June 2021 - FreeIPA-devel - Fedora mailing-lists

[freeipa PR#5325][opened] LDAP autobind authenticateAsDN for BIND named
by tiran 15 Jun '21

15 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5325 Author: tiran Title: #5325: LDAP autobind authenticateAsDN for BIND named Action: opened PR body: """ Use new nsslapd-ldapiautoauthdnattr feature to switch BIND named from GSSAPI bind to EXTERNAL LDAPI bind. Requires 389-DS build https://copr.fedorainfracloud.org/coprs/build/1811023 - [ ] Requires new build of 389-DS - [ ] Add new OIDs to FreeIPA's OID registry Fixes: https://pagure.io/freeipa/issue/8544 See: https://github.com/389ds/389-ds-base/issues/4381 Signed-off-by: Christian Heimes <cheimes(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5325/head:pr5325 git checkout pr5325

2 1

[freeipa PR#5822][opened] [ipa-4-6] CA less installation: non ASCII chars in CA subject
by flo-renaud 15 Jun '21

15 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5822 Author: flo-renaud Title: #5822: [ipa-4-6] CA less installation: non ASCII chars in CA subject Action: opened PR body: """ ### CA less installation: non ASCII chars in CA subject In CA-less installation, ipa-server-install fails when the CA certificate contains a subject with non ASCII characters. ipa-server-install is internally calling ipautil.run(...) to launch a certutil -n nickname command, and the nickname is provided as a unicode instead of a string. The fix makes sure the nickname is provided as a utf-8 encoded string. Fixes: https://pagure.io/freeipa/issue/8879 ### ipatests: use non-ascii chars in CA-less install The CA-less installation creates an external CA with the subject CN=CA,O=Example Organization. In order to test non-ascii subjects, use CN=CA,O=Example Organization España instead. Related: https://pagure.io/freeipa/issue/8879 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5822/head:pr5822 git checkout pr5822

1 1

[freeipa PR#5833][opened] When loading certificates verify that it is X.509 v3
by rcritten 14 Jun '21

14 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5833 Author: rcritten Title: #5833: When loading certificates verify that it is X.509 v3 Action: opened PR body: """ Simple version enforcement. A v1 certificate won't have the extensions that are assumed available later during the validation process. https://pagure.io/freeipa/issue/8817 Signed-off-by: Rob Crittenden <rcritten(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5833/head:pr5833 git checkout pr5833

