Commit Graph

347 Commits

Author SHA1 Message Date
Alexander Bokovoy
4d4375dd2d Support python-cryptography 40.0
Use upstream fixes from https://pagure.io/freeipa/issue/9355

Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2023-05-15 15:01:10 +03:00
Jerry James
c9357e5423 Change fontawesome-fonts R to match fontawesome 4.x 2023-03-30 10:40:45 -06:00
Rafael Guterres Jeffman
2c8ae7cea5 Migrated to SPDX license.
Signed-off-by: Rafael Guterres Jeffman <rjeffman@redhat.com>
2023-02-28 22:33:24 -03:00
Yaakov Selkowitz
61685c38bd Update RHEL requirement versions 2023-02-01 10:32:13 -05:00
Alexander Bokovoy
796470e053 Rebuild against samba 4.18.0RC1
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2023-01-20 15:14:23 +02:00
Fedora Release Engineering
8ab874381a Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2023-01-19 03:52:45 +00:00
Alexander Bokovoy
9ab0396eec Rebuild against krb5 1.20.1
ABI change brings KDB version 9.0

Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2022-12-01 17:42:46 +02:00
Alexander Bokovoy
d118b2bff1 Remove unused patches
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2022-11-27 08:21:38 +02:00
Alexander Bokovoy
bb102603da FreeIPA upstream release 4.10.1
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2022-11-27 08:20:59 +02:00
Alexander Bokovoy
a8a38b93f4 Rebuild against final samba 4.17 version
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2022-09-14 12:55:28 +03:00
Adam Williamson
e554452b70 Rebuild against new samba-client-libs (for F37)
This is not actually needed on Rawhide, but I'm doing the rebuild
on both branches so Rawhide stays 'ahead' of F37 and the repos
stay in sync.
2022-08-24 11:30:05 -07:00
Thomas Woerner
7ca049e5b2 - Set passwordgracelimit to match global policy on group pw policies
- Fix dns resolver for nameservers with ports
- webui: Allow grace login limit
- Disabling gracelimit does not prevent LDAP binds
2022-08-24 14:08:02 +02:00
Adam Williamson
4c13a8ea64 Rebuild against new libndr 2022-08-09 09:50:09 -07:00
Alexander Bokovoy
cc272c95c6 Rebuild against samba 4.16.3-2.fc37
Resolves: rhbz#2110746

Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2022-07-26 12:30:18 +03:00
Fedora Release Engineering
2cec094c03 Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2022-07-21 03:36:30 +00:00
Rob Crittenden
e304b9f95e freeIPA 4.10.0 upstream release
Release notes: https://www.freeipa.org/page/Releases/4.10.0

Signed-off-by: Rob Crittenden <rcritten@redhat.com>
2022-06-30 11:28:59 -04:00
Python Maint
6d962d6a46 Rebuilt for Python 3.11 2022-06-16 13:34:41 +02:00
Alexander Bokovoy
5a94ba182b FreeIPA 4.9.10 upstream release
Release notes: https://www.freeipa.org/page/Releases/4.9.10

Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2022-06-16 09:36:48 +03:00
Alexander Bokovoy
f720512e6b Update dependencies given F34 retire
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2022-06-16 09:19:58 +03:00
Python Maint
a29398a07b Rebuilt for Python 3.11 2022-06-15 19:09:59 +02:00
Alexander Bokovoy
f256fb899c FreeIPA 4.9.9
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2022-04-27 17:53:56 +03:00
Alexander Bokovoy
95b29321ec Use -H option for OpenLDAP client tools as -h and -p are deprecated now
Resolves: rhbz#2050921

Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2022-02-07 13:08:53 +02:00
Fedora Release Engineering
de337079bd - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2022-01-20 03:24:33 +00:00
Alexander Bokovoy
81d6866ce9 Make possible to compile FreeIPA against OpenLDAP 2.6
Resolves: rhbz#2032701

Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2022-01-12 09:15:09 +02:00
Alexander Bokovoy
e500f868ac FreeIPA 4.9.8 upstream release
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2021-11-26 09:44:16 +02:00
Alexander Bokovoy
a60b978d36 Harden PAC processing -- trusted domains
Handle SIDs of the trusted domains during S4U extensions

Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2021-11-11 20:32:05 +02:00
Alexander Bokovoy
ec142de931 Hardening for CVE-2020-25717
Generate SIDs for IPA users and groups by default
Verify MS-PAC consistency when it is generated or validated
Rebuild against samba-4.15.2

Resolves: rhbz#2021720

Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2021-11-10 19:12:36 +02:00
Rob Crittenden
b0ff11761b Make Dogtag return XML for ipa cert-find
Backport upstream patch from https://pagure.io/freeipa/issue/8980

Resolves: #2014658
2021-10-15 14:51:39 -04:00
Sahana Prasad
e1ba897218 Rebuilt with OpenSSL 3.0.0 2021-09-14 19:02:06 +02:00
François Cami
edbc2d28ae Upstream release FreeIPA 4.9.7
Resolves: rhbz#1994739

Signed-off-by: François Cami <fcami@redhat.com>
2021-08-20 14:03:32 +02:00
François Cami
1b7159c02c Remove dependency on python3-pexpect on RHEL9.
Resolves: rhbz#1980734

Signed-off-by: François Cami <fcami@redhat.com>
2021-08-06 15:23:02 +02:00
Fedora Release Engineering
81c2724bff - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2021-07-21 23:20:54 +00:00
Alexander Bokovoy
cf93e992cc Bump release
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2021-07-16 16:35:37 +03:00
Alexander Bokovoy
07faf2d8b8 Rebuild against samba 4.15.0 RC1
Also depend on sssd-winbind-idmap for freeipa-server-trust-ad

Resolves: rhbz#1970168

Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2021-07-16 16:33:49 +03:00
Alexander Bokovoy
82287448af remove references to custodia as it is merged in FreeIPA
Resolves: rhbz#1978632

Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2021-07-02 14:15:21 +03:00
François Cami
fc48683f41 Upstream release FreeIPA 4.9.3
Signed-off-by: François Cami <fcami@redhat.com>
2021-06-29 19:38:50 +02:00
Alexander Bokovoy
9eee394ae1 Rebuild for Python 3.10, second part
A rebuild is needed for picking up a new dependency for python3-wsgi

Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2021-06-14 09:22:42 +03:00
Python Maint
4cd3eaa0f6 Rebuilt for Python 3.10 2021-06-04 20:04:44 +02:00
Alexander Bokovoy
e95becb243 Add missing patch
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2021-06-04 16:03:45 +03:00
Alexander Bokovoy
f6e7b19cc5 FreeIPA 4.9.4
Fix missing creds breakage in 'ipa' tool post-release

Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2021-06-04 15:50:17 +03:00
Alexander Bokovoy
bedd4a4587 Part 2 of the replication plugin rename fix
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2021-06-01 12:34:37 +03:00
Alexander Bokovoy
c999c986a6 Handle rename of replication plugin in 389-ds
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2021-06-01 10:55:29 +03:00
Vit Mojzis
299287cb53 tests: Add decentralized SELinux policy test
- Test for unsound/dangerous SELinux policy practices
- Perform static policy code check using SELint

For more details and debugging tips see
https://fedoraproject.org/wiki/SELinux/IndependentPolicy#Testing
2021-05-11 17:33:47 +02:00
Alexander Bokovoy
df0fbfd556 Handle failures to resolve non-existing reverse zones during deployment with systemd-resolved
Resolves: rhbz#1948034

Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2021-04-12 22:35:47 +03:00
Alexander Bokovoy
4b3503176e Upstream release FreeIPA 4.9.3
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2021-03-31 09:49:32 +03:00
Rob Crittenden
506b58c190 Change the method rpminspect uses to verify spec/package naming
Using suffix instead of full so we can ignore the free part.
2021-03-23 14:46:38 -04:00
Alexander Bokovoy
66db9529f8 Rebuild against 389-ds and PKI to fix https://github.com/389ds/389-ds-base/issues/4609
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2021-02-26 22:21:20 +02:00
Alexander Bokovoy
71a36c6ab9 Only use python-platform on RHEL 8
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2021-02-23 17:41:48 +02:00
Troy Dawson
4de77e9638 platform-python only on RHEL8 2021-02-19 21:28:16 +00:00
Alexander Bokovoy
f25a4e55eb Fix ipatests dependency to python3-pexpect
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2021-02-15 21:34:42 +02:00