37 changed files with 24 additions and 18 deletions
--- a/.gitignore
+++ b/.gitignore
@ -1 +1,6 @@
-SOURCES/freeipa-4.9.13.tar.gz
+SOURCES/freeipa-4.9.11.tar.gz
+/freeipa-4.9.11.tar.gz
+/freeipa-4.9.12.tar.gz
+/freeipa-4.9.12.tar.gz.asc
+/freeipa-4.9.13.tar.gz
+/freeipa-4.9.13.tar.gz.asc
--- a/.ipa.metadata
+++ b/.ipa.metadata
@ -1 +0,0 @@
-da1bb0220894d8dc06afb98dcf087fea38076a79 SOURCES/freeipa-4.9.13.tar.gz
--- a/SOURCES/0001-Handle-samba-exception-type-change_rhel#17623.patch
+++ b/SOURCES/0001-Handle-samba-exception-type-change_rhel#17623.patch
--- a/SOURCES/0002-Check-the-HTTP-Referer-header-on-all-requests.patch
+++ b/SOURCES/0002-Check-the-HTTP-Referer-header-on-all-requests.patch
--- a/SOURCES/0003-Integration-tests-for-verifying-Referer-header-in-th.patch
+++ b/SOURCES/0003-Integration-tests-for-verifying-Referer-header-in-th.patch
--- a/SOURCES/0004-ipa-kdb-Detect-and-block-Bronze-Bit-attacks.patch
+++ b/SOURCES/0004-ipa-kdb-Detect-and-block-Bronze-Bit-attacks.patch
--- a/SOURCES/0005-Improve-server-affinity-for-ca-less-deployments_rhel#22283.patch
+++ b/SOURCES/0005-Improve-server-affinity-for-ca-less-deployments_rhel#22283.patch
--- a/SOURCES/0006-host-update-System-Manage-Host-Keytab-permission_rhel#22286.patch
+++ b/SOURCES/0006-host-update-System-Manage-Host-Keytab-permission_rhel#22286.patch
--- a/SOURCES/0007-adtrustinstance-make-sure-NetBIOS-name-defaults-are-set-properly_rhel#21938.patch
+++ b/SOURCES/0007-adtrustinstance-make-sure-NetBIOS-name-defaults-are-set-properly_rhel#21938.patch
--- a/SOURCES/0008-ipatests-Fix-healthcheck-report-when-nsslapd-accesslog-logbuffering-is-set-to-off_rhel#19672.patch
+++ b/SOURCES/0008-ipatests-Fix-healthcheck-report-when-nsslapd-accesslog-logbuffering-is-set-to-off_rhel#19672.patch
--- a/SOURCES/0009-kdb-PAC-generator-do-not-fail-if-canonical-principal-is-missing_rhel#23630.patch
+++ b/SOURCES/0009-kdb-PAC-generator-do-not-fail-if-canonical-principal-is-missing_rhel#23630.patch
--- a/SOURCES/0010-ipa-kdb-Fix-memory-leak-during-PAC-verification_rhel#22644.patch
+++ b/SOURCES/0010-ipa-kdb-Fix-memory-leak-during-PAC-verification_rhel#22644.patch
--- a/SOURCES/0011-Fix-session-cookie-access_rhel#23622.patch
+++ b/SOURCES/0011-Fix-session-cookie-access_rhel#23622.patch
--- a/SOURCES/0012-Do-not-ignore-staged-users-in-sidgen-plugin_rhel#23626.patch
+++ b/SOURCES/0012-Do-not-ignore-staged-users-in-sidgen-plugin_rhel#23626.patch
--- a/SOURCES/0013-ipa-kdb-Disable-Bronze-Bit-check-if-PAC-not-available_rhel#22313.patch
+++ b/SOURCES/0013-ipa-kdb-Disable-Bronze-Bit-check-if-PAC-not-available_rhel#22313.patch
--- a/SOURCES/0014-krb5kdc-Fix-start-when-pkinit-and-otp-auth-type-are-enabled_rhel#4874.patch
+++ b/SOURCES/0014-krb5kdc-Fix-start-when-pkinit-and-otp-auth-type-are-enabled_rhel#4874.patch
--- a/SOURCES/0015-hbactest-was-not-collecting-or-returning-messages_rhel#12780.patch
+++ b/SOURCES/0015-hbactest-was-not-collecting-or-returning-messages_rhel#12780.patch
--- a/SOURCES/0016-ipatests-wait-for-replica-update-in-test_dns_locatio.patch
+++ b/SOURCES/0016-ipatests-wait-for-replica-update-in-test_dns_locatio.patch
--- a/SOURCES/0017-ipa-kdb-Rework-ipadb_reinit_mspac.patch
+++ b/SOURCES/0017-ipa-kdb-Rework-ipadb_reinit_mspac.patch
--- a/SOURCES/0018-ipatests-fix-tasks-wait_for_replication-method_rhel#25708.patch
+++ b/SOURCES/0018-ipatests-fix-tasks-wait_for_replication-method_rhel#25708.patch
--- a/SOURCES/0019-Vault-add-support-for-RSA-OAEP-wrapping-algo.patch
+++ b/SOURCES/0019-Vault-add-support-for-RSA-OAEP-wrapping-algo.patch
--- a/SOURCES/0020-Vault-improve-vault-server-archival-retrieval-calls-.patch
+++ b/SOURCES/0020-Vault-improve-vault-server-archival-retrieval-calls-.patch
--- a/SOURCES/0021-kra-set-RSA-OAEP-as-default-wrapping-algo-when-FIPS-.patch
+++ b/SOURCES/0021-kra-set-RSA-OAEP-as-default-wrapping-algo-when-FIPS-.patch
--- a/SOURCES/0022-ipa-kdb-Fix-double-free-in-ipadb_reinit_mspac.patch
+++ b/SOURCES/0022-ipa-kdb-Fix-double-free-in-ipadb_reinit_mspac.patch
--- a/SOURCES/0023-rpcserver-validate-Kerberos-principal-name-before-running-kinit_rhel#26153.patch
+++ b/SOURCES/0023-rpcserver-validate-Kerberos-principal-name-before-running-kinit_rhel#26153.patch
--- a/SOURCES/0024-Vault-add-additional-fallback-to-RSA-OAEP-wrapping-algo_rhel#28259.patch
+++ b/SOURCES/0024-Vault-add-additional-fallback-to-RSA-OAEP-wrapping-algo_rhel#28259.patch
--- a/SOURCES/0025-dcerpc-invalidate-forest-trust-intfo-cache-when-filtering-out-realm-domains_rhel#28559.patch
+++ b/SOURCES/0025-dcerpc-invalidate-forest-trust-intfo-cache-when-filtering-out-realm-domains_rhel#28559.patch
--- a/SOURCES/0026-backport-test-fixes_rhel#29908.patch
+++ b/SOURCES/0026-backport-test-fixes_rhel#29908.patch
--- a/SOURCES/1001-Change-branding-to-IPA-and-Identity-Management.patch
+++ b/SOURCES/1001-Change-branding-to-IPA-and-Identity-Management.patch
