 1.27.4
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
%else
BuildRequires: libcurl-devel
BuildRequires: jansson-devel
%endif
- Update to upstream freeipa-2.0.0.rc2 - Set minimum version of python-nss to 0.11 to make sure IPv6 support is in - Set minimum version of sssd to 1.5.1 - Patch to include SuiteSpotGroup when setting up 389-ds instances - Move a lot of BuildRequires so this will build with ONLY_CLIENT enabled
2011-02-25 23:12:29 +00:00
BuildRequires: popt-devel
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
BuildRequires: gcc
BuildRequires: make
BuildRequires: pkgconfig
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
BuildRequires: pkgconf
Initial import (#672986).
2011-01-28 04:33:55 +00:00
BuildRequires: autoconf
BuildRequires: automake
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
BuildRequires: make
- Update to upstream freeipa-2.0.0.rc2 - Set minimum version of python-nss to 0.11 to make sure IPv6 support is in - Set minimum version of sssd to 1.5.1 - Patch to include SuiteSpotGroup when setting up 389-ds instances - Move a lot of BuildRequires so this will build with ONLY_CLIENT enabled
2011-02-25 23:12:29 +00:00
BuildRequires: libtool
BuildRequires: gettext
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
BuildRequires: gettext-devel
BuildRequires: python3-devel
BuildRequires: python3-setuptools
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
BuildRequires: systemd >= %{systemd_version}
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
# systemd-tmpfiles which is executed from make install requires apache user
BuildRequires: httpd
BuildRequires: nspr-devel
BuildRequires: openssl-devel
BuildRequires: libini_config-devel
BuildRequires: cyrus-sasl-devel
%if ! %{ONLY_CLIENT}
Update to upstream 4.6.90.pre2 Resolves: #1562606
2018-05-15 20:22:52 +00:00
BuildRequires: 389-ds-base-devel >= %{ds_version}
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
BuildRequires: samba-devel >= %{samba_version}
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
BuildRequires: libtalloc-devel
BuildRequires: libtevent-devel
BuildRequires: libuuid-devel
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
BuildRequires: libpwquality-devel
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
BuildRequires: libsss_idmap-devel
BuildRequires: libsss_certmap-devel
Update to FreeIPA 4.8.10
2020-09-26 09:23:38 +00:00
BuildRequires: libsss_nss_idmap-devel >= %{sssd_version}
FreeIPA 4.8.7 upstream release
2020-06-10 20:45:00 +00:00
BuildRequires: nodejs(abi)
Update to FreeIPA 4.8.10
2020-09-26 09:23:38 +00:00
# use old dependency on RHEL 8 for now
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
%if 0%{?fedora} >= 31 || 0%{?rhel} >= 9
Update to FreeIPA 4.8.10
2020-09-26 09:23:38 +00:00
BuildRequires: python3-rjsmin
%else
BuildRequires: uglify-js
%endif
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
BuildRequires: libverto-devel
BuildRequires: libunistring-devel
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
# 0.13.0: https://bugzilla.redhat.com/show_bug.cgi?id=1584773
# 0.13.0-2: fix for missing dependency on python-six
Change BuildRequires from python-lesscpy to python3-lesscpy
2018-06-15 17:32:12 +00:00
BuildRequires: python3-lesscpy >= 0.13.0-2
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
BuildRequires: cracklib-dicts
FreeIPA 4.8.5
2020-03-17 14:12:01 +00:00
# ONLY_CLIENT
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
%endif
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
#
# Build dependencies for makeapi/makeaci
#
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
BuildRequires: python3-cffi
BuildRequires: python3-dns
BuildRequires: python3-ldap >= %{python_ldap_version}
BuildRequires: python3-libsss_nss_idmap
BuildRequires: python3-netaddr >= %{python_netaddr_version}
BuildRequires: python3-pyasn1
BuildRequires: python3-pyasn1-modules
BuildRequires: python3-six
Update to FreeIPA 4.8.10
2020-09-26 09:23:38 +00:00
BuildRequires: python3-psutil
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
#
# Build dependencies for wheel packaging and PyPI upload
#
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
%if %{with wheels}
4.6.0-1: rebase to upstream 4.6.0 Signed-off-by: Tomas Krizek <tkrizek@redhat.com>
2017-09-04 10:01:19 +00:00
BuildRequires: dbus-glib-devel
BuildRequires: libffi-devel
BuildRequires: python3-tox
Fix mass rebuild failure Fix space/tabs issues reported by 'fedpkg lint'
2019-02-08 18:40:17 +00:00
%if 0%{?fedora} <= 28
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
BuildRequires: python3-twine
Fix mass rebuild failure Fix space/tabs issues reported by 'fedpkg lint'
2019-02-08 18:40:17 +00:00
%else
BuildRequires: twine
%endif
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
BuildRequires: python3-wheel
FreeIPA 4.8.5
2020-03-17 14:12:01 +00:00
# with_wheels
%endif
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
%if %{with doc}
BuildRequires: python3-sphinx
BuildRequires: python3-m2r
%endif
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
#
4.6.3-1: rebase to upstream 4.6.3
2018-01-31 17:01:27 +00:00
# Build dependencies for lint and fastcheck
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
#
Update spec file
2020-11-19 18:45:31 +00:00
%if %{with lint}
Update to FreeIPA 4.8.10
2020-09-26 09:23:38 +00:00
BuildRequires: git
Update to upstream 4.7.0 - New BuildRequires for nodejs and uglify-js - New Requires for 389-ds-base-legacy-tools in server (RHBZ#1606541) - Do not build python2-ipaserver and python2-ipatests for Fedora 29 and up - Do not build any python2 packages for Fedora 30 - Added ipatest man pages to python3-ipatests packages also - Added ipatest bindir links to python3-ipatests for Fedora up to 28 - Dropped explicit copy of freeipa.template, install is doing this now - Added upstream fix: (f3faecb) Fix $-style format string in ipa_ldap_init - Added upstream fix: (4b592fe,1a7baa2) Added reason to raise of errors.NotFound
2018-07-26 11:37:30 +00:00
BuildRequires: jsl
Update to FreeIPA 4.8.10
2020-09-26 09:23:38 +00:00
BuildRequires: nss-tools
Update spec file
2019-04-29 20:01:26 +00:00
BuildRequires: rpmlint
Update to upstream 4.7.0 - New BuildRequires for nodejs and uglify-js - New Requires for 389-ds-base-legacy-tools in server (RHBZ#1606541) - Do not build python2-ipaserver and python2-ipatests for Fedora 29 and up - Do not build any python2 packages for Fedora 30 - Added ipatest man pages to python3-ipatests packages also - Added ipatest bindir links to python3-ipatests for Fedora up to 28 - Dropped explicit copy of freeipa.template, install is doing this now - Added upstream fix: (f3faecb) Fix $-style format string in ipa_ldap_init - Added upstream fix: (4b592fe,1a7baa2) Added reason to raise of errors.NotFound
2018-07-26 11:37:30 +00:00
BuildRequires: softhsm
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
Update to FreeIPA 4.8.10
2020-09-26 09:23:38 +00:00
BuildRequires: keyutils
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
BuildRequires: python3-augeas
BuildRequires: python3-cffi
4.6.0-1: rebase to upstream 4.6.0 Signed-off-by: Tomas Krizek <tkrizek@redhat.com>
2017-09-04 10:01:19 +00:00
BuildRequires: python3-cryptography >= 1.6
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
BuildRequires: python3-custodia >= 0.3.1
BuildRequires: python3-dateutil
BuildRequires: python3-dbus
BuildRequires: python3-dns >= 1.15
FreeIPA 4.8.5
2020-03-17 14:12:01 +00:00
BuildRequires: python3-docker
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
BuildRequires: python3-gssapi >= 1.2.0
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
BuildRequires: python3-jinja2
BuildRequires: python3-jwcrypto >= 0.4.2
BuildRequires: python3-ldap >= %{python_ldap_version}
BuildRequires: python3-ldap >= %{python_ldap_version}
Update to FreeIPA 4.7.2
2018-12-03 11:34:40 +00:00
BuildRequires: python3-lib389 >= %{ds_version}
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
BuildRequires: python3-libipa_hbac
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
BuildRequires: python3-libsss_nss_idmap
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
BuildRequires: python3-lxml
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
BuildRequires: python3-netaddr >= %{python_netaddr_version}
BuildRequires: python3-netifaces
BuildRequires: python3-paste
Update to FreeIPA 4.9.2 New upstream release. Add RHEL/Fedora ELN-only branding patch. Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2021-02-15 19:02:25 +00:00
BuildRequires: python3-pexpect
Update to upstream 4.6.90.pre2 Resolves: #1562606
2018-05-15 20:22:52 +00:00
BuildRequires: python3-pki >= %{pki_version}
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
BuildRequires: python3-polib
BuildRequires: python3-pyasn1
BuildRequires: python3-pyasn1-modules
BuildRequires: python3-pycodestyle
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
%if 0%{?fedora} || 0%{?rhel} > 8
Update to FreeIPA 4.7.2
2018-12-03 11:34:40 +00:00
# https://bugzilla.redhat.com/show_bug.cgi?id=1648299
BuildRequires: python3-pylint >= 2.1.1-2
%else
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
BuildRequires: python3-pylint >= 1.7
Update to FreeIPA 4.7.2
2018-12-03 11:34:40 +00:00
%endif
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
BuildRequires: python3-pytest-multihost
BuildRequires: python3-pytest-sourceorder
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
BuildRequires: python3-qrcode-core >= 5.0.0
BuildRequires: python3-samba
BuildRequires: python3-six
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
BuildRequires: python3-sss
BuildRequires: python3-sss-murmur
Update to upstream 4.7.1
2018-10-05 19:51:43 +00:00
BuildRequires: python3-sssdconfig >= %{sssd_version}
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
BuildRequires: python3-systemd
Update to FreeIPA 4.8.10
2020-09-26 09:23:38 +00:00
BuildRequires: python3-yaml
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
BuildRequires: python3-yubico
FreeIPA 4.8.5
2020-03-17 14:12:01 +00:00
# with_lint
%endif
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
#
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
# Build dependencies for unit tests
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
#
%if ! %{ONLY_CLIENT}
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
BuildRequires: libcmocka-devel
4.3.2-2: CVE-2016-5404
2016-08-19 12:41:05 +00:00
# Required by ipa_kdb_tests
Update to 4.8.2 - Replace %%{_libdir} macro in BuildRequires (#1746882) - Restore user-nsswitch.conf before calling authselect (#1746557) - ipa service-find does not list cifs service created by ipa-client-samba (#1731433) - Occasional 'whoami.data is undefined' error in FreeIPA web UI (#1699109) - ipa-kra-install fails due to fs.protected_regular=1 (#1698384)
2019-11-12 19:43:05 +00:00
BuildRequires: krb5-server >= %{krb5_version}
FreeIPA 4.8.5
2020-03-17 14:12:01 +00:00
# ONLY_CLIENT
%endif
# Build dependencies for SELinux policy
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
%if %{with selinux}
Update spec file
2020-11-19 18:45:31 +00:00
BuildRequires: selinux-policy-devel >= %{selinux_policy_version}
FreeIPA 4.8.5
2020-03-17 14:12:01 +00:00
%endif
Update to upstream 3.2.0 GA - ipa-client-install fails if /etc/ipa does not exist (#961483) - Certificate status is not visible in Service and Host page (#956718) - ipa-client-install removes needed options from ldap.conf (#953991) - Handle socket.gethostbyaddr() exceptions when verifying hostnames (#953957) - Add triggerin scriptlet to support OpenSSH 6.2 (#953617) - Require nss 3.14.3-12.0 to address certutil certificate import errors (#953485) - Require pki-ca 10.0.2-3 to pull in fix for sslget and mixed IPv4/6 environments. (#953464) - ipa-client-install removes 'sss' from /etc/nsswitch.conf (#953453) - ipa-server-install --uninstall doesn't stop dirsrv instances (#953432) - Add requires for openldap-2.4.35-4 to pickup fixed SASL_NOCANON behavior for socket based connections (#960222) - Require libsss_nss_idmap-python - Add Conflicts on nss-pam-ldapd < 0.8.4. The mapping from uniqueMember to member is now done automatically and having it in the config file raises an error. - Add backup and restore tools, directory. - require at least systemd 38 which provides the journal (we no longer need to require syslog.target) - Update Requires on policycoreutils to 2.1.14-37 - Update Requires on selinux-policy to 3.12.1-42 - Update Requires on 389-ds-base to 1.3.1.0
2013-05-10 16:33:54 +00:00
Initial import (#672986).
2011-01-28 04:33:55 +00:00
%description
Update to upstream 4.2.2
2015-10-08 08:51:27 +00:00
IPA is an integrated solution to provide centrally managed Identity (users,
hosts, services), Authentication (SSO, 2FA), and Authorization
(host access control, SELinux user roles, services). The solution provides
features for further integration with Linux based clients (SUDO, automount)
and integration with Active Directory based infrastructures (Trusts).
Initial import (#672986).
2011-01-28 04:33:55 +00:00
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
Initial import (#672986).
2011-01-28 04:33:55 +00:00
%if ! %{ONLY_CLIENT}
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
Initial import (#672986).
2011-01-28 04:33:55 +00:00
%package server
Summary: The IPA authentication server
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
Requires: %{name}-server-common = %{version}-%{release}
Initial import (#672986).
2011-01-28 04:33:55 +00:00
Requires: %{name}-client = %{version}-%{release}
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
Requires: %{name}-common = %{version}-%{release}
4.6.0-1: rebase to upstream 4.6.0 Signed-off-by: Tomas Krizek <tkrizek@redhat.com>
2017-09-04 10:01:19 +00:00
Requires: python3-ipaserver = %{version}-%{release}
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
Requires: python3-ldap >= %{python_ldap_version}
Update to upstream 4.6.90.pre2 Resolves: #1562606
2018-05-15 20:22:52 +00:00
Requires: 389-ds-base >= %{ds_version}
Update to upstream 3.2.0 GA - ipa-client-install fails if /etc/ipa does not exist (#961483) - Certificate status is not visible in Service and Host page (#956718) - ipa-client-install removes needed options from ldap.conf (#953991) - Handle socket.gethostbyaddr() exceptions when verifying hostnames (#953957) - Add triggerin scriptlet to support OpenSSH 6.2 (#953617) - Require nss 3.14.3-12.0 to address certutil certificate import errors (#953485) - Require pki-ca 10.0.2-3 to pull in fix for sslget and mixed IPv4/6 environments. (#953464) - ipa-client-install removes 'sss' from /etc/nsswitch.conf (#953453) - ipa-server-install --uninstall doesn't stop dirsrv instances (#953432) - Add requires for openldap-2.4.35-4 to pickup fixed SASL_NOCANON behavior for socket based connections (#960222) - Require libsss_nss_idmap-python - Add Conflicts on nss-pam-ldapd < 0.8.4. The mapping from uniqueMember to member is now done automatically and having it in the config file raises an error. - Add backup and restore tools, directory. - require at least systemd 38 which provides the journal (we no longer need to require syslog.target) - Update Requires on policycoreutils to 2.1.14-37 - Update Requires on selinux-policy to 3.12.1-42 - Update Requires on 389-ds-base to 1.3.1.0
2013-05-10 16:33:54 +00:00
Requires: openldap-clients > 2.4.35-4
Update to upstream 4.6.90.pre2 Resolves: #1562606
2018-05-15 20:22:52 +00:00
Requires: nss-tools >= %{nss_version}
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
Requires(post): krb5-server >= %{krb5_version}
Drop upper bound on krb5 version This check is no longer needed now that krb5 exports the KDB version. Signed-off-by: Robbie Harwood <rharwood@redhat.com> (This commit originally proposed upstream as #3009.)
2019-04-08 19:29:01 +00:00
Requires(post): krb5-server >= %{krb5_base_version}
Use krb5 1.17-17 for krb5-kdb-version
2019-05-03 20:23:37 +00:00
Requires: krb5-kdb-version = %{krb5_kdb_version}
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
Requires: krb5-pkinit-openssl >= %{krb5_version}
Update to 2.1.0
2011-08-16 21:16:12 +00:00
Requires: cyrus-sasl-gssapi%{?_isa}
Update to upstream 4.6.90.pre2 Resolves: #1562606
2018-05-15 20:22:52 +00:00
Requires: chrony
Update dependencies for FreeIPA 4.8.4 release
2019-12-14 12:53:43 +00:00
Requires: httpd >= %{httpd_version}
4.6.3-1: rebase to upstream 4.6.3
2018-01-31 17:01:27 +00:00
Requires(preun): python3
Requires(postun): python3
Requires: python3-gssapi >= 1.2.0-5
Requires: python3-systemd
4.6.0-1: rebase to upstream 4.6.0 Signed-off-by: Tomas Krizek <tkrizek@redhat.com>
2017-09-04 10:01:19 +00:00
Requires: python3-mod_wsgi
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
Requires: mod_auth_gssapi >= 1.5.0
Update dependencies for FreeIPA 4.8.4 release
2019-12-14 12:53:43 +00:00
Requires: mod_ssl >= %{httpd_version}
Requires: mod_session >= %{httpd_version}
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
# 0.9.9: https://github.com/adelton/mod_lookup_identity/pull/3
Requires: mod_lookup_identity >= 0.9.9
Initial import (#672986).
2011-01-28 04:33:55 +00:00
Requires: acl
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
Requires: systemd-units >= %{systemd_version}
Requires(pre): systemd-units >= %{systemd_version}
Requires(post): systemd-units >= %{systemd_version}
Requires(preun): systemd-units >= %{systemd_version}
Requires(postun): systemd-units >= %{systemd_version}
Update to upstream 4.2.1
2015-09-07 16:41:00 +00:00
Requires(pre): shadow-utils
Update to upstream 4.1.0 see http://www.freeipa.org/page/Releases/4.1.0
2014-10-21 14:35:27 +00:00
Requires: selinux-policy >= %{selinux_policy_version}
Update to upstream 4.2.1
2015-09-07 16:41:00 +00:00
Requires(post): selinux-policy-base >= %{selinux_policy_version}
Update to upstream 4.4.1 release
2016-09-01 13:47:48 +00:00
Requires: slapi-nis >= %{slapi_nis_version}
Update to upstream 4.6.90.pre1 Resolves: #1551830, #1551677, #1547959, #1496562, #1179220
2018-03-16 17:47:47 +00:00
Requires: pki-ca >= %{pki_version}
Requires: pki-kra >= %{pki_version}
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
# pki-acme package was split out in pki-10.10.0
Requires: (pki-acme >= %{pki_version} if pki-ca >= 10.10.0)
Update to upstream 4.1.0 see http://www.freeipa.org/page/Releases/4.1.0
2014-10-21 14:35:27 +00:00
Requires: policycoreutils >= 2.1.12-5
Updated to upstream 3.1.0 GA - Set minimum for sssd to 1.9.2 - Set minimum for pki-ca to 10.0.0-1 - Set minimum for 389-ds-base to 1.3.0 - Set minimum for selinux-policy to 3.11.1-60 - Remove unneeded dogtag package requires
2012-12-10 20:52:46 +00:00
Requires: tar
Update spec file
2019-04-29 20:01:26 +00:00
Requires(pre): certmonger >= %{certmonger_version}
Update to upstream 4.6.90.pre2 Resolves: #1562606
2018-05-15 20:22:52 +00:00
Requires(pre): 389-ds-base >= %{ds_version}
Update to upstream 4.0.0 Remove Fedora patches, all are in the upstream release Remove the freeipa-server-strict package Update to upstream 4.0.0
2014-07-07 17:23:17 +00:00
Requires: fontawesome-fonts
Requires: open-sans-fonts
Update to upstream 4.1.0 see http://www.freeipa.org/page/Releases/4.1.0
2014-10-21 14:35:27 +00:00
Requires: openssl
Update to upstream 4.2.1
2015-09-07 16:41:00 +00:00
Requires: softhsm >= 2.0.0rc1-1
Update to upstream 4.1.0 see http://www.freeipa.org/page/Releases/4.1.0
2014-10-21 14:35:27 +00:00
Requires: p11-kit
Update to upstream 4.2.1
2015-09-07 16:41:00 +00:00
Requires: %{etc_systemd_dir}
Update to upstream 4.2.2
2015-10-08 08:51:27 +00:00
Requires: gzip
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
Requires: oddjob
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
# 0.7.0-2: https://pagure.io/gssproxy/pull-request/172
Requires: gssproxy >= 0.7.0-2
Update to upstream 4.7.1
2018-10-05 19:51:43 +00:00
Requires: sssd-dbus >= %{sssd_version}
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
Requires: libpwquality
Requires: cracklib-dicts
Update to upstream 4.1.0 see http://www.freeipa.org/page/Releases/4.1.0
2014-10-21 14:35:27 +00:00
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
Provides: %{alt_name}-server = %{version}
Update to upstream 4.1.0 see http://www.freeipa.org/page/Releases/4.1.0
2014-10-21 14:35:27 +00:00
Conflicts: %{alt_name}-server
Obsoletes: %{alt_name}-server < %{version}
Update to upstream 3.2.2 - Drop freeipa-server-selinux subpackage - Drop redundant directory /var/cache/ipa/sessions - Do not create /var/lib/ipa/pki-ca/publish, retain reference as ghost - Run ipa-upgradeconfig and server restart in posttrans to avoid inconsistency issues when there are still old parts of software (like entitlements plugin)
2013-07-18 13:07:48 +00:00
Update to upstream 3.3.0
2013-08-08 13:30:10 +00:00
# With FreeIPA 3.3, package freeipa-server-selinux was obsoleted as the
Update to upstream 3.2.2 - Drop freeipa-server-selinux subpackage - Drop redundant directory /var/cache/ipa/sessions - Do not create /var/lib/ipa/pki-ca/publish, retain reference as ghost - Run ipa-upgradeconfig and server restart in posttrans to avoid inconsistency issues when there are still old parts of software (like entitlements plugin)
2013-07-18 13:07:48 +00:00
# entire SELinux policy is stored in the system policy
Update to upstream 3.3.0
2013-08-08 13:30:10 +00:00
Obsoletes: freeipa-server-selinux < 3.3.0
Upstream 2.1.3 release
2011-10-19 15:07:43 +00:00
Update to upstream 4.2.1
2015-09-07 16:41:00 +00:00
# upgrade path from monolithic -server to -server + -server-dns
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
Obsoletes: %{name}-server <= 4.2.0
Update to 2.2.0 beta1, fix shell escaping to work with dogtag 9.0.18. - Update to upstream 2.2.0 beta 1 (2.1.90.rc1) - Set minimum n-v-r for pki-ca and pki-silent to 9.0.18. - Add Conflicts on mod_ssl - Update minimum n-v-r of 389-ds-base to 1.2.10.4 - Update minimum n-v-r of sssd to 1.8.0 - Update minimum n-v-r of slapi-nis to 0.38 - Update minimum n-v-r of pki-* to 9.0.18 - Update conflicts on bind-dyndb-ldap to < 1.1.0-0.9.b1 - Update conflicts on bind to < 9.9.0-1 - Drop requires on krb5-server-ldap - Add patch to remove escaping arguments to pkisilent
2012-03-19 18:30:56 +00:00
Update to upstream 3.2.0 GA - ipa-client-install fails if /etc/ipa does not exist (#961483) - Certificate status is not visible in Service and Host page (#956718) - ipa-client-install removes needed options from ldap.conf (#953991) - Handle socket.gethostbyaddr() exceptions when verifying hostnames (#953957) - Add triggerin scriptlet to support OpenSSH 6.2 (#953617) - Require nss 3.14.3-12.0 to address certutil certificate import errors (#953485) - Require pki-ca 10.0.2-3 to pull in fix for sslget and mixed IPv4/6 environments. (#953464) - ipa-client-install removes 'sss' from /etc/nsswitch.conf (#953453) - ipa-server-install --uninstall doesn't stop dirsrv instances (#953432) - Add requires for openldap-2.4.35-4 to pickup fixed SASL_NOCANON behavior for socket based connections (#960222) - Require libsss_nss_idmap-python - Add Conflicts on nss-pam-ldapd < 0.8.4. The mapping from uniqueMember to member is now done automatically and having it in the config file raises an error. - Add backup and restore tools, directory. - require at least systemd 38 which provides the journal (we no longer need to require syslog.target) - Update Requires on policycoreutils to 2.1.14-37 - Update Requires on selinux-policy to 3.12.1-42 - Update Requires on 389-ds-base to 1.3.1.0
2013-05-10 16:33:54 +00:00
# Versions of nss-pam-ldapd < 0.8.4 require a mapping from uniqueMember to
# member.
Conflicts: nss-pam-ldapd < 0.8.4
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
# RHEL spec file only: START: Do not build tests
%if 0%{?rhel} == 8
# ipa-tests subpackage was moved to separate srpm
Conflicts: ipa-tests < 3.3.3-9
%endif
# RHEL spec file only: END: Do not build tests
Initial import (#672986).
2011-01-28 04:33:55 +00:00
%description server
Update to upstream 4.2.2
2015-10-08 08:51:27 +00:00
IPA is an integrated solution to provide centrally managed Identity (users,
hosts, services), Authentication (SSO, 2FA), and Authorization
(host access control, SELinux user roles, services). The solution provides
features for further integration with Linux based clients (SUDO, automount)
and integration with Active Directory based infrastructures (Trusts).
If you are installing an IPA server, you need to install this package.
Initial import (#672986).
2011-01-28 04:33:55 +00:00
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
%package -n python3-ipaserver
Summary: Python libraries used by IPA server
BuildArch: noarch
%{?python_provide:%python_provide python3-ipaserver}
Requires: %{name}-server-common = %{version}-%{release}
Requires: %{name}-common = %{version}-%{release}
4.6.0-1: rebase to upstream 4.6.0 Signed-off-by: Tomas Krizek <tkrizek@redhat.com>
2017-09-04 10:01:19 +00:00
# we need pre-requires since earlier versions may break upgrade
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
Requires(pre): python3-ldap >= %{python_ldap_version}
Requires: python3-augeas
Requires: python3-custodia >= 0.3.1
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
Requires: python3-dbus
Requires: python3-dns >= 1.15
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
Requires: python3-gssapi >= 1.2.0
Requires: python3-ipaclient = %{version}-%{release}
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
Requires: python3-kdcproxy >= %{kdcproxy_version}
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
Requires: python3-lxml
Update to upstream 4.6.90.pre2 Resolves: #1562606
2018-05-15 20:22:52 +00:00
Requires: python3-pki >= %{pki_version}
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
Requires: python3-pyasn1 >= 0.3.2-2
Update to upstream 4.7.1
2018-10-05 19:51:43 +00:00
Requires: python3-sssdconfig >= %{sssd_version}
Update to FreeIPA 4.8.10
2020-09-26 09:23:38 +00:00
Requires: python3-psutil
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
Requires: rpm-libs
Update dependencies for FreeIPA 4.8.4 release
2019-12-14 12:53:43 +00:00
# Indirect dependency: use newer urllib3 with TLS 1.3 PHA support
%if 0%{?rhel}
Requires: python3-urllib3 >= 1.24.2-3
%else
Requires: python3-urllib3 >= 1.25.7
%endif
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
%description -n python3-ipaserver
IPA is an integrated solution to provide centrally managed Identity (users,
hosts, services), Authentication (SSO, 2FA), and Authorization
(host access control, SELinux user roles, services). The solution provides
features for further integration with Linux based clients (SUDO, automount)
and integration with Active Directory based infrastructures (Trusts).
If you are installing an IPA server, you need to install this package.
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
%package server-common
Summary: Common files used by IPA server
BuildArch: noarch
Requires: %{name}-client-common = %{version}-%{release}
Update dependencies for FreeIPA 4.8.4 release
2019-12-14 12:53:43 +00:00
Requires: httpd >= %{httpd_version}
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
Requires: systemd-units >= %{systemd_version}
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
Requires: custodia >= 0.3.1
%if 0%{?rhel} >= 8
Requires: redhat-logos-ipa >= 80.4
%endif
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
Provides: %{alt_name}-server-common = %{version}
Conflicts: %{alt_name}-server-common
Obsoletes: %{alt_name}-server-common < %{version}
%description server-common
IPA is an integrated solution to provide centrally managed Identity (users,
hosts, services), Authentication (SSO, 2FA), and Authorization
(host access control, SELinux user roles, services). The solution provides
features for further integration with Linux based clients (SUDO, automount)
and integration with Active Directory based infrastructures (Trusts).
If you are installing an IPA server, you need to install this package.
Update to upstream 4.2.1
2015-09-07 16:41:00 +00:00
%package server-dns
Summary: IPA integrated DNS server with support for automatic DNSSEC signing
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
BuildArch: noarch
Update to upstream 4.2.1
2015-09-07 16:41:00 +00:00
Requires: %{name}-server = %{version}-%{release}
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
Requires: bind-dyndb-ldap >= 11.2-2
Requires: bind >= %{bind_version}
Requires: bind-utils >= %{bind_version}
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
%if %{with bind_pkcs11}
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
Requires: bind-pkcs11 >= %{bind_version}
Requires: bind-pkcs11-utils >= %{bind_version}
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
%else
Requires: softhsm >= %{softhsm_version}
Requires: openssl-pkcs11 >= %{openssl_pkcs11_version}
%endif
# See https://bugzilla.redhat.com/show_bug.cgi?id=1825812
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
# RHEL 8.3+ and Fedora 32+ have 2.1
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
Requires: opendnssec >= 2.1.6-5
Update to upstream 4.6.90.pre1 Resolves: #1551830, #1551677, #1547959, #1496562, #1179220
2018-03-16 17:47:47 +00:00
%{?systemd_requires}
Update to upstream 4.2.1
2015-09-07 16:41:00 +00:00
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
Provides: %{alt_name}-server-dns = %{version}
Update to upstream 4.2.1
2015-09-07 16:41:00 +00:00
Conflicts: %{alt_name}-server-dns
Obsoletes: %{alt_name}-server-dns < %{version}
# upgrade path from monolithic -server to -server + -server-dns
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
Obsoletes: %{name}-server <= 4.2.0
Update to upstream 4.2.1
2015-09-07 16:41:00 +00:00
%description server-dns
IPA integrated DNS server with support for automatic DNSSEC signing.
Integrated DNS server is BIND 9. OpenDNSSEC provides key management.
