man page: update ipa-server-upgrade.1
Fall back to krbprincipalname when validating host auth indicators
Add dependency for sssd-winbind-idmap to server-trust-ad

IPA server in debug mode fails to run because time.perf_counter_ns is
Add checks to prevent assigning authentication indicators to internal IPA
Unable to set ipaUserAuthType with stageuser-add

Upstream release FreeIPA 4.9.6
Revise PKINIT upgrade code
ipa-cert-fix man page: add note about certmonger renewal
Certificate Serial Number issue

Upstream release FreeIPA 4.9.5
IPA to allow setting a new range type
ipa-server-install displays debug output when --debug output is not
ACME fails to generate a cert on migrated RHEL8.4 server
Switch ipa-client to use the JSON API
IDM - Allow specifying permanent logging settings for BIND
Cache LDAP data within a request
ipa-server-upgrade is failing while upgrading rhel8.3 to rhel8.4

Upstream release FreeIPA 4.9.3

Upstream release FreeIPA 4.9.2

Upstream release FreeIPA 4.9.1

Upstream final release FreeIPA 4.9.0

Upstream pre release FreeIPA 4.9.0rc3

Remove ipa-server dependency from ipa-selinux subpackage
Related: RHBZ#1891832

Upstream pre release FreeIPA 4.9.0rc2
Synchronize spec file with upstream and Fedora
Traceback while doing ipa-backup
ipa-client-install changes system wide ssh configuration
ipa-kdb: support subordinate/superior UPN suffixes
KRA Transport and Storage Certificates do not renew
Move where the restore state is marked during IPA server upgrade
Intermittent IdM Client Registration Failures
Nightly test failure in test_acme.py::TestACME::test_third_party_certs
testing)
Add IPA RA Agent to ACME group on the CA

Fix requirement for python3-kdcproxy, add no autoreqprov for ipatests sub

Upstream pre release FreeIPA 4.9.0rc1
Requirements and design for libpwquality integration
When parsing options require name/value pairs
WebUI: Fix issue with opening links in new tab/window
Use a state to determine if a 389-ds upgrade is in progress
Unlock user accounts after a password reset and replicate that unlock to
Set the certmonger subject with a string, not an object
Implement ACME certificate enrolment
[WebUI] Backport jQuery patches from newer versions of the library (e.g.
It is not possible to edit KDC database when the FreeIPA server is running
Fix nsslapd-db-lock tuning of BDB backend
ipa-kdb: support subordinate/superior UPN suffixes
wgi/plugins.py: ignore empty plugin directories

SELinux Policy: let custodia replicate keys

Set mode of /etc/ipa/ca.crt to 0644 in CA-less installations

CAless installation: set the perms on KDC cert file
EPN: handle empty attributes
IPA-EPN: enhance input validation
EPN: enhance input validation
Require new samba build 4.12.3-52
Require new selinux-policy build 3.14.3-52