Commit Graph

19 Commits

Author SHA1 Message Date
Julien Rische 8d7c3802f3 ipa release 4.9.13-6
- ipa-kdb: Rework ipadb_reinit_mspac()
  Resolves: RHEL-25742
- ipatests: wait for replica update in test_dns_locations
  Resolves: RHEL-22373

Signed-off-by: Julien Rische <jrische@redhat.com>
2024-02-16 10:23:32 +01:00
Rafael Guterres Jeffman f285979474 ipa-kdb: Fix compilation issues.
Related: RHEL-22313

Signed-off-by: Rafael Guterres Jeffman <rjeffman@redhat.com>
2024-02-13 12:01:16 -03:00
Rafael Guterres Jeffman 4ced5cbefb IPA build for ITM 24
- kdb: PAC generator: do not fail if canonical principal is missing
  Resolves: RHEL-23630
- ipa-kdb: Fix memory leak during PAC verification
  Resolves: RHEL-22644
- Fix session cookie access
  Resolves: RHEL-23622
- Do not ignore staged users in sidgen plugin\
  Resovlves: RHEL-23626
- ipa-kdb: Disable Bronze-Bit check if PAC not available
  Resolves: RHEL-22313
- krb5kdc: Fix start when pkinit and otp auth type are enabled
  Resolves: RHEL-4874
- hbactest was not collecting or returning messages
  Resolvez: RHEL-12780

Signed-off-by: Rafael Guterres Jeffman <rjeffman@redhat.com>
2024-02-12 20:27:29 -03:00
Rafael Guterres Jeffman 3b5629ec63 ipa release 4.9.13-4
- Improve server affinity for CA-less deployments
  Resolves: RHEL-22283
- host: update system: Manage Host Keytab permission
  Resolves: RHEL-22286
- adtrustinstance: make sure NetBIOS name defaults are set properly
  Resolves: RHEL-21938
- ipatests: Fix healthcheck report when nsslapd accesslog logbuffering is set to off
  Resolves: RHEL-19672

Signed-off-by: Rafael Guterres Jeffman <rjeffman@redhat.com>
2024-01-23 18:39:46 -03:00
Julien Rische a321f34b62 ipa release 4.9.13-3
- ipa-kdb: Detect and block Bronze-Bit attacks
  Resolves: RHEL-9984
- Fix for CVE-2023-5455
  Resolves: RHEL-12578

Signed-off-by: Julien Rische <jrische@redhat.com>
2024-01-10 17:35:52 +01:00
Rafael Guterres Jeffman 2005990bae ipa:
- Remove unused patches.
- Handle new samba exception types.
  Resolves: RHEL-17623
2023-11-30 13:13:35 -03:00
Rafael Guterres Jeffman 4d6406a1a1 ipa:
- Rebase to version 4.9.13
  Resolves: RHEL-16936

Signed-off-by: Rafael Guterres Jeffman <rjeffman@redhat.com>
2023-11-21 17:12:08 -03:00
Julien Rische 77b1872506 ipa-kdb: Make AD-SIGNEDPATH optional with krb5 DAL 8 and older
Resolves: RHEL-10495

Signed-off-by: Julien Rische <jrische@redhat.com>
2023-10-09 11:01:00 +02:00
Rafael Guterres Jeffman 1f0bd468b3 ipa:
- ipatests: fix test_topology
  Resolves: RHBZ#2232351
- Installer: activate nss and pam services in sssd.conf
  Resolves: RHBZ#2216532

Signed-off-by: Rafael Guterres Jeffman <rjeffman@redhat.com>
2023-08-16 15:11:42 -03:00
Rafael Guterres Jeffman ff08f7c5db ipa release 4.9.12-6
- ipa-kdb: fix error handling of is_master_host()
  Resolves: RHBZ#2214638
- ipatests: enable firewall rule for http service on acme client
  Resolves: RHBZ#2230256
- User plugin: improve error related to non existing idp
  Resolves: RHBZ#2224572
- Prevent admin user from being deleted
  Resolves: RHBZ#1821181
- Fix memory leak in the OTP last token plugin
  Resolves: RHBZ#2227783
2023-08-09 15:15:08 -03:00
Rafael Guterres Jeffman 046e99f183 Fix patch 0004 with correct data.
Related: RHBZ#2216551

Signed-off-by: Rafael Guterres Jeffman <rjeffman@redhat.com>
2023-07-17 14:41:52 -03:00
Rafael Guterres Jeffman 9570499a0c ipa release 4.9.12-4
- kdb: Use-krb5_pac_full_sign_compat() when available
  Resolves: RHBZ#2176406
- OTP: fix-data-type-to-avoid-endianness-issue
  Resolves: RHBZ#2218293
- Upgrade: fix replica agreement
  Resolves: RHBZ#2216551
- Upgrade: add PKI drop-in file if missing
  Resolves: RHBZ#2215336
- Use the python-cryptography parser directly in cert-find
  Resolves: RHBZ#2164349
- Backport test updates
  Resolves: RHBZ#221884

Signed-off-by: Rafael Guterres Jeffman <rjeffman@redhat.com>
2023-06-30 21:03:35 -03:00
Julien Rische 0d91a32452 Rely on sssd-krb5 to include SSSD-generated krb5 configuration
Resolves: RHBZ#2214563
Signed-off-by: Julien Rische <jrische@redhat.com>
2023-06-21 16:01:26 +02:00
Rafael Guterres Jeffman a7cb26cedd ipa:
- Use the OpenSSL certificate parser in cert-find.
    Resolves: RHBZ#2209947
2023-05-25 11:48:26 -03:00
Rafael Guterres Jeffman 2d7a6e674e First build for RHEL 8.9
- Rebase ipa to 4.9.12
  Resolves: RHBZ#2196425
- user or group name: explain the supported format
  Resolves: RHBZ#2150217

Signed-off-by: Rafael Guterres Jeffman <rjeffman@redhat.com>
2023-05-24 12:36:12 -03:00
James Antill 4471000467 Import rpm: a249616514dc5d61acb879b22759acf8a0fb5963 2023-02-23 20:03:34 -05:00
James Antill a3a1bed87f Import rpm: a249616514dc5d61acb879b22759acf8a0fb5963 2023-02-23 12:41:36 -05:00
James Antill fe3a12eb3a Convert from sha1 to sha512. 2022-08-31 15:27:01 -04:00
James Antill 8de80a61d3 Import rpm: a249616514dc5d61acb879b22759acf8a0fb5963 2022-08-08 12:29:10 -04:00