Hi,
https://vda.li/drafts/freeipa-4.9.8-release-notes-draft.html contains
draft of the release notes for FreeIPA 4.9.8 release.
Please look and update tickets if you think a release note is needed. To
do so, either modify a 'changelog' field in the ticket metadata on
Pagure or, if you have no rights to do so, simply add a comment to the
issue with a proposed release note text. I'll update the ticket metadata
then.
Below is the list of all resolved tickets since 4.9.7, at least few of
them worth to add a note about:
#7885 (rhbz#1690191) RFE: wrapper for Dogtag cert-fix command
#8353 Sporadic: Nightly test failure in
test_adtrust_install.py::TestIpaAdTrustInstall::test_add_agent_not_allowed - kinit:
Password has expired while getting initial credentials
#8397 (rhbz#1985069) Cannot remove First master server with KRA after the server hard disk
failed ( destructed)
#8492 RFE: Include the server schema version in communication with the client
#8687 (rhbz#1980356) Nightly failure (rawhide/f34) reinstalling samba client: winbindd
coredump
#8700 ipa-server-install --auto-reverse does not create reverse DNS zone in Fedora 33
#8755 (rhbz#1921007) ipa-server-install : No such file or directory:
'/etc/authselect/user-nsswitch.conf'
#8815 Nightly test failure in new test test_ipa_cert_fix.py::TestCertFixReplica
#8846 Nightly test failure in
test_webui_policy::test_selinuxusermap::test_undo_refresh_reset_update_cancel
#8932 ipatests: move_date is defined twice
#8953 test_certmonger_ipa_responder_jsonrpc random failure
#8954 Issues in commands of `schema` plugin
#8955 Unstable fingerprints for the same API schema
#8961 [azure] inconsistent results for `Quick code style check` and `Lint` tasks
#8962 (rhbz#1966289) Info about searchrecordslimit set search limit to 10,000 after
upgrade
#8965 (rhbz#2000261) extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
#8966 Invoke pkispawn with --log-file
#8968 Add URI records for KDC
#8972 (rhbz#1998129) AVC denied { read } comm="ipa-custodia" on aarch64 during
installation of ipa-server
#8974 (rhbz#1999142) RHEL 8.5 IPA Replica setup fails against a RHEL 7.9 IPA server
#8975 Nightly test failure in
test_integration/test_commands.py/TestIPACommand/test_reset_password_unlock
#8979 Nightly test failure (rawhide) in
test_trust.py::TestTrust::test_establish_forest_trust_with_shared_secret
#8980 Nightly test failure in pki-fedora/test_integration/test_backup_and_restore
#8983 [azure] tar sometimes fails on changed in process files
#8984 (rhbz#1999992) ipa migrate-ds command fails to warn when compat plugin is enabled
#8985 [azure] docs build fails with Pygments 2.8.0+
#8986 (rhbz#1999893) ipa cert-request replaces user certificate instead of adding
#8987 Nightly test failure in test_integration/test_trust.py/TestTrust/test_extdom_plugin
#8989 Nightly failure (rawhide) in tasks.run_ssh_cmd
#8995 Integrate SID configuration into base IPA installers
#8999 Nightly failure (rawhide) in
test_ipahealthcheck.py::TestIpaHealthCheckWithExternalCA::test_ipahealthcheck_ipaopensslchainvalidation
#9000 Nightly failure (rawhide) in
test_ipahealthcheck.py::TestIpaHealthCheck::test_sosreport_includes_healthcheck
#9006 Nightly failure in test_commands.py::TestIPACommand::test_cacert_manage
#9008 [azure] clone3 and glibc 2.34 in container
#9009 Nightly failure (rawhide) in webui_tests: yaml.load() now requires Loader
#9011 [azure] pip's builddir
#9013 [ipatests] test_external_ca.py::TestMultipleExternalCA::test_master_install_ca1
fails
#9029 Nightly webui test failure (rawhide): selenium issue
#9031 Harden FreeIPA KDC processing of PAC buffers
#9036 (rhbz#2009114) Invalid PTR records created when navigated from host details page
#9038 (rhbz#1825010) Concerns regarding 'ipa pwpolicy-mod --minlife 24 --maxlife
1'
#9046 Stacktrace when using 'ipa server-del' in non-English locale
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland