RHEA-2021:1860 - Product Enhancement Advisory

Topic

An update for ansible-freeipa is now available for Red Hat Enterprise Linux
8.

Description

For detailed information on changes in this release, see the Red Hat
Enterprise Linux 8.4 Release Notes linked from the References section.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux for x86_64 8 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.8 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.8 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.4 x86_64
• Red Hat Enterprise Linux Server - AUS 8.6 x86_64
• Red Hat Enterprise Linux Server - AUS 8.4 x86_64
• Red Hat Enterprise Linux for IBM z Systems 8 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.8 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.6 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.4 s390x
• Red Hat Enterprise Linux for Power, little endian 8 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.8 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.6 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.4 ppc64le
• Red Hat Enterprise Linux Server - TUS 8.8 x86_64
• Red Hat Enterprise Linux Server - TUS 8.6 x86_64
• Red Hat Enterprise Linux Server - TUS 8.4 x86_64
• Red Hat Enterprise Linux for ARM 64 8 aarch64
• Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.8 aarch64
• Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.6 aarch64
• Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.4 aarch64
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.4 ppc64le
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.4 x86_64

Fixes

• BZ - 1875378 - [ansible-freeipa] Printing strange characters while retrieving data to file in the vault module
• BZ - 1876896 - modify dnszone with serial fails when it used with refresh, retry, expire.
• BZ - 1879004 - [ansible-freeipa] Not able to change symmetric vault password with password file
• BZ - 1880367 - [ansible-freeipa] after changing the vault type from standard to symmetric, Salt is missing.
• BZ - 1880377 - [ansible-freeipa] After changing the vault type from symmetric to asymmetric, Salt is present in the asymmetric vault.
• BZ - 1880378 - [ansible-freeipa] After changing the vault type from asymmetric to the standard vault, the Public key is present in the standard vault.
• BZ - 1880409 - [ansible-freeipa] Not able to modify the DNS record with new values.
• BZ - 1880862 - [ansible-freeipa] Not able to replace public-key-file to the public-key in asymmetric vault type.
• BZ - 1881436 - [ansible-freeipa] Not able to modify the DNS record with new values using naptr_record
• BZ - 1881452 - [ansible-freeipa] Also when tried to update multiple records with all attributes with type DS it creates new entry.
• BZ - 1891826 - [Rebase] Rebase ansible-freeipa to 0.2.1+
• BZ - 1893675 - [Ansible-freeipa] ipauser module does not seem to support --check flag to ansible-playbook
• BZ - 1893678 - [ansible-freeipa] Not able to add additional privileges with existing privilege in role module
• BZ - 1893679 - [ansible-freeipa] Required error message while adding non-existing members in role handling
• BZ - 1893684 - [ansible-freeipa] Not able to add new members with existing members role handling
• BZ - 1893685 - [ansible-freeipa] service members are removed while updating other members in role handling
• BZ - 1893687 - [ansible-freeipa] Not able to add additional attributes with existing attributes in permission handling
• BZ - 1893688 - [ansible-freeipa] Privilege variable is removed from permission handling.
• BZ - 1894488 - [RFE] Support for firewalld zone in ipaserver and ipareplica roles
• BZ - 1894493 - [RFE] ipagroup: Add support for the IPA CLI option `posix`
• BZ - 1894494 - [RFE] New ipabackup role for backup and restore
• BZ - 1894496 - [RFE] New management module ipadelegation
• BZ - 1894497 - [RFE] management module ipalocation
• BZ - 1894498 - [RFE] management module ipaprivilege
• BZ - 1894499 - [RFE] management module ipapermission
• BZ - 1894500 - [RFE] management module iparole
• BZ - 1894501 - [RFE] New management module ipaselfservice
• BZ - 1894502 - [RFE] New management module ipatrust
• BZ - 1931381 - [ansible-freepa] ipa-client-install failing with error code 7(keytab: /usr/sbin/ipa-rmkeytab returned 7)

CVEs

(none)

References

• https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.4_release_notes/index