|
|
|
@ -5,21 +5,31 @@
|
|
|
|
|
|
|
|
|
|
%global python %{__python3}
|
|
|
|
|
|
|
|
|
|
%global collection_namespace freeipa
|
|
|
|
|
%global collection_name ansible_freeipa
|
|
|
|
|
%global ansible_collections_dir %{_datadir}/ansible/collections/ansible_collections
|
|
|
|
|
|
|
|
|
|
Summary: Roles and playbooks to deploy FreeIPA servers, replicas and clients
|
|
|
|
|
Name: ansible-freeipa
|
|
|
|
|
Version: 1.11.1
|
|
|
|
|
Version: 1.14.1
|
|
|
|
|
Release: 1%{?dist}
|
|
|
|
|
URL: https://github.com/freeipa/ansible-freeipa
|
|
|
|
|
License: GPL-3.0-or-later
|
|
|
|
|
Source: https://github.com/freeipa/ansible-freeipa/archive/v%{version}.tar.gz#/%{name}-%{version}.tar.gz
|
|
|
|
|
BuildArch: noarch
|
|
|
|
|
%if 0%{?fedora} >= 35 || 0%{?rhel} >= 9
|
|
|
|
|
Requires: ansible-core
|
|
|
|
|
%endif
|
|
|
|
|
Requires: ansible-core >= 1:2.14.0
|
|
|
|
|
BuildRequires: ansible-core >= 1:2.14.0
|
|
|
|
|
BuildRequires: python
|
|
|
|
|
Provides: ansible-collection-%{collection_namespace}-%{collection_name} = %{version}-%{release}
|
|
|
|
|
Provides: ansible-freeipa-tests
|
|
|
|
|
Obsoletes: ansible-freeipa-tests < 1.12.1-2
|
|
|
|
|
Provides: ansible-freeipa-collection
|
|
|
|
|
Obsoletes: ansible-freeipa-collection < 1.14.0
|
|
|
|
|
|
|
|
|
|
%description
|
|
|
|
|
Ansible roles to install and uninstall FreeIPA servers, replicas and clients,
|
|
|
|
|
roles for backups and SmartCard configuration, modules for management and also
|
|
|
|
|
Ansible collection %{collection_namespace}.%{collection_name} providing
|
|
|
|
|
roles to install and uninstall FreeIPA servers, replicas and clients, roles
|
|
|
|
|
for backups and SmartCard configuration, modules for management and also
|
|
|
|
|
playbooks for all roles and modules.
|
|
|
|
|
|
|
|
|
|
Note: The Ansible playbooks and roles require a configured Ansible environment
|
|
|
|
@ -34,6 +44,7 @@ Features
|
|
|
|
|
- Repair mode for clients
|
|
|
|
|
- Backup and restore, also to and from controller
|
|
|
|
|
- Smartcard setup for servers and clients
|
|
|
|
|
- Inventory plugin freeipa
|
|
|
|
|
- Modules for automembership rule management
|
|
|
|
|
- Modules for automount key management
|
|
|
|
|
- Modules for automount location management
|
|
|
|
@ -51,7 +62,11 @@ Features
|
|
|
|
|
- Modules for hbacsvcgroup management
|
|
|
|
|
- Modules for host management
|
|
|
|
|
- Modules for hostgroup management
|
|
|
|
|
- Modules for idoverridegroup management
|
|
|
|
|
- Modules for idoverrideuser management
|
|
|
|
|
- Modules for idp management
|
|
|
|
|
- Modules for idrange management
|
|
|
|
|
- Modules for idview management
|
|
|
|
|
- Modules for location management
|
|
|
|
|
- Modules for netgroup management
|
|
|
|
|
- Modules for permission management
|
|
|
|
@ -89,7 +104,7 @@ Supported Distributions
|
|
|
|
|
Requirements
|
|
|
|
|
|
|
|
|
|
Controller
|
|
|
|
|
- Ansible version: 2.8+ (ansible-freeipa is an Ansible Collection)
|
|
|
|
|
- Ansible version: 2.13+
|
|
|
|
|
|
|
|
|
|
Node
|
|
|
|
|
- Supported FreeIPA version (see above)
|
|
|
|
@ -103,17 +118,6 @@ Work is planned to have a new method to handle CSR for external signed CAs in
|
|
|
|
|
a separate step before starting the server installation.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
%package tests
|
|
|
|
|
Summary: ansible-freeipa tests
|
|
|
|
|
Requires: %{name} = %{version}-%{release}
|
|
|
|
|
|
|
|
|
|
%description tests
|
|
|
|
|
ansible-freeipa tests.
