Resolves: RHEL-88900 [RFE] Add check on CA cert expiry for ipa-cert-fix
Resolves: RHEL-88037 Server installation: dot-forwarder not added as a forwarder
Resolves: RHEL-86483 Include latest fixes in python3-ipatests package
Resolves: RHEL-41178 ipa-sidgen: fix memory leak in ipa_sidgen_add_post_op()

Resolves: RHEL-84481 Protect all IPA service principals
Resolves: RHEL-84277 [RFE] IDM support UIDs up to 4,294,967,293
Resolves: RHEL-84276 Ipa client --raw --structured throws internal error
Resolves: RHEL-82707 Search size limit tooltip has Search time limit tooltip text
Resolves: RHEL-82089 IPU 9 -> 10: ipa-server breaks the in-place upgrade due to failed scriptlet
Resolves: RHEL-68800 ipa-migrate with LDIF file from backup of remote server, fails with error 'change collided with another change'
Resolves: RHEL-30658 ipa-cacert-manage install fails with CAs having the same subject DN (subject key mismatch info)

Resolves: RHEL-80345 Use new bind9.18-dyndb-ldap and bind9.18 only for DNS over TLS with the ipa-server-encrypted-dns package

Resolves: RHEL-67913 Add DNS over TLS Support

Resolves: RHEL-78726 ipa-server-install failing on slow hsm

Resolves: RHEL-67913 Add DNS over TLS Support, Require bind9.18 32:9.18.29-2 and new bind-dyndb-ldap 11.11-1

Resolves: RHEL-73022 A slow HSM can cause IPA server installation to fail setting up certificate tracking

Resolves: RHEL-74465 kinit with external idp user is failing
Resolves: RHEL-75656 Include latest fixes in python3-ipatests package

Resolves: RHEL-73022 A slow HSM can cause IPA server installation to fail setting up certificate tracking [rhel-9]
Resolves: RHEL-71261 [RHEL-9.6] Include latest fixes in python3-ipatests package
Resolves: RHEL-67191 CVE-2024-11029 ipa: Administrative user data leaked through systemd journal [rhel-9.6]
Resolves: RHEL-59040 KRA installation failure caused by a certificate mismatch in NSS DB and configuration file.

Resolves: RHEL-70760 Fix typo in ipa-migrate log file i.e 'Privledges' to 'Privileges'
Resolves: RHEL-70481 ipa-server-upgrade fails after established trust with ad
Resolves: RHEL-69927 add support for python cryptography 44.0.0
Resolves: RHEL-69908 All user groups are not being included during HSM token validation
Resolves: RHEL-69900 Upgrade to ipa-server-4.12.2-1.el9 OTP-based bind to LDAP without enforceldapotp is broken

Resolves: RHEL-68448 ipa trust-add fails in FIPS mode with an internal error has occurred
Resolves: RHEL-69301 Support GSSAPI in Cockpit on IPA servers

Resolves: RHEL-67414 ipa dns-zone --allow-query '!198.18.2.0/24;any;' fails with Unrecognized IPAddress flags
Resolves: RHEL-67410 ipa-migrate should also migrate DNS forward zones
Resolves: RHEL-67409 ipa-migrate in stage mode fails with TypeError: 'NoneType' object is not iterable
Resolves: RHEL-66964 Include latest fixes in python3-ipatests packages
Resolves: RHEL-64135 IDP configuration in the IdM WebUI shows Organization is required

Bump release for rebuild

Resolves: RHEL-61642 Uninstall ACME separately during PKI uninstallation

Related: RHEL-59788 Rebase Samba to the latest 4.21.x release
Resolves: RHEL-61642 Uninstall ACME separately during PKI uninstallation
Resolves: RHEL-56963 SSSD offline causing test-adtrust-install failure
Resolves: RHEL-56473 Include latest fixes in python3-ipatests packages
Resolves: RHEL-48104 Default hbac rules are duplicated on remote server post ipa-migrate in prod-mode
Resolves: RHEL-45330 [RFE] add a tool to quickly detect and fix issues with IPA ID ranges
Resolves: RHEL-40376 SID generation task is failing when SELinux is in Enforcing mode
Resolves: RHEL-4915 Last expired OTP token would be considered as still assigned to the user

Resolves: RHEL-54546 Covscan issues: Resource Leak
Resolves: RHEL-49602 misleading warning for missing ipa-selinux-nfast package on luna hsm h/w
Resolves: RHEL-40359 With unreachable AD, ipa trust returns an internal error