Blame SPECS/ansible-freeipa.spec

9e975f
# Turn off automatic python byte compilation because these are Ansible
9e975f
# roles and the files are transferred to the node and compiled there with
05ba5a
# the python version used in the node
9e975f
%define __brp_python_bytecompile %{nil}
9e975f
05ba5a
%global python %{__python3}
05ba5a
9e975f
Summary: Roles and playbooks to deploy FreeIPA servers, replicas and clients
9e975f
Name: ansible-freeipa
9ae266
Version: 1.6.3
d47a82
Release: 1%{?dist}
9e975f
URL: https://github.com/freeipa/ansible-freeipa
9e975f
License: GPLv3+
9e975f
Source: https://github.com/freeipa/ansible-freeipa/archive/v%{version}.tar.gz#/%{name}-%{version}.tar.gz
9e975f
BuildArch: noarch
9e975f
9e975f
%description
9ae266
Ansible roles and playbooks to install and uninstall FreeIPA servers, replicas
9ae266
and clients. Also modules management.
9ae266
9ae266
Note: The Ansible playbooks and roles require a configured Ansible environment
9ae266
where the Ansible nodes are reachable and are properly set up to have an IP
9ae266
address and a working package manager.
9e975f
9e975f
Features
9e975f
9e975f
- Server, replica and client deployment
9e975f
- Cluster deployments: Server, replicas and clients in one playbook
9e975f
- One-time-password (OTP) support for client installation
9e975f
- Repair mode for clients
05ba5a
- Backup and restore, also to and from controller
d47a82
- Modules for automembership rule management
9ae266
- Modules for automount key management
9ae266
- Modules for automount location management
9ae266
- Modules for automount map management
05ba5a
- Modules for config management
05ba5a
- Modules for delegation management
05ba5a
- Modules for dns config management
01db47
- Modules for dns forwarder management
01db47
- Modules for dns record management
01db47
- Modules for dns zone management
d9912c
- Modules for group management
d9912c
- Modules for hbacrule management
d9912c
- Modules for hbacsvc management
d9912c
- Modules for hbacsvcgroup management
d9912c
- Modules for host management
d9912c
- Modules for hostgroup management
05ba5a
- Modules for location management
05ba5a
- Modules for permission management
05ba5a
- Modules for privilege management
d9912c
- Modules for pwpolicy management
05ba5a
- Modules for role management
05ba5a
- Modules for self service management
d47a82
- Modules for server management
01db47
- Modules for service management
d9912c
- Modules for sudocmd management
d9912c
- Modules for sudocmdgroup management
d9912c
- Modules for sudorule management
d9912c
- Modules for topology management
d47a82
- Modules for trust management
d9912c
- Modules for user management
01db47
- Modules for vault management
9e975f
9e975f
Supported FreeIPA Versions
9e975f
9e975f
FreeIPA versions 4.6 and up are supported by all roles.
9e975f
9ae266
The client role supports versions 4.4 and up, the server role is working with
9ae266
versions 4.5 and up, the replica role is currently only working with versions
9ae266
4.6 and up.
9ae266
9e975f
Supported Distributions
9e975f
9e975f
- RHEL/CentOS 7.4+
9e975f
- Fedora 26+
9e975f
- Ubuntu
d9912c
- Debian 10+ (ipaclient only, no server or replica!)
9e975f
9e975f
Requirements
9e975f
9e975f
  Controller
d9912c
  - Ansible version: 2.8+ (ansible-freeipa is an Ansible Collection)
9ae266
  - /usr/bin/kinit is required on the controller if a one time password (OTP)
d9912c
    is used
9e975f
9e975f
  Node
9e975f
  - Supported FreeIPA version (see above)
9e975f
  - Supported distribution (needed for package installation only, see above)
9e975f
9e975f
Limitations
9e975f
01db47
External signed CA is now supported. But the currently needed two step process
01db47
is an issue for the processing in a simple playbook.
01db47
Work is planned to have a new method to handle CSR for external signed CAs in
01db47
a separate step before starting the server installation.
01db47
9e975f
05ba5a
%package tests
05ba5a
Summary: ansible-freeipa tests
05ba5a
Requires: %{name} = %{version}-%{release}
05ba5a
05ba5a
%description tests
05ba5a
ansible-freeipa tests.
