-
Thu Jun 27 2013 Rob Crittenden <rcritten@redhat.com> - 2.1.3-7
- Disable DNS lookups in krb5.conf during enrollment (#976372)
-
Thu May 09 2013 Rob Crittenden <rcritten@redhat.com> - 2.1.3-6
- Make certutil failures non-fatal (#821500)
- Fix segfault in ipa-join when unenrolling a client (#961132)
- Handle double-encoded CA certificate (#915504)
- Fix client enrollment failover (#949632)
- Add missing Requires on pyOpenSSL (#907071)
- Client functionality in CA-less mode (#955652)
- Add Requires on python-kerberos (#955652)
-
Tue Jan 08 2013 Rob Crittenden <rcritten@redhat.com> - 2.1.3-5
- Use secure method to retrieve IPA CA during client enrollment.
CVE-2012-5484 (#878218)
-
Mon May 14 2012 Rob Crittenden <rcritten@redhat.com> - 2.1.3-4
- Correct bug id in changelog.
-
Wed May 09 2012 Rob Crittenden <rcritten@redhat.com> - 2.1.3-3
- Fix method that replaced values in config files, it would result
in a zero-length file (#813387)
-
Wed May 02 2012 Rob Crittenden <rcritten@redhat.com> - 2.1.3-2
- Only warn if ipa-getkeytab doesn't get all requested enctypes. (#816693)
-
Fri Nov 11 2011 Rob Crittenden <rcritten@redhat.com> - 2.1.3-1
- Rebase to upstream 2.1.3 (#753936)
- Updated patch for CVE-2011-3636 to include CR in the HTTP headers.
xmlrpc-c in RHEL-6 doesn't support the dont_advertise option so that is
not set any more. Another fake header, X-Original-User_Agent, is added
so there is no more trailing junk after the Referer header. (#752226)
- Add ia64 to list for 64-bit cyrus-sasl-gssapi (#750338)
- Set minimum n-v-r of sssd to 1.5.1-40
-
Fri Sep 23 2011 Rob Crittenden <rcritten@redhat.com> - 2.0-19
- Don't log the OTP in the client install log (#739068)
-
Thu Sep 08 2011 Rob Crittenden <rcritten@redhat.com> - 2.0-18
- Create a separate boolean, has_ipa, to test for existence of
_ipa. (#723620).
-
Thu Sep 08 2011 Rob Crittenden <rcritten@redhat.com> - 2.0-17
- Fix rpmdiff problem with undefined _isa (#723620).
-
Wed Sep 07 2011 Rob Crittenden <rcritten@redhat.com> - 2.0-16
- _isa is not defined in RHEL 5, use alternate mechanism to require
arch-specific cyrus-sasl-gssapi (#723620)
-
Thu Aug 18 2011 Rob Crittenden <rcritten@redhat.com> - 2.0-15
- KDC autodiscovery may fail when domain != realm (#710143)
- Use updated xmlrpc-c API to do GSSAPI ticket delegation (#723667)
- Set minimum curl and xmlrpc-c versions (#723667)
- Require arch-specific cyrus-sasl-gssapi (#723620)
-
Fri May 13 2011 Rob Crittenden <rcritten@redhat.com> - 2.0-14
- Remove hardcoded path to kinit (#704235)
-
Thu Mar 24 2011 Rob Crittenden <rcritten@redhat.com> - 2.0-13
- Add BuildRequires for authconfig
-
Thu Mar 24 2011 Rob Crittenden <rcritten@redhat.com> - 2.0-12
- Update to upstream 2.0.0rc3 (#631907)
- Add patch to work on Python 2.4
- Set minimum Requires for authconfig to 5.3.21-7 (sssd support)
- Set minimum Requires for openssl to 0.9.8e-18 (sha2 support)
- Add Requires for sssd, set minimum to sssd-1.5.1-18
- Add Requires for bind-utils
- Remove Requires on nss_ldap
- Update license to GPLv3+
-
Fri Mar 11 2011 Rob Crittenden <rcritten@redhat.com> - 2.0-11
- Fix OID for join and ipa-getkeytab operation (#682231)
-
Sat Aug 28 2010 Rob Crittenden <rcritten@redhat.com> - 2.0-10
- Port to RHEL-5 (#607772)
- Drop nslcd patch
- Drop move binaries patch
- authconfig 6.0 isn't available so we can't automatically configure sssd
so configure nss_ldap instead
-
Wed Jun 23 2010 Rob Crittenden <rcritten@redhat.com> - 2.0-9
- Add /etc/pam_ldap.conf to the list of files we update (#559004)
-
Fri Jun 04 2010 Rob Crittenden <rcritten@redhat.com> - 2.0-8
- Re-add patch to attempt to configure a number of nss_ldap related files
if installed and configure nslcd.conf if installed. This got inadvertantly
dropped when the source tarball was re-based (#559004)
- Update nokrbv patch to remove another usage of python-krbV that
isn't directly used by ipa-client but fails at runtime. (#598626)
-
Fri Jun 04 2010 Rob Crittenden <rcritten@redhat.com> - 2.0-7
- Update nokrbv patch to remove another usage of python-krbV that
isn't directly used by ipa-client but fails the build. (#598626)
-
Fri Jun 04 2010 Rob Crittenden <rcritten@redhat.com> - 2.0-6
- Remove dependency on python-krbV package (#598626)
-
Tue May 11 2010 Rob Crittenden <rcritten@redhat.com> - 2.0-5
- Add gettext as a BuildRequires (#556620)
-
Fri May 07 2010 Rob Crittenden <rcritten@redhat.com> - 2.0-4
- Update source tarball to freeIPA v2.0 alpha 3 (tag 1.9.0_alpha3) (#556620)
- More spec file clean ups
- Don't install the po files so it doesn't conflict with the server
ipa-python package
-
Sat Feb 20 2010 Rob Crittenden <rcritten@redhat.com> - 2.0-3
- Remove explicit requires on krb5-libs (#556620)
-
Thu Jan 28 2010 Rob Crittenden <rcritten@redhat.com> - 2.0-2
- Remove some commented-out Requires
- Replace Requires on nss_ldap with nss-pam-ldapd (#559004)
- Add patch to attempt to configure a number of nss_ldap related files
if installed and configure nslcd.conf if installed (#559004)
-
Thu Dec 03 2009 Rob Crittenden <rcritten@redhat.com> - 2.0-1
- Initial spec
- policycoreutils version set to 2.0.78-3 to fix problem with
restorecon returning 1 in non-failure cases.