|
|
|
|
|
|
|
|
|
|
Please have a look at %{_datadir}/ansible-freeipa/requirements-tests.txt
|
|
|
|
|
to get the needed requrements to run the tests.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
%prep
|
|
|
|
|
%setup -q
|
|
|
|
|
# Do not create backup files with patches
|
|
|
|
@ -138,295 +142,235 @@ done
|
|
|
|
|
%build
|
|
|
|
|
|
|
|
|
|
%install
|
|
|
|
|
install -m 755 -d %{buildroot}%{_datadir}/ansible/roles/
|
|
|
|
|
cp -rp roles/ipaserver %{buildroot}%{_datadir}/ansible/roles/
|
|
|
|
|
cp -rp roles/ipaserver/README.md README-server.md
|
|
|
|
|
cp -rp roles/ipareplica %{buildroot}%{_datadir}/ansible/roles/
|
|
|
|
|
cp -rp roles/ipareplica/README.md README-replica.md
|
|
|
|
|
cp -rp roles/ipaclient %{buildroot}%{_datadir}/ansible/roles/
|
|
|
|
|
cp -rp roles/ipaclient/README.md README-client.md
|
|
|
|
|
cp -rp roles/ipabackup %{buildroot}%{_datadir}/ansible/roles/
|
|
|
|
|
cp -rp roles/ipabackup/README.md README-backup.md
|
|
|
|
|
cp -rp roles/ipasmartcard_server %{buildroot}%{_datadir}/ansible/roles/
|
|
|
|
|
cp -rp roles/ipasmartcard_server/README.md README-smartcard_server.md
|
|
|
|
|
cp -rp roles/ipasmartcard_client %{buildroot}%{_datadir}/ansible/roles/
|
|
|
|
|
cp -rp roles/ipasmartcard_client/README.md README-smartcard_client.md
|
|
|
|
|
install -m 755 -d %{buildroot}%{_datadir}/ansible/plugins/
|
|
|
|
|
cp -rp plugins/* %{buildroot}%{_datadir}/ansible/plugins/
|
|
|
|
|
|
|
|
|
|
install -m 755 -d %{buildroot}%{_datadir}/ansible-freeipa
|
|
|
|
|
cp requirements*.txt %{buildroot}%{_datadir}/ansible-freeipa/
|
|
|
|
|
cp -rp utils %{buildroot}%{_datadir}/ansible-freeipa/
|
|
|
|
|
install -m 755 -d %{buildroot}%{_datadir}/ansible-freeipa/tests
|
|
|
|
|
cp -rp tests %{buildroot}%{_datadir}/ansible-freeipa/
|
|
|
|
|
# Create collection and install to %{buildroot}%{ansible_collections_dir}
|
|
|
|
|
# ansible-galaxy collection install creates ansible_collections directory
|
|
|
|
|
# automatically in given path, therefore /..
|
|
|
|
|
utils/build-galaxy-release.sh -o "%{version}" -p %{buildroot}%{ansible_collections_dir}/.. %{collection_namespace} %{collection_name}
|
|
|
|
|
|
|
|
|
|
cp %{buildroot}/%{ansible_collections_dir}/%{collection_namespace}/%{collection_name}/README.md .
|
|
|
|
|
|
|
|
|
|
%files
|
|
|
|
|
%license COPYING
|
|
|
|
|
%{_datadir}/ansible/roles/ipaserver
|
|
|
|
|
%{_datadir}/ansible/roles/ipareplica
|
|
|
|
|
%{_datadir}/ansible/roles/ipaclient
|
|
|
|
|
%{_datadir}/ansible/roles/ipabackup
|
|
|
|
|
%{_datadir}/ansible/roles/ipasmartcard_server
|
|
|
|
|
%{_datadir}/ansible/roles/ipasmartcard_client
|
|
|
|
|
%{_datadir}/ansible/plugins/doc_fragments
|
|
|
|
|
%{_datadir}/ansible/plugins/module_utils
|
|
|
|
|
%{_datadir}/ansible/plugins/modules
|
|
|
|
|
%doc README*.md
|
|
|
|
|
%doc playbooks
|
|
|
|
|
%{_datadir}/ansible-freeipa/requirements.txt
|
|
|
|
|
%{_datadir}/ansible-freeipa/requirements-dev.txt
|
|
|
|
|
%{_datadir}/ansible-freeipa/utils
|
|
|
|
|
|
|
|
|
|
%files tests
|
|
|
|
|
%{_datadir}/ansible-freeipa/tests
|
|
|
|
|
%{_datadir}/ansible-freeipa/requirements-tests.txt
|
|
|
|
|
%doc README.md
|
|
|
|
|
%dir %{ansible_collections_dir}/%{collection_namespace}
|
|
|
|
|
%{ansible_collections_dir}/%{collection_namespace}/%{collection_name}
|
|
|
|
|
|
|
|
|
|
%changelog
|
|
|
|
|