05ba5a
05ba5a
Please have a look at %{_datadir}/ansible-freeipa/requirements-tests.txt
05ba5a
to get the needed requrements to run the tests.
05ba5a
05ba5a
9e975f
%prep
9e975f
%setup -q
9e975f
# Do not create backup files with patches
05ba5a
9e975f
# Fix python modules and module utils:
9e975f
# - Remove shebang
9e975f
# - Remove execute flag
9e975f
for i in roles/ipa*/library/*.py roles/ipa*/module_utils/*.py plugins/*/*.py; do
05ba5a
    sed -i '1{/\/usr\/bin\/python*/d;}' $i
9e975f
    chmod a-x $i
9e975f
done
05ba5a
05ba5a
for i in utils/*.py utils/ansible-ipa-*-install utils/new_module \
05ba5a
         utils/changelog utils/ansible-doc-test;
05ba5a
do
05ba5a
    sed -i '{s@/usr/bin/python*@%{python}@}' $i
05ba5a
done
05ba5a
9e975f
9e975f
%build
9e975f
9e975f
%install
9e975f
install -m 755 -d %{buildroot}%{_datadir}/ansible/roles/
9e975f
cp -rp roles/ipaserver %{buildroot}%{_datadir}/ansible/roles/
9e975f
cp -rp roles/ipaserver/README.md README-server.md
9e975f
cp -rp roles/ipareplica %{buildroot}%{_datadir}/ansible/roles/
9e975f
cp -rp roles/ipareplica/README.md README-replica.md
9e975f
cp -rp roles/ipaclient %{buildroot}%{_datadir}/ansible/roles/
9e975f
cp -rp roles/ipaclient/README.md README-client.md
05ba5a
cp -rp roles/ipabackup %{buildroot}%{_datadir}/ansible/roles/
05ba5a
cp -rp roles/ipabackup/README.md README-backup.md
9e975f
install -m 755 -d %{buildroot}%{_datadir}/ansible/plugins/
9e975f
cp -rp plugins/* %{buildroot}%{_datadir}/ansible/plugins/
9e975f
05ba5a
install -m 755 -d %{buildroot}%{_datadir}/ansible-freeipa
05ba5a
cp requirements*.txt %{buildroot}%{_datadir}/ansible-freeipa/
05ba5a
cp -rp utils %{buildroot}%{_datadir}/ansible-freeipa/
05ba5a
install -m 755 -d %{buildroot}%{_datadir}/ansible-freeipa/tests
05ba5a
cp -rp tests %{buildroot}%{_datadir}/ansible-freeipa/
05ba5a
9e975f
%files
9e975f
%license COPYING
9e975f
%{_datadir}/ansible/roles/ipaserver
9e975f
%{_datadir}/ansible/roles/ipareplica
9e975f
%{_datadir}/ansible/roles/ipaclient
05ba5a
%{_datadir}/ansible/roles/ipabackup
9ae266
%{_datadir}/ansible/plugins/doc_fragments
9e975f
%{_datadir}/ansible/plugins/module_utils
9e975f
%{_datadir}/ansible/plugins/modules
01db47
%doc README*.md
9e975f
%doc playbooks
05ba5a
%{_datadir}/ansible-freeipa/requirements.txt
05ba5a
%{_datadir}/ansible-freeipa/requirements-dev.txt
05ba5a
%{_datadir}/ansible-freeipa/utils
05ba5a
05ba5a
%files tests
05ba5a
%{_datadir}/ansible-freeipa/tests
05ba5a
%{_datadir}/ansible-freeipa/requirements-tests.txt
9e975f
9e975f
%changelog
9ae266
* Thu Jan 27 2022 Thomas Woerner <twoerner@redhat.com> - 1.6.3-1
9ae266
- Update to version 1.6.3
9ae266
  https://github.com/freeipa/ansible-freeipa/releases/tag/v1.6.3
9ae266
  Related: RHBZ#2010621
9ae266
9ae266
* Wed Jan 26 2022 Thomas Woerner <twoerner@redhat.com> - 1.6.2-1
9ae266
- Update to version 1.6.2
9ae266
  https://github.com/freeipa/ansible-freeipa/releases/tag/v1.6.2
9ae266
  Related: RHBZ#2010621
9ae266
9ae266
* Fri Jan 21 2022 Thomas Woerner <twoerner@redhat.com> - 1.6.1-1
9ae266
- Update to version 1.6.1
9ae266
  https://github.com/freeipa/ansible-freeipa/releases/tag/v1.6.1
9ae266
  https://github.com/freeipa/ansible-freeipa/releases/tag/v1.6.0
9ae266
  Related: RHBZ#2010621
9ae266
- Add module to manage automount maps
9ae266
  Resolves: RHBZ#2040462
9ae266
- Add module to manage automount keys
9ae266
  Resolves: RHBZ#2040464
9ae266
- Client deploy failing with ipaadmin keytab and OTP due to latest ansible
