[ubuntu/xenial-proposed] freeipa 4.3.1-0ubuntu1 (Accepted)

Mon Apr 18 21:42:42 UTC 2016

freeipa (4.3.1-0ubuntu1) xenial; urgency=medium

  * Sync from Debian.

freeipa (4.3.1-1) unstable; urgency=medium

  * New upstream release. (Closes: #781607, #786411) (LP: #1449304)
    - drop no-test-lang.diff, obsolete
  * fix-match-hostname.diff, control: Drop the patch and python-openssl
    deps, not needed anymore
  * rules, platform, server.dirs, server.install:
    Add support for DNSSEC.
  * control, rules: Add support for kdcproxy.
  * control, server: Migrate to mod-auth-gssapi.
  * control, rules, fix-ipa-conf.diff: Add support for custodia.
  * control:
    - Add python-cryptography to build-deps and python-freeipa deps.
    - Add libp11-kit-dev to build-deps, p11-kit to server deps.
    - Depend on python-gssapi instead of python-kerberos/-krbV.
    - Add libini-config-dev and python-dbus to build-deps, replace wget
      with curl.
    - Bump libkrb5-dev build-dep.
    - Add pki-base to build-deps and pki-kra to server deps, bump pki-ca
      version.
    - Drop python-m2crypto from deps, obsolete.
    - Bump sssd deps to 1.13.1.
    - Add python-six to build-deps and python-freeipa deps.
    - Split python stuff from server, client, tests to python-
      ipa{server,client,tests}, rename python-freeipa to match and move
      translations to freeipa-common. Mark them Arch:all where possible,
      and add Breaks/Replaces.
    - Add oddjob to server and oddjob-mkhomedir to client deps.
    - Add python-setuptools to python-ipalib deps.
    - Bump 389-ds-base* deps.
    - Bump server and python-ipaserver dependency on python-ldap to 2.4.22
      to fix a bug on ipa-server-upgrade.
    - Add pki-tools to python-ipaserver deps.
    - Add zip to python-ipaserver depends.
    - Add python-systemd to server depends.
    - Add opendnssec to freeipa-server-dns depends.
    - Add python-cffi to python-ipalib depends.
    - Bump dep on bind9-dyndb-ldap.
    - Bump certmonger dependency to version that has helpers in the correct
      place.
  * patches:
    - prefix.patch: Fix ipalib install too.
    - Drop bits of platform.diff and other patches that are now upstream.
    - fix-kdcproxy-paths.diff: Fix paths in kdcproxy configs.
    - fix-oddjobs.diff: Fix paths and uids in oddjob configs.
    - fix-replicainstall.diff: Use ldap instead of ldaps for conncheck.
    - fix-dnssec-services.diff: Debianize ipa-dnskeysyncd & ipa-ods-
      exporter units.
    - create-sysconfig-ods.diff: Create an empty file for opendnssec
      daemons, until opendnssec itself is fixed.
    - purge-firefox-extension.diff: Clean obsolete kerberosauth.xpi.
    - enable-mod-nss-during-setup.diff: Split from platform.diff, call
      a2enmod/a2dismod from httpinstance.py.
    - fix-memcached.diff: Split from platform.diff, debianize memcached
      conf & unit.
    - hack-libarch.diff: Don't use fedora libpaths.
  * add-debian-platform.diff:
    - Update paths.py to include all variables, comment out ones we don't
      modify.
    - Use systemwide certificate store; put ipa-ca.crt in
      /usr/local/share/ca-certificates, and run update-ca-certificates
    - Map smb service to smbd (LP: #1543230)
    - Don't ship /var/cache/bind/data, fix named.conf a bit.
    - Use DebianNoService() for dbus. (LP: #1564981)
    - Add more constants
  * Split freeipa-server-dns from freeipa-server, add -dns to -server
    Recommends.
  * server.postinst: Use ipa-server-upgrade.
  * admintools: Use the new location for bash completions.
  * rules: Remove obsolete configure.jar, preferences.html.
  * platform: Fix ipautil.run stdout handling, add support for systemd.
  * server.postinst, tmpfile: Create state directories for
    mod_auth_gssapi.
  * rules, server.install: Install scripts under /usr/lib instead of
    multiarch path to avoid hacking the code too much.
  * fix-ipa-otpd-install.diff, rules, server.install: Put ipa-otpd in
    /usr/lib/ipa instead of directly under multiarch lib path.
  * control, server*.install: Move dirsrv plugins from server-trust-ad
    to server, needed on upgrades even if trust-ad isn't set up.
  * server: Enable mod_proxy_ajp and mod_proxy_http on postinst, disable
    on postrm.
  * rules: Add SKIP_API_VERSION_CHECK, and adjust directories to clean.
  * rules: Don't enable systemd units on install.
  * client: Don't create /etc/pki/nssdb on postinst, it's not used
    anymore.
  * platform.diff, rules, server.install: Drop generate-rndc-key.sh, bind
    already generates the keyfile.

