[el5_latest] ipa-client-2.1.3-7.el5.i386

IPA is an integrated solution to provide centrally managed Identity (machine,
user, virtual machines, groups, authentication credentials), Policy
(configuration settings, access control information) and Audit (events,
logs, analysis thereof).

Changelog (Show File list) (Show related packages)

• Thu Jun 27 2013 Rob Crittenden <rcritten@redhat.com> - 2.1.3-7

  - Disable DNS lookups in krb5.conf during enrollment (#976372)

• Thu May 09 2013 Rob Crittenden <rcritten@redhat.com> - 2.1.3-6

  - Make certutil failures non-fatal (#821500)
  - Fix segfault in ipa-join when unenrolling a client (#961132)
  - Handle double-encoded CA certificate (#915504)
  - Fix client enrollment failover (#949632)
  - Add missing Requires on pyOpenSSL (#907071)
  - Client functionality in CA-less mode (#955652)
  - Add Requires on python-kerberos (#955652)

• Tue Jan 08 2013 Rob Crittenden <rcritten@redhat.com> - 2.1.3-5

  - Use secure method to retrieve IPA CA during client enrollment.
    CVE-2012-5484 (#878218)

• Mon May 14 2012 Rob Crittenden <rcritten@redhat.com> - 2.1.3-4

  - Correct bug id in changelog.

• Wed May 09 2012 Rob Crittenden <rcritten@redhat.com> - 2.1.3-3

  - Fix method that replaced values in config files, it would result
    in a zero-length file (#813387)

• Wed May 02 2012 Rob Crittenden <rcritten@redhat.com> - 2.1.3-2

  - Only warn if ipa-getkeytab doesn't get all requested enctypes. (#816693)

• Fri Nov 11 2011 Rob Crittenden <rcritten@redhat.com> - 2.1.3-1

  - Rebase to upstream 2.1.3 (#753936)
  - Updated patch for CVE-2011-3636 to include CR in the HTTP headers.
    xmlrpc-c in RHEL-6 doesn't support the dont_advertise option so that is
    not set any more. Another fake header, X-Original-User_Agent, is added
    so there is no more trailing junk after the Referer header.  (#752226)
  - Add ia64 to list for 64-bit cyrus-sasl-gssapi (#750338)
  - Set minimum n-v-r of sssd to 1.5.1-40

• Fri Sep 23 2011 Rob Crittenden <rcritten@redhat.com> - 2.0-19

  - Don't log the OTP in the client install log (#739068)

• Thu Sep 08 2011 Rob Crittenden <rcritten@redhat.com> - 2.0-18

  - Create a separate boolean, has_ipa, to test for existence of
    _ipa. (#723620).

• Thu Sep 08 2011 Rob Crittenden <rcritten@redhat.com> - 2.0-17

  - Fix rpmdiff problem with undefined _isa (#723620).

• Wed Sep 07 2011 Rob Crittenden <rcritten@redhat.com> - 2.0-16

  - _isa is not defined in RHEL 5, use alternate mechanism to require
    arch-specific cyrus-sasl-gssapi (#723620)

• Thu Aug 18 2011 Rob Crittenden <rcritten@redhat.com> - 2.0-15

  - KDC autodiscovery may fail when domain != realm (#710143)
  - Use updated xmlrpc-c API to do GSSAPI ticket delegation (#723667)
  - Set minimum curl and xmlrpc-c versions (#723667)
  - Require arch-specific cyrus-sasl-gssapi (#723620)

• Fri May 13 2011 Rob Crittenden <rcritten@redhat.com> - 2.0-14

  - Remove hardcoded path to kinit (#704235)

• Thu Mar 24 2011 Rob Crittenden <rcritten@redhat.com> - 2.0-13

  - Add BuildRequires for authconfig

• Thu Mar 24 2011 Rob Crittenden <rcritten@redhat.com> - 2.0-12

  - Update to upstream 2.0.0rc3 (#631907)
  - Add patch to work on Python 2.4
  - Set minimum Requires for authconfig to 5.3.21-7 (sssd support)
  - Set minimum Requires for openssl to 0.9.8e-18 (sha2 support)
  - Add Requires for sssd, set minimum to sssd-1.5.1-18
  - Add Requires for bind-utils
  - Remove Requires on nss_ldap
  - Update license to GPLv3+

• Fri Mar 11 2011 Rob Crittenden <rcritten@redhat.com> - 2.0-11

  - Fix OID for join and ipa-getkeytab operation (#682231)

• Sat Aug 28 2010 Rob Crittenden <rcritten@redhat.com> - 2.0-10

  - Port to RHEL-5 (#607772)
  - Drop nslcd patch
  - Drop move binaries patch
  - authconfig 6.0 isn't available so we can't automatically configure sssd
    so configure nss_ldap instead

• Wed Jun 23 2010 Rob Crittenden <rcritten@redhat.com> - 2.0-9

  - Add /etc/pam_ldap.conf to the list of files we update (#559004)

• Fri Jun 04 2010 Rob Crittenden <rcritten@redhat.com> - 2.0-8

  - Re-add patch to attempt to configure a number of nss_ldap related files
    if installed and configure nslcd.conf if installed. This got inadvertantly
    dropped when the source tarball was re-based (#559004)
  - Update nokrbv patch to remove another usage of python-krbV that
    isn't directly used by ipa-client but fails at runtime. (#598626)

• Fri Jun 04 2010 Rob Crittenden <rcritten@redhat.com> - 2.0-7

  - Update nokrbv patch to remove another usage of python-krbV that
    isn't directly used by ipa-client but fails the build. (#598626)

• Fri Jun 04 2010 Rob Crittenden <rcritten@redhat.com> - 2.0-6

  - Remove dependency on python-krbV package (#598626)

• Tue May 11 2010 Rob Crittenden <rcritten@redhat.com> - 2.0-5

  - Add gettext as a BuildRequires (#556620)

• Fri May 07 2010 Rob Crittenden <rcritten@redhat.com> - 2.0-4

  - Update source tarball to freeIPA v2.0 alpha 3 (tag 1.9.0_alpha3) (#556620)
  - More spec file clean ups
  - Don't install the po files so it doesn't conflict with the server
    ipa-python package

• Sat Feb 20 2010 Rob Crittenden <rcritten@redhat.com> - 2.0-3

  - Remove explicit requires on krb5-libs (#556620)

• Thu Jan 28 2010 Rob Crittenden <rcritten@redhat.com> - 2.0-2

  - Remove some commented-out Requires
  - Replace Requires on nss_ldap with nss-pam-ldapd (#559004)
  - Add patch to attempt to configure a number of nss_ldap related files
    if installed and configure nslcd.conf if installed (#559004)

• Thu Dec 03 2009 Rob Crittenden <rcritten@redhat.com> - 2.0-1

  - Initial spec
  - policycoreutils version set to 2.0.78-3 to fix problem with
    restorecon returning 1 in non-failure cases.