9ae266
  version
9ae266
  Resolves: RHBZ#2041753
9ae266
9ae266
* Wed Dec 29 2021 Thomas Woerner <twoerner@redhat.com> - 1.5.3-1
9ae266
- Update to version 1.5.3
9ae266
  https://github.com/freeipa/ansible-freeipa/releases/tag/v1.5.3
9ae266
  https://github.com/freeipa/ansible-freeipa/releases/tag/v1.5.2
9ae266
  https://github.com/freeipa/ansible-freeipa/releases/tag/v1.5.1
9ae266
  https://github.com/freeipa/ansible-freeipa/releases/tag/v1.5.0
9ae266
  Related: RHBZ#2010621
9ae266
- automember set default group/hostgroup is missing from the automember module
9ae266
  Resolves: RHBZ#1999912
9ae266
- automember remove default group/hostgroup is missing from the automember
9ae266
  module
9ae266
  Resolves: RHBZ#1999913
9ae266
- automember rebuild is missing from the automember module
9ae266
  Resolves: RHBZ#1999915
9ae266
- automember remove orphans group/hostgroup is missing from the automember
9ae266
  module
9ae266
  Resolves: RHBZ#1999916
9ae266
- Not able to update existing automember rule description
9ae266
  Resolves: RHBZ#2021393
9ae266
9ae266
* Tue Oct  5 2021 Thomas Woerner <twoerner@redhat.com> - 0.4.0-1
9ae266
- Update to version 0.4.0
9ae266
  https://github.com/freeipa/ansible-freeipa/releases/tag/v0.4.0
9ae266
  Resolves: RHBZ#2010621
9ae266
- Add ability to run modules remotely
9ae266
  Resolves: RHBZ#1918025
9ae266
- New management module ipaautomountlocation
9ae266
  Resolves: RHBZ#2010639
9ae266
d47a82
* Tue Jul 13 2021 Thomas Woerner <twoerner@redhat.com> - 0.3.8-1
d47a82
- Update to version 0.3.8
d47a82
  https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.8
d47a82
  Related: RHBZ#1959875
d47a82
- automember: Verify condition keys
d47a82
  Related: RHBZ#1976926
d47a82
d47a82
* Tue Jul 13 2021 Thomas Woerner <twoerner@redhat.com> - 0.3.7-1
d47a82
- Update to version 0.3.7
d47a82
  https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.7
d47a82
  Related: RHBZ#1959875
d47a82
- automember: Fix action to be automember or member, not service
d47a82
  Resolves: RRBZ#1976923
d47a82
- automember: Fix result["failed"] issues with conditions
d47a82
  Resolves: RRBZ#1976926
d47a82
d47a82
* Wed Jun  9 2021 Thomas Woerner <twoerner@redhat.com> - 0.3.6-3
d47a82
- Apply fix for ipabackup: Use module to get IPA_BACKUP_DIR from ipaplatform
d47a82
  Related: RRBZ#1969847
d47a82
d47a82
* Wed Jun  9 2021 Thomas Woerner <twoerner@redhat.com> - 0.3.6-2
d47a82
- ipabackup: Use module to get IPA_BACKUP_DIR from ipaplatform
d47a82
  Resolves: RRBZ#1969847
d47a82
d47a82
* Mon Jun  7 2021 Thomas Woerner <twoerner@redhat.com> - 0.3.6-1
d47a82
- Update to version 0.3.6
d47a82
  https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.6
d47a82
  Resolves: RHBZ#1959875
d47a82
- ansible-freeipa-tests not in the compose
d47a82
  Resolves: RHBZ#1936869
d47a82
- Remove unsupported parameter for (ipapermission) module: perm_rights from
d47a82
  permission-present.yml
d47a82
  Resolves: RHBZ#1921654
d47a82
- Sample playbook included for selfservice module is incorrect
d47a82
  Resolves: RHBZ#1922060
d47a82
- ipa-client-install failing with error code 7(keytab: /usr/sbin/ipa-rmkeytab
d47a82
  returned 7)
d47a82
  Resolves: RHBZ#1935123
d47a82
- New management module ipaserver
d47a82
  Resolves: RHBZ#1966493
d47a82
- New management module ipaautomember
d47a82
  Resolves: RHBZ#1966496
05ba5a
05ba5a
* Mon Jan 18 2021 Thomas Woerner <twoerner@redhat.com> - 0.3.2-1
05ba5a
