0001-Fix-incorrect-check-for-principal-type-when-evaluati.patch
0002-uninstall-untrack-lightweight-CA-certs.patch
0003-ipa-nis-manage-Use-server-API-to-retrieve-plugin-sta.patch
0004-ipa-compat-manage-use-server-API-to-retrieve-plugin-.patch
0005-ipa-advise-correct-handling-of-plugin-namespace-iter.patch
0006-kdb-check-for-local-realm-in-enterprise-principals.patch
0007-Enable-vault-commands-on-client.patch
0008-vault-add-set-the-default-vault-type-on-the-client-s.patch
0009-caacl-expand-plugin-documentation.patch
0010-host-find-do-not-show-SSH-key-by-default.patch
0011-Removed-unused-method-parameter-from-migrate-ds.patch
0012-Preserve-user-principal-aliases-during-rename-operat.patch
0013-messages-specify-message-type-for-ResultFormattingEr.patch
0014-schema-Fix-subtopic-topic-mapping.patch
0015-DNS-install-Ensure-that-DNS-servers-container-exists.patch
0016-Heap-corruption-in-ipapwd-plugin.patch
0017-Use-server-API-in-com.redhat.idm.trust-fetch-domains.patch
0018-frontend-copy-command-arguments-to-output-params-on-.patch
0019-Show-full-error-message-for-selinuxusermap-add-hostg.patch
0020-allow-value-output-param-in-commands-without-primary.patch
0021-server-uninstall-fails-to-remove-krb-principals.patch
0022-expose-secret-option-in-radiusproxy-commands.patch
0023-prevent-search-for-RADIUS-proxy-servers-by-secret.patch
0024-trust-add-handle-all-raw-options-properly.patch
0025-unite-log-file-name-of-ipa-ca-install.patch
0026-Host-del-fix-behavior-of-updatedns-and-PTR-records.patch
0027-help-Add-dnsserver-commands-to-help-topic-dns.patch
0028-DNS-Locations-fix-update-system-records-unpacking-er.patch
0029-Fix-session-cookies.patch
0030-Use-copy-when-replacing-files-to-keep-SELinux-contex.patch
0031-baseldap-Fix-MidairCollision-instantiation-during-en.patch
0032-Create-indexes-for-krbCanonicalName-attribute.patch
0033-harden-the-check-for-trust-namespace-overlap-in-new-.patch
0034-Revert-Enable-vault-commands-on-client.patch
0035-client-fix-hiding-of-commands-which-lack-server-supp.patch
0036-Minor-fix-in-ipa-replica-manage-MAN-page.patch
0037-compat-fix-ping-call.patch
0038-replica-install-Fix-domain.patch
0039-idrange-fix-unassigned-global-variable.patch
0040-re-set-canonical-principal-name-on-migrated-users.patch
0041-Do-not-initialize-API-in-ipa-client-automount-uninst.patch
0042-Correct-path-to-HTTPD-s-systemd-service-directory.patch
0043-vault-Catch-correct-exception-in-decrypt.patch
0044-Increase-default-length-of-auto-generated-passwords.patch
0045-vault-add-missing-salt-option-to-vault_mod.patch
0046-Fix-ipa-hbactest-output.patch
0047-install-fix-external-CA-cert-validation.patch
0048-caacl-fix-regression-in-rule-instantiation.patch
0049-Update-ipa-replica-install-documentation.patch
0050-ipa-kdb-Fix-unit-test-after-packaging-changes-in-krb.patch
0051-Improvements-for-the-ipa-cacert-manage-man-and-help.patch
0052-Revert-spec-add-conflict-with-bind-chroot-to-freeipa.patch
0053-Fix-unicode-characters-in-ca-and-domain-adders.patch
0054-ipa-backup-backup-etc-tmpfiles.d-dirsrv-instance-.co.patch
0055-client-RPM-require-initscripts-to-get-domainname.ser.patch
0056-parameters-move-the-confirm-kwarg-to-Param.patch
0057-client-add-missing-output-params-to-client-side-comm.patch
0058-server-install-Fix-hostname-option-to-always-overrid.patch
0059-install-Call-hostnamectl-set-hostname-only-if-hostna.patch
0060-schema-Speed-up-schema-cache.patch
0061-frontend-Change-doc-summary-topic-and-NO_CLI-to-clas.patch
0062-schema-Introduce-schema-cache-format.patch
0063-schema-Generate-bits-for-help-load-them-on-request.patch
0064-help-Do-not-create-instances-to-get-information-abou.patch
0065-Fix-ipa-caalc-add-service-error-message.patch
0066-Don-t-show-force-ntpd-option-in-replica-install.patch
0067-DNS-server-upgrade-do-not-fail-when-DNS-server-did-n.patch
0068-DNS-allow-to-add-forward-zone-to-already-broken-sub-.patch
0069-cert-speed-up-cert-find.patch
0070-cert-do-not-crash-on-invalid-data-in-cert-find.patch
0071-Add-warning-about-only-one-existing-CA-server.patch
0072-Set-servers-list-as-default-facet-in-topology-facet-.patch
0073-schema-cache-Do-not-reset-ServerInfo-dirty-flag.patch
0074-schema-cache-Do-not-read-fingerprint-and-format-from.patch
0075-Access-data-for-help-separately.patch
0076-frontent-Add-summary-class-property-to-CommandOverri.patch
0077-schema-cache-Read-server-info-only-once.patch
0078-schema-cache-Store-API-schema-cache-in-memory.patch
0079-client-Do-not-create-instance-just-to-check-isinstan.patch
0080-schema-cache-Read-schema-instead-of-rewriting-it-whe.patch
0081-schema-check-Check-current-client-language-against-c.patch
0082-Fail-on-topology-disconnect-last-role-removal.patch
