The FreeIPA team would like to announce FreeIPA 4.9.3 release!

It can be downloaded from http://www.freeipa.org/page/Downloads. Builds for Fedora distributions will be available from the official repository soon.

== Highlights in 4.9.3

=== Bug fixes

FreeIPA 4.9.3 is a stabilization release for the features delivered as a part of 4.9.0 version series.

There are more than 30 bug-fixes since FreeIPA 4.9.2 release. Details of the bug-fixes can be seen in the list of resolved tickets below.

== Upgrading

Upgrade instructions are available on Upgrade page.

== Feedback

Please provide comments, bugs and other feedback via the freeipa-users mailing list (https://lists.fedoraproject.org/archives/list/freeipa-users@lists.fedorahost...) or #freeipa channel on Freenode.

== Resolved tickets

* https://pagure.io/freeipa/issue/7885%5B#7885] (https://bugzilla.redhat.com/show_bug.cgi?id=1690191%5Brhbz#1690191]) RFE: wrapper for Dogtag cert-fix command

* https://pagure.io/freeipa/issue/8155%5B#8155]

Enhance error message for adding non-posix groups with a GID

* https://pagure.io/freeipa/issue/8244%5B#8244]

The help for the --otp flag in "ipa passwd" could be clearer

* https://pagure.io/freeipa/issue/8423%5B#8423] Multiple permitopen in SSH-key

* https://pagure.io/freeipa/issue/8496%5B#8496] [Tracker] Multiple nightly test failures in test_dnssec, test_backup_and_restore and test_dns_locations

* https://pagure.io/freeipa/issue/8506%5B#8506] (https://bugzilla.redhat.com/show_bug.cgi?id=1930038%5Brhbz#1930038]) Nightly failure in ipa-server-install --uninstall: org.freedesktop.DBus.Error.NoReply

* https://pagure.io/freeipa/issue/8530%5B#8530] (https://bugzilla.redhat.com/show_bug.cgi?id=1859185%5Brhbz#1859185]) Running ipa-server-install fails on machine where libsss_sudo is not installed

* https://pagure.io/freeipa/issue/8550%5B#8550] (https://bugzilla.redhat.com/show_bug.cgi?id=1902173%5Brhbz#1902173]) Uninstallation of server with KRA diplays error but proceeds successfully (unable to access security domain)

* https://pagure.io/freeipa/issue/8553%5B#8553] Random failure in test_backup_and_restore.py::TestBackupRoles::test_rolecheck_Trust

* https://pagure.io/freeipa/issue/8565%5B#8565] Remove duplication in pkispawn exception output

* https://pagure.io/freeipa/issue/8600%5B#8600] ipa-cert-fix unable to fix certs no named 'Server-cert'

* https://pagure.io/freeipa/issue/8605%5B#8605] (https://bugzilla.redhat.com/show_bug.cgi?id=1903250%5Brhbz#1903250]) backtrace using ipa-replica-manage

* https://pagure.io/freeipa/issue/8636%5B#8636] (https://bugzilla.redhat.com/show_bug.cgi?id=1923900%5Brhbz#1923900]) Samba on IdM member failure

* https://pagure.io/freeipa/issue/8654%5B#8654] DNSSEC key synchronization issues

* https://pagure.io/freeipa/issue/8669%5B#8669] Reduce difference between upstream and downstream releases

* https://pagure.io/freeipa/issue/8681%5B#8681] krb5kdc dumped core

* https://pagure.io/freeipa/issue/8695%5B#8695] Nightly failure in test_dnssec.py::TestInstallDNSSECFirst::test_resolvconf (fed33)

* https://pagure.io/freeipa/issue/8703%5B#8703] DNS resolvers issues in IPA tests

* https://pagure.io/freeipa/issue/8705%5B#8705] server installation fails against 389-ds 1.4.3.19

* https://pagure.io/freeipa/issue/8715%5B#8715] (https://bugzilla.redhat.com/show_bug.cgi?id=1924707%5Brhbz#1924707]) Establishing trust with AD domain using shared secret fails in FIPS mode