1 1

FreeIPA 4.9.4 and 4.9.5 released
by Alexander Bokovoy 14 Jun '21

14 Jun '21

The FreeIPA team would like to announce FreeIPA 4.9.4 and 4.9.5 releases! Yes, this is not a mistake. First we created FreeIPA 4.9.4 on June 4th but then found a late time regression that took us more than ten days to sort out, thus going with the FreeIPA 4.9.5 release. This regression concerns an edge case of an unauthenticated or almost expired user credential's run of 'ipa' command line tool returning a non-processed Python exception instead of a human-readable error message. This, in turn uncovered a bit of a misconfiguration on the IPA server side which could trigger this behavior. In a process of investigating it we also found a bug in GSS-Proxy tool. FreeIPA 4.9.4 release notes are large and can be found at https://www.freeipa.org/page/Releases/4.9.4 FreeIPA 4.9.5 is released and can be downloaded from http://www.freeipa.org/page/Downloads. Builds for Fedora distributions will be available from the official repository soon. FreeIPA installation is currently broken in Fedora Rawhide due to an ongoing migration to Python 3.10 in Fedora where mod_wsgi does not yet support Python 3.10. == Highlights in 4.9.5 === Bug fixes FreeIPA 4.9.5 is a stabilization release for the features delivered as a part of 4.9.0 version series. There are 7 bug-fixes since FreeIPA 4.9.4 release. Details of the bug-fixes can be seen in the list of resolved tickets below. == Upgrading Upgrade instructions are available on Upgrade page. == Feedback Please provide comments, bugs and other feedback via the freeipa-users mailing list (https://lists.fedoraproject.org/archives/list/freeipa-users@lists.fedorahos…) or #freeipa channel on Freenode. == Resolved tickets * https://pagure.io/freeipa/issue/8691[#8691] [Tracker] Nightly failure (fc33) in test_winsyncmigrate.py: ipa-replica-manage connect --winsync error * https://pagure.io/freeipa/issue/8702[#8702] (https://bugzilla.redhat.com/show_bug.cgi?id=1780317[rhbz#1780317]) ipa-cert-fix: False Positive Status for cert renewal. * https://pagure.io/freeipa/issue/8756[#8756] [Tracker] 389ds coredump in test_caless.py::TestReplicaInstall::test_wildcard_http * https://pagure.io/freeipa/issue/8868[#8868] Nightly test failure in test_integration/test_fips.py::TestInstallFIPS * https://pagure.io/freeipa/issue/8873[#8873] Missing credential cache can raise 500 when authenticating instead of 401 * https://pagure.io/freeipa/issue/8876[#8876] Nightly failure in test_installation.py::TestInstallWithCA1::test_install_with_bad_ldap_conf * https://pagure.io/freeipa/issue/8877[#8877] Nightly test failure in test_nfs.py: runner VM runs out of disk space due to huge sssd log file == Detailed changelog since 4.9.4 === Armando Neto (1) * ipatests: Bump PR-CI boxes https://pagure.io/freeipa/c/79e0919132adf0df764400f9c27268cbadd2578b[commit] === Alexander Bokovoy (3) * Become FreeIPA 4.9.5 https://pagure.io/freeipa/c/e045f118c87346bfab5b5634fd23f3054f082f7f[commit] * get_credentials: return ValueError for missing creds https://pagure.io/freeipa/c/5238651da06547bb004de2434ae7d357422ba735[commit] https://pagure.io/freeipa/issue/8873[#8873] * Back to git snapshots https://pagure.io/freeipa/c/b25f5bd9109b87916e097dd8353ea5f0dc49e398[commit] === Florence Blanc-Renaud (4) * ipa-cert-fix man page: add note about certmonger renewal https://pagure.io/freeipa/c/06a445aff10c1ab84e8784ab41b0a838e500e617[commit] https://pagure.io/freeipa/issue/8702[#8702] * freeipa.spec: bump 389-ds version https://pagure.io/freeipa/c/6eb535334d33f8f375b856e3a2d0b8853b318b4d[commit] https://pagure.io/freeipa/issue/8691[#8691], https://pagure.io/freeipa/issue/8756[#8756] * ipatests: delete the replica before uninstallation https://pagure.io/freeipa/c/2b22450dfdc1657b463683b09b9c69816f9152d9[commit] https://pagure.io/freeipa/issue/8876[#8876] * ipatests: set selinux context for fips mode https://pagure.io/freeipa/c/13b257d7a05fd255df472144712edb34604dbe06[commit] https://pagure.io/freeipa/issue/8868[#8868] === Stanislav Levin (2) * gssproxy: Don't refresh expired delegated credentials https://pagure.io/freeipa/c/0fd06f33b83aec19a88c594d3750bc476157ab83[commit] * krb_utils: Simplify get_credentials https://pagure.io/freeipa/c/700be74975cad998e7dbcc4fb437e6b0bbd77305[commit] https://pagure.io/freeipa/issue/8873[#8873] === Sergey Orlov (2) * ipatests: disable test_nfs.py::TestNFS in nightly runs on Fedora 33 https://pagure.io/freeipa/c/c9f5acc0d281f1a27471091648c36f94528c5a29[commit] https://pagure.io/freeipa/issue/8877[#8877] * ipatests: temporary disable execution of test_nfs.py::TestNFS in nightly runs https://pagure.io/freeipa/c/6ee14f513711ae9be799cfa2bd009f13c5248932[commit] https://pagure.io/freeipa/issue/8877[#8877] -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland _______________________________________________ FreeIPA-devel mailing list -- freeipa-devel(a)lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-leave(a)lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/freeipa-devel@lists.fedorahost… Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure

1 0

[freeipa PR#5835][opened] run test_kdc_proxy to test cygwin installation
by wladich 14 Jun '21