* Wed Nov 27 2024 Thomas Woerner <twoerner@redhat.com> - 1.14.1-1
|
|
|
|
|
- Update to version 1.14.1
|
|
|
|
|
https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.1
|
|
|
|
|
Resolves: RHEL-67567
|
|
|
|
|
- Fix requirements for ansible-core
|
|
|
|
|
Resolves: RHEL-68648
|
|
|
|
|
|
|
|
|
|
* Fri Nov 22 2024 Thomas Woerner <twoerner@redhat.com> - 1.14.0-2
|
|
|
|
|
- Fix update and wrong ansible-core build requirement
|
|
|
|
|
Resolves: RHEL-68648
|
|
|
|
|
|
|
|
|
|
* Fri Nov 22 2024 Thomas Woerner <twoerner@redhat.com> - 1.14.0-1
|
|
|
|
|
- Update to version 1.14.0
|
|
|
|
|
https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.0
|
|
|
|
|
Resolves: RHEL-67567
|
|
|
|
|
- Multi sudorule management with the ipasudorule module
|
|
|
|
|
Resolves: RHEL-61433
|
|
|
|
|
|
|
|
|
|
* Tue Oct 29 2024 Troy Dawson <tdawson@redhat.com> - 1.13.2-2
|
|
|
|
|
- Bump release for October 2024 mass rebuild:
|
|
|
|
|
Resolves: RHEL-64018
|
|
|
|
|
|
|
|
|
|
* Mon Jul 1 2024 Thomas Woerner <twoerner@redhat.com> - 1.13.2-1
|
|
|
|
|
- Update to version 1.13.2
|
|
|
|
|
https://github.com/freeipa/ansible-freeipa/releases/tag/v1.13.2
|
|
|
|
|
Resolves: RHEL-35566
|
|
|
|
|
- Convert input certificates
|
|
|
|
|
Resolves: RHEL-44616
|
|
|
|
|
- Fix rolesdeployment with IPA 4.12
|
|
|
|
|
Resolves: RHEL-40870
|
|
|
|
|
|
|
|
|
|
* Mon Jun 24 2024 Troy Dawson <tdawson@redhat.com> - 1.13.1-2
|
|
|
|
|
- Bump release for June 2024 mass rebuild
|
|
|
|
|
|
|
|
|
|
* Tue May 28 2024 Thomas Woerner <twoerner@redhat.com> - 1.13.1-1
|
|
|
|
|
- Update to version 1.13.1
|
|
|
|
|
https://github.com/freeipa/ansible-freeipa/releases/tag/v1.13.0
|
|
|
|
|
https://github.com/freeipa/ansible-freeipa/releases/tag/v1.13.1
|
|
|
|
|
Resolves: RHEL-35566
|
|
|
|
|
- New inventory plugin
|
|
|
|
|
Resolves: RHEL-38947
|
|
|
|
|
- Enable batch command as backend
|
|
|
|
|
Resolves: RHEL-38944
|
|
|
|
|
- New collection sub package
|
|
|
|
|
Resolves: RHEL-38930
|
|
|
|
|
|
|
|
|
|
* Thu Apr 4 2024 Thomas Woerner <twoerner@redhat.com> - 1.12.1-2
|
|
|
|
|
- The package now provides the Ansible collection freeipa.ansible_freeipa
|
|
|
|
|
- New build requires for ansible-core and python
|
|
|
|
|
- The tests are part of the collection, new provides and obsoletes for the
|
|
|
|
|
-tests sub package
|
|
|
|
|
|
|
|
|
|
* Mon Feb 12 2024 Thomas Woerner <twoerner@redhat.com> - 1.12.1-1
|
|
|
|
|
- Update to version 1.12.1
|
|
|
|
|
https://github.com/freeipa/ansible-freeipa/releases/tag/v1.12.1
|
|
|
|
|
Highlights:
|
|
|
|
|
- Fix ipaserver deployment on CentOS 8 Stream
|
|
|
|
|
- Fix ipaclient deployment with automount
|
|
|
|
|
- Fix ipaclient OTP error reporting
|
|
|
|
|
- Add missing support for renaming groups and users
|
|
|
|
|
- Idempotency fixes in several modules
|
|
|
|
|
|
|
|
|
|
* Mon Jan 22 2024 Fedora Release Engineering <releng@fedoraproject.org> - 1.12.0-3
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Fri Jan 19 2024 Fedora Release Engineering <releng@fedoraproject.org> - 1.12.0-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Mon Nov 27 2023 Thomas Woerner <twoerner@redhat.com> - 1.12.0-1
|
|
|
|
|
- Update to version 1.12.0
|
|
|
|
|
https://github.com/freeipa/ansible-freeipa/releases/tag/v1.12.0
|
|
|
|
|
Highlights:
|
|
|
|
|
- New idoverridegroup management module.