Update to upstream 3.0.0 beta 1
2012-07-02 19:55:25 +00:00
%package server-trust-ad
Summary: Virtual package to install packages required for Active Directory trusts
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
Requires: %{name}-server = %{version}-%{release}
Requires: %{name}-common = %{version}-%{release}
4.6.1-1: rebase to upstream 4.6.1 - Fixes #1491053 Firefox reports insecure TLS configuration when visiting FreeIPA web UI after standard server deployment Signed-off-by: Tomas Krizek <tkrizek@redhat.com>
2017-09-22 11:44:05 +00:00
Update to upstream 4.1.0 see http://www.freeipa.org/page/Releases/4.1.0
2014-10-21 14:35:27 +00:00
Requires: samba >= %{samba_version}
Require samba packages instead of obsoleted samba4 packages
2012-10-02 06:36:19 +00:00
Requires: samba-winbind
Update to upstream 3.0.0 beta 1
2012-07-02 19:55:25 +00:00
Requires: libsss_idmap
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
%if 0%{?rhel}
Obsoletes: ipa-idoverride-memberof-plugin <= 0.1
%endif
4.6.3-1: rebase to upstream 4.6.3
2018-01-31 17:01:27 +00:00
Requires(post): python3
4.6.1-1: rebase to upstream 4.6.1 - Fixes #1491053 Firefox reports insecure TLS configuration when visiting FreeIPA web UI after standard server deployment Signed-off-by: Tomas Krizek <tkrizek@redhat.com>
2017-09-22 11:44:05 +00:00
Requires: python3-samba
Requires: python3-libsss_nss_idmap
Requires: python3-sss
Updated to upstream 3.0.0 GA - Set minimum for samba to 4.0.0-153. - Make sure server-trust-ad subpackage alternates winbind_krb5_locator.so plugin to /dev/null since they cannot be used when trusts are configured - Restrict krb5-server to 1.10. - Update minimum for 389-ds-base to 1.3.0 - Add directory /var/lib/ipa/pki-ca/publish for CRL published by pki-ca - Add Requires on zip for generating FF browser extension
2012-10-12 15:46:47 +00:00
# We use alternatives to divert winbind_krb5_locator.so plugin to libkrb5
Update to upstream 3.2.0 Prerelease 1 Spec file was also merged with up-to-date upstream reference spec file to keep them consistent.
2013-04-02 16:47:49 +00:00
# on the installes where server-trust-ad subpackage is installed because
Updated to upstream 3.0.0 GA - Set minimum for samba to 4.0.0-153. - Make sure server-trust-ad subpackage alternates winbind_krb5_locator.so plugin to /dev/null since they cannot be used when trusts are configured - Restrict krb5-server to 1.10. - Update minimum for 389-ds-base to 1.3.0 - Add directory /var/lib/ipa/pki-ca/publish for CRL published by pki-ca - Add Requires on zip for generating FF browser extension
2012-10-12 15:46:47 +00:00
# IPA AD trusts cannot be used at the same time with the locator plugin
# since Winbindd will be configured in a different mode
Requires(post): %{_sbindir}/update-alternatives
Requires(postun): %{_sbindir}/update-alternatives
Requires(preun): %{_sbindir}/update-alternatives
Update to upstream 3.0.0 beta 1
2012-07-02 19:55:25 +00:00
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
Provides: %{alt_name}-server-trust-ad = %{version}
Update to upstream 4.1.0 see http://www.freeipa.org/page/Releases/4.1.0
2014-10-21 14:35:27 +00:00
Conflicts: %{alt_name}-server-trust-ad
Obsoletes: %{alt_name}-server-trust-ad < %{version}
Update to upstream 3.0.0 beta 1
2012-07-02 19:55:25 +00:00
%description server-trust-ad
Update to upstream 3.3.1
2013-08-29 14:56:40 +00:00
Cross-realm trusts with Active Directory in IPA require working Samba 4
installation. This package is provided for convenience to install all required
dependencies at once.
Update to upstream 3.0.0 beta 1
2012-07-02 19:55:25 +00:00
FreeIPA 4.8.5
2020-03-17 14:12:01 +00:00
# ONLY_CLIENT
%endif
Initial import (#672986).
2011-01-28 04:33:55 +00:00
%package client
Summary: IPA authentication for use on clients
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
Requires: %{name}-client-common = %{version}-%{release}
Requires: %{name}-common = %{version}-%{release}
4.6.3-1: rebase to upstream 4.6.3
2018-01-31 17:01:27 +00:00
Requires: python3-gssapi >= 1.2.0-5
4.6.0-1: rebase to upstream 4.6.0 Signed-off-by: Tomas Krizek <tkrizek@redhat.com>
2017-09-04 10:01:19 +00:00
Requires: python3-ipaclient = %{version}-%{release}
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
Requires: python3-ldap >= %{python_ldap_version}
Update to upstream 4.7.1
2018-10-05 19:51:43 +00:00
Requires: python3-sssdconfig >= %{sssd_version}
Update to 2.1.0
2011-08-16 21:16:12 +00:00
Requires: cyrus-sasl-gssapi%{?_isa}
Update to upstream 4.6.90.pre2 Resolves: #1562606
2018-05-15 20:22:52 +00:00
Requires: chrony
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
Requires: krb5-workstation >= %{krb5_version}
Update to upstream 4.6.90.pre2 Resolves: #1562606
2018-05-15 20:22:52 +00:00
Requires: authselect >= 0.4-2
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
Requires: curl
Update to upstream 4.4.1 release
2016-09-01 13:47:48 +00:00
# NIS domain name config: /usr/lib/systemd/system/*-domainname.service
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
# All Fedora 28+ and RHEL8+ contain the service in hostname package
*-domainname.service moved to the hostname package in F29 Resolves: #1592355
2018-06-19 17:12:16 +00:00
Requires: hostname
Update to upstream 3.2.0 Prerelease 1 Spec file was also merged with up-to-date upstream reference spec file to keep them consistent.
2013-04-02 16:47:49 +00:00
Requires: libcurl >= 7.21.7-2
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
%if %{with ipa_join_xml}
Update to upstream 3.2.0 Prerelease 1 Spec file was also merged with up-to-date upstream reference spec file to keep them consistent.
2013-04-02 16:47:49 +00:00
Requires: xmlrpc-c >= 1.27.4
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
%else
Requires: jansson
%endif
Update to upstream 4.7.1
2018-10-05 19:51:43 +00:00
Requires: sssd-ipa >= %{sssd_version}
Update spec file
2019-04-29 20:01:26 +00:00
Requires: certmonger >= %{certmonger_version}
Update to upstream 4.6.90.pre2 Resolves: #1562606
2018-05-15 20:22:52 +00:00
Requires: nss-tools >= %{nss_version}
- Update to upstream freeipa-2.0.0.rc2 - Set minimum version of python-nss to 0.11 to make sure IPv6 support is in - Set minimum version of sssd to 1.5.1 - Patch to include SuiteSpotGroup when setting up 389-ds instances - Move a lot of BuildRequires so this will build with ONLY_CLIENT enabled
2011-02-25 23:12:29 +00:00
Requires: bind-utils
- Updated to upstream 2.2.0 GA - Update minimum n-v-r of certmonger to 0.53 - Update minimum n-v-r of slapi-nis to 0.40 - Add Requires in client to oddjob-mkhomedir and python-krbV - Update minimum selinux-policy to 3.10.0-110
2012-05-03 18:38:01 +00:00
Requires: oddjob-mkhomedir
Update to upstream 3.0.0 beta 1
2012-07-02 19:55:25 +00:00
Requires: libsss_autofs
Requires: autofs
Requires: libnfsidmap
Requires: nfs-utils
Update to upstream 4.7.1
2018-10-05 19:51:43 +00:00
Requires: sssd-tools >= %{sssd_version}
Backport additional spec fixes from upstream - Remove redundat Requires versions that are already in Fedora 17 - Replace python-crypto Requires with m2crypto - Add missing Requires(post) for client and server-trust-ad subpackages - Restart httpd service when server-trust-ad subpackage is installed - Bump selinux-policy Requires to pick up PKI/LDAP port labeling fixes
2012-12-20 09:33:39 +00:00
Requires(post): policycoreutils
Initial import (#672986).
2011-01-28 04:33:55 +00:00
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
Provides: %{alt_name}-client = %{version}
Update to upstream 4.1.0 see http://www.freeipa.org/page/Releases/4.1.0
2014-10-21 14:35:27 +00:00
Conflicts: %{alt_name}-client
Obsoletes: %{alt_name}-client < %{version}
Initial import (#672986).
2011-01-28 04:33:55 +00:00
Update to upstream 4.4.1 release
2016-09-01 13:47:48 +00:00
Provides: %{alt_name}-admintools = %{version}
Conflicts: %{alt_name}-admintools
Obsoletes: %{alt_name}-admintools < 4.4.1
Obsoletes: %{name}-admintools < 4.4.1
Provides: %{name}-admintools = %{version}-%{release}
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
%if 0%{?rhel} == 8
# Conflict with crypto-policies < 20200629-1 to get AD-SUPPORT policy module
Conflicts: crypto-policies < 20200629-1
%endif
Initial import (#672986).
2011-01-28 04:33:55 +00:00
%description client
Update to upstream 4.2.2
2015-10-08 08:51:27 +00:00
IPA is an integrated solution to provide centrally managed Identity (users,
hosts, services), Authentication (SSO, 2FA), and Authorization
(host access control, SELinux user roles, services). The solution provides
features for further integration with Linux based clients (SUDO, automount)
and integration with Active Directory based infrastructures (Trusts).
If your network uses IPA for authentication, this package should be
installed on every client machine.
Update to upstream 4.4.1 release
2016-09-01 13:47:48 +00:00
This package provides command-line tools for IPA administrators.
Initial import (#672986).
2011-01-28 04:33:55 +00:00
FreeIPA 4.8.0 release
2019-07-03 07:26:16 +00:00
%package client-samba
Summary: Tools to configure Samba on IPA client
Group: System Environment/Base
Requires: %{name}-client = %{version}-%{release}
Requires: python3-samba
Requires: samba-client
Requires: samba-winbind
Requires: samba-common-tools
Requires: samba
Requires: sssd-winbind-idmap
Requires: tdb-tools
Requires: cifs-utils
%description client-samba
This package provides command-line tools to deploy Samba domain member
on the machine enrolled into a FreeIPA environment
FreeIPA 4.8.7 upstream release
2020-06-10 20:45:00 +00:00
%package client-epn
Summary: Tools to configure Expiring Password Notification in IPA
Group: System Environment/Base
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
Requires: %{name}-client = %{version}-%{release}
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
Requires: systemd-units >= %{systemd_version}
Requires(post): systemd-units >= %{systemd_version}
Requires(preun): systemd-units >= %{systemd_version}
Requires(postun): systemd-units >= %{systemd_version}
FreeIPA 4.8.7 upstream release
2020-06-10 20:45:00 +00:00
%description client-epn
This package provides a service to collect and send expiring password
notifications via email (SMTP).
Update to upstream 4.3.1
2016-03-04 14:30:38 +00:00
%package -n python3-ipaclient
Summary: Python libraries used by IPA client
BuildArch: noarch
%{?python_provide:%python_provide python3-ipaclient}
Requires: %{name}-client-common = %{version}-%{release}
Requires: %{name}-common = %{version}-%{release}
Requires: python3-ipalib = %{version}-%{release}
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
Requires: python3-augeas
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
Requires: python3-dns >= 1.15
Requires: python3-jinja2
Update to upstream 4.3.1
2016-03-04 14:30:38 +00:00
%description -n python3-ipaclient
IPA is an integrated solution to provide centrally managed Identity (users,
hosts, services), Authentication (SSO, 2FA), and Authorization
(host access control, SELinux user roles, services). The solution provides
features for further integration with Linux based clients (SUDO, automount)
and integration with Active Directory based infrastructures (Trusts).
If your network uses IPA for authentication, this package should be
installed on every client machine.
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
%package client-common
Summary: Common files used by IPA client
BuildArch: noarch
Provides: %{alt_name}-client-common = %{version}
Conflicts: %{alt_name}-client-common
Obsoletes: %{alt_name}-client-common < %{version}
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
# python2-ipa* packages are no longer available in 4.8.
Obsoletes: python2-ipaclient < 4.8.0-1
Obsoletes: python2-ipalib < 4.8.0-1
Obsoletes: python2-ipaserver < 4.8.0-1
Obsoletes: python2-ipatests < 4.8.0-1
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
%description client-common
IPA is an integrated solution to provide centrally managed Identity (users,
hosts, services), Authentication (SSO, 2FA), and Authorization
(host access control, SELinux user roles, services). The solution provides
features for further integration with Linux based clients (SUDO, automount)
and integration with Active Directory based infrastructures (Trusts).
If your network uses IPA for authentication, this package should be
installed on every client machine.
%package python-compat
Summary: Compatiblity package for Python libraries used by IPA
BuildArch: noarch
Obsoletes: %{name}-python < 4.2.91
Provides: %{name}-python = %{version}-%{release}
Requires: %{name}-common = %{version}-%{release}
4.6.0-1: rebase to upstream 4.6.0 Signed-off-by: Tomas Krizek <tkrizek@redhat.com>
2017-09-04 10:01:19 +00:00
Requires: python3-ipalib = %{version}-%{release}
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
Provides: %{alt_name}-python-compat = %{version}
Conflicts: %{alt_name}-python-compat
Obsoletes: %{alt_name}-python-compat < %{version}
Obsoletes: %{alt_name}-python < 4.2.91
Provides: %{alt_name}-python = %{version}
%description python-compat
IPA is an integrated solution to provide centrally managed Identity (users,
hosts, services), Authentication (SSO, 2FA), and Authorization
(host access control, SELinux user roles, services). The solution provides
features for further integration with Linux based clients (SUDO, automount)
and integration with Active Directory based infrastructures (Trusts).
This is a compatibility package to accommodate %{name}-python split into
Update spec file
2019-04-29 20:01:26 +00:00
python3-ipalib and %{name}-common. Packages still depending on
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
%{name}-python should be fixed to depend on python2-ipaclient or
%{name}-common instead.
Update spec file
2019-04-29 20:01:26 +00:00
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
%package -n python3-ipalib
Summary: Python3 libraries used by IPA
Update to upstream 4.3.1
2016-03-04 14:30:38 +00:00
BuildArch: noarch
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
%{?python_provide:%python_provide python3-ipalib}
Provides: python3-ipapython = %{version}-%{release}
%{?python_provide:%python_provide python3-ipapython}
Provides: python3-ipaplatform = %{version}-%{release}
%{?python_provide:%python_provide python3-ipaplatform}
Requires: %{name}-common = %{version}-%{release}
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
# we need pre-requires since earlier versions may break upgrade
Requires(pre): python3-ldap >= %{python_ldap_version}
Requires: gnupg2
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
Requires: keyutils
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
Requires: python3-cffi
4.6.0-1: rebase to upstream 4.6.0 Signed-off-by: Tomas Krizek <tkrizek@redhat.com>
2017-09-04 10:01:19 +00:00
Requires: python3-cryptography >= 1.6
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
Requires: python3-dateutil
Requires: python3-dbus
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
Requires: python3-dns >= 1.15
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
Requires: python3-gssapi >= 1.2.0
Requires: python3-jwcrypto >= 0.4.2
Requires: python3-libipa_hbac
Requires: python3-netaddr >= %{python_netaddr_version}
Update to upstream 4.4.1 release
2016-09-01 13:47:48 +00:00
Requires: python3-netifaces >= 0.10.4
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
Requires: python3-pyasn1 >= 0.3.2-2
Requires: python3-pyasn1-modules >= 0.3.2-2
Update to upstream 4.4.1 release
2016-09-01 13:47:48 +00:00
Requires: python3-pyusb
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
Requires: python3-qrcode-core >= 5.0.0
Requires: python3-requests
Requires: python3-six
Requires: python3-sss-murmur
Requires: python3-yubico >= 1.3.2-7
platform-python only on RHEL8
2021-02-19 21:28:16 +00:00
%if 0%{?rhel} && 0%{?rhel} == 8
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
Requires: platform-python-setuptools
%else
Requires: python3-setuptools
%endif
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
%description -n python3-ipalib
IPA is an integrated solution to provide centrally managed Identity (users,
hosts, services), Authentication (SSO, 2FA), and Authorization
(host access control, SELinux user roles, services). The solution provides
features for further integration with Linux based clients (SUDO, automount)
and integration with Active Directory based infrastructures (Trusts).
If you are using IPA with Python 3, you need to install this package.
%package common
Summary: Common files used by IPA
BuildArch: noarch
Update to upstream 4.4.1 release
2016-09-01 13:47:48 +00:00
Conflicts: %{name}-python < 4.2.91
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
Provides: %{alt_name}-common = %{version}
Conflicts: %{alt_name}-common
Obsoletes: %{alt_name}-common < %{version}
Conflicts: %{alt_name}-python < %{version}
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
%if %{with selinux}
Roll up post-release fixes from upstream Move freeipa-selinux to be a dependency of freeipa-common instead of freeipa-server as client is also using some of the defined contexts.
2020-03-21 20:41:22 +00:00
# This ensures that the *-selinux package and all it’s dependencies are not
# pulled into containers and other systems that do not use SELinux. The
# policy defines types and file contexts for client and server.
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
Requires: (%{name}-selinux if selinux-policy-%{selinuxtype})
Roll up post-release fixes from upstream Move freeipa-selinux to be a dependency of freeipa-common instead of freeipa-server as client is also using some of the defined contexts.
2020-03-21 20:41:22 +00:00
%endif
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
%description common
Update to upstream 4.2.2
2015-10-08 08:51:27 +00:00
IPA is an integrated solution to provide centrally managed Identity (users,
hosts, services), Authentication (SSO, 2FA), and Authorization
(host access control, SELinux user roles, services). The solution provides
features for further integration with Linux based clients (SUDO, automount)
and integration with Active Directory based infrastructures (Trusts).
If you are using IPA, you need to install this package.
Initial import (#672986).
2011-01-28 04:33:55 +00:00
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
%if %{with ipatests}
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
%package -n python3-ipatests
Summary: IPA tests and test tools
BuildArch: noarch
%{?python_provide:%python_provide python3-ipatests}
Update to upstream 4.4.1 release
2016-09-01 13:47:48 +00:00
Requires: python3-ipaclient = %{version}-%{release}
4.6.0-1: rebase to upstream 4.6.0 Signed-off-by: Tomas Krizek <tkrizek@redhat.com>
2017-09-04 10:01:19 +00:00
Requires: python3-ipaserver = %{version}-%{release}
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
Requires: iptables
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
Requires: python3-coverage
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
Requires: python3-cryptography >= 1.6
Fix ipatests dependency to python3-pexpect Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2021-02-15 19:34:30 +00:00
Requires: python3-pexpect
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
%if 0%{?fedora}
# These packages do not exist on RHEL and for ipatests use
# they are installed on the controller through other means
Requires: ldns-utils
Update to FreeIPA 4.9.2 New upstream release. Add RHEL/Fedora ELN-only branding patch. Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2021-02-15 19:02:25 +00:00
# update-crypto-policies
Requires: crypto-policies-scripts
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
Requires: python3-polib
FreeIPA 4.8.7 upstream release
2020-06-10 20:45:00 +00:00
Requires: python3-pytest >= 3.9.1
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
Requires: python3-pytest-multihost >= 0.5
Requires: python3-pytest-sourceorder
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
Requires: sshpass
%endif
Update to upstream 4.7.1
2018-10-05 19:51:43 +00:00
Requires: python3-sssdconfig >= %{sssd_version}
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
Requires: tar
Requires: xz
FreeIPA 4.8.6 release
2020-03-27 07:35:21 +00:00
Requires: openssh-clients
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
%if 0%{?rhel}
AutoReqProv: no
%endif
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
%description -n python3-ipatests
IPA is an integrated solution to provide centrally managed Identity (users,
hosts, services), Authentication (SSO, 2FA), and Authorization
(host access control, SELinux user roles, services). The solution provides
features for further integration with Linux based clients (SUDO, automount)
and integration with Active Directory based infrastructures (Trusts).
This package contains tests that verify IPA functionality under Python 3.
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
# with ipatests
FreeIPA 4.8.5
2020-03-17 14:12:01 +00:00
%endif
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
%if %{with selinux}
FreeIPA 4.8.5
2020-03-17 14:12:01 +00:00
# SELinux subpackage
%package selinux
Summary: FreeIPA SELinux policy
BuildArch: noarch
Requires: selinux-policy-%{selinuxtype}
Requires(post): selinux-policy-%{selinuxtype}
%{?selinux_requires}
%description selinux
Custom SELinux policy module for FreeIPA
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
# with selinux
FreeIPA 4.8.5
2020-03-17 14:12:01 +00:00
%endif
Update to upstream 3.3.0
2013-08-08 13:30:10 +00:00
Initial import (#672986).
2011-01-28 04:33:55 +00:00
%prep
Fix only client build for Fedora>=28 and RHEL>7, readd special patch handing
2018-09-04 10:14:16 +00:00
# Update timestamps on the files touched by a patch, to avoid non-equal
# .pyc/.pyo files across the multilib peers within a build, where "Level"
# is the patch prefix option (e.g. -p1)
# Taken from specfile for sssd and python-simplejson
UpdateTimestamps() {
Level=$1
PatchFile=$2
# Locate the affected files:
for f in $(diffstat $Level -l $PatchFile); do
# Set the files to have the same timestamp as that of the patch:
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
touch -c -r $PatchFile $f
Fix only client build for Fedora>=28 and RHEL>7, readd special patch handing
2018-09-04 10:14:16 +00:00
done
}
Fix build directory location for release candidates
2020-11-18 10:00:47 +00:00
%setup -n freeipa-%{version}%{?rc_version} -q
Fix only client build for Fedora>=28 and RHEL>7, readd special patch handing
2018-09-04 10:14:16 +00:00
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
# To allow proper application patches to the stripped po files, strip originals
pushd po
for i in *.po ; do
msgattrib --translated --no-fuzzy --no-location -s $i > $i.tmp || exit 1
mv $i.tmp $i || exit 1
done
popd
Fix only client build for Fedora>=28 and RHEL>7, readd special patch handing
2018-09-04 10:14:16 +00:00
for p in %patches ; do
%__patch -p1 -i $p
UpdateTimestamps -p1 $p
done
Initial import (#672986).
2011-01-28 04:33:55 +00:00
%build
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
# PATH is workaround for https://bugzilla.redhat.com/show_bug.cgi?id=1005235
export PATH=/usr/bin:/usr/sbin:$PATH
Update to upstream 4.6.90.pre1 Resolves: #1551830, #1551677, #1547959, #1496562, #1179220
2018-03-16 17:47:47 +00:00
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
export PYTHON=%{__python3}
Update to FreeIPA 4.8.10
2020-09-26 09:23:38 +00:00
autoreconf -ivf
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
%configure --with-vendor-suffix=-%{release} \
%{enable_server_option} \
%{with_ipatests_option} \
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
%{with_ipa_join_xml_option} \
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
%{linter_options}
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
# run build in default dir
# -Onone is workaround for https://bugzilla.redhat.com/show_bug.cgi?id=1398405
%make_build -Onone
Initial import (#672986).
2011-01-28 04:33:55 +00:00
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
%check
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
make %{?_smp_mflags} check VERBOSE=yes LIBDIR=%{_libdir}
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
Initial import (#672986).
2011-01-28 04:33:55 +00:00
%install
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
# Please put as much logic as possible into make install. It allows:
# - easier porting to other distributions
# - rapid devel & install cycle using make install
# (instead of full RPM build and installation each time)
#
# All files and directories created by spec install should be marked as ghost.
# (These are typically configuration files created by IPA installer.)
# All other artifacts should be created by make install.
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
%make_install
# don't package ipasphinx for now
rm -rf %{buildroot}%{python3_sitelib}/ipasphinx*
Update to upstream 4.7.0 - New BuildRequires for nodejs and uglify-js - New Requires for 389-ds-base-legacy-tools in server (RHBZ#1606541) - Do not build python2-ipaserver and python2-ipatests for Fedora 29 and up - Do not build any python2 packages for Fedora 30 - Added ipatest man pages to python3-ipatests packages also - Added ipatest bindir links to python3-ipatests for Fedora up to 28 - Dropped explicit copy of freeipa.template, install is doing this now - Added upstream fix: (f3faecb) Fix $-style format string in ipa_ldap_init - Added upstream fix: (4b592fe,1a7baa2) Added reason to raise of errors.NotFound
2018-07-26 11:37:30 +00:00
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
%if %{with ipatests}
FreeIPA 4.8.5
2020-03-17 14:12:01 +00:00
mv %{buildroot}%{_bindir}/ipa-run-tests %{buildroot}%{_bindir}/ipa-run-tests-%{python3_version}
mv %{buildroot}%{_bindir}/ipa-test-config %{buildroot}%{_bindir}/ipa-test-config-%{python3_version}
mv %{buildroot}%{_bindir}/ipa-test-task %{buildroot}%{_bindir}/ipa-test-task-%{python3_version}
ln -rs %{buildroot}%{_bindir}/ipa-run-tests-%{python3_version} %{buildroot}%{_bindir}/ipa-run-tests-3
ln -rs %{buildroot}%{_bindir}/ipa-test-config-%{python3_version} %{buildroot}%{_bindir}/ipa-test-config-3
ln -rs %{buildroot}%{_bindir}/ipa-test-task-%{python3_version} %{buildroot}%{_bindir}/ipa-test-task-3
ln -frs %{buildroot}%{_bindir}/ipa-run-tests-%{python3_version} %{buildroot}%{_bindir}/ipa-run-tests
ln -frs %{buildroot}%{_bindir}/ipa-test-config-%{python3_version} %{buildroot}%{_bindir}/ipa-test-config
ln -frs %{buildroot}%{_bindir}/ipa-test-task-%{python3_version} %{buildroot}%{_bindir}/ipa-test-task
# with_ipatests
%endif
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
# remove files which are useful only for make uninstall
find %{buildroot} -wholename '*/site-packages/*/install_files.txt' -exec rm {} \;
Initial import (#672986).
2011-01-28 04:33:55 +00:00
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
%if 0%{?rhel}
# RHEL spec file only: START
# Moved branding logos and background to redhat-logos-ipa-80.4:
# header-logo.png, login-screen-background.jpg, login-screen-logo.png,
# product-name.png
rm -f %{buildroot}%{_usr}/share/ipa/ui/images/header-logo.png
rm -f %{buildroot}%{_usr}/share/ipa/ui/images/login-screen-background.jpg
rm -f %{buildroot}%{_usr}/share/ipa/ui/images/login-screen-logo.png
rm -f %{buildroot}%{_usr}/share/ipa/ui/images/product-name.png
%endif
# RHEL spec file only: END
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
%find_lang %{gettext_domain}
Update to upstream 4.1.0 see http://www.freeipa.org/page/Releases/4.1.0
2014-10-21 14:35:27 +00:00
Initial import (#672986).
2011-01-28 04:33:55 +00:00
%if ! %{ONLY_CLIENT}
# Remove .la files from libtool - we don't want to package
# these files
rm %{buildroot}/%{plugin_dir}/libipa_pwd_extop.la
rm %{buildroot}/%{plugin_dir}/libipa_enrollment_extop.la
rm %{buildroot}/%{plugin_dir}/libipa_winsync.la
rm %{buildroot}/%{plugin_dir}/libipa_repl_version.la
rm %{buildroot}/%{plugin_dir}/libipa_uuid.la
rm %{buildroot}/%{plugin_dir}/libipa_modrdn.la
rm %{buildroot}/%{plugin_dir}/libipa_lockout.la
Update to upstream 3.0.0 beta 1
2012-07-02 19:55:25 +00:00
rm %{buildroot}/%{plugin_dir}/libipa_cldap.la
Update to upstream 3.2.0 Prerelease 1 Spec file was also merged with up-to-date upstream reference spec file to keep them consistent.
2013-04-02 16:47:49 +00:00
rm %{buildroot}/%{plugin_dir}/libipa_dns.la
Update to upstream 3.0.0 beta 1
2012-07-02 19:55:25 +00:00
rm %{buildroot}/%{plugin_dir}/libipa_sidgen.la
rm %{buildroot}/%{plugin_dir}/libipa_sidgen_task.la
rm %{buildroot}/%{plugin_dir}/libipa_extdom_extop.la
rm %{buildroot}/%{plugin_dir}/libipa_range_check.la
Update to upstream 4.1.0 see http://www.freeipa.org/page/Releases/4.1.0
2014-10-21 14:35:27 +00:00
rm %{buildroot}/%{plugin_dir}/libipa_otp_counter.la
Update to upstream 4.0.0 Remove Fedora patches, all are in the upstream release Remove the freeipa-server-strict package Update to upstream 4.0.0
2014-07-07 17:23:17 +00:00
rm %{buildroot}/%{plugin_dir}/libipa_otp_lasttoken.la
Update to upstream 4.2.1
2015-09-07 16:41:00 +00:00
rm %{buildroot}/%{plugin_dir}/libtopology.la
Update to upstream 2.2.0 alpha 1 (2.1.90.pre1) Remove unused patches, update tarball, sync spec to upstream spec ipa_kpasswd has been dropped upstream
2012-02-06 19:51:43 +00:00
rm %{buildroot}/%{_libdir}/krb5/plugins/kdb/ipadb.la
Update to upstream 3.0.0 beta 1
2012-07-02 19:55:25 +00:00
rm %{buildroot}/%{_libdir}/samba/pdb/ipasam.la
Initial import (#672986).
2011-01-28 04:33:55 +00:00
# So we can own our Apache configuration
mkdir -p %{buildroot}%{_sysconfdir}/httpd/conf.d/
/bin/touch %{buildroot}%{_sysconfdir}/httpd/conf.d/ipa.conf
Update to upstream 4.2.1
2015-09-07 16:41:00 +00:00
/bin/touch %{buildroot}%{_sysconfdir}/httpd/conf.d/ipa-kdc-proxy.conf
Upstream 2.1.3 release
2011-10-19 15:07:43 +00:00
/bin/touch %{buildroot}%{_sysconfdir}/httpd/conf.d/ipa-pki-proxy.conf
Initial import (#672986).
