FreeIPA ist ein von RedHat unterstütztes Open-Source Softwareprojekt, dass als Ziel hat ein Identität-, Policy- und Auditsystem zur Verfügung zu stellen. Dabei geht FreeIPA weiter als vergleichsweise das Active Directory von Microsoft oder eDirectory von Novell und vereint viele Open-Source Technologien zu einem System. Die Entwickler haben das Bugfix Release 4.9.11 veröffentlicht, dass folgende Hauptänderungen durchführt:

FreeIPA Funktionen

• Integrated security information management solution combining Linux (Fedora), 389 Directory Server, MIT Kerberos, NTP, DNS, Dogtag certificate system, SSSD and others.
• Built on top of well known Open Source components and standard protocols
• Strong focus on ease of management and automation of installation and configuration tasks.
• Full multi master replication for higher redundancy and scalability
• Extensible management interfaces (CLI, Web UI, XMLRPC and JSONRPC API) and Python SDK

FreeIPA 4.9.11 Release Notes

• 9083: Support MIT Kerberos KDB version 9
• 9187: [UX] Preserving a user account produces output saying it was deleted
• 9228: ipa-client-install does not maintain server affinity during installation
• 9237: Show order in sudo rule list in web interface
• 9258: Do not add TLS CA configuration to ldap.conf anymore

Resolved tickets

• #8946 RFE: Add label name to Certificates section in WebUI to enable testing
• #8951 Test for RFE ipa-healthcheck tool can include check to see if the system is FIPS enabled or not
• #9062 [ipatests] SID generation and test_xmlrpc/test_user_plugin.py
• #9083 Support MIT Kerberos KDB version 9
• #9158 Internal error when setting dnsconfig or dnsforwardzone forwarders.
• #9160 cryptography.utils.register_interface is scheduled for removal
• #9161 Nightly test failure in test_selinuxusermap.py::test_selinuxusermap::test_misc
• #9183 Timeout issue in test_installation.py when using interactive mode
• #9185 Fix missing parameter for Suse ipaplatform task
• #9187 (rhbz#2022028) [UX] Preserving a user account produces output saying it was deleted
• #9188 (rhbz#2098187) Add warning for empty targetattr when creating ACI with RBAC
• #9189 ipatests: Fix test_idp.py for downstream idm-ci
• #9190 ipatests.test_ipaserver.test_secure_ajp_connector failing with python 3.6.8 with: TypeError: a bytes-like object is required, not ‘str’
• #9192 (rhbz#2094672) IdM WebUI Pagination Size should not allow empty value
• #9198 [Tracker] nightly failure: after ipa trust-add, cred cache contains cifs/master.ipa.test@IPA.TEST instead of admin principal
• #9204 [Tracker] In ipa-server-upgrade ca_upgrade_schema() results in unnecessary pki restarts
• #9206 (rhbz#2109236) ldap bind occurs when admin user changes password with gracelimit=0
• #9207 Failure in AzurePipeline.freeipa (GATING InstallDNSSECFirst_1_to_5)
• #9208 ap: Doc build fails against Sphinx 5.1.0
• #9211 (rhbz#2109243) RFE: Allow grace login limit to be set in IPA WebUI.
• #9212 (rhbz#2115475) Nightly test failure in test_user.py::test_user::test_password_expiration_notification
• #9214 Nightly failure in webui test test_subid.py::test_subid::test_subid_range_deletion_not_allowed
• #9218 (rhbz#2116966) Random failure in test-winsyncmigrate
• #9225 pytest library module rename from quarkus to keycloak
• #9226 (rhbz#2124547) Infinite redirect loop in the WebUI for user root
• #9228 (rhbz#2148258) ipa-client-install does not maintain server affinity during installation
• #9230 build failure against gcc < 11
• #9231 /run/ipa/ccaches uses all available tmpfs space
• #9237 Show order in sudo rule list in web interface
• #9243 (rhbz#2127833) Password Policy Grace login limit allows invalid maximum value
• #9245 (rhbz#2117167) `extdom` plugin can return object from a wrong domain.
• #9246 Nightly test failure in test_user_permissions.TestInstallClientNoAdmin
• #9248 (rhbz#2124369) OTP token sync always returns OK even with random numbers
• #9249 (rhbz#2108630) Deprecated feature idnssoaserial in IdM appears when creating reverse dns zones
• #9252 (rhbz#2129895) [DDF] The Examples in the RHEL ipa(1) man page show “ipa help commands” with content for “ipa halp topics” and “ipa hel
• #9254 Exclude installed policy module file from RPM verification
• #9255 ipapython.dn_ctypes is not compatible with libldap 2.6
• #9257 (rhbz#2104185) Introduction of URI records for kerberos breaks location functionality
• #9258 (rhbz#2094673) Do not add TLS CA configuration to ldap.conf anymore
• #9259 (rhbz#2144737) vault interoperability with older RHEL systems is broken
• #9269 (rhbz#2143224, rhbz#2075452) ipa-certupdate does not restart/reload KDC on servers
• #9271 (rhbz#2143224) Support PKINIT with ipa-client-install
• #9274 ipa-join: pass the curl write function by name, not address

Quelle: Releases/4.9.11 – FreeIPA