<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/loose.dtd">
<html lang="en">
<head>
<meta content="text/html; charset=US-ASCII" http-equiv="Content-Type">
<title>
GitLab
</title>



<style>img {
max-width: 100%; height: auto;
}
</style>
</head>
<body>
<div class="content">

<h3>
Timo Aaltonen pushed to branch master
at <a href="https://salsa.debian.org/freeipa-team/freeipa">FreeIPA packaging / freeipa</a>
</h3>
<h4>
Commits:
</h4>
<ul>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/24c6ea3c9f2df757b3d714044c16083716e377ca">24c6ea3c</a></strong>
<div>
<span>by Stanislav Levin</span>
<i>at 2020-03-19T12:48:28+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">pki-proxy: Don't rely on running apache until it's configured

This partially restores the pre-ec73de969f state of `http_proxy`,
which fails to restart the apache service during master
installation. The failure happens because of apache is not
configured yet on 'pki-tomcatd' installation phase. The mentioned
code and proposed one relies on the installer which bootstraps the
master.

Fixes: https://pagure.io/freeipa/issue/8233
Signed-off-by: Stanislav Levin <slev@altlinux.org>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/7905891341197cb90faf635cf93ce63ae7a7a38b">79058913</a></strong>
<div>
<span>by Florence Blanc-Renaud</span>
<i>at 2020-03-19T16:31:30+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">idviews: prevent applying to a master

Custom IDViews should not be applied to IPA master nodes. Add a
check enforcing this rule in idview_apply command.

Fixes: https://pagure.io/freeipa/issue/5662

Signed-off-by: Florence Blanc-Renaud <flo@redhat.com>
Reviewed-By: Christian Heimes <cheimes@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/c37a84628601d369f83546085b7e29be8fe11a59">c37a8462</a></strong>
<div>
<span>by Florence Blanc-Renaud</span>
<i>at 2020-03-19T16:31:30+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">xmlrpc tests: add a test for idview-apply on a master

Add a new XMLRPC test trying to apply an IDview:
- to a master
- to a hostgroup containing a master
The command must refuse to apply the IDview to a master node.

Related: https://pagure.io/freeipa/issue/5662

Signed-off-by: Florence Blanc-Renaud <flo@redhat.com>
Reviewed-By: Christian Heimes <cheimes@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/7d4687926e9866c378db8075dd7b55b3c40e71a9">7d468792</a></strong>
<div>
<span>by sumenon</span>
<i>at 2020-03-20T11:05:23+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">ipatests: Added testcase to check logrotate is added for healthcheck tool

Issue: freeipa/freeipa-healthcheck#35
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/04cc0450125e3c9e989c3e769a25ba2f1f336060">04cc0450</a></strong>
<div>
<span>by Christian Heimes</span>
<i>at 2020-03-21T07:31:22+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Integrate ipa_custodia policy

ipa-custodia is an internal service for IPA. The upstream SELinux policy
has a separate module for ipa_custodia. Fold the current policy from
Fedora rawhide into ipa's SELinux policy.

Related: https://pagure.io/freeipa/issue/6891
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/7d525ab4308060435808a311de55a76fb26a28c6">7d525ab4</a></strong>
<div>
<span>by Christian Heimes</span>
<i>at 2020-03-21T07:31:22+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Move freeipa-selinux dependency to freeipa-common

The SELinux policy defines file contexts that are also used by clients,
e.g. /var/log/ipa/. Make freeipa-selinux a dependency of freeipa-common.

Related: https://pagure.io/freeipa/issue/6891
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/127b8d9cf23bf65aa42e6ee9ed8d7f8628bbac19">127b8d9c</a></strong>
<div>
<span>by Alexander Bokovoy</span>
<i>at 2020-03-21T07:32:52+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Prevent adding IPA objects as external members of external groups

The purpose of external groups in FreeIPA is to be able to reference
objects only existing in trusted domains. These members get resolved
through SSSD interfaces but there is nothing that prevents SSSD from
resolving any IPA user or group if they have security identifiers
associated.

Enforce a check that a SID returned by SSSD does not belong to IPA
domain and raise a validation error if this is the case. This would
prevent adding IPA users or groups as external members of an external
group.

RN: Command 'ipa group-add-member' allowed to specify any user or group
RN: for '--external' option. A stricter check is added to verify that
RN: a group or user to be added as an external member does not come
RN: from IPA domain.

Fixes: https://pagure.io/freeipa/issue/8236
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/ebb3c22ddb998997eb05e7bd4da2157e88b6c8f3">ebb3c22d</a></strong>
<div>
<span>by Florence Blanc-Renaud</span>
<i>at 2020-03-21T12:20:55+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">ipatests: wait for SSSD to become online in backup/restore tests

The backup/restore tests are calling 'id admin' after restore
to make sure that the user name can be resolved after a restore.
The test should wait for SSSD backend to become online before
doing any check, otherwise there is a risk that the call to
'id admin' fails.

Fixes: https://pagure.io/freeipa/issue/8228

Signed-off-by: Florence Blanc-Renaud <flo@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Sergey Orlov <sorlov@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/7974ac9f8c7969df85f689d94f5b30c18e661daa">7974ac9f</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-03-23T09:17:06+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Test that ipa-healthcheck human output translates error strings

The code rather than the string was being displayed in human
output for non-SUCCESS messages. Verify that in case of an error
the right output will be present.

https://bugzilla.redhat.com/show_bug.cgi?id=1752849

Reviewed-By: Mohammad Rizwan Yusuf <myusuf@redhat.com>
Reviewed-By: Sumedh Sidhaye <ssidhaye@redhat.com>
Reviewed-By: Stanislav Levin <slev@altlinux.org>
Reviewed-By: Christian Heimes <cheimes@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/0e9b020db201ff5797f0dabff05c3fc16a9bf79a">0e9b020d</a></strong>
<div>
<span>by Sergey Orlov</span>
<i>at 2020-03-24T12:25:01+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">ipatests: remove test_ordering

The test_integration/test_ordering.py is a test for pytest_sourceorder
plugin which is not part of freeipa project, it is not an integration test.

The up to date version of this test is available at project repository:
https://pagure.io/python-pytest-sourceorder/blob/master/f/test_sourceorder.py

Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/f99cfa1443dfa33422eb4a7613d3dd9e921ccacd">f99cfa14</a></strong>
<div>
<span>by Vit Mojzis</span>
<i>at 2020-03-24T13:33:08+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">selinux: disable ipa_custodia when installing custom policy

Since ipa_custodia got integrated into ipa policy package, the upstream policy
module needs to be disabled before ipa module installation (in order to be able
to make changes to the ipa_custodia policy definitions).
Upstream ipa module gets overridden automatically because of higher priority of
the custom module, but there is no mechanism to automatically disable
ipa_custodia.

Related: https://pagure.io/freeipa/issue/6891
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/42aa86fadd7a7f2209e05291be9c76a8497998dd">42aa86fa</a></strong>
<div>
<span>by Christian Heimes</span>
<i>at 2020-03-24T14:02:20+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add pytest OpenSSH transport with password

The pytest_multihost transport does not provide password-based
authentication for OpenSSH transport. The OpenSSH command line tool has
no API to pass in a password securely.

The patch implements a custom transport that uses sshpass hack. It is
not recommended for production but good enough for testing.

Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/f1855dd51e1544a77f1b4a3d4c90f173c29fbed4">f1855dd5</a></strong>
<div>
<span>by Serhii Tsymbaliuk</span>
<i>at 2020-03-24T14:13:42+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1

Ticket: https://pagure.io/freeipa/issue/8239

Signed-off-by: Serhii Tsymbaliuk <stsymbal@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/210619a98f0d8a042a181bab5891bdd595aa5351">210619a9</a></strong>
<div>
<span>by Mohammad Rizwan Yusuf</span>
<i>at 2020-03-24T15:44:54+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Test if schema-compat-entry-attribute is set

This is to ensure if said entry is set after installation with AD.

related: https://pagure.io/freeipa/issue/8193

Signed-off-by: Mohammad Rizwan Yusuf <myusuf@redhat.com>
Reviewed-By: Francois Cami <fcami@redhat.com>
Reviewed-By: Kaleemullah Siddiqui <ksiddiqu@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/3f3fa403a944035cf5531939fe3a2e338da99612">3f3fa403</a></strong>
<div>
<span>by Mohammad Rizwan Yusuf</span>
<i>at 2020-03-24T15:44:54+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Test if schema-compat-entry-attribute is set

This is to ensure if said entry is set after installation.
It also checks if compat tree is disable.

related: https://pagure.io/freeipa/issue/8193

Signed-off-by: Mohammad Rizwan Yusuf <myusuf@redhat.com>
Reviewed-By: Francois Cami <fcami@redhat.com>
Reviewed-By: Kaleemullah Siddiqui <ksiddiqu@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/814b47e85c87bc3c80c91ebd0aa9085ac06b521e">814b47e8</a></strong>
<div>
<span>by Sergey Orlov</span>
<i>at 2020-03-25T09:45:55+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">ipatests: provide AD admin password when trying to establish trust

`ipa trust-add --password` command requires that user provides a password..

Related to: https://pagure.io/freeipa/issue/7895

Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/9ff7b4a411d13ca148d2f53603dbcc812d92380a">9ff7b4a4</a></strong>
<div>
<span>by Alexander Bokovoy</span>
<i>at 2020-03-25T09:49:28+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Keep ipa.pot translation file in git for weblate

Weblate tool sends pull requests that update translations directly.
For this to work, we need to keep ipa.pot in the tree.