- Update to version 0.3.2
05ba5a
  https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.2
05ba5a
  Related: RHBZ#1891826
05ba5a
- Not able to add additional privileges with existing privilege in role module
05ba5a
  Resolves: RHBZ#1893678
05ba5a
- Required error message while adding non-existing members in role handling
05ba5a
  Resolves: RHBZ#1893679
05ba5a
- Not able to add new members with existing members role handling
05ba5a
  Resolves: RHBZ#1893684
05ba5a
- service members are removed while updating other members in role handling
05ba5a
  Resolves: RHBZ#1893685
05ba5a
- after changing the vault type from standard to symmetric, Salt is missing
05ba5a
  Resolves: RHBZ#1880367
05ba5a
- After changing the vault type from symmetric to asymmetric, Salt is present
05ba5a
  in the asymmetric vault
05ba5a
  Resolves: RHBZ#1880377
05ba5a
- After changing the vault type from asymmetric to the standard vault, the
05ba5a
  Public key is present in the standard vault
05ba5a
  Resolves: RHBZ#1880378
05ba5a
- Not able to replace public-key-file to the public-key in asymmetric vault
05ba5a
  type
05ba5a
  Resolves: RHBZ#1880862
05ba5a
- ipauser module does not seem to support --check flag to ansible-playbook
05ba5a
  Resolves: RHBZ#1893675
05ba5a
- Not able to add additional attributes with existing attributes in permission
05ba5a
  handling
05ba5a
  Resolves: RHBZ#1893687
05ba5a
- Privilege variable is removed from permission handling
05ba5a
  Resolves: RHBZ#1893688
05ba5a
05ba5a
* Wed Dec  2 2020 Thomas Woerner <twoerner@redhat.com> - 0.3.1-1
05ba5a
- Update to version 0.3.1
05ba5a
  https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.1
05ba5a
  Related: RHBZ#1891826
05ba5a
- ipabackup: Fix undefined vars for conditions in shell tasks without else
05ba5a
  Related: RHBZ#1894494
05ba5a
05ba5a
* Tue Dec  1 2020 Thomas Woerner <twoerner@redhat.com> - 0.3.0-2
05ba5a
- Ship ipabackup role for backup and restore
05ba5a
  Related: RHBZ#1894494
05ba5a
05ba5a
* Thu Nov 26 2020 Thomas Woerner <twoerner@redhat.com> - 0.3.0-1
05ba5a
- Update to version 0.3.0
05ba5a
  https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.0
05ba5a
  With tests sub package
05ba5a
  Resolves: RHBZ#1891826
05ba5a
- Support for firewalld zone in ipaserver and ipareplica roles 
05ba5a
  Resolves: RHBZ#1894488
05ba5a
- ipagroup: Add support for the IPA CLI option `posix`
05ba5a
  Resolves: RHBZ#1894493
05ba5a
- New ipabackup role for backup and restore
05ba5a
  Resolves: RHBZ#1894494
05ba5a
- New management module ipadelegation
05ba5a
  Resolves: RHBZ#1894496
05ba5a
- New management module ipalocation
05ba5a
  Resolves: RHBZ#1894497
05ba5a
- New management module ipaprivilege
05ba5a
  Resolves: RHBZ#1894498
05ba5a
- New management module ipapermission
05ba5a
  Resolves: RHBZ#1894499
05ba5a
- New management module iparole
05ba5a
  Resolves: RHBZ#1894500
05ba5a
- New management module ipaselfservice
05ba5a
  Resolves: RHBZ#1894501
05ba5a
- New management module ipatrust
05ba5a
  Resolves: RHBZ#1894502
05ba5a
- Fixed log of vault data return when retrieving to a file
05ba5a
  Resolves: RHBZ#1875378
05ba5a
- ipadnszone: Fix modification o SOA serial with other attributes
05ba5a
  Resolves: RHBZ#1876896
05ba5a
- Fix symmetric vault password change when using password_files
05ba5a
  Resolves: RHBZ#1879004
05ba5a
- ipadnsrecord: fix record modification behavior
05ba5a
  Resolves: RHBZ#1880409
05ba5a
  Resolves: RHBZ#1881452
05ba5a