2011-01-28 04:33:55 +00:00
/bin/touch %{buildroot}%{_sysconfdir}/httpd/conf.d/ipa-rewrite.conf
Update to upstream 2.2.0 alpha 1 (2.1.90.pre1) Remove unused patches, update tarball, sync spec to upstream spec ipa_kpasswd has been dropped upstream
2012-02-06 19:51:43 +00:00
/bin/touch %{buildroot}%{_usr}/share/ipa/html/ca.crt
/bin/touch %{buildroot}%{_usr}/share/ipa/html/krb.con
/bin/touch %{buildroot}%{_usr}/share/ipa/html/krb5.ini
/bin/touch %{buildroot}%{_usr}/share/ipa/html/krbrealm.con
Update to 2.2.0 beta1, fix shell escaping to work with dogtag 9.0.18. - Update to upstream 2.2.0 beta 1 (2.1.90.rc1) - Set minimum n-v-r for pki-ca and pki-silent to 9.0.18. - Add Conflicts on mod_ssl - Update minimum n-v-r of 389-ds-base to 1.2.10.4 - Update minimum n-v-r of sssd to 1.8.0 - Update minimum n-v-r of slapi-nis to 0.38 - Update minimum n-v-r of pki-* to 9.0.18 - Update conflicts on bind-dyndb-ldap to < 1.1.0-0.9.b1 - Update conflicts on bind to < 9.9.0-1 - Drop requires on krb5-server-ldap - Add patch to remove escaping arguments to pkisilent
2012-03-19 18:30:56 +00:00
Updated to upstream 3.0.0 GA - Set minimum for samba to 4.0.0-153. - Make sure server-trust-ad subpackage alternates winbind_krb5_locator.so plugin to /dev/null since they cannot be used when trusts are configured - Restrict krb5-server to 1.10. - Update minimum for 389-ds-base to 1.3.0 - Add directory /var/lib/ipa/pki-ca/publish for CRL published by pki-ca - Add Requires on zip for generating FF browser extension
2012-10-12 15:46:47 +00:00
mkdir -p %{buildroot}%{_libdir}/krb5/plugins/libkrb5
touch %{buildroot}%{_libdir}/krb5/plugins/libkrb5/winbind_krb5_locator.so
FreeIPA 4.8.5
2020-03-17 14:12:01 +00:00
# ONLY_CLIENT
%endif
Initial import (#672986).
2011-01-28 04:33:55 +00:00
/bin/touch %{buildroot}%{_sysconfdir}/ipa/default.conf
Update to upstream 2.2.0 alpha 1 (2.1.90.pre1) Remove unused patches, update tarball, sync spec to upstream spec ipa_kpasswd has been dropped upstream
2012-02-06 19:51:43 +00:00
/bin/touch %{buildroot}%{_sysconfdir}/ipa/ca.crt
Update to upstream 4.1.0 see http://www.freeipa.org/page/Releases/4.1.0
2014-10-21 14:35:27 +00:00
%if ! %{ONLY_CLIENT}
Set min version of 389-ds-base to 1.2.8 Set min version of mod_nss 1.0.8-10 Set min version of selinux-policy to 3.9.7-27 Add dogtag themes to Requires Update to upstream freeipa-2.0.0.pre2
2011-02-03 21:55:42 +00:00
mkdir -p %{buildroot}%{_sysconfdir}/cron.d
FreeIPA 4.8.5
2020-03-17 14:12:01 +00:00
# ONLY_CLIENT
%endif
Update to upstream 3.0.0 beta 1
2012-07-02 19:55:25 +00:00
Initial import (#672986).
2011-01-28 04:33:55 +00:00
%if ! %{ONLY_CLIENT}
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
Initial import (#672986).
2011-01-28 04:33:55 +00:00
%post server
Update to upstream 3.2.0 Prerelease 1 Spec file was also merged with up-to-date upstream reference spec file to keep them consistent.
2013-04-02 16:47:49 +00:00
# NOTE: systemd specific section
Upstream 2.1.3 release
2011-10-19 15:07:43 +00:00
/bin/systemctl --system daemon-reload 2>&1 || :
Update to upstream 3.2.0 Prerelease 1 Spec file was also merged with up-to-date upstream reference spec file to keep them consistent.
2013-04-02 16:47:49 +00:00
# END
- Update to upstream GA release - Automatically apply updates when the package is upgraded
2011-03-24 21:57:00 +00:00
if [ $1 -gt 1 ] ; then
Update to upstream 3.2.0 Prerelease 1 Spec file was also merged with up-to-date upstream reference spec file to keep them consistent.
2013-04-02 16:47:49 +00:00
/bin/systemctl condrestart certmonger.service 2>&1 || :
- Update to upstream GA release - Automatically apply updates when the package is upgraded
2011-03-24 21:57:00 +00:00
fi
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
/bin/systemctl reload-or-try-restart dbus
/bin/systemctl reload-or-try-restart oddjobd
4.6.0-1: rebase to upstream 4.6.0 Signed-off-by: Tomas Krizek <tkrizek@redhat.com>
2017-09-04 10:01:19 +00:00
%tmpfiles_create ipa.conf
Initial import (#672986).
2011-01-28 04:33:55 +00:00
Update to upstream 2.2.0 alpha 1 (2.1.90.pre1) Remove unused patches, update tarball, sync spec to upstream spec ipa_kpasswd has been dropped upstream
2012-02-06 19:51:43 +00:00
%posttrans server
Update to upstream 4.3.1
2016-03-04 14:30:38 +00:00
# don't execute upgrade and restart of IPA when server is not installed
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
%{__python3} -c "import sys; from ipalib import facts; sys.exit(0 if facts.is_ipa_configured() else 1);" > /dev/null 2>&1
Update to upstream 4.3.1
2016-03-04 14:30:38 +00:00
Update to upstream 3.2.2 - Drop freeipa-server-selinux subpackage - Drop redundant directory /var/cache/ipa/sessions - Do not create /var/lib/ipa/pki-ca/publish, retain reference as ghost - Run ipa-upgradeconfig and server restart in posttrans to avoid inconsistency issues when there are still old parts of software (like entitlements plugin)
2013-07-18 13:07:48 +00:00
if [ $? -eq 0 ]; then
4.5.3-1: Update to upstream 4.5.3 Signed-off-by: Tomas Krizek <tkrizek@redhat.com>
2017-07-21 14:31:34 +00:00
# This is necessary for Fedora system upgrades which by default
# work with the network being offline
/bin/systemctl start network-online.target
Update to upstream 4.3.1
2016-03-04 14:30:38 +00:00
# Restart IPA processes. This must be also run in postrans so that plugins
4.6.3-1: rebase to upstream 4.6.3
2018-01-31 17:01:27 +00:00
# and software is in consistent state. This will also perform the
# system upgrade.
Update to upstream 4.3.1
2016-03-04 14:30:38 +00:00
# NOTE: systemd specific section
Update to upstream 4.0.0 Remove Fedora patches, all are in the upstream release Remove the freeipa-server-strict package Update to upstream 4.0.0
2014-07-07 17:23:17 +00:00
/bin/systemctl is-enabled ipa.service >/dev/null 2>&1
if [ $? -eq 0 ]; then
4.6.3-1: rebase to upstream 4.6.3
2018-01-31 17:01:27 +00:00
/bin/systemctl restart ipa.service >/dev/null
Update to upstream 4.0.0 Remove Fedora patches, all are in the upstream release Remove the freeipa-server-strict package Update to upstream 4.0.0
2014-07-07 17:23:17 +00:00
fi
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
/bin/systemctl is-enabled ipa-ccache-sweep.timer >/dev/null 2>&1
if [ $? -eq 1 ]; then
/bin/systemctl enable ipa-ccache-sweep.timer>/dev/null
fi
Update to upstream 3.2.2 - Drop freeipa-server-selinux subpackage - Drop redundant directory /var/cache/ipa/sessions - Do not create /var/lib/ipa/pki-ca/publish, retain reference as ghost - Run ipa-upgradeconfig and server restart in posttrans to avoid inconsistency issues when there are still old parts of software (like entitlements plugin)
2013-07-18 13:07:48 +00:00
fi
# END
Update to upstream 2.2.0 alpha 1 (2.1.90.pre1) Remove unused patches, update tarball, sync spec to upstream spec ipa_kpasswd has been dropped upstream
2012-02-06 19:51:43 +00:00
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
Initial import (#672986).
2011-01-28 04:33:55 +00:00
%preun server
if [ $1 = 0 ]; then
Update to upstream 3.2.0 Prerelease 1 Spec file was also merged with up-to-date upstream reference spec file to keep them consistent.
2013-04-02 16:47:49 +00:00
# NOTE: systemd specific section
Upstream 2.1.3 release
2011-10-19 15:07:43 +00:00
/bin/systemctl --quiet stop ipa.service || :
/bin/systemctl --quiet disable ipa.service || :
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
/bin/systemctl reload-or-try-restart dbus
/bin/systemctl reload-or-try-restart oddjobd
Update to upstream 3.2.0 Prerelease 1 Spec file was also merged with up-to-date upstream reference spec file to keep them consistent.
2013-04-02 16:47:49 +00:00
# END
Initial import (#672986).
2011-01-28 04:33:55 +00:00
fi
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
Update to upstream 3.2.0 Prerelease 1 Spec file was also merged with up-to-date upstream reference spec file to keep them consistent.
2013-04-02 16:47:49 +00:00
%pre server
# Stop ipa_kpasswd if it exists before upgrading so we don't have a
# zombie process when we're done.
if [ -e /usr/sbin/ipa_kpasswd ]; then
# NOTE: systemd specific section
/bin/systemctl stop ipa_kpasswd.service >/dev/null 2>&1 || :
# END
Initial import (#672986).
2011-01-28 04:33:55 +00:00
fi
Update to upstream 4.6.90.pre2 Resolves: #1562606
2018-05-15 20:22:52 +00:00
%pre server-common
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
# create users and groups
# create kdcproxy group and user
getent group kdcproxy >/dev/null || groupadd -f -r kdcproxy
getent passwd kdcproxy >/dev/null || useradd -r -g kdcproxy -s /sbin/nologin -d / -c "IPA KDC Proxy User" kdcproxy
# create ipaapi group and user
getent group ipaapi >/dev/null || groupadd -f -r ipaapi
getent passwd ipaapi >/dev/null || useradd -r -g ipaapi -s /sbin/nologin -d / -c "IPA Framework User" ipaapi
# add apache to ipaaapi group
id -Gn apache | grep '\bipaapi\b' >/dev/null || usermod apache -a -G ipaapi
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
Update to upstream 4.6.90.pre1 Resolves: #1551830, #1551677, #1547959, #1496562, #1179220
2018-03-16 17:47:47 +00:00
%post server-dns
%systemd_post ipa-dnskeysyncd.service ipa-ods-exporter.socket ipa-ods-exporter.service
%preun server-dns
%systemd_preun ipa-dnskeysyncd.service ipa-ods-exporter.socket ipa-ods-exporter.service
%postun server-dns
%systemd_postun ipa-dnskeysyncd.service ipa-ods-exporter.socket ipa-ods-exporter.service
Updated to upstream 3.0.0 GA - Set minimum for samba to 4.0.0-153. - Make sure server-trust-ad subpackage alternates winbind_krb5_locator.so plugin to /dev/null since they cannot be used when trusts are configured - Restrict krb5-server to 1.10. - Update minimum for 389-ds-base to 1.3.0 - Add directory /var/lib/ipa/pki-ca/publish for CRL published by pki-ca - Add Requires on zip for generating FF browser extension
2012-10-12 15:46:47 +00:00
%postun server-trust-ad
if [ "$1" -ge "1" ]; then
Update to upstream 3.3.1
2013-08-29 14:56:40 +00:00
if [ "`readlink %{_sysconfdir}/alternatives/winbind_krb5_locator.so`" == "/dev/null" ]; then
%{_sbindir}/alternatives --set winbind_krb5_locator.so /dev/null
fi
Updated to upstream 3.0.0 GA - Set minimum for samba to 4.0.0-153. - Make sure server-trust-ad subpackage alternates winbind_krb5_locator.so plugin to /dev/null since they cannot be used when trusts are configured - Restrict krb5-server to 1.10. - Update minimum for 389-ds-base to 1.3.0 - Add directory /var/lib/ipa/pki-ca/publish for CRL published by pki-ca - Add Requires on zip for generating FF browser extension
2012-10-12 15:46:47 +00:00
fi
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
Updated to upstream 3.0.0 GA - Set minimum for samba to 4.0.0-153. - Make sure server-trust-ad subpackage alternates winbind_krb5_locator.so plugin to /dev/null since they cannot be used when trusts are configured - Restrict krb5-server to 1.10. - Update minimum for 389-ds-base to 1.3.0 - Add directory /var/lib/ipa/pki-ca/publish for CRL published by pki-ca - Add Requires on zip for generating FF browser extension
2012-10-12 15:46:47 +00:00
%post server-trust-ad
%{_sbindir}/update-alternatives --install %{_libdir}/krb5/plugins/libkrb5/winbind_krb5_locator.so \
Update to upstream 3.3.1
2013-08-29 14:56:40 +00:00
winbind_krb5_locator.so /dev/null 90
Update to upstream 4.2.1
2015-09-07 16:41:00 +00:00
/bin/systemctl reload-or-try-restart dbus
/bin/systemctl reload-or-try-restart oddjobd
Update to upstream 3.2.2 - Drop freeipa-server-selinux subpackage - Drop redundant directory /var/cache/ipa/sessions - Do not create /var/lib/ipa/pki-ca/publish, retain reference as ghost - Run ipa-upgradeconfig and server restart in posttrans to avoid inconsistency issues when there are still old parts of software (like entitlements plugin)
2013-07-18 13:07:48 +00:00
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
Update to upstream 3.2.2 - Drop freeipa-server-selinux subpackage - Drop redundant directory /var/cache/ipa/sessions - Do not create /var/lib/ipa/pki-ca/publish, retain reference as ghost - Run ipa-upgradeconfig and server restart in posttrans to avoid inconsistency issues when there are still old parts of software (like entitlements plugin)
2013-07-18 13:07:48 +00:00
%posttrans server-trust-ad
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
%{__python3} -c "import sys; from ipalib import facts; sys.exit(0 if facts.is_ipa_configured() else 1);" > /dev/null 2>&1
Backport additional spec fixes from upstream - Remove redundat Requires versions that are already in Fedora 17 - Replace python-crypto Requires with m2crypto - Add missing Requires(post) for client and server-trust-ad subpackages - Restart httpd service when server-trust-ad subpackage is installed - Bump selinux-policy Requires to pick up PKI/LDAP port labeling fixes
2012-12-20 09:33:39 +00:00
if [ $? -eq 0 ]; then
Update to upstream 3.2.0 Prerelease 1 Spec file was also merged with up-to-date upstream reference spec file to keep them consistent.
2013-04-02 16:47:49 +00:00
# NOTE: systemd specific section
Backport additional spec fixes from upstream - Remove redundat Requires versions that are already in Fedora 17 - Replace python-crypto Requires with m2crypto - Add missing Requires(post) for client and server-trust-ad subpackages - Restart httpd service when server-trust-ad subpackage is installed - Bump selinux-policy Requires to pick up PKI/LDAP port labeling fixes
2012-12-20 09:33:39 +00:00
/bin/systemctl try-restart httpd.service >/dev/null 2>&1 || :
Update to upstream 3.2.0 Prerelease 1 Spec file was also merged with up-to-date upstream reference spec file to keep them consistent.
2013-04-02 16:47:49 +00:00
# END
Backport additional spec fixes from upstream - Remove redundat Requires versions that are already in Fedora 17 - Replace python-crypto Requires with m2crypto - Add missing Requires(post) for client and server-trust-ad subpackages - Restart httpd service when server-trust-ad subpackage is installed - Bump selinux-policy Requires to pick up PKI/LDAP port labeling fixes
2012-12-20 09:33:39 +00:00
fi
Updated to upstream 3.0.0 GA - Set minimum for samba to 4.0.0-153. - Make sure server-trust-ad subpackage alternates winbind_krb5_locator.so plugin to /dev/null since they cannot be used when trusts are configured - Restrict krb5-server to 1.10. - Update minimum for 389-ds-base to 1.3.0 - Add directory /var/lib/ipa/pki-ca/publish for CRL published by pki-ca - Add Requires on zip for generating FF browser extension
2012-10-12 15:46:47 +00:00
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
Updated to upstream 3.0.0 GA - Set minimum for samba to 4.0.0-153. - Make sure server-trust-ad subpackage alternates winbind_krb5_locator.so plugin to /dev/null since they cannot be used when trusts are configured - Restrict krb5-server to 1.10. - Update minimum for 389-ds-base to 1.3.0 - Add directory /var/lib/ipa/pki-ca/publish for CRL published by pki-ca - Add Requires on zip for generating FF browser extension
2012-10-12 15:46:47 +00:00
%preun server-trust-ad
if [ $1 -eq 0 ]; then
Update to upstream 3.3.1
2013-08-29 14:56:40 +00:00
%{_sbindir}/update-alternatives --remove winbind_krb5_locator.so /dev/null
Update to upstream 4.2.1
2015-09-07 16:41:00 +00:00
/bin/systemctl reload-or-try-restart dbus
/bin/systemctl reload-or-try-restart oddjobd
Updated to upstream 3.0.0 GA - Set minimum for samba to 4.0.0-153. - Make sure server-trust-ad subpackage alternates winbind_krb5_locator.so plugin to /dev/null since they cannot be used when trusts are configured - Restrict krb5-server to 1.10. - Update minimum for 389-ds-base to 1.3.0 - Add directory /var/lib/ipa/pki-ca/publish for CRL published by pki-ca - Add Requires on zip for generating FF browser extension
2012-10-12 15:46:47 +00:00
fi
Update to upstream 4.0.0 Remove Fedora patches, all are in the upstream release Remove the freeipa-server-strict package Update to upstream 4.0.0
2014-07-07 17:23:17 +00:00
Update to FreeIPA 4.8.10
2020-09-26 09:23:38 +00:00
# ONLY_CLIENT
%endif
FreeIPA 4.8.7 upstream release
2020-08-20 17:24:07 +00:00
%preun client-epn
%systemd_preun ipa-epn.service
%systemd_preun ipa-epn.timer
%postun client-epn
%systemd_postun ipa-epn.service
%systemd_postun ipa-epn.timer
%post client-epn
%systemd_post ipa-epn.service
%systemd_post ipa-epn.timer
Updated to upstream 3.1.0 GA - Set minimum for sssd to 1.9.2 - Set minimum for pki-ca to 10.0.0-1 - Set minimum for 389-ds-base to 1.3.0 - Set minimum for selinux-policy to 3.11.1-60 - Remove unneeded dogtag package requires
2012-12-10 20:52:46 +00:00
%post client
if [ $1 -gt 1 ] ; then
# Has the client been configured?
restore=0
test -f '/var/lib/ipa-client/sysrestore/sysrestore.index' && restore=$(wc -l '/var/lib/ipa-client/sysrestore/sysrestore.index' | awk '{print $1}')
if [ -f '/etc/sssd/sssd.conf' -a $restore -ge 2 ]; then
Update to upstream 3.3.1
2013-08-29 14:56:40 +00:00
if ! grep -E -q '/var/lib/sss/pubconf/krb5.include.d/' /etc/krb5.conf 2>/dev/null ; then
Updated to upstream 3.1.0 GA - Set minimum for sssd to 1.9.2 - Set minimum for pki-ca to 10.0.0-1 - Set minimum for 389-ds-base to 1.3.0 - Set minimum for selinux-policy to 3.11.1-60 - Remove unneeded dogtag package requires
2012-12-10 20:52:46 +00:00
echo "includedir /var/lib/sss/pubconf/krb5.include.d/" > /etc/krb5.conf.ipanew
cat /etc/krb5.conf >> /etc/krb5.conf.ipanew
Update to upstream 4.2.1
2015-09-07 16:41:00 +00:00
mv -Z /etc/krb5.conf.ipanew /etc/krb5.conf
Updated to upstream 3.1.0 GA - Set minimum for sssd to 1.9.2 - Set minimum for pki-ca to 10.0.0-1 - Set minimum for 389-ds-base to 1.3.0 - Set minimum for selinux-policy to 3.11.1-60 - Remove unneeded dogtag package requires
2012-12-10 20:52:46 +00:00
fi
fi
3.3.4-1 - Update to upstream 3.3.4 - Install CA anchor into standard location (#928478) - ipa-client-install part of ipa-server-install fails on reinstall (#1044994) - Remove mod_ssl workaround (RHEL bug #1029046) - Enable syncrepl plugin to support bind-dyndb-ldap 4.0
2014-01-28 12:37:46 +00:00
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
if [ $restore -ge 2 ]; then
if grep -E -q '\s*pkinit_anchors = FILE:/etc/ipa/ca.crt$' /etc/krb5.conf 2>/dev/null; then
sed -E 's|(\s*)pkinit_anchors = FILE:/etc/ipa/ca.crt$|\1pkinit_anchors = FILE:/var/lib/ipa-client/pki/kdc-ca-bundle.pem\n\1pkinit_pool = FILE:/var/lib/ipa-client/pki/ca-bundle.pem|' /etc/krb5.conf >/etc/krb5.conf.ipanew
mv -Z /etc/krb5.conf.ipanew /etc/krb5.conf
cp /etc/ipa/ca.crt /var/lib/ipa-client/pki/kdc-ca-bundle.pem
cp /etc/ipa/ca.crt /var/lib/ipa-client/pki/ca-bundle.pem
fi
Update to 4.8.2 - Replace %%{_libdir} macro in BuildRequires (#1746882) - Restore user-nsswitch.conf before calling authselect (#1746557) - ipa service-find does not list cifs service created by ipa-client-samba (#1731433) - Occasional 'whoami.data is undefined' error in FreeIPA web UI (#1699109) - ipa-kra-install fails due to fs.protected_regular=1 (#1698384)
2019-11-12 19:43:05 +00:00
%{__python3} -c 'from ipaclient.install.client import configure_krb5_snippet; configure_krb5_snippet()' >>/var/log/ipaupgrade.log 2>&1
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
%{__python3} -c 'from ipaclient.install.client import update_ipa_nssdb; update_ipa_nssdb()' >>/var/log/ipaupgrade.log 2>&1
Update to FreeIPA 4.8.10
2020-09-26 09:23:38 +00:00
SSH_CLIENT_SYSTEM_CONF="/etc/ssh/ssh_config"
if [ -f "$SSH_CLIENT_SYSTEM_CONF" ]; then
sed -E --in-place=.orig 's/^(HostKeyAlgorithms ssh-rsa,ssh-dss)$/# disabled by ipa-client update\n# \1/' "$SSH_CLIENT_SYSTEM_CONF"
fi
Update dependencies for FreeIPA 4.8.4 release
2019-12-14 12:53:43 +00:00
fi
Updated to upstream 3.1.0 GA - Set minimum for sssd to 1.9.2 - Set minimum for pki-ca to 10.0.0-1 - Set minimum for 389-ds-base to 1.3.0 - Set minimum for selinux-policy to 3.11.1-60 - Remove unneeded dogtag package requires
2012-12-10 20:52:46 +00:00
fi
Initial import (#672986).
2011-01-28 04:33:55 +00:00
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
%if %{with selinux}
FreeIPA 4.8.5
2020-03-17 14:12:01 +00:00
# SELinux contexts are saved so that only affected files can be
# relabeled after the policy module installation
%pre selinux
%selinux_relabel_pre -s %{selinuxtype}
%post selinux
FreeIPA 4.8.6 release
2020-03-27 07:35:21 +00:00
semodule -d ipa_custodia &> /dev/null || true;
FreeIPA 4.8.5
2020-03-17 14:12:01 +00:00
%selinux_modules_install -s %{selinuxtype} %{_datadir}/selinux/packages/%{selinuxtype}/%{modulename}.pp.bz2
%postun selinux
if [ $1 -eq 0 ]; then
%selinux_modules_uninstall -s %{selinuxtype} %{modulename}
FreeIPA 4.8.6 release
2020-03-27 07:35:21 +00:00
semodule -e ipa_custodia &> /dev/null || true;
FreeIPA 4.8.5
2020-03-17 14:12:01 +00:00
fi
%posttrans selinux
%selinux_relabel_post -s %{selinuxtype}
# with_selinux
%endif
Update to FreeIPA 4.8.10
2020-09-26 09:23:38 +00:00
%triggerin client -- openssh-server < 8.2
Update to upstream 3.2.0 GA - ipa-client-install fails if /etc/ipa does not exist (#961483) - Certificate status is not visible in Service and Host page (#956718) - ipa-client-install removes needed options from ldap.conf (#953991) - Handle socket.gethostbyaddr() exceptions when verifying hostnames (#953957) - Add triggerin scriptlet to support OpenSSH 6.2 (#953617) - Require nss 3.14.3-12.0 to address certutil certificate import errors (#953485) - Require pki-ca 10.0.2-3 to pull in fix for sslget and mixed IPv4/6 environments. (#953464) - ipa-client-install removes 'sss' from /etc/nsswitch.conf (#953453) - ipa-server-install --uninstall doesn't stop dirsrv instances (#953432) - Add requires for openldap-2.4.35-4 to pickup fixed SASL_NOCANON behavior for socket based connections (#960222) - Require libsss_nss_idmap-python - Add Conflicts on nss-pam-ldapd < 0.8.4. The mapping from uniqueMember to member is now done automatically and having it in the config file raises an error. - Add backup and restore tools, directory. - require at least systemd 38 which provides the journal (we no longer need to require syslog.target) - Update Requires on policycoreutils to 2.1.14-37 - Update Requires on selinux-policy to 3.12.1-42 - Update Requires on 389-ds-base to 1.3.1.0
2013-05-10 16:33:54 +00:00
# Has the client been configured?
restore=0
test -f '/var/lib/ipa-client/sysrestore/sysrestore.index' && restore=$(wc -l '/var/lib/ipa-client/sysrestore/sysrestore.index' | awk '{print $1}')
if [ -f '/etc/ssh/sshd_config' -a $restore -ge 2 ]; then
Update to upstream 3.3.1
2013-08-29 14:56:40 +00:00
if grep -E -q '^(AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys|PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u)$' /etc/ssh/sshd_config 2>/dev/null; then
Update to upstream 3.2.0 GA - ipa-client-install fails if /etc/ipa does not exist (#961483) - Certificate status is not visible in Service and Host page (#956718) - ipa-client-install removes needed options from ldap.conf (#953991) - Handle socket.gethostbyaddr() exceptions when verifying hostnames (#953957) - Add triggerin scriptlet to support OpenSSH 6.2 (#953617) - Require nss 3.14.3-12.0 to address certutil certificate import errors (#953485) - Require pki-ca 10.0.2-3 to pull in fix for sslget and mixed IPv4/6 environments. (#953464) - ipa-client-install removes 'sss' from /etc/nsswitch.conf (#953453) - ipa-server-install --uninstall doesn't stop dirsrv instances (#953432) - Add requires for openldap-2.4.35-4 to pickup fixed SASL_NOCANON behavior for socket based connections (#960222) - Require libsss_nss_idmap-python - Add Conflicts on nss-pam-ldapd < 0.8.4. The mapping from uniqueMember to member is now done automatically and having it in the config file raises an error. - Add backup and restore tools, directory. - require at least systemd 38 which provides the journal (we no longer need to require syslog.target) - Update Requires on policycoreutils to 2.1.14-37 - Update Requires on selinux-policy to 3.12.1-42 - Update Requires on 389-ds-base to 1.3.1.0
2013-05-10 16:33:54 +00:00
sed -r '
/^(AuthorizedKeysCommand(User|RunAs)|PubKeyAgentRunAs)[ \t]/ d
' /etc/ssh/sshd_config >/etc/ssh/sshd_config.ipanew
Update to upstream 4.4.1 release
2016-09-01 13:47:48 +00:00
if /usr/sbin/sshd -t -f /dev/null -o 'AuthorizedKeysCommand=/usr/bin/sss_ssh_authorizedkeys' -o 'AuthorizedKeysCommandUser=nobody' 2>/dev/null; then
Update to upstream 3.2.0 GA - ipa-client-install fails if /etc/ipa does not exist (#961483) - Certificate status is not visible in Service and Host page (#956718) - ipa-client-install removes needed options from ldap.conf (#953991) - Handle socket.gethostbyaddr() exceptions when verifying hostnames (#953957) - Add triggerin scriptlet to support OpenSSH 6.2 (#953617) - Require nss 3.14.3-12.0 to address certutil certificate import errors (#953485) - Require pki-ca 10.0.2-3 to pull in fix for sslget and mixed IPv4/6 environments. (#953464) - ipa-client-install removes 'sss' from /etc/nsswitch.conf (#953453) - ipa-server-install --uninstall doesn't stop dirsrv instances (#953432) - Add requires for openldap-2.4.35-4 to pickup fixed SASL_NOCANON behavior for socket based connections (#960222) - Require libsss_nss_idmap-python - Add Conflicts on nss-pam-ldapd < 0.8.4. The mapping from uniqueMember to member is now done automatically and having it in the config file raises an error. - Add backup and restore tools, directory. - require at least systemd 38 which provides the journal (we no longer need to require syslog.target) - Update Requires on policycoreutils to 2.1.14-37 - Update Requires on selinux-policy to 3.12.1-42 - Update Requires on 389-ds-base to 1.3.1.0
2013-05-10 16:33:54 +00:00
sed -ri '
s/^PubKeyAgent (.+) %u$/AuthorizedKeysCommand \1/
s/^AuthorizedKeysCommand .*$/\0\nAuthorizedKeysCommandUser nobody/
' /etc/ssh/sshd_config.ipanew
Update to upstream 4.4.1 release
2016-09-01 13:47:48 +00:00
elif /usr/sbin/sshd -t -f /dev/null -o 'AuthorizedKeysCommand=/usr/bin/sss_ssh_authorizedkeys' -o 'AuthorizedKeysCommandRunAs=nobody' 2>/dev/null; then
Update to upstream 3.2.0 GA - ipa-client-install fails if /etc/ipa does not exist (#961483) - Certificate status is not visible in Service and Host page (#956718) - ipa-client-install removes needed options from ldap.conf (#953991) - Handle socket.gethostbyaddr() exceptions when verifying hostnames (#953957) - Add triggerin scriptlet to support OpenSSH 6.2 (#953617) - Require nss 3.14.3-12.0 to address certutil certificate import errors (#953485) - Require pki-ca 10.0.2-3 to pull in fix for sslget and mixed IPv4/6 environments. (#953464) - ipa-client-install removes 'sss' from /etc/nsswitch.conf (#953453) - ipa-server-install --uninstall doesn't stop dirsrv instances (#953432) - Add requires for openldap-2.4.35-4 to pickup fixed SASL_NOCANON behavior for socket based connections (#960222) - Require libsss_nss_idmap-python - Add Conflicts on nss-pam-ldapd < 0.8.4. The mapping from uniqueMember to member is now done automatically and having it in the config file raises an error. - Add backup and restore tools, directory. - require at least systemd 38 which provides the journal (we no longer need to require syslog.target) - Update Requires on policycoreutils to 2.1.14-37 - Update Requires on selinux-policy to 3.12.1-42 - Update Requires on 389-ds-base to 1.3.1.0
2013-05-10 16:33:54 +00:00
sed -ri '
s/^PubKeyAgent (.+) %u$/AuthorizedKeysCommand \1/
s/^AuthorizedKeysCommand .*$/\0\nAuthorizedKeysCommandRunAs nobody/
' /etc/ssh/sshd_config.ipanew
Update to upstream 4.4.1 release
2016-09-01 13:47:48 +00:00
elif /usr/sbin/sshd -t -f /dev/null -o 'PubKeyAgent=/usr/bin/sss_ssh_authorizedkeys %u' -o 'PubKeyAgentRunAs=nobody' 2>/dev/null; then
Update to upstream 3.2.0 GA - ipa-client-install fails if /etc/ipa does not exist (#961483) - Certificate status is not visible in Service and Host page (#956718) - ipa-client-install removes needed options from ldap.conf (#953991) - Handle socket.gethostbyaddr() exceptions when verifying hostnames (#953957) - Add triggerin scriptlet to support OpenSSH 6.2 (#953617) - Require nss 3.14.3-12.0 to address certutil certificate import errors (#953485) - Require pki-ca 10.0.2-3 to pull in fix for sslget and mixed IPv4/6 environments. (#953464) - ipa-client-install removes 'sss' from /etc/nsswitch.conf (#953453) - ipa-server-install --uninstall doesn't stop dirsrv instances (#953432) - Add requires for openldap-2.4.35-4 to pickup fixed SASL_NOCANON behavior for socket based connections (#960222) - Require libsss_nss_idmap-python - Add Conflicts on nss-pam-ldapd < 0.8.4. The mapping from uniqueMember to member is now done automatically and having it in the config file raises an error. - Add backup and restore tools, directory. - require at least systemd 38 which provides the journal (we no longer need to require syslog.target) - Update Requires on policycoreutils to 2.1.14-37 - Update Requires on selinux-policy to 3.12.1-42 - Update Requires on 389-ds-base to 1.3.1.0
2013-05-10 16:33:54 +00:00
sed -ri '
s/^AuthorizedKeysCommand (.+)$/PubKeyAgent \1 %u/
s/^PubKeyAgent .*$/\0\nPubKeyAgentRunAs nobody/
' /etc/ssh/sshd_config.ipanew
fi
Update to upstream 4.2.1
2015-09-07 16:41:00 +00:00
mv -Z /etc/ssh/sshd_config.ipanew /etc/ssh/sshd_config
Update to upstream 3.2.0 GA - ipa-client-install fails if /etc/ipa does not exist (#961483) - Certificate status is not visible in Service and Host page (#956718) - ipa-client-install removes needed options from ldap.conf (#953991) - Handle socket.gethostbyaddr() exceptions when verifying hostnames (#953957) - Add triggerin scriptlet to support OpenSSH 6.2 (#953617) - Require nss 3.14.3-12.0 to address certutil certificate import errors (#953485) - Require pki-ca 10.0.2-3 to pull in fix for sslget and mixed IPv4/6 environments. (#953464) - ipa-client-install removes 'sss' from /etc/nsswitch.conf (#953453) - ipa-server-install --uninstall doesn't stop dirsrv instances (#953432) - Add requires for openldap-2.4.35-4 to pickup fixed SASL_NOCANON behavior for socket based connections (#960222) - Require libsss_nss_idmap-python - Add Conflicts on nss-pam-ldapd < 0.8.4. The mapping from uniqueMember to member is now done automatically and having it in the config file raises an error. - Add backup and restore tools, directory. - require at least systemd 38 which provides the journal (we no longer need to require syslog.target) - Update Requires on policycoreutils to 2.1.14-37 - Update Requires on selinux-policy to 3.12.1-42 - Update Requires on 389-ds-base to 1.3.1.0
2013-05-10 16:33:54 +00:00
chmod 600 /etc/ssh/sshd_config
/bin/systemctl condrestart sshd.service 2>&1 || :
