Resolves: RHEL-73022 A slow HSM can cause IPA server installation to fail setting up certificate tracking

Resolves: RHEL-74465 kinit with external idp user is failing
Resolves: RHEL-75656 Include latest fixes in python3-ipatests package

Resolves: RHEL-73022 A slow HSM can cause IPA server installation to fail setting up certificate tracking [rhel-9]
Resolves: RHEL-71261 [RHEL-9.6] Include latest fixes in python3-ipatests package
Resolves: RHEL-67191 CVE-2024-11029 ipa: Administrative user data leaked through systemd journal [rhel-9.6]
Resolves: RHEL-59040 KRA installation failure caused by a certificate mismatch in NSS DB and configuration file.

Resolves: RHEL-70760 Fix typo in ipa-migrate log file i.e 'Privledges' to 'Privileges'
Resolves: RHEL-70481 ipa-server-upgrade fails after established trust with ad
Resolves: RHEL-69927 add support for python cryptography 44.0.0
Resolves: RHEL-69908 All user groups are not being included during HSM token validation
Resolves: RHEL-69900 Upgrade to ipa-server-4.12.2-1.el9 OTP-based bind to LDAP without enforceldapotp is broken

Resolves: RHEL-68448 ipa trust-add fails in FIPS mode with an internal error has occurred
Resolves: RHEL-69301 Support GSSAPI in Cockpit on IPA servers

Resolves: RHEL-67414 ipa dns-zone --allow-query '!198.18.2.0/24;any;' fails with Unrecognized IPAddress flags
Resolves: RHEL-67410 ipa-migrate should also migrate DNS forward zones
Resolves: RHEL-67409 ipa-migrate in stage mode fails with TypeError: 'NoneType' object is not iterable
Resolves: RHEL-66964 Include latest fixes in python3-ipatests packages
Resolves: RHEL-64135 IDP configuration in the IdM WebUI shows Organization is required

Bump release for rebuild

Resolves: RHEL-61642 Uninstall ACME separately during PKI uninstallation

Related: RHEL-59788 Rebase Samba to the latest 4.21.x release
Resolves: RHEL-61642 Uninstall ACME separately during PKI uninstallation
Resolves: RHEL-56963 SSSD offline causing test-adtrust-install failure
Resolves: RHEL-56473 Include latest fixes in python3-ipatests packages
Resolves: RHEL-48104 Default hbac rules are duplicated on remote server post ipa-migrate in prod-mode
Resolves: RHEL-45330 [RFE] add a tool to quickly detect and fix issues with IPA ID ranges
Resolves: RHEL-40376 SID generation task is failing when SELinux is in Enforcing mode
Resolves: RHEL-4915 Last expired OTP token would be considered as still assigned to the user

Resolves: RHEL-54546 Covscan issues: Resource Leak
Resolves: RHEL-49602 misleading warning for missing ipa-selinux-nfast package on luna hsm h/w
Resolves: RHEL-40359 With unreachable AD, ipa trust returns an internal error

Resolves: RHEL-53500 adtrustinstance only prints issues in check_inst() and does not log them
Resolves: RHEL-52306 Unconditionally add MS-PAC to global config
Resolves: RHEL-52300 RFE - Keep the configured value for the "nsslapd-ignore-time-skew" after a "force-sync"
Resolves: RHEL-52222 ipa-replica/server-install with softhsm needs to check permission/ownership of /var/lib/softhsm/tokens to avoid install failure
Resolves: RHEL-51944 Include latest fixes in python3-ipatests packages
Resolves: RHEL-50804 ipa-migrate -Z with invalid cert options fails with 'ValueError: option error'
Resolves: RHEL-49602 misleading warning for missing ipa-selinux-nfast package on luna hsm h/w
Resolves: RHEL-27856 'Unable to log in as uid=admin-replica.testrealm.test,ou=people,o=ipaca' during replica install

Resolves: RHEL-47292 Include latest fixes in python3-ipatests packages
Resolves: RHEL-47146 Syntax error uninstalling the selinux-luna subpackage
Resolves: RHEL-46009 ipa-migrate with -Z option fails with ValueError: option error
Resolves: RHEL-46003 ipa-migrate -V options fails to display version
Resolves: RHEL-45463 ipa-migrate stage-mode is failing with error: Modifying a mapped attribute in a managed entry is not allowed
Resolves: RHEL-40890 ipa-server-install: token_password_file read in kra.install_check after calling hsm_validator in ca.install_check
Resolves: RHEL-40661 Adjust "ipa config-mod --addattr ipaconfigstring=EnforceLDAPOTP" to allow for non OTP users in some cases

Resolves: RHEL-37285 IPA Web UI not showing replication agreement for non-admin users
Resolves: RHEL-42703 PSKC.xml issues with ipa_otptoken_import.py
Resolves: RHEL-41194 ipa-client rpm post script creates always ssh_config.orig even if nothing needs to be changed
Resolves: RHEL-39477 kdc.crt certificate not getting automatically renewed by certmonger in IPA Hidden replica
Resolves: RHEL-46559 Include latest fixes in python3-ipatests packages
Resolves: RHEL-22188 [RFE] Allow IPA SIDgen task to continue if it finds an entity that SID can't be assigned to

Resolves: RHEL-29928 CVE-2024-3183 freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force
Resolves: RHEL-29691 CVE-2024-2698 freeipa: delegation rules allow a proxy service to impersonate any user to access another target service

Related: RHEL-34809
jwcrypto

Resolves: RHEL-39950 ipa-client can't be installed because of a missing dependency