ELBA-2016-1036

ELBA-2016-1036 - ipa bug fix update

Type:	BUG
Severity:	NA
Release Date:	2016-05-12

Description

[4.2.0-15.0.1.15]
- Drop redhat-access-plugin-ipa requires for OL7
Blank out header-logo.png product-name.png
Replace login-screen-logo.png [20362818]

[4.2.0-15.15]
- Related: #1327197 Crash during IPA upgrade due to slapd
- spec file: update minimum required version of slapi-nis

[4.2.0-15.14]
- Rebuild against newer Samba version
- Related: #1322690

[4.2.0-15.13]
- Resolves: #1324060 Installers fail when there are multiple versions of the
same certificate
- certdb: never use the -r option of certutil

[4.2.0-15.12]
- Resolves: #1309382 issues with migration from RHEL 6 self-signed to RHEL 7 CA
IPA setup
- replica install: improvements in the handling of CA-related IPA config
entries

[4.2.0-15.11]
- Resolves: #1311470 ipa trust-add succeded but after that ipa trust-find
returns '0 trusts matched'
- Fix broken trust warnings

[4.2.0-15.10]
- Resolves: #1311470 ipa trust-add succeded but after that ipa trust-find
returns '0 trusts matched'
- Insure the admin_conn is disconnected on stop
- Fix connections to DS during installation
- Renamed patch 1011 to 0196, as it was merged upstream

[4.2.0-15.9]
- Resolves: #1311468 shared certificateProfiles container is missing on a
freshly installed RHEL7.2 system
- upgrade: unconditional import of certificate profiles into LDAP
- Resolves: #1311470 ipa trust-add succeded but after that ipa trust-find
returns '0 trusts matched'
- upgrade: fix config of sidgen and extdom plugins
- trusts: use ipaNTTrustPartner attribute to detect trust entries
- Warn user if trust is broken
- fix upgrade: wait for proper DS socket after DS restart
- Resolves: #1311502 [RFE] compat tree: show AD members of IPA groups
- slapi-nis: update configuration to allow external members of IPA groups

[4.2.0-15.8]
- Resolves: #1303052 install fails when locale is 'fr_FR.UTF-8'
- Do not decode HTTP reason phrase from Dogtag
- Resolves: #1303059 --setup-dns and other options is forgotten for using an
external PKI
- installer: Propagate option values from components instead of copying them.
- installer: Fix logic of reading option values from cache.
- Resolves: #1309362 User should be notified for wrong password in password
reset page
- Fixed login error message box in LoginScreen page
- Resolves: #1309382 issues with migration from RHEL 6 self-signed to RHEL 7 CA
IPA setup
- ipa-ca-install: print more specific errors when CA is already installed
- cert renewal: import all external CA certs on IPA CA cert renewal
- CA install: explicitly set dogtag_version to 10
- fix standalone installation of externally signed CA on IPA master
- replica install: validate DS and HTTP server certificates

[4.2.0-15.7]
- Resolves: #1304333 In IPA-AD trust environment some secondary IPA based Posix
groups are missing
- ipa-kdb: map_groups() consider all results

Updated Packages

Release/Architecture

Filename

MD5sum

Superseded By Advisory

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team