* https://pagure.io/freeipa/issue/8718%5B#8718] (https://bugzilla.redhat.com/show_bug.cgi?id=1928854%5Brhbz#1928854]) ipa-server-install ignores --zonemgr parameter

* https://pagure.io/freeipa/issue/8720%5B#8720] New pylint failures reported for inconsistent-return-statements

* https://pagure.io/freeipa/issue/8721%5B#8721] (https://bugzilla.redhat.com/show_bug.cgi?id=1779984%5Brhbz#1779984]) The ipa-cert-fix command failed. [Errno 2] No such file or directory: '/etc/pki/pki-tomcat/certs/27-renewed.crt'

* https://pagure.io/freeipa/issue/8725%5B#8725] Nightly test failure in test_cert

* https://pagure.io/freeipa/issue/8728%5B#8728] Random nightly test failure in test_commands.py::TestIPACommand::test_ssh_key_connection

* https://pagure.io/freeipa/issue/8735%5B#8735] ccache-sweeper removes valid ccaches

* https://pagure.io/freeipa/issue/8737%5B#8737] [ipatests] `test_source_ipahealthcheck_ipa_host_check_ipahostkeytab` fails against krb5 1.19.1

* https://pagure.io/freeipa/issue/8743%5B#8743] (https://bugzilla.redhat.com/show_bug.cgi?id=1922781%5Brhbz#1922781]) Inconsistent nsaccountlock field type in api response

* https://pagure.io/freeipa/issue/8747%5B#8747] Nightly failure in test_sssd.py::TestSSSDWithAdTrust::test_is_user_filtered

* https://pagure.io/freeipa/issue/8753%5B#8753] Adopt redhat ipaplatform to RHEL 9/ELN and RHEL 7/8 split

* https://pagure.io/freeipa/issue/8759%5B#8759] RFE: Extend logging to include execution time

* https://pagure.io/freeipa/issue/8768%5B#8768] rpmlint should be optional for fastcheck, devcheck and lint make targets

* https://pagure.io/freeipa/issue/8772%5B#8772] pylint 2.7.0-2.7.2 introduces new warnings

* https://pagure.io/freeipa/issue/8779%5B#8779] Nightly test failure (updates-testing) in test_ipahealthcheck.py::TestIpaHealthCheck::test_ipahealthcheck_ds_riplugincheck

* https://pagure.io/freeipa/issue/8780%5B#8780] RFE: Reduce number of LDAP operations during sudorule-mod

* https://pagure.io/freeipa/issue/8781%5B#8781] test_ipaserver/test_jsplugins.py::test_jsplugins::test_jsplugins fails in server-less environments

== Detailed changelog since 4.9.2

=== Armando Neto (1)

* ipatests: Update gating to Fedora 33 https://pagure.io/freeipa/c/0dfd4b7ea38ffd6f8fe7a57660ef36b225fb377a%5Bcommi...]

=== Alexander Bokovoy (10)

* Become FreeIPA 4.9.3 https://pagure.io/freeipa/c/dab3706c0d0bb0137ad3f742fd4a687649f5d216%5Bcommi...] * Update list of contributors https://pagure.io/freeipa/c/8cb32381347e643a389ad5b0dce429087ba37bea%5Bcommi...] * Update ipa.pot translations file https://pagure.io/freeipa/c/ef4a2f30b458db9487ebf724bdd3ba1f4e7f9d99%5Bcommi...] * freeipa.spec: synchronize with Fedora for 389-ds and PKI versions https://pagure.io/freeipa/c/a63c6e0252ba82233839ad33ca9331be2b7aba95%5Bcommi...] https://pagure.io/freeipa/issue/8705%5B#8705] * ipa-kdb: mark test functions as static https://pagure.io/freeipa/c/2968609fd9f8f91b704dc8167d39ecc67beb8ddd%5Bcommi...] * ipa-kdb: reformat ipa_kdb_certauth https://pagure.io/freeipa/c/f340baa4283c76957d9e0a85896c7fa3a994bba6%5Bcommi...] * ipa-kdb: add missing prototypes https://pagure.io/freeipa/c/c7ce801b590e29263e9b1904995c603735007771%5Bcommi...] * ipa-kdb: fix compiler warnings https://pagure.io/freeipa/c/0da9de495ca41a1bf0926aef7c9c75c3e53dcd63%5Bcommi...] * ipa-kdb: do not use OpenLDAP functions with NULL LDAP context https://pagure.io/freeipa/c/2832810891acfaca68142df7271d6f0a50a588eb%5Bcommi...] https://pagure.io/freeipa/issue/8681%5B#8681] * Back to git commits https://pagure.io/freeipa/c/811d130c66880208a244741b90a5e6de2429004a%5Bcommi...]