fi
fi
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
Update to FreeIPA 4.8.10
2020-09-26 09:23:38 +00:00
%triggerin client -- openssh-server >= 8.2
# Has the client been configured?
restore=0
test -f '/var/lib/ipa-client/sysrestore/sysrestore.index' && restore=$(wc -l '/var/lib/ipa-client/sysrestore/sysrestore.index' | awk '{print $1}')
if [ -f '/etc/ssh/sshd_config' -a $restore -ge 2 ]; then
# If the snippet already exists, skip
if [ ! -f '/etc/ssh/sshd_config.d/04-ipa.conf' ]; then
# Take the values from /etc/ssh/sshd_config and put them in 04-ipa.conf
grep -E '^(PubkeyAuthentication|KerberosAuthentication|GSSAPIAuthentication|UsePAM|ChallengeResponseAuthentication|AuthorizedKeysCommand|AuthorizedKeysCommandUser)' /etc/ssh/sshd_config 2>/dev/null > /etc/ssh/sshd_config.d/04-ipa.conf
# Remove the values from sshd_conf
sed -ri '
/^(PubkeyAuthentication|KerberosAuthentication|GSSAPIAuthentication|UsePAM|ChallengeResponseAuthentication|AuthorizedKeysCommand|AuthorizedKeysCommandUser)[ \t]/ d
' /etc/ssh/sshd_config
/bin/systemctl condrestart sshd.service 2>&1 || :
fi
Handle better upgrade of sshd_config Fixes: rhbz#1887928
2020-10-13 15:54:07 +00:00
# If the snippet has been created, ensure that it is included
# either by /etc/ssh/sshd_config.d/*.conf or directly
if [ -f '/etc/ssh/sshd_config.d/04-ipa.conf' ]; then
if ! grep -E -q '^\s*Include\s*/etc/ssh/sshd_config.d/\*\.conf' /etc/ssh/sshd_config 2> /dev/null ; then
if ! grep -E -q '^\s*Include\s*/etc/ssh/sshd_config.d/04-ipa\.conf' /etc/ssh/sshd_config 2> /dev/null ; then
# Include the snippet
echo "Include /etc/ssh/sshd_config.d/04-ipa.conf" > /etc/ssh/sshd_config.ipanew
cat /etc/ssh/sshd_config >> /etc/ssh/sshd_config.ipanew
mv -fZ --backup=existing --suffix .ipaold /etc/ssh/sshd_config.ipanew /etc/ssh/sshd_config
fi
fi
fi
Update to FreeIPA 4.8.10
2020-09-26 09:23:38 +00:00
fi
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
Initial import (#672986).
2011-01-28 04:33:55 +00:00
%if ! %{ONLY_CLIENT}
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
%files server
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
%doc README.md Contributors.txt
Update to upstream 4.2.1
2015-09-07 16:41:00 +00:00
%license COPYING
Update to upstream 3.2.0 GA - ipa-client-install fails if /etc/ipa does not exist (#961483) - Certificate status is not visible in Service and Host page (#956718) - ipa-client-install removes needed options from ldap.conf (#953991) - Handle socket.gethostbyaddr() exceptions when verifying hostnames (#953957) - Add triggerin scriptlet to support OpenSSH 6.2 (#953617) - Require nss 3.14.3-12.0 to address certutil certificate import errors (#953485) - Require pki-ca 10.0.2-3 to pull in fix for sslget and mixed IPv4/6 environments. (#953464) - ipa-client-install removes 'sss' from /etc/nsswitch.conf (#953453) - ipa-server-install --uninstall doesn't stop dirsrv instances (#953432) - Add requires for openldap-2.4.35-4 to pickup fixed SASL_NOCANON behavior for socket based connections (#960222) - Require libsss_nss_idmap-python - Add Conflicts on nss-pam-ldapd < 0.8.4. The mapping from uniqueMember to member is now done automatically and having it in the config file raises an error. - Add backup and restore tools, directory. - require at least systemd 38 which provides the journal (we no longer need to require syslog.target) - Update Requires on policycoreutils to 2.1.14-37 - Update Requires on selinux-policy to 3.12.1-42 - Update Requires on 389-ds-base to 1.3.1.0
2013-05-10 16:33:54 +00:00
%{_sbindir}/ipa-backup
%{_sbindir}/ipa-restore
Update to 2.1.0
2011-08-16 21:16:12 +00:00
%{_sbindir}/ipa-ca-install
Update to upstream 4.2.1
2015-09-07 16:41:00 +00:00
%{_sbindir}/ipa-kra-install
Initial import (#672986).
2011-01-28 04:33:55 +00:00
%{_sbindir}/ipa-server-install
Update to 2.1.0
2011-08-16 21:16:12 +00:00
%{_sbindir}/ipa-replica-conncheck
Initial import (#672986).
2011-01-28 04:33:55 +00:00
%{_sbindir}/ipa-replica-install
%{_sbindir}/ipa-replica-manage
Update to 2.1.0
2011-08-16 21:16:12 +00:00
%{_sbindir}/ipa-csreplica-manage
Initial import (#672986).
2011-01-28 04:33:55 +00:00
%{_sbindir}/ipa-server-certinstall
Update to upstream 4.2.1
2015-09-07 16:41:00 +00:00
%{_sbindir}/ipa-server-upgrade
- Set minimum version of sssd to 1.5.1 - Update to upstream freeipa-2.0.0.rc1 - Move server-only binaries from admintools subpackage to server
2011-02-15 02:45:41 +00:00
%{_sbindir}/ipa-ldap-updater
Update to upstream 4.0.0 Remove Fedora patches, all are in the upstream release Remove the freeipa-server-strict package Update to upstream 4.0.0
2014-07-07 17:23:17 +00:00
%{_sbindir}/ipa-otptoken-import
- Set minimum version of sssd to 1.5.1 - Update to upstream freeipa-2.0.0.rc1 - Move server-only binaries from admintools subpackage to server
2011-02-15 02:45:41 +00:00
%{_sbindir}/ipa-compat-manage
%{_sbindir}/ipa-nis-manage
Upstream 2.1.3 release
2011-10-19 15:07:43 +00:00
%{_sbindir}/ipa-managed-entries
Initial import (#672986).
2011-01-28 04:33:55 +00:00
%{_sbindir}/ipactl
Update to upstream 3.3.0
2013-08-08 13:30:10 +00:00
%{_sbindir}/ipa-advise
Update to upstream 4.1.0 see http://www.freeipa.org/page/Releases/4.1.0
2014-10-21 14:35:27 +00:00
%{_sbindir}/ipa-cacert-manage
Update to upstream 4.2.1
2015-09-07 16:41:00 +00:00
%{_sbindir}/ipa-winsync-migrate
Update to upstream 4.5.2 Signed-off-by: Tomas Krizek <tkrizek@redhat.com>
2017-06-18 18:09:59 +00:00
%{_sbindir}/ipa-pkinit-manage
Update spec file
2019-04-29 20:01:26 +00:00
%{_sbindir}/ipa-crlgen-manage
FreeIPA 4.8.0 release
2019-07-03 07:26:16 +00:00
%{_sbindir}/ipa-cert-fix
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
%{_sbindir}/ipa-acme-manage
Update to upstream 4.0.0 Remove Fedora patches, all are in the upstream release Remove the freeipa-server-strict package Update to upstream 4.0.0
2014-07-07 17:23:17 +00:00
%{_libexecdir}/certmonger/dogtag-ipa-ca-renew-agent-submit
Update to upstream 4.1.3 - see http://www.freeipa.org/page/Releases/4.1.3
2015-02-18 14:08:02 +00:00
%{_libexecdir}/certmonger/ipa-server-guard
Update to upstream 4.1.0 see http://www.freeipa.org/page/Releases/4.1.0
2014-10-21 14:35:27 +00:00
%dir %{_libexecdir}/ipa
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
%{_libexecdir}/ipa/ipa-ccache-sweeper
4.4.4-2 bugfixes - Fixes #1448049 Subpackage freeipa-server-common has unmet dependencies on Rawhide - Fixes #1430247 FreeIPA server deployment runs ipa-custodia on Python 3, should use Python 2 - Fixes #1446744 python2-ipaclient subpackage does not own %{python_sitelib}/ipaclient/plugins - Fixes #1440525 surplus 'the' in output of `ipa-adtrust-install` - Fixes #1411810 ipa-replica-install fails with 406 Client Error - Fixes #1405814 ipa plugins: ERROR an internal error occured
2017-05-17 15:52:32 +00:00
%{_libexecdir}/ipa/ipa-custodia
4.6.3-1: rebase to upstream 4.6.3
2018-01-31 17:01:27 +00:00
%{_libexecdir}/ipa/ipa-custodia-check
Update to upstream 4.2.1
2015-09-07 16:41:00 +00:00
%{_libexecdir}/ipa/ipa-httpd-kdcproxy
Update to upstream 4.6.90.pre2 Resolves: #1562606
2018-05-15 20:22:52 +00:00
%{_libexecdir}/ipa/ipa-httpd-pwdreader
Update to upstream 4.4.1 release
2016-09-01 13:47:48 +00:00
%{_libexecdir}/ipa/ipa-pki-retrieve-key
Update spec file
2019-04-29 20:01:26 +00:00
%{_libexecdir}/ipa/ipa-pki-wait-running
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
%{_libexecdir}/ipa/ipa-otpd
FreeIPA 4.8.7 upstream release
2020-06-10 20:45:00 +00:00
%{_libexecdir}/ipa/ipa-print-pac
FreeIPA 4.8.5
2020-03-17 14:12:01 +00:00
%dir %{_libexecdir}/ipa/custodia
%attr(755,root,root) %{_libexecdir}/ipa/custodia/ipa-custodia-dmldap
%attr(755,root,root) %{_libexecdir}/ipa/custodia/ipa-custodia-pki-tomcat
%attr(755,root,root) %{_libexecdir}/ipa/custodia/ipa-custodia-pki-tomcat-wrapped
%attr(755,root,root) %{_libexecdir}/ipa/custodia/ipa-custodia-ra-agent
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
%dir %{_libexecdir}/ipa/oddjob
%attr(0755,root,root) %{_libexecdir}/ipa/oddjob/org.freeipa.server.conncheck
FreeIPA 4.8.5
2020-03-17 14:12:01 +00:00
%attr(0755,root,root) %{_libexecdir}/ipa/oddjob/org.freeipa.server.trust-enable-agent
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
%config(noreplace) %{_sysconfdir}/dbus-1/system.d/org.freeipa.server.conf
%config(noreplace) %{_sysconfdir}/oddjobd.conf.d/ipa-server.conf
Update to upstream 4.3.1
2016-03-04 14:30:38 +00:00
%dir %{_libexecdir}/ipa/certmonger
%attr(755,root,root) %{_libexecdir}/ipa/certmonger/*
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
# NOTE: systemd specific section
%attr(644,root,root) %{_unitdir}/ipa.service
%attr(644,root,root) %{_unitdir}/ipa-otpd.socket
%attr(644,root,root) %{_unitdir}/ipa-otpd@.service
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
%attr(644,root,root) %{_unitdir}/ipa-ccache-sweep.service
%attr(644,root,root) %{_unitdir}/ipa-ccache-sweep.timer
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
# END
%attr(755,root,root) %{plugin_dir}/libipa_pwd_extop.so
%attr(755,root,root) %{plugin_dir}/libipa_enrollment_extop.so
%attr(755,root,root) %{plugin_dir}/libipa_winsync.so
%attr(755,root,root) %{plugin_dir}/libipa_repl_version.so
%attr(755,root,root) %{plugin_dir}/libipa_uuid.so
%attr(755,root,root) %{plugin_dir}/libipa_modrdn.so
%attr(755,root,root) %{plugin_dir}/libipa_lockout.so
%attr(755,root,root) %{plugin_dir}/libipa_dns.so
%attr(755,root,root) %{plugin_dir}/libipa_range_check.so
%attr(755,root,root) %{plugin_dir}/libipa_otp_counter.so
%attr(755,root,root) %{plugin_dir}/libipa_otp_lasttoken.so
%attr(755,root,root) %{plugin_dir}/libtopology.so
%attr(755,root,root) %{plugin_dir}/libipa_sidgen.so
%attr(755,root,root) %{plugin_dir}/libipa_sidgen_task.so
%attr(755,root,root) %{plugin_dir}/libipa_extdom_extop.so
%attr(755,root,root) %{_libdir}/krb5/plugins/kdb/ipadb.so
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
%{_mandir}/man1/ipa-replica-conncheck.1*
%{_mandir}/man1/ipa-replica-install.1*
%{_mandir}/man1/ipa-replica-manage.1*
%{_mandir}/man1/ipa-csreplica-manage.1*
%{_mandir}/man1/ipa-server-certinstall.1*
%{_mandir}/man1/ipa-server-install.1*
%{_mandir}/man1/ipa-server-upgrade.1*
%{_mandir}/man1/ipa-ca-install.1*
%{_mandir}/man1/ipa-kra-install.1*
%{_mandir}/man1/ipa-compat-manage.1*
%{_mandir}/man1/ipa-nis-manage.1*
%{_mandir}/man1/ipa-managed-entries.1*
%{_mandir}/man1/ipa-ldap-updater.1*
%{_mandir}/man8/ipactl.8*
%{_mandir}/man1/ipa-backup.1*
%{_mandir}/man1/ipa-restore.1*
%{_mandir}/man1/ipa-advise.1*
%{_mandir}/man1/ipa-otptoken-import.1*
%{_mandir}/man1/ipa-cacert-manage.1*
%{_mandir}/man1/ipa-winsync-migrate.1*
Update to upstream 4.5.2 Signed-off-by: Tomas Krizek <tkrizek@redhat.com>
2017-06-18 18:09:59 +00:00
%{_mandir}/man1/ipa-pkinit-manage.1*
Update spec file
2019-04-29 20:01:26 +00:00
%{_mandir}/man1/ipa-crlgen-manage.1*
FreeIPA 4.8.0 release
2019-07-03 07:26:16 +00:00
%{_mandir}/man1/ipa-cert-fix.1*
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
%{_mandir}/man1/ipa-acme-manage.1*
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
%files -n python3-ipaserver
%doc README.md Contributors.txt
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
%license COPYING
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
%{python3_sitelib}/ipaserver
%{python3_sitelib}/ipaserver-*.egg-info
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
%files server-common
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
%doc README.md Contributors.txt
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
%license COPYING
Update to upstream 4.2.2
2015-10-08 08:51:27 +00:00
%ghost %verify(not owner group) %dir %{_sharedstatedir}/kdcproxy
Update to upstream 4.2.1
2015-09-07 16:41:00 +00:00
%dir %attr(0755,root,root) %{_sysconfdir}/ipa/kdcproxy
%config(noreplace) %{_sysconfdir}/ipa/kdcproxy/kdcproxy.conf
4.6.0-1: rebase to upstream 4.6.0 Signed-off-by: Tomas Krizek <tkrizek@redhat.com>
2017-09-04 10:01:19 +00:00
# NOTE: systemd specific section
%{_tmpfilesdir}/ipa.conf
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
%attr(644,root,root) %{_unitdir}/ipa-custodia.service
Update to upstream 4.4.1 release
2016-09-01 13:47:48 +00:00
%ghost %attr(644,root,root) %{etc_systemd_dir}/httpd.d/ipa.conf
Update to upstream 3.3.1
2013-08-29 14:56:40 +00:00
# END
Initial import (#672986).
2011-01-28 04:33:55 +00:00
%{_usr}/share/ipa/wsgi.py*
4.6.0-1: rebase to upstream 4.6.0 Signed-off-by: Tomas Krizek <tkrizek@redhat.com>
2017-09-04 10:01:19 +00:00
%{_usr}/share/ipa/kdcproxy.wsgi
Update spec file
2019-04-29 20:01:26 +00:00
%{_usr}/share/ipa/ipaca*.ini
Initial import (#672986).
2011-01-28 04:33:55 +00:00
%{_usr}/share/ipa/*.ldif
Update to FreeIPA 4.8.10
2020-09-26 09:23:38 +00:00
%exclude %{_datadir}/ipa/ipa-cldap-conf.ldif
Initial import (#672986).
2011-01-28 04:33:55 +00:00
%{_usr}/share/ipa/*.uldif
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
%{_usr}/share/ipa/*.template
Update to upstream 3.3.0
2013-08-08 13:30:10 +00:00
%dir %{_usr}/share/ipa/advise
%dir %{_usr}/share/ipa/advise/legacy
%{_usr}/share/ipa/advise/legacy/*.template
Update to upstream 4.2.1
2015-09-07 16:41:00 +00:00
%dir %{_usr}/share/ipa/profiles
4.6.0-1: rebase to upstream 4.6.0 Signed-off-by: Tomas Krizek <tkrizek@redhat.com>
2017-09-04 10:01:19 +00:00
%{_usr}/share/ipa/profiles/README
Update to upstream 4.2.1
2015-09-07 16:41:00 +00:00
%{_usr}/share/ipa/profiles/*.cfg
Initial import (#672986).
2011-01-28 04:33:55 +00:00
%dir %{_usr}/share/ipa/html
%{_usr}/share/ipa/html/ssbrowser.html
%{_usr}/share/ipa/html/unauthorized.html
%dir %{_usr}/share/ipa/migration
%{_usr}/share/ipa/migration/index.html
%{_usr}/share/ipa/migration/migration.py*
%dir %{_usr}/share/ipa/ui
%{_usr}/share/ipa/ui/index.html
Update to upstream 3.0.0 beta 1
2012-07-02 19:55:25 +00:00
%{_usr}/share/ipa/ui/reset_password.html
Update to upstream 4.0.0 Remove Fedora patches, all are in the upstream release Remove the freeipa-server-strict package Update to upstream 4.0.0
2014-07-07 17:23:17 +00:00
%{_usr}/share/ipa/ui/sync_otp.html
Update to 2.1.0
2011-08-16 21:16:12 +00:00
%{_usr}/share/ipa/ui/*.ico
Initial import (#672986).
2011-01-28 04:33:55 +00:00
%{_usr}/share/ipa/ui/*.css
Update to upstream 4.0.0 Remove Fedora patches, all are in the upstream release Remove the freeipa-server-strict package Update to upstream 4.0.0
2014-07-07 17:23:17 +00:00
%dir %{_usr}/share/ipa/ui/css
%{_usr}/share/ipa/ui/css/*.css
3.3.4-1 - Update to upstream 3.3.4 - Install CA anchor into standard location (#928478) - ipa-client-install part of ipa-server-install fails on reinstall (#1044994) - Remove mod_ssl workaround (RHEL bug #1029046) - Enable syncrepl plugin to support bind-dyndb-ldap 4.0
2014-01-28 12:37:46 +00:00
%dir %{_usr}/share/ipa/ui/js
Update to upstream 3.2.0 Prerelease 1 Spec file was also merged with up-to-date upstream reference spec file to keep them consistent.
2013-04-02 16:47:49 +00:00
%dir %{_usr}/share/ipa/ui/js/dojo
%{_usr}/share/ipa/ui/js/dojo/dojo.js
%dir %{_usr}/share/ipa/ui/js/libs
%{_usr}/share/ipa/ui/js/libs/*.js
%dir %{_usr}/share/ipa/ui/js/freeipa
%{_usr}/share/ipa/ui/js/freeipa/app.js
Update to upstream 4.0.0 Remove Fedora patches, all are in the upstream release Remove the freeipa-server-strict package Update to upstream 4.0.0
2014-07-07 17:23:17 +00:00
%{_usr}/share/ipa/ui/js/freeipa/core.js
Update to upstream 3.2.0 GA - ipa-client-install fails if /etc/ipa does not exist (#961483) - Certificate status is not visible in Service and Host page (#956718) - ipa-client-install removes needed options from ldap.conf (#953991) - Handle socket.gethostbyaddr() exceptions when verifying hostnames (#953957) - Add triggerin scriptlet to support OpenSSH 6.2 (#953617) - Require nss 3.14.3-12.0 to address certutil certificate import errors (#953485) - Require pki-ca 10.0.2-3 to pull in fix for sslget and mixed IPv4/6 environments. (#953464) - ipa-client-install removes 'sss' from /etc/nsswitch.conf (#953453) - ipa-server-install --uninstall doesn't stop dirsrv instances (#953432) - Add requires for openldap-2.4.35-4 to pickup fixed SASL_NOCANON behavior for socket based connections (#960222) - Require libsss_nss_idmap-python - Add Conflicts on nss-pam-ldapd < 0.8.4. The mapping from uniqueMember to member is now done automatically and having it in the config file raises an error. - Add backup and restore tools, directory. - require at least systemd 38 which provides the journal (we no longer need to require syslog.target) - Update Requires on policycoreutils to 2.1.14-37 - Update Requires on selinux-policy to 3.12.1-42 - Update Requires on 389-ds-base to 1.3.1.0
2013-05-10 16:33:54 +00:00
%dir %{_usr}/share/ipa/ui/js/plugins
Update to upstream 2.2.0 alpha 1 (2.1.90.pre1) Remove unused patches, update tarball, sync spec to upstream spec ipa_kpasswd has been dropped upstream
2012-02-06 19:51:43 +00:00
%dir %{_usr}/share/ipa/ui/images
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
%if 0%{?rhel}
%{_usr}/share/ipa/ui/images/facet-*.png
# Moved branding logos and background to redhat-logos-ipa-80.4:
# header-logo.png, login-screen-background.jpg, login-screen-logo.png,
# product-name.png
%else
Update to upstream 4.0.0 Remove Fedora patches, all are in the upstream release Remove the freeipa-server-strict package Update to upstream 4.0.0
2014-07-07 17:23:17 +00:00
%{_usr}/share/ipa/ui/images/*.jpg
Update to upstream 2.2.0 alpha 1 (2.1.90.pre1) Remove unused patches, update tarball, sync spec to upstream spec ipa_kpasswd has been dropped upstream
2012-02-06 19:51:43 +00:00
%{_usr}/share/ipa/ui/images/*.png
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
%endif
Update to upstream 3.2.0 GA - ipa-client-install fails if /etc/ipa does not exist (#961483) - Certificate status is not visible in Service and Host page (#956718) - ipa-client-install removes needed options from ldap.conf (#953991) - Handle socket.gethostbyaddr() exceptions when verifying hostnames (#953957) - Add triggerin scriptlet to support OpenSSH 6.2 (#953617) - Require nss 3.14.3-12.0 to address certutil certificate import errors (#953485) - Require pki-ca 10.0.2-3 to pull in fix for sslget and mixed IPv4/6 environments. (#953464) - ipa-client-install removes 'sss' from /etc/nsswitch.conf (#953453) - ipa-server-install --uninstall doesn't stop dirsrv instances (#953432) - Add requires for openldap-2.4.35-4 to pickup fixed SASL_NOCANON behavior for socket based connections (#960222) - Require libsss_nss_idmap-python - Add Conflicts on nss-pam-ldapd < 0.8.4. The mapping from uniqueMember to member is now done automatically and having it in the config file raises an error. - Add backup and restore tools, directory. - require at least systemd 38 which provides the journal (we no longer need to require syslog.target) - Update Requires on policycoreutils to 2.1.14-37 - Update Requires on selinux-policy to 3.12.1-42 - Update Requires on 389-ds-base to 1.3.1.0
2013-05-10 16:33:54 +00:00
%dir %{_usr}/share/ipa/wsgi
%{_usr}/share/ipa/wsgi/plugins.py*
Initial import (#672986).
2011-01-28 04:33:55 +00:00
%dir %{_sysconfdir}/ipa
%dir %{_sysconfdir}/ipa/html
%config(noreplace) %{_sysconfdir}/ipa/html/ssbrowser.html
%config(noreplace) %{_sysconfdir}/ipa/html/unauthorized.html
FreeIPA 4.8.5
2020-03-17 14:12:01 +00:00
%ghost %attr(0644,root,root) %config(noreplace) %{_sysconfdir}/httpd/conf.d/ipa-rewrite.conf
%ghost %attr(0644,root,root) %config(noreplace) %{_sysconfdir}/httpd/conf.d/ipa.conf
%ghost %attr(0644,root,root) %config(noreplace) %{_sysconfdir}/httpd/conf.d/ipa-kdc-proxy.conf
%ghost %attr(0640,root,root) %config(noreplace) %{_sysconfdir}/httpd/conf.d/ipa-pki-proxy.conf
%ghost %attr(0644,root,root) %config(noreplace) %{_sysconfdir}/ipa/kdcproxy/ipa-kdc-proxy.conf
%ghost %attr(0644,root,root) %config(noreplace) %{_usr}/share/ipa/html/ca.crt
Update to 4.8.2 - Replace %%{_libdir} macro in BuildRequires (#1746882) - Restore user-nsswitch.conf before calling authselect (#1746557) - ipa service-find does not list cifs service created by ipa-client-samba (#1731433) - Occasional 'whoami.data is undefined' error in FreeIPA web UI (#1699109) - ipa-kra-install fails due to fs.protected_regular=1 (#1698384)
2019-11-12 19:43:05 +00:00
%ghost %attr(0640,root,named) %config(noreplace) %{_sysconfdir}/named/ipa-ext.conf
FreeIPA 4.8.7 upstream release
2020-06-10 20:45:00 +00:00
%ghost %attr(0640,root,named) %config(noreplace) %{_sysconfdir}/named/ipa-options-ext.conf
FreeIPA 4.8.5
2020-03-17 14:12:01 +00:00
%ghost %attr(0644,root,root) %{_usr}/share/ipa/html/krb.con
%ghost %attr(0644,root,root) %{_usr}/share/ipa/html/krb5.ini
%ghost %attr(0644,root,root) %{_usr}/share/ipa/html/krbrealm.con
Initial import (#672986).
