ipa-server-4.12.1-3.el10 RPM for s390x

From CentOS Stream 10 AppStream for s390x

IPA is an integrated solution to provide centrally managed Identity (users,
hosts, services), Authentication (SSO, 2FA), and Authorization
(host access control, SELinux user roles, services). The solution provides
features for further integration with Linux based clients (SUDO, automount)
and integration with Active Directory based infrastructures (Trusts).
If you are installing an IPA server, you need to install this package.

Provides

• ipa-server
• config(ipa-server)
• freeipa-server
• ipa-server(s390-64)
• libipa_dns.so()(64bit)
• libipa_enrollment_extop.so()(64bit)
• libipa_extdom_extop.so()(64bit)
• libipa_graceperiod.so()(64bit)
• libipa_lockout.so()(64bit)
• libipa_modrdn.so()(64bit)
• libipa_otp_counter.so()(64bit)
• libipa_otp_lasttoken.so()(64bit)
• libipa_pwd_extop.so()(64bit)
• libipa_range_check.so()(64bit)
• libipa_repl_version.so()(64bit)
• libipa_sidgen.so()(64bit)
• libipa_sidgen_task.so()(64bit)
• libipa_uuid.so()(64bit)
• libipa_winsync.so()(64bit)
• libtopology.so()(64bit)

Requires

• /bin/sh
• /bin/sh
• /bin/sh
• /bin/sh
• /bin/sh
• /etc/systemd/system
• /usr/bin/python3
• /usr/bin/sh
• 389-ds-base >= 2.1.0
• 389-ds-base >= 2.1.0
• acl
• certmonger >= 0.79.17-1
• chrony
• config(ipa-server) = 4.12.1-3.el10
• cracklib-dicts
• cyrus-sasl-gssapi(s390-64)
• font(fontawesome)
• gssproxy >= 0.7.0-2
• gzip
• httpd >= 2.4.37-21
• ipa-client = 4.12.1-3.el10
• ipa-common = 4.12.1-3.el10
• ipa-server-common = 4.12.1-3.el10
• krb5-kdb-version = 9.0
• krb5-server >= 1.21
• krb5-server >= 1.21
• libc.so.6()(64bit)
• libc.so.6(GLIBC_2.2)(64bit)
• libc.so.6(GLIBC_2.25)(64bit)
• libc.so.6(GLIBC_2.3)(64bit)
• libc.so.6(GLIBC_2.3.4)(64bit)
• libc.so.6(GLIBC_2.34)(64bit)
• libc.so.6(GLIBC_2.38)(64bit)
• libc.so.6(GLIBC_2.4)(64bit)
• libc.so.6(GLIBC_2.8)(64bit)
• libcom_err.so.2()(64bit)
• libcrypto.so.3()(64bit)
• libcrypto.so.3(OPENSSL_3.0.0)(64bit)
• libgcc_s.so.1()(64bit)
• libgcc_s.so.1(GCC_3.0)(64bit)
• libgcc_s.so.1(GCC_3.3.1)(64bit)
• libgssapi_krb5.so.2()(64bit)
• libgssapi_krb5.so.2(gssapi_krb5_2_MIT)(64bit)
• libjansson.so.4()(64bit)
• libjansson.so.4(libjansson.so.4)(64bit)
• libk5crypto.so.3()(64bit)
• libk5crypto.so.3(k5crypto_3_MIT)(64bit)
• libkrad.so.0()(64bit)
• libkrad.so.0(krad_0_MIT)(64bit)
• libkrb5.so.3()(64bit)
• libkrb5.so.3(krb5_3_MIT)(64bit)
• liblber.so.2()(64bit)
• liblber.so.2(OPENLDAP_2.200)(64bit)
• libldap.so.2()(64bit)
• libldap.so.2(OPENLDAP_2.200)(64bit)
• libndr-krb5pac.so.0()(64bit)
• libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)
• libndr-standard.so.0()(64bit)
• libndr.so.4()(64bit)
• libndr.so.4(NDR_0.0.1)(64bit)
• libpopt.so.0()(64bit)
• libpopt.so.0(LIBPOPT_0)(64bit)
• libpwquality
• libpwquality.so.1()(64bit)
• libpwquality.so.1(LIBPWQUALITY_1.0)(64bit)
• libsamba-errors.so.1()(64bit)
• libsamba-errors.so.1(SAMBA_ERRORS_1.0.0)(64bit)
• libsamba-util.so.0()(64bit)
• libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)
• libsss_certmap.so.0()(64bit)
• libsss_certmap.so.0(SSS_CERTMAP_0.0)(64bit)
• libsss_nss_idmap.so.0()(64bit)
• libsss_nss_idmap.so.0(SSS_NSS_IDMAP_0.1.0)(64bit)
• libsss_nss_idmap.so.0(SSS_NSS_IDMAP_0.4.0)(64bit)
• libsss_nss_idmap.so.0(SSS_NSS_IDMAP_0.6.0)(64bit)
• libtalloc.so.2()(64bit)
• libtalloc.so.2(TALLOC_2.0.2)(64bit)
• libtevent.so.0()(64bit)
• libunistring.so.5()(64bit)
• libuuid.so.1()(64bit)
• libuuid.so.1(UUID_1.0)(64bit)
• libverto.so.1()(64bit)
• mod_auth_gssapi >= 1.5.0
• mod_lookup_identity >= 0.9.9
• mod_session >= 2.4.37-21
• mod_ssl >= 2.4.37-21
• nss-tools >= 3.44.0-4
• oddjob
• open-sans-fonts
• openldap-clients > 2.4.35-4
• openssl > 1.1.1i
• p11-kit
• pki-ca >= 10.10.5
• pki-kra >= 10.10.5
• policycoreutils >= 2.1.12-5
• python3
• python3
• python3-gssapi >= 1.2.0-5
• python3-ipaserver = 4.12.1-3.el10
• python3-ldap >= 3.1.0-1
• python3-mod_wsgi
• python3-systemd
• rpmlib(CompressedFileNames) <= 3.0.4-1
• rpmlib(FileDigests) <= 4.6.0-1
• rpmlib(PayloadFilesHavePrefix) <= 4.0-1
• rpmlib(PayloadIsZstd) <= 5.4.18-1
• rpmlib(RichDependencies) <= 4.12.0-1
• rtld(GNU_HASH)
• samba-client-libs >= 4.20.2-103.el10
• selinux-policy >= 38.1.1-1
• selinux-policy-base >= 38.1.1-1
• shadow-utils
• slapi-nis >= 0.56.4
• softhsm >= 2.0.0rc1-1
• sssd-dbus >= 2.9.0
• systemd-units >= 246.6-3
• systemd-units >= 246.6-3
• systemd-units >= 246.6-3
• systemd-units >= 246.6-3
• systemd-units >= 246.6-3
• tar