0083-server-install-do-not-prompt-for-cert-file-PIN-repea.patch
0084-service-add-flag-to-allow-S4U2Self.patch
0085-Add-trusted-to-auth-as-user-checkbox.patch
0086-Added-new-authentication-method.patch
0087-schema-cache-Fallback-to-en_us-when-locale-is-not-av.patch
0088-cert-revoke-fix-permission-check-bypass-CVE-2016-540.patch
0089-Fix-container-owner-should-be-able-to-add-vault.patch
0090-ipaserver-dcerpc-reformat-to-make-the-code-closer-to.patch
0091-trust-automatically-resolve-DNS-trust-conflicts-for-.patch
0092-trust-make-sure-external-trust-topology-is-correctly.patch
0093-trust-make-sure-ID-range-is-created-for-the-child-do.patch
0094-ipa-kdb-simplify-trusted-domain-parent-search.patch
0095-Remove-Custodia-server-keys-from-LDAP.patch
0096-Handled-empty-hostname-in-server-del-command.patch
0097-Secure-permissions-of-Custodia-server.keys.patch
0098-Require-httpd-2.4.6-31-with-mod_proxy-Unix-socket-su.patch
0099-Fix-ipa-server-install-in-pure-IPv6-environment.patch
0100-support-multiple-uid-values-in-schema-compatibility-.patch
0101-custodia-include-known-CA-certs-in-the-PKCS-12-file-.patch
0102-otptoken-permission-Convert-custom-type-parameters-o.patch
0103-Raise-DuplicatedEnrty-error-when-user-exists-in-dele.patch
0104-cert-add-missing-param-values-to-cert-find-output.patch
0105-rpcserver-assume-version-1-for-unversioned-command-c.patch
0106-custodia-force-reconnect-before-retrieving-CA-certs-.patch
0107-rpcserver-fix-crash-in-XML-RPC-system-commands.patch
0108-compat-Save-server-s-API-version-in-for-pre-schema-s.patch
0109-compat-Fix-ping-command-call.patch
0110-Fix-man-page-ipa-replica-manage-remove-duplicate-c-o.patch
0111-cert-include-CA-name-in-cert-command-output.patch
0112-Fix-CA-ACL-Check-on-SubjectAltNames.patch
0113-do-not-use-trusted-forest-name-to-construct-domain-a.patch
0114-Always-fetch-forest-info-from-root-DCs-when-establis.patch
0115-factor-out-populate_remote_domain-method-into-module.patch
0116-Always-fetch-forest-info-from-root-DCs-when-establis.patch
0117-cli-use-full-name-when-executing-a-command.patch
0118-Use-RSA-OAEP-instead-of-RSA-PKCS-1-v1.5.patch
0119-Fix-ipa-certupdate-for-CA-less-installation.patch
0120-Track-lightweight-CAs-on-replica-installation.patch
0121-dns-normalize-record-type-read-interactively-in-dnsr.patch
0122-dns-prompt-for-missing-record-parts-in-CLI.patch
0123-dns-fix-crash-in-interactive-mode-against-old-server.patch
0124-schema-cache-Store-and-check-info-for-pre-schema-ser.patch
0125-Fix-parse-errors-with-link-local-addresses.patch
0126-Add-support-for-additional-options-taken-from-table-.patch
0127-WebUI-Fix-showing-certificates-issued-by-sub-CA.patch
0128-WebUI-add-support-for-sub-CAs-while-revoking-certifi.patch
0129-cert-fix-cert-find-certificate-when-the-cert-is-not-.patch
0130-Make-host-service-cert-revocation-aware-of-lightweig.patch
0131-Fix-regression-introduced-in-ipa-certupdate.patch
0132-Start-named-during-configuration-upgrade.patch
0133-Catch-DNS-exceptions-during-emptyzones-named.conf-up.patch
0134-trust-fetch-domains-contact-forest-DCs-when-fetching.patch
0135-ipa-passwd-use-correct-normalizer-for-user-principal.patch
0136-Keep-NSS-trust-flags-of-existing-certificates.patch
0137-Properly-handle-LDAP-socket-closures-in-ipa-otpd.patch
0138-cert-add-revocation-reason-back-to-cert-find-output.patch
0139-Make-httpd-publish-its-CA-certificate-on-DL1.patch
0140-Add-cert-checks-in-ipa-server-certinstall.patch
0141-WebUI-services-without-canonical-name-are-shown-corr.patch
0142-Fix-missing-file-that-fails-DL1-replica-installation.patch
0143-trustdomain-del-fix-the-way-how-subdomain-is-searche.patch
0144-spec-file-bump-minimal-required-version-of-389-ds-ba.patch
0145-replication-ensure-bind-DN-group-check-interval-is-s.patch
0146-bindinstance-use-data-in-named.conf-to-determine-con.patch
0147-gracefully-handle-setting-replica-bind-dn-group-on-o.patch
0148-add-missing-attribute-to-ipaca-replica-during-CA-top.patch
0149-Check-for-conflict-entries-before-raising-domain-lev.patch
0150-certprofile-mod-correctly-authorise-config-update.patch
0151-password-policy-Add-explicit-default-password-policy.patch
0152-ipa-kdb-search-for-password-policies-globally.patch
1001-Hide-pkinit-functionality-from-production-version.patch
1002-Remove-pkinit-plugin.patch
1003-Remove-pkinit-references-from-tool-man-pages.patch
1004-Change-branding-to-IPA-and-Identity-Management.patch
1005-Remove-pylint-from-build-process.patch
1006-Remove-i18test-from-build-process.patch
1007-Do-not-build-tests.patch
1008-RCUE.patch
1009-Revert-Increased-mod_wsgi-socket-timeout.patch
1010-WebUI-add-API-browser-is-tech-preview-warning.patch