-
Wed Apr 07 2021 David Sloboda <david.x.sloboda@oracle.com> - 4.8.7-16.0.1
- Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674]
-
Tue Mar 09 2021 Thomas Woerner <twoerner@redhat.com> - 4.8.7-16
- Fix krb5kdc is crashing intermittently on IPA server
Resolves: RHBZ#1935146
-
Fri Feb 19 2021 Alexander Bokovoy <abokovoy@redhat.com> - 4.8.7-15
- ipa-kdb: fix crash in MS-PAC cache init code
Resolves: RHBZ#1930562
-
Tue Jan 12 2021 Rafael Jeffman <rjeffman@redhat.com> - 4.8.7-14
- wgi/plugins.py: ignore empty plugin directories
Resolves: RHBZ#1895910
- rpcserver: fallback to non-armored kinit in case of trusted domains
Resolves: RHBZ#1914821
- pylint: remove unused variable
Resolves: RHBZ#1914821
- ipa-kdb: support subordinate/superior UPN suffixes
Resolves: RHBZ#1914823
- ad trust: accept subordinate domains of the forest trust root
Resolves: RHBZ#1914823
- ipatests: support subordinate upn suffixes
Resolves: RHBZ#1914823
-
Thu Oct 08 2020 Thomas Woerner <twoerner@redhat.com> - 4.8.7-13
- Fix nsslapd-db-lock tuning of BDB backend
Resolves: RHBZ#1882472
-
Wed Sep 23 2020 Thomas Woerner <twoerner@redhat.com> - 4.8.7-12
- Require selinux sub package in the proper version
Related: RHBZ#1868432
- SELinux: do not double-define node_t and pki_tomcat_cert_t
Related: RHBZ#1868432
- SELinux: add dedicated policy for ipa-pki-retrieve-key + ipatests
Related: RHBZ#1868432
- dogtaginstance.py: add --debug to pkispawn
Resolves: RHBZ#1879604
-
Thu Sep 10 2020 Thomas Woerner <twoerner@redhat.com> - 4.8.7-11
- SELinux Policy: let custodia replicate keys
Resolves: RHBZ#1868432
-
Wed Aug 19 2020 Thomas Woerner <twoerner@redhat.com> - 4.8.7-10
- Set mode of /etc/ipa/ca.crt to 0644 in CA-less installations
Resolves: RHBZ#1870202
-
Mon Aug 17 2020 Thomas Woerner <twoerner@redhat.com> - 4.8.7-9
- CAless installation: set the perms on KDC cert file
Resolves: RHBZ#1863616
- EPN: handle empty attributes
Resolves: RHBZ#1866938
- IPA-EPN: enhance input validation
Resolves: RHBZ#1866291
- EPN: enhance input validation
Resolves: RHBZ#1863079
- Require new samba build 4.12.3-52
Related: RHBZ#1868558
- Require new selinux-policy build 3.14.3-52
Related: RHBZ#1869311
-
Fri Jul 31 2020 Thomas Woerner <twoerner@redhat.com> - 4.8.7-8
- [WebUI] IPA Error 3007: RequirmentError" while adding members in
"User ID overrides" tab (updated)
Resolves: RHBZ#1757045
- ipa-client-install: use the authselect backup during uninstall
Resolves: RHBZ#1810179
- Replace SSLCertVerificationError with CertificateError for py36
Resolves: RHBZ#1858318
- Fix AVC denial during ipa-adtrust-install --add-agents
Resolves: RHBZ#1859213