- ipadnsrecord: fix record update when multiple records exist
05ba5a
  Resolves: RHBZ#1881436
05ba5a
01db47
* Tue Aug 18 2020 Thomas Woerner <twoerner@redhat.com> - 0.1.12-6
01db47
- Allow to manage multiple dnszone entries
01db47
  Resolves: RHBZ#1845058
01db47
- Fixed error msgs on FreeIPABaseModule subclasses
01db47
  Resolves: RHBZ#1845051
01db47
- Fix `allow_create_keytab_host` in service module
01db47
  Resolves: RHBZ#1868020
01db47
- Modified return value for ipavault module
01db47
  Resolves: RHBZ#1867909
01db47
- Add support for option `name_from_ip` in ipadnszone module
01db47
  Resolves: RHBZ#1845056
01db47
- Fixe password behavior on Vault module
01db47
  Resolves: RHBZ#1839200
01db47
01db47
* Tue Jul 14 2020 Thomas Woerner <twoerner@redhat.com> - 0.1.12-5
01db47
- ipareplica: Fix failure while deploying KRA
01db47
  Resolves: RHBZ#1855299
01db47
01db47
* Thu Jul 02 2020 Thomas Woerner <twoerner@redhat.com> - 0.1.12-4
01db47
- ipa[server,replica]: Fix pkcs12 info regressions introduced with CA-less
01db47
  Resolves: RHBZ#1853284
01db47
01db47
* Wed Jul 01 2020 Thomas Woerner <twoerner@redhat.com> - 0.1.12-3
01db47
- action_plugins/ipaclient_get_otp: Discovered python needed in task_vars
01db47
  Resolves: RHBZ#1852714
01db47
01db47
* Mon Jun 29 2020 Thomas Woerner <twoerner@redhat.com> - 0.1.12-2
01db47
- Fixes service disable when service has no certificates attached
01db47
  Resolves: RHBZ#1836294
01db47
- Add suppport for changing password of symmetric vaults
01db47
  Resolves: RHBZ#1839197
01db47
- Fix forwardzone issues
01db47
  Resolves: RHBZ#1843826
01db47
  Resolves: RHBZ#1843828
01db47
  Resolves: RHBZ#1843829
01db47
  Resolves: RHBZ#1843830
01db47
  Resolves: RHBZ#1843831
01db47
- ipa[host]group: Fix membermanager unknow user issue
01db47
  Resolves: RHBZ#1848426
01db47
- ipa[user,host]: Fail on duplucate names in the users and hosts lists
01db47
  Resolves: RHBZ#1822683
01db47
01db47
* Mon Jun 15 2020 Thomas Woerner <twoerner@redhat.com> - 0.1.12-1
01db47
- Update to version 0.1.12 bug fix only release
01db47
  Related: RHBZ#1818768
01db47
01db47
* Thu Jun 11 2020 Thomas Woerner <twoerner@redhat.com> - 0.1.11-1
01db47
- Update to version 0.1.11
01db47
  Related: RHBZ#1818768
01db47
01db47
* Mon Apr 27 2020 Thomas Woerner <twoerner@redhat.com> - 0.1.10-1
01db47
- Update to version 0.1.10:
01db47
  - ipaclient: Not delete keytab when ipaclient_on_master is true
01db47
  - New module to manage dns forwarder zones in ipa
01db47
  - Enhancements of sudorule module tests
01db47
  - Gracefully handle RuntimeError raised during parameter validation in
01db47
    fail_jso
01db47
  - ipareplica_prepare: Fix module DOCUMENTATION
01db47
  - ipa[server,replica,client]: setup_logging wrapper for
01db47
    standard_logging_setup
01db47
  - Created FreeIPABaseModule class to facilitate creation of new modules
01db47
  - New IPADNSZone module
01db47
  - Add admin password to the ipadnsconfig module tests
01db47
  - Added alias module arguments in dnszone module
01db47
  - Fixed a bug in AnsibleFreeIPAParams
01db47
  - utils/build-galaxy-release: Do not add release tag to version for galaxy
01db47
  - ipaserver docs: Calm down module linter
01db47
  - galaxy.yml: Add system tag
01db47
  - ipareplica_setup_kra: Remove unused ccache parameter
01db47
  - ipareplica_setup_krb: krb is assigned to but never used
01db47
  - utils/galaxy: Make galaxy scripts more generic
01db47
