0001-Start-dirsrv-for-kdcproxy-upgrade.patch
0002-Fix-DNS-records-installation-for-replicas.patch
0003-Prevent-to-rename-certprofile-profile-id.patch
0004-Stageusedr-activate-show-username-instead-of-DN.patch
0005-copy-schema-to-ca-allow-to-overwrite-schema-files.patch
0006-spec-file-Update-minimum-required-version-of-krb5.patch
0007-do-not-import-memcache-on-client.patch
0008-selinux-enable-httpd_run_ipa-to-allow-communicating-.patch
0009-oddjob-avoid-chown-keytab-to-sssd-if-sssd-user-does-.patch
0010-webui-fix-user-reset-password-dialog.patch
0011-fix-hbac-rule-search-for-non-admin-users.patch
0012-fix-selinuxusermap-search-for-non-admin-users.patch
0013-Validate-adding-privilege-to-a-permission.patch
0014-migration-Use-api.env-variables.patch
0015-sysrestore-copy-files-instead-of-moving-them-to-avoi.patch
0016-Allow-value-no-for-replica-certify-all-attr-in-abort.patch
0017-trusts-Check-for-AD-root-domain-among-our-trusted-do.patch
0018-enable-debugging-of-ntpd-during-client-installation.patch
0019-cermonger-Use-private-unix-socket-when-DBus-SystemBu.patch
0020-ipa-client-install-Do-not-re-start-certmonger-and-DB.patch
0021-DNS-Consolidate-DNS-RR-types-in-API-and-schema.patch
0022-ipaplatform-Add-constants-submodule.patch
0023-DNS-check-if-DNS-package-is-installed.patch
0024-dcerpc-Expand-explanation-for-WERR_ACCESS_DENIED.patch
0025-dcerpc-Fix-UnboundLocalError-for-ccache_name.patch
0026-fix-broken-search-for-users-by-their-manager.patch
0027-dcerpc-Add-get_trusted_domain_object_type-method.patch
0028-idviews-Restrict-anchor-to-name-and-name-to-anchor-c.patch
0029-idviews-Enforce-objectclass-check-in-idoverride-del.patch
0030-idviews-Check-for-the-Default-Trust-View-only-if-app.patch
0031-replication-Fix-incorrect-exception-invocation.patch
0032-webui-add-Kerberos-configuration-instructions-for-Ch.patch
0033-Remove-ico-files-from-Makefile.patch
0034-ACI-plugin-correctly-parse-bind-rules-enclosed-in-pa.patch
0035-ULC-Fix-stageused-add-from-delete-command.patch
0036-webui-fix-regressions-failed-auth-messages.patch
0037-Validate-vault-s-file-parameters.patch
0038-certprofile-import-do-not-require-profileId-in-profi.patch
0039-user-show-add-out-option-to-save-certificates-to-fil.patch
0040-store-certificates-issued-for-user-entries-as-userCe.patch
0041-Fix-incorrect-type-comparison-in-trust-fetch-domains.patch
0042-Fix-selector-of-protocol-for-LSA-RPC-binding-string.patch
0043-dcerpc-Simplify-generation-of-LSA-RPC-binding-string.patch
0044-Fixed-missing-KRA-agent-cert-on-replica.patch
0045-webui-add-LDAP-vs-Kerberos-behavior-description-to-u.patch
0046-Fix-upgrade-of-sidgen-and-extdom-plugins.patch
0047-Give-more-info-on-virtual-command-access-denial.patch
0048-Allow-SAN-extension-for-cert-request-self-service.patch
0049-Add-profile-for-DNP3-IEC-62351-8-certificates.patch
0050-Work-around-python-nss-bug-on-unrecognised-OIDs.patch
0051-adtrust-install-Correctly-determine-4.2-FreeIPA-serv.patch
0052-certprofile-import-improve-profile-format-documentat.patch
0053-Fix-default-CA-ACL-added-during-upgrade.patch
0054-Fix-KRB5PrincipalName-UPN-SAN-comparison.patch
0055-adjust-search-so-that-it-works-for-non-admin-users.patch
0056-validate-mutually-exclusive-options-in-vault-add.patch