2011-01-28 04:33:55 +00:00
%dir %{_usr}/share/ipa/updates/
%{_usr}/share/ipa/updates/*
%dir %{_localstatedir}/lib/ipa
Update to upstream 3.2.0 GA - ipa-client-install fails if /etc/ipa does not exist (#961483) - Certificate status is not visible in Service and Host page (#956718) - ipa-client-install removes needed options from ldap.conf (#953991) - Handle socket.gethostbyaddr() exceptions when verifying hostnames (#953957) - Add triggerin scriptlet to support OpenSSH 6.2 (#953617) - Require nss 3.14.3-12.0 to address certutil certificate import errors (#953485) - Require pki-ca 10.0.2-3 to pull in fix for sslget and mixed IPv4/6 environments. (#953464) - ipa-client-install removes 'sss' from /etc/nsswitch.conf (#953453) - ipa-server-install --uninstall doesn't stop dirsrv instances (#953432) - Add requires for openldap-2.4.35-4 to pickup fixed SASL_NOCANON behavior for socket based connections (#960222) - Require libsss_nss_idmap-python - Add Conflicts on nss-pam-ldapd < 0.8.4. The mapping from uniqueMember to member is now done automatically and having it in the config file raises an error. - Add backup and restore tools, directory. - require at least systemd 38 which provides the journal (we no longer need to require syslog.target) - Update Requires on policycoreutils to 2.1.14-37 - Update Requires on selinux-policy to 3.12.1-42 - Update Requires on 389-ds-base to 1.3.1.0
2013-05-10 16:33:54 +00:00
%attr(700,root,root) %dir %{_localstatedir}/lib/ipa/backup
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
%attr(700,root,root) %dir %{_localstatedir}/lib/ipa/gssproxy
4.6.1-1: rebase to upstream 4.6.1 - Fixes #1491053 Firefox reports insecure TLS configuration when visiting FreeIPA web UI after standard server deployment Signed-off-by: Tomas Krizek <tkrizek@redhat.com>
2017-09-22 11:44:05 +00:00
%attr(711,root,root) %dir %{_localstatedir}/lib/ipa/sysrestore
Update to upstream 3.0.0 beta 1
2012-07-02 19:55:25 +00:00
%attr(700,root,root) %dir %{_localstatedir}/lib/ipa/sysupgrade
Updated to upstream 3.0.0 GA - Set minimum for samba to 4.0.0-153. - Make sure server-trust-ad subpackage alternates winbind_krb5_locator.so plugin to /dev/null since they cannot be used when trusts are configured - Restrict krb5-server to 1.10. - Update minimum for 389-ds-base to 1.3.0 - Add directory /var/lib/ipa/pki-ca/publish for CRL published by pki-ca - Add Requires on zip for generating FF browser extension
2012-10-12 15:46:47 +00:00
%attr(755,root,root) %dir %{_localstatedir}/lib/ipa/pki-ca
Update to upstream 4.6.90.pre1 Resolves: #1551830, #1551677, #1547959, #1496562, #1179220
2018-03-16 17:47:47 +00:00
%attr(755,root,root) %dir %{_localstatedir}/lib/ipa/certs
Update to upstream 4.6.90.pre2 Resolves: #1562606
2018-05-15 20:22:52 +00:00
%attr(700,root,root) %dir %{_localstatedir}/lib/ipa/private
%attr(700,root,root) %dir %{_localstatedir}/lib/ipa/passwds
FreeIPA 4.8.5
2020-03-17 14:12:01 +00:00
%ghost %attr(775,root,pkiuser) %{_localstatedir}/lib/ipa/pki-ca/publish
%ghost %attr(770,named,named) %{_localstatedir}/named/dyndb-ldap/ipa
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
%dir %attr(0700,root,root) %{_sysconfdir}/ipa/custodia
Update to upstream 4.4.1 release
2016-09-01 13:47:48 +00:00
%dir %{_usr}/share/ipa/schema.d
%attr(0644,root,root) %{_usr}/share/ipa/schema.d/README
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
%attr(0644,root,root) %{_usr}/share/ipa/gssapi.login
%{_usr}/share/ipa/ipakrb5.aug
Update to upstream 4.2.1
2015-09-07 16:41:00 +00:00
%files server-dns
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
%doc README.md Contributors.txt
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
%license COPYING
Update to upstream 4.6.90.pre1 Resolves: #1551830, #1551677, #1547959, #1496562, #1179220
2018-03-16 17:47:47 +00:00
%config(noreplace) %{_sysconfdir}/sysconfig/ipa-dnskeysyncd
%config(noreplace) %{_sysconfdir}/sysconfig/ipa-ods-exporter
%dir %attr(0755,root,root) %{_sysconfdir}/ipa/dnssec
%{_libexecdir}/ipa/ipa-dnskeysyncd
%{_libexecdir}/ipa/ipa-dnskeysync-replica
%{_libexecdir}/ipa/ipa-ods-exporter
Update to upstream 4.2.1
2015-09-07 16:41:00 +00:00
%{_sbindir}/ipa-dns-install
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
%{_mandir}/man1/ipa-dns-install.1*
Update to upstream 4.6.90.pre1 Resolves: #1551830, #1551677, #1547959, #1496562, #1179220
2018-03-16 17:47:47 +00:00
%attr(644,root,root) %{_unitdir}/ipa-dnskeysyncd.service
%attr(644,root,root) %{_unitdir}/ipa-ods-exporter.socket
%attr(644,root,root) %{_unitdir}/ipa-ods-exporter.service
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
Update to upstream 3.0.0 beta 1
2012-07-02 19:55:25 +00:00
%files server-trust-ad
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
%doc README.md Contributors.txt
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
%license COPYING
Update to upstream 3.0.0 beta 1
2012-07-02 19:55:25 +00:00
%{_sbindir}/ipa-adtrust-install
%{_usr}/share/ipa/smb.conf.empty
%attr(755,root,root) %{_libdir}/samba/pdb/ipasam.so
Update to FreeIPA 4.8.10
2020-09-26 09:23:38 +00:00
%attr(755,root,root) %{plugin_dir}/libipa_cldap.so
%{_datadir}/ipa/ipa-cldap-conf.ldif
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
%{_mandir}/man1/ipa-adtrust-install.1*
Updated to upstream 3.0.0 GA - Set minimum for samba to 4.0.0-153. - Make sure server-trust-ad subpackage alternates winbind_krb5_locator.so plugin to /dev/null since they cannot be used when trusts are configured - Restrict krb5-server to 1.10. - Update minimum for 389-ds-base to 1.3.0 - Add directory /var/lib/ipa/pki-ca/publish for CRL published by pki-ca - Add Requires on zip for generating FF browser extension
2012-10-12 15:46:47 +00:00
%ghost %{_libdir}/krb5/plugins/libkrb5/winbind_krb5_locator.so
Update to upstream 4.2.1
2015-09-07 16:41:00 +00:00
%{_sysconfdir}/dbus-1/system.d/oddjob-ipa-trust.conf
%{_sysconfdir}/oddjobd.conf.d/oddjobd-ipa-trust.conf
FreeIPA 4.8.5
2020-03-17 14:12:01 +00:00
%attr(755,root,root) %{_libexecdir}/ipa/oddjob/com.redhat.idm.trust-fetch-domains
Bring back Fedora-only changes
2013-08-29 15:41:58 +00:00
FreeIPA 4.8.5
2020-03-17 14:12:01 +00:00
# ONLY_CLIENT
%endif
Initial import (#672986).
2011-01-28 04:33:55 +00:00
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
Initial import (#672986).
2011-01-28 04:33:55 +00:00
%files client
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
%doc README.md Contributors.txt
Update to upstream 4.2.1
2015-09-07 16:41:00 +00:00
%license COPYING
Initial import (#672986).
2011-01-28 04:33:55 +00:00
%{_sbindir}/ipa-client-install
Update to upstream 3.0.0 beta 1
2012-07-02 19:55:25 +00:00
%{_sbindir}/ipa-client-automount
Update to upstream 4.1.0 see http://www.freeipa.org/page/Releases/4.1.0
2014-10-21 14:35:27 +00:00
%{_sbindir}/ipa-certupdate
Initial import (#672986).
2011-01-28 04:33:55 +00:00
%{_sbindir}/ipa-getkeytab
%{_sbindir}/ipa-rmkeytab
%{_sbindir}/ipa-join
Update to upstream 4.4.1 release
2016-09-01 13:47:48 +00:00
%{_bindir}/ipa
%config %{_sysconfdir}/bash_completion.d
FreeIPA 4.8.0 release
2019-07-03 07:26:16 +00:00
%config %{_sysconfdir}/sysconfig/certmonger
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
%{_mandir}/man1/ipa.1*
%{_mandir}/man1/ipa-getkeytab.1*
%{_mandir}/man1/ipa-rmkeytab.1*
%{_mandir}/man1/ipa-client-install.1*
%{_mandir}/man1/ipa-client-automount.1*
%{_mandir}/man1/ipa-certupdate.1*
%{_mandir}/man1/ipa-join.1*
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
%dir %{_libexecdir}/ipa/acme
%{_libexecdir}/ipa/acme/certbot-dns-ipa
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
FreeIPA 4.8.0 release
2019-07-03 07:26:16 +00:00
%files client-samba
%doc README.md Contributors.txt
%license COPYING
%{_sbindir}/ipa-client-samba
%{_mandir}/man1/ipa-client-samba.1*
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
FreeIPA 4.8.7 upstream release
2020-06-10 20:45:00 +00:00
%files client-epn
%doc README.md Contributors.txt
FreeIPA 4.8.7 upstream release
2020-08-20 17:24:07 +00:00
%dir %{_sysconfdir}/ipa/epn
FreeIPA 4.8.7 upstream release
2020-06-10 20:45:00 +00:00
%license COPYING
%{_sbindir}/ipa-epn
%{_mandir}/man1/ipa-epn.1*
%{_mandir}/man5/epn.conf.5*
%attr(644,root,root) %{_unitdir}/ipa-epn.service
%attr(644,root,root) %{_unitdir}/ipa-epn.timer
FreeIPA 4.8.7 upstream release
2020-08-20 17:24:07 +00:00
%attr(600,root,root) %config(noreplace) %{_sysconfdir}/ipa/epn.conf
Update to FreeIPA 4.8.10
2020-09-26 09:23:38 +00:00
%attr(644,root,root) %config(noreplace) %{_sysconfdir}/ipa/epn/expire_msg.template
FreeIPA 4.8.7 upstream release
2020-06-10 20:45:00 +00:00
Update to upstream 4.3.1
2016-03-04 14:30:38 +00:00
%files -n python3-ipaclient
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
%doc README.md Contributors.txt
Update to upstream 4.3.1
2016-03-04 14:30:38 +00:00
%license COPYING
%dir %{python3_sitelib}/ipaclient
%{python3_sitelib}/ipaclient/*.py
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
%{python3_sitelib}/ipaclient/__pycache__/*.py*
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
%dir %{python3_sitelib}/ipaclient/install
%{python3_sitelib}/ipaclient/install/*.py
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
%{python3_sitelib}/ipaclient/install/__pycache__/*.py*
4.4.4-2 bugfixes - Fixes #1448049 Subpackage freeipa-server-common has unmet dependencies on Rawhide - Fixes #1430247 FreeIPA server deployment runs ipa-custodia on Python 3, should use Python 2 - Fixes #1446744 python2-ipaclient subpackage does not own %{python_sitelib}/ipaclient/plugins - Fixes #1440525 surplus 'the' in output of `ipa-adtrust-install` - Fixes #1411810 ipa-replica-install fails with 406 Client Error - Fixes #1405814 ipa plugins: ERROR an internal error occured
2017-05-17 15:52:32 +00:00
%dir %{python3_sitelib}/ipaclient/plugins
Update to upstream 4.4.1 release
2016-09-01 13:47:48 +00:00
%{python3_sitelib}/ipaclient/plugins/*.py
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
%{python3_sitelib}/ipaclient/plugins/__pycache__/*.py*
4.4.4-2 bugfixes - Fixes #1448049 Subpackage freeipa-server-common has unmet dependencies on Rawhide - Fixes #1430247 FreeIPA server deployment runs ipa-custodia on Python 3, should use Python 2 - Fixes #1446744 python2-ipaclient subpackage does not own %{python_sitelib}/ipaclient/plugins - Fixes #1440525 surplus 'the' in output of `ipa-adtrust-install` - Fixes #1411810 ipa-replica-install fails with 406 Client Error - Fixes #1405814 ipa plugins: ERROR an internal error occured
2017-05-17 15:52:32 +00:00
%dir %{python3_sitelib}/ipaclient/remote_plugins
Update to upstream 4.4.1 release
2016-09-01 13:47:48 +00:00
%{python3_sitelib}/ipaclient/remote_plugins/*.py
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
%{python3_sitelib}/ipaclient/remote_plugins/__pycache__/*.py*
Update to upstream 4.5.2 Signed-off-by: Tomas Krizek <tkrizek@redhat.com>
2017-06-18 18:09:59 +00:00
%dir %{python3_sitelib}/ipaclient/remote_plugins/2_*
Update to upstream 4.4.1 release
2016-09-01 13:47:48 +00:00
%{python3_sitelib}/ipaclient/remote_plugins/2_*/*.py
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
%{python3_sitelib}/ipaclient/remote_plugins/2_*/__pycache__/*.py*
Update to upstream 4.3.1
2016-03-04 14:30:38 +00:00
%{python3_sitelib}/ipaclient-*.egg-info
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
%files client-common
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
%doc README.md Contributors.txt
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
%license COPYING
%dir %attr(0755,root,root) %{_sysconfdir}/ipa/
FreeIPA 4.8.5
2020-03-17 14:12:01 +00:00
%ghost %attr(0644,root,root) %config(noreplace) %{_sysconfdir}/ipa/default.conf
%ghost %attr(0644,root,root) %config(noreplace) %{_sysconfdir}/ipa/ca.crt
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
%dir %attr(0755,root,root) %{_sysconfdir}/ipa/nssdb
4.6.3-1: rebase to upstream 4.6.3
2018-01-31 17:01:27 +00:00
# old dbm format
FreeIPA 4.8.5
2020-03-17 14:12:01 +00:00
%ghost %attr(644,root,root) %config(noreplace) %{_sysconfdir}/ipa/nssdb/cert8.db
%ghost %attr(644,root,root) %config(noreplace) %{_sysconfdir}/ipa/nssdb/key3.db
%ghost %attr(644,root,root) %config(noreplace) %{_sysconfdir}/ipa/nssdb/secmod.db
4.6.3-1: rebase to upstream 4.6.3
2018-01-31 17:01:27 +00:00
# new sql format
FreeIPA 4.8.5
2020-03-17 14:12:01 +00:00
%ghost %attr(644,root,root) %config(noreplace) %{_sysconfdir}/ipa/nssdb/cert9.db
%ghost %attr(644,root,root) %config(noreplace) %{_sysconfdir}/ipa/nssdb/key4.db
%ghost %attr(644,root,root) %config(noreplace) %{_sysconfdir}/ipa/nssdb/pkcs11.txt
%ghost %attr(600,root,root) %config(noreplace) %{_sysconfdir}/ipa/nssdb/pwdfile.txt
%ghost %attr(644,root,root) %config(noreplace) %{_sysconfdir}/pki/ca-trust/source/ipa.p11-kit
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
%dir %{_localstatedir}/lib/ipa-client
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
%dir %{_localstatedir}/lib/ipa-client/pki
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
%dir %{_localstatedir}/lib/ipa-client/sysrestore
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
%{_mandir}/man5/default.conf.5*
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
%dir %{_usr}/share/ipa/client
%{_usr}/share/ipa/client/*.template
Initial import (#672986).
2011-01-28 04:33:55 +00:00
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
%files python-compat
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
%doc README.md Contributors.txt
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
%license COPYING
FreeIPA 4.8.5
2020-03-17 14:12:01 +00:00
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
%files common -f %{gettext_domain}.lang
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
%doc README.md Contributors.txt
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
%license COPYING
Update to upstream 4.6.90.pre2 Resolves: #1562606
2018-05-15 20:22:52 +00:00
%dir %{_usr}/share/ipa
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
%dir %{_libexecdir}/ipa
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
%files -n python3-ipalib
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
%doc README.md Contributors.txt
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
%license COPYING
%{python3_sitelib}/ipapython/
%{python3_sitelib}/ipalib/
%{python3_sitelib}/ipaplatform/
%{python3_sitelib}/ipapython-*.egg-info
%{python3_sitelib}/ipalib-*.egg-info
%{python3_sitelib}/ipaplatform-*.egg-info
Initial import (#672986).
2011-01-28 04:33:55 +00:00
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
%if %{with ipatests}
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
%files -n python3-ipatests
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
%doc README.md Contributors.txt
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
%license COPYING
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
%{python3_sitelib}/ipatests
%{python3_sitelib}/ipatests-*.egg-info
FreeIPA 4.8.5
2020-03-17 14:12:01 +00:00
%{_bindir}/ipa-run-tests-3
%{_bindir}/ipa-test-config-3
%{_bindir}/ipa-test-task-3
%{_bindir}/ipa-run-tests-%{python3_version}
%{_bindir}/ipa-test-config-%{python3_version}
%{_bindir}/ipa-test-task-%{python3_version}
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
%{_bindir}/ipa-run-tests
%{_bindir}/ipa-test-config
%{_bindir}/ipa-test-task
Update to upstream 4.7.0 - New BuildRequires for nodejs and uglify-js - New Requires for 389-ds-base-legacy-tools in server (RHBZ#1606541) - Do not build python2-ipaserver and python2-ipatests for Fedora 29 and up - Do not build any python2 packages for Fedora 30 - Added ipatest man pages to python3-ipatests packages also - Added ipatest bindir links to python3-ipatests for Fedora up to 28 - Dropped explicit copy of freeipa.template, install is doing this now - Added upstream fix: (f3faecb) Fix $-style format string in ipa_ldap_init - Added upstream fix: (4b592fe,1a7baa2) Added reason to raise of errors.NotFound
2018-07-26 11:37:30 +00:00
%{_mandir}/man1/ipa-run-tests.1*
%{_mandir}/man1/ipa-test-config.1*
%{_mandir}/man1/ipa-test-task.1*
Update to upstream 3.3.0
2013-08-08 13:30:10 +00:00
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
# with ipatests
FreeIPA 4.8.5
2020-03-17 14:12:01 +00:00
%endif
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
%if %{with selinux}
FreeIPA 4.8.5
2020-03-17 14:12:01 +00:00
%files selinux
%{_datadir}/selinux/packages/%{selinuxtype}/%{modulename}.pp.*
%ghost %{_sharedstatedir}/selinux/%{selinuxtype}/active/modules/200/%{modulename}
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
# with selinux
FreeIPA 4.8.5
2020-03-17 14:12:01 +00:00
%endif
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
Configure CA replication to use TLS instead of SSL
2012-10-12 18:47:17 +00:00
%changelog
Fix ipatests dependency to python3-pexpect Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2021-02-15 19:34:30 +00:00
* Mon Feb 15 2021 Alexander Bokovoy <abokovoy@redhat.com> - 4.9.2-2
- Fix ipatests dependency to python3-pexpect
Update to FreeIPA 4.9.2 New upstream release. Add RHEL/Fedora ELN-only branding patch. Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2021-02-15 19:02:25 +00:00
* Mon Feb 15 2021 Alexander Bokovoy <abokovoy@redhat.com> - 4.9.2-1
- Upstream release FreeIPA 4.9.2
FreeIPA 4.9.1 release
2021-01-27 13:38:23 +00:00
* Wed Jan 27 2021 Alexander Bokovoy <abokovoy@redhat.com> - 4.9.1-1
- Upstream release FreeIPA 4.9.1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2021-01-26 05:54:38 +00:00
* Tue Jan 26 2021 Fedora Release Engineering <releng@fedoraproject.org> - 4.9.0-2.1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
Set client keytab location for 389ds Resolves: RHBZ#1918075
2021-01-20 22:48:10 +00:00
* Wed Jan 20 2021 Rob Crittenden <rcritten@redhat.com> - 4.9.0-2
- Set client keytab location for 389ds (RHBZ#1918075)
FreeIPA 4.9.0 release Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2020-12-23 15:06:18 +00:00
* Wed Dec 23 17:05:00 EET 2020 Alexander Bokovoy <abokovoy@redhat.com> - 4.9.0-1
- FreeIPA 4.9.0 final release
Test a fix for rhbz#1902811
2020-12-16 06:11:09 +00:00
* Wed Dec 16 07:52:00 EET 2020 Alexander Bokovoy <abokovoy@redhat.com> - 4.9.0-0.6.rc3
- Refactor DNSSEC paths creation code (upstream PR#5340)
FreeIPA 4.9.0 release candidate 3
2020-12-10 16:41:26 +00:00
* Thu Dec 10 20:06:03 EET 2020 Alexander Bokovoy <abokovoy@redhat.com> - 4.9.0-0.5.rc3
- FreeIPA 4.9.0 release candidate 3
- Enforce C.UTF-8 locale in systemd service units
- Fold up fixes from Rawhide and RHEL 8.4 testing
Apply 4.9.0rc2 fixes from upstream Allow mod_auth_gssapi to create and access ccaches in /run/ipa/ccaches Fixes: https://pagure.io/freeipa/issue/8613 upgrade: provide DOMAIN to the server upgrade dictionary Fixes: https://pagure.io/freeipa/issue/8615
2020-12-09 18:07:18 +00:00
* Wed Dec 9 20:06:03 EET 2020 Alexander Bokovoy <abokovoy@redhat.com> - 4.9.0-0.4.rc2
- Fix upgrade script for CA rule rewrites
- Fix permissions for /run/ipa/ccaches
Correct selinux requirement freeipa-selinux subpackage is used by both client and server but requires freeipa-server subpackage unconditionally. This needs to be removed. Originally, upstream spec file did not have this bug. It was brought in with unification of the specfiles. Resolves: rhbz#1883005 Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2020-12-04 20:21:50 +00:00
* Fri Dec 4 22:17:00 EET 2020 Alexander Bokovoy <abokovoy@redhat.com> - 4.9.0-0.3.rc2
- Correct SELinux policy requirements
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 11:53:27 +00:00
* Fri Dec 4 13:41:28 EET 2020 Alexander Bokovoy <abokovoy@redhat.com> - 4.9.0-0.2.rc2
- FreeIPA 4.9.0 release candidate 2
Update spec file
2020-11-19 18:45:31 +00:00
* Thu Nov 19 2020 Alexander Bokovoy <abokovoy@redhat.com> - 4.9.0-0.1.rc1
- Use correct bind PKCS11 engine dependencies
- Fix SELinux build requirement
- Fix linting requirements
FreeIPA 4.9.0 release candidate 1 - Update to new upstream release - Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 09:56:37 +00:00
* Wed Nov 18 2020 Alexander Bokovoy <abokovoy@redhat.com> - 4.9.0-0.rc1
- FreeIPA 4.9.0 release candidate 1
- Synchronize spec file with upstream and RHEL
Backport #5212 for deployment failures with 389-ds-base 1.4.4.6+
2020-10-28 22:16:06 +00:00
* Wed Oct 28 2020 Adam Williamson <awilliam@redhat.com> - 4.8.10-7
- Backport #5212 for deployment failures with 389-ds-base 1.4.4.6+
Handle better upgrade of sshd_config Fixes: rhbz#1887928
2020-10-13 15:54:07 +00:00
* Tue Oct 13 2020 Alexander Bokovoy <abokovoy@redhat.com> - 4.8.10-6
- Handle sshd_config upgrade properly
Fixes: rhbz#1887928
Properly handle upgrade when systemd-resolved is enabled
2020-09-29 11:04:30 +00:00
* Tue Sep 29 2020 Alexander Bokovoy <abokovoy@redhat.com> - 4.8.10-5
- Properly handle upgrade case when systemd-resolved is enabled
Fix permissions of systemd-resolved configuration file Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2020-09-28 12:38:44 +00:00
* Mon Sep 28 2020 Alexander Bokovoy <abokovoy@redhat.com> - 4.8.10-4
- Fix permissions for /etc/systemd/resolved.conf.d/zzz-ipa.conf
- Add NetworkManager and systemd-resolved configuration files to backup
Fix dependency between freeipa-selinux and freeipa-common We need to make sure freeipa-selinux subpackage pulls the same NVR set of freeipa-* packages. We can achieve this with freeipa-common dependency. Using freeipa-server was wrong as it pulled server packages into a client-only deployment. Rsolves: rhbz#1883005 Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2020-09-27 15:03:50 +00:00
* Sun Sep 27 2020 Alexander Bokovoy <abokovoy@redhat.com> - 4.8.10-3
- Fix dependency between freeipa-selinux and freeipa-common
- Resolves: rhbz#1883005
Support upgrade F32 to F33 with systemd-resolved
2020-09-26 13:40:55 +00:00
* Sat Sep 26 2020 Alexander Bokovoy <abokovoy@redhat.com> - 4.8.10-2
- Support upgrade F32 -> F33 with systemd-resolved
Update changelog
2020-09-26 09:25:51 +00:00
* Sat Sep 26 2020 Alexander Bokovoy <abokovoy@redhat.com> - 4.8.10-1
- Upstream release FreeIPA 4.8.10
Support older installations on upgrade
2020-08-21 12:33:38 +00:00
* Fri Aug 21 2020 Alexander Bokovoy <abokovoy@redhat.com> - 4.8.9-2
- Backport fix for detecting older installations on upgrade
FreeIPA 4.8.7 upstream release
2020-08-20 17:24:07 +00:00
* Thu Aug 20 2020 François Cami <fcami@redhat.com> - 4.8.9-1
- Upstream release FreeIPA 4.8.9
Make use of unshare+chroot in ipa-extdom-extop unittests to work against glibc 2.32
2020-08-03 07:21:36 +00:00
* Mon Aug 03 2020 Alexander Bokovoy <abokovoy@redhat.com> - 4.8.7-5
- Make use of unshare+chroot in ipa-extdom-extop unittests to work against glibc 2.32
- Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-08-01 01:04:16 +00:00
* Sat Aug 01 2020 Fedora Release Engineering <releng@fedoraproject.org> - 4.8.7-4
- Second attempt - Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
Conditional fixes for ELN to set krb5-kdb version appropriately Signed-off-by: Merlin Mathesius <mmathesi@redhat.com>
2020-07-30 13:23:26 +00:00
* Thu Jul 30 2020 Merlin Mathesius <mmathesi@redhat.com> - 4.8.7-3
- Conditional fixes for ELN to set krb5-kdb version appropriately
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-07-27 17:48:52 +00:00
* Mon Jul 27 2020 Fedora Release Engineering <releng@fedoraproject.org> - 4.8.7-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
FreeIPA 4.8.7 upstream release
2020-06-10 20:45:00 +00:00
* Wed Jun 10 2020 Alexander Bokovoy <abokovoy@redhat.com> - 4.8.7-1
- Upstream release FreeIPA 4.8.7
Rebuilt for Python 3.9
2020-05-26 00:45:52 +00:00
* Tue May 26 2020 Miro Hrončok <mhroncok@redhat.com> - 4.8.6-2
- Rebuilt for Python 3.9
FreeIPA 4.8.6 release
2020-03-27 07:35:21 +00:00
* Fri Mar 27 2020 Alexander Bokovoy <abokovoy@redhat.com> - 4.8.6-1
- Upstream release FreeIPA 4.8.6
Roll up post-release fixes from upstream Move freeipa-selinux to be a dependency of freeipa-common instead of freeipa-server as client is also using some of the defined contexts.
2020-03-21 20:41:22 +00:00
* Sat Mar 21 2020 Alexander Bokovoy <abokovoy@redhat.com> - 4.8.5-2
- Roll up post-release fixes from upstream
- Move freeipa-selinux to be a dependency of freeipa-common
Depend on selinux-policy-devel 3.14.6-9 for the build https://github.com/fedora-selinux/selinux-policy/pull/333 is only fixed in selinux-policy-devel-3.14.6-9.fc33.
2020-03-18 15:39:50 +00:00
* Wed Mar 18 2020 Alexander Bokovoy <abokovoy@redhat.com> - 4.8.5-1
Upstream release FreeIPA 4.8.5
2020-03-17 14:12:44 +00:00
- Upstream release FreeIPA 4.8.5
Depend on selinux-policy-devel 3.14.6-9 for the build https://github.com/fedora-selinux/selinux-policy/pull/333 is only fixed in selinux-policy-devel-3.14.6-9.fc33.