|
|
|
|
|
- New idoverrideuser management module.
|
|
|
|
|
- New idview management module.
|
|
|
|
|
- New idp management module.
|
|
|
|
|
- Bug fixes and CI improvements.
|
|
|
|
|
|
|
|
|
|
* Mon Jul 24 2023 Thomas Woerner <twoerner@redhat.com> - 1.11.1-1
|
|
|
|
|
- Update to version 1.11.1
|
|
|
|
|
https://github.com/freeipa/ansible-freeipa/releases/tag/v1.11.1
|
|
|
|
|
Resolves: RHBZ#2170373
|
|
|
|
|
- ipaautomountmap: add support for indirect maps
|
|
|
|
|
Resolves: RHBZ#2050176
|
|
|
|
|
- ipauser: Add support to modify GECOS field
|
|
|
|
|
Resolves: RHBZ#2169372
|
|
|
|
|
- ipauser: Add support for parameter "street"
|
|
|
|
|
Resolves: RHBZ#2215531
|
|
|
|
|
- ipauser: Add support for SMB attributes
|
|
|
|
|
Resolves: RHBZ#2215533
|
|
|
|
|
- ipauser: Support for External IdP attributes
|
|
|
|
|
Resolves: RHBZ#2215536
|
|
|
|
|
- Fix handling of ipapwpolicy attributes usercheck and dictcheck
|
|
|
|
|
Resolves: RHBZ#2215542
|
|
|
|
|
- Update authtypes authind
|
|
|
|
|
Resolves: RHBZ#2215538
|
|
|
|
|
Highlights:
|
|
|
|
|
- Support for GECOS, street, smb and idp attributes in ipauser module
|
|
|
|
|
- Support for indirect maps in ipaautomountmap module
|
|
|
|
|
- Update of user_auth_type choices in ipaconfig and ipauser modules
|
|
|
|
|
- Update of auth_ind choices in ipahost and ipaservice modules
|
|
|
|
|
- Upstream test and environment enhancements
|
|
|
|
|
- Documentation updates
|
|
|
|
|
|
|
|
|
|
* Wed Jul 19 2023 Fedora Release Engineering <releng@fedoraproject.org> - 1.11.0-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Mon Jun 12 2023 Thomas Woerner <twoerner@redhat.com> - 1.11.0-1
|
|
|
|
|
- Update to version 1.11.0
|
|
|
|
|
https://github.com/freeipa/ansible-freeipa/releases/tag/v1.11.0
|
|
|
|
|
Resolves: RHBZ#2170373
|
|
|
|
|
- Multiple service management
|
|
|
|
|
Resolves: RHBZ#2175771
|
|
|
|
|
- New ipacert module
|
|
|
|
|
Resolves: RHBZ#2127907
|
|
|
|
|
- Fix maxsequence handling in ipapwpolicy module
|
|
|
|
|
Resolves: RHBZ#2214294
|
|
|
|
|
Highlights:
|
|
|
|
|
- Multiple service management with ipaservice module
|
|
|
|
|
- New ipacert module for certificate management
|
|
|
|
|
- Action group support for the Ansible collections on Ansible Galaxy and
|
|
|
|
|
Ansible AutomationHub
|
|
|
|
|
- Fixed maxsequence handling in ipapwpolicy module
|
|
|
|
|
- Even more Ansible lint driven changes
|
|
|
|
|
|
|
|
|
|
* Wed Apr 5 2023 Thomas Woerner <twoerner@redhat.com> - 1.10.0-1
|
|
|
|
|
- Update to version 1.10.0
|
|
|
|
|
https://github.com/freeipa/ansible-freeipa/releases/tag/v1.10.0
|
|
|
|
|
Resolves: RHBZ#2170373
|
|
|
|
|
- ipareplica/server: Enable removal from domain with undeployment
|
|
|
|
|
Resolves: RHBZ#2127903
|
|
|
|
|
- ipagroup: Allow multiple group management
|
|
|
|
|
Resolves: RHBZ#2175763
|
|
|
|
|
- ipaserver: Allow deployments with random serial numbers
|
|
|
|
|
Resolves: RHBZ#2127905
|
|
|
|
|
- ipagroup: Fix ensuring external group members (without trust-ad)
|
|
|
|
|
Resolves: RHBZ#2183822
|
|
|
|
|
- ipaclient: Add subid option to select the sssd profile with-subid
|
|
|
|
|
Resolves: RHBZ#2175767
|
|
|
|
|
- ipaclient: Fix allow_repair with removed krb5.conf and DNS lookup
|
|
|
|
|
Resolves: RHBZ#2127883
|
|
|
|
|
- ipaclient: Keep server affinity while deploying as long as possible
|
|
|
|
|
Resolves: RHBZ#2175757
|
|
|
|
|
Highlights:
|
|
|
|
|
- ipagroup: Allow multiple group management.