0057-idranges-raise-an-error-when-local-IPA-ID-range-is-b.patch
0058-install-Fix-server-and-replica-install-options.patch
0059-certprofile-add-profile-format-explanation.patch
0060-ULC-Prevent-preserved-users-from-being-assigned-memb.patch
0061-Asymmetric-vault-validate-public-key-in-client.patch
0062-add-permission-System-Manage-User-Certificates.patch
0063-Add-permission-for-bypassing-CA-ACL-enforcement.patch
0064-Added-CLI-param-and-ACL-for-vault-service-operations.patch
0065-trusts-Detect-missing-Samba-instance.patch
0066-winsync-migrate-Add-warning-about-passsync.patch
0067-winsync-migrate-Expand-the-man-page.patch
0068-fix-typo-in-BasePathNamespace-member-pointing-to-ods.patch
0069-ipa-backup-archive-DNSSEC-zone-file-and-kasp.db.patch
0070-baseldap-Allow-overriding-member-param-label-in-LDAP.patch
0071-vault-Fix-param-labels-in-output-of-vault-owner-comm.patch
0072-Fixed-vault-container-ownership.patch
0073-vault-normalize-service-principal-in-service-vault-o.patch
0074-vault-validate-vault-type.patch
0075-install-Fix-replica-install-with-custom-certificates.patch
0076-trusts-harden-trust-fetch-domains-oddjobd-based-scri.patch
0077-user-undel-Fix-error-messages.patch
0078-Prohibit-deletion-of-predefined-profiles.patch
0079-improve-the-handling-of-krb5-related-errors-in-dnsse.patch
0080-client-Add-support-for-multiple-IP-addresses-during-.patch
0081-vault-Fix-vault-find-with-criteria.patch
0082-vault-Add-container-information-to-vault-command-res.patch
0083-Server-Upgrade-Start-DS-before-CA-is-started.patch
0084-cert-request-remove-allowed-extensions-check.patch
0085-client-Add-description-of-ip-address-and-all-ip-addr.patch
0086-Backup-resore-authentication-control-configuration.patch
0087-Add-flag-to-list-all-service-and-user-vaults.patch
0088-Add-user-stage-command.patch
0089-trusts-format-Kerberos-principal-properly-when-fetch.patch
0090-Change-internal-rsa_-public-private-_key-variable-na.patch
0091-improve-the-usability-of-ipa-user-del-preserve-comma.patch
0092-DNSSEC-fix-forward-zone-forwarders-checks.patch
0093-Added-support-for-changing-vault-encryption.patch
0094-vault-change-default-vault-type-to-symmetric.patch
0095-fix-missing-information-in-object-metadata.patch
0096-webui-add-option-to-establish-bidirectional-trust.patch
0097-Removed-clear-text-passwords-from-KRA-install-log.patch
0098-certprofile-prevent-rename-modrdn.patch
0099-vault-Limit-size-of-data-stored-in-vault.patch
0100-ipactl-Do-not-start-stop-restart-single-service-mult.patch
0101-cert-renewal-Include-KRA-users-in-Dogtag-LDAP-update.patch
0102-cert-renewal-Automatically-update-KRA-agent-PEM-file.patch
0103-DNSSEC-remove-DNSSEC-is-experimental-warnings.patch
0104-Backup-back-up-the-hosts-file.patch
0105-certprofile-remove-rename-option.patch
0106-Installer-do-not-modify-etc-hosts-before-user-agreem.patch
0107-DNSSEC-backup-and-restore-opendnssec-zone-list-file.patch
0108-DNSSEC-remove-ccache-and-keytab-of-ipa-ods-exporter.patch
0109-DNSSEC-prevent-ipa-ods-exporter-from-looping-after-s.patch
0110-DNSSEC-Fix-deadlock-in-ipa-ods-exporter-ods-enforcer.patch
0111-DNSSEC-Fix-HSM-synchronization-in-ipa-dnskeysyncd-wh.patch
0112-DNSSEC-Fix-key-metadata-export.patch