Fixes: https://pagure.io/freeipa/issue/8159
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Christian Heimes <cheimes@redhat.com>
(cherry picked from commit 92e36258cee838a378729d06fc4134b5c4428f87)

Reviewed-By: Christian Heimes <cheimes@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/831f4dd320a93d01df6b06058c3ab618a98c9fd8">831f4dd3</a></strong>
<div>
<span>by Alexander Bokovoy</span>
<i>at 2020-03-25T09:49:28+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Update translation infrastructure

1. Build po/ipa.pot every time we update PO files (each build)

2. Drop any rebuilt PO changes if the only difference is in the
   translation file's header in a timestamp or timestamp+bug report
   link.

3. Only apply the logic for dropping the changes if we are operating on
   a git tree checkout because there is no otherwise an easy way to
   detect the changes.

4. Hook strip-po target to the cleanup target to allow dropping unneeded
   translation changes automatically.

5. Finally, strip ipaclient/remote_plugins/* locations from the ipa.pot
   template. This saves us around 23,000 lines from the ipa.pot file and
   reduces visual clutter in the translation files.

This approach allows to avoid unneccesary commits because even when
there are no changes to translation files, po/ipa.pot header would be
updated with a new translation update timestamp.

Fixes: https://pagure.io/freeipa/issue/8159
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Christian Heimes <cheimes@redhat.com>
(cherry picked from commit b4722f3917d6c2a6849931e9c68896f83a0cc09b)

Reviewed-By: Christian Heimes <cheimes@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/e23ba779d3aefd871e348b91e7b0fa003d97c96e">e23ba779</a></strong>
<div>
<span>by Alexander Bokovoy</span>
<i>at 2020-03-25T09:49:28+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">po: update ipa.pot template

Reviewed-By: Christian Heimes <cheimes@redhat.com>
(cherry picked from commit 3fc932a2a859898d718d850fbcd558a1e960e91f)

Reviewed-By: Christian Heimes <cheimes@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/16d9556c6f3d19f73256d6698a7659f78961a378">16d9556c</a></strong>
<div>
<span>by Alexander Bokovoy</span>
<i>at 2020-03-25T09:49:28+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">po: update Bengali translation timestamp

Reviewed-By: Christian Heimes <cheimes@redhat.com>
(cherry picked from commit 0be22a6ae71a3261c9e9333a01dc028f55554924)

Reviewed-By: Christian Heimes <cheimes@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/29e3ade05c8bea23c07ed1a1b5612af01f924d2d">29e3ade0</a></strong>
<div>
<span>by Alexander Bokovoy</span>
<i>at 2020-03-25T09:49:28+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">po: update Catalan translation timestamp

Reviewed-By: Christian Heimes <cheimes@redhat.com>
(cherry picked from commit 6cd244da6be890e577bf381c6303363e2a6f237f)

Reviewed-By: Christian Heimes <cheimes@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/c8ba436c0dad467bf12dec4d4f141916d0b3fbbd">c8ba436c</a></strong>
<div>
<span>by Alexander Bokovoy</span>
<i>at 2020-03-25T09:49:28+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">po: update Czech translation timestamp

Reviewed-By: Christian Heimes <cheimes@redhat.com>
(cherry picked from commit 68cc049124f2acf66b4fdd4588e1fb25d50a9364)

Reviewed-By: Christian Heimes <cheimes@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/0d053d8b1df33f5602ae0e154743f1d1dce2c72d">0d053d8b</a></strong>
<div>
<span>by Alexander Bokovoy</span>
<i>at 2020-03-25T09:49:28+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">po: update German translation

Several translated strings were splitted into smaller ones. The older
translation either is a duplicate of the new one or does not apply
anymore.

Reviewed-By: Christian Heimes <cheimes@redhat.com>
(cherry picked from commit 117893f03e4f26044e7b15053e336b8d42b4f180)

Reviewed-By: Christian Heimes <cheimes@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/37a1e927a1f123b8b9fdbaf815003cb04726f72c">37a1e927</a></strong>
<div>
<span>by Alexander Bokovoy</span>
<i>at 2020-03-25T09:49:28+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">po: update English (United Kingdom) translation timestamp

Reviewed-By: Christian Heimes <cheimes@redhat.com>
(cherry picked from commit 439c488f04b857cfb83f779e450c34b93f7c38bb)

Reviewed-By: Christian Heimes <cheimes@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/7af52df7a8e54afe36649c5436fcfce759111751">7af52df7</a></strong>
<div>
<span>by Alexander Bokovoy</span>
<i>at 2020-03-25T09:49:28+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">po: update Spanish translation

Several translated strings were splitted and old translations do not
apply directly anymore.