2020-03-18 15:39:50 +00:00
- Depend on selinux-policy-devel 3.14.6-9 for build due to a makefile issue in
SELinux external policy support
Upstream release FreeIPA 4.8.5
2020-03-17 14:12:44 +00:00
Support OpenDNSSEC 2.1 Resolves: #1809492
2020-03-03 15:01:29 +00:00
* Tue Mar 03 2020 Alexander Bokovoy <abokovoy@redhat.com> - 4.8.4-8
- Support opendnssec 2.1
- Resolves: #1809492
Fix audit_as_req() callback usage. Fixes: rhbz#1803786 Signed-off-by: François Cami <fcami@redhat.com>
2020-02-17 16:46:45 +00:00
* Mon Feb 17 2020 François Cami <fcami@redhat.com> - 4.8.4-7
- Fix audit_as_req() callback usage
- Resolves: #1803786
Fix constraint delegation for krb5 1.18 update Fixes: rhbz#1797096
2020-02-01 08:14:56 +00:00
* Sat Feb 01 2020 Alexander Bokovoy <abokovoy@redhat.com> - 4.8.4-6
- Fix constraint delegation for krb5 1.18 update
- Resolves: #1797096
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-01-28 18:58:21 +00:00
* Tue Jan 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 4.8.4-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
Rebuild against krb5 1.18 beta
2020-01-28 08:22:32 +00:00
* Tue Jan 28 2020 Alexander Bokovoy <abokovoy@redhat.com> - 4.8.4-4
- Rebuild against krb5 1.18 beta
Rebuild against Samba 4.12RC1
2020-01-26 20:07:15 +00:00
* Sun Jan 26 2020 Alexander Bokovoy <abokovoy@redhat.com> - 4.8.4-3
- Rebuild against Samba 4.12RC1
Backport PR #4045 to fix overlapping DNS zone check bugs
2019-12-16 17:50:34 +00:00
* Mon Dec 16 2019 Adam Williamson <awilliam@redhat.com> - 4.8.4-2
- Backport PR #4045 to fix overlapping DNS zone check bugs
FreeIPA 4.8.4 release
2019-12-14 12:56:41 +00:00
* Sat Dec 14 2019 Alexander Bokovoy <abokovoy@redhat.com> - 4.8.4-1
- New upstream release 4.8.4
New upstream security release 4.8.3
2019-11-26 14:17:22 +00:00
* Tue Nov 26 2019 Alexander Bokovoy <abokovoy@redhat.com> - 4.8.3-1
- New upstream release 4.8.3
- CVE-2019-14867: Denial of service in IPA server due to wrong use of ber_scanf()
- CVE-2019-10195: Don't log passwords embedded in commands in calls using batch
Update to 4.8.2 - Replace %%{_libdir} macro in BuildRequires (#1746882) - Restore user-nsswitch.conf before calling authselect (#1746557) - ipa service-find does not list cifs service created by ipa-client-samba (#1731433) - Occasional 'whoami.data is undefined' error in FreeIPA web UI (#1699109) - ipa-kra-install fails due to fs.protected_regular=1 (#1698384)
2019-11-12 19:43:05 +00:00
* Tue Nov 12 2019 Rob Crittenden <rcritten@redhat.com> - 4.8.2-1
- New upstream release 4.8.2
- Replace %%{_libdir} macro in BuildRequires (#1746882)
- Restore user-nsswitch.conf before calling authselect (#1746557)
- ipa service-find does not list cifs service created by
ipa-client-samba (#1731433)
- Occasional 'whoami.data is undefined' error in FreeIPA web UI
(#1699109)
- ipa-kra-install fails due to fs.protected_regular=1 (#1698384)
Don't create log files from the helper scripts Fixes rhbz#1754189
2019-10-20 10:18:47 +00:00
* Sun Oct 20 2019 Alexander Bokovoy <abokovoy@redhat.com> - 4.8.1-5
- Don't create log files from helper scripts
- Fixes: rhbz#1754189
Fix compat issue with preexec_fn in Python 3.8 Fixes: rhbz#1759290
2019-10-08 08:28:25 +00:00
* Tue Oct 08 2019 Christian Heimes <cheimes@redhat.com> - 4.8.1-4
- Fix compatibility issue with preexec_fn in Python 3.8
- Fixes: rhbz#1759290
Fix bogus changelog date
2019-10-01 06:41:30 +00:00
* Tue Oct 1 2019 Alexander Bokovoy <abokovoy@redhat.com> - 4.8.1-3
Fix compatibility with Samba 4.11 Fixes: rhbz#1757089
2019-10-01 06:40:01 +00:00
- Fix ipasam for compatibility with Samba 4.11
- Fixes: rhbz#1757089
Rebuilt for Python 3.8
2019-08-19 08:14:17 +00:00
* Mon Aug 19 2019 Miro Hrončok <mhroncok@redhat.com> - 4.8.1-2
- Rebuilt for Python 3.8
Update to FreeIPA 4.8.1
2019-08-14 15:55:41 +00:00
* Wed Aug 14 2019 Alexander Bokovoy <abokovoy@redhat.com> - 4.8.1-1
- New upstream release 4.8.1
- Fixes: rhbz#1732528
- Fixes: rhbz#1732524
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2019-07-25 01:00:19 +00:00
* Thu Jul 25 2019 Fedora Release Engineering <releng@fedoraproject.org> - 4.8.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
FreeIPA 4.8.0 release
2019-07-03 07:26:16 +00:00
* Wed Jul 03 2019 Alexander Bokovoy <abokovoy@redhat.com> - 4.8.0-1
- New upstream release 4.8.0
- New subpackage: freeipa-client-samba
Handle upgrade when trust is configured but not established yet Fixes: rhbz#1708808
2019-05-11 08:59:25 +00:00
* Sat May 11 2019 Alexander Bokovoy <abokovoy@redhat.com> - 4.7.90.pre1-6
- Upgrade: handle situation when trusts were configured but not established yet
Fixed: rhbz#1708808
Bump release as the previous version was already built
2019-05-03 20:25:13 +00:00
* Fri May 3 2019 Alexander Bokovoy <abokovoy@redhat.com> - 4.7.90.pre1-5
- Add krb5-kdb-server dependency provided by krb5-server >= 1.17-17
Rebuild to drop upper limit for Kerberos package After krb5-server will provide krb5-kdb-version, we'll switch to it
2019-05-03 20:09:22 +00:00
* Fri May 3 2019 Alexander Bokovoy <abokovoy@redhat.com> - 4.7.90.pre1-4
- Rebuild to drop upper limit for Kerberos package
Bump release as the previous version was already built
2019-05-03 20:25:13 +00:00
After krb5-server will provide krb5-kdb-version, we'll switch to it
Rebuild to drop upper limit for Kerberos package After krb5-server will provide krb5-kdb-version, we'll switch to it
2019-05-03 20:09:22 +00:00
Backport PR #3104 to fix a font path error
2019-05-01 23:29:01 +00:00
* Wed May 1 2019 Adam Williamson <awilliam@redhat.com> - 4.7.90.pre1-3
- Backport PR #3104 to fix a font path error
Revert MINSSF defaults because realmd cannot join FreeIPA right now realmd uses anonymous LDAP connection for the discovery and validation and fails to validate it is joining FreeIPA server.
2019-05-01 18:29:12 +00:00
* Wed May 1 2019 Alexander Bokovoy <abokovoy@redhat.com> - 4.7.90.pre1-2
- Revert MINSSF defaults because realmd cannot join FreeIPA right now
as it uses anonymous LDAP connection for the discovery and validation
First release candidate for FreeIPA 4.8.0
2019-04-29 19:40:13 +00:00
* Mon Apr 29 2019 Alexander Bokovoy <abokovoy@redhat.com> - 4.7.90.pre1-1
- First release candidate for FreeIPA 4.8.0
Fixed rhbz#1696963
2019-04-06 20:00:21 +00:00
* Sat Apr 06 2019 Alexander Bokovoy <abokovoy@redhat.com> - 4.7.2-8
- Fixed: rhbz#1696963 (Failed to install replica)
Fix breakage for Samba 4.10 and 389-ds 1.4.1.2
2019-04-06 08:31:42 +00:00
* Sat Apr 06 2019 Alexander Bokovoy <abokovoy@redhat.com> - 4.7.2-7
- Support Samba 4.10
- Support 389-ds 1.4.1.2-2.fc30 or later
Fix ipa-client-automount to work with new nfs-utils nfs-utils no longer create /etc/sysconfig/nfs, take that into account using upstream FreeIPA patch. See https://bugzilla.redhat.com/show_bug.cgi?id=1668836 for nfs-utils detalis.
2019-02-28 09:05:01 +00:00
* Thu Feb 28 2019 Alexander Bokovoy <abokovoy@redhat.com> - 4.7.2-6
- Support new nfs-utils behavior (#1668836)
- ipa-client-automount now works without /etc/sysconfig/nfs
- Fix FTBS due to Samba having removed talloc_strackframe.h and memory.h (#1678670) - Fix CA setup when fs.protected_regular=1 (#1677027)
2019-02-19 10:44:17 +00:00
* Tue Feb 19 2019 François Cami <fcami@redhat.com> - 4.7.2-5
- Fix FTBS due to Samba having removed talloc_strackframe.h
and memory.h (#1678670)
- Fix CA setup when fs.protected_regular=1 (#1677027)
Rebuild for python-kdcproxy 0.4.1 and disable Python dep generator use
2019-02-11 18:42:52 +00:00
* Mon Feb 11 2019 Alexander Bokovoy <abokovoy@redhat.com> - 4.7.2-4
- Disable python dependency generator in Rawhide as not all required packages support it yet
- Require python-kdcproxy 0.4.1 or later on Rawhide
Fix mass rebuild failure Fix space/tabs issues reported by 'fedpkg lint'
2019-02-08 18:40:17 +00:00
* Fri Feb 8 2019 Alexander Bokovoy <abokovoy@redhat.com> - 4.7.2-3
- Fix compile issues after a mass rebuild using upstream patches
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2019-01-31 20:08:31 +00:00
* Thu Jan 31 2019 Fedora Release Engineering <releng@fedoraproject.org> - 4.7.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
Update to FreeIPA 4.7.2
2018-12-03 11:34:40 +00:00
* Mon Dec 03 2018 Alexander Bokovoy <abokovoy@redhat.com> - 4.7.2-1
- Upstream release FreeIPA 4.7.2
Update PR #2610 patch to tiran's modified version
2018-11-28 08:37:51 +00:00
* Wed Nov 28 2018 Adam Williamson <awilliam@redhat.com> - 4.7.1-4
- Update PR #2610 patch to tiran's modified version
Backport PR #2610 to fix for authselect 1.0.2+ (see #1645708)
2018-11-28 01:13:12 +00:00
* Tue Nov 27 2018 Adam Williamson <awilliam@redhat.com> - 4.7.1-3
- Backport PR #2610 to fix for authselect 1.0.2+ (see #1645708)
Rebuild with krb5-1.17 Also bump SSSD version to pick up return of pysss.getgrouplist() API
2018-11-11 16:42:51 +00:00
* Sun Nov 11 2018 Alexander Bokovoy <abokovoy@redhat.com> - 4.7.1-2
- Rebuild for krb5-1.17 (#1648673)
- Bump required SSSD version to 2.0.0-4 to get back pysss.getgrouplist() API
Update to upstream 4.7.1
2018-10-05 19:51:43 +00:00
* Fri Oct 5 2018 Rob Crittenden <rcritten@redhat.com> - 4.7.1-1
- Update to upstream 4.7.1
Committing for Christian Heimes: - Remove Python 2 support from Fedora 30 - https://fedoraproject.org/wiki/Changes/FreeIPA_Python_2_Removal
2018-09-25 09:09:19 +00:00
* Tue Sep 25 2018 Christian Heimes <cheimes@redhat.com> - 4.7.0-5
- Remove Python 2 support from Fedora 30
- https://fedoraproject.org/wiki/Changes/FreeIPA_Python_2_Removal
- Enable python2 client packages for f30 for now again
2018-09-04 13:56:20 +00:00
* Tue Sep 4 2018 Thomas Woerner <twoerner@redhat.com> - 4.7.0-4
- Enable python2 client packages for f30 for now again
Fix only client build for Fedora>=28 and RHEL>7, readd special patch handing
2018-09-04 10:14:16 +00:00
* Tue Sep 4 2018 Thomas Woerner <twoerner@redhat.com> - 4.7.0-3
- Force generation of aclocal.m4 and configuration scripts
- Fix only client build for Fedora>=28 and RHEL>7
- Bring back special patch handling for Fedora
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662) - Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662) - Add "389-ds-base-legacy-tools" to requires - Refactor os-release and platform information (#1609475) - Don't check for systemd service (#1609475) - Switched to upstream spec file with small adaptions
2018-09-03 15:50:10 +00:00
* Mon Sep 3 2018 Thomas Woerner <twoerner@redhat.com> - 4.7.0-2
- Restore SELinux context of session_dir /etc/httpd/alias (pagure#7662)
- Restore SELinux context of template_dir /var/log/dirsrv/slapd-X (pagure#7662)
- Add "389-ds-base-legacy-tools" to requires
- Refactor os-release and platform information (#1609475)
- Don't check for systemd service (#1609475)
- Switched to upstream spec file with small adaptions
* Thu Jul 26 2018 Thomas Woerner <twoerner@redhat.com> - 4.7.0-1
Update to upstream 4.7.0 - New BuildRequires for nodejs and uglify-js - New Requires for 389-ds-base-legacy-tools in server (RHBZ#1606541) - Do not build python2-ipaserver and python2-ipatests for Fedora 29 and up - Do not build any python2 packages for Fedora 30 - Added ipatest man pages to python3-ipatests packages also - Added ipatest bindir links to python3-ipatests for Fedora up to 28 - Dropped explicit copy of freeipa.template, install is doing this now - Added upstream fix: (f3faecb) Fix $-style format string in ipa_ldap_init - Added upstream fix: (4b592fe,1a7baa2) Added reason to raise of errors.NotFound
2018-07-26 11:37:30 +00:00
- Update to upstream 4.7.0
- New BuildRequires for nodejs and uglify-js
- New Requires for 389-ds-base-legacy-tools in server (RHBZ#1606541)
- Do not build python2-ipaserver and python2-ipatests for Fedora 29 and up
- Do not build any python2 packages for Fedora 30
- Added ipatest man pages to python3-ipatests packages also
- Added ipatest bindir links to python3-ipatests for Fedora up to 28
- Dropped explicit copy of freeipa.template, install is doing this now
- Added upstream fix: (f3faecb) Fix $-style format string in ipa_ldap_init
- Added upstream fix: (4b592fe,1a7baa2) Added reason to raise of errors.NotFound
Use versioned python macros
2018-07-16 13:26:12 +00:00
* Mon Jul 16 2018 Alexander Bokovoy <abokovoy@redhat.com> - 4.6.90.pre2-11
- Use version-aware macros for Python
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2018-07-13 00:49:59 +00:00
* Fri Jul 13 2018 Fedora Release Engineering <releng@fedoraproject.org> - 4.6.90.pre2-10
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
Rebuilt for Python 3.7
2018-07-02 16:22:31 +00:00
* Mon Jul 02 2018 Miro Hrončok <mhroncok@redhat.com> - 4.6.90.pre2-9
- Rebuilt for Python 3.7
Build using the py3-lesscpy command
2018-06-27 17:53:07 +00:00
* Wed Jun 27 2018 Rob Crittenden <rcritten@redhat.com> - 4.6.90.pre2-8
- Build UI using py3-lesscpy
*-domainname.service moved to the hostname package in F29 Resolves: #1592355
2018-06-19 17:12:16 +00:00
* Tue Jun 19 2018 Rob Crittenden <rcritten@redhat.com> - 4.6.90.pre2-7
- *-domainname.service moved to the hostname package in F29 (#1592355)
Rebuilt for Python 3.7
2018-06-19 08:43:19 +00:00
* Tue Jun 19 2018 Miro Hrončok <mhroncok@redhat.com> - 4.6.90.pre2-6
- Rebuilt for Python 3.7
Change BuildRequires from python-lesscpy to python3-lesscpy
2018-06-15 17:32:12 +00:00
* Fri Jun 15 2018 Rob Crittenden <rcritten@redhat.com> - 4.6.90.pre2-5
- Change BuildRequires from python-lesscpy to python3-lesscpy
Fix bad date in changelog
2018-06-15 13:41:55 +00:00
* Fri Jun 15 2018 Rob Crittenden <rcritten@redhat.com> - 4.6.90.pre2-4.1
Fedora renamed fedora-domainname.service to nis-domainname.service Resolves: #1588192
2018-06-11 19:51:51 +00:00
- Rename service fedora-domainname.service to nis-domainname.service
(#1588192)
Fix bad date in changelog
2018-06-15 13:41:55 +00:00
- Fix bad date in changelog
Fedora renamed fedora-domainname.service to nis-domainname.service Resolves: #1588192
2018-06-11 19:51:51 +00:00
Fine tune packaging of server templates
2018-05-16 06:48:58 +00:00
* Wed May 16 2018 Alexander Bokovoy <abokovoy@redhat.com> - 4.6.90.pre2-3
- Fine tune packaging of server templates so that it doesn't include
freeipa.template which always go to freeipa-client-common
Exclude /usr/share from client-only builds
2018-05-15 21:11:13 +00:00
* Tue May 15 2018 Rob Crittenden <rcritten@redhat.com> - 4.6.90.pre2-2
- Exclude /usr/share from client-only builds
Update to upstream 4.6.90.pre2 Resolves: #1562606
2018-05-15 20:22:52 +00:00
* Tue May 15 2018 Rob Crittenden <rcritten@redhat.com> - 4.6.90.pre2-1
- Update to upstream 4.6.90.pre2
Fix upgrade when using DNS-less setup and pull new slapi-nis Resolves rhbz#1573636 for nisserver underlinkage Resolves rhbz#1573671 for DNS-less setup upgrade issues
2018-05-02 07:40:46 +00:00
* Wed May 02 2018 Alexander Bokovoy <abokovoy@redhat.com> - 4.6.90.pre1-7
- Fix upgrade when named.conf does not exist
- Resolves rhbz#1573671
- Requires newer slapi-nis to avoid hitting rhbz#1573636
Fix missing import in the upgrade patch
2018-03-21 14:08:55 +00:00
* Wed Mar 21 2018 Alexander Bokovoy <abokovoy@redhat.com> - 4.6.90.pre1-6.1
- Change upgrade code to use DIR-based ccache and no kinit (#1558818)
Require pki-symkey until pki-core has proper dependencies
2018-03-21 14:31:07 +00:00
- Require pki-symkey until pki-core has proper dependencies
Fix missing import in the upgrade patch
2018-03-21 14:08:55 +00:00
Fix changelog date
2018-03-21 11:46:13 +00:00
* Wed Mar 21 2018 Alexander Bokovoy <abokovoy@redhat.com> - 4.6.90.pre1-6
Run upgrade under empty DIR: ccache collection
2018-03-21 11:44:28 +00:00
- Change upgrade code to use DIR-based ccache and no kinit (#1558818)
More fixes to Fedora 28 beta
2018-03-21 08:45:19 +00:00
* Tue Mar 20 2018 Alexander Bokovoy <abokovoy@redhat.com> - 4.6.90.pre1-5
- Apply upstream fix for #1558354
- Run upgrade under file-based ccache (#1558818)
- Fix OTP token issuance due to regression in https://pagure.io/389-ds-base/issue/49617
Fix upgrades harder (extension of -3 patch) (#1558354)
2018-03-20 23:00:40 +00:00
* Tue Mar 20 2018 Adam Williamson <awilliam@redhat.com> - 4.6.90.pre1-4
- Fix upgrades harder (extension of -3 patch) (#1558354)
Fix upgrade from F27 to F28 Fixes rhbz#1558354
2018-03-20 07:43:42 +00:00
* Tue Mar 20 2018 Alexander Bokovoy <abokovoy@redhat.com> - 4.6.90.pre1-3
- Fix upgrade from F27 to F28 (#1558354)
Patch to fix GUI login for non-admin users Resolves: #1557609
2018-03-19 21:28:51 +00:00
* Mon Mar 19 2018 Rob Crittenden <rcritten@redhat.com> - 4.6.90.pre1-2
- Patch to fix GUI login for non-admin users (#1557609)
Update to upstream 4.6.90.pre1 Resolves: #1551830, #1551677, #1547959, #1496562, #1179220
2018-03-16 17:47:47 +00:00
* Fri Mar 16 2018 Rob Crittenden <rcritten@redhat.com> - 4.6.90.pre1-1
- Update to upstream 4.6.90.pre1
Disable i686 server build: 389-ds no longer provides that arch Build only the client pieces. Resolves: #1544386
2018-02-20 18:24:55 +00:00
* Tue Feb 20 2018 Rob Crittenden <rcritten@redhat.com> - 4.6.3-5
- Disable i686 server builds because 389-ds no longer provides
builds on that arch. (#1544386)
Escape macros in %changelog Reference: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/Y2ZUKK2B7T2IKXPMODNF6HB2O5T5TS6H/ Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
2018-02-09 08:04:32 +00:00
* Fri Feb 09 2018 Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 4.6.3-4
- Escape macros in %%changelog
4.6.3-3: fix KRA upgrade issue, remove mod_wsgi confict - Don't fail on upgrades if KRA is not installed - Remove Conflicts between mod_wsgi and python3-mod_wsgi
2018-02-08 21:54:42 +00:00
* Thu Feb 8 2018 Rob Crittenden <rcritten@redhat.com> - 4.6.3-3
- Don't fail on upgrades if KRA is not installed
- Remove Conflicts between mod_wsgi and python3-mod_wsgi
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2018-02-07 10:08:07 +00:00
* Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 4.6.3-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
4.6.3-1: rebase to upstream 4.6.3
2018-01-31 17:01:27 +00:00
* Wed Jan 31 2018 Rob Crittenden <rcritten@redhat.com> - 4.6.3-1
- Update to upstream 4.6.3
Fix directory ownership in python3 subpackage
2018-01-03 14:33:08 +00:00
* Wed Jan 03 2018 Lumír Balhar <lbalhar@redhat.com> - 4.6.1-5
- Fix directory ownership in python3 subpackage
4.6.1-4 Update execmem patch Update workaround patch to prevent SELinux execmem AVC (#1491508) Signed-off-by: Rob Crittenden <rcritten@redhat.com>
2017-10-17 08:58:10 +00:00
* Tue Oct 17 2017 Rob Crittenden <rcritten@redhat.com> - 4.6.1-4
- Update workaround patch to prevent SELinux execmem AVC (#1491508)
Another attempt at fixing bug 1491053
2017-10-16 18:56:03 +00:00
* Mon Oct 16 2017 Alexander Bokovoy <abokovoy@redhat.com> - 4.6.1-3
- Another attempt at fix for bug #1491053
4.6.1-2: Rebuild against krb5-1.16 Signed-off-by: Tomas Krizek <tkrizek@redhat.com>
2017-10-06 08:12:05 +00:00
* Fri Oct 06 2017 Tomas Krizek <tkrizek@redhat.com> - 4.6.1-2
- Rebuild against krb5-1.16
4.6.1-1: rebase to upstream 4.6.1 - Fixes #1491053 Firefox reports insecure TLS configuration when visiting FreeIPA web UI after standard server deployment Signed-off-by: Tomas Krizek <tkrizek@redhat.com>
2017-09-22 11:44:05 +00:00
* Fri Sep 22 2017 Tomas Krizek <tkrizek@redhat.com> - 4.6.1-1
- Fixes #1491053 Firefox reports insecure TLS configuration when visiting
FreeIPA web UI after standard server deployment
Backport fixes for a couple more critical F27 Beta issues
2017-09-13 16:48:02 +00:00
* Wed Sep 13 2017 Adam Williamson <awilliam@redhat.com> - 4.6.0-3
- Fixes #1490762 Ipa-server-install update dse.ldif with wrong SELinux context
- Fixes #1491056 FreeIPA enrolment via kickstart fails
Backport fix for #1488640, BuildRequires diffstat
2017-09-06 15:19:08 +00:00
* Wed Sep 06 2017 Adam Williamson <awilliam@redhat.com> - 4.6.0-2
Backport fixes for a couple more critical F27 Beta issues
2017-09-13 16:48:02 +00:00
- Fixes #1488640 "unknown command 'undefined'" error when changing password in web UI
Backport fix for #1488640, BuildRequires diffstat
2017-09-06 15:19:08 +00:00
- BuildRequires diffstat (for the use in patch application)
4.6.0-1: rebase to upstream 4.6.0 Signed-off-by: Tomas Krizek <tkrizek@redhat.com>
2017-09-04 10:01:19 +00:00
* Mon Sep 04 2017 Tomas Krizek <tkrizek@redhat.com> - 4.6.0-1
- Rebase to upstream 4.6.0
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
2017-08-02 20:46:40 +00:00
* Wed Aug 02 2017 Fedora Release Engineering <releng@fedoraproject.org> - 4.5.3-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
2017-07-26 08:44:20 +00:00
* Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 4.5.3-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
4.5.3-1: Update to upstream 4.5.3 Signed-off-by: Tomas Krizek <tkrizek@redhat.com>
2017-07-21 14:31:34 +00:00
* Fri Jul 21 2017 Tomas Krizek <tkrizek@redhat.com> - 4.5.3-1
- Update to upstream 4.5.3 - see https://www.freeipa.org/page/Releases/4.5.3
Make sure tmpfiles.d snippet is in place after replica install
2017-07-13 07:34:49 +00:00
* Thu Jul 13 2017 Alexander Bokovoy <abokovoy@redhat.com> - 4.5.2-4
- Make sure tmpfiles.d snippet for replica is in place after install
Fix build with Samba 4.7.0-RC1
2017-07-10 06:56:04 +00:00
* Mon Jul 10 2017 Alexander Bokovoy <abokovoy@redhat.com> - 4.5.2-3
- Fix build with Samba 4.7.0-RC1
Increase Java stack size to 16m ppc64-le builds fail with a crash when running Rhino to compile js code. In past such failures were associated with inadequate Java stack size. Test this idea with a larger stack size.
2017-07-10 09:30:58 +00:00
- Increase java stack for rhino calls to get around crashes on ppc64-le
Fix build with Samba 4.7.0-RC1
2017-07-10 06:56:04 +00:00
fix ip address checks and python-netifaces Important patches that will be part of 4.5.3 release. Signed-off-by: Tomas Krizek <tkrizek@redhat.com>
2017-06-20 11:39:50 +00:00
* Tue Jun 20 2017 Tomas Krizek <tkrizek@redhat.com> - 4.5.2-2
- Patch: Fix IP address checks
- Patch: python-netifaces fix
Update to upstream 4.5.2 Signed-off-by: Tomas Krizek <tkrizek@redhat.com>
2017-06-18 18:09:59 +00:00
* Sun Jun 18 2017 Tomas Krizek <tkrizek@redhat.com> - 4.5.2-1
- Update to upstream 4.5.2 - see https://www.freeipa.org/page/Releases/4.5.2
Update to upstream 4.5.1
2017-05-25 13:11:33 +00:00
* Thu May 25 2017 Tomas Krizek <tkrizek@redhat.com> - 4.5.1-1
- Update to upstream 4.5.1 - see https://www.freeipa.org/page/Releases/4.5.1
- Fixes #1168266 UI drops "Enknown Error" when the ipa record in /etc/hosts changes
4.4.4-2 bugfixes - Fixes #1448049 Subpackage freeipa-server-common has unmet dependencies on Rawhide - Fixes #1430247 FreeIPA server deployment runs ipa-custodia on Python 3, should use Python 2 - Fixes #1446744 python2-ipaclient subpackage does not own %{python_sitelib}/ipaclient/plugins - Fixes #1440525 surplus 'the' in output of `ipa-adtrust-install` - Fixes #1411810 ipa-replica-install fails with 406 Client Error - Fixes #1405814 ipa plugins: ERROR an internal error occured
2017-05-17 15:52:32 +00:00
* Tue May 23 2017 Tomas Krizek <tkrizek@redhat.com> - 4.4.4-2
- Fixes #1448049 Subpackage freeipa-server-common has unmet dependencies on Rawhide
- Fixes #1430247 FreeIPA server deployment runs ipa-custodia on Python 3, should use Python 2
Escape macros in %changelog Reference: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/Y2ZUKK2B7T2IKXPMODNF6HB2O5T5TS6H/ Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
2018-02-09 08:04:32 +00:00
- Fixes #1446744 python2-ipaclient subpackage does not own %%{python_sitelib}/ipaclient/plugins
4.4.4-2 bugfixes - Fixes #1448049 Subpackage freeipa-server-common has unmet dependencies on Rawhide - Fixes #1430247 FreeIPA server deployment runs ipa-custodia on Python 3, should use Python 2 - Fixes #1446744 python2-ipaclient subpackage does not own %{python_sitelib}/ipaclient/plugins - Fixes #1440525 surplus 'the' in output of `ipa-adtrust-install` - Fixes #1411810 ipa-replica-install fails with 406 Client Error - Fixes #1405814 ipa plugins: ERROR an internal error occured
2017-05-17 15:52:32 +00:00
- Fixes #1440525 surplus 'the' in output of `ipa-adtrust-install`
- Fixes #1411810 ipa-replica-install fails with 406 Client Error
- Fixes #1405814 ipa plugins: ERROR an internal error occured
Update to upstream 4.4.4
2017-03-24 12:55:56 +00:00
* Fri Mar 24 2017 Tomas Krizek <tkrizek@redhat.com> - 4.4.4-1
- Update to upstream 4.4.4 - see https://www.freeipa.org/page/Releases/4.4.4
- Add upstream signature file for tarball
Use different method to keep /usr/bin/ipa on Python 2 Fixes #1426847 - cannot upgrade freeipa-client on rawhide Thanks to Petr Viktorin for coming up with the change
2017-03-01 06:12:37 +00:00
* Wed Mar 1 2017 Alexander Bokovoy <abokovoy@redhat.com> - 4.4.3-8
- Use different method to keep /usr/bin/ipa on Python 2
- Fixes #1426847
4.4.3-7 - Fixes #1413137 CVE-2017-2590 ipa: Insufficient permission check for ca-del, ca-disable and ca-enable commands
2017-02-27 13:21:48 +00:00
* Mon Feb 27 2017 Tomas Krizek <tkrizek@redhat.com> - 4.4.3-7
- Fixes #1413137 CVE-2017-2590 ipa: Insufficient permission check for
ca-del, ca-disable and ca-enable commands
Rebuild to pick up system-python dependency change Fixes #1426847 -- Cannot upgrade freeipa-client on rawhide
2017-02-27 08:36:26 +00:00
* Mon Feb 27 2017 Alexander Bokovoy <abokovoy@redhat.com> - 4.4.3-6
- Rebuild to pick up system-python dependency change
- Fixes #1426847 - Cannot upgrade freeipa-client on rawhide
Add support for KRB DAL 6.1 and bind-dyndb-ldap 11.0
2017-02-15 14:48:51 +00:00
* Wed Feb 15 2017 Tomas Krizek <tkrizek@redhat.com> - 4.4.3-5
- Fixes #1403352 - bind-dyndb-ldap: support new named.conf API in BIND 9.11
- Fixes #1412739 - ipa-kdb: support DAL version 6.1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
2017-02-10 10:00:13 +00:00
* Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 4.4.3-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
Rebuild for xmlrpc-c Signed-off-by: Igor Gnatenko <ignatenko@redhat.com>
2017-01-21 13:50:01 +00:00
* Sat Jan 21 2017 Igor Gnatenko <ignatenko@redhat.com> - 4.4.3-3
- Rebuild for xmlrpc-c
Rebuild for Python 3.6
2016-12-22 12:08:41 +00:00
* Thu Dec 22 2016 Miro Hrončok <mhroncok@redhat.com> - 4.4.3-2
- Rebuild for Python 3.6
Update to upstream 4.4.3
2016-12-16 14:41:34 +00:00
* Fri Dec 16 2016 Pavel Vomacka <pvomacka@redhat.com> - 4.4.3-1
- Update to upstream 4.4.3 - see http://www.freeipa.org/page/Releases/4.4.3
4.4.2-4: CVE-2016-9575, CVE-2016-7030 Fixes 1395311 - CVE-2016-9575 ipa: Insufficient permission check in certprofile-mod Fixes 1370493 - CVE-2016-7030 ipa: DoS attack against kerberized services by abusing password policy
2016-12-14 21:02:29 +00:00
* Wed Dec 14 2016 Pavel Vomacka <pvomacka@redhat.com> - 4.4.2-4
- Fixes 1395311 - CVE-2016-9575 ipa: Insufficient permission check in certprofile-mod
- Fixes 1370493 - CVE-2016-7030 ipa: DoS attack against kerberized services
by abusing password policy
Fix bz 1389866 Support DAL version 5 and version 6 in KDB driver https://bugzilla.redhat.com/show_bug.cgi?id=1389866
2016-11-29 09:22:34 +00:00
* Tue Nov 29 2016 Petr Vobornik <pvoborni@redhat.com> - 4.4.2-3
- Fixes 1389866 krb5-server: ipadb_change_pwd(): kdb5_util killed by SIGSEGV
Rebuild against krb5-1.15 fixes: #1387460
2016-10-21 21:54:12 +00:00
* Fri Oct 21 2016 Petr Vobornik <pvoborni@redhat.com> - 4.4.2-2
- Rebuild against krb5-1.15
Update to upstream 4.4.2
2016-10-13 14:48:06 +00:00
* Thu Oct 13 2016 Petr Vobornik <pvoborni@redhat.com> - 4.4.2-1
- Update to upstream 4.4.2 - see http://www.freeipa.org/page/Releases/4.4.2
Add changelog
2016-09-01 15:16:29 +00:00
* Thu Sep 01 2016 Alexander Bokovoy <abokovoy@redhat.com> - 4.4.1-1
- Update to upstream 4.4.1 - see http://www.freeipa.org/page/Releases/4.4.1
4.3.2-2: CVE-2016-5404
2016-08-19 12:41:05 +00:00
* Fri Aug 19 2016 Petr Vobornik <pvoborni@redhat.com> - 4.3.2-2
- Fixes 1365669 - The ipa-server-upgrade command failed when named-pkcs11 does
not happen to run during dnf upgrade
- Fixes 1367883 - CVE-2016-5404 freeipa: ipa: Insufficient privileges check
in certificate revocation
- Fixes 1364338 - Freeipa cannot be build on fedora 25
Update to upstream 4.3.2
2016-07-22 13:43:40 +00:00
* Fri Jul 22 2016 Petr Vobornik <pvoborni@redhat.com> - 4.3.2-1
- Update to upstream 4.3.2 - see http://www.freeipa.org/page/Releases/4.3.2
- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages
2016-07-19 07:06:29 +00:00
* Tue Jul 19 2016 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 4.3.1-2
- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages
Update to upstream 4.3.1
2016-03-04 14:30:38 +00:00
* Thu Mar 24 2016 Petr Vobornik <pvoborni@redhat.com> - 4.3.1-1
- Update to upstream 4.3.1 - see http://www.freeipa.org/page/Releases/4.3.1
fix build with Samba 4.4 - Fix build with Samba 4.4 - Update SELinux requires to fix connection check during installation
2016-02-04 11:16:42 +00:00
* Thu Feb 04 2016 Petr Vobornik <pvoborni@redhat.com> - 4.3.0-3
- Fix build with Samba 4.4
- Update SELinux requires to fix connection check during installation
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
2016-02-03 20:46:39 +00:00
* Wed Feb 03 2016 Fedora Release Engineering <releng@fedoraproject.org> - 4.3.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
Update to upstream 4.3.0
2015-12-14 23:02:04 +00:00
* Fri Dec 18 2015 Petr Vobornik <pvoborni@redhat.com> - 4.3.0-1
- Update to upstream 4.3.0 - see http://www.freeipa.org/page/Releases/4.3.0
Workarounds for SELinux execmem violations in cryptography ipaserver.dcerpc uses M2Crypto again on Python 2.7 and Dogtag's pki.client no longer tries to use PyOpenSSL instead of Python's ssl module. Some dependencies like Dogtag's pki.client library and custodia use python-requsts to make HTTPS connection. python-requests prefers PyOpenSSL over Python's stdlib ssl module. PyOpenSSL is build on top of python-cryptography which trigger a execmem SELinux violation in the context of Apache HTTPD (httpd_execmem). When requests is imported, it always tries to import pyopenssl glue code from urllib3's contrib directory. The import of PyOpenSSL is enough to trigger the SELinux denial. A hack in wsgi.py prevents the import by raising an ImportError.
