Commit Graph

Select branches

Hide Pull Requests

ipa-4-10

ipa-4-9

master

v4.10.0

v4.11.0

v4.12.2

v4.12.5

v4.9.10

v4.9.8

Mono Color

• 42d0bb0805 ipaserver: Move /etc/httpd/ipa to /etc/ipa/httpd v4.12.5 zpericic 2021-06-11 18:57:18 +02:00
• 024b410710 ipaserver: Use apache VirtualHost for IPA UI zpericic 2021-06-02 17:24:34 +02:00
• 96ea6f94c8 Become IPA 4.12.5 Antonio Torres 2025-09-30 10:22:09 +02:00
• 20c03a3e89 ipatests: extend test for unique krbcanonicalname Florence Blanc-Renaud 2025-08-28 15:31:39 +02:00
• bb24703a18 ipa-kdb: enforce PAC presence on TGT for TGS-REQ Julien Rische 2025-07-18 10:26:37 +02:00
• 67a9d537e3 Enforce uniqueness across krbprincipalname and krbcanonicalname Rob Crittenden 2025-07-10 11:44:36 -04:00
• f2fc367fb0 Become IPA 4.12.4 Antonio Torres 2025-06-17 09:14:30 +02:00
• e8c410ae5f Set krbCanonicalName=admin@REALM on the admin user Rob Crittenden 2025-04-28 13:43:40 -04:00
• 6ae52a2fb4 kdb: keep ipadb_get_connection() from succeeding with null LDAP context Julien Rische 2025-04-28 18:01:39 +02:00
• cbc33f21ef ipaserver: Move /etc/httpd/ipa to /etc/ipa/httpd v4.12.2 zpericic 2021-06-11 18:57:18 +02:00
• b146dbb946 ipaserver: Use apache VirtualHost for IPA UI zpericic 2021-06-02 17:24:34 +02:00
• f33a0e8e71 Become IPA 4.12.3 Antonio Torres 2025-01-15 12:01:25 +01:00
• 7a5a10b6bf ipa-otpd: use oidc_child's --client-secret-stdin option Sumit Bose 2024-11-27 12:16:09 +01:00
• 3b38efe758 ipa tools: remove sensitive material from the commandline Alexander Bokovoy 2024-11-08 14:59:20 +02:00
• cf84a22228 Unify use of option parsers Alexander Bokovoy 2024-12-13 13:42:36 +02:00
• c7da7e0dc9 Become IPA v4.12.2 Rob Crittenden 2024-08-21 11:06:37 -04:00
• f5c7237204 ipatests: Test to check that the configured value for "nsslapd-ignore-time-skew" remains on even after a "force-sync" is done Sudhir Menon 2024-08-13 15:06:12 +05:30
• ed813fe6f0 ipatests: Replace 'usermod -r' command with 'gpasswd -d' in test_hsm.py Sudhir Menon 2024-08-14 13:05:53 +05:30
• 21c6ccc982 Fix some resource leaks identified by a static analyzer Rob Crittenden 2024-04-10 10:15:55 -04:00
• d0684a7ecf Ignore TripleDES python-cryptography import warnings Rob Crittenden 2024-08-01 09:25:45 -04:00
• 5cc7941f30 Correct usage of public_key_algorithm_oid in ipalib/x509 Rob Crittenden 2024-08-01 09:23:36 -04:00
• f37c2eb878 trust-add: handle unavailable domain Florence Blanc-Renaud 2024-08-09 13:40:48 +02:00
• 1fc63e2b51 HSM: fix the module name Florence Blanc-Renaud 2024-08-14 10:16:25 +02:00
• 84751a26a9 ipatests: skip HSM test if pki < 11.5.9 Florence Blanc-Renaud 2024-08-09 12:13:20 +02:00
• 8046023fc4 ipatests: ipa-migrate tool with -Z option (CACERTFILE) Sudhir Menon 2024-07-25 18:32:21 +05:30
• ee96c129a6 ipatests: Verify that SIDgen task continue even if it fails to assign sid Mohammad Rizwan 2024-07-11 18:14:52 +05:30
• 81401e6c01 ipatests: increase the timeout for test_hsm.py::TestHSMInstall Florence Blanc-Renaud 2024-08-05 11:48:20 +02:00
• e83d949c7f Log errors reported by adtrustinstance.check_inst() using logger Rob Crittenden 2024-07-19 14:24:15 -04:00
• ffba69648a Force a logout in KerberosSession if a login is needed Rob Crittenden 2024-07-10 13:33:35 -04:00
• aadb8051d4 Replica CA installation: ignore time skew during initial replication Florence Blanc-Renaud 2024-07-18 12:57:36 +02:00
• 7b5f3d7971 Get rid of unicode and long helpers in ipa-otptoken-import Alexander Bokovoy 2024-07-31 11:48:40 +03:00
• fc02904340 ipalib/constants.py: factor out TripleDES use Alexander Bokovoy 2024-07-31 11:44:57 +03:00
• 7f9c890c04 ipalib/x509.py: get rid of unicode helper Alexander Bokovoy 2024-07-31 11:10:12 +03:00