Reviewed-By: Christian Heimes <cheimes@redhat.com>
(cherry picked from commit 2859216b4cbb763a25792cffe6204da8edb4a232)

Reviewed-By: Christian Heimes <cheimes@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/92fb5c5268b8b1b02b7a1d12b9a6417c893a18f1">92fb5c52</a></strong>
<div>
<span>by Alexander Bokovoy</span>
<i>at 2020-03-25T09:49:28+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">po: update Basque translation timestamp

Reviewed-By: Christian Heimes <cheimes@redhat.com>
(cherry picked from commit e6574914ade837f1d49579394437dfe720b55b22)

Reviewed-By: Christian Heimes <cheimes@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/a2ca393d35a1f34b2dbbd54c9c1d24b9f20960f0">a2ca393d</a></strong>
<div>
<span>by Alexander Bokovoy</span>
<i>at 2020-03-25T09:49:28+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">po: update French translation

Several translated strings were splitted and old translations do not
apply directly anymore.

Reviewed-By: Christian Heimes <cheimes@redhat.com>
(cherry picked from commit 1a0232a6938c64277c4b8f2cdc35be650da644cc)

Reviewed-By: Christian Heimes <cheimes@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/c4dd8b226ae97011bcc0546209f8473fbcd75ab8">c4dd8b22</a></strong>
<div>
<span>by Alexander Bokovoy</span>
<i>at 2020-03-25T09:49:28+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">po: update Hindi translation timestamp

Reviewed-By: Christian Heimes <cheimes@redhat.com>
(cherry picked from commit 35c1da8346c1b671b1a1bffa51199324c3947d9f)

Reviewed-By: Christian Heimes <cheimes@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/595d5062b9e770a946156f69df2fe522d4745d9e">595d5062</a></strong>
<div>
<span>by Alexander Bokovoy</span>
<i>at 2020-03-25T09:49:28+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">po: update Hungarian translation timestamp

Reviewed-By: Christian Heimes <cheimes@redhat.com>
(cherry picked from commit f18a4f8dd34134b3c08b1169ba42ebcffa49ac72)

Reviewed-By: Christian Heimes <cheimes@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/124a563eb64d7f9a2190a13e9d68a7b608be2d22">124a563e</a></strong>
<div>
<span>by Alexander Bokovoy</span>
<i>at 2020-03-25T09:49:28+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">po: update Indonesian translation timestamp

Reviewed-By: Christian Heimes <cheimes@redhat.com>
(cherry picked from commit 347d9c78b17176e7677995c2ecbbfc7b13d50dcc)

Reviewed-By: Christian Heimes <cheimes@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/89dbf88abb108cad7f44f92b4e94e66f21746cd3">89dbf88a</a></strong>
<div>
<span>by Alexander Bokovoy</span>
<i>at 2020-03-25T09:49:28+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">po: update Japanese translation timestamp

Reviewed-By: Christian Heimes <cheimes@redhat.com>
(cherry picked from commit 60d69a8755d3f32d6fed70ba541f70e4069e0647)

Reviewed-By: Christian Heimes <cheimes@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/89b048d1408834dde38321ac4f402083ebd30247">89b048d1</a></strong>
<div>
<span>by Alexander Bokovoy</span>
<i>at 2020-03-25T09:49:28+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">po: update Kannada translation timestamp

Reviewed-By: Christian Heimes <cheimes@redhat.com>
(cherry picked from commit 1c30d18611519aca5244b2315a5d8a3e198eea38)

Reviewed-By: Christian Heimes <cheimes@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/28a963eed0f27c214543b02fc34e15182e6fcc04">28a963ee</a></strong>
<div>
<span>by Alexander Bokovoy</span>
<i>at 2020-03-25T09:49:28+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">po: update Marathi translation timestamp

Reviewed-By: Christian Heimes <cheimes@redhat.com>
(cherry picked from commit 0c9066e8f3b7b78fb7cf4763fa51919aa6c4965c)

Reviewed-By: Christian Heimes <cheimes@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/e7945284906998da0a798a1ff15a42dd3fdb96d9">e7945284</a></strong>
<div>
<span>by Alexander Bokovoy</span>
<i>at 2020-03-25T09:49:28+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">po: update Dutch translation timestamp

Reviewed-By: Christian Heimes <cheimes@redhat.com>
(cherry picked from commit 7f3cc11a20ad1705cb62ec0075d1e7ec863fced7)

Reviewed-By: Christian Heimes <cheimes@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/e4dfb7409bd25dc5bc2cc1e99562f912a98509f8">e4dfb740</a></strong>
<div>
<span>by Alexander Bokovoy</span>
<i>at 2020-03-25T09:49:28+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">po: update Punjabi translation timestamp

Reviewed-By: Christian Heimes <cheimes@redhat.com>
(cherry picked from commit 3e636959ff14e454329a6806bf4fe4f560ccf398)

Reviewed-By: Christian Heimes <cheimes@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/4e3867fcc49a8d2ff1085e630abd77666a06d838">4e3867fc</a></strong>
<div>
<span>by Alexander Bokovoy</span>
<i>at 2020-03-25T09:49:28+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">po: update Polish translation

Several translated strings were splitted and old translations do not
apply directly anymore.