|
|
|
|
|
- ipaclient: Add subid option to select the sssd profile with-subid.
|
|
|
|
|
- ipaclient: Fix allow_repair with removed krb5.conf and DNS lookup.
|
|
|
|
|
- ipaclient: Keep server affinity while deploying by deferring the
|
|
|
|
|
creation the final krb5.conf.
|
|
|
|
|
- ipaserver: Allow deployments with random serial numbers.
|
|
|
|
|
- ipareplica/server: Enable removal from domain with undeployment.
|
|
|
|
|
- More Ansible lint fixes.
|
|
|
|
|
|
|
|
|
|
* Fri Mar 10 2023 Rafael Jeffman <rjeffman@redhat.com> - 1.9.2-2
|
|
|
|
|
- Migrate to SPDX license
|
|
|
|
|
|
|
|
|
|
* Tue Jan 31 2023 Thomas Woerner <twoerner@redhat.com> - 1.9.2-1
|
|
|
|
|
- Update to version 1.9.2
|
|
|
|
|
https://github.com/freeipa/ansible-freeipa/releases/tag/v1.9.2
|
|
|
|
|
Resolves: RHBZ#2125592
|
|
|
|
|
- ipabackup: Use ipabackup_item again in copy_backup_to_server
|
|
|
|
|
Resolves: RHBZ#2165953
|
|
|
|
|
|
|
|
|
|
* Mon Jan 30 2023 Thomas Woerner <twoerner@redhat.com> - 1.9.1-1
|
|
|
|
|
- Update to version 1.9.1
|
|
|
|
|
https://github.com/freeipa/ansible-freeipa/releases/tag/v1.9.1
|
|
|
|
|
Resolves: RHBZ#2125592
|
|
|
|
|
- pwpolicy: Allow clearing policy values
|
|
|
|
|
Resolves: RHBZ#2150334
|
|
|
|
|
- Use netgroup_find instead of netgroup_show to workaround IPA bug
|
|
|
|
|
Resolves: RHBZ#2144725
|
|
|
|
|
Highlights:
|
|
|
|
|
- Ansible 2.14 test and lint fixes
|
|
|
|
|
- pwpolicy: Allow clearing policy values
|
|
|
|
|
- More bug fixes
|
|
|
|
|
|
|
|
|
|
* Wed Jan 18 2023 Fedora Release Engineering <releng@fedoraproject.org> - 1.9.0-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Wed Dec 7 2022 Thomas Woerner <twoerner@redhat.com> - 1.9.0-1
|
|
|
|
|
* Tue Dec 6 2022 Thomas Woerner <twoerner@redhat.com> - 1.9.0-1
|
|
|
|
|
- Update to version 1.9.0
|
|
|
|
|
https://github.com/freeipa/ansible-freeipa/releases/tag/v1.9.0
|
|
|
|
|
Related: RHBZ#2125592
|
|
|
|
|
- pwpolicy: Add support for password check and grace limit
|
|
|
|
|
Resolves: RHBZ#2127911
|
|
|
|
|
- ipaconfig: Do not allow enable_sid set to False
|
|
|
|
|
Resolves: RHBZ#2127446
|
|
|
|
|
- ipaclient: No kinit on controller for deployment using OTP
|
|
|
|
|
Resolves: RHBZ#2127887
|
|
|
|
|
- ipaclient: Configure DNS resolver
|
|
|
|
|
Resolves: RHBZ#2127895
|
|
|
|
|
- New netgroup management module
|
|
|
|
|
Resolves: RHBZ#2127910
|
|
|
|
|
- sudorule: Add support for 'hostmask' parameter
|
|
|
|
|
Resolves: RHBZ#2127913
|
|
|
|
|
- ipaconfig: Fix fail_json calls
|
|
|
|
|
Resolves: RHBZ#2134375
|
|
|
|
|
- ipaconfig: Do not require enable_sid for add_sids or netbios_name
|
|
|
|
|
Resolves: RHBZ#2134505
|
|
|
|
|
- ipaserver: Add missing idstart check
|
|
|
|
|
Resolves: RHBZ#2132731
|
|
|
|
|
Highlights:
|
|
|
|
|
- New netgroup management module
|
|
|
|
|
- sudorule: Add support for 'hostmask' parameter
