Prepare for FreeIPA 4.9.2
by Alexander Bokovoy
Hi,
I am planning to do a FreeIPA 4.9.2 release around February 12th-15th.
Most of the fixes are to IPA tests and various small fixes to problems
found in RHEL 8 nightly testing. The only 'bigger' change would be to
try to reduce downstream branding patches to a minimum -- this is what
Rob already got to the master branch in some extent but it needs more
work.
I'll keep updating draft release notes here every day when there are
pushes to ipa-4-9 branch:
https://vda.li/drafts/freeipa-4.9.2-release-notes.html
It is not edited manually right now so usual rules apply:
- if you want to add a changelog note, modify changelog field in the
ticket mentioned in the release notes
or
- add RN: ... lines into the commit message itself.
The release notes are mostly about user-facing changes so tests
typically don't need to have individual release notes.
Current list of resolved tickets for 4.9.2:
#6739 Cannot login to replica's WebUI
#8404 Detect and fail if not enough memory is available for installation
#8550 (rhbz#1902173) Uninstallation of server with KRA diplays error but proceeds successfully (unable to access security domain)
#8554 (rhbz#1891056) ipa-kdb: support subordinate/superior UPN suffixes
#8588 The 'ipactl status' command exit code does not fail on a partial error
#8630 (rhbz#1909876) Do not resolve user/group UID/GID in the service constructors
#8636 (rhbz#1923900) Samba on IdM member failure
#8658 (rhbz#1924501) Value stored to 'krberr' is never read in ipa-rmkeytab.c
#8669 Reduce difference between upstream and downstream releases
#8675 Update failed: NSS is built without support of the legacy database(DBM)
#8685 KDC cert has no SAN DNSname
#8686 (rhbz#1922955) Resubmitting KDC cert fails with internal server error
#8690 Add a tool to control interactive programs on remote hosts in IPA tests
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland
2 years, 7 months
[freeipa PR#5485][opened] Ensure IPA is running (ideally) before uninstalling the KRA
by rcritten
URL: https://github.com/freeipa/freeipa/pull/5485
Author: rcritten
Title: #5485: Ensure IPA is running (ideally) before uninstalling the KRA
Action: opened
PR body:
"""
Ensure IPA is running (ideally) before uninstalling the KRA
The KRA attempts to unregister itself from the security domain
which requires that IPA be running for this to succeed.
1. Move the KRA uninstall call prior to stopping all IPA
services
2. Try to start IPA if it isn't running and a KRA is configured
It isn't mandatory that IPA be running for the KRA uninstall to
succeed but it will suppress a pretty scary backtrace and error
message.
https://pagure.io/freeipa/issue/8550
Signed-off-by: Rob Crittenden <rcritten(a)redhat.com>
This also removes two deprecated API warnings from dogtag and changes a log level from info to debug to suppress unnecessary output.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5485/head:pr5485
git checkout pr5485
2 years, 7 months