Reviewed-By: Christian Heimes <cheimes@redhat.com>
(cherry picked from commit 047c8cc55d0845123160e94c69bf0f4efe47059e)

Reviewed-By: Christian Heimes <cheimes@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/31a9da8efa793d492352f646fc804b902beec088">31a9da8e</a></strong>
<div>
<span>by Alexander Bokovoy</span>
<i>at 2020-03-25T09:49:28+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">po: update Portuguese translation timestamp

Reviewed-By: Christian Heimes <cheimes@redhat.com>
(cherry picked from commit baf1a7217d35c2142953a098f4caf88f181e42b0)

Reviewed-By: Christian Heimes <cheimes@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/eab195ff3884b482279279326b3a84ced4723b7e">eab195ff</a></strong>
<div>
<span>by Alexander Bokovoy</span>
<i>at 2020-03-25T09:49:28+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">po: update Portuguese (Brazil) translation timestamp

Reviewed-By: Christian Heimes <cheimes@redhat.com>
(cherry picked from commit 45dede73c7106b234f0c1d022bd20260d9c7c7fa)

Reviewed-By: Christian Heimes <cheimes@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/db433fbe4e521d08dee2cdc2e65344d8203e03a4">db433fbe</a></strong>
<div>
<span>by Alexander Bokovoy</span>
<i>at 2020-03-25T09:49:28+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">po: update Russian translation

Several translated strings were splitted and old translations do not
apply directly anymore.

Reviewed-By: Christian Heimes <cheimes@redhat.com>
(cherry picked from commit ad3ef9de44f41051fed8f743fb4bc7cf2e896ea7)

Reviewed-By: Christian Heimes <cheimes@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/3c15e47a7c2212aab0ecdc320093bee2afa0bfdc">3c15e47a</a></strong>
<div>
<span>by Alexander Bokovoy</span>
<i>at 2020-03-25T09:49:28+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">po: update Slovak translation timestamp

Reviewed-By: Christian Heimes <cheimes@redhat.com>
(cherry picked from commit ed55c408f8599dd4c0be8261c34930b9c7416171)

Reviewed-By: Christian Heimes <cheimes@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/3d411cf29f29e1d391ed8f6eb159b88d450a332b">3d411cf2</a></strong>
<div>
<span>by Alexander Bokovoy</span>
<i>at 2020-03-25T09:49:28+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">po: update Tajik translation timestamp

Reviewed-By: Christian Heimes <cheimes@redhat.com>
(cherry picked from commit e50c2500f440caa59fa78320ed669db9f0a25d10)

Reviewed-By: Christian Heimes <cheimes@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/855a36b6c093fd21af7cf87524acc5d297692de3">855a36b6</a></strong>
<div>
<span>by Alexander Bokovoy</span>
<i>at 2020-03-25T09:49:28+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">po: update Ukrainian translation

Several translated strings were splitted and old translations do not
apply directly anymore.

Reviewed-By: Christian Heimes <cheimes@redhat.com>
(cherry picked from commit 9fcae1590ddb2fd240b200d0960e33323d594acb)

Reviewed-By: Christian Heimes <cheimes@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/c6adee04068ce946f8c9b8ad5db19721db13c602">c6adee04</a></strong>
<div>
<span>by Alexander Bokovoy</span>
<i>at 2020-03-25T09:49:28+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">po: update Chinese (China) translation

Several translated strings were splitted and old translations do not
apply directly anymore.

Reviewed-By: Christian Heimes <cheimes@redhat.com>
(cherry picked from commit 42e86692b6b12728e0fb7e3bc17613ef072b624a)

Reviewed-By: Christian Heimes <cheimes@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/74f36e7c2f7f6d17b56e06b5f05205edb8a286d7">74f36e7c</a></strong>
<div>
<span>by Alexander Bokovoy</span>
<i>at 2020-03-25T10:44:50+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">ipatests: always skip additional input for group-add-member --external

'ipa group-add-member groupname --external some-object' will attempt to
ask interactive questions about other optional parameters (users and
groups) if only external group member was specified. This leads to a
timeout in the tests as there is no input provided.

Do not wait for the entry that would never come by using 'ipa -n'.

Related: https://pagure.io/freeipa/issue/8236
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/f08ced1b25e14f91526c82610a8219ae8ed898a3">f08ced1b</a></strong>
<div>
<span>by Christian Heimes</span>
<i>at 2020-03-25T12:47:40+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">SELinux: apache_manage_pid_files for F30

SELinux policy on F30 doesn't have the interface
apache_manage_pid_files(). Define the interface conditionally.

