Don't store entries with a usercertificate in the LDAP cache

Catch and log errors when adding CA profiles
selinux policy: allow custodia to access /proc/cpuinfo
extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
ipa migrate-ds command fails to warn when compat plugin is enabled
Backport latest test fixes in python3-ipatests

ipatests: NAMED_CRYPTO_POLICY_FILE not defined for RHEL

man page: update ipa-server-upgrade.1
Fall back to krbprincipalname when validating host auth indicators
Add dependency for sssd-winbind-idmap to server-trust-ad

IPA server in debug mode fails to run because time.perf_counter_ns is
Add checks to prevent assigning authentication indicators to internal IPA
Unable to set ipaUserAuthType with stageuser-add

Upstream release FreeIPA 4.9.6
Revise PKINIT upgrade code
ipa-cert-fix man page: add note about certmonger renewal
Certificate Serial Number issue

Upstream release FreeIPA 4.9.5
IPA to allow setting a new range type
ipa-server-install displays debug output when --debug output is not
ACME fails to generate a cert on migrated RHEL8.4 server
Switch ipa-client to use the JSON API
IDM - Allow specifying permanent logging settings for BIND
Cache LDAP data within a request
ipa-server-upgrade is failing while upgrading rhel8.3 to rhel8.4

Upstream release FreeIPA 4.9.3

Upstream release FreeIPA 4.9.2

Upstream release FreeIPA 4.9.1

Upstream final release FreeIPA 4.9.0

Upstream pre release FreeIPA 4.9.0rc3

Remove ipa-server dependency from ipa-selinux subpackage
Related: RHBZ#1891832

Upstream pre release FreeIPA 4.9.0rc2
Synchronize spec file with upstream and Fedora
Traceback while doing ipa-backup
ipa-client-install changes system wide ssh configuration
ipa-kdb: support subordinate/superior UPN suffixes
KRA Transport and Storage Certificates do not renew
Move where the restore state is marked during IPA server upgrade
Intermittent IdM Client Registration Failures
Nightly test failure in test_acme.py::TestACME::test_third_party_certs
testing)
Add IPA RA Agent to ACME group on the CA

Fix requirement for python3-kdcproxy, add no autoreqprov for ipatests sub

Upstream pre release FreeIPA 4.9.0rc1
Requirements and design for libpwquality integration
When parsing options require name/value pairs
WebUI: Fix issue with opening links in new tab/window
Use a state to determine if a 389-ds upgrade is in progress
Unlock user accounts after a password reset and replicate that unlock to
Set the certmonger subject with a string, not an object
Implement ACME certificate enrolment
[WebUI] Backport jQuery patches from newer versions of the library (e.g.
It is not possible to edit KDC database when the FreeIPA server is running
Fix nsslapd-db-lock tuning of BDB backend
ipa-kdb: support subordinate/superior UPN suffixes
wgi/plugins.py: ignore empty plugin directories