On ma, 21 maalis 2022, Amos via FreeIPA-users wrote:
Hi.
I'm trying to find out if the changes to PacRequestorEnforcement in order
to remedy CVE-2021-42287 will have an impact on IPA servers/clients. Our
IPA servers are in a one-way trust with AD. All user accounts are in AD.
I've tried to lookup anything related to this, but not finding much. When
I opened a ticket with Redhat, they just referred to
https://access.redhat.com/solutions/6633491 which isn't very encouraging.
This one is unrelated. RHEL 8.4+ should have enough fixes.
Do you see any particular problems?
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland