Upstream release FreeIPA 4.9.7

Resolves: rhbz#1994739

Signed-off-by: François Cami <fcami@redhat.com>

.gitignore

@@ -112,3 +112,5 @@
 /freeipa-4.9.4.tar.gz.asc
 /freeipa-4.9.6.tar.gz
 /freeipa-4.9.6.tar.gz.asc
+/freeipa-4.9.7.tar.gz
+/freeipa-4.9.7.tar.gz.asc

freeipa.spec

@@ -106,10 +106,11 @@
 %global python_ldap_version 3.1.0-1
 
 # Make sure to use 389-ds-base versions that fix https://github.com/389ds/389-ds-base/issues/4609
+# and has DNA interval enabled
 %if 0%{?fedora} < 34
-%global ds_version %{lua: local v={}; v['32']='1.4.3.20-2'; v['33']='1.4.4.13-2'; print(v[rpm.expand('%{fedora}')])}
+%global ds_version 1.4.4.16-1
 %else
-%global ds_version 2.0.4-1
+%global ds_version 2.0.7-1
 %endif
 
 # Fix for TLS 1.3 PHA, RHBZ#1775146
@@ -162,13 +163,16 @@
 
 # augeas support for new chrony options
 # see https://pagure.io/freeipa/issue/8676
-# Note: will need to be updated for RHEL9 when a fix is available for
 # https://bugzilla.redhat.com/show_bug.cgi?id=1931787
 %if 0%{?fedora} >= 33
 %global augeas_version 1.12.0-6
 %else
+%if 0%{?rhel} >= 9
+%global augeas_version 1.12.1-0
+%else
 %global augeas_version 1.12.0-3
 %endif
+%endif
 
 %global plugin_dir %{_libdir}/dirsrv/plugins
 %global etc_systemd_dir %{_sysconfdir}/systemd/system
@@ -178,7 +182,7 @@
 
 # Work-around fact that RPM SPEC parser does not accept
 # "Version: @VERSION@" in freeipa.spec.in used for Autoconf string replacement
-%define IPA_VERSION 4.9.6
+%define IPA_VERSION 4.9.7
 # Release candidate version -- uncomment with one percent for RC versions
 #%%global rc_version %%nil
 %define AT_SIGN @
@@ -191,7 +195,7 @@
 
 Name:           %{package_name}
 Version:        %{IPA_VERSION}
-Release:        4%{?rc_version:.%rc_version}%{?dist}
+Release:        1%{?rc_version:.%rc_version}%{?dist}
 Summary:        The Identity, Policy and Audit system
 
 License:        GPLv3+
@@ -873,7 +877,6 @@ BuildArch: noarch
 Requires: python3-ipaclient = %{version}-%{release}
 Requires: python3-ipaserver = %{version}-%{release}
 Requires: iptables
-Requires: python3-coverage
 Requires: python3-cryptography >= 1.6
 %if 0%{?fedora}
 # These packages do not exist on RHEL and for ipatests use
@@ -1360,6 +1363,7 @@ fi
 %{_libexecdir}/ipa/ipa-pki-wait-running
 %{_libexecdir}/ipa/ipa-otpd
 %{_libexecdir}/ipa/ipa-print-pac
+%{_libexecdir}/ipa/ipa-subids
 %dir %{_libexecdir}/ipa/custodia
 %attr(755,root,root) %{_libexecdir}/ipa/custodia/ipa-custodia-dmldap
 %attr(755,root,root) %{_libexecdir}/ipa/custodia/ipa-custodia-pki-tomcat
@@ -1697,6 +1701,10 @@ fi
 %endif
 
 %changelog
+* Thu Aug 19 2021 François Cami <fcami@redhat.com> - 4.9.7-1
+- Upstream release 4.9.7
+- Resolves: rhbz#1994739
+
 * Fri Aug 6 2021 François Cami <fcami@redhat.com> - 4.9.6-4
 - Remove dependency on python3-pexpect on RHEL9.
 - Resolves: rhbz#1980734

sources

@@ -1,2 +1,2 @@
-SHA512 (freeipa-4.9.6.tar.gz) = e87300449e12d225cdd5a4814e48d113b8bfe9b0d118e089865837c77416b6b5d54ee6dc381096e158220351838dfc5a8759305858752dd36aa8e2f74938729e
-SHA512 (freeipa-4.9.6.tar.gz.asc) = cff0f03f25e5f59713e4e6fbf5c6da7833cfed50a70a5aae14c3cf7aae02455e68065d478d360407d20cce721f202ffe0710371cb878e277b8eadb6920a740ae
+SHA512 (freeipa-4.9.7.tar.gz) = ab12bc8e8ab9eed9b729594b91a8f20a5d8d6d650966f32c42456de76b2a8b4e6c2b7df560d0f9188e1d409c19bda2fdef1febfb69b5c6c6a26146c3056c21b3
+SHA512 (freeipa-4.9.7.tar.gz.asc) = 8d97d834ee208db6692af423ae461f18e6b060ea796f528582b04a055b6fc6611a60bc39bea5996cd968620fe3763547c8ebc45bce8ef69f56909fbdb5ec0e90