Hi,
I am planning to do FreeIPA 4.9.4 release, hopefully, this week. As usual, current release notes draft is at https://vda.li/drafts/freeipa-4.9.4-release-notes-final.html
We have around 30 tickets resolved:
#2575 (rhbz#952756) [RFE] Installer wizard should prompt for DNS #2692 (rhbz#817071) ipa-server-install ignores --hostname #4011 (rhbz#1026434) ipa-server-install crashes when AD subpackage is not installed #4166 (rhbz#1059135) Backup CS.cfg before modifying it #4751 (rhbz#1851835) Implement ACME certificate enrolment #6587 ipa-otpd: systemctl reports "degraded" for "is-system-running" after todays CentOS updates #7835 (rhbz#1658280) Cert revocation for services and hosts is inefficient #8203 (rhbz#1835853) User page on WebUi only has half the information in CA-less install #8361 Add support for managing subuids and subgids in FreeIPA #8534 Nightly test failure in test_integration/test_replica_promotion.py::TestHiddenReplicaPromotion::test_hidden_replica_promote #8582 Nightly test failure in test_replica_promotion.py::TestHiddenReplicaPromotion::test_ipahealthcheck_hidden_replica - ClonesConnectivyAndDataCheck #8632 [CA-less] user fails to login via WebUI in case of `--no-pkinit` #8641 Random failure in test_webui/test_user.py::TestLifeCycles::test_life_cycles #8676 (rhbz#1955440) [Tracker] Multiple nightly test failure in test_integration/test_ntp_options/TestNTPoptions #8738 (rhbz#1934991) ACME fails to generate a cert on migrated RHEL8.4 server #8767 (rhbz#1943151) ipa-server-install displays debug output when --debug output is not specified. #8784 RFE: Reduce number of LDAP operations during hbacrule-del #8785 Nightly test failure in test_integration/test_commands.py/TestIPACommand/test_proxycommand_invalid_shell #8787 Add pkey_only to the service_find calls in the host plugin #8792 Random nightly test failure in test_replica_promotion.py::TestRenewalMaster::test_automatic_renewal_master_transfer_ondelete #8794 (rhbz#1948034) Failure to deploy FreeIPA domain controller in Rawhide with systemd-resolved 248-1.fc35 #8797 Cache the value of ca_is_enabled in the request context #8798 (rhbz#1953656) RFE: Cache LDAP data within a request #8801 user-mod requires two searches for a user entry #8802 IPA test failing with long serial numbers #8807 (rhbz#1688267) [RFE] IPA to allow setting a new range type. #8809 RFE: A tool to collect and analyze etimes from IPA logs #8814 Use Dogtag's CryptographyCryptoProvider instead of NSSCryptoProvider for KRAClient() #8818 new pylint 2.8 and astroid 2.5.5 #8830 [azure] performance instability #8831 update_dna_shared_config may not update all entries #8832 (rhbz#1957768) ipa-server-upgrade is failing while upgrading rhel8.3 to rhel8.4
I would wait for F34 Azure CI patches but this is not strictly necessary, we can do another release once they are ready.
We need to figure out what else is worth waiting for. Right now following PRs have ipa-4-9 label:
5769 WebUI: Add support of 'ipaautoprivategroups' LDAP WebUI ipa-4-9 needs review https://github.com/freeipa/freeipa/pull/5769 5749 pkispawn: override the AJP address ipa-4-9 https://github.com/freeipa/freeipa/pull/5749 5733 Revert the way hosts/services certs are searched f WIP ipa-4-9 needs rebase https://github.com/freeipa/freeipa/pull/5733 5662 ipatests: add test for login with FAST armoring en ipa-4-8 ipa-4-9 https://github.com/freeipa/freeipa/pull/5662 5656 [ipatests] Add basic support for remote ipaplatfor ipa-4-9 needs review https://github.com/freeipa/freeipa/pull/5656 5637 ipatests: Test to check that ResponseNotReady erro ipa-4-9 needs review https://github.com/freeipa/freeipa/pull/5637 5617 Add checks to prevent adding auth indicators to in ipa-4-9 https://github.com/freeipa/freeipa/pull/5617 5387 Raise RuntimeError when kinit_armor fails ipa-4-9 stale https://github.com/freeipa/freeipa/pull/5387 4909 Add unauthenticated nsupdate ipa-4-9 needs review https://github.com/freeipa/freeipa/pull/4909
389-ds did rename Multimaster replication plugin to Multisupplier and we need to be able to install with both old and new plugin names. May be someone could pick up the work Mark Reynolds did in https://github.com/freeipa/freeipa/pull/5739 and add support for both ways?