• 531bd05de9 ipalib/x509.py: support Cryptography 43 Alexander Bokovoy 2024-07-31 11:08:12 +03:00
• 38b83c2b93 Run HSM validation as pkiuser to verify token permissions Rob Crittenden 2024-07-10 16:14:46 -04:00
• f03a96a7b9 ipatests: Fix usage of token_password_file Rob Crittenden 2024-07-15 10:21:28 -04:00
• 0e4fbc3b0d ipa-migrate - properly handle invalid certificates Mark Reynolds 2024-07-29 09:58:30 -04:00
• 2ddca5d5d5 spec file: do not use nodejs-22 on f39 and f40 Florence Blanc-Renaud 2024-07-30 14:09:46 +02:00
• fdd471d55c Fix a copy/paste issue when detecting the HSM SELinux subpackage Rob Crittenden 2024-07-18 13:40:28 -04:00
• 9f88188204 Remove RC4 and 3DES default encryption types on update Julien Rische 2024-07-17 15:47:33 +02:00
• d1a485a435 Unconditionally add MS-PAC to global config on update Julien Rische 2024-07-17 15:45:06 +02:00
• 6eb6a92930 ipatests: remove xfail for test_ipa_migrate_stage_mode Florence Blanc-Renaud 2024-07-17 18:36:24 +02:00
• de940802bb ipatests: remove xfail for test_ipa_migrate_version_option Florence Blanc-Renaud 2024-07-17 18:32:37 +02:00
• 85a853ba93 Issue 9621 - ipa-migrate - should not update mapped attributes in managed entries Mark Reynolds 2024-07-08 11:25:53 -04:00
• 8b703150a4 ipatests: Test replica installation using AD admin. Anuja More 2024-06-24 13:48:24 +05:30
• 051d61fdc3 ipa-pwd-extop: differentiate OTP requirements in LDAP binds Alexander Bokovoy 2024-06-25 14:27:24 +03:00
• ab47696fa6 Added new testsuite(ipa_ipa_migration) in prci definitions Sudhir Menon 2024-07-15 14:37:03 +05:30
• eeade50933 ipa-migrate - starttls does not work Mark Reynolds 2024-07-08 10:20:47 -04:00
• 6c53a22a2c Include token password options in ipa-kra-install man page Rob Crittenden 2024-06-18 11:16:07 -04:00
• 4ea1ad6aca ipatests: tests related to --token-password-file Mohammad Rizwan 2024-06-13 14:07:57 +05:30
• 7ab1bcb2d3 Re-organize HSM validation to be more consistent/less duplication Rob Crittenden 2024-07-05 15:00:59 -04:00
• 1b278de4ab Fix syntax error in the selinux-luna %postun script Rob Crittenden 2024-07-09 14:35:25 -04:00
• efa5719363 ipa-migrate - remove -V option Mark Reynolds 2024-07-08 10:49:49 -04:00
• 06c02f5f2c The -d option of the ipa-advise command was able to used. Shunsuke matsumoto 2024-07-10 13:13:38 +09:00
• a8e75bbb77 ipa_sidgen: Allow sidgen_task to continue after finding issues Thomas Woerner 2024-06-11 10:50:51 +02:00
• d635d70110 test_replica_install_after_restore: kinit after restore Florence Blanc-Renaud 2024-07-02 11:44:30 +02:00
• 6fe268af5b Uninstall: stop sssd-kcm before removing KCM ccaches database Florence Blanc-Renaud 2024-07-02 10:25:08 +02:00
• 2f902efd0e ipa-ods-enforcer: stop must also stop the socket Florence Blanc-Renaud 2024-06-27 15:42:47 +02:00
• 90b22ff888 ipatests: Tests for ipa-ipa migration tool Sudhir Menon 2024-06-25 11:00:28 +05:30
• 52ea4ad46e ipa-advise ipa-backup ipa-restore: Fix --v option of the manual. TAKAHASHI Masatsuna 2024-07-03 10:16:05 +09:00
• 48ff7da5cb ipatests: fix / permissions for test_nested_group_members Florence Blanc-Renaud 2024-06-27 09:59:58 +02:00
• 9e364910f5 Clean up more files and directories created by the installer(s) Rob Crittenden 2023-06-12 18:06:06 -04:00
• 60c127d197 ipatests: fix / permissions to allow ssh with private key Florence Blanc-Renaud 2024-06-14 13:37:46 +02:00
• 4521fe5f91 ipatests: mark test_ca_show_error_handling as xfail Florence Blanc-Renaud 2024-06-13 10:39:54 +02:00
• 58154be74f ipatests: configure gating and nightly tests on ipa-4-12 branch Florence Blanc-Renaud 2024-06-11 16:02:09 +02:00