|
|
|
|
|
- pwpolicy: Add support for password check and grace limit
|
|
|
|
|
- ipaclient: No kinit on controller for deployment using OTP
|
|
|
|
|
- ipaclient: Configure DNS resolver
|
|
|
|
|
- Support for ansible-core 2.14 tests
|
|
|
|
|
|
|
|
|
|
* Mon Sep 12 2022 Thomas Woerner <twoerner@redhat.com> - 1.8.4-1
|
|
|
|
|
- Update to version 1.8.4
|
|
|
|
|
https://github.com/freeipa/ansible-freeipa/releases/tag/v1.8.4
|
|
|
|
|
Resolves: RHBZ#2125592
|
|
|
|
|
- 'ansible-doc' -l lists most idm modules as 'UNDOCUMENTED'
|
|
|
|
|
Resolves: RHBZ#2125603
|
|
|
|
|
- ansible-freeipa Replica Install Setup DNS fails
|
|
|
|
|
Resolves: RHBZ#2125616
|
|
|
|
|
- ipaconfig does not support SID and netbios attributes
|
|
|
|
|
Resolves: RHBZ#2069184
|
|
|
|
|
|
|
|
|
|
* Tue Aug 16 2022 Thomas Woerner <twoerner@redhat.com> - 1.8.3-1
|
|
|
|
|
- Update to version 1.8.3
|
|
|
|
|
https://github.com/freeipa/ansible-freeipa/releases/tag/v1.8.3
|
|
|
|
|
Related: RHBZ#2080322
|
|
|
|
|
- Fixes replica deployment issue for domains without SID support.
|
|
|
|
|
Related: RHBZ#2110478
|
|
|
|
|
|
|
|
|
|
* Thu Jul 28 2022 Thomas Woerner <twoerner@redhat.com> - 1.8.2-1
|
|
|
|
|
- Update to version 1.8.2
|
|
|
|
|
https://github.com/freeipa/ansible-freeipa/releases/tag/v1.8.2
|
|
|
|
|
Related: RHBZ#2080322
|
|
|
|
|
- SIDs are always generated for server and replica deployments
|
|
|
|
|
Resolves: RHBZ#2110478
|
|
|
|
|
- Random Serial Numbers are not enabled by default any more
|
|
|
|
|
Resolves: RHBZ#2110523
|
|
|
|
|
- Fixes comparison of bool values in IPA 4.9.10+ for ipadnsconfig
|
|
|
|
|
Resolves: RHBZ#2110538
|
|
|
|
|
|
|
|
|
|
* Wed Jul 20 2022 Fedora Release Engineering <releng@fedoraproject.org> - 1.8.1-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Thu Jul 7 2022 Thomas Woerner <twoerner@redhat.com> - 1.8.1-1
|
|
|
|
|
- Update to version 1.8.1
|
|
|
|
|
https://github.com/freeipa/ansible-freeipa/releases/tag/v1.8.1
|
|
|
|
|
Related: RHBZ#2080322
|
|
|
|
|
- ipa server deploys failing with latest IPA compose
|
|
|
|
|
Resolves: RHBZ#2103924
|
|
|
|
|
- ipaserver_external_cert_files failes to copy with ansible 2.13
|
|
|
|
|
Resolves: RHBZ#2104142
|
|
|
|
|
|
|
|
|
|
* Fri Jun 24 2022 Thomas Woerner <twoerner@redhat.com> - 1.8.0-1
|
|
|
|
|
- idrange: Fix usage of dom_name when idrange doesn't exist.
|
|
|
|
|
Resolves: RHBZ#2086994
|
|
|
|
|
- smartcard roles for ansible-freeipa
|
|
|
|
|
Resolves: RHBZ#2076567
|
|
|
|
|
- Update to version 1.8.0
|
|
|
|
|
https://github.com/freeipa/ansible-freeipa/releases/tag/v1.8.0
|
|
|
|
|
|
|
|
|
|
* Fri Apr 29 2022 Thomas Woerner <twoerner@redhat.com> - 1.7.0-1
|
|
|
|
|
- Update to version 1.7.0
|
|
|
|
|
https://github.com/freeipa/ansible-freeipa/releases/tag/v1.7.0
|
|
|
|
|
Resolves: RHBZ#2080322
|
|
|
|
|
- New idrange management module.
