Upstream release FreeIPA 4.9.3

Upstream release FreeIPA 4.9.2

Upstream release FreeIPA 4.9.1

Upstream final release FreeIPA 4.9.0

Upstream pre release FreeIPA 4.9.0rc3

Remove ipa-server dependency from ipa-selinux subpackage
Related: RHBZ#1891832

Upstream pre release FreeIPA 4.9.0rc2
Synchronize spec file with upstream and Fedora
Traceback while doing ipa-backup
ipa-client-install changes system wide ssh configuration
ipa-kdb: support subordinate/superior UPN suffixes
KRA Transport and Storage Certificates do not renew
Move where the restore state is marked during IPA server upgrade
Intermittent IdM Client Registration Failures
Nightly test failure in test_acme.py::TestACME::test_third_party_certs
testing)
Add IPA RA Agent to ACME group on the CA

Fix requirement for python3-kdcproxy, add no autoreqprov for ipatests sub

Upstream pre release FreeIPA 4.9.0rc1
Requirements and design for libpwquality integration
When parsing options require name/value pairs
WebUI: Fix issue with opening links in new tab/window
Use a state to determine if a 389-ds upgrade is in progress
Unlock user accounts after a password reset and replicate that unlock to
Set the certmonger subject with a string, not an object
Implement ACME certificate enrolment
[WebUI] Backport jQuery patches from newer versions of the library (e.g.
It is not possible to edit KDC database when the FreeIPA server is running
Fix nsslapd-db-lock tuning of BDB backend
ipa-kdb: support subordinate/superior UPN suffixes
wgi/plugins.py: ignore empty plugin directories

SELinux Policy: let custodia replicate keys

Set mode of /etc/ipa/ca.crt to 0644 in CA-less installations

CAless installation: set the perms on KDC cert file
EPN: handle empty attributes
IPA-EPN: enhance input validation
EPN: enhance input validation
Require new samba build 4.12.3-52
Require new selinux-policy build 3.14.3-52

[WebUI] IPA Error 3007: RequirmentError" while adding members in
ipa-client-install: use the authselect backup during uninstall
Replace SSLCertVerificationError with CertificateError for py36
Fix AVC denial during ipa-adtrust-install --add-agents

replica install failing with avc denial for custodia component

selinux don't audit rules deny fetching trust topology
fix iPAddress cert issuance for >1 host/service
Specify cert_paths when calling PKIConnection
Update crypto policy to allow AD-SUPPORT when installing IPA
Add version to ipa-idoverride-memberof obsoletes

Add missing ipa-selinux package