Resolves: RHEL-66599 vault-add fails in FIPS mode
Resolves: RHEL-66598 ipa-migrate should also migrate DNS forward zones
Resolves: RHEL-66597 ipa-migrate in stage mode fails with TypeError: 'NoneType' object is not iterable
Resolves: RHEL-66595 Sentences truncated in man pages
Resolves: RHEL-66592 IDP configuration in the IdM WebUI shows Organization is required
Resolves: RHEL-65650 ipa-server-install with setup-dns fails 'job for ipa.service failed because the control process exited with error code'

Resolves: RHEL-64018 Bump release for October 2024 mass rebuild

Resolves: RHEL-61636 Uninstall ACME separately during PKI uninstallation

Related: RHEL-59777 Rebase Samba to the latest 4.21.x release
Resolves: RHEL-59659 ipa dns-zone --allow-query '!198.18.2.0/24;any;' fails with Unrecognized IPAddress flags
Resolves: RHEL-61636 Uninstall ACME separately during PKI uninstallation
Resolves: RHEL-61723 Include latest fixes in python3-ipatests packages
Resolves: RHEL-63325 Last expired OTP token would be considered as still assigned to the user

Resolves: RHEL-33818 Remove python3-ipalib's dependency on python3-netifaces

Resolves: RHEL-47294 SID generation task is failing when SELinux is in Enforcing mode
Resolves: RHEL-56472 Include latest fixes in python3-ipatests packages
Resolves: RHEL-56917 RFE add a tool to quickly detect and fix issues with IPA ID ranges
Resolves: RHEL-56965 Backport test fixes in python3-ipatests
Resolves: RHEL-58067 ipa replication installation fails in FIPS mode on rhel10
Resolves: RHEL-59265 Default hbac rules are duplicated on remote server post ipa-migrate in prod-mode
Resolves: RHEL-59266 Also enable SSSD's ssh service when enabling sss_ssh_knownhosts

Resolves: RHEL-54545 Covscan issues: Resource Leak
Resolves: RHEL-54304 support for python cryptography 43.0.0
Resolves: RHEL-49805 misleading warning for missing ipa-selinux-nfast package on luna hsm h/w
Resolves: RHEL-46897 With unreachable AD, ipa trust returns an internal error

Resolves: RHEL-53501 adtrustinstance only prints issues in check_inst() and does not log them
Resolves: RHEL-52305 Unconditionally add MS-PAC to global config
Resolves: RHEL-52223 ipa-replica/server-install with softhsm needs to check permission/ownership of /var/lib/softhsm/tokens to avoid install failure
Resolves: RHEL-51937 Include latest fixes in python3-ipatests packages
Resolves: RHEL-50805 ipa-migrate -Z with invalid cert options fails with 'ValueError: option error'
Resolves: RHEL-49805 misleading warning for missing ipa-selinux-nfast package on luna hsm h/w
Resolves: RHEL-49592 'Unable to log in as uid=admin-replica.testrealm.test,ou=people,o=ipaca' during replica install
Resolves: RHEL-4879 RFE - Keep the configured value for the "nsslapd-ignore-time-skew" after a "force-sync"

Resolves: RHEL-49452 Include latest fixes in python3-ipatests packages
Resolves: RHEL-49433 Adjust "ipa config-mod --addattr ipaconfigstring=EnforceLDAPOTP" to allow for non OTP users in some cases
Resolves: RHEL-49432 ipa-migrate stage-mode is failing with error: Modifying a mapped attribute in a managed entry is not allowed
Resolves: RHEL-49413 ipa-migrate with -Z option fails with ValueError: option error
Resolves: RHEL-47157 ipa-migrate -V options fails to display version
Resolves: RHEL-47148 Pagure #9629: Syntax error uninstalling the selinux-luna subpackage
Resolves: RHEL-40892 ipa-server-install: token_password_file read in kra.install_check after calling hsm_validator in ca.install_check

Resolves: RHEL-46607 kdc.crt certificate not getting automatically renewed by certmonger in IPA Hidden replica
Resolves: RHEL-46606 ipa-client rpm post script creates always ssh_config.orig even if nothing needs to be changed
Resolves: RHEL-46605 IPA Web UI not showing replication agreement for non-admin users
Resolves: RHEL-46592 [RFE] Allow IPA SIDgen task to continue if it finds an entity that SID can't be assigned to
Resolves: RHEL-46556 Include latest fixes in python3-ipatests packages
Resolves: RHEL-42705 PSKC.xml issues with ipa_otptoken_import.py

Bump release for June 2024 mass rebuild

Resolves: RHEL-32233 CVE-2024-3183 freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force
Resolves: RHEL-40881 CVE-2024-2698 freeipa: delegation rules allow a proxy service to impersonate any user to access another target service

Resolves: RHEL-39144 Rebase ipa to the latest 4.12 version for RHEL 10
Resolves: RHEL-30537 ipa: freeipa: argument injection into the username field of the /ipa/session/login_password requests

Bump release to rebuild on correct samba

Support 389-ds with lmdb backend

Rebuild against Samba 4.20rc1
Fix memory leak in Kerberos KDC driver
Fix possible crash in IPA command line tool when accessing Kerberos credentials
Compatibility fix for Python Cryptography 42.0.0
NetBIOS defaults fix
Fix default host keytab retrieval permissions