From Free IPA

September 7, 2011

The FreeIPA project team is pleased to announce the availability of the freeIPA 2.1.1 server.

It is available in Fedora 15.

Known Issues

• The OCSP URL encoded in dogtag certificates is by default the CA machine that issued the certificate.

Changelog since 2.1.0

Adam Young (1):

• enable proxy for dogtag

Alexander Bokovoy (1):

• Propagate environment when it is required.

Endi S. Dewata (19):

• Fixed browser configuration pages
• Hide activation/deactivation link from regular users.
• Fixed problem selecting value from combobox
• Fixed inconsistent layout for password reset dialog.
• Removed 'Hide already enrolled' checkbox.
• Replaced page dirty dialog title.
• Updated add and delete association dialog titles.
• Removed unnecessary HBAC/sudo rule category modification.
• Fixed command partial failure handling.
• Fixed default map type in automount map adder dialog.
• Fixed host OTP status.
• Fixed host keytab status after setting OTP.
• Fixed host adder dialog to show default DNS zone.
• Fixed hard-coded UI messages.
• Fixed problem adding hostgroup into netgroup.
• Fixed problem with combobox.
• Fixed hard-coded UI message in entity.js.
• Fixed missing permission filter field.
• Fixed problem with combobox using Sahi

Jan Cholasta (6):

• Make sure messagebus is running prior to starting certmonger.
• Verify that passwords specified through command line options of ipa-server install meet the length requirement.
• Add option to install without the automatic redirect to the Web UI.
• Search for users in all the naming contexts present on the directory server.
• Add subscription-manager dependency for RHEL.
• Verify that the external CA certificate files are correct.

John Dennis (11):

• ticket 1568 - DN objects should support the insert method
• ticket 1569 - Test DN object non-latin Unicode support
• ticket 1600 - convert unittests to use DN objects
• ticket 1659 - invalid i18n string in dns.py
• ticket 1660 - update LINGUAS file, add missing po files
• ticket 1661 - Update all po files
• ticket 1650 - compute accurate translation statistics
• ticket 1707 - add documentation validation to makeapi tool
• ticket 1705 - internationalize help topics
• ticket 1706 - internationalize cli help framework
• ticket 1669 - improve i18n docstring extraction

Jr Aquino (2):

• Improve sudorule documentation
• Create FreeIPA CLI Plugin for the 389 Auto Membership plugin

Martin Kosek (6):

• Add missing attribute labels for sudorule
• Fix automountkey-mod
• Fix automountlocation-import conflicts
• ipa-client-install breaks network configuration
• Fix sudo help and summaries
• Let Bind track data changes

Petr Vobornik (8):

• error dialog for batch command
• Uncheck checkboxes in association after deletion
• Show error in adding associations
• Validation of details facet before update
• Modify serial associator to use batch
• Modifying sudo options refreshes the whole page
• Enable update and reset button only if dirty
• Attributes table not scrollable

Rob Crittenden (24):

• Add information on setting api.env.host in the ipactl.8 man page
• Log each command in a batch separately.
• Do batch logging on successful commands too, not just failures.
• Fix wording in examples of delegation plugin.
• Suppress 389-ds debug output when starting services
• Fix thread deadlock by using pthreads library instead of NSPR.
• Change the way has_keytab is determined, also check for password.
• Add additional pam ftp services to HBAC, and a ftp HBAC service group
• Add label for HBAC services to show as members
• Add option to only prompt once for passwords, use in entitle_register
• Retrieve password/keytab state when modifying a host.
• Disable reverse lookups in ipa-join and ipa-getkeytab
• Remove more 389-ds files/directories on uninstallation.
• Remove 389-ds upgrade state during uninstall
• Set min nvr of pki-ca to 9.0.12 for fix in BZ 700505
• Add common is_installed() fn, better uninstall logging, check for errors.
• Add external source hosts to HBAC.
• Roll back changes if client installation fails.
• Add netgroup as possible memberOf for hostgroups
• Sort lists so order is predictable and tests pass as expected.
• Suppress managed netgroups from showing as memberof hostgroups.
• Use the IPA server cert profile in the installer.
• Set min nvr of 389-ds-base to 1.2.9.7-1 for BZ 728605
• Become IPA 2.1.1

Simo Sorce (1):

• conncheck: Fix List of ports to check