Resolves: RHEL-12589 ipa: Invalid CSRF protection
Resolves: RHEL-19748 ipa hbac-test did not report that it hit an arbitrary search limit
Resolves: RHEL-21059 'DogtagCertsConfigCheck' fails, displaying the error message 'Malformed directive: ca.signing.certnickname=caSigningCert cert-pki-ca'
Resolves: RHEL-21804 ipa client 4.10.2 - Failed to obtain host TGT
Resolves: RHEL-21809 CA less servers are failing to be added in topology segment for domain suffix
Resolves: RHEL-21810 ipa-client-install --automount-location does not work
Resolves: RHEL-21811 Handle change in behavior of pki-server ca-config-show in pki 11.5.0
Resolves: RHEL-21812 Backport latest test fixes in ipa
Resolves: RHEL-21813 krb5kdc fails to start when pkinit and otp auth type is enabled in ipa
Resolves: RHEL-21815 IPA 389ds plugins need to have better logging and tracing
Resolves: RHEL-21937 Make sure a default NetBIOS name is set if not passed in by ADTrust instance constructor

Resolves: RHEL-16985 Handle samba 4.19 changes in samba.security.dom_sid()

Resolves: RHEL-14428 healthcheck reports nsslapd-accesslog-logbuffering is set to 'off'

Resolves: RHEL-14292 Backport latest test fixes in python3-ipatests
Resolves: RHEL-15443 Server install: failure to install with externally signed CA because of timezone issue
Resolves: RHEL-15444 Minimum length parameter in pwpolicy cannot be removed with empty string
Resolves: RHEL-14842 Upstream xmlrpc tests are failing in RHEL9.4

Resolves: RHEL-11652 Rebase ipa to latest 4.11.x version for RHEL 9.4

Resolves: rhbz#2231847 RHEL 8.8 & 9.2 fails to create AD trust with STIG applied
Resolves: rhbz#2232056 Include latest test fixes in python3-ipatests

Resolves: rhbz#2229712 Delete operation protection for admin user
Resolves: rhbz#2227831 Interrupt request processing in ipadb_fill_info3() if connection to 389ds is lost
Resolves: rhbz#2227784 libipa_otp_lasttoken plugin memory leak
Resolves: rhbz#2224570 Improved error messages are needed when attempting to add a non-existing idp to a user
Resolves: rhbz#2230251 Backport latest test fixes to python3-ipatests

Resolves: rhbz#2192969 Better handling of the command line and web UI cert search and/or list features
Resolves: rhbz#2214933 Uninstalling of the IPA server is encountering a failure during the unconfiguration of the CA (Unconfiguring CA)
Resolves: rhbz#2216114 After updating the RHEL from 8.7 to 8.8, IPA services fails to start
Resolves: rhbz#2216549 Upgrade to 4.9.10-6.0.1 fails: attributes are managed by topology plugin
Resolves: rhbz#2216611 Backport latest test fixes in python3-ipatests
Resolves: rhbz#2216872 User authentication failing on OTP validation using multiple tokens, succeeds with password only

Resolves: rhbz#2196426 [Rebase] Rebase ipa to latest 4.10.x release for RHEL 9.3
Resolves: rhbz#2192969 Better handling of the command line and web UI cert search and/or list features
Resolves: rhbz#2192625 Better catch of the IPA web UI event "IPA Error 4301:CertificateOperationError", and IPA httpd error CertificateOperationError
Resolves: rhbz#2188567 IPA client Kerberos configuration incompatible with java
Resolves: rhbz#2182683 Tolerate absence of PAC ticket signature depending of domain and servers capabilities [rhel-9]
Resolves: rhbz#2180914 Sequence processing failures for group_add using server context
Resolves: rhbz#2165880 Add RBCD support to IPA
Resolves: rhbz#2160399 get_ranges - [file ipa_sidgen_common.c, line 276]: Failed to convert LDAP entry to range struct

Resolves: rhbz#2169632 Backport latest test fixes in python3-ipatests

Resolves: rhbz#2162656 Passwordless (GSSAPI) SSH not working for subdomain
Resolves: rhbz#2166326 Removing the last DNS type for ipa-ca does not work
Resolves: rhbz#2167473 RFE - Add a warning note about possible performance impact of the Auto Member rebuild task
Resolves: rhbz#2168244 requestsearchtimelimit=0 doesn't seems to be work with ipa-acme-manage pruning command

Resolves: rhbz#2161284 'ERROR Could not remove /tmp/tmpbkw6hawo.ipabkp' can be seen prior to 'ipa-client-install' command was successful
Resolves: rhbz#2164403 ipa-trust-add with --range-type=ipa-ad-trust-posix fails while creating an ID range
Resolves: rhbz#2162677 RFE: Implement support for PKI certificate and request pruning
Resolves: rhbz#2167312 - Backport latest test fixes in python3-ipatests

Rebuild against krb5 1.20.1 ABI
Resolves: rhbz#2155425

Resolves: rhbz#2148887 MemberManager with groups fails
Resolves: rhbz#2150335 idm:client is missing dependency on krb5-pkinit

Resolves: rhbz#2141315 [Rebase] Rebase ipa to latest 4.10.x release for RHEL 9.2
Resolves: rhbz#2094673 ipa-client-install should just use system wide CA store and do not specify TLS_CACERT in ldap.conf
Resolves: rhbz#2117167 After leapp upgrade on ipa-client ipa-server package installation failed. (`REQ_FULL_WITH_MEMBERS` returns object from wrong domain)
Resolves: rhbz#2127833 Password Policy Grace login limit allows invalid maximum value
Resolves: rhbz#2143224 [RFE] add certificate support to ipa-client instead of one time password
Resolves: rhbz#2144736 vault interoperability with older RHEL systems is broken
Resolves: rhbz#2148258 ipa-client-install does not maintain server affinity during installation
Resolves: rhbz#2148379 Add warning for empty targetattr when creating ACI with RBAC
Resolves: rhbz#2148380 OTP token sync always returns OK even with random numbers
Resolves: rhbz#2148381 Deprecated feature idnssoaserial in IdM appears when creating reverse dns zones
Resolves: rhbz#2148382 Introduction of URI records for kerberos breaks location functionality

Resolves: rhbz#2124547 Attempt to log in as "root" user with admin's password in Web UI does not properly fail
Resolves: rhbz#2137555 Attempt to log in as "root" user with admin's password in Web UI does not properly fail [rhel-9.1.0.z]