14 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5835 Author: wladich Title: #5835: run test_kdc_proxy to test cygwin installation Action: opened PR body: """ """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5835/head:pr5835 git checkout pr5835

1 1

[freeipa PR#5834][opened] [Backport][ipa-4-9] krb_utils: Simplify get_credentials
by abbra 14 Jun '21

14 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5834 Author: abbra Title: #5834: [Backport][ipa-4-9] krb_utils: Simplify get_credentials Action: opened PR body: """ This PR was opened automatically because PR #5813 was pushed to master and backport to ipa-4-9 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5834/head:pr5834 git checkout pr5834

1 1

[freeipa PR#5830][opened] [Backport][ipa-4-9] ipa-cert-fix man page: add note about certmonger renewal
by flo-renaud 12 Jun '21

12 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5830 Author: flo-renaud Title: #5830: [Backport][ipa-4-9] ipa-cert-fix man page: add note about certmonger renewal Action: opened PR body: """ This PR was opened automatically because PR #5825 was pushed to master and backport to ipa-4-9 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5830/head:pr5830 git checkout pr5830

2 1

[freeipa PR#5813][opened] krb_utils: Simplify get_credentials
by stanislavlevin 12 Jun '21

12 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5813 Author: stanislavlevin Title: #5813: krb_utils: Simplify get_credentials Action: opened PR body: """ Previously, `get_credentials` raises either `ValueError` or re-raises `GSSError`. The former makes the handling of this function more difficult without a good reason. With this change: - `get_credentials` no longer handles exceptions by itself, but delegates this to the callers (which already process GSS errors). - `get_credentials_if_valid` doesn't raise any expected exceptions, but return valid credentials (on the moment of calling) or None. This makes it consistent with docs. Related: https://pagure.io/freeipa/issue/8873 tested scenarios: 1. missing creds && ipa user-find xxx 2. expired creds && ipa user-find xxx 3. https://pagure.io/freeipa/issue/7752 (removed ccache on server + ipa user-find xxx) 4. ccache sweeper """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5813/head:pr5813 git checkout pr5813

2 1

[freeipa PR#5734][opened] Design doc to allow LDAP bind using the RADIUS auth type
by rcritten 11 Jun '21

11 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5734 Author: rcritten Title: #5734: Design doc to allow LDAP bind using the RADIUS auth type Action: opened PR body: """ The RADIUS auth type is only supported with Kerberos currently. This design proposes a way to make it work with LDAP binds as well without relying ok workarounds. Signed-off-by: Rob Crittenden <rcritten(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5734/head:pr5734 git checkout pr5734

1 1

[freeipa PR#5825][opened] ipa-cert-fix man page: add note about certmonger renewal
by flo-renaud 10 Jun '21

10 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5825 Author: flo-renaud Title: #5825: ipa-cert-fix man page: add note about certmonger renewal Action: opened PR body: """ ipa-cert-fix man page needs to explain that certmonger may trigger a renewal right after ipa-cert-fix completes because certmonger does not notice the updated certificates. Fixes: https://pagure.io/freeipa/issue/8702 Signed-off-by: Florence Blanc-Renaud <flo(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5825/head:pr5825 git checkout pr5825

1 1

[freeipa PR#5827][opened] ipatests: disable test_nfs.py::TestNFS in nightly runs on Fedora 33
by wladich 10 Jun '21

10 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5827 Author: wladich Title: #5827: ipatests: disable test_nfs.py::TestNFS in nightly runs on Fedora 33 Action: opened PR body: """ Also disable in Fedora 33 as it also has the faulty version of sssd which produces multi-gigabyte log file Related to https://pagure.io/freeipa/issue/8877 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5827/head:pr5827 git checkout pr5827

2 1

[freeipa PR#5828][opened] [Backport][ipa-4-9] ipatests: disable test_nfs.py::TestNFS in nightly runs on Fedora 33
by wladich 10 Jun '21

10 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5828 Author: wladich Title: #5828: [Backport][ipa-4-9] ipatests: disable test_nfs.py::TestNFS in nightly runs on Fedora 33 Action: opened PR body: """ This is a manual backport of #5827 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5828/head:pr5828 git checkout pr5828

