Bug 1891832

Summary:	[Rebase] Rebase FreeIPA to a recent upstream release
Product:	Red Hat Enterprise Linux 8	Reporter:	Alexander Bokovoy <abokovoy>
Component:	ipa	Assignee:	Thomas Woerner <twoerner>
Status:	CLOSED ERRATA	QA Contact:	ipa-qe <ipa-qe>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	8.4	CC:	ksiddiqu, ndehadra, pasik, rcritten, ssidhaye, tscherf
Target Milestone:	rc	Keywords:	Rebase, Triaged
Target Release:	8.0
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	ipa-4.9.0-0.5.rc3	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2021-05-18 15:48:22 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Alexander Bokovoy 2020-10-27 13:41:16 UTC

Rebase FreeIPA to a recent upstream release.

Comment 8 Sumedh Sidhaye 2020-12-18 03:40:10 UTC

Sanity Only Verification:

[root@ci-vm-10-0-139-205 ~]# rpm -q ipa-server
ipa-server-4.9.0-0.5.rc3.module+el8.4.0+9124+ced20601.x86_64


Brew changelog:
* Fri Dec 11 2020 Thomas Woerner <twoerner> - 4.9.0-0.5.rc3
- Upstream pre release FreeIPA 4.9.0rc3
  Related: RHBZ#1891832

* Fri Dec 04 2020 Alexander Bokovoy <abokovoy> - 4.9.0-0.3.rc2
- Remove ipa-server dependency from ipa-selinux subpackage
- Related: RHBZ#1891832

* Fri Dec 04 2020 Thomas Woerner <twoerner> - 4.9.0-0.2.rc2
- Upstream pre release FreeIPA 4.9.0rc2
  Related: RHBZ#1891832
- Synchronize spec file with upstream and Fedora
  Related: RHBZ#1891832
- Traceback while doing ipa-backup
  Resolves: RHBZ#1901068
- ipa-client-install changes system wide ssh configuration
  Resolves: RRBZ#1544379
- ipa-kdb: support subordinate/superior UPN suffixes
  Resolves: RHBZ#1891056
- KRA Transport and Storage Certificates do not renew
  Resolves: RHBZ#1872603
- Move where the restore state is marked during IPA server upgrade
  Resolves: RHBZ#1569011
- Intermittent IdM Client Registration Failures
  Resolves: RHBZ#1812871
- Nightly test failure in test_acme.py::TestACME::test_third_party_certs
  (updates-testing)
  Resolves: RHBZ#1903025
- Add IPA RA Agent to ACME group on the CA
  Resolves: RHBZ#1902727

* Mon Nov 23 2020 Thomas Woerner <twoerner> - 4.9.0-0.1.rc1
- Fix requirement for python3-kdcproxy, add no autoreqprov for ipatests sub
  package
  Related: RHBZ#1891832

* Mon Nov 23 2020 Thomas Woerner <twoerner> - 4.9.0-0.rc1
- Upstream pre release FreeIPA 4.9.0rc1
  Resolves: RHBZ#1891832
- Requirements and design for libpwquality integration
  Resolves: RHBZ#1340463
- When parsing options require name/value pairs
  Resolves: RHBZ#1357495
- WebUI: Fix issue with opening links in new tab/window
  Resolves: RHBZ#1484088
- Use a state to determine if a 389-ds upgrade is in progress
  Resolves: RHBZ#1569011
- Unlock user accounts after a password reset and replicate that unlock to
  all IdM servers
  Resolves: RHBZ#1784657
- Set the certmonger subject with a string, not an object
  Resolves: RHBZ#1810148
- Implement ACME certificate enrolment
  Resolves: RHBZ#1851835
- [WebUI] Backport jQuery patches from newer versions of the library (e.g.
  3.5.0)
  Resolves: RHBZ#1859249
- It is not possible to edit KDC database when the FreeIPA server is running
  Resolves: RHBZ#1875001
- Fix nsslapd-db-lock tuning of BDB backend
  Resolves: RHBZ#1882340
- ipa-kdb: support subordinate/superior UPN suffixes
  Resolves: RHBZ#1891056
- wgi/plugins.py: ignore empty plugin directories
  Resolves: RHBZ#1894800

Comment 10 errata-xmlrpc 2021-05-18 15:48:22 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2021:1846