On ma, 24 touko 2021, Alexander Bokovoy via FreeIPA-devel wrote:
Hi,
I am planning to do FreeIPA 4.9.4 release, hopefully, this week. As usual, current release notes draft is at https://vda.li/drafts/freeipa-4.9.4-release-notes-final.html
We have around 30 tickets resolved:
#2575 (rhbz#952756) [RFE] Installer wizard should prompt for DNS #2692 (rhbz#817071) ipa-server-install ignores --hostname #4011 (rhbz#1026434) ipa-server-install crashes when AD subpackage is not installed #4166 (rhbz#1059135) Backup CS.cfg before modifying it #4751 (rhbz#1851835) Implement ACME certificate enrolment #6587 ipa-otpd: systemctl reports "degraded" for "is-system-running" after todays CentOS updates #7835 (rhbz#1658280) Cert revocation for services and hosts is inefficient #8203 (rhbz#1835853) User page on WebUi only has half the information in CA-less install #8361 Add support for managing subuids and subgids in FreeIPA #8534 Nightly test failure in test_integration/test_replica_promotion.py::TestHiddenReplicaPromotion::test_hidden_replica_promote #8582 Nightly test failure in test_replica_promotion.py::TestHiddenReplicaPromotion::test_ipahealthcheck_hidden_replica - ClonesConnectivyAndDataCheck #8632 [CA-less] user fails to login via WebUI in case of `--no-pkinit` #8641 Random failure in test_webui/test_user.py::TestLifeCycles::test_life_cycles #8676 (rhbz#1955440) [Tracker] Multiple nightly test failure in test_integration/test_ntp_options/TestNTPoptions #8738 (rhbz#1934991) ACME fails to generate a cert on migrated RHEL8.4 server #8767 (rhbz#1943151) ipa-server-install displays debug output when --debug output is not specified. #8784 RFE: Reduce number of LDAP operations during hbacrule-del #8785 Nightly test failure in test_integration/test_commands.py/TestIPACommand/test_proxycommand_invalid_shell #8787 Add pkey_only to the service_find calls in the host plugin #8792 Random nightly test failure in test_replica_promotion.py::TestRenewalMaster::test_automatic_renewal_master_transfer_ondelete #8794 (rhbz#1948034) Failure to deploy FreeIPA domain controller in Rawhide with systemd-resolved 248-1.fc35 #8797 Cache the value of ca_is_enabled in the request context #8798 (rhbz#1953656) RFE: Cache LDAP data within a request #8801 user-mod requires two searches for a user entry #8802 IPA test failing with long serial numbers #8807 (rhbz#1688267) [RFE] IPA to allow setting a new range type. #8809 RFE: A tool to collect and analyze etimes from IPA logs #8814 Use Dogtag's CryptographyCryptoProvider instead of NSSCryptoProvider for KRAClient() #8818 new pylint 2.8 and astroid 2.5.5 #8830 [azure] performance instability #8831 update_dna_shared_config may not update all entries #8832 (rhbz#1957768) ipa-server-upgrade is failing while upgrading rhel8.3 to rhel8.4
I would wait for F34 Azure CI patches but this is not strictly necessary, we can do another release once they are ready.
We need to figure out what else is worth waiting for. Right now following PRs have ipa-4-9 label:
5769 WebUI: Add support of 'ipaautoprivategroups' LDAP WebUI ipa-4-9 needs review https://github.com/freeipa/freeipa/pull/5769 5749 pkispawn: override the AJP address ipa-4-9 https://github.com/freeipa/freeipa/pull/5749 5733 Revert the way hosts/services certs are searched f WIP ipa-4-9 needs rebase https://github.com/freeipa/freeipa/pull/5733 5662 ipatests: add test for login with FAST armoring en ipa-4-8 ipa-4-9 https://github.com/freeipa/freeipa/pull/5662 5656 [ipatests] Add basic support for remote ipaplatfor ipa-4-9 needs review https://github.com/freeipa/freeipa/pull/5656 5637 ipatests: Test to check that ResponseNotReady erro ipa-4-9 needs review https://github.com/freeipa/freeipa/pull/5637 5617 Add checks to prevent adding auth indicators to in ipa-4-9 https://github.com/freeipa/freeipa/pull/5617 5387 Raise RuntimeError when kinit_armor fails ipa-4-9 stale https://github.com/freeipa/freeipa/pull/5387 4909 Add unauthenticated nsupdate ipa-4-9 needs review https://github.com/freeipa/freeipa/pull/4909
389-ds did rename Multimaster replication plugin to Multisupplier and we need to be able to install with both old and new plugin names. May be someone could pick up the work Mark Reynolds did in https://github.com/freeipa/freeipa/pull/5739 and add support for both ways?
Since 389-ds released 2.0.5 and updated F34/Rawhide, they are failiing now to install with FreeIPA 4.9.3. I am working on a combined fix that would allow to install with earlier 389-ds as well as with 2.0.5 version. This is tracked in PR https://github.com/freeipa/freeipa/pull/5798.
Once it is solved, we can release 4.9.4.