License

GPL-3.0-or-later

Changelog

* Thu Jul 18 2024 Florence Blanc-Renaud <flo@redhat.com> - 4.12.1-3
  - Resolves: RHEL-49452 Include latest fixes in python3-ipatests packages
  - Resolves: RHEL-49433 Adjust "ipa config-mod --addattr ipaconfigstring=EnforceLDAPOTP" to allow for non OTP users in some cases
  - Resolves: RHEL-49432 ipa-migrate stage-mode is failing with error: Modifying a mapped attribute in a managed entry is not allowed
  - Resolves: RHEL-49413 ipa-migrate with -Z option fails with ValueError: option error
  - Resolves: RHEL-47157 ipa-migrate -V options fails to display version
  - Resolves: RHEL-47148 Pagure #9629: Syntax error uninstalling the selinux-luna subpackage
  - Resolves: RHEL-40892 ipa-server-install: token_password_file read in kra.install_check after calling hsm_validator in ca.install_check
* Mon Jul 08 2024 Florence Blanc-Renaud <flo@redhat.com> - 4.12.1-2
  - Resolves: RHEL-46607 kdc.crt certificate not getting automatically renewed by certmonger in IPA Hidden replica
  - Resolves: RHEL-46606 ipa-client rpm post script creates always ssh_config.orig even if nothing needs to be changed
  - Resolves: RHEL-46605 IPA Web UI not showing replication agreement for non-admin users
  - Resolves: RHEL-46592 [RFE] Allow IPA SIDgen task to continue if it finds an entity that SID can't be assigned to
  - Resolves: RHEL-46556 Include latest fixes in python3-ipatests packages
  - Resolves: RHEL-42705 PSKC.xml issues with ipa_otptoken_import.py
* Mon Jun 24 2024 Troy Dawson <tdawson@redhat.com> - 4.12.1-1.1
  - Bump release for June 2024 mass rebuild
* Wed Jun 12 2024 Julien Rische <jrische@redhat.com> - 4.12.1-1
  - Resolves: RHEL-32233 CVE-2024-3183 freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force
  - Resolves: RHEL-40881 CVE-2024-2698 freeipa: delegation rules allow a proxy service to impersonate any user to access another target service
* Tue Jun 04 2024 Florence Blanc-Renaud <flo@redhat.com> - 4.12.0-1
  - Resolves: RHEL-39144 Rebase ipa to the latest 4.12 version for RHEL 10
  - Resolves: RHEL-30537 ipa: freeipa: argument injection into the username field of the /ipa/session/login_password requests
* Thu Feb 22 2024 Troy Dawson <tdawson@redhat.com> - 4.11.1-4
  - Bump release to rebuild on correct samba
* Thu Feb 08 2024 Alexander Bokovoy <abokovoy@redhat.com> - 4.11.1-3
  - Support 389-ds with lmdb backend
* Wed Jan 24 2024 Fedora Release Engineering <releng@fedoraproject.org> - 4.11.1-2
  - Rebuild against Samba 4.20rc1
  - Fix memory leak in Kerberos KDC driver
  - Fix possible crash in IPA command line tool when accessing Kerberos credentials
  - Compatibility fix for Python Cryptography 42.0.0
  - NetBIOS defaults fix
  - Fix default host keytab retrieval permissions
* Wed Jan 24 2024 Fedora Release Engineering <releng@fedoraproject.org> - 4.11.1-1.2
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Fri Jan 19 2024 Fedora Release Engineering <releng@fedoraproject.org> - 4.11.1-1.1
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Wed Jan 10 2024 Alexander Bokovoy <abokovoy@redhat.com> - 4.11.1-1
  - Security release: CVE-2023-5455
  - Resolves: rhbz#2257646
* Wed Nov 08 2023 Alexander Bokovoy <abokovoy@redhat.com> - 4.11.0-7
  - ipalib: fix the IPACertificate validity dates (python 3.12 compatibility)