  - galaxyfy-playbook.py: Fixed script name
01db47
  Related: RHBZ#1818768
01db47
d9912c
* Thu Feb 20 2020 Thomas Woerner <twoerner@redhat.com> - 0.1.8-3
d9912c
- ipahost: Do not fail on missing DNS or zone when no IP address given
d9912c
  Resolves: RHBZ#1804838
d9912c
d9912c
* Fri Feb 14 2020 Thomas Woerner <twoerner@redhat.com> - 0.1.8-2
d9912c
- Updated RPM description for ansible-freeipa 0.1.8
d9912c
  Related: RHBZ#1748986
d9912c
- ipahost: Fix choices of auth_ind parameter, allow to reset parameter
d9912c
  Resolves: RHBZ#1783992
d9912c
- ipauser: Allow reset of userauthtype, do not depend on first,last for mod
d9912c
  Resolves: RHBZ#1784474
d9912c
- ipahost: Enhanced failure msg for member params used without member action
d9912c
  Resolves: RHBZ#1783948
d9912c
- Add missing attributes to ipasudorule
d9912c
  Resolves: RHBZ#1788168
d9912c
  Resolves: RHBZ#1788035
d9912c
  Resolves: RHBZ#1788024
d9912c
- ipapwpolicy: Use global_policy if name is not set
d9912c
  Resolves: RHBZ#1797532
d9912c
- ipahbacrule: Fix handing of members with action hbacrule
d9912c
  Resolves: RHBZ#1787996
d9912c
- ansible_freeipa_module: Fix comparison of bool parameters in compare_args_isa
d9912c
  Resolves: RHBZ#1784514
d9912c
- ipahost: Add support for several IP addresses and also to change them
d9912c
  Resolves: RHBZ#1783979
d9912c
  Resolves: RHBZ#1783976
d9912c
- ipahost: Fail on action member for new hosts, fix dnsrecord_add reverse flag
d9912c
  Resolves: RHBZ#1803026
d9912c
d9912c
* Sat Dec 14 2019 Thomas Woerner <twoerner@redhat.com> - 0.1.8-1
d9912c
- Update to version 0.1.8 (bug fix release)
d9912c
  - roles/ipaclient/README.md: Add information about ipaclient_otp
d9912c
  - Install and enable firewalld if it is configured for ipaserver and
d9912c
    ipareplica roles
d9912c
  - ipaserver_test: Do not use zone_overlap_check for domain name validation
d9912c
  - Allow execution of API commands that do not require a name
d9912c
  - Update README-host: Drop options from allow_*keytab parameters docs
d9912c
  - ipauser: Extend email addresses with default email domain if no domain is
d9912c
    given
d9912c
    Resolves: RHBZ#1747413
d9912c
  Related: RHBZ#1748986
d9912c
d9912c
* Mon Dec  2 2019 Thomas Woerner <twoerner@redhat.com> - 0.1.7-1
d9912c
- Update to version 0.1.7
d9912c
  - Add debian support for ipaclient
d9912c
  - Added support for predefining client OTP using ipaclient_otp
d9912c
  - ipatopologysegment: Store suffix for commands in command list
d9912c
  - ipatopologysegment: Fail for missing entry with reinitialized
d9912c
  - Utils scripts: ansible-ipa-[server,replica,client]-install
d9912c
  - ipaserver_test,ipareplica_prepare: Do not return _pkcs12_file settings
d9912c
  - ansible_freeipa_module: Add support for GSSAPI
d9912c
  - ansible_ipa_client: Drop import of configure_nsswitch_database
d9912c
  - New host management module
d9912c
  - New hostgroup management module
d9912c
  - ipagroup: Remove unused member_[present,absent] states
d9912c
  - external-ca tests: Fix typo in inventory files
d9912c
  - tests/external-signed-ca tests: Fix external-ca.sh to use proper serials
d9912c
  - ipagroup: Rework to use same mechanisms as ipahostgroup module
d9912c
  - ansible_freeipa_module: api_command should not have extra try clause
d9912c
  - ansible_freeipa_module: compare_args_ipa needs to compare lists orderless
d9912c
  - ansible_freeipa_module: New function api_check_param
d9912c
