[ol8_appstream] python3-ipaclient-4.9.13-8.0.1.module+el8.10.0+90332+38aded3e.noarch

IPA is an integrated solution to provide centrally managed Identity (users,
hosts, services), Authentication (SSO, 2FA), and Authorization
(host access control, SELinux user roles, services). The solution provides
features for further integration with Linux based clients (SUDO, automount)
and integration with Active Directory based infrastructures (Trusts).
If your network uses IPA for authentication, this package should be
installed on every client machine.

Changelog (Show File list) (Show related packages)

• Wed May 22 2024 EL Errata <el-errata_ww@oracle.com> - 4.9.13-8.0.1

  - Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674]

• Thu Mar 07 2024 Rafael Jeffman <rjeffman@redhat.com> - 4.9.13-8

  - rpcserver: validate Kerberos principal name before running kinit
    Resolves: RHEL-26153
  - Vault: add additional fallback to RSA-OAEP wrapping algo
    Resolves: RHEL-28259

• Tue Feb 20 2024 Julien Rische <jrische@redhat.com> - 4.9.13-7

  - ipa-kdb: Fix double free in ipadb_reinit_mspac()
    Resolves: RHEL-25742
  - kra: set RSA-OAEP as default wrapping algo when FIPS is enabled
    Resolves: RHEL-12153
  - Vault: improve vault server archival/retrieval calls error handling
    Resolves: RHEL-12153
  - Vault: add support for RSA-OAEP wrapping algo
    Resolves: RHEL-12153

• Fri Feb 16 2024 Julien Rische <jrische@redhat.com> - 4.9.13-6

  - ipa-kdb: Rework ipadb_reinit_mspac()
    Resolves: RHEL-25742
  - ipatests: wait for replica update in test_dns_locations
    Resolves: RHEL-22373
  - ipatests: fix tasks.wait_for_replication() method
    Resolves: RHEL-25708

• Tue Feb 13 2024 Rafael Jeffman <rjeffman@redhat.com> - 4.9.13-5

  - kdb: PAC generator: do not fail if canonical principal is missing
    Resolves: RHEL-23630
  - ipa-kdb: Fix memory leak during PAC verification
    Resolves: RHEL-22644
  - Fix session cookie access
    Resolves: RHEL-23622
  - Do not ignore staged users in sidgen plugin
    Resovlves: RHEL-23626
  - ipa-kdb: Disable Bronze-Bit check if PAC not available
    Resolves: RHEL-22313
  - krb5kdc: Fix start when pkinit and otp auth type are enabled
    Resolves: RHEL-4874
  - hbactest was not collecting or returning messages
    Resolves: RHEL-12780

• Tue Jan 23 2024 Rafael Jeffman <rjeffman@redhat.com> - 4.9.13-4

  - Improve server affinity for CA-less deployments
    Resolves: RHEL-22283
  - host: update system: Manage Host Keytab permission
    Resolves: RHEL-22286
  - adtrustinstance: make sure NetBIOS name defaults are set properly
    Resolves: RHEL-21938
  - ipatests: Fix healthcheck report when nsslapd accesslog logbuffering is set to off
    Resolves: RHEL-19672

• Wed Jan 10 2024 Julien Rische <jrische@redhat.com> - 4.9.13-3

  - ipa-kdb: Detect and block Bronze-Bit attacks
    Resolves: RHEL-9984
  - Fix for CVE-2023-5455
    Resolves: RHEL-12578

• Thu Nov 30 2023 Rafael Jeffman <rjeffman@redhat.com> - 4.9.13-2

  - Handle new samba exception types.
    Resolves: RHEL-17623

• Tue Nov 21 2023 Rafael Jeffman <rjeffman@redhat.com> - 4.9.13-1

  - Rebase ipa to 4.9.13
    Resolves: RHEL-16936

• Wed Oct 04 2023 Julien Rische <jrische@redhat.com> - 4.9.12-9

  - ipa-kdb: Make AD-SIGNEDPATH optional with krb5 DAL 8 and older
    Resolves: RHEL-12198