  - Handle PKI revocation response differences in JSON API
  - Allow removal of minimal length from a custom password policy
* Mon Oct 23 2023 Alexander Bokovoy <abokovoy@redhat.com> - 4.11.0-6
  - Adopt trust to AD code to Samba changes in case SIDs are malformed
* Tue Oct 03 2023 Alexander Bokovoy <abokovoy@redhat.com> - 4.11.0-5
  - FreeIPA 4.11.0 release
  - Simplify Fedora spec file
  - Release notes: https://www.freeipa.org/release-notes/4-11-0.html
* Mon Sep 18 2023 Alexander Bokovoy <abokovoy@redhat.com> - 4.11.0-4.beta1
  - Depend on selinux-policy-38.28-1.fc39
  - Add SELinux policy for passkey_child to be used without ipa-otpd
  - Related: rhbz#2238474
* Tue Sep 12 2023 Alexander Bokovoy <abokovoy@redhat.com> - 4.11.0-3.beta1
  - Restore properly SELinux context during IPA client uninstallation
  - Related: rhbz#2238474
* Tue Sep 12 2023 Alexander Bokovoy <abokovoy@redhat.com> - 4.11.0-2.beta1
  - Set 'sssd_use_usb' SELinux boolean when enrolling IPA client
  - Resolves: rhbz#2238474
* Mon Aug 21 2023 Alexander Bokovoy <abokovoy@redhat.com> - 4.11.0-1.beta1
  - FreeIPA 4.11.0 beta 1
  - Release notes: https://www.freeipa.org/release-notes/4-11-0-beta.html
* Wed Jul 19 2023 Fedora Release Engineering <releng@fedoraproject.org> - 4.10.2-1.3
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Wed Jul 05 2023 Miro Hrončok <mhroncok@redhat.com> - 4.10.2-1.2
  - Use ssl.match_hostname from urllib3 as it was removed from Python 3.12
* Tue Jun 27 2023 Python Maint <python-maint@redhat.com> - 4.10.2-1.1
  - Rebuilt for Python 3.12
* Tue Jun 13 2023 Alexander Bokovoy <abokovoy@redhat.com> - 4.10.2-1
  - Upstream release FreeIPA 4.10.2
  - Synchronize patches with CentOS 9 Stream
* Mon May 15 2023 Alexander Bokovoy <abokovoy@redhat.com> - 4.10.1-5
  - Support python-cryptography 40.0
* Thu Mar 30 2023 Jerry James <loganjerry@gmail.com> - 4.10.1-4
  - Change fontawesome-fonts R to match fontawesome 4.x
* Fri Jan 20 2023 Alexander Bokovoy <abokovoy@redhat.com> - 4.10.1-3
  - Rebuild against Samba 4.18.0RC1
* Thu Jan 19 2023 Fedora Release Engineering <releng@fedoraproject.org> - 4.10.1-2.1
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Thu Dec 01 2022 Alexander Bokovoy <abokovoy@redhat.com> - 4.10.1-2
  - Rebuild against krb5-1.20.1-1
* Sun Nov 27 2022 Alexander Bokovoy <abokovoy@redhat.com> - 4.10.1-1
  - Upstream release FreeIPA 4.10.1
* Wed Sep 14 2022 Alexander Bokovoy <abokovoy@redhat.com> - 4.10.0-6
  - Rebuild against final samba 4.17.0 release
* Wed Aug 24 2022 Adam Williamson <awilliam@redhat.com> - 4.10.0-5
  - Rebuild against new samba-client-libs (for F37)
* Wed Aug 24 2022 Thomas Woerner <twoerner@redhat.com> - 4.10.0-4
  - Disabling gracelimit does not prevent LDAP binds
  - webui: Allow grace login limit
  - Fix dns resolver for nameservers with ports
  - Set passwordgracelimit to match global policy on group pw policies
* Tue Aug 09 2022 Adam Williamson <awilliam@redhat.com> - 4.10.0-3
  - Rebuild against new libndr
* Tue Jul 26 2022 Alexander Bokovoy <abokovoy@redhat.com> - 4.10.0-2
  - Rebuild against samba-4.16.3-2.fc37
  - Resolves: rhbz#2110746
* Thu Jul 21 2022 Fedora Release Engineering <releng@fedoraproject.org> - 4.10.0-1.1
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild

Files

/etc/dbus-1/system.d/org.freeipa.server.conf
/etc/oddjobd.conf.d/ipa-server.conf
/usr/lib/.build-id
/usr/lib/.build-id/04
/usr/lib/.build-id/04/7aab84a81ece6fdf610746548d137d34997156
/usr/lib/.build-id/25
/usr/lib/.build-id/25/7e37d127db492c389ef55e38169456d7e80aa8
/usr/lib/.build-id/25/b11885a8dd8f56ae3a378dec018c36fc4419ac
/usr/lib/.build-id/28
/usr/lib/.build-id/28/f37f1f84f1baadb43d77aa3f2c1c9a694490fa
/usr/lib/.build-id/38
/usr/lib/.build-id/38/3d9f7ab9ce4cfb7793de2491e8af24ae87c8f2
/usr/lib/.build-id/49
/usr/lib/.build-id/49/c23f684f5d08bbfebb33380f0777d3dd949039
/usr/lib/.build-id/6b
/usr/lib/.build-id/6b/9f8eb582e7a3b5f5eb40d622d153e409449384
/usr/lib/.build-id/a9
/usr/lib/.build-id/a9/db356382029ed1685add86ae297cdca0ef3832
/usr/lib/.build-id/b8
/usr/lib/.build-id/b8/9fb859f164e73352ddb578df08e6806b24aedc
/usr/lib/.build-id/c4
/usr/lib/.build-id/c4/6a2bc3892c80d735902341ce590963e7fdb0d3
/usr/lib/.build-id/c6
/usr/lib/.build-id/c6/526dba090b4c7c0657520cff9ca9f590690c1a
/usr/lib/.build-id/d8
/usr/lib/.build-id/d8/a634777cb4f70980448139febf938df0add915
/usr/lib/.build-id/d9
/usr/lib/.build-id/d9/b64b5cdb3625fe7512dc217cdb397c90a534b3
/usr/lib/.build-id/eb
/usr/lib/.build-id/eb/9cdb6499178f6978d46fd2835a18eef4621105
/usr/lib/.build-id/f8
/usr/lib/.build-id/f8/c40834fe0db35f27746e697a7aaf47043919d4
/usr/lib/.build-id/fa
/usr/lib/.build-id/fa/7933df728acd7534aaa55ccec1e5ff6a9799d5
/usr/lib/.build-id/fb
/usr/lib/.build-id/fb/558cdaca06528806769ce90f3195e1fa157754
/usr/lib/.build-id/ff
/usr/lib/.build-id/ff/3d5ab7a8781ba4b810ac545dd2877ab6e46c14
/usr/lib/.build-id/ff/8db3662ea7b4a0d3c4668c4dffc5873385d948
/usr/lib/systemd/catalog/ipa.catalog
/usr/lib/systemd/system/ipa-ccache-sweep.service
/usr/lib/systemd/system/ipa-ccache-sweep.timer
/usr/lib/systemd/system/ipa-otpd.socket
/usr/lib/systemd/system/ipa-otpd@.service
/usr/lib/systemd/system/ipa.service
/usr/lib64/dirsrv/plugins/libipa_dns.so
/usr/lib64/dirsrv/plugins/libipa_enrollment_extop.so
/usr/lib64/dirsrv/plugins/libipa_extdom_extop.so
/usr/lib64/dirsrv/plugins/libipa_graceperiod.so
/usr/lib64/dirsrv/plugins/libipa_lockout.so
/usr/lib64/dirsrv/plugins/libipa_modrdn.so
/usr/lib64/dirsrv/plugins/libipa_otp_counter.so
/usr/lib64/dirsrv/plugins/libipa_otp_lasttoken.so
/usr/lib64/dirsrv/plugins/libipa_pwd_extop.so
/usr/lib64/dirsrv/plugins/libipa_range_check.so
/usr/lib64/dirsrv/plugins/libipa_repl_version.so
/usr/lib64/dirsrv/plugins/libipa_sidgen.so
/usr/lib64/dirsrv/plugins/libipa_sidgen_task.so
/usr/lib64/dirsrv/plugins/libipa_uuid.so
/usr/lib64/dirsrv/plugins/libipa_winsync.so
/usr/lib64/dirsrv/plugins/libtopology.so
/usr/lib64/krb5/plugins/kdb/ipadb.so
/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit
/usr/libexec/certmonger/ipa-server-guard
/usr/libexec/ipa
/usr/libexec/ipa/certmonger
/usr/libexec/ipa/certmonger/renew_ca_cert
/usr/libexec/ipa/certmonger/renew_kdc_cert
/usr/libexec/ipa/certmonger/renew_ra_cert