Fixes: https://pagure.io/freeipa/issue/8241
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/c62b9e7f6ab0dec54540dc6cd389fe58f8858275">c62b9e7f</a></strong>
<div>
<span>by Alexander Bokovoy</span>
<i>at 2020-03-25T14:47:12+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Fix indentation levels

Reviewed-By: Christian Heimes <cheimes@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/f4dc10b8caac44f5c2a8edbb4c647e6dcf71c3bd">f4dc10b8</a></strong>
<div>
<span>by Alexander Bokovoy</span>
<i>at 2020-03-25T14:47:12+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">ipatests: allow changing sysaccount passwords as cn=Directory Manager

Extend ldappasswd_sysaccount_change() helper to allow changing
passwords as a cn=Directory Manager.

Related to: https://pagure.io/freeipa/issue/7181
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Christian Heimes <cheimes@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/313542e8a125c4904750826ef9eabdead7d874bd">313542e8</a></strong>
<div>
<span>by Alexander Bokovoy</span>
<i>at 2020-03-25T14:47:12+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">ipatests: test sysaccount password change with a password policy applied

ipa-pwd-extop plugin had a bug which prevented a cn=Directory Manager
to change a password to a value that is not allowed by an associated
password policy. Password policy checks should not apply to any
operations done as cn=Directory Manager.

The test creates a system account with associated policy that prevents
password reuse. It then goes to try to change a password three times:
 - as a user: must succeeed
 - as a cn=Directory Manager: must succeed even with a password re-use
 - as a user again: must fail due to password re-use

Related: https://pagure.io/freeipa/issue/7181
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Christian Heimes <cheimes@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/5bae736bc81eaa1167ec64a69a32506dad2ca286">5bae736b</a></strong>
<div>
<span>by Alexander Bokovoy</span>
<i>at 2020-03-25T14:47:12+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN

SLAPI_BIND_TARGET_DN is deprecated since 2011 by 389-ds team,
see commit f6397113666f06848412bb12f754f04258cfa5fa in 389-ds:
https://pagure.io/389-ds-base/c/f6397113666f06848412bb12f754f04258cfa5fa?branch=master

Use SLAPI_BIND_TARGET_SDN instead and move internal ipa-pwd-extop
helpers to accept Slapi_DN references rather than strings.

Related: https://pagure.io/freeipa/issue/7181

Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Christian Heimes <cheimes@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/bcbf64b1bf287d2b0b23bc7ac0cca9e8b789ba4a">bcbf64b1</a></strong>
<div>
<span>by Alexander Bokovoy</span>
<i>at 2020-03-25T14:47:12+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager

Password changes performed by cn=Directory Manager are excluded from
password policy checks according to [1]. This is correctly handled by
ipa-pwd-extop in case of a normal Kerberos principal in IPA. However,
non-kerberos accounts were not excluded from the check.

As result, password updates for PKI CA admin account in o=ipaca were
failing if a password policy does not allow a password reuse. We are
re-setting the password for PKI CA admin in ipa-replica-prepare in case
the original directory manager's password was updated since creation of
`cacert.p12`.

Do password policy check for non-Kerberos accounts only if it was set by
a regular user or admin. Changes performed by a cn=Directory Manager and
passsync managers should be excluded from the policy check.

Fixes: https://pagure.io/freeipa/issue/7181
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>

[1] https://access.redhat.com/documentation/en-us/red_hat_directory_server/10/html/administration_guide/user_account_management-managing_the_password_policy

Reviewed-By: Christian Heimes <cheimes@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/8b7bb96b327207284c8c0a45cf2979843482cf48">8b7bb96b</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-03-25T14:47:12+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Don't save password history on non-Kerberos accounts

While other password policies were properly ignored the password
history was always being saved if the global history size was
non-zero.

Reviewed-By: Christian Heimes <cheimes@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/840671b1cdc508ea86f8412e6423f00b8c3bf809">840671b1</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-03-25T14:47:12+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add ability to change a user password as the Directory Manager

This is to confirm that the Directory Manager is not affected by
password policy.

Reviewed-By: Christian Heimes <cheimes@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/b34063e700ac4c65b117705bafb0255c26bca060">b34063e7</a></strong>
<div>
<span>by Rob Crittenden</span>
<i>at 2020-03-25T14:47:12+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Test that pwpolicy only applied on Kerberos entries

Also test that a normal user has password history enforcement

Reviewed-By: Christian Heimes <cheimes@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/616ad399c99292542638e9e8f0995873e5c4f311">616ad399</a></strong>
<div>
<span>by Christian Heimes</span>
<i>at 2020-03-25T17:16:05+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">po: fix LINGUAS to use whitespace separation

The po/LINGUAS file contains a list of all avilable translations.
According to the GNU gettext documentation it's is a whitespace
separated list. Our LINGUAS file used newline separated list with inline
comments. This conflicts with weblate automation.

