modules/idm - idm - InferitOS git server

Commit Graph

Author	SHA1	Message	Date
Rafael Guterres Jeffman	cc1165d46e	ipatests: Update ipa-adtrust-install test Additional commit backported to fix test automation. Resolves: RHEL-40894 Signed-off-by: Rafael Guterres Jeffman <rjeffman@redhat.com>	1 month ago
Julien Rische	9347be4de8	python-kdcproxy 0.4-5.1 - Log KDC timeout only once per request Resolves: RHEL-68634 Signed-off-by: Julien Rische <jrische@redhat.com>	1 month ago
Rafael Guterres Jeffman	b232f6a632	Add rpminspect configuration. Signed-off-by: Rafael Guterres Jeffman <rjeffman@redhat.com>	1 month ago
Rafael Guterres Jeffman	8809bf1114	Disable sanity test. Since the primary hostname of the gating machines is too large to be used as the primary server hostname, and the installation tests are covered in other tests, the sanity test is being disable until there's a change either on IPA (to allow for larger hostnames) or in the test environment.	1 month ago
Rafael Guterres Jeffman	4308689b61	Use socket.gethostbyaddr to define hostname.	1 month ago
Rafael Guterres Jeffman	3203e4dcd0	Use primary DNS hostname for testing IPA deployment. Signed-off-by: Rafael Guterres Jeffman <rjeffman@redhat.com>	1 month ago
Rafael Guterres Jeffman	71d224b4e0	Release for RHEL 8.10 update 5 ipa 4.9.13-13: - Add ipa-idrange-fix Resolves: RHEL-56920 - Unconditionally add MS-PAC to global config on update Resolves: RHEL-49437 - ipatests: Update ipa-adtrust-install test Resolves: RHEL-40894 - Require python-qrcode version 5.3 or later Related: RHEL-15090 python3-qrcode 5.3-1: - Generation of image file fails with Python 3 Resolves: RHEL-15090 Signed-off-by: Rafael Guterres Jeffman <rjeffman@redhat.com>	1 month ago
Rafael Guterres Jeffman	1d16b071b7	Fix sanity test for gating tier0.functional Add option to disable hostname DNS search during IPA installation.	1 month ago
Rafael Guterres Jeffman	4d3f8b40bb	ipa: - Allow the admin user to be disabled Resolves: RHEL-34756 - ipa-otptoken-import: open the key file in binary mode Resolves: RHEL-39616 - ipa-crlgen-manage: manage the cert status task execution time Resolves: RHEL-30280 - idrange-add: add a warning because 389ds restart is required Resolves: RHEL-28996 - PKINIT certificate: fix renewal on hidden replica Resolves: RHEL-4913, RHEL-45908 ipa-healthcheck: - Change log file permissions of IPA as per CIS benchmark Resolves: RHEL-38929 Signed-off-by: Rafael Guterres Jeffman <rjeffman@redhat.com>	5 months ago
Julien Rische	e42844b8df	ipa release 4.9.13-11 - Add missing part of backported CVE-2024-3183 fix Resolves: RHEL-29927 Signed-off-by: Julien Rische <jrische@redhat.com>	7 months ago
Julien Rische	3485bcf334	ipa release 4.9.13-10 - kdb: apply combinatorial logic for ticket flags (CVE-2024-3183) Resolves: RHEL-29927 - kdb: fix vulnerability in GCD rules handling (CVE-2024-2698) Resolves: RHEL-29692 Signed-off-by: Julien Rische <jrische@redhat.com>	7 months ago
Rafael Guterres Jeffman	525d7ab23f	Rebuild with fixed sidetag repo. Signed-off-by: Rafael Guterres Jeffman <rjeffman@redhat.com>	9 months ago
Rafael Guterres Jeffman	ad4013d635	RHEL 8.10 0day rebuild. Signed-off-by: Rafael Guterres Jeffman <rjeffman@redhat.com>	9 months ago
Rafael Guterres Jeffman	69bac50266	ipa release 4.9.13-8 - rpcserver: validate Kerberos principal name before running kinit Resolves: RHEL-26153 - Vault: add additional fallback to RSA-OAEP wrapping algo Resolves: RHEL-28259 Signed-off-by: Rafael Guterres Jeffman <rjeffman@redhat.com>	10 months ago
Julien Rische	0322b80414	ipa release 4.9.13-7 - ipa-kdb: Fix double free in ipadb_reinit_mspac() Resolves: RHEL-25742 - kra: set RSA-OAEP as default wrapping algo when FIPS is enabled Resolves: RHEL-12153 - Vault: improve vault server archival/retrieval calls error handling Resolves: RHEL-12153 - Vault: add support for RSA-OAEP wrapping algo Resolves: RHEL-12153 Signed-off-by: Julien Rische <jrische@redhat.com>	10 months ago
Rafael Guterres Jeffman	a3e06a2ff6	ipa release 4.9.13-6 - ipatests: fix tasks.wait_for_replication() method Resolves: RHEL-25708 - ipa-kdb: Rework ipadb_reinit_mspac() Resolves: RHEL-25742 - ipatests: wait for replica update in test_dns_locations Resolves: RHEL-22373 Signed-off-by: Rafael Guterres Jeffman <rjeffman@redhat.com>	11 months ago
Rafael Guterres Jeffman	7027b51fb2	Pick-up build fixes for IPA. Signed-off-by: Rafael Guterres Jeffman <rjeffman@redhat.com>	11 months ago
