- Resolves: RHEL-166742 [Cursor Automated] Include latest fixes in python3-ipatests package [RHEL9.9] - Resolves: RHEL-151581 Pagure #9948: Extend SELinux policy to allow use of SSSD authentication helpers on non-enrolled hosts [rhel-9] - Resolves: RHEL-151560 ipa-migrate doesn't process users' sshpublickeys [rhel-9] - Resolves: RHEL-179216 ipa-migrate tool is renaming host records & host info in automount information [RHEL 9.9] - Resolves: RHEL-212442 freeipa-client %triggerin and %post can fail (rpm scriptlets should never fail, by policy) [rhel-9] - Resolves: RHEL-212443 ipa-migrate doesn't properly handle replication conflicts [rhel-9] - Resolves: RHEL-212444 ipa-migrate doesn't migrate IPA locations [rhel-9] - Resolves: RHEL-212445 Pagure #9948: Extend SELinux policy to allow use of SSSD authentication helpers on non-enrolled hosts [rhel-9] - Resolves: RHEL-212446 [RFE] X-Content-Type-Options header in IdM WebUI [rhel-9] - Resolves: RHEL-212447 [RFE] Implement Referrer-Policy on IdM WebUI [rhel-9] - Resolves: RHEL-212448 [RFE] CSP not implemented in IdM WebUI [rhel-9] - Resolves: RHEL-212449 IPA compatibility with tomcat 10 [rhel-9] - Resolves: RHEL-212450 Webui 3007 Requirement error "userCertificate" is required (not allowing certificate management for idview) [rhel-9] - Resolves: RHEL-212451 To add "SameSite" flag to ipa_session cookies [rhel-9] - Resolves: RHEL-212452 FreeIPA JSON-RPC CSRF Referer Validation Uses Naive Prefix Match - [rhel-9] - Resolves: RHEL-212471 Pagure #9820: ipalockout_postop is incorrectly warning about locked user [rhel-9] - Resolves: RHEL-178920 Rebase ipa to latest version for RHEL 9.9 Signed-off-by: David Hanina <dhanina@redhat.com>
32 lines
935 B
Diff
32 lines
935 B
Diff
From c1f9626a4b2b42cade05f83bd5699418e60767a4 Mon Sep 17 00:00:00 2001
|
|
From: David Hanina <dhanina@redhat.com>
|
|
Date: Tue, 21 Jul 2026 15:10:49 +0200
|
|
Subject: [PATCH] Change u! to u for sysusersd
|
|
|
|
Adapts the sysusersd settings for RHEL9 to only use u, instead of u!,
|
|
which errors out.
|
|
|
|
Signed-off-by: David Hanina <dhanina@redhat.com>
|
|
---
|
|
init/sysusersd/ipa.conf.in | 4 ++--
|
|
1 file changed, 2 insertions(+), 2 deletions(-)
|
|
|
|
diff --git a/init/sysusersd/ipa.conf.in b/init/sysusersd/ipa.conf.in
|
|
index dcddfc2fc..0955fd341 100644
|
|
--- a/init/sysusersd/ipa.conf.in
|
|
+++ b/init/sysusersd/ipa.conf.in
|
|
@@ -1,8 +1,8 @@
|
|
# IPA KDC Proxy user and group
|
|
-u! kdcproxy - "IPA KDC Proxy User"
|
|
+u kdcproxy - "IPA KDC Proxy User"
|
|
|
|
# IPA API user and group
|
|
-u! ipaapi - "IPA API User"
|
|
+u ipaapi - "IPA API User"
|
|
|
|
# - add Apache system account to ipaapi group (platform-specific)
|
|
m @HTTPD_USER@ ipaapi
|
|
--
|
|
2.54.0
|
|
|