- 
    Wed Apr 07 2021 David Sloboda <david.x.sloboda@oracle.com> - 4.8.7-16.0.1
    
- Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674]
   
  
  - 
    Tue Mar 09 2021 Thomas Woerner <twoerner@redhat.com> - 4.8.7-16
    
- Fix krb5kdc is crashing intermittently on IPA server
  Resolves: RHBZ#1935146
   
  
  - 
    Fri Feb 19 2021 Alexander Bokovoy <abokovoy@redhat.com> - 4.8.7-15
    
- ipa-kdb: fix crash in MS-PAC cache init code
  Resolves: RHBZ#1930562
   
  
  - 
    Tue Jan 12 2021 Rafael Jeffman <rjeffman@redhat.com> - 4.8.7-14
    
- wgi/plugins.py: ignore empty plugin directories
  Resolves: RHBZ#1895910
- rpcserver: fallback to non-armored kinit in case of trusted domains
  Resolves: RHBZ#1914821
- pylint: remove unused variable
  Resolves: RHBZ#1914821
- ipa-kdb: support subordinate/superior UPN suffixes
  Resolves: RHBZ#1914823
- ad trust: accept subordinate domains of the forest trust root
  Resolves: RHBZ#1914823
- ipatests: support subordinate upn suffixes
  Resolves: RHBZ#1914823
   
  
  - 
    Thu Oct 08 2020 Thomas Woerner <twoerner@redhat.com> - 4.8.7-13
    
- Fix nsslapd-db-lock tuning of BDB backend
  Resolves: RHBZ#1882472
   
  
  - 
    Wed Sep 23 2020 Thomas Woerner <twoerner@redhat.com> - 4.8.7-12
    
- Require selinux sub package in the proper version
  Related: RHBZ#1868432
- SELinux: do not double-define node_t and pki_tomcat_cert_t
  Related: RHBZ#1868432
- SELinux: add dedicated policy for ipa-pki-retrieve-key + ipatests
  Related: RHBZ#1868432
- dogtaginstance.py: add --debug to pkispawn
  Resolves: RHBZ#1879604
   
  
  - 
    Thu Sep 10 2020 Thomas Woerner <twoerner@redhat.com> - 4.8.7-11
    
- SELinux Policy: let custodia replicate keys
  Resolves: RHBZ#1868432
   
  
  - 
    Wed Aug 19 2020 Thomas Woerner <twoerner@redhat.com> - 4.8.7-10
    
- Set mode of /etc/ipa/ca.crt to 0644 in CA-less installations
  Resolves: RHBZ#1870202
   
  
  - 
    Mon Aug 17 2020 Thomas Woerner <twoerner@redhat.com> - 4.8.7-9
    
- CAless installation: set the perms on KDC cert file
  Resolves: RHBZ#1863616
- EPN: handle empty attributes
  Resolves: RHBZ#1866938
- IPA-EPN: enhance input validation
  Resolves: RHBZ#1866291
- EPN: enhance input validation
  Resolves: RHBZ#1863079
- Require new samba build 4.12.3-52
  Related: RHBZ#1868558
- Require new selinux-policy build 3.14.3-52
  Related: RHBZ#1869311
   
  
  - 
    Fri Jul 31 2020 Thomas Woerner <twoerner@redhat.com> - 4.8.7-8
    
- [WebUI] IPA Error 3007: RequirmentError" while adding members in
  "User ID overrides" tab (updated)
  Resolves: RHBZ#1757045
- ipa-client-install: use the authselect backup during uninstall
  Resolves: RHBZ#1810179
- Replace SSLCertVerificationError with CertificateError for py36
  Resolves: RHBZ#1858318
- Fix AVC denial during ipa-adtrust-install --add-agents
  Resolves: RHBZ#1859213