Rafael Guterres Jeffman	092d838da3	ipa release 4.9.13-5 - kdb: PAC generator: do not fail if canonical principal is missing Resolves: RHEL-23630 - ipa-kdb: Fix memory leak during PAC verification Resolves: RHEL-22644 - Fix session cookie access Resolves: RHEL-23622 - Do not ignore staged users in sidgen plugin\ Resovlves: RHEL-23626 - ipa-kdb: Disable Bronze-Bit check if PAC not available Resolves: RHEL-22313 - krb5kdc: Fix start when pkinit and otp auth type are enabled Resolves: RHEL-4874 - hbactest was not collecting or returning messages Resolves: RHEL-12780 Signed-off-by: Rafael Guterres Jeffman <rjeffman@redhat.com>	11 months ago
Rafael Guterres Jeffman	8796589341	ipa release 4.9.13-4 - Improve server affinity for CA-less deployments Resolves: RHEL-22283 - host: update system: Manage Host Keytab permission Resolves: RHEL-22286 - adtrustinstance: make sure NetBIOS name defaults are set properly Resolves: RHEL-21938 - ipatests: Fix healthcheck report when nsslapd accesslog logbuffering is set to off Resolves: RHEL-19672 Signed-off-by: Rafael Guterres Jeffman <rjeffman@redhat.com>	11 months ago
Julien Rische	63f485919a	ipa release 4.9.13-3 - ipa-kdb: Detect and block Bronze-Bit attacks Resolves: RHEL-9984 - Fix for CVE-2023-5455 Resolves: RHEL-12578 Signed-off-by: Julien Rische <jrische@redhat.com>	12 months ago
Rafael Guterres Jeffman	4275b80109	ipa: - Remove unused patches. - Handle new samba exception types. Resolves: RHEL-17623	1 year ago
Rafael Guterres Jeffman	5ecaff0564	Rebuild due to MBS outage.	1 year ago
Rafael Guterres Jeffman	65401cfade	ipa: - Rebase to version 4.9.13 Resolves: RHEL-16936 Signed-off-by: Rafael Guterres Jeffman <rjeffman@redhat.com>	1 year ago
Adam Samalik	64aaf7f1cd	branching - update refs	1 year ago
Rafael Guterres Jeffman	2360d692bb	ipa: - ipatests: fix test_topology Resolves: RHBZ#2232351 - Installer: activate nss and pam services in sssd.conf Resolves: RHBZ#2216532 Signed-off-by: Rafael Guterres Jeffman <rjeffman@redhat.com>	1 year ago
Rafael Guterres Jeffman	acec914b2b	ipa: - ipa-kdb: fix error handling of is_master_host() Resolves: RHBZ#2214638 - ipatests: enable firewall rule for http service on acme client Resolves: RHBZ#2230256 - User plugin: improve error related to non existing idp Resolves: RHBZ#2224572 - Prevent admin user from being deleted Resolves: RHBZ#1821181 - Fix memory leak in the OTP last token plugin Resolves: RHBZ#2227783 ipa-healthcheck: - Error in DogtagCertsConnectivityCheckCA with external CA Resolves: #2223942 Signed-off-by: Rafael Guterres Jeffman <rjeffman@redhat.com>	1 year ago
Rafael Guterres Jeffman	bc033be7f4	Fix patch 0004 with correct data. Related: RHBZ#2216551 Signed-off-by: Rafael Guterres Jeffman <rjeffman@redhat.com>	1 year ago
Rafael Guterres Jeffman	f908a4f6a2	ipa release 4.9.12-4 - kdb: Use-krb5_pac_full_sign_compat() when available Resolves: RHBZ#2176406 - OTP: fix-data-type-to-avoid-endianness-issue Resolves: RHBZ#2218293 - Upgrade: fix replica agreement Resolves: RHBZ#2216551 - Upgrade: add PKI drop-in file if missing Resolves: RHBZ#2215336 - Use the python-cryptography parser directly in cert-find Resolves: RHBZ#2164349 - Backport test updates Resolves: RHBZ#221884 Signed-off-by: Rafael Guterres Jeffman <rjeffman@redhat.com>	2 years ago
Rafael Guterres Jeffman	5c150f7be2	Don't use 'warn: false' parameter with Ansible shell builtin. The 'warn' parameter of Ansible 'shell' and 'command' builtin plugins was deprecated in Ansible 2.11 and removed in Ansible 2.14. This patch fixes 'baseos-ci.redhat-module.tier0.functional' tests that were failing due to the use of the parameter on newer versions of Ansible.	2 years ago
Rafael Guterres Jeffman	90588adfcf	ipa: - Use the OpenSSL certificate parser in cert-find. Resolves: RHBZ#2209947 Signed-off-by: Rafael Guterres Jeffman <rjeffman@redhat.com>	2 years ago
Rafael Guterres Jeffman	446c248859	ipa: - Rebase ipa to 4.9.12 Resolves: RHBZ#2196425 - user or group name: explain the supported format Resolves: RHBZ#2150217 Signed-off-by: Rafael Guterres Jeffman <rjeffman@redhat.com>	2 years ago
Adam Samalik	48adc0dfcc	update refs	2 years ago
Adam Samalik	ab4fe72e38	update modulemd etc	2 years ago

33 Commits (cc1165d46e59e2e9fbf00d2845f7f21a9c88bbf8) All Branches Search

33 Commits (cc1165d46e59e2e9fbf00d2845f7f21a9c88bbf8)

All Branches