=== Antonio Torres (11)

* sudorule: reduce number of LDAP searches during modification https://pagure.io/freeipa/c/8552faba077f5ef7ef3c6f9b2281564df553dbc7%5Bcommi...] https://pagure.io/freeipa/issue/8780%5B#8780] * ipa passwd: make help for `--otp` option clearer https://pagure.io/freeipa/c/74638edb4387b570b545f0c0e3067a3fc10c703b%5Bcommi...] https://pagure.io/freeipa/issue/8244%5B#8244] * ipatests: add test for multiple permitopen entries in SSH keys https://pagure.io/freeipa/c/dc799a5f9602099be048abda319023cda9d466c7%5Bcommi...] * Allow multiple permitopen/permitlisten in SSH keys https://pagure.io/freeipa/c/3dc58965fa7ba6080ba0c281567ac6d9b211953e%5Bcommi...] https://pagure.io/freeipa/issue/8423%5B#8423] * ipatests: add test for group creation with GID and nonposix option https://pagure.io/freeipa/c/d8bc3e401ea83d845ce11b19d9b14e28676a9a33%5Bcommi...] * Enhance error message when adding non-posix group with a GID https://pagure.io/freeipa/c/28d310d5b0f84d5769c2ccada7ab48c6138b14de%5Bcommi...] https://pagure.io/freeipa/issue/8155%5B#8155] * ipatests: expect boolean type for nsaccountlock in user module https://pagure.io/freeipa/c/cfff1f6710e1c0a857e913c8545b9a4b0a0e05f9%5Bcommi...] https://pagure.io/freeipa/issue/8743%5B#8743] * Return nsaccountlock in user-add as boolean https://pagure.io/freeipa/c/39153f9b8a9af7537cd594e5d708abecef9217c8%5Bcommi...] https://pagure.io/freeipa/issue/8743%5B#8743] * Extend logging to include execution time https://pagure.io/freeipa/c/e880d38beb95cd15311d49c8a1e748d5dfe45ca6%5Bcommi...] https://pagure.io/freeipa/issue/8759%5B#8759] * ipatests: check that zonemgr is set correctly during server install https://pagure.io/freeipa/c/82043e1fd052618608d3b7786473a632478795ee%5Bcommi...] https://pagure.io/freeipa/issue/8718%5B#8718] * ipaserver: don't ignore zonemgr option on install https://pagure.io/freeipa/c/20bb855a57080145d0d5555294381c890ef605bb%5Bcommi...] https://pagure.io/freeipa/issue/8718%5B#8718]

=== Alexander Scheel (1)

* Handle multiple AJP adapters during upgrade https://pagure.io/freeipa/c/60389f538429c943d7b1056a3743faae2eecc59d%5Bcommi...]

=== François Cami (10)

