Alexander Bokovoy
c999c986a6
Handle rename of replication plugin in 389-ds
...
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2021-06-01 10:55:29 +03:00
Vit Mojzis
299287cb53
tests: Add decentralized SELinux policy test
...
- Test for unsound/dangerous SELinux policy practices
- Perform static policy code check using SELint
For more details and debugging tips see
https://fedoraproject.org/wiki/SELinux/IndependentPolicy#Testing
2021-05-11 17:33:47 +02:00
Alexander Bokovoy
df0fbfd556
Handle failures to resolve non-existing reverse zones during deployment with systemd-resolved
...
Resolves: rhbz#1948034
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2021-04-12 22:35:47 +03:00
Alexander Bokovoy
4b3503176e
Upstream release FreeIPA 4.9.3
...
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2021-03-31 09:49:32 +03:00
Rob Crittenden
506b58c190
Change the method rpminspect uses to verify spec/package naming
...
Using suffix instead of full so we can ignore the free part.
2021-03-23 14:46:38 -04:00
Alexander Bokovoy
66db9529f8
Rebuild against 389-ds and PKI to fix https://github.com/389ds/389-ds-base/issues/4609
...
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2021-02-26 22:21:20 +02:00
Alexander Bokovoy
71a36c6ab9
Only use python-platform on RHEL 8
...
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2021-02-23 17:41:48 +02:00
Troy Dawson
4de77e9638
platform-python only on RHEL8
2021-02-19 21:28:16 +00:00
Alexander Bokovoy
f25a4e55eb
Fix ipatests dependency to python3-pexpect
...
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2021-02-15 21:34:42 +02:00
Alexander Bokovoy
9c43e47a35
Update to FreeIPA 4.9.2
...
New upstream release.
Add RHEL/Fedora ELN-only branding patch.
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2021-02-15 21:02:25 +02:00
Alexander Bokovoy
e98c2f2a47
Remove unused patches
2021-02-01 09:45:35 +02:00
Alexander Bokovoy
179e81bf0a
FreeIPA 4.9.1 release
2021-01-27 15:38:23 +02:00
Fedora Release Engineering
0b71cc63e9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
...
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2021-01-26 05:54:38 +00:00
Rob Crittenden
c4a47619fb
Set client keytab location for 389ds
...
Resolves: RHBZ#1918075
2021-01-20 17:48:10 -05:00
Alexander Bokovoy
9ed0331cde
FreeIPA 4.9.0 release
...
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2020-12-23 17:07:21 +02:00
Alexander Bokovoy
d10972a2bf
Test a fix for rhbz#1902811
2020-12-16 08:11:09 +02:00
Alexander Bokovoy
d1d2d3bc50
Remove outdated patch reference for RHEL build
2020-12-16 07:51:20 +02:00
Alexander Bokovoy
dcdddd25b4
FreeIPA 4.9.0 release candidate 3
2020-12-10 18:41:26 +02:00
Alexander Bokovoy
b91bf7ae0f
Apply 4.9.0rc2 fixes from upstream
...
Allow mod_auth_gssapi to create and access ccaches in /run/ipa/ccaches
Fixes: https://pagure.io/freeipa/issue/8613
upgrade: provide DOMAIN to the server upgrade dictionary
Fixes: https://pagure.io/freeipa/issue/8615
2020-12-09 20:07:18 +02:00
Alexander Bokovoy
3ad697a03a
Correct selinux requirement
...
freeipa-selinux subpackage is used by both client and server but
requires freeipa-server subpackage unconditionally. This needs to be
removed.
Originally, upstream spec file did not have this bug. It was brought
in with unification of the specfiles.
Resolves: rhbz#1883005
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2020-12-04 22:21:50 +02:00
Alexander Bokovoy
ae7e82eec2
Update to FreeIPA 4.9.0 release candidate 2
2020-12-04 13:53:27 +02:00
Alexander Bokovoy
41b946dfeb
Remove old freeipa-server requirement in selinux subpackage
2020-11-19 20:53:07 +02:00
Alexander Bokovoy
d0324d20d6
Update spec file
2020-11-19 20:45:31 +02:00
Alexander Bokovoy
5245a181b9
Fix client-only build
...