2015-12-07 18:03:41 +00:00
* Mon Dec 07 2015 Petr Vobornik <pvoborni@redhat.com> - 4.2.3-2
- Workarounds for SELinux execmem violations in cryptography
Update to upstream 4.2.3
2015-11-02 18:42:29 +00:00
* Mon Nov 02 2015 Petr Vobornik <pvoborni@redhat.com> - 4.2.3-1
- Update to upstream 4.2.3 - see http://www.freeipa.org/page/Releases/4.2.3
- fix #1274905
Add dependency to samba-common-tools to -trust-ad subpackage Samba packaging moved samba-common to be multi-architecture-friendly and moved net utility to samba-common-tools. We use net utility in ipa-adtrust-install, thus we need to depend on the correct package.
2015-10-21 16:40:20 +00:00
* Wed Oct 21 2015 Alexander Bokovoy <abokovoy@redhat.com> - 4.2.2-2
- Depend on samba-common-tools for the trust-ad subpackage after
samba package split
Rebuild against krb5 1.14
2015-10-21 16:45:51 +00:00
- Rebuild against krb5 1.14 to fix bug #1273957
Add dependency to samba-common-tools to -trust-ad subpackage Samba packaging moved samba-common to be multi-architecture-friendly and moved net utility to samba-common-tools. We use net utility in ipa-adtrust-install, thus we need to depend on the correct package.
2015-10-21 16:40:20 +00:00
Update to upstream 4.2.2
2015-10-08 08:51:27 +00:00
* Thu Oct 8 2015 Petr Vobornik <pvoborni@redhat.com> - 4.2.2-1
- Update to upstream 4.2.2 - see http://www.freeipa.org/page/Releases/4.2.2
Update to upstream 4.2.1
2015-09-07 16:41:00 +00:00
* Mon Sep 7 2015 Petr Vobornik <pvoborni@redhat.com> - 4.2.1-1
- Update to upstream 4.2.1 - see http://www.freeipa.org/page/Releases/4.2.1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
2015-06-17 06:41:22 +00:00
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 4.1.4-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
Fix typo in the patch to fix trusts
2015-05-12 12:42:09 +00:00
* Tue May 12 2015 Alexander Bokovoy <abokovoy@redhat.com> - 4.1.4-4
- Fix typo in the patch to fix bug #1219834
Fix establishing trust when using Samba 4.2 Fixes: 1219834
2015-05-11 17:32:13 +00:00
* Mon May 11 2015 Alexander Bokovoy <abokovoy@redhat.com> - 4.1.4-3
- Fix FreeIPA trusts to AD feature with Samba 4.2 (#1219834)
replace mod_auth-kerb with mod_auth_gssapi
2015-03-30 13:50:37 +00:00
* Mon Mar 30 2015 Petr Vobornik <pvoborni@redhat.com> - 4.1.4-2
- Replace mod_auth_kerb usage with mod_auth_gssapi
Upstream 4.1.4 release to fix CVE-2015-1827
2015-03-26 14:46:20 +00:00
* Thu Mar 26 2015 Alexander Bokovoy <abokovoy@redhat.com> - 4.1.4-1
- Update to upstream 4.1.4 - see http://www.freeipa.org/page/Releases/4.1.4
- fix CVE-2015-1827 (#1206047)
- Require slapi-nis 0.54.2 and newer for CVE-2015-0283 fixes
Timeout when performing time sync during client installation https://fedorahosted.org/freeipa/ticket/4842
2015-03-17 09:26:56 +00:00
* Tue Mar 17 2015 Petr Vobornik <pvoborni@redhat.com> - 4.1.3-3
- Timeout ipa-client install if ntp server is unreachable #4842
- Skip time sync during client install when using --no-ntp #4842
Add missing sssd python dependencies https://bugzilla.redhat.com/show_bug.cgi?id=1197218
2015-03-04 15:27:14 +00:00
* Wed Mar 04 2015 Petr Vobornik <pvoborni@redhat.com> - 4.1.3-2
- Add missing sssd python dependencies
- https://bugzilla.redhat.com/show_bug.cgi?id=1197218
Update to upstream 4.1.3 - see http://www.freeipa.org/page/Releases/4.1.3
2015-02-18 14:08:02 +00:00
* Wed Feb 18 2015 Petr Vobornik <pvoborni@redhat.com> - 4.1.3-1
- Update to upstream 4.1.3 - see http://www.freeipa.org/page/Releases/4.1.3
Fix wrong date in the changelog
2015-01-19 09:25:49 +00:00
* Mon Jan 19 2015 Alexander Bokovoy <abokovoy@redhat.com> - 4.1.2-2
Unblock rawhide - Support Samba PASSDB 0.2.0 with libsamba-passdb - Fix marshalling of NETLOGON responses over CLDAP - Use python-dateutil15 instead of python-dateutil 2.x until we validate the new version
2015-01-19 09:22:49 +00:00
- Fix broken build after Samba ABI change and rename of libpdb to libsamba-passdb
- Use python-dateutil15 until we validate python-dateutil 2.x
Update to upstream 4.1.2 - see http://www.freeipa.org/page/Releases/4.1.2 - fix CVE-2014-7850
2014-11-25 12:44:50 +00:00
* Tue Nov 25 2014 Petr Vobornik <pvoborni@redhat.com> - 4.1.2-1
- Update to upstream 4.1.2 - see http://www.freeipa.org/page/Releases/4.1.2
- fix CVE-2014-7850
Patch blokers and feature freze exceptions - Resolves: bz1165674 - Resolves: bz1165856 (CVE-2014-7850) - Fixes DNS install issue that prevents the server from working
2014-11-20 19:25:52 +00:00
* Thu Nov 20 2014 Simo Sorce <simo@redhat.com> - 4.1.1-2
- Patch blokers and feature freze exceptions
- Resolves: bz1165674
- Resolves: bz1165856 (CVE-2014-7850)
- Fixes DNS install issue that prevents the server from working
Update to upstream 4.1.1 - see http://www.freeipa.org/page/Releases/4.1.1 - fix CVE-2014-7828
2014-11-06 13:39:07 +00:00
* Thu Nov 06 2014 Petr Vobornik <pvoborni@redhat.com> - 4.1.1-1
- Update to upstream 4.1.1 - see http://www.freeipa.org/page/Releases/4.1.1
- fix CVE-2014-7828
Fix armv7 build failure, external CA install
2014-10-22 12:41:16 +00:00
* Wed Oct 22 2014 Petr Vobornik <pvoborni@redhat.com> - 4.1.0-2
- fix armv7hl stack oversize build failure
- fix https://fedorahosted.org/freeipa/ticket/4660
Update to upstream 4.1.0 see http://www.freeipa.org/page/Releases/4.1.0
2014-10-21 14:35:27 +00:00
* Tue Oct 21 2014 Petr Vobornik <pvoborni@redhat.com> - 4.1.0-1
- Update to upstream 4.1.0 - see http://www.freeipa.org/page/Releases/4.1.0
Update to upstream 4.0.3 - see http://www.freeipa.org/page/Releases/4.0.3
2014-09-12 19:56:41 +00:00
* Fri Sep 12 2014 Petr Viktorin <pviktori@redhat.com> - 4.0.3-1
- Update to upstream 4.0.3 - see http://www.freeipa.org/page/Releases/4.0.3
Update to upstream 4.0.1 - see http://www.freeipa.org/page/Releases/4.0.2
2014-09-05 17:55:13 +00:00
* Fri Sep 05 2014 Petr Viktorin <pviktori@redhat.com> - 4.0.2-1
- Update to upstream 4.0.1 - see http://www.freeipa.org/page/Releases/4.0.2
rebuild for libunistring soname bump
2014-09-02 17:09:28 +00:00
* Tue Sep 02 2014 Pádraig Brady <pbrady@redhat.com> - 4.0.1-3
- rebuild for libunistring soname bump
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
2014-08-16 13:08:47 +00:00
* Sat Aug 16 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 4.0.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
Update to upstream 4.0.1
2014-07-25 12:12:30 +00:00
* Fri Jul 25 2014 Martin Kosek <mkosek@redhat.com> 4.0.1-1
- Update to upstream 4.0.1
Update to upstream 4.0.0 Remove Fedora patches, all are in the upstream release Remove the freeipa-server-strict package Update to upstream 4.0.0
2014-07-07 17:23:17 +00:00
* Mon Jul 07 2014 Petr Viktorin <pviktori@redhat.com> 4.0.0-1
- Update to upstream 4.0.0
- Remove the server-strict package
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
2014-06-07 12:48:25 +00:00
* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.3.5-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
Increase Java Stack size for Web UI build on aarch64
2014-05-21 07:38:23 +00:00
* Wed May 21 2014 Petr Vobornik <pvoborni@redhat.com> 3.3.5-3
- Increase Java stack size for Web UI build on aarch64
Add rhino as dependency to fix FTBFS
2014-04-16 14:15:57 +00:00
* Wed Apr 16 2014 Peter Robinson <pbrobinson@fedoraproject.org> 3.3.5-2
- Add rhino as dependency to fix FTBFS
Update to upstream 3.3.5
2014-03-28 12:34:35 +00:00
* Fri Mar 28 2014 Martin Kosek <mkosek@redhat.com> - 3.3.5-1
- Update to upstream 3.3.5
3.3.4-3 - Move ipa-otpd socket directory to /var/run/krb5kdc - Require krb5-server 1.11.5-3 supporting the new directory - ipa_lockout plugin did not work with users's without krbPwdPolicyReference
2014-02-11 17:05:03 +00:00
* Tue Feb 11 2014 Martin Kosek <mkosek@redhat.com> - 3.3.4-3
- Move ipa-otpd socket directory to /var/run/krb5kdc
- Require krb5-server 1.11.5-3 supporting the new directory
- ipa_lockout plugin did not work with users's without krbPwdPolicyReference
3.3.4-2 - Fix hardened build
2014-01-29 07:54:27 +00:00
* Wed Jan 29 2014 Martin Kosek <mkosek@redhat.com> - 3.3.4-2
- Fix hardened build
3.3.4-1 - Update to upstream 3.3.4 - Install CA anchor into standard location (#928478) - ipa-client-install part of ipa-server-install fails on reinstall (#1044994) - Remove mod_ssl workaround (RHEL bug #1029046) - Enable syncrepl plugin to support bind-dyndb-ldap 4.0
2014-01-28 12:37:46 +00:00
* Tue Jan 28 2014 Martin Kosek <mkosek@redhat.com> - 3.3.4-1
- Update to upstream 3.3.4
- Install CA anchor into standard location (#928478)
- ipa-client-install part of ipa-server-install fails on reinstall (#1044994)
- Remove mod_ssl workaround (RHEL bug #1029046)
- Enable syncrepl plugin to support bind-dyndb-ldap 4.0
3.3.3-5 - Build crashed with rhino exception on s390 architectures (#1040576)
2014-01-03 12:44:03 +00:00
* Fri Jan 3 2014 Martin Kosek <mkosek@redhat.com> - 3.3.3-5
- Build crashed with rhino exception on s390 architectures (#1040576)
3.3.3-4 - Build crashed rhino exception on some architectures (#1040576)
2013-12-13 14:47:23 +00:00
* Thu Dec 12 2013 Martin Kosek <mkosek@redhat.com> - 3.3.3-4
- Build crashed with rhino exception on PPC architectures (#1040576)
3.3.3-3 Update to upstream 3.3.3, patch merged from F20. Fix -Werror=format-security errors (#1037070)
2013-12-03 11:07:11 +00:00
* Tue Dec 3 2013 Martin Kosek <mkosek@redhat.com> - 3.3.3-3
- Fix -Werror=format-security errors (#1037070)
* Mon Nov 4 2013 Martin Kosek <mkosek@redhat.com> - 3.3.3-2
- ipa-server-install crashed when freeipa-server-trust-ad subpackage was not
installed
* Fri Nov 1 2013 Martin Kosek <mkosek@redhat.com> - 3.3.3-1
- Update to upstream 3.3.3
* Fri Oct 4 2013 Martin Kosek <mkosek@redhat.com> - 3.3.2-1
- Update to upstream 3.3.2
Bring back Fedora-only changes
2013-08-29 15:41:58 +00:00
* Thu Aug 29 2013 Petr Viktorin <pviktori@redhat.com> - 3.3.1-1
- Bring back Fedora-only changes
Update to upstream 3.3.1
2013-08-29 14:56:40 +00:00
* Thu Aug 29 2013 Petr Viktorin <pviktori@redhat.com> - 3.3.1-0
- Update to upstream 3.3.1
upgrade: do not run sysv to systemd upgrade anymore
2013-08-14 11:29:52 +00:00
* Wed Aug 14 2013 Alexander Bokovoy <abokovoy@redhat.com> - 3.3.0-2
- Remove freeipa-systemd-upgrade as non-systemd installs are not supported
anymore by Fedora project
Update to upstream 3.3.0
2013-08-08 13:30:10 +00:00
* Wed Aug 7 2013 Martin Kosek <mkosek@redhat.com> - 3.3.0-1
- Update to upstream 3.3.0
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
2013-08-03 11:53:55 +00:00
* Sat Aug 03 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.2.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
Update to upstream 3.2.2 - Drop freeipa-server-selinux subpackage - Drop redundant directory /var/cache/ipa/sessions - Do not create /var/lib/ipa/pki-ca/publish, retain reference as ghost - Run ipa-upgradeconfig and server restart in posttrans to avoid inconsistency issues when there are still old parts of software (like entitlements plugin)
2013-07-18 13:07:48 +00:00
* Wed Jul 17 2013 Martin Kosek <mkosek@redhat.com> - 3.2.2-1
- Update to upstream 3.2.2
- Drop freeipa-server-selinux subpackage
- Drop redundant directory /var/cache/ipa/sessions
- Do not create /var/lib/ipa/pki-ca/publish, retain reference as ghost
- Run ipa-upgradeconfig and server restart in posttrans to avoid inconsistency
issues when there are still old parts of software (like entitlements plugin)
* Fri Jun 7 2013 Martin Kosek <mkosek@redhat.com> - 3.2.1-1
- Update to upstream 3.2.1
Add OTP patches and patch to fix 389-ds ccache The OTP patches add basic support for TOTP and Radius. The 389-ds patch sets KRB5CCNAME in /etc/sysconfig/dirsrv so it can get a usable ccache.
2013-05-14 18:18:15 +00:00
* Tue May 14 2013 Rob Crittenden <rcritten@redhat.com> - 3.2.0-2
- Add OTP patches
- Add patch to set KRB5CCNAME for 389-ds-base
Update to upstream 3.2.0 GA - ipa-client-install fails if /etc/ipa does not exist (#961483) - Certificate status is not visible in Service and Host page (#956718) - ipa-client-install removes needed options from ldap.conf (#953991) - Handle socket.gethostbyaddr() exceptions when verifying hostnames (#953957) - Add triggerin scriptlet to support OpenSSH 6.2 (#953617) - Require nss 3.14.3-12.0 to address certutil certificate import errors (#953485) - Require pki-ca 10.0.2-3 to pull in fix for sslget and mixed IPv4/6 environments. (#953464) - ipa-client-install removes 'sss' from /etc/nsswitch.conf (#953453) - ipa-server-install --uninstall doesn't stop dirsrv instances (#953432) - Add requires for openldap-2.4.35-4 to pickup fixed SASL_NOCANON behavior for socket based connections (#960222) - Require libsss_nss_idmap-python - Add Conflicts on nss-pam-ldapd < 0.8.4. The mapping from uniqueMember to member is now done automatically and having it in the config file raises an error. - Add backup and restore tools, directory. - require at least systemd 38 which provides the journal (we no longer need to require syslog.target) - Update Requires on policycoreutils to 2.1.14-37 - Update Requires on selinux-policy to 3.12.1-42 - Update Requires on 389-ds-base to 1.3.1.0
2013-05-10 16:33:54 +00:00
* Fri May 10 2013 Rob Crittenden <rcritten@redhat.com> - 3.2.0-1
- Update to upstream 3.2.0 GA
- ipa-client-install fails if /etc/ipa does not exist (#961483)
- Certificate status is not visible in Service and Host page (#956718)
- ipa-client-install removes needed options from ldap.conf (#953991)
- Handle socket.gethostbyaddr() exceptions when verifying hostnames (#953957)
- Add triggerin scriptlet to support OpenSSH 6.2 (#953617)
- Require nss 3.14.3-12.0 to address certutil certificate import
errors (#953485)
- Require pki-ca 10.0.2-3 to pull in fix for sslget and mixed IPv4/6
environments. (#953464)
- ipa-client-install removes 'sss' from /etc/nsswitch.conf (#953453)
- ipa-server-install --uninstall doesn't stop dirsrv instances (#953432)
- Add requires for openldap-2.4.35-4 to pickup fixed SASL_NOCANON behavior for
socket based connections (#960222)
- Require libsss_nss_idmap-python
- Add Conflicts on nss-pam-ldapd < 0.8.4. The mapping from uniqueMember to
member is now done automatically and having it in the config file raises
an error.
- Add backup and restore tools, directory.
- require at least systemd 38 which provides the journal (we no longer
need to require syslog.target)
- Update Requires on policycoreutils to 2.1.14-37
- Update Requires on selinux-policy to 3.12.1-42
- Update Requires on 389-ds-base to 1.3.1.0
Update to upstream 3.2.2 - Drop freeipa-server-selinux subpackage - Drop redundant directory /var/cache/ipa/sessions - Do not create /var/lib/ipa/pki-ca/publish, retain reference as ghost - Run ipa-upgradeconfig and server restart in posttrans to avoid inconsistency issues when there are still old parts of software (like entitlements plugin)
2013-07-18 13:07:48 +00:00
- Remove a Requires for java-atk-wrapper
* Tue Apr 23 2013 Rob Crittenden <rcritten@redhat.com> - 3.2.0-0.4.beta1
- Remove release from krb5-server in strict sub-package to allow for rebuilds.
* Mon Apr 22 2013 Rob Crittenden <rcritten@redhat.com> - 3.2.0-0.3.beta1
- Add a Requires for java-atk-wrapper until we can determine which package
should be pulling it in, dogtag or tomcat.
* Tue Apr 16 2013 Rob Crittenden <rcritten@redhat.com> - 3.2.0-0.2.beta1
- Update to upstream 3.2.0 Beta 1
Update to upstream 3.2.0 GA - ipa-client-install fails if /etc/ipa does not exist (#961483) - Certificate status is not visible in Service and Host page (#956718) - ipa-client-install removes needed options from ldap.conf (#953991) - Handle socket.gethostbyaddr() exceptions when verifying hostnames (#953957) - Add triggerin scriptlet to support OpenSSH 6.2 (#953617) - Require nss 3.14.3-12.0 to address certutil certificate import errors (#953485) - Require pki-ca 10.0.2-3 to pull in fix for sslget and mixed IPv4/6 environments. (#953464) - ipa-client-install removes 'sss' from /etc/nsswitch.conf (#953453) - ipa-server-install --uninstall doesn't stop dirsrv instances (#953432) - Add requires for openldap-2.4.35-4 to pickup fixed SASL_NOCANON behavior for socket based connections (#960222) - Require libsss_nss_idmap-python - Add Conflicts on nss-pam-ldapd < 0.8.4. The mapping from uniqueMember to member is now done automatically and having it in the config file raises an error. - Add backup and restore tools, directory. - require at least systemd 38 which provides the journal (we no longer need to require syslog.target) - Update Requires on policycoreutils to 2.1.14-37 - Update Requires on selinux-policy to 3.12.1-42 - Update Requires on 389-ds-base to 1.3.1.0
2013-05-10 16:33:54 +00:00
Update to upstream 3.2.0 Prerelease 1 Spec file was also merged with up-to-date upstream reference spec file to keep them consistent.
2013-04-02 16:47:49 +00:00
* Tue Apr 2 2013 Martin Kosek <mkosek@redhat.com> - 3.2.0-0.1.pre1
- Update to upstream 3.2.0 Prerelease 1
- Use upstream reference spec file as a base for Fedora spec file
Rebuild for broken deps - Fix 389-ds-base strict dep to be 1.3.0.5 and krb5-server 1.11.1
2013-03-30 17:49:49 +00:00
* Sat Mar 30 2013 Kevin Fenzi <kevin@scrye.com> 3.1.2-4
- Rebuild for broken deps
- Fix 389-ds-base strict dep to be 1.3.0.5 and krb5-server 1.11.1
Rebuild for broken deps in rawhide - Fix 389-ds-base strict dep to be 1.3.0.3
2013-02-23 19:57:28 +00:00
* Sat Feb 23 2013 Kevin Fenzi <kevin@scrye.com> - 3.1.2-3
- Rebuild for broken deps in rawhide
- Fix 389-ds-base strict dep to be 1.3.0.3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
2013-02-13 21:59:20 +00:00
* Wed Feb 13 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.1.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
Update to upstream 3.1.2 - CVE-2012-4546: Incorrect CRLs publishing - CVE-2012-5484: MITM Attack during Join process - CVE-2013-0199: Cross-Realm Trust key leak
2013-01-23 21:43:56 +00:00
* Wed Jan 23 2013 Rob Crittenden <rcritten@redhat.com> - 3.1.2-1
- Update to upstream 3.1.2
- CVE-2012-4546: Incorrect CRLs publishing
- CVE-2012-5484: MITM Attack during Join process
- CVE-2013-0199: Cross-Realm Trust key leak
Updated strict dependencies to 389-ds-base = 1.3.0.2 and pki-ca = 10.0.1
2013-01-23 22:16:53 +00:00
- Updated strict dependencies to 389-ds-base = 1.3.0.2 and
pki-ca = 10.0.1
Update to upstream 3.1.2 - CVE-2012-4546: Incorrect CRLs publishing - CVE-2012-5484: MITM Attack during Join process - CVE-2013-0199: Cross-Realm Trust key leak
2013-01-23 21:43:56 +00:00
Backport additional spec fixes from upstream - Remove redundat Requires versions that are already in Fedora 17 - Replace python-crypto Requires with m2crypto - Add missing Requires(post) for client and server-trust-ad subpackages - Restart httpd service when server-trust-ad subpackage is installed - Bump selinux-policy Requires to pick up PKI/LDAP port labeling fixes
2012-12-20 09:33:39 +00:00
* Thu Dec 20 2012 Martin Kosek <mkosek@redhat.com> - 3.1.0-2
- Remove redundat Requires versions that are already in Fedora 17
- Replace python-crypto Requires with m2crypto
- Add missing Requires(post) for client and server-trust-ad subpackages
- Restart httpd service when server-trust-ad subpackage is installed
- Bump selinux-policy Requires to pick up PKI/LDAP port labeling fixes
Updated to upstream 3.1.0 GA - Set minimum for sssd to 1.9.2 - Set minimum for pki-ca to 10.0.0-1 - Set minimum for 389-ds-base to 1.3.0 - Set minimum for selinux-policy to 3.11.1-60 - Remove unneeded dogtag package requires
2012-12-10 20:52:46 +00:00
* Mon Dec 10 2012 Rob Crittenden <rcritten@redhat.com> - 3.1.0-1
- Updated to upstream 3.1.0 GA
- Set minimum for sssd to 1.9.2
- Set minimum for pki-ca to 10.0.0-1
- Set minimum for 389-ds-base to 1.3.0
- Set minimum for selinux-policy to 3.11.1-60
- Remove unneeded dogtag package requires
Update to upstream 3.2.0 Prerelease 1 Spec file was also merged with up-to-date upstream reference spec file to keep them consistent.
2013-04-02 16:47:49 +00:00
* Tue Oct 23 2012 Martin Kosek <mkosek@redhat.com> - 3.0.0-3
Update Requires on krb5-server to 1.11
2012-11-23 13:49:15 +00:00
- Update Requires on krb5-server to 1.11
Configure CA replication to use TLS instead of SSL
2012-10-12 18:47:17 +00:00
* Fri Oct 12 2012 Rob Crittenden <rcritten@redhat.com> - 3.0.0-2
- Configure CA replication to use TLS instead of SSL
Updated to upstream 3.0.0 GA - Set minimum for samba to 4.0.0-153. - Make sure server-trust-ad subpackage alternates winbind_krb5_locator.so plugin to /dev/null since they cannot be used when trusts are configured - Restrict krb5-server to 1.10. - Update minimum for 389-ds-base to 1.3.0 - Add directory /var/lib/ipa/pki-ca/publish for CRL published by pki-ca - Add Requires on zip for generating FF browser extension
2012-10-12 15:46:47 +00:00
* Fri Oct 12 2012 Rob Crittenden <rcritten@redhat.com> - 3.0.0-1
- Updated to upstream 3.0.0 GA
- Set minimum for samba to 4.0.0-153.
- Make sure server-trust-ad subpackage alternates winbind_krb5_locator.so
plugin to /dev/null since they cannot be used when trusts are configured
- Restrict krb5-server to 1.10.
- Update BR for 389-ds-base to 1.3.0
- Add directory /var/lib/ipa/pki-ca/publish for CRL published by pki-ca
- Add Requires on zip for generating FF browser extension
- Updated to upstream 3.0.0 rc 2 - Include new FF configuration extension
2012-10-08 14:35:56 +00:00
* Fri Oct 5 2012 Rob Crittenden <rcritten@redhat.com> - 3.0.0-0.10
- Updated to upstream 3.0.0 rc 2
- Include new FF configuration extension
- Set minimum Requires of selinux-policy to 3.11.1-33
- Set minimum Requires dogtag to 10.0.0-0.43.b1
- Add new optional strict sub-package to allow users to limit other
package upgrades.