/usr/libexec/ipa/certmonger/renew_ra_cert_pre
/usr/libexec/ipa/certmonger/restart_dirsrv
/usr/libexec/ipa/certmonger/restart_httpd
/usr/libexec/ipa/certmonger/stop_pkicad
/usr/libexec/ipa/custodia
/usr/libexec/ipa/custodia/ipa-custodia-dmldap
/usr/libexec/ipa/custodia/ipa-custodia-pki-tomcat
/usr/libexec/ipa/custodia/ipa-custodia-pki-tomcat-wrapped
/usr/libexec/ipa/custodia/ipa-custodia-ra-agent
/usr/libexec/ipa/ipa-ccache-sweeper
/usr/libexec/ipa/ipa-custodia
/usr/libexec/ipa/ipa-custodia-check
/usr/libexec/ipa/ipa-httpd-kdcproxy
/usr/libexec/ipa/ipa-httpd-pwdreader
/usr/libexec/ipa/ipa-otpd
/usr/libexec/ipa/ipa-pki-retrieve-key
/usr/libexec/ipa/ipa-pki-wait-running
/usr/libexec/ipa/ipa-print-pac
/usr/libexec/ipa/ipa-subids
/usr/libexec/ipa/oddjob
/usr/libexec/ipa/oddjob/org.freeipa.server.config-enable-sid
/usr/libexec/ipa/oddjob/org.freeipa.server.conncheck
/usr/libexec/ipa/oddjob/org.freeipa.server.trust-enable-agent
/usr/sbin/ipa-acme-manage
/usr/sbin/ipa-advise
/usr/sbin/ipa-backup
/usr/sbin/ipa-ca-install
/usr/sbin/ipa-cacert-manage
/usr/sbin/ipa-cert-fix
/usr/sbin/ipa-compat-manage
/usr/sbin/ipa-crlgen-manage
/usr/sbin/ipa-csreplica-manage
/usr/sbin/ipa-kra-install
/usr/sbin/ipa-ldap-updater
/usr/sbin/ipa-managed-entries
/usr/sbin/ipa-migrate
/usr/sbin/ipa-nis-manage
/usr/sbin/ipa-otptoken-import
/usr/sbin/ipa-pkinit-manage
/usr/sbin/ipa-replica-conncheck
/usr/sbin/ipa-replica-install
/usr/sbin/ipa-replica-manage
/usr/sbin/ipa-restore
/usr/sbin/ipa-server-certinstall
/usr/sbin/ipa-server-install
/usr/sbin/ipa-server-upgrade
/usr/sbin/ipa-winsync-migrate
/usr/sbin/ipactl
/usr/share/doc/ipa-server
/usr/share/doc/ipa-server/Contributors.txt
/usr/share/doc/ipa-server/README.md
/usr/share/licenses/ipa-server
/usr/share/licenses/ipa-server/COPYING
/usr/share/man/man1/ipa-acme-manage.1.gz
/usr/share/man/man1/ipa-advise.1.gz
/usr/share/man/man1/ipa-backup.1.gz
/usr/share/man/man1/ipa-ca-install.1.gz
/usr/share/man/man1/ipa-cacert-manage.1.gz
/usr/share/man/man1/ipa-cert-fix.1.gz
/usr/share/man/man1/ipa-compat-manage.1.gz
/usr/share/man/man1/ipa-crlgen-manage.1.gz
/usr/share/man/man1/ipa-csreplica-manage.1.gz
/usr/share/man/man1/ipa-kra-install.1.gz
/usr/share/man/man1/ipa-ldap-updater.1.gz
/usr/share/man/man1/ipa-managed-entries.1.gz
/usr/share/man/man1/ipa-migrate.1.gz
/usr/share/man/man1/ipa-nis-manage.1.gz
/usr/share/man/man1/ipa-otptoken-import.1.gz
/usr/share/man/man1/ipa-pkinit-manage.1.gz
/usr/share/man/man1/ipa-replica-conncheck.1.gz
/usr/share/man/man1/ipa-replica-install.1.gz
/usr/share/man/man1/ipa-replica-manage.1.gz
/usr/share/man/man1/ipa-restore.1.gz
/usr/share/man/man1/ipa-server-certinstall.1.gz
/usr/share/man/man1/ipa-server-install.1.gz
/usr/share/man/man1/ipa-server-upgrade.1.gz
/usr/share/man/man1/ipa-winsync-migrate.1.gz
/usr/share/man/man8/ipactl.8.gz

Generated by rpm2html 1.8.1

Fabrice Bellet, Fri Nov 15 08:36:54 2024