Fixes: https://pagure.io/freeipa/issue/8159
See: https://www.gnu.org/software/gettext/manual/html_node/po_002fLINGUAS.html
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/45507c1e86b634507fdc21dbb88ea9edd43e4166">45507c1e</a></strong>
<div>
<span>by Mohammad Rizwan Yusuf</span>
<i>at 2020-03-25T17:17:34+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">ipatests: Skip test using paramiko when FIPS is enabled

Test used paramiko to connect to the master from controller.
Hence skip if FIPS is enabled

Signed-off-by: Mohammad Rizwan Yusuf <myusuf@redhat.com>
Reviewed-By: Christian Heimes <cheimes@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/a692212e3bee36fbccba73ed21f7825381eeade4">a692212e</a></strong>
<div>
<span>by François Cami</span>
<i>at 2020-03-26T15:09:16+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">ipatests: test_replica_promotion.py: test KRA on Hidden Replica

The Hidden replica tests did not test what happened when KRA was
installed on a hidden replica and then other KRAs instantiated from
this original one. Add a test scenario that covers this.

Related: https://pagure.io/freeipa/issue/8240
Signed-off-by: François Cami <fcami@redhat.com>
Reviewed-By: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Michal Polovka <mpolovka@redhat.com>
Reviewed-By: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Michal Polovka <mpolovka@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/75d04b5e0e5709d98440209f803175242a52d119">75d04b5e</a></strong>
<div>
<span>by Alexander Bokovoy</span>
<i>at 2020-03-27T09:12:34+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Become FreeIPA 4.8.6
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/da539a3676a7ac450cbc2c3176af8bb833cad8d6">da539a36</a></strong>
<div>
<span>by Timo Aaltonen</span>
<i>at 2020-03-30T16:38:40+03:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Merge branch 'upstream'
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/80a7dcc80a9e6fe8ebd1c6e78aff9da38f4fcd04">80a7dcc8</a></strong>
<div>
<span>by Timo Aaltonen</span>
<i>at 2020-03-30T16:40:25+03:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;"> pki-proxy-Don-t-rely-on-running-apache-until-it-s-co.patch: Dropped,  upstream.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/a4e389325a0cf8ed7df52a0b6d77aa0efe75c9e6">a4e38932</a></strong>
<div>
<span>by Timo Aaltonen</span>
<i>at 2020-03-30T18:44:03+03:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">migrate-to-gpg.diff: Use gpg instead of gpg2, update dependencies. (Closes: #919062)
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/6422cb4c1351b2f018cd5eb8b03a82fe81134a99">6422cb4c</a></strong>
<div>
<span>by Timo Aaltonen</span>
<i>at 2020-03-30T21:48:43+03:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">control: Bump gssproxy depends.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/1440f98e0a3233aa606a588d7eb1b536a5ee8c65">1440f98e</a></strong>
<div>
<span>by Timo Aaltonen</span>
<i>at 2020-03-31T06:26:02+03:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">control: Relax apache2 dependency so it works on ubuntu.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/f02b776fe34d1e61d807bc71720f6152cfcf481b">f02b776f</a></strong>
<div>
<span>by Timo Aaltonen</span>
<i>at 2020-03-31T06:33:20+03:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">control: Bump policy to 4.5.0.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/8d0681fbd33e2c2c43d2f7b7d91765806c927b4d">8d0681fb</a></strong>
<div>
<span>by Timo Aaltonen</span>
<i>at 2020-03-31T06:39:37+03:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">control: Fix some M-A issues.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/freeipa-team/freeipa/-/commit/db96bf78a7c5e3d35b51dfc0d5788834f161b0f1">db96bf78</a></strong>
<div>
<span>by Timo Aaltonen</span>
<i>at 2020-03-31T06:48:50+03:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">control: Drop the dummy freeipa-admintools package.
</pre>
</li>
</ul>
<h4>30 changed files:</h4>
<ul>
<li class="file-stats">
<a href="#a5cc2925ca8258af241be7e5b0381edf30266302">
.gitignore
</a>
</li>
<li class="file-stats">
<a href="#d5b4de16d947214ec306bd57bed1bd23a939b5f9">
Makefile.am
</a>
</li>
<li class="file-stats">
<a href="#438c41c93b7f0c8b476c65c3eb42284f234bd810">
VERSION.m4
</a>
</li>
<li class="file-stats">
<a href="#14647cf2ce3577016804b0d445a34c31460c2999">
daemons/ipa-slapi-plugins/ipa-pwd-extop/common.c
</a>
</li>
<li class="file-stats">
<a href="#489b9d2859ab0752caa5fac9179d2c66e7ba576c">
daemons/ipa-slapi-plugins/ipa-pwd-extop/ipa_pwd_extop.c
</a>
</li>
<li class="file-stats">
<a href="#84c4195ed5b9f1a47fb3765445b288c887c62b46">
daemons/ipa-slapi-plugins/ipa-pwd-extop/ipapwd.h
</a>
</li>
<li class="file-stats">
<a href="#be44c78059a5eef8b370f2c22206cfe6bc227c31">
daemons/ipa-slapi-plugins/ipa-pwd-extop/prepost.c
</a>
</li>
<li class="file-stats">
<a href="#9c96da0e9f91d7d8937b69b524702c106258f0d1">
debian/changelog
</a>
</li>
<li class="file-stats">
<a href="#58ef006ab62b83b4bec5d81fe5b32c3b4c2d1cc2">
debian/control
</a>
</li>
<li class="file-stats">
<a href="#8d355cf67e84391e4194e2e9ab75c865f2e174d6">
debian/control.common
</a>
</li>
<li class="file-stats">
<a href="#910c90e15555febfc0e3f022b073144c866f2e77">
debian/control.server
</a>
</li>
<li class="file-stats">
<a href="#952f33d96dea8832f684665d7f6dacdc6333d94c">
debian/control.stub
</a>
</li>
<li class="file-stats">
<a href="#cdac8769d706309fa92a58c31cec05b1c90088bd">
<span class="new-file">
+
debian/patches/migrate-to-gpg.diff
</span>
</a>
</li>
<li class="file-stats">
<a href="#6a9f6c563810e5df6e970a58d3ec7ba373dd967b">
<span class="deleted-file">