Require samba packages instead of obsoleted samba4 packages
2012-10-02 06:36:19 +00:00
* Tue Oct 2 2012 Martin Kosek <mkosek@redhat.com> - 3.0.0-0.9
- Require samba packages instead of obsoleted samba4 packages
Updated to upstream 3.0.0 rc 1 - Update BR for 389-ds-base to 1.2.11.14 - Update BR for krb5 to 1.10 - Update BR for samba4-devel to 4.0.0-139 (rc1) - Add BR for python-polib - Update Requires on policycoreutils to 2.1.12-5 - Update Requires on 389-ds-base to 1.2.11.14 - Update Requires on selinux-policy to 3.11.1-21 - Update Requires on dogtag to 10.0.0-0.33.a1 - Update Requires on certmonger to 0.60 - Update Requires on tomcat to 7.0.29 - Update minimum version of bind to 9.9.1-10.P3 - Update minimum version of bind-dyndb-ldap to 1.1.0-0.16.rc1 - Remove Requires on authconfig from python sub-package
2012-09-21 19:46:43 +00:00
* Fri Sep 21 2012 Rob Crittenden <rcritten@redhat.com> - 3.0.0-0.8
- Updated to upstream 3.0.0 rc 1
- Update BR for 389-ds-base to 1.2.11.14
- Update BR for krb5 to 1.10
- Update BR for samba4-devel to 4.0.0-139 (rc1)
- Add BR for python-polib
- Update BR and Requires on sssd to 1.9.0
- Update Requires on policycoreutils to 2.1.12-5
- Update Requires on 389-ds-base to 1.2.11.14
- Update Requires on selinux-policy to 3.11.1-21
- Update Requires on dogtag to 10.0.0-0.33.a1
- Update Requires on certmonger to 0.60
- Update Requires on tomcat to 7.0.29
- Update minimum version of bind to 9.9.1-10.P3
- Update minimum version of bind-dyndb-ldap to 1.1.0-0.16.rc1
- Remove Requires on authconfig from python sub-package
Rebuild against samba4 beta8
2012-09-05 13:12:31 +00:00
* Wed Sep 5 2012 Rob Crittenden <rcritten@redhat.com> - 3.0.0-0.7
- Rebuild against samba4 beta8
Rebuild against samba4 beta7
2012-08-31 19:09:05 +00:00
* Fri Aug 31 2012 Rob Crittenden <rcritten@redhat.com> - 3.0.0-0.6
- Rebuild against samba4 beta7
Adopt to samba4 beta6 and add samba4-winbind dependency to freeipa-server-trust-ad
2012-08-22 15:31:36 +00:00
* Wed Aug 22 2012 Alexander Bokovoy <abokovoy@redhat.com> - 3.0.0-0.5
- Adopt to samba4 beta6 (libsecurity -> libsamba-security)
- Add dependency to samba4-winbind
Update to upstream 3.0.0 beta 2
2012-08-17 15:31:03 +00:00
* Fri Aug 17 2012 Rob Crittenden <rcritten@redhat.com> - 3.0.0-0.4
- Updated to upstream 3.0.0 beta 2
Update to current upstream state of 3.0.0 beta 2 development
2012-08-06 14:54:59 +00:00
* Mon Aug 6 2012 Martin Kosek <mkosek@redhat.com> - 3.0.0-0.3
- Updated to current upstream state of 3.0.0 beta 2 development
Rebuild against samba4 beta4
2012-07-23 14:23:54 +00:00
* Mon Jul 23 2012 Alexander Bokovoy <abokovy@redhat.com> - 3.0.0-0.2
- Rebuild against samba4 beta4
Update to upstream 3.0.0 beta 1
2012-07-02 19:55:25 +00:00
* Mon Jul 2 2012 Rob Crittenden <rcritten@redhat.com> - 3.0.0-0.1
- Updated to upstream 3.0.0 beta 1
- Updated to upstream 2.2.0 GA - Update minimum n-v-r of certmonger to 0.53 - Update minimum n-v-r of slapi-nis to 0.40 - Add Requires in client to oddjob-mkhomedir and python-krbV - Update minimum selinux-policy to 3.10.0-110
2012-05-03 18:38:01 +00:00
* Thu May 3 2012 Rob Crittenden <rcritten@redhat.com> - 2.2.0-1
- Updated to upstream 2.2.0 GA
- Update minimum n-v-r of certmonger to 0.53
- Update minimum n-v-r of slapi-nis to 0.40
- Add Requires in client to oddjob-mkhomedir and python-krbV
- Update minimum selinux-policy to 3.10.0-110
Update to 2.2.0 beta1, fix shell escaping to work with dogtag 9.0.18. - Update to upstream 2.2.0 beta 1 (2.1.90.rc1) - Set minimum n-v-r for pki-ca and pki-silent to 9.0.18. - Add Conflicts on mod_ssl - Update minimum n-v-r of 389-ds-base to 1.2.10.4 - Update minimum n-v-r of sssd to 1.8.0 - Update minimum n-v-r of slapi-nis to 0.38 - Update minimum n-v-r of pki-* to 9.0.18 - Update conflicts on bind-dyndb-ldap to < 1.1.0-0.9.b1 - Update conflicts on bind to < 9.9.0-1 - Drop requires on krb5-server-ldap - Add patch to remove escaping arguments to pkisilent
2012-03-19 18:30:56 +00:00
* Mon Mar 19 2012 Rob Crittenden <rcritten@redhat.com> - 2.1.90-0.2
- Update to upstream 2.2.0 beta 1 (2.1.90.rc1)
- Set minimum n-v-r for pki-ca and pki-silent to 9.0.18.
- Add Conflicts on mod_ssl
- Update minimum n-v-r of 389-ds-base to 1.2.10.4
- Update minimum n-v-r of sssd to 1.8.0
- Update minimum n-v-r of slapi-nis to 0.38
- Update minimum n-v-r of pki-* to 9.0.18
- Update conflicts on bind-dyndb-ldap to < 1.1.0-0.9.b1
- Update conflicts on bind to < 9.9.0-1
- Drop requires on krb5-server-ldap
- Add patch to remove escaping arguments to pkisilent
Update to upstream 2.2.0 alpha 1 (2.1.90.pre1) Remove unused patches, update tarball, sync spec to upstream spec ipa_kpasswd has been dropped upstream
2012-02-06 19:51:43 +00:00
* Mon Feb 06 2012 Rob Crittenden <rcritten@redhat.com> - 2.1.90-0.1
- Update to upstream 2.2.0 alpha 1 (2.1.90.pre1)
- Force to use 389-ds 1.2.10-0.8.a7 or above - Improve upgrade script to handle systemd 389-ds change - fixes FreeIPA tickets 2117 and 2300 - Fix freeipa to work with python-ldap 2.4.6
2012-02-01 19:22:18 +00:00
* Wed Feb 01 2012 Alexander Bokovoy <abokovoy@redhat.com> - 2.1.4-5
- Force to use 389-ds 1.2.10-0.8.a7 or above
- Improve upgrade script to handle systemd 389-ds change
- Fix freeipa to work with python-ldap 2.4.6
Fix FreeIPA installation problems This release fixes: - ipa-replica-install crashes due to invalid Python calls - ipa-server-install and ipa-dns-install may fail to produce log - ipa-server-install crash due to sslget problem (#771357)
2012-01-11 10:34:30 +00:00
* Wed Jan 11 2012 Martin Kosek <mkosek@redhat.com> - 2.1.4-4
- Fix ipa-replica-install crashes
- Fix ipa-server-install and ipa-dns-install logging
- Set minimum version of pki-ca to 9.0.17 to fix sslget problem
caused by FEDORA-2011-17400 update (#771357)
Fix 769440 Rebuild SLAPI plugins against thread-safe ldap library as requirement of new 389-ds build
2011-12-21 12:49:37 +00:00
* Wed Dec 21 2011 Alexander Bokovoy <abokovoy@redhat.com> - 2.1.4-3
- Allow Web-based migration to work with tightened SE Linux policy (#769440)
- Rebuild slapi plugins against re-enterant version of libldap
Allow ipa-ldap-updater to wait for dirsrv service on systemd setups
2011-12-11 17:38:03 +00:00
* Sun Dec 11 2011 Alexander Bokovoy <abokovoy@redhat.com> - 2.1.4-2
- Allow longer dirsrv startup with systemd:
- IPAdmin class will wait until dirsrv instance is available up to 10 seconds
- Helps with restarts during upgrade for ipa-ldap-updater
- Fix pylint warnings from F16 and Rawhide
Update to upstream 2.1.4 (CVE-2011-3636)
2011-12-06 16:58:03 +00:00
* Tue Dec 6 2011 Rob Crittenden <rcritten@redhat.com> - 2.1.4-1
- Update to upstream 2.1.4 (CVE-2011-3636)
Update SELinux policy to allow ipa_kpasswd to connect ldap and read /dev/urandom. (#759679)
2011-12-05 16:50:50 +00:00
* Mon Dec 5 2011 Rob Crittenden <rcritten@redhat.com> - 2.1.3-8
- Update SELinux policy to allow ipa_kpasswd to connect ldap and
read /dev/urandom. (#759679)
Fix wrong path in packaging freeipa-systemd-upgrade
2011-11-30 13:35:30 +00:00
* Wed Nov 30 2011 Alexander Bokovoy <abokovoy@redhat.com> - 2.1.3-7
- Fix wrong path in packaging freeipa-systemd-upgrade
Introduce systemd upgrade script As user has no means to recover existing FreeIPA install after upgrading from SysV to systemd, introduce upgrade script. The upgrade script does following: - restores symlinks in FreeIPA's Dogtag installation - converts FreeIPA directory server instances to systemd - converts FreeIPA directory server configuration to be compatible with systemd services - converts FreeIPA KDC configuration to be compatible with systemd services - re-enables FreeIPA Script does nothing if FreeIPA is already active systemd service
2011-11-30 13:14:40 +00:00
* Wed Nov 30 2011 Alexander Bokovoy <abokovoy@redhat.com> - 2.1.3-6
- Introduce upgrade script to recover existing configuration after systemd migration
as user has no means to recover FreeIPA from systemd migration
- Upgrade script:
- recovers symlinks in Dogtag instance install
- recovers systemd configuration for FreeIPA's directory server instances
- recovers freeipa.service
- migrates directory server and KDC configs to use proper keytabs for systemd services
- Rebuilt for glibc bug#747377
2011-10-26 23:45:58 +00:00
* Wed Oct 26 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.3-5
- Rebuilt for glibc bug#747377
Upstream 2.1.3 release
2011-10-19 15:07:43 +00:00
* Wed Oct 19 2011 Alexander Bokovoy <abokovoy@redhat.com> - 2.1.3-4
Increase Java Stack size for Web UI build on aarch64
2014-05-21 07:38:23 +00:00
- clean up spec
Upstream 2.1.3 release
2011-10-19 15:07:43 +00:00
- Depend on sssd >= 1.6.2 for better user experience
* Tue Oct 18 2011 Alexander Bokovoy <abokovoy@redhat.com> - 2.1.3-3
- Fix Fedora package changelog after merging systemd changes
* Tue Oct 18 2011 Alexander Bokovoy <abokovoy@redhat.com> - 2.1.3-2
- Fix postin scriplet for F-15/F-16
* Tue Oct 18 2011 Alexander Bokovoy <abokovoy@redhat.com> - 2.1.3-1
- 2.1.3
* Mon Oct 17 2011 Alexander Bokovoy <abokovoy@redhat.com> - 2.1.2-1
- Default to systemd for Fedora 16 and onwards
Update to upstream 3.2.0 Prerelease 1 Spec file was also merged with up-to-date upstream reference spec file to keep them consistent.
2013-04-02 16:47:49 +00:00
* Tue Aug 16 2011 Rob Crittenden <rcritten@redhat.com> - 2.1.0-1
Update to 2.1.0
2011-08-16 21:16:12 +00:00
- Update to upstream 2.1.0
Fix bug #702633
2011-05-06 14:33:31 +00:00
* Fri May 6 2011 Simo Sorce <ssorce@redhat.com> - 2.0.1-2
- Fix bug #702633
- Update minimum selinux-policy to 3.9.16-18 - Update minimum pki-ca and pki-selinux to 9.0.7 - Update minimum 389-ds-base to 1.2.8.0-1 - Update to upstream 2.0.1
2011-05-02 17:33:13 +00:00
* Mon May 2 2011 Rob Crittenden <rcritten@redhat.com> - 2.0.1-1
- Update minimum selinux-policy to 3.9.16-18
- Update minimum pki-ca and pki-selinux to 9.0.7
- Update minimum 389-ds-base to 1.2.8.0-1
- Update to upstream 2.0.1
- Update to upstream GA release - Automatically apply updates when the package is upgraded
2011-03-24 21:57:00 +00:00
* Thu Mar 24 2011 Rob Crittenden <rcritten@redhat.com> - 2.0.0-1
- Update to upstream GA release
- Automatically apply updates when the package is upgraded
- Update to upstream freeipa-2.0.0.rc2 - Set minimum version of python-nss to 0.11 to make sure IPv6 support is in - Set minimum version of sssd to 1.5.1 - Patch to include SuiteSpotGroup when setting up 389-ds instances - Move a lot of BuildRequires so this will build with ONLY_CLIENT enabled
2011-02-25 23:12:29 +00:00
* Fri Feb 25 2011 Rob Crittenden <rcritten@redhat.com> - 2.0.0-0.4.rc2
- Update to upstream freeipa-2.0.0.rc2
- Set minimum version of python-nss to 0.11 to make sure IPv6 support is in
- Set minimum version of sssd to 1.5.1
- Patch to include SuiteSpotGroup when setting up 389-ds instances
- Move a lot of BuildRequires so this will build with ONLY_CLIENT enabled
Fix the N-V-R so rc1 is an update to beta2
2011-02-15 14:45:55 +00:00
* Tue Feb 15 2011 Rob Crittenden <rcritten@redhat.com> - 2.0.0-0.3.rc1
- Set the N-V-R so rc1 is an update to beta2.
- Set minimum version of sssd to 1.5.1 - Update to upstream freeipa-2.0.0.rc1 - Move server-only binaries from admintools subpackage to server
2011-02-15 02:45:41 +00:00
* Mon Feb 14 2011 Rob Crittenden <rcritten@redhat.com> - 2.0.0-0.1.rc1
- Set minimum version of sssd to 1.5.1
- Update to upstream freeipa-2.0.0.rc1
- Move server-only binaries from admintools subpackage to server
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
2011-02-08 21:36:14 +00:00
* Tue Feb 08 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.0-0.2.beta2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
Set min version of 389-ds-base to 1.2.8 Set min version of mod_nss 1.0.8-10 Set min version of selinux-policy to 3.9.7-27 Add dogtag themes to Requires Update to upstream freeipa-2.0.0.pre2
2011-02-03 21:55:42 +00:00
* Thu Feb 3 2011 Rob Crittenden <rcritten@redhat.com> - 2.0.0-0.1.beta2
- Set min version of 389-ds-base to 1.2.8
- Set min version of mod_nss 1.0.8-10
- Set min version of selinux-policy to 3.9.7-27
- Add dogtag themes to Requires
- Update to upstream freeipa-2.0.0.pre2
Initial import (#672986).
2011-01-28 04:33:55 +00:00
* Thu Jan 27 2011 Rob Crittenden <rcritten@redhat.com> - 2.0.0-0.2.beta.git80e87e7
- Remove unnecessary moving of v1 CA serial number file in post script
- Add Obsoletes for server-selinxu subpackage
- Using git snapshot 442d6ad30ce1156914e6245aa7502499e50ec0da
* Wed Jan 26 2011 Rob Crittenden <rcritten@redhat.com> - 2.0.0-0.1.beta.git80e87e7
- Prepare spec file for release
- Using git snapshot 80e87e75bd6ab56e3e20c49ece55bd4d52f1a503
* Tue Jan 25 2011 Rob Crittenden <rcritten@redhat.com> - 1.99-41
- Re-arrange doc and defattr to clean up rpmlint warnings
- Remove conditionals on older releases
- Move some man pages into admintools subpackage
- Remove some explicit Requires in client that aren't needed
- Consistent use of buildroot vs RPM_BUILD_ROOT
Update to upstream 3.2.0 Prerelease 1 Spec file was also merged with up-to-date upstream reference spec file to keep them consistent.
2013-04-02 16:47:49 +00:00
* Wed Jan 19 2011 Adam Young <ayoung@redhat.com> - 1.99-40
Initial import (#672986).
2011-01-28 04:33:55 +00:00
- Moved directory install/static to install/ui
* Thu Jan 13 2011 Simo Sorce <ssorce@redhat.com> - 1.99-39
- Remove dependency on nss_ldap/nss-pam-ldapd
- The official client is sssd and that's what we use by default.
* Thu Jan 13 2011 Simo Sorce <ssorce@redhat.com> - 1.99-38
- Remove radius subpackages
* Thu Jan 13 2011 Rob Crittenden <rcritten@redhat.com> - 1.99-37
- Set minimum pki-ca and pki-silent versions to 9.0.0
* Wed Jan 12 2011 Rob Crittenden <rcritten@redhat.com> - 1.99-36
- Drop BuildRequires on mozldap-devel
* Mon Dec 13 2010 Rob Crittenden <rcritten@redhat.com> - 1.99-35
- Add Requires on krb5-pkinit-openssl
* Fri Dec 10 2010 Jr Aquino <jr.aquino@citrix.com> - 1.99-34
- Add ipa-host-net-manage script
* Tue Dec 7 2010 Simo Sorce <ssorce@redhat.com> - 1.99-33
- Add ipa init script
* Fri Nov 19 2010 Rob Crittenden <rcritten@redhat.com> - 1.99-32
- Set minimum level of 389-ds-base to 1.2.7 for enhanced memberof plugin
* Wed Nov 3 2010 Rob Crittenden <rcritten@redhat.com> - 1.99-31
- remove ipa-fix-CVE-2008-3274
* Wed Oct 6 2010 Rob Crittenden <rcritten@redhat.com> - 1.99-30
- Remove duplicate %%files entries on share/ipa/static
- Add python default encoding shared library
* Mon Sep 20 2010 Rob Crittenden <rcritten@redhat.com> - 1.99-29
- Drop requires on python-configobj (not used any more)
- Drop ipa-ldap-updater message, upgrades are done differently now
* Wed Sep 8 2010 Rob Crittenden <rcritten@redhat.com> - 1.99-28
- Drop conflicts on mod_nss
- Require nss-pam-ldapd on F-14 or higher instead of nss_ldap (#606847)
- Drop a slew of conditionals on older Fedora releases (< 12)
- Add a few conditionals against RHEL 6
- Add Requires of nss-tools on ipa-client
* Fri Aug 13 2010 Rob Crittenden <rcritten@redhat.com> - 1.99-27
- Set minimum version of certmonger to 0.26 (to pck up #621670)
- Set minimum version of pki-silent to 1.3.4 (adds -key_algorithm)
- Set minimum version of pki-ca to 1.3.6
- Set minimum version of sssd to 1.2.1
* Tue Aug 10 2010 Rob Crittenden <rcritten@redhat.com> - 1.99-26
- Add BuildRequires for authconfig
* Mon Jul 19 2010 Rob Crittenden <rcritten@redhat.com> - 1.99-25
- Bump up minimum version of python-nss to pick up nss_is_initialize() API
* Thu Jun 24 2010 Adam Young <ayoung@redhat.com> - 1.99-24
- Removed python-asset based webui
* Thu Jun 24 2010 Rob Crittenden <rcritten@redhat.com> - 1.99-23
- Change Requires from fedora-ds-base to 389-ds-base
- Set minimum level of 389-ds-base to 1.2.6 for the replication
version plugin.
* Tue Jun 1 2010 Rob Crittenden <rcritten@redhat.com> - 1.99-22
- Drop Requires of python-krbV on ipa-client
* Mon May 17 2010 Rob Crittenden <rcritten@redhat.com> - 1.99-21
- Load ipa_dogtag.pp in post install
* Mon Apr 26 2010 Rob Crittenden <rcritten@redhat.com> - 1.99-20
- Set minimum level of sssd to 1.1.1 to pull in required hbac fixes.
* Thu Mar 4 2010 Rob Crittenden <rcritten@redhat.com> - 1.99-19
- No need to create /var/log/ipa_error.log since we aren't using
TurboGears any more.
* Mon Mar 1 2010 Jason Gerard DeRose <jderose@redhat.com> - 1.99-18
- Fixed share/ipa/wsgi.py so .pyc, .pyo files are included
* Wed Feb 24 2010 Jason Gerard DeRose <jderose@redhat.com> - 1.99-17
- Added Require mod_wsgi, added share/ipa/wsgi.py
* Thu Feb 11 2010 Jason Gerard DeRose <jderose@redhat.com> - 1.99-16
- Require python-wehjit >= 0.2.2
* Wed Feb 3 2010 Rob Crittenden <rcritten@redhat.com> - 1.99-15
- Add sssd and certmonger as a Requires on ipa-client
* Wed Jan 27 2010 Jason Gerard DeRose <jderose@redhat.com> - 1.99-14
- Require python-wehjit >= 0.2.0
* Fri Dec 4 2009 Rob Crittenden <rcritten@redhat.com> - 1.99-13
- Add ipa-rmkeytab tool
* Tue Dec 1 2009 Rob Crittenden <rcritten@redhat.com> - 1.99-12
- Set minimum of python-pyasn1 to 0.0.9a so we have support for the ASN.1
Any type
* Wed Nov 25 2009 Rob Crittenden <rcritten@redhat.com> - 1.99-11
- Remove v1-style /etc/ipa/ipa.conf, replacing with /etc/ipa/default.conf
* Fri Nov 13 2009 Rob Crittenden <rcritten@redhat.com> - 1.99-10
- Add bash completion script and own /etc/bash_completion.d in case it
doesn't already exist
* Tue Nov 3 2009 Rob Crittenden <rcritten@redhat.com> - 1.99-9
- Remove ipa_webgui, its functions rolled into ipa_httpd
* Mon Oct 12 2009 Jason Gerard DeRose <jderose@redhat.com> - 1.99-8
- Removed python-cherrypy from BuildRequires and Requires
- Added Requires python-assets, python-wehjit
* Mon Aug 24 2009 Rob Crittenden <rcritten@redhat.com> - 1.99-7
- Added httpd SELinux policy so CRLs can be read
* Thu May 21 2009 Rob Crittenden <rcritten@redhat.com> - 1.99-6
- Move ipalib to ipa-python subpackage
- Bump minimum version of slapi-nis to 0.15
Update to upstream 3.2.0 Prerelease 1 Spec file was also merged with up-to-date upstream reference spec file to keep them consistent.
2013-04-02 16:47:49 +00:00
* Wed May 6 2009 Rob Crittenden <rcritten@redhat.com> - 1.99-5
Initial import (#672986).
2011-01-28 04:33:55 +00:00
- Set 0.14 as minimum version for slapi-nis
* Wed Apr 22 2009 Rob Crittenden <rcritten@redhat.com> - 1.99-4
- Add Requires: python-nss to ipa-python sub-package
* Thu Mar 5 2009 Rob Crittenden <rcritten@redhat.com> - 1.99-3
- Remove the IPA DNA plugin, use the DS one
* Wed Mar 4 2009 Rob Crittenden <rcritten@redhat.com> - 1.99-2
- Build radius separately
- Fix a few minor issues
* Tue Feb 3 2009 Rob Crittenden <rcritten@redhat.com> - 1.99-1
- Replace TurboGears requirement with python-cherrypy
* Sat Jan 17 2009 Tomas Mraz <tmraz@redhat.com> - 1.2.1-3
- rebuild with new openssl
* Fri Dec 19 2008 Dan Walsh <dwalsh@redhat.com> - 1.2.1-2
- Fix SELinux code
* Mon Dec 15 2008 Simo Sorce <ssorce@redhat.com> - 1.2.1-1
- Fix breakage caused by python-kerberos update to 1.1
* Fri Dec 5 2008 Simo Sorce <ssorce@redhat.com> - 1.2.1-0
- New upstream release 1.2.1
* Sat Nov 29 2008 Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com> - 1.2.0-4
- Rebuild for Python 2.6
* Fri Nov 14 2008 Simo Sorce <ssorce@redhat.com> - 1.2.0-3
- Respin after the tarball has been re-released upstream
New hash is 506c9c92dcaf9f227cba5030e999f177
* Thu Nov 13 2008 Simo Sorce <ssorce@redhat.com> - 1.2.0-2
- Conditionally restart also dirsrv and httpd when upgrading
* Wed Oct 29 2008 Rob Crittenden <rcritten@redhat.com> - 1.2.0-1
- Update to upstream version 1.2.0
- Set fedora-ds-base minimum version to 1.1.3 for winsync header
- Set the minimum version for SELinux policy
- Remove references to Fedora 7
* Wed Jul 23 2008 Simo Sorce <ssorce@redhat.com> - 1.1.0-3
- Fix for CVE-2008-3274
- Fix segfault in ipa-kpasswd in case getifaddrs returns a NULL interface
- Add fix for bug #453185
- Rebuild against openldap libraries, mozldap ones do not work properly
- TurboGears is currently broken in rawhide. Added patch to not build
the UI locales and removed them from the ipa-server files section.
* Wed Jun 18 2008 Rob Crittenden <rcritten@redhat.com> - 1.1.0-2
- Add call to /usr/sbin/upgradeconfig to post install
* Wed Jun 11 2008 Rob Crittenden <rcritten@redhat.com> - 1.1.0-1
- Update to upstream version 1.1.0
- Patch for indexing memberof attribute
- Patch for indexing uidnumber and gidnumber
- Patch to change DNA default values for replicas
- Patch to fix uninitialized variable in ipa-getkeytab
* Fri May 16 2008 Rob Crittenden <rcritten@redhat.com> - 1.0.0-5
- Set fedora-ds-base minimum version to 1.1.0.1-4 and mod_nss minimum
version to 1.0.7-4 so we pick up the NSS fixes.
- Add selinux-policy-base(post) to Requires (446496)
* Tue Apr 29 2008 Rob Crittenden <rcritten@redhat.com> - 1.0.0-4
- Add missing entry for /var/cache/ipa/kpasswd (444624)
- Added patch to fix permissions problems with the Apache NSS database.
- Added patch to fix problem with DNS querying where the query could be
returned as the answer.
- Fix spec error where patch1 was in the wrong section
* Fri Apr 25 2008 Rob Crittenden <rcritten@redhat.com> - 1.0.0-3
- Added patch to fix problem reported by ldapmodify
* Fri Apr 25 2008 Rob Crittenden <rcritten@redhat.com> - 1.0.0-2
- Fix Requires for krb5-server that was missing for Fedora versions > 9
- Remove quotes around test for fedora version to package egg-info
* Fri Apr 18 2008 Rob Crittenden <rcritten@redhat.com> - 1.0.0-1
- Update to upstream version 1.0.0
* Tue Mar 18 2008 Rob Crittenden <rcritten@redhat.com> 0.99-12
- Pull upstream changelog 722
- Add Conflicts mod_ssl (435360)
Update to upstream 3.2.0 Prerelease 1 Spec file was also merged with up-to-date upstream reference spec file to keep them consistent.
2013-04-02 16:47:49 +00:00
* Fri Feb 29 2008 Rob Crittenden <rcritten@redhat.com> 0.99-11
Initial import (#672986).
2011-01-28 04:33:55 +00:00
- Pull upstream changelog 698
- Fix ownership of /var/log/ipa_error.log during install (435119)
- Add pwpolicy command and man page
* Thu Feb 21 2008 Rob Crittenden <rcritten@redhat.com> 0.99-10
- Pull upstream changelog 678
- Add new subpackage, ipa-server-selinux
- Add Requires: authconfig to ipa-python (bz #433747)
- Package i18n files
* Mon Feb 18 2008 Rob Crittenden <rcritten@redhat.com> 0.99-9
- Pull upstream changelog 641
- Require minimum version of krb5-server on F-7 and F-8
- Package some new files
* Thu Jan 31 2008 Rob Crittenden <rcritten@redhat.com> 0.99-8
- Marked with wrong license. IPA is GPLv2.
* Tue Jan 29 2008 Rob Crittenden <rcritten@redhat.com> 0.99-7
- Ensure that /etc/ipa exists before moving user-modifiable html files there
- Put html files into /etc/ipa/html instead of /etc/ipa
* Tue Jan 29 2008 Rob Crittenden <rcritten@redhat.com> 0.99-6
- Pull upstream changelog 608 which renamed several files
* Thu Jan 24 2008 Rob Crittenden <rcritten@redhat.com> 0.99-5
- package the sessions dir /var/cache/ipa/sessions
- Pull upstream changelog 597
* Thu Jan 24 2008 Rob Crittenden <rcritten@redhat.com> 0.99-4
- Updated upstream pull (596) to fix bug in ipa_webgui that was causing the
UI to not start.
* Thu Jan 24 2008 Rob Crittenden <rcritten@redhat.com> 0.99-3
- Included LICENSE and README in all packages for documentation
- Move user-modifiable content to /etc/ipa and linked back to
/usr/share/ipa/html
- Changed some references to /usr to the {_usr} macro and /etc
to {_sysconfdir}
- Added popt-devel to BuildRequires for Fedora 8 and higher and
popt for Fedora 7
- Package the egg-info for Fedora 9 and higher for ipa-python
* Tue Jan 22 2008 Rob Crittenden <rcritten@redhat.com> 0.99-2
- Added auto* BuildRequires
* Mon Jan 21 2008 Rob Crittenden <rcritten@redhat.com> 0.99-1
- Unified spec file
* Thu Jan 17 2008 Rob Crittenden <rcritten@redhat.com> - 0.6.0-2
- Fixed License in specfile
- Include files from /usr/lib/python*/site-packages/ipaserver
* Fri Dec 21 2007 Karl MacMillan <kmacmill@redhat.com> - 0.6.0-1
- Version bump for release
* Wed Nov 21 2007 Karl MacMillan <kmacmill@mentalrootkit.com> - 0.5.0-1
- Preverse mode on ipa-keytab-util
- Version bump for relase and rpm name change
* Thu Nov 15 2007 Rob Crittenden <rcritten@redhat.com> - 0.4.1-2
- Broke invididual Requires and BuildRequires onto separate lines and
reordered them
- Added python-tgexpandingformwidget as a dependency
- Require at least fedora-ds-base 1.1
* Thu Nov 1 2007 Karl MacMillan <kmacmill@redhat.com> - 0.4.1-1
- Version bump for release
* Wed Oct 31 2007 Karl MacMillan <kmacmill@redhat.com> - 0.4.0-6
- Add dep for freeipa-admintools and acl
* Wed Oct 24 2007 Rob Crittenden <rcritten@redhat.com> - 0.4.0-5
- Add dependency for python-krbV
* Fri Oct 19 2007 Rob Crittenden <rcritten@redhat.com> - 0.4.0-4
- Require mod_nss-1.0.7-2 for mod_proxy fixes
* Thu Oct 18 2007 Karl MacMillan <kmacmill@redhat.com> - 0.4.0-3
- Convert to autotools-based build
* Tue Sep 25 2007 Karl MacMillan <kmacmill@redhat.com> - 0.4.0-2
* Fri Sep 7 2007 Karl MacMillan <kmacmill@redhat.com> - 0.3.0-1
- Added support for libipa-dna-plugin
* Fri Aug 10 2007 Karl MacMillan <kmacmill@redhat.com> - 0.2.0-1
- Added support for ipa_kpasswd and ipa_pwd_extop
Update to upstream 3.2.0 Prerelease 1 Spec file was also merged with up-to-date upstream reference spec file to keep them consistent.
2013-04-02 16:47:49 +00:00
* Sun Aug 5 2007 Rob Crittenden <rcritten@redhat.com> - 0.1.0-3
Initial import (#672986).
2011-01-28 04:33:55 +00:00
- Abstracted client class to work directly or over RPC
* Wed Aug 1 2007 Rob Crittenden <rcritten@redhat.com> - 0.1.0-2
- Add mod_auth_kerb and cyrus-sasl-gssapi to Requires
- Remove references to admin server in ipa-server-setupssl
- Generate a client certificate for the XML-RPC server to connect to LDAP with
- Create a keytab for Apache
- Create an ldif with a test user
- Provide a certmap.conf for doing SSL client authentication
* Fri Jul 27 2007 Karl MacMillan <kmacmill@redhat.com> - 0.1.0-1
- Initial rpm version
Reference in New Issue Copy Permalink