• 467ec04f93 ipatests: add test for PKINIT renewal on hidden replica Florence Blanc-Renaud 2024-06-24 09:18:54 +02:00
• c8e3fdeb00 PKINIT certificate: fix renewal on hidden replica Florence Blanc-Renaud 2024-06-20 08:36:04 +02:00
• 4d51446bd3 ipatests: add test for ticket 9610 Florence Blanc-Renaud 2024-06-20 08:13:27 +02:00
• 09e66dc936 spec file: do not create /etc/ssh/ssh_config.orig if unchanged Florence Blanc-Renaud 2024-06-19 15:38:36 +02:00
• 9de053ef02 ipa-otptoken-import: open the key file in binary mode Florence Blanc-Renaud 2024-06-17 17:01:33 +02:00
• ebccaac3cf Add iparepltopoconf objectclass to topology permissions Rob Crittenden 2024-06-10 14:54:41 -04:00
• 584d0cecbc Use a unique task name for each backend in ipa-backup Rob Crittenden 2024-06-05 14:33:13 -04:00
• 5b3735b09d Bump minor version number Antonio Torres 2024-06-10 12:46:37 +02:00
• 4a61184da6 kdb: apply combinatorial logic for ticket flags Julien Rische 2024-03-25 18:25:52 +02:00
• f77c0a573c kdb: fix vulnerability in GCD rules handling Julien Rische 2024-03-19 12:24:40 +01:00
• ea37593786 Back to git snapshots Antonio Torres 2024-05-28 16:26:57 +02:00
• 407408e9a8 Become IPA 4.12.0 Antonio Torres 2024-05-28 16:19:49 +02:00
• c250b1a7e4 Update list of contributors Antonio Torres 2024-05-28 16:13:33 +02:00
• b3789876b8 Update translations to FreeIPA master state Antonio Torres 2024-05-28 16:11:04 +02:00
• 69c6a817ce ipa-replica-manage list-ruvs: display FQDN in the output Florence Blanc-Renaud 2024-05-28 09:14:01 +02:00
• 1223016ef2 console: for public errors only print a final one Alexander Bokovoy 2024-05-08 20:40:38 +03:00
• 5368120805 custodia: do not use deprecated jwcrypto wrappers Alexander Bokovoy 2024-05-22 13:59:46 +03:00
• 84eed2a67f frontend: add systemd journal audit of executed API commands Alexander Bokovoy 2024-05-08 14:47:53 +03:00
• 145e33174d ipalib/rpc: Reformat after moving json code around Alexander Bokovoy 2024-05-21 11:21:59 +03:00
• fd0f432fec ipalib: move json formatter to a separate file Alexander Bokovoy 2024-05-21 11:14:58 +03:00
• 9e861693fc batch: add keeponly option Alexander Bokovoy 2024-05-17 14:18:45 +03:00
• 6cc0a0b9a8 pylint: use yield_from for trivial cases Alexander Bokovoy 2024-05-17 11:34:37 +03:00
• c325f9c045 user: handle LDAP auto-bind for whoami case Alexander Bokovoy 2024-05-02 08:47:03 +03:00
• 902c8b0bae passwd: handle LDAP auto-bind use case as well Alexander Bokovoy 2024-05-02 08:45:58 +03:00
• e386e22046 cert: use context.principal only when it is defined Alexander Bokovoy 2024-05-02 08:43:20 +03:00
• b6131b5737 trust: handle stray pylint warning Alexander Bokovoy 2024-04-26 20:17:08 +03:00
• 08f1e6f2fd trust: use context.principal only when it is defined Alexander Bokovoy 2024-04-26 20:10:03 +03:00
• ab5465639d server: use context.principal only when it is defined Alexander Bokovoy 2024-04-26 19:52:32 +03:00
• 71d886f071 config: use context.principal only when it is defined Alexander Bokovoy 2024-04-26 19:42:29 +03:00
• 3608b2b63d batch: account for auto-binding in server context Alexander Bokovoy 2024-04-26 19:32:16 +03:00
• 295ac6385c privilege: use context.principal only when it is defined Alexander Bokovoy 2024-05-02 08:39:49 +03:00
• 6fc35156d9 Add permissions for topologysegment Rob Crittenden 2024-05-17 16:15:18 -04:00
• 9dc57ef77e idviews: Use ipaAnchorUUID without DCERPC bindings for SID anchors Thomas Woerner 2024-02-26 14:05:31 +01:00
• 47920e78c8 ipatests: Update ipa-adtrust-install test Erik Belko 2024-04-11 16:01:19 +01:00
• 544652aae4 Issue 9591 - Allow get_ruv() to handle incomplete RUV elements Mark Reynolds 2024-05-09 16:01:42 -04:00