debian/patches/pki-proxy-Don-t-rely-on-running-apache-until-it-s-co.patch
</span>
</a>
</li>
<li class="file-stats">
<a href="#bc34014ab4b9a49dd7a27bdd8d352912607c3a96">
debian/patches/series
</a>
</li>
<li class="file-stats">
<a href="#83223a554d33ba7e1888274ff8ac43adb8147ba0">
debian/tests/control
</a>
</li>
<li class="file-stats">
<a href="#866dc5074431bae6d800558b8ed5d65496e9d7d8">
freeipa.spec.in
</a>
</li>
<li class="file-stats">
<a href="#0157cbdf7d99ddb358fc5c123dece0016a86b87b">
install/ui/src/libs/bootstrap.js
</a>
</li>
<li class="file-stats">
<a href="#8d2e9bfb304923b07a52575b6e3dd3b4ab92e1d3">
ipaserver/dcerpc.py
</a>
</li>
<li class="file-stats">
<a href="#b9f927b4d52fff67d805779b959246e33b7d969a">
ipaserver/install/dogtaginstance.py
</a>
</li>
<li class="file-stats">
<a href="#04139d01acf2e524b1d867e779a1d519967e8f45">
ipaserver/plugins/idviews.py
</a>
</li>
<li class="file-stats">
<a href="#61f6a2bd24415e7044ead51291d728dbd104d392">
ipatests/prci_definitions/nightly_ipa-4-8_latest.yaml
</a>
</li>
<li class="file-stats">
<a href="#5e840e675d5f4e6e5015c0419e30757ddf9c3594">
ipatests/prci_definitions/nightly_ipa-4-8_previous.yaml
</a>
</li>
<li class="file-stats">
<a href="#e55d89eb9bdab3312852b7dab03d269f5e274366">
ipatests/pytest_ipa/integration/host.py
</a>
</li>
<li class="file-stats">
<a href="#9587c2b0b03d44bfe64ddc17174e1bf72fc99361">
ipatests/pytest_ipa/integration/tasks.py
</a>
</li>
<li class="file-stats">
<a href="#2adec38da40a3050f4eb17018c1063d67c3c5973">
<span class="new-file">
+
ipatests/pytest_ipa/integration/transport.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#c98d6c2f6cba45f3190f84bb7a62454852a3cd36">
ipatests/test_integration/test_adtrust_install.py
</a>
</li>
<li class="file-stats">
<a href="#aa29a92462caeff969ef488b422773a368201758">
ipatests/test_integration/test_backup_and_restore.py
</a>
</li>
<li class="file-stats">
<a href="#bdf5784502d0c6f2cbe8a15452a7e25758ff9b81">
ipatests/test_integration/test_commands.py
</a>
</li>
<li class="file-stats">
<a href="#c168752bd8e33c319b59b509a81deb38369be3d3">
ipatests/test_integration/test_installation.py
</a>
</li>
</ul>
<h5>The diff was not included because it is too large.</h5>

</div>
<div class="footer" style="margin-top: 10px;">
<p style="font-size: small; color: #777;">

<br>
<a href="https://salsa.debian.org/freeipa-team/freeipa/-/compare/6eb6b27e611f57ec8e5a87740b7527170358a419...db96bf78a7c5e3d35b51dfc0d5788834f161b0f1">View it on GitLab</a>.
<br>
You're receiving this email because of your account on salsa.debian.org.
If you'd like to receive fewer emails, you can
adjust your notification settings.



</p>
</div>
</body>
</html>