0113-DNSSEC-Wrap-master-key-using-RSA-OAEP-instead-of-old.patch
0114-ldap-Make-ldap2-connection-management-thread-safe-ag.patch
0115-Using-LDAPI-to-setup-CA-and-KRA-agents.patch
0116-load-RA-backend-plugins-during-standalone-CA-install.patch
0117-Handle-timeout-error-in-ipa-httpd-kdcproxy.patch
0118-Server-Upgrade-backup-CS.cfg-when-dogtag-is-turned-o.patch
0119-IPA-Restore-allows-to-specify-files-that-should-be-r.patch
0120-config-allow-user-host-attributes-with-tagging-optio.patch
0121-winsync-Add-inetUser-objectclass-to-the-passsync-sys.patch
0122-baseldap-make-subtree-deletion-optional-in-LDAPDelet.patch
0123-vault-add-vault-container-commands.patch
0124-vault-set-owner-to-current-user-on-container-creatio.patch
0125-vault-update-access-control.patch
0126-vault-add-permissions-and-administrator-privilege.patch
0127-install-support-KRA-update.patch
0128-webui-use-manual-Firefox-configuration-for-Firefox-4.patch
0129-ipa-backup-Add-mechanism-to-store-empty-directory-st.patch
0130-install-create-kdcproxy-user-during-server-install.patch
0131-destroy-httpd-ccache-after-stopping-the-service.patch
0132-platform-add-option-to-create-home-directory-when-ad.patch
0133-install-fix-kdcproxy-user-home-directory.patch
0134-winsync-migrate-Convert-entity-names-to-posix-friend.patch
0135-winsync-migrate-Properly-handle-collisions-in-the-na.patch
0136-Fix-an-integer-underflow-bug-in-libotp.patch
0137-do-not-overwrite-files-with-local-users-groups-when-.patch
0138-install-fix-KRA-agent-PEM-file-permissions.patch
0139-install-always-export-KRA-agent-PEM-file.patch
0140-vault-select-a-server-with-KRA-for-vault-operations.patch
0141-schema-do-not-derive-ipaVaultPublicKey-from-ipaPubli.patch
0142-upgrade-make-sure-ldap2-is-connected-in-export_kra_a.patch
0143-vault-fix-private-service-vault-creation.patch
0144-install-fix-command-line-option-validation.patch
0145-install-export-KRA-agent-PEM-file-in-ipa-kra-install.patch
0146-cert-renewal-make-renewal-of-ipaCert-atomic.patch
0147-suppress-errors-arising-from-adding-existing-LDAP-en.patch
0148-fix-caching-in-get_ipa_config.patch
0149-client-install-do-not-corrupt-OpenSSH-config-with-Ma.patch
0150-upgrade-fix-migration-of-old-dns-forward-zones.patch
0151-TLS-and-Dogtag-HTTPS-request-logging-improvements.patch
0152-Avoid-race-condition-caused-by-profile-delete-and-re.patch
0153-ipa-cacert-renew-Fix-connection-to-ldap.patch
0154-ipa-otptoken-import-Fix-connection-to-ldap.patch
0155-Do-not-erroneously-reinit-NSS-in-Dogtag-interface.patch
0156-Add-profiles-and-default-CA-ACL-on-migration.patch
0157-disconnect-ldap2-backend-after-adding-default-CA-ACL.patch
0158-do-not-disconnect-when-using-existing-connection-to-.patch
0159-Fix-upgrade-of-forwardzones-when-zone-is-in-realmdom.patch
1001-Hide-pkinit-functionality-from-production-version.patch
1002-Remove-pkinit-plugin.patch
1003-Remove-pkinit-references-from-tool-man-pages.patch
1004-Change-branding-to-IPA-and-Identity-Management.patch
1005-Remove-pylint-from-build-process.patch
1006-Remove-i18test-from-build-process.patch
1007-Do-not-build-tests.patch
1008-RCUE.patch
1009-Do-not-allow-installation-in-FIPS-mode.patch
1010-WebUI-add-API-browser-is-experimental-warning.patch