2 1

Framework execute callback feedback
by Rob Crittenden 10 Jun '21

10 Jun '21

Currently the framework has four types of methods: - pre_callback: called before any real work is done. Usually used to tune up incoming options - execute: does the brute work. For most CRUD plugins this is all done in baseldap.py in the LDAP* classes - post_callback: supposed to be data cleanup for presentation to the caller but in some cases actual work is being done. user-add calls ldap.add_entry_to_group for example. - exc_callback: special case handling for exceptions If you have "work" to be done that would normally be done in execute there is no way to do it other than to abuse post_callback to get it done. Overriding execute is only an option if you want to completely replace the call, otherwise order execution is going to be strange. Say for example in user_add you want to do work after the execute() is done so you'd do something like: class user_add() def execute(stuff): result = super(user_add, self).execute(stuff) # some extra work return result The order of execution is: user_add:pre_callback user_add:execute() LDAPCreate:execute() user_add:post_callback() user_add:execute() This is because the LDAP* baseldap methods handle the pre/post/exc callbacks directly. So in order to be able to insert more "work" in execute itself we'd need another callback type. Why do I want this? One feature of post_callback is that for add/mod methods ldap.get_entry() is called so we can prepare the final results to be returned to the user for display. There are cases where the user doesn't need or case to see that result. We could save an least one LDAP query by returning only errors in this case. The use case is mostly around bulk operations where the user doesn't care about seeing the UID of all users added, for example. To do this I think we can skip post_callback altogether, assuming it does no real "work". In the case of user_add/mod skipping post_callback would save three queries: fetch the user, has_keytab and has_password. But before re-architecting this I'd like to get some opinions on it. I can do a full-blown design if desired. rob

2 4

[freeipa PR#5824][opened] [Backport][ipa-4-9] freeipa.spec: bump 389-ds version
by rcritten 10 Jun '21

10 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5824 Author: rcritten Title: #5824: [Backport][ipa-4-9] freeipa.spec: bump 389-ds version Action: opened PR body: """ This PR was opened automatically because PR #5819 was pushed to master and backport to ipa-4-9 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5824/head:pr5824 git checkout pr5824

2 1

[freeipa PR#5819][opened] freeipa.spec: bump 389-ds version
by flo-renaud 09 Jun '21

09 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5819 Author: flo-renaud Title: #5819: freeipa.spec: bump 389-ds version Action: opened PR body: """ IPA depends on the 389-ds version with the fix for https://github.com/389ds/389-ds-base/issues/4700 Regression in winsync replication agreement The same 389-ds version also fixes https://github.com/389ds/389-ds-base/issues/4670 389ds coredump in IPA nightly test test_caless.py::TestReplicaInstall::test_wildcard_http Fixes: https://pagure.io/freeipa/issue/8691 Fixes: https://pagure.io/freeipa/issue/8756 Signed-off-by: Florence Blanc-Renaud <flo(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5819/head:pr5819 git checkout pr5819

2 1

[freeipa PR#5820][opened] [Backport][ipa-4-9] ipatests: temporary disable execution of test_nfs.py::TestNFS in nightly runs
by wladich 09 Jun '21

09 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5820 Author: wladich Title: #5820: [Backport][ipa-4-9] ipatests: temporary disable execution of test_nfs.py::TestNFS in nightly runs Action: opened PR body: """ This is a manual backport of #5818 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5820/head:pr5820 git checkout pr5820

1 1

[freeipa PR#5818][opened] ipatests: temporary disable execution of test_nfs.py::TestNFS in nightly runs
by wladich 08 Jun '21

08 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5818 Author: wladich Title: #5818: ipatests: temporary disable execution of test_nfs.py::TestNFS in nightly runs Action: opened PR body: """ During test run on Fedora 34 and 35 sssd produces multi-gigabyte log file which causes test runners to run out of disk space. Related to https://pagure.io/freeipa/issue/8877 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5818/head:pr5818 git checkout pr5818

2 1

[freeipa PR#5817][opened] [Backport][ipa-4-9] ipatests: delete the replica before uninstallation
by flo-renaud 08 Jun '21

08 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5817 Author: flo-renaud Title: #5817: [Backport][ipa-4-9] ipatests: delete the replica before uninstallation Action: opened PR body: """ This PR was opened automatically because PR #5814 was pushed to master and backport to ipa-4-9 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5817/head:pr5817 git checkout pr5817

1 1

[freeipa PR#5814][opened] ipatests: delete the replica before uninstallation
by flo-renaud 08 Jun '21

08 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5814 Author: flo-renaud Title: #5814: ipatests: delete the replica before uninstallation Action: opened PR body: """ The test test_installation.py::TestInstallWithCA1::test_install_with_bad_ldap_conf is uninstalling a replica by calling ipa-server-install --uninstall directly, instead of deleting the replica first. Use tasks.uninstall_replica instead of tasks.uninstall_master to perform a proper uninstallation. Fixes: https://pagure.io/freeipa/issue/8876 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5814/head:pr5814 git checkout pr5814

1 1

[freeipa PR#5816][opened] [Backport][ipa-4-9] ipatests: set selinux context for fips mode
by rcritten 08 Jun '21

08 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5816 Author: rcritten Title: #5816: [Backport][ipa-4-9] ipatests: set selinux context for fips mode Action: opened PR body: """ This PR was opened automatically because PR #5812 was pushed to master and backport to ipa-4-9 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5816/head:pr5816 git checkout pr5816

2 1

[freeipa PR#5812][opened] ipatests: set selinux context for fips mode
by flo-renaud 07 Jun '21

07 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5812 Author: flo-renaud Title: #5812: ipatests: set selinux context for fips mode Action: opened PR body: """ In order to test FIPS mode, the test is faking a user-space FIPS environment by creating a file /var/tmp/userspace-fips and bind-mounting this file as /proc/sys/crypto/fips_enabled The security context needs to be properly set otherwise /proc/sys/crypto/fips_enabled inherits the security context unconfined_u:object_r:user_tmp_t:s0 and cannot be read, resulting in the test seeing fips_mode=false. Fixes: https://pagure.io/freeipa/issue/8868 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5812/head:pr5812 git checkout pr5812

2 1

[freeipa PR#5815][opened] [testing_master_testing_selinux] Nightly PR
by freeipa-pr-ci2 07 Jun '21

07 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5815 Author: freeipa-pr-ci2 Title: #5815: [testing_master_testing_selinux] Nightly PR Action: opened PR body: """ None """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5815/head:pr5815 git checkout pr5815

2 1

[freeipa PR#5739][opened] Replace DS replication plugin name
by mreynolds389 07 Jun '21

07 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5739 Author: mreynolds389 Title: #5739: Replace DS replication plugin name Action: opened PR body: """ In efforts to remove problematic language, like master and slave, DS is replacing "master" with "supplier" in the replication plugin entry under cn=config. DS should be able handle upgrades correctly as well. relates: https://pagure.io/freeipa/issue/8799 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5739/head:pr5739 git checkout pr5739

1 1

[freeipa PR#5801][opened] [ipa-4-9] ipatests: Bump PR-CI boxes
by netoarmando 07 Jun '21

07 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5801 Author: netoarmando Title: #5801: [ipa-4-9] ipatests: Bump PR-CI boxes Action: opened PR body: """ Update Fedora 34 and 33 boxes to include new packages. Signed-off-by: Armando Neto <abiagion(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5801/head:pr5801 git checkout pr5801

2 1

[freeipa PR#5722][opened] workshop: Use default fedora cloud image
by netoarmando 07 Jun '21

07 Jun '21

URL: https://github.com/freeipa/freeipa/pull/5722 Author: netoarmando Title: #5722: workshop: Use default fedora cloud image Action: opened PR body: """ Use publicly available Fedora cloud box, removing the necessity of building custom boxes with preinstalled packages. This removes the burden of maintaining boxes up-to-date, in the other hand one must fetch the packages for all hosts in the topology before starting the curriculum. Signed-off-by: Armando Neto <abiagion(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5722/head:pr5722 git checkout pr5722

2 1

2025

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-devel June 2021