* ipatests: check for the "no sudo present" string absence https://pagure.io/freeipa/c/4b917833fdd62cce2fd72809fd5c963194efba3e%5Bcommi...] https://pagure.io/freeipa/issue/8530%5B#8530] * ipa-client-install: output a warning if sudo is not present (2) https://pagure.io/freeipa/c/061e0b63ef3a72ba3261b42ec5f2ce290070c613%5Bcommi...] https://pagure.io/freeipa/issue/8530%5B#8530] * ipa-csreplica-manage, ipa-replica-manage: refactor https://pagure.io/freeipa/c/25cbae4d0248fd289fb9cc6dbe55ca8fd88b5513%5Bcommi...] https://pagure.io/freeipa/issue/8605%5B#8605] * ipalib/util.py: add print_replication_status https://pagure.io/freeipa/c/5f2f97a698fc8278b3bc908e9bfc0d452575afa5%5Bcommi...] * ipa-replica-manage: handle missing attributes https://pagure.io/freeipa/c/85484d312cf0e9da563ea97166ea24dfd6833702%5Bcommi...] https://pagure.io/freeipa/issue/8605%5B#8605] * ipa-replica-manage: always display nsds5replicalastinitstatus https://pagure.io/freeipa/c/f6204b0d5e6f82827249e09ff2e4598ea4e7f69e%5Bcommi...] https://pagure.io/freeipa/issue/8605%5B#8605] * freeipa.spec: client: depend on libsss_sudo and sudo https://pagure.io/freeipa/c/ee0ba2df41cf545b82d3d26e7e7e42447bb0f63e%5Bcommi...] https://pagure.io/freeipa/issue/8530%5B#8530] * ipa-client-install: output a warning if sudo is not present https://pagure.io/freeipa/c/fe157ca349e3146a53884e90e6e588efb4e97eeb%5Bcommi...] https://pagure.io/freeipa/issue/8530%5B#8530] * ipatests: tasks: handle uninstalling packages with nodeps https://pagure.io/freeipa/c/0c2741af9f353d2fbb21a5768e6433c0e99da0e9%5Bcommi...] * ipatests: add TestInstallWithoutSudo https://pagure.io/freeipa/c/b590dcef10680b4ea3181ae1caec183e5967562b%5Bcommi...] https://pagure.io/freeipa/issue/8530%5B#8530]

=== Florence Blanc-Renaud (11)

* ipatests: update expected message https://pagure.io/freeipa/c/c9ed627288a5319719b94dc9b8c0fea692a827b4%5Bcommi...] https://pagure.io/freeipa/issue/8779%5B#8779] * Adapt redhat ipaplatform to RHEL9/ELN https://pagure.io/freeipa/c/8272da74041330b500425847b8f4dc84aba01b56%5Bcommi...] https://pagure.io/freeipa/issue/8753%5B#8753] * ipatests: fix TestInstalDNSSECFirst::test_resolvconf logic https://pagure.io/freeipa/c/5af574326bd60c52ddcaf7f7cfe73f4e810bc04a%5Bcommi...] https://pagure.io/freeipa/issue/8695%5B#8695] * ipatests: re-add test_dnssec.py::TestInstallDNSSECFirst in gating https://pagure.io/freeipa/c/ab23ecdad53d2095d9534a4c941dab7e205f286c%5Bcommi...] https://pagure.io/freeipa/issue/8496%5B#8496] * ipatests: filter_users belongs to nss section https://pagure.io/freeipa/c/5221f4c2a08094e15f516bbef8a722c0869ba53a%5Bcommi...] https://pagure.io/freeipa/issue/8747%5B#8747] * dnssec: concurrency issue when disabling old replica key https://pagure.io/freeipa/c/7616f1dad2b478c5e4f850587da1bd4e52108fa1%5Bcommi...] https://pagure.io/freeipa/issue/8654%5B#8654] * dnssec: fix ipa-ods-exporter crash when master key missing https://pagure.io/freeipa/c/9cfcbc67e12c2ce6e98d3ed1645bc592a573199e%5Bcommi...] https://pagure.io/freeipa/issue/8654%5B#8654] * ipatests: use whole date when calling journalctl --since https://pagure.io/freeipa/c/caf748860860293e010e695d72f6b3b3d8509f8a%5Bcommi...] https://pagure.io/freeipa/issue/8728%5B#8728] * freeipa.spec: bump the required version of 389ds https://pagure.io/freeipa/c/1c1c469fc94b3c6b26a73173bfba7698108ec69c%5Bcommi...] https://pagure.io/freeipa/issue/8496%5B#8496] * ipatests: Update PRCI templates for ipa-4-9 https://pagure.io/freeipa/c/1bcacd800a4fdba3899bf1358bc532e717ad335c%5Bcommi...] * pylint: fix inconsistent-return-statements https://pagure.io/freeipa/c/2fae28f974ccdbcf021cb506b31761cf04547c64%5Bcommi...] https://pagure.io/freeipa/issue/8720%5B#8720]

=== Fraser Tweedale (1)

* ipa-cert-fix: improve handling of 'pki-server cert-fix' failure https://pagure.io/freeipa/c/f2b1b5b07c1b7e813ee5dbe342ff24ebbc939bb9%5Bcommi...] https://pagure.io/freeipa/issue/8721%5B#8721]

=== Jan Pazdziora (1)

* Avoid comparing 'max' with 'max\n'. https://pagure.io/freeipa/c/44d7cce3a032b7b793708a84198414fba8a276bd%5Bcommi...]

=== Kaleemullah Siddiqui (1)

* ipatests: error message check in uninstall log for KRA https://pagure.io/freeipa/c/6b25cd3241a5609b4d903d5697b8947fab403c90%5Bcommi...] https://pagure.io/freeipa/issue/8550%5B#8550]

=== Mohammad Rizwan (7)

* ipatests: Don't rely on certmonger's assigned request id https://pagure.io/freeipa/c/8defcb0cee32eedda28a0adb6d7745c6fbdbf355%5Bcommi...] https://pagure.io/freeipa/issue/8725%5B#8725] * ipatests: Enable certbot test on rhel https://pagure.io/freeipa/c/339152c1ca5e0d3b7f11a03390003a57328d0d6d%5Bcommi...] * ipatests: introduce wait_for_replication in test_rolecheck_Trust https://pagure.io/freeipa/c/1b8de48f1cce81277e63c104adc6c5f485e70418%5Bcommi...] https://pagure.io/freeipa/issue/8553%5B#8553] * ipatests: update nightly definition for ipa_cert_fix suite https://pagure.io/freeipa/c/260fbcb03297ef1ed5418b16c0df0587d2989b22%5Bcommi...] * ipatests: Test if ipa-cert-fix renews expired certs with kra installed https://pagure.io/freeipa/c/c84e0547e1a693ba0e9edbfeea7bafdb2fb2b4a2%5Bcommi...] https://pagure.io/freeipa/issue/7885%5B#7885] * Move fixture outside the class and add setup_kra capability https://pagure.io/freeipa/c/36a60dbb35cb4429f00528f79bec8b7982a30c74%5Bcommi...] * ipatests: Test if ipa-cert-fix renews expired certs https://pagure.io/freeipa/c/7f30ddb1b7e30c22f9b7d14d2658b58a0ea6b459%5Bcommi...] https://pagure.io/freeipa/issue/7885%5B#7885]

=== Rob Crittenden (11)

* Increase timeout for TestIpaHealthCheck to 5400s https://pagure.io/freeipa/c/d15e577bc1b6f9d98b1ac424d1c0df4ef9839c91%5Bcommi...] https://pagure.io/freeipa/issue/8506%5B#8506] * Uninstall without starting the CA in cert expiration test https://pagure.io/freeipa/c/b70e30dbf011fd918c4f2955dda0fc2bc12a35ea%5Bcommi...] https://pagure.io/freeipa/issue/8506%5B#8506] * ipatests: Test secure_ajp_connector works with multiple connectors https://pagure.io/freeipa/c/16fbe095ff54e4b560a81c0cc0453c939f2c58a8%5Bcommi...] * Allow overriding is_newer_tomcat_version() https://pagure.io/freeipa/c/d3e4bd9ec450c6ea5285c76fee60a7c6601b58f3%5Bcommi...] * Don't renew non-IPA issued certs in ipa-cert-fix https://pagure.io/freeipa/c/f3463728f2196589d36e14cedccb26c03730a7c0%5Bcommi...] https://pagure.io/freeipa/issue/8600%5B#8600] * Set pki-core dependency to 10.3.3 for pki-server cert-fix bug https://pagure.io/freeipa/c/4cb6f0ba0df928eea60b20892a6fc85373627946%5Bcommi...] * ipatests: test third-party 389-ds cert with ipa-cert-fix https://pagure.io/freeipa/c/660507fda2394b17d709c47a05ce5df548a47990%5Bcommi...] https://pagure.io/freeipa/issue/8600%5B#8600] * ipa-cert-fix: Don't hardcode the NSS certificate nickname https://pagure.io/freeipa/c/a0626e09b3eaf5d030982e2ff03e95841ad1b4b9%5Bcommi...] https://pagure.io/freeipa/issue/8600%5B#8600] * Remove a remaining file used with csrgen https://pagure.io/freeipa/c/fe4b1545b6f288f10aa11f4dd8ff32b14d337fc1%5Bcommi...] https://pagure.io/freeipa/issue/8669%5B#8669] * Don't double-report any errors from pki-spawn failures https://pagure.io/freeipa/c/f1e12c75f12a739599c07ffe88aea82df635fabd%5Bcommi...] https://pagure.io/freeipa/issue/8565%5B#8565] * Suppress error message if the CRL directory doesn't exist https://pagure.io/freeipa/c/584151d1277f60e1db116992fbd98f3421391254%5Bcommi...] https://pagure.io/freeipa/issue/8565%5B#8565]