  - ansible_freeipa_module: New functions module_params_get and _afm_convert
d9912c
  - ansible_freeipa_module: Add missing to_text import for _afm_convert
d9912c
  - ansible_freeipa_module: Convert tuple to list in compare_args_ipa
d9912c
  - ansible_freeipa_module: New function api_get_realm
d9912c
  - ipauser: User module extension
d9912c
  - New sudocmd management module
d9912c
  - New sudocmdgroup management module
d9912c
  - ansible_freeipa_module: Convert int to string in compare_args_ipa
d9912c
  - New pwpolicy management module
d9912c
  - New hbacsvc (HBAC Service) management module
d9912c
  - New hbacsvcgroup (HBAC Service Group) management module
d9912c
  - ipagroup: Properly support IPA versions 4.6 and RHEL-7
d9912c
  - ipagroup: Fix changed flag, new test cases
d9912c
  - ipauser: Add info about version limitation of passwordexpiration
d9912c
  - New hbacrule (HBAC Rule) management module
d9912c
  - ipahostgroup: Fix changed flag, support IPA 4.6 on RHEL-7, new test cases
d9912c
  - New sudorule (Sudo Rule) management module
d9912c
  - ipauser: Support 'sn' alias of 'last' for surname
d9912c
  - Update galaxy.yml: Update description, drop empty dependencies
d9912c
  - Update ipauser.py: Fix typo in users.name description
d9912c
  - ipaclient: Fix misspelled sssd options
d9912c
  - ipauser: Return generated random password
d9912c
  - ipahost: Return generated random password
d9912c
  - Added context configuration to api_connect
d9912c
  - ansible_freeipa_module: Better support for KRB5CCNAME environment variable
d9912c
  - ipa[server,replica,client]: Add support for CentOS-8
d9912c
  - ipahost: Extension to be able handle several hosts and all settings
d9912c
  - Flake8 fixes
d9912c
  - Documentation updates
d9912c
  - Cleanup
d9912c
  Resolves: RHBZ#1748986
d9912c
9e975f
* Fri Sep  6 2019 Thomas Woerner <twoerner@redhat.com> - 0.1.6-4
9e975f
- ansible_ipa_client: Drop import of configure_nsswitch_database
9e975f
  (RHBZ#1748905)
9e975f
9e975f
* Wed Jul 31 2019 Thomas Woerner <twoerner@redhat.com> - 0.1.6-3
9e975f
- ipatopologysegment: Store suffix for commands in command list (RHBZ#1733547)
9e975f
- ipatopologysegment: Fail for missing entry with reinitialized (RHBZ#1733559)
9e975f
9e975f
* Tue Jul 23 2019 Thomas Woerner <twoerner@redhat.com> - 0.1.6-2
9e975f
- Drop dirserv_cert_files key from utils/gen_module_docs.py for covscan
9e975f
9e975f
* Tue Jul 23 2019 Thomas Woerner <twoerner@redhat.com> - 0.1.6-1
9e975f
- update to version 0.1.6
9e975f
  - Lots of documentation updates in READMEs and modules
9e975f
  - library/ipaclient_get_otp: Enable force mode for host_add call (fixes #74)
9e975f
  - Flake8 and pylint reated fixes
9e975f
  - Fixed wrong path to CheckedIPAddress class in ipareplica_test
9e975f
  - Remove unused ipaserver/library/ipaserver.py
9e975f
  - No not use wildcard imports for modules
9e975f
  - ipareplica: Add support for pki_config_override
9e975f
  - ipareplica: Initialize dns.ip_addresses and dns.reverse_zones for dns setup
9e975f
  - ipareplica_prepare: Properly initialize pin and cert_name variables
9e975f
  - ipareplica: Fail with proper error messages
9e975f
  - ipaserver: Properly set settings related to pkcs12 files
9e975f
  - ipaclient: RawConfigParser is not always provided by six.moves.configparser
9e975f
  - ipaclient_setup_nss: paths.GETENT is not available before
9e975f
    freeipa-4.6.90.pre1
9e975f
  - ipaserver_test: Initialize value from options.zonemgr
