[ol8_appstream] ipa-client-common-4.9.12-14.0.1.module+el8.9.0+90278+8b8ee065.noarch

IPA is an integrated solution to provide centrally managed Identity (users,
hosts, services), Authentication (SSO, 2FA), and Authorization
(host access control, SELinux user roles, services). The solution provides
features for further integration with Linux based clients (SUDO, automount)
and integration with Active Directory based infrastructures (Trusts).
If your network uses IPA for authentication, this package should be
installed on every client machine.

Changelog (Show File list) (Show related packages)

• Tue Apr 09 2024 David Sloboda <david.x.sloboda@oracle.com> - 4.9.12-14.0.1

  - Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674]

• Tue Feb 20 2024 Julien Rische <jrische@redhat.com> - 4.9.12-14

  - ipa-kdb: Fix double free in ipadb_reinit_mspac()
    Resolves: RHEL-25745

• Fri Feb 16 2024 Julien Rische <jrische@redhat.com> - 4.9.12-13

  - ipatests: fix tasks.wait_for_replication method
    Resolves: RHEL-25711

• Thu Feb 15 2024 Julien Rische <jrische@redhat.com> - 4.9.12-12

  - ipa-kdb: Rework ipadb_reinit_mspac()
    Resolves: RHEL-25745
  - kdb: PAC generator: do not fail if canonical principal is missing
    Resolves: RHEL-24356
  - sidgen: fix missing prototypes
    Resolves: RHEL-24380
  - sidgen: ignore staged users when generating SIDs
    Resolves: RHEL-24380
  - ipa-kdb: Fix memory leak during PAC verification
    Resolves: RHEL-24384
  - ipapython: Propagate KRB5Error exceptions on iterating ccache
    Resolves: RHEL-24387
  - ipapython: Correct return type of krb5_free_cred_contents
    Resolves: RHEL-24387
  - ipapython: Clean up krb5_error
    Resolves: RHEL-24387
  - ipa-kdb: Disable Bronze-Bit check if PAC not available
    Resolves: RHEL-24390
  - ipatests: wait for replica update in test_dns_locations
    Resolves: RHEL-24395
  - adtrustinstance: make sure NetBIOS name defaults are set properly
    Resolves: RHEL-24399

• Fri Dec 01 2023 Julien Rische <jrische@redhat.com> - 4.9.12-11

  - Generate Kerberos PAC as soon as server installation completed
    Resolves: RHEL-16532

• Thu Nov 16 2023 Julien Rische <jrische@redhat.com> - 4.9.12-10

  - ipa-kdb: Detect and block Bronze-Bit attacks
    Resolves: RHEL-16532
  - Fix for CVE-2023-5455
    Resolves: RHEL-12577

• Wed Oct 04 2023 Julien Rische <jrische@redhat.com> - 4.9.12-9

  - ipa-kdb: Make AD-SIGNEDPATH optional with krb5 DAL 8 and older
    Resolves: RHEL-12198

• Thu Aug 31 2023 Rafael Jeffman <rjeffman@redhat.com> - 4.9.12-8

  - Require krb5 release 1.18.2-25 or later
    Resolves: RHBZ#2234711

• Wed Aug 16 2023 Rafael Jeffman <rjeffman@redhat.com> - 4.9.12-7

  - ipatests: fix test_topology
    Resolves: RHBZ#2232351
  - Installer: activate nss and pam services in sssd.conf
    Resolves: RHBZ#2216532

• Thu Aug 10 2023 Rafael Jeffman <rjeffman@redhat.com> - 4.9.12-6

  - ipa-kdb: fix error handling of is_master_host()
    Resolves: RHBZ#2214638
  - ipatests: enable firewall rule for http service on acme client
    Resolves: RHBZ#2230256
  - User plugin: improve error related to non existing idp
    Resolves: RHBZ#2224572
  - Prevent admin user from being deleted
    Resolves: RHBZ#1821181
  - Fix memory leak in the OTP last token plugin
    Resolves: RHBZ#2227783