[ol9_appstream] ipa-server-trust-ad-4.12.2-1.0.1.el9.aarch64

Cross-realm trusts with Active Directory in IPA require working Samba 4
installation. This package is provided for convenience to install all required
dependencies at once.

Changelog (Show File list) (Show related packages)

• Fri Oct 25 2024 EL Errata <el-errata_ww@oracle.com> - 4.12.2-1.0.1

  - Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674]
  - Add bind to ipa-server-common Requires [Orabug: 36518596]

• Wed Aug 21 2024 Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-1

  - Resolves: RHEL-54546 Covscan issues: Resource Leak
  - Resolves: RHEL-49602 misleading warning for missing ipa-selinux-nfast package on luna hsm h/w
  - Resolves: RHEL-40359 With unreachable AD, ipa trust returns an internal error

• Thu Aug 08 2024 Florence Blanc-Renaud <flo@redhat.com> - 4.12.0-7

  - Resolves: RHEL-53500 adtrustinstance only prints issues in check_inst() and does not log them
  - Resolves: RHEL-52306 Unconditionally add MS-PAC to global config
  - Resolves: RHEL-52300 RFE - Keep the configured value for the "nsslapd-ignore-time-skew" after a "force-sync"
  - Resolves: RHEL-52222 ipa-replica/server-install with softhsm needs to check permission/ownership of /var/lib/softhsm/tokens to avoid install failure
  - Resolves: RHEL-51944 Include latest fixes in python3-ipatests packages
  - Resolves: RHEL-50804 ipa-migrate -Z with invalid cert options fails with 'ValueError: option error'
  - Resolves: RHEL-49602 misleading warning for missing ipa-selinux-nfast package on luna hsm h/w
  - Resolves: RHEL-27856 'Unable to log in as uid=admin-replica.testrealm.test,ou=people,o=ipaca' during replica install

• Thu Jul 18 2024 Florence Blanc-Renaud <flo@redhat.com> - 4.12.0-6

  - Resolves: RHEL-47292 Include latest fixes in python3-ipatests packages
  - Resolves: RHEL-47146 Syntax error uninstalling the selinux-luna subpackage
  - Resolves: RHEL-46009 ipa-migrate with -Z option fails with ValueError: option error
  - Resolves: RHEL-46003 ipa-migrate -V options fails to display version
  - Resolves: RHEL-45463 ipa-migrate stage-mode is failing with error: Modifying a mapped attribute in a managed entry is not allowed
  - Resolves: RHEL-40890 ipa-server-install: token_password_file read in kra.install_check after calling hsm_validator in ca.install_check
  - Resolves: RHEL-40661 Adjust "ipa config-mod --addattr ipaconfigstring=EnforceLDAPOTP" to allow for non OTP users in some cases

• Mon Jul 08 2024 Florence Blanc-Renaud <flo@redhat.com> - 4.12.0-5

  - Resolves: RHEL-37285 IPA Web UI not showing replication agreement for non-admin users
  - Resolves: RHEL-42703 PSKC.xml issues with ipa_otptoken_import.py
  - Resolves: RHEL-41194 ipa-client rpm post script creates always ssh_config.orig even if nothing needs to be changed
  - Resolves: RHEL-39477 kdc.crt certificate not getting automatically renewed by certmonger in IPA Hidden replica
  - Resolves: RHEL-46559 Include latest fixes in python3-ipatests packages
  - Resolves: RHEL-22188 [RFE] Allow IPA SIDgen task to continue if it finds an entity that SID can't be assigned to

• Mon Jun 10 2024 Julien Rische <jrische@redhat.com> - 4.12.0-4

  - Resolves: RHEL-29928 CVE-2024-3183 freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force
  - Resolves: RHEL-29691 CVE-2024-2698 freeipa: delegation rules allow a proxy service to impersonate any user to access another target service

• Wed Jun 05 2024 Florence Blanc-Renaud <flo@redhat.com> - 4.12.0-3

  - Related: RHEL-34809
  temporarily revert a commit that depends on newer version of python-jwcrypto

• Tue Jun 04 2024 Florence Blanc-Renaud <flo@redhat.com> - 4.12.0-2

  - Resolves: RHEL-39950 ipa-client can't be installed because of a missing dependency

• Wed May 29 2024 Florence Blanc-Renaud <flo@redhat.com> - 4.12.0-1

  - Resolves: RHEL-39140 Rebase ipa to the latest 4.12 version for RHEL 9.5
  - Resolves: RHEL-34757 The change for preventing deletion of the admin user caused a regression in disable
  - Resolves: RHEL-30553 Depend on nfsv4-client-utils or nfs-utils
  - Resolves: RHEL-29762 IPA sidgen fails to create SID for manually set ID for a new range [rhel-9.5.0]
  - Resolves: RHEL-26261 Fix replica connection check for use with AD administrator
  - Resolves: RHEL-18062 ipa ca-show NAME --certificate-out=file creates empty file when NAME does not exist
  - Resolves: RHEL-12149 traceback in ipaserver/dcerpc.py
  - Resolves: RHEL-4810 [RFE] FreeIPA-to-FreeIPA migration
  - Resolves: RHEL-4807 [RFE] Support in IPA for HSM boxes

• Tue Apr 30 2024 Florence Blanc-Renaud <flo@redhat.com> - 4.11.0-11

  - Resolves: RHEL-33645 - Update samba to version 4.20.0