9e975f
  - ipareplica_setup_custodia: create_replica only available in newer releases
9e975f
  - ipaclient: Fix typo in dnsok assignment for ipaclient_setup_nss
9e975f
  - ipa[server,replica]: Set _packages_adtrust for Ubuntu
9e975f
  - New build script for galaxy release
9e975f
  - New utils script to update module docs
9e975f
- Changes from ansible-freeipa-0.1.5
9e975f
  - Support for IPA 4.8.0
9e975f
  - New user management module
9e975f
  - New group management module
9e975f
  - ipaserver: Support external signed CA
9e975f
  - RHEL-8 specific vars files to be able to install needed modules
9e975f
    automatically
9e975f
  - ipareplica: Fixes for certmonger and kra setup
9e975f
  - New tests folder
9e975f
  - OTP related updates to README files
9e975f
9e975f
* Thu Jul  4 2019 Thomas Woerner <twoerner@redhat.com> - 0.1.4-2
9e975f
- ansible_ipa_client: Always set options.unattended (RHBZ#1726645)
9e975f
- ipaserver_prepare: Properly report error, do show trace back (RHBZ#1726668)
9e975f
- ipa[server,replica,client]: RHEL-8 specific vars files (RHBZ#1727095)
9e975f
- ipatopology modules: Use ipaadmin_ prefix for principal and password
9e975f
  (RHBZ#1727101)
9e975f
9e975f
* Mon Jun 17 2019 Thomas Woerner <twoerner@redhat.com> - 0.1.4-1
9e975f
- update to version 0.1.4
9e975f
  - ipatopologysegment: Use commands, not command
9e975f
9e975f
* Mon Jun 17 2019 Thomas Woerner <twoerner@redhat.com> - 0.1.3-1
9e975f
- update to version 0.1.3
9e975f
  - ipaclient_test: Fix Python2 decode use with Python3
9e975f
  - Fixed: #86 (AttributeError: 'str' object has no attribute 'decode')
9e975f
  - ipaclient_get_otp: Remove ansible_python_interpreter handling
9e975f
  - ipaclient: Use omit (None) for password, keytab, no string length checks
9e975f
  - ipaclient_join: Support to use ipaadmin_keytab without ipaclient_use_otp
9e975f
  - ipaclient: Report error message if ipaclient_get_otp failed
9e975f
  - Fixes #17 Improve how tasks manage package installation
9e975f
  - ipareplica: The dm password is not needed for ipareplica_master_password
9e975f
  - ipareplica: Use ipareplica_server if set
9e975f
  - ipatopologysegment: Allow domain+ca suffix, new state: checked
9e975f
  - Documentation updates
9e975f
  - Cleanups
9e975f
9e975f
* Tue Jun 11 2019 Thomas Woerner <twoerner@redhat.com> - 0.1.2-3
9e975f
- bump release for functional test
9e975f
9e975f
* Tue Jun 11 2019 Thomas Woerner <twoerner@redhat.com> - 0.1.2-2
9e975f
- bump release for functional test
9e975f
9e975f
* Fri Jun  7 2019 Thomas Woerner <twoerner@redhat.com> - 0.1.2-1
9e975f
- update to version 0.1.2
9e975f
  - Now a new Ansible Collection
9e975f
  - Fix gssapi requirement for OTP: It is only needed if keytab is used with
9e975f
    OTP now.
9e975f
  - Fix wrong ansible argument types
9e975f
  - Do not fail on textwrap for replica deployments with CA
9e975f
  - Ansible lint and galaxy fixes
9e975f
  - Disable automatic removal of replication agreements in uninstall
9e975f
  - Enable freeipa-trust service if adtrust is enabled
9e975f
  - Add support for hidden replica
9e975f
  - New topology managament modules
9e975f
  - Add support for pki_config_override
9e975f
  - Fix host name setup in server deployment
9e975f
  - Fix errors when ipaservers variable is not set
9e975f
  - Fix ipaclient install role length typo
9e975f
  - Cleanups
9e975f
  
9e975f
* Mon May  6 2019 Thomas Woerner <twoerner@redhat.com> - 0.1.1-1
9e975f
- Initial package