--- a/SOURCES/1002-Revert-freeipa.spec-depend-on-bind-dnssec-utils.patch
+++ b/SOURCES/1002-Revert-freeipa.spec-depend-on-bind-dnssec-utils.patch
--- a/SOURCES/1003-webui-IdP-Remove-arrow-notation-due-to-uglify-js-lim.patch
+++ b/SOURCES/1003-webui-IdP-Remove-arrow-notation-due-to-uglify-js-lim.patch
--- a/SOURCES/1004-Revert-DNSResolver-Fix-use-of-nameservers-with-ports.patch
+++ b/SOURCES/1004-Revert-DNSResolver-Fix-use-of-nameservers-with-ports.patch
--- a/SOURCES/freeipa-4.9.13.tar.gz.asc
+++ b/SOURCES/freeipa-4.9.13.tar.gz.asc
@ -1,16 +0,0 @@
-----BEGIN PGP SIGNATURE-----
-
-iQIzBAABCAAdFiEE11Z2TU1+KXxtrRFyaYdvcqbi008FAmVbZU0ACgkQaYdvcqbi
-009Fgw/+PzHGNOJPs67TtoYITV/3ZCzMyrYTcazVACjD61Zw7JBgbZzZpQXxBSbj
-7QWpNJa3P2JFtv2qOUXJto40mOGpMynyYpuYs4CtyJ86eHTUJyYTFppBmCzzozhT
-2C2BeKKjzV8OOWQ7yO/2BTEZ7KtOcIr4ZI7iZCnLJF9Yt8x7TURjGRqxsHwT62Ip
-vcrtm0LkkYv/fQ6pFZZfinKU1OBrZphwHMCU4Mlv411iQg4+NOxLSsVU/kegeKIO
-adp4Y9g5dfAfdXEXb2Zt7gkmLaWMgf+XNSFDL/wkzRYt74HKwvbIPJQlTZ6pqLxQ
-yTtiHGuMb7xNDWolpoueo1/lbxaHRRGJaSPs7zUht3IBxb7hiF65Gm3UaJhoeAXc
-gVleZf/+0titOdkRfTD2N0P0hli7gaiRrbpw8K4joxMFpYrQGUxD8SI376gkOj6o
-5RWSioPoG9txNM7Co+lVpci7WHhL+Tmhf1SlHyVJGKoNe/z4VHnjHeYlFWRVdDEI
-OOupZzJQoLnso3lTwR5VEN8xGURnhbGV4MdUfD/6FhwmyHiPlYkytdZIsGsNDOab
-978PPaKcIpbsZ4gUhshcbn7qaY809lNSpMtg8saYOP4J/5Nu+i9X5bJqOmoX0rKa
-gAJDY5har+lExRnTEdYEGVB8qen5lqi8r1oYjnDpkSpq6BRoAHA=
-=uQom
-----END PGP SIGNATURE-----
--- a/gating.yaml
+++ b/gating.yaml
@ -0,0 +1,7 @@
+# recipients: abokovoy, frenaud, kaleem, ftrivino
+--- !Policy
+product_versions:
+  - rhel-9
+decision_context: osci_compose_gate
+rules:
+  - !PassingTestCaseRule {test_case_name: idm-ci.brew-build.tier1.functional}
--- a/SPECS/ipa.spec
+++ b/SPECS/ipa.spec
--- a/rpminspect.yaml
+++ b/rpminspect.yaml
@ -0,0 +1,9 @@
+---
+specname:
+    match: suffix
+runpath:
+    allowed_paths:
+        - /usr/lib64/samba
+annocheck:
+    - hardened: --ignore-unknown --verbose --skip-run-path
+
--- a/2
+++ b/2
@ -0,0 +1,2 @@
+SHA512 (freeipa-4.9.13.tar.gz) = c39f95f40ec1e225a5973129709f4a36b9326a6e7a5b103d9a59e476d5cca55bb34bcd567b620e50b54cbcc5f25c1e4b04c695f6b7fe4ffa1c7d243b5322cade
+SHA512 (freeipa-4.9.13.tar.gz.asc) = 4a056e530874b9c8c47fc1036c64d90bf3bb1f34f66ff637c420573945adf393df4829a6c723fd29716c43d817358d100377505db9f8f0db0cc0c190d239b1a5
				`@ -1 +0,0 @@`
				`da1bb0220894d8dc06afb98dcf087fea38076a79 SOURCES/freeipa-4.9.13.tar.gz`