|
|
|
|
|
Resolves: RHBZ#2069188
|
|
|
|
|
- Not able to update empty descriptions in automount maps.a
|
|
|
|
|
Resolves: RHBZ#2050179
|
|
|
|
|
- New servicedelegationrule management module.
|
|
|
|
|
Resolves: RHBZ#2069179
|
|
|
|
|
- New servicedelegationtarget management module.
|
|
|
|
|
Resolves: RHBZ#2069180
|
|
|
|
|
- Add support for managing idoverrideusers in ipagroup.
|
|
|
|
|
Resolves: RHBZ#2069183
|
|
|
|
|
|
|
|
|
|
* Thu Jan 27 2022 Thomas Woerner <twoerner@redhat.com> - 1.6.3-1
|
|
|
|
|
- Update to version 1.6.3
|
|
|
|
|
https://github.com/freeipa/ansible-freeipa/releases/tag/v1.6.3
|
|
|
|
|
Related: RHBZ#2010622
|
|
|
|
|
|
|
|
|
|
* Wed Jan 26 2022 Thomas Woerner <twoerner@redhat.com> - 1.6.2-1
|
|
|
|
|
- Update to version 1.6.2
|
|
|
|
|
https://github.com/freeipa/ansible-freeipa/releases/tag/v1.6.2
|
|
|
|
|
Related: RHBZ#2010622
|
|
|
|
|
|
|
|
|
|
* Fri Jan 21 2022 Thomas Woerner <twoerner@redhat.com> - 1.6.1-1
|
|
|
|
|
- Update to version 1.6.1
|
|
|
|
|
https://github.com/freeipa/ansible-freeipa/releases/tag/v1.6.1
|
|
|
|
|
- Update to version 1.6.0
|
|
|
|
|
https://github.com/freeipa/ansible-freeipa/releases/tag/v1.6.0
|
|
|
|
|
Related: RHBZ#2010622
|
|
|
|
|
- Add module to manage automount maps
|
|
|
|
|
Resolves: RHBZ#2040701
|
|
|
|
|
- Add module to manage automount keys
|
|
|
|
|
Resolves: RHBZ#2040702
|
|
|
|
|
|
|
|
|
|
* Wed Dec 29 2021 Thomas Woerner <twoerner@redhat.com> - 1.5.3-1
|
|
|
|
|
* Wed Jan 19 2022 Fedora Release Engineering <releng@fedoraproject.org> - 1.5.3-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Tue Dec 28 2021 Thomas Woerner <twoerner@redhat.com> - 1.5.3-1
|
|
|
|
|
- Update to version 1.5.3
|
|
|
|
|
https://github.com/freeipa/ansible-freeipa/releases/tag/v1.5.3
|
|
|
|
|
- Update to version 1.5.2
|
|
|
|
|
https://github.com/freeipa/ansible-freeipa/releases/tag/v1.5.2
|
|
|
|
|
- Update to version 1.5.1
|
|
|
|
|
https://github.com/freeipa/ansible-freeipa/releases/tag/v1.5.1
|
|
|
|
|
|
|
|
|
|
* Tue Dec 7 2021 Thomas Woerner <twoerner@redhat.com> - 1.5.0-1
|
|
|
|
|
- Update to version 1.5.0
|
|
|
|
|
https://github.com/freeipa/ansible-freeipa/releases/tag/v1.5.0
|
|
|
|
|
Related: RHBZ#2010622
|
|
|
|
|
- automember set default group/hostgroup is missing from the automember module
|
|
|
|
|
Resolves: RHBZ#2021947
|
|
|
|
|
- automember remove default group/hostgroup is missing from the automember
|
|
|
|
|
module
|
|
|
|
|
Resolves: RHBZ#2021952
|
|
|
|
|
- automember rebuild is missing from the automember module
|
|
|
|
|
Resolves: RHBZ#2021954
|
|
|
|
|
- automember remove orphans group/hostgroup is missing from the automember
|
|
|
|
|
module
|
|
|
|
|
Resolves: RHBZ#2021955
|
|
|
|
|
- Not able to update existing automember rule description
|
|
|
|
|
Resolves: RHBZ#1976922
|
|
|
|
|
|
|
|
|
|
* Tue Oct 5 2021 Thomas Woerner <twoerner@redhat.com> - 0.4.0-1
|
|
|
|
|
|
|
|
|
|
* Wed Oct 6 2021 Thomas Woerner <twoerner@redhat.com> - 0.4.0-1
|
|
|
|
|
- Update to version 0.4.0
|
|
|
|
|
https://github.com/freeipa/ansible-freeipa/releases/tag/v0.4.0
|
|
|
|
|
Resolves: RHBZ#2010622
|