On ma, 31 touko 2021, Alexander Bokovoy via FreeIPA-devel wrote:
On ma, 24 touko 2021, Alexander Bokovoy via FreeIPA-devel wrote:
Hi,
I am planning to do FreeIPA 4.9.4 release, hopefully, this week. As usual, current release notes draft is at https://vda.li/drafts/freeipa-4.9.4-release-notes-final.html
We have around 30 tickets resolved:
#2575 (rhbz#952756) [RFE] Installer wizard should prompt for DNS #2692 (rhbz#817071) ipa-server-install ignores --hostname #4011 (rhbz#1026434) ipa-server-install crashes when AD subpackage is not installed #4166 (rhbz#1059135) Backup CS.cfg before modifying it #4751 (rhbz#1851835) Implement ACME certificate enrolment #6587 ipa-otpd: systemctl reports "degraded" for "is-system-running" after todays CentOS updates #7835 (rhbz#1658280) Cert revocation for services and hosts is inefficient #8203 (rhbz#1835853) User page on WebUi only has half the information in CA-less install #8361 Add support for managing subuids and subgids in FreeIPA #8534 Nightly test failure in test_integration/test_replica_promotion.py::TestHiddenReplicaPromotion::test_hidden_replica_promote #8582 Nightly test failure in test_replica_promotion.py::TestHiddenReplicaPromotion::test_ipahealthcheck_hidden_replica - ClonesConnectivyAndDataCheck #8632 [CA-less] user fails to login via WebUI in case of `--no-pkinit` #8641 Random failure in test_webui/test_user.py::TestLifeCycles::test_life_cycles #8676 (rhbz#1955440) [Tracker] Multiple nightly test failure in test_integration/test_ntp_options/TestNTPoptions #8738 (rhbz#1934991) ACME fails to generate a cert on migrated RHEL8.4 server #8767 (rhbz#1943151) ipa-server-install displays debug output when --debug output is not specified. #8784 RFE: Reduce number of LDAP operations during hbacrule-del #8785 Nightly test failure in test_integration/test_commands.py/TestIPACommand/test_proxycommand_invalid_shell #8787 Add pkey_only to the service_find calls in the host plugin #8792 Random nightly test failure in test_replica_promotion.py::TestRenewalMaster::test_automatic_renewal_master_transfer_ondelete #8794 (rhbz#1948034) Failure to deploy FreeIPA domain controller in Rawhide with systemd-resolved 248-1.fc35 #8797 Cache the value of ca_is_enabled in the request context #8798 (rhbz#1953656) RFE: Cache LDAP data within a request #8801 user-mod requires two searches for a user entry #8802 IPA test failing with long serial numbers #8807 (rhbz#1688267) [RFE] IPA to allow setting a new range type. #8809 RFE: A tool to collect and analyze etimes from IPA logs #8814 Use Dogtag's CryptographyCryptoProvider instead of NSSCryptoProvider for KRAClient() #8818 new pylint 2.8 and astroid 2.5.5 #8830 [azure] performance instability #8831 update_dna_shared_config may not update all entries #8832 (rhbz#1957768) ipa-server-upgrade is failing while upgrading rhel8.3 to rhel8.4
I would wait for F34 Azure CI patches but this is not strictly necessary, we can do another release once they are ready.
We need to figure out what else is worth waiting for. Right now following PRs have ipa-4-9 label:
5769 WebUI: Add support of 'ipaautoprivategroups' LDAP WebUI ipa-4-9 needs review https://github.com/freeipa/freeipa/pull/5769 5749 pkispawn: override the AJP address ipa-4-9 https://github.com/freeipa/freeipa/pull/5749 5733 Revert the way hosts/services certs are searched f WIP ipa-4-9 needs rebase https://github.com/freeipa/freeipa/pull/5733 5662 ipatests: add test for login with FAST armoring en ipa-4-8 ipa-4-9 https://github.com/freeipa/freeipa/pull/5662 5656 [ipatests] Add basic support for remote ipaplatfor ipa-4-9 needs review https://github.com/freeipa/freeipa/pull/5656 5637 ipatests: Test to check that ResponseNotReady erro ipa-4-9 needs review https://github.com/freeipa/freeipa/pull/5637 5617 Add checks to prevent adding auth indicators to in ipa-4-9 https://github.com/freeipa/freeipa/pull/5617 5387 Raise RuntimeError when kinit_armor fails ipa-4-9 stale https://github.com/freeipa/freeipa/pull/5387 4909 Add unauthenticated nsupdate ipa-4-9 needs review https://github.com/freeipa/freeipa/pull/4909
389-ds did rename Multimaster replication plugin to Multisupplier and we need to be able to install with both old and new plugin names. May be someone could pick up the work Mark Reynolds did in https://github.com/freeipa/freeipa/pull/5739 and add support for both ways?
Since 389-ds released 2.0.5 and updated F34/Rawhide, they are failiing now to install with FreeIPA 4.9.3. I am working on a combined fix that would allow to install with earlier 389-ds as well as with 2.0.5 version. This is tracked in PR https://github.com/freeipa/freeipa/pull/5798.
Once it is solved, we can release 4.9.4.
The release process is in place.
I am working on merging translation updates (last done in March). I managed to update master branch with new translations and currently working on ipa-4-9 but it has more merge conflicts than master.
freeipa-devel@lists.fedorahosted.org
-
Alexander Bokovoy