Upstream PR: https://github.com/freeipa/freeipa/pull/5273.patch
2020-11-18 13:05:01 +02:00
Alexander Bokovoy
792b04177b
Remove obsolete patches
2020-11-18 12:08:02 +02:00
Alexander Bokovoy
a5238c00f7
Fix build directory location for release candidates
2020-11-18 12:00:47 +02:00
Alexander Bokovoy
0d298a885e
FreeIPA 4.9.0 release candidate 1
...
- Update to new upstream release
- Unify most of Fedora/RHEL/Upstream spec files
2020-11-18 11:56:37 +02:00
Adam Williamson
f5ffc4abf3
Backport #5212 for deployment failures with 389-ds-base 1.4.4.6+
2020-10-28 15:16:06 -07:00
Alexander Bokovoy
deafacd653
Handle better upgrade of sshd_config
...
Fixes: rhbz#1887928
2020-10-13 18:54:47 +03:00
Alexander Bokovoy
45879303cf
Properly handle upgrade when systemd-resolved is enabled
2020-09-29 14:04:30 +03:00
Alexander Bokovoy
ede0ac6cb6
Fix permissions of systemd-resolved configuration file
...
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2020-09-28 15:38:44 +03:00
Alexander Bokovoy
649963736f
Make selinux subpackage dependency in -common versioned
2020-09-27 18:11:56 +03:00
Alexander Bokovoy
cc0d18ca0a
Fix dependency between freeipa-selinux and freeipa-common
...
We need to make sure freeipa-selinux subpackage pulls the same NVR set of
freeipa-* packages. We can achieve this with freeipa-common dependency.
Using freeipa-server was wrong as it pulled server packages into a
client-only deployment.
Rsolves: rhbz#1883005
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2020-09-27 18:05:53 +03:00
Alexander Bokovoy
dd627d4562
Support upgrade F32 to F33 with systemd-resolved
2020-09-26 16:41:34 +03:00
Alexander Bokovoy
90249d2730
Update changelog
2020-09-26 12:25:51 +03:00
Alexander Bokovoy
3c2acac7db
Update to FreeIPA 4.8.10
2020-09-26 12:23:38 +03:00
Alexander Bokovoy
be9ba85ab6
Support older installations on upgrade
2020-08-21 15:34:04 +03:00
François Cami
8ac40118cb
FreeIPA 4.8.7 upstream release
2020-08-20 19:24:07 +02:00
Alexander Bokovoy
9255ad4636
Make use of unshare+chroot in ipa-extdom-extop unittests to work against glibc 2.32
2020-08-03 12:36:19 +03:00
Fedora Release Engineering
3c3db56f45
- Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
...
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-08-01 01:04:16 +00:00
Merlin Mathesius
05cc0230f3
Conditional fixes for ELN to set krb5-kdb version appropriately
...
Signed-off-by: Merlin Mathesius <mmathesi@redhat.com>
2020-07-30 08:23:26 -05:00
Fedora Release Engineering
043318b878
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
...
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-07-27 17:48:52 +00:00
Alexander Bokovoy
b7be92ba08
FreeIPA 4.8.7 upstream release
2020-06-10 23:45:00 +03:00
Miro Hrončok
21412083bf
Rebuilt for Python 3.9
2020-05-26 02:45:52 +02:00
Alexander Bokovoy
c2ce1eaf19
FreeIPA 4.8.6 release
2020-03-27 09:35:21 +02:00
Alexander Bokovoy
67abd24c01
Add sources for FreeIPA 4.8.6
2020-03-27 09:30:27 +02:00
Alexander Bokovoy
8b42b6320e
Remove outdated patches
2020-03-21 22:42:47 +02:00
Alexander Bokovoy
307dce1d32
Roll up post-release fixes from upstream
...
Move freeipa-selinux to be a dependency of freeipa-common instead of
freeipa-server as client is also using some of the defined contexts.
2020-03-21 22:41:22 +02:00
Alexander Bokovoy
96a53ecb23
Do not build selinux policy subpackage for client-only build
2020-03-18 18:05:13 +02:00
Alexander Bokovoy
6147e44e8d
Depend on selinux-policy-devel 3.14.6-9 for the build
...
https://github.com/fedora-selinux/selinux-policy/pull/333 is only fixed
in selinux-policy-devel-3.14.6-9.fc33.
2020-03-18 17:39:50 +02:00