|
|
|
|
- Add ability to run modules remotely
|
|
|
|
|
Resolves: RHBZ#2010633
|
|
|
|
|
- New management module ipaautomountlocation
|
|
|
|
|
Resolves: RHBZ#2010643
|
|
|
|
|
|
|
|
|
|
* Mon Aug 16 2021 Thomas Woerner <twoerner@redhat.com> - 0.3.8-3
|
|
|
|
|
- Add requirement for ansible-core
|
|
|
|
|
Resolves: RHBZ#1993857
|
|
|
|
|
- Remove python3, pip and ansible installation from sanity test
|
|
|
|
|
Related: RHBZ#1993857
|
|
|
|
|
- Replace json_query in tests/user/test_users_absent.yml
|
|
|
|
|
Resolves: RHBZ#1992997
|
|
|
|
|
|
|
|
|
|
* Mon Aug 09 2021 Mohan Boddu <mboddu@redhat.com> - 0.3.8-2
|
|
|
|
|
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
|
|
|
|
|
Related: rhbz#1991688
|
|
|
|
|
|
|
|
|
|
* Thu Jul 15 2021 Thomas Woerner <twoerner@redhat.com> - 0.3.8-1
|
|
|
|
|
- Update to version 0.3.7 and 0.3.8
|
|
|
|
|
https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.7
|
|
|
|
|
|
|
|
|
|
* Wed Jul 21 2021 Fedora Release Engineering <releng@fedoraproject.org> - 0.3.8-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
|
|
|
|
|
|
|
|
|
|
* Wed Jul 14 2021 Thomas Woerner <twoerner@redhat.com> - 0.3.8-1
|
|
|
|
|
- Update to version 0.3.8
|
|
|
|
|
https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.8
|
|
|
|
|
Related: RHBZ#1972178
|
|
|
|
|
- automember: Verify condition keys
|
|
|
|
|
Resolves: RHBZ#1981713
|
|
|
|
|
- automember: Fix result["failed"] issues with conditions
|
|
|
|
|
Resolves: RHBZ#1981713
|
|
|
|
|
- automember: Fix action to be automember or member, not service
|
|
|
|
|
Resolves: RHBZ#1981711
|
|
|
|
|
|
|
|
|
|
* Thu Jun 17 2021 Thomas Woerner <twoerner@redhat.com> - 0.3.6-3
|
|
|
|
|
- Apply fix for ipabackup: Use module to get IPA_BACKUP_DIR from ipaplatform
|
|
|
|
|
Resolves: RRBZ#1973173
|
|
|
|
|
|
|
|
|
|
* Mon Jun 7 2021 Thomas Woerner <twoerner@redhat.com> - 0.3.6-1
|
|
|
|
|
- Update to version 0.3.7
|
|
|
|
|
https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.7
|
|
|
|
|
|
|
|
|
|
* Tue Jun 1 2021 Thomas Woerner <twoerner@redhat.com> - 0.3.6-1
|
|
|
|
|
- Update to version 0.3.6
|
|
|
|
|
https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.6
|
|
|
|
|
Resolves: RHBZ#1972178
|
|
|
|
|
- ansible-freeipa-tests not in the compose
|
|
|
|
|
Resolves: RHBZ#1940014
|
|
|
|
|
- Remove unsupported parameter for (ipapermission) module: perm_rights from
|
|
|
|
|
permission-present.yml
|
|
|
|
|
Resolves: RHBZ#1973167
|
|
|
|
|
- Sample playbook included for selfservice module is incorrect
|
|
|
|
|
Resolves: RHBZ#1973166
|
|
|
|
|
- ipa-client-install failing with error code 7(keytab: /usr/sbin/ipa-rmkeytab
|
|
|
|
|
returned 7)
|
|
|
|
|
Resolves: RHBZ#1973169
|
|
|
|
|
- New management module ipaserver
|
|
|
|
|
Resolves: RHBZ#1973171
|
|
|
|
|
- New management module ipaautomember
|
|
|
|
|
Resolves: RHBZ#1973172
|
|
|
|
|
|
|
|
|
|
* Thu Apr 15 2021 Mohan Boddu <mboddu@redhat.com> - 0.3.5-2
|
|
|
|
|
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
|
|
|
|
|
|
|
|
|
|
* Wed Mar 3 2021 Thomas Woerner <twoerner@redhat.com> - 0.3.5-1
|
|
|
|
|
- Update to version 0.3.5
|
|
|
|
|