=== Stanislav Levin (16)

* ipatests: Skip test_jsplugins in server less environments https://pagure.io/freeipa/c/3eb8b304c612500218806c04486efd79b2495ba2%5Bcommi...] https://pagure.io/freeipa/issue/8781%5B#8781] * Azure: Run Lint task as separate job https://pagure.io/freeipa/c/188a279c5bf14b7cbd7cc0d65cc294fc6862b8d3%5Bcommi...] https://pagure.io/freeipa/issue/8772%5B#8772] * pylint: Fix several warnings https://pagure.io/freeipa/c/2bec09aa038d2ef8f3819f11e67ba81d70cb5fe4%5Bcommi...] https://pagure.io/freeipa/issue/8772%5B#8772] * Azure: Don't install pypi's docker https://pagure.io/freeipa/c/6c1dc1b226254003dda882f7856c4e3b3e5b3767%5Bcommi...] * Azure: Disable AppArmor profile for chrony https://pagure.io/freeipa/c/572f203c96baea3a086bea4e0846347b6f116bee%5Bcommi...] * Azure: Warn about Host's AVC and SECCOMP https://pagure.io/freeipa/c/d47847b1a2b983a41099a63954df9b569d414959%5Bcommi...] * Azure: Collect Host's systemd journal https://pagure.io/freeipa/c/8cdc7bf070d90e0d641f32513c9ea3a709166d5d%5Bcommi...] * Azure: Run chronyd in Docker https://pagure.io/freeipa/c/255be047ff5ac8e79428c70c2a3b7c8ed026c965%5Bcommi...] * Azure: Template docs build https://pagure.io/freeipa/c/e80ff6f9d43731d8c1943cd154ef5f317f380414%5Bcommi...] * Azure: Show disk usage https://pagure.io/freeipa/c/adc4d8d7f674d159ea8f17395013859474af3290%5Bcommi...] * Azure: Make it possible to pass additional Pytest args https://pagure.io/freeipa/c/380336d6d26228c237c1ef7e7e61ed472fd66e0d%5Bcommi...] * Azure: Run rpmlint on Fedora https://pagure.io/freeipa/c/8c38c57f77a455d6e5c257d4397011157f4f33e3%5Bcommi...] https://pagure.io/freeipa/issue/8768%5B#8768] * configure: Make rpmlint optional https://pagure.io/freeipa/c/c441397b33fad0b5d03561763851efb6bcff4643%5Bcommi...] https://pagure.io/freeipa/issue/8768%5B#8768] * ipatests: Fix expectation about GSS error in test for healthcheck https://pagure.io/freeipa/c/fbbfce1151b6c7dd95dea1a2438cd11c1b22e7b7%5Bcommi...] https://pagure.io/freeipa/issue/8737%5B#8737] * cleanup: Drop never used path for httpd's ccache https://pagure.io/freeipa/c/99a65e3e720d0de94abfcbfa1c2619a709d3c8db%5Bcommi...] * ccache_sweeper: Add gssproxy service https://pagure.io/freeipa/c/cf80bb33baa79ba93987ee7e63109ece4b37bbd0%5Bcommi...] https://pagure.io/freeipa/issue/8735%5B#8735]

=== Sergey Orlov (16)

* ipatests: log command spawned by pexpect https://pagure.io/freeipa/c/c52cf2130ac9610bb5ad9a964ff8ea6b86f86227%5Bcommi...] * ipatests: allocate pseudo-terminal only for specific command https://pagure.io/freeipa/c/9f0c4830d0d53fda99e4a856099019efea11b177%5Bcommi...] * ipatests: update prci definitions for test_http_kdc_proxy https://pagure.io/freeipa/c/305d6f227fd28eee16c817c5eb32a3d33a94153d%5Bcommi...] * ipatests: add test for kdcproxy handling reply split to several TCP packets https://pagure.io/freeipa/c/643a70a2442702d23492823ae1809d5dc392289d%5Bcommi...] * ipatests: return result of kinit_as_user, pass raiseonerr parameter https://pagure.io/freeipa/c/462dc75f8ea3435a42ad80e8fbbbe3092c706637%5Bcommi...] * ipatests: use proper template for TestMaskInstall https://pagure.io/freeipa/c/3ce45cec0973e88d76de6d7e16d0fa3116784c8c%5Bcommi...] * ipatests: do not configure nameserver when installing client and replica https://pagure.io/freeipa/c/1ca7cb6585828312864eae6f5264e313be697bbf%5Bcommi...] https://pagure.io/freeipa/issue/8703%5B#8703] * ipatests: always try to create A records for hosts in IPA domain https://pagure.io/freeipa/c/b0ee8e00aaad8d89baf3a751dd0f55f405d66394%5Bcommi...] https://pagure.io/freeipa/issue/8703%5B#8703] * ipatests: mock resolver factory https://pagure.io/freeipa/c/b3abb2c696afeccd1f6eb8d3235d999cee53dfca%5Bcommi...] https://pagure.io/freeipa/issue/8703%5B#8703] * ipatests: disable systemd-resolved cache https://pagure.io/freeipa/c/28af45425ba2612cc0e2e612768b74bc0314d242%5Bcommi...] https://pagure.io/freeipa/issue/8703%5B#8703] * ipatests: do not manually modify /etc/resolv.conf in tests https://pagure.io/freeipa/c/f5d7f85b9280e6a0fae942e25e47db5e16ae49e4%5Bcommi...] https://pagure.io/freeipa/issue/8703%5B#8703] * ipatests: setup resolvers during replica and client installations https://pagure.io/freeipa/c/64f2a408ef5bc408c7c99a224c596dcf68037dd7%5Bcommi...] https://pagure.io/freeipa/issue/8703%5B#8703] * ipatests: add utility for managing domain name resolvers https://pagure.io/freeipa/c/1a394c6a016b21c5427fce9bad81f4c718ddeb45%5Bcommi...] https://pagure.io/freeipa/issue/8703%5B#8703] * ipatests: collect config files for NetworkManager and systemd-resolved https://pagure.io/freeipa/c/2c5b70643d5408fbe5aae1135392842824b1e49d%5Bcommi...] https://pagure.io/freeipa/issue/8703%5B#8703] * ipatests: test Samba mount with NTLM authentication https://pagure.io/freeipa/c/80ccac79b9d123e158a5ba60f9853611d0854188%5Bcommi...] https://pagure.io/freeipa/issue/8636%5B#8636] * ipatests: skip tests for AD trust with shared secret in FIPS mode https://pagure.io/freeipa/c/6d7b2d7d1b4711255ea72d62d27b5c5f4ec7c6e1%5Bcommi...] https://pagure.io/freeipa/issue/8715%5B#8715]

=== Sudhir Menon (1)

* ipatests: Test to check sosreport collects healthcheck.log file https://pagure.io/freeipa/c/9fb266882ea824f8b77bf1f049462850cdbdc4fe%5Bcommi...]

=== Troy Dawson (1)

* platform-python only on RHEL8 https://pagure.io/freeipa/c/026e0ca89b48d0d2aa948c9769e6b7701906b13c%5Bcommi...]

=== Thorsten Scherf (2)

* Update 10-ssh-key-management.rst https://pagure.io/freeipa/c/f6aac4d5cb9e2d724b71f8445a43e3c103a3f402%5Bcommi...] * Fix lgtm file classification https://pagure.io/freeipa/c/cc3e3cd849f0dafed4ebc63dafe4cfdacd48ffe5%5Bcommi...]