[ol8_appstream] ipa-server-4.8.7-16.0.1.module+el8.3.0+20007+a5dde1bf.aarch64

IPA is an integrated solution to provide centrally managed Identity (users,
hosts, services), Authentication (SSO, 2FA), and Authorization
(host access control, SELinux user roles, services). The solution provides
features for further integration with Linux based clients (SUDO, automount)
and integration with Active Directory based infrastructures (Trusts).
If you are installing an IPA server, you need to install this package.

Changelog (Show File list) (Show related packages)

• Wed Apr 07 2021 David Sloboda <david.x.sloboda@oracle.com> - 4.8.7-16.0.1

  - Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674]

• Tue Mar 09 2021 Thomas Woerner <twoerner@redhat.com> - 4.8.7-16

  - Fix krb5kdc is crashing intermittently on IPA server
    Resolves: RHBZ#1935146

• Fri Feb 19 2021 Alexander Bokovoy <abokovoy@redhat.com> - 4.8.7-15

  - ipa-kdb: fix crash in MS-PAC cache init code
    Resolves: RHBZ#1930562

• Tue Jan 12 2021 Rafael Jeffman <rjeffman@redhat.com> - 4.8.7-14

  - wgi/plugins.py: ignore empty plugin directories
    Resolves: RHBZ#1895910
  - rpcserver: fallback to non-armored kinit in case of trusted domains
    Resolves: RHBZ#1914821
  - pylint: remove unused variable
    Resolves: RHBZ#1914821
  - ipa-kdb: support subordinate/superior UPN suffixes
    Resolves: RHBZ#1914823
  - ad trust: accept subordinate domains of the forest trust root
    Resolves: RHBZ#1914823
  - ipatests: support subordinate upn suffixes
    Resolves: RHBZ#1914823

• Thu Oct 08 2020 Thomas Woerner <twoerner@redhat.com> - 4.8.7-13

  - Fix nsslapd-db-lock tuning of BDB backend
    Resolves: RHBZ#1882472

• Wed Sep 23 2020 Thomas Woerner <twoerner@redhat.com> - 4.8.7-12

  - Require selinux sub package in the proper version
    Related: RHBZ#1868432
  - SELinux: do not double-define node_t and pki_tomcat_cert_t
    Related: RHBZ#1868432
  - SELinux: add dedicated policy for ipa-pki-retrieve-key + ipatests
    Related: RHBZ#1868432
  - dogtaginstance.py: add --debug to pkispawn
    Resolves: RHBZ#1879604

• Thu Sep 10 2020 Thomas Woerner <twoerner@redhat.com> - 4.8.7-11

  - SELinux Policy: let custodia replicate keys
    Resolves: RHBZ#1868432

• Wed Aug 19 2020 Thomas Woerner <twoerner@redhat.com> - 4.8.7-10

  - Set mode of /etc/ipa/ca.crt to 0644 in CA-less installations
    Resolves: RHBZ#1870202

• Mon Aug 17 2020 Thomas Woerner <twoerner@redhat.com> - 4.8.7-9

  - CAless installation: set the perms on KDC cert file
    Resolves: RHBZ#1863616
  - EPN: handle empty attributes
    Resolves: RHBZ#1866938
  - IPA-EPN: enhance input validation
    Resolves: RHBZ#1866291
  - EPN: enhance input validation
    Resolves: RHBZ#1863079
  - Require new samba build 4.12.3-52
    Related: RHBZ#1868558
  - Require new selinux-policy build 3.14.3-52
    Related: RHBZ#1869311

• Fri Jul 31 2020 Thomas Woerner <twoerner@redhat.com> - 4.8.7-8

  - [WebUI] IPA Error 3007: RequirmentError" while adding members in
    "User ID overrides" tab (updated)
    Resolves: RHBZ#1757045
  - ipa-client-install: use the authselect backup during uninstall
    Resolves: RHBZ#1810179
  - Replace SSLCertVerificationError with CertificateError for py36
    Resolves: RHBZ#1858318
  - Fix AVC denial during ipa-adtrust-install --add-agents
    Resolves: RHBZ#1859213