[ol7_latest] ipa-client-4.6.8-5.0.1.el7_9.15.x86_64

Name:	ipa-client
Version:	4.6.8
Release:	5.0.1.el7_9.15
Architecture:	x86_64
Group:	System Environment/Base
Size:	261143
License:	GPLv3+
RPM:	ipa-client-4.6.8-5.0.1.el7_9.15.x86_64.rpm
Source RPM:	ipa-4.6.8-5.0.1.el7_9.15.src.rpm
Build Date:	Tue Aug 29 2023
Build Host:	build-ol7-x86_64.oracle.com
Vendor:	Oracle America
URL:	http://www.freeipa.org/
Summary:	IPA authentication for use on clients
Description:	IPA is an integrated solution to provide centrally managed Identity (users, hosts, services), Authentication (SSO, 2FA), and Authorization (host access control, SELinux user roles, services). The solution provides features for further integration with Linux based clients (SUDO, automount) and integration with Active Directory based infrastructures (Trusts). If your network uses IPA for authentication, this package should be installed on every client machine. This package provides command-line tools for IPA administrators.

Changelog (Show File list) (Show related packages)

Tue Aug 29 2023 EL Errata <el-errata_ww@oracle.com> - 4.6.8-5.0.1

- Blank out header-logo.png product-name.png
- Replace login-screen-logo.png [Orabug: 20362818]

Thu Aug 03 2023 Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.15
```
- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak
```

Thu Mar 23 2023 Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.14

- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config

Mon Mar 20 2023 Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.13

- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file

Wed Oct 05 2022 Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.12

- Resolves: 2084223 - 'ipa idview-show idviewname' & IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin

Tue May 10 2022 Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.11

- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group

Thu Dec 02 2021 Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.10

- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role

Wed Sep 08 2021 Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.9

- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ

Tue Jun 22 2021 Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.7

- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server

Tue May 11 2021 Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7_9.6
```
- Resolves: #1959349 - Need to bump pki + ds version
```