RHEA-2020:4663 - Product Enhancement Advisory

Topic

An update for ansible-freeipa is now available for Red Hat Enterprise Linux
8.

Description

For detailed information on changes in this release, see the Red Hat
Enterprise Linux 8.3 Release Notes linked from the References section.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux for x86_64 8 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.8 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.8 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.4 x86_64
• Red Hat Enterprise Linux Server - AUS 8.6 x86_64
• Red Hat Enterprise Linux Server - AUS 8.4 x86_64
• Red Hat Enterprise Linux for IBM z Systems 8 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.8 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.6 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.4 s390x
• Red Hat Enterprise Linux for Power, little endian 8 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.8 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.6 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.4 ppc64le
• Red Hat Enterprise Linux Server - TUS 8.8 x86_64
• Red Hat Enterprise Linux Server - TUS 8.6 x86_64
• Red Hat Enterprise Linux Server - TUS 8.4 x86_64
• Red Hat Enterprise Linux for ARM 64 8 aarch64
• Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.8 aarch64
• Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.6 aarch64
• Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.4 aarch64
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.4 ppc64le
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.4 x86_64

Fixes

• BZ - 1818768 - [Rebase] Rebase ansible-freeipa to 0.1.11+
• BZ - 1820045 - [ansible-freeipa] Not able to remove usercat='all'/hostcat='all'/servicecat='all' from hbacrule in HBAC module
• BZ - 1820047 - [ansible-freeipa] Not able to remove usercat='all'/hostcat='all'/cmdcat='all' from sudorule in SUDO module
• BZ - 1822669 - [ansible-freeipa] hbacrule added while adding hbacrule with hostcategory=all and a specific host at the same time
• BZ - 1822678 - [ansible-freeipa] sudocrule added while adding rule with hostcategory=all and a specific host at the same time.
• BZ - 1822683 - [ansible-freeipa] Not showing error while adding same user with multiple json files
• BZ - 1827924 - [ansible-freeipa] Not able to add vault without username option in the vault module.
• BZ - 1827926 - [ansible-freeipa] Standard vault accepting password option in the vault module.
• BZ - 1828043 - [ansible-freeipa] By default salt added with the standard vault in vault module
• BZ - 1828044 - [ansible-freeipa] Expecting a proper error message for a password required while adding vault with default type in vault module
• BZ - 1828046 - [ansible-freeipa] Standard vault accepting public key in the vault module.
• BZ - 1828176 - [ansible-freeipa] Kerberos credentials(ipaadmin_password) is not recognizing in the vault module
• BZ - 1828822 - [ansible-freeipa] services variable is missing in vault module.
• BZ - 1828853 - [ansible-freeipa] password-file and public-key-file variable are missing in vault module
• BZ - 1830940 - [ansible-freeipa] To archive data from file is missing in vault module
• BZ - 1830941 - [ansible-freeipa] vault_retrieve is missing from the vault module
• BZ - 1834752 - [ansible-freeipa] Required correct error message for adding pac_type with action: member in the service module.
• BZ - 1834754 - [ansible-freeipa] Certificates are removed while updating other attributes in the service module.
• BZ - 1836287 - [ansible-freeipa] Not able to add more than one auth_ind in the service module
• BZ - 1836288 - [ansible-freeipa] Expecting valid error message while adding service with missing service name.
• BZ - 1836291 - [ansible-freeipa] delete_continue variable is missing in service module
• BZ - 1836294 - [ansible-freeipa] service disable is not working for kerberos key
• BZ - 1836601 - [ansible-freeipa] Not able to reset the auth_ind for service in service module
• BZ - 1839196 - [ansible-freeipa] vault owner for service is missing from vault module
• BZ - 1839197 - [ansible-freeipa] Password change option is missing for the symmetric vault in the vault module.
• BZ - 1839200 - [ansible-freeipa] Vault password salt can change without password in vault module.
• BZ - 1839466 - [ansible-freeipa] Default vault type accepting public key in the vault module.
• BZ - 1843826 - [ansible-freeipa] The custom port option is not available in the DNSforwardzone module
• BZ - 1843828 - [ansible-freeipa] Required correct error message for adding DNS forwardzone without forwarders.
• BZ - 1843829 - [ansible-freeipa] Not able to modify forward policy from the existing DNS forward zone in the Dnsforwardzone module
• BZ - 1843830 - [ansible-freeipa] dnsforwardzone add/remove permission option is not available in the DNSforwardzone module
• BZ - 1843831 - [ansible-freeipa] Not able to delete multiple DNS forward zones in the DNSforwardzone module.
• BZ - 1843832 - [ansible-freeipa] Required correct error message for adding the invalid IP address in DNS config module
• BZ - 1845051 - [ansible-freeipa] Required correct error messages in DNS Zone module
• BZ - 1845056 - [ansible-freeipa] Option/Variable is missing to create reverse zone by the IP in DNS Zone module
• BZ - 1845058 - [ansible-freeipa] Not able to delete multiple DNS forward zones in the DNZ Zone module.
• BZ - 1848426 - [ansible-freeipa] Required error message for adding the non-existing users/groups as a Hostgroup member manager
• BZ - 1852714 - Get One-Time Password for client enrollment fails
• BZ - 1853284 - [ansible-freeipa] Replica deployment is failing due to pkcs12 info have been changed.
• BZ - 1855299 - ipareplica: Failure while deploying KRA
• BZ - 1867909 - Vault module does not return a dict of values.
• BZ - 1868020 - [ansible-freeipa] allow_retrieve_keytab_host variable is not working in service module

CVEs

(none)

References

• https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes/index