Date: Tue, 19 Apr 2016 00:15:05 +0300
Changed-By: Timo Aaltonen <tjaalton at debian.org>
Maintainer: Debian FreeIPA Team <pkg-freeipa-devel at lists.alioth.debian.org>
Signed-By: Timo Aaltonen <tjaalton at ubuntu.com>
https://launchpad.net/ubuntu/+source/freeipa/4.3.1-0ubuntu1
-------------- next part --------------
Format: 1.8
Date: Tue, 19 Apr 2016 00:15:05 +0300
Source: freeipa
Binary: freeipa-server freeipa-server-dns freeipa-server-trust-ad freeipa-common freeipa-client freeipa-admintools freeipa-tests python-ipaclient python-ipalib python-ipaserver python-ipatests
Architecture: source
Version: 4.3.1-0ubuntu1
Distribution: xenial
Urgency: medium
Maintainer: Debian FreeIPA Team <pkg-freeipa-devel at lists.alioth.debian.org>
Changed-By: Timo Aaltonen <tjaalton at debian.org>
Description:
 freeipa-admintools - FreeIPA centralized identity framework -- admintools
 freeipa-client - FreeIPA centralized identity framework -- client
 freeipa-common - FreeIPA centralized identity framework -- common files
 freeipa-server - FreeIPA centralized identity framework -- server
 freeipa-server-dns - FreeIPA centralized identity framework -- IPA DNS integration
 freeipa-server-trust-ad - FreeIPA centralized identity framework -- AD trust installer
 freeipa-tests - FreeIPA centralized identity framework -- tests
 python-ipaclient - FreeIPA centralized identity framework -- Python modules for ipac
 python-ipalib - FreeIPA centralized identity framework -- shared Python modules
 python-ipaserver - FreeIPA centralized identity framework -- Python modules for serv
 python-ipatests - FreeIPA centralized identity framework -- Python modules for test
Closes: 781607 786411
Launchpad-Bugs-Fixed: 1449304 1543230 1564981
Changes:
 freeipa (4.3.1-0ubuntu1) xenial; urgency=medium
 .
   * Sync from Debian.
 .
 freeipa (4.3.1-1) unstable; urgency=medium
 .
   * New upstream release. (Closes: #781607, #786411) (LP: #1449304)
     - drop no-test-lang.diff, obsolete
   * fix-match-hostname.diff, control: Drop the patch and python-openssl
     deps, not needed anymore
   * rules, platform, server.dirs, server.install:
     Add support for DNSSEC.
   * control, rules: Add support for kdcproxy.
   * control, server: Migrate to mod-auth-gssapi.
   * control, rules, fix-ipa-conf.diff: Add support for custodia.
   * control:
     - Add python-cryptography to build-deps and python-freeipa deps.
     - Add libp11-kit-dev to build-deps, p11-kit to server deps.
     - Depend on python-gssapi instead of python-kerberos/-krbV.
     - Add libini-config-dev and python-dbus to build-deps, replace wget
       with curl.
     - Bump libkrb5-dev build-dep.
     - Add pki-base to build-deps and pki-kra to server deps, bump pki-ca
       version.
     - Drop python-m2crypto from deps, obsolete.
     - Bump sssd deps to 1.13.1.
     - Add python-six to build-deps and python-freeipa deps.
     - Split python stuff from server, client, tests to python-
       ipa{server,client,tests}, rename python-freeipa to match and move
       translations to freeipa-common. Mark them Arch:all where possible,
       and add Breaks/Replaces.
     - Add oddjob to server and oddjob-mkhomedir to client deps.
     - Add python-setuptools to python-ipalib deps.
     - Bump 389-ds-base* deps.
     - Bump server and python-ipaserver dependency on python-ldap to 2.4.22
       to fix a bug on ipa-server-upgrade.
     - Add pki-tools to python-ipaserver deps.
     - Add zip to python-ipaserver depends.
     - Add python-systemd to server depends.
     - Add opendnssec to freeipa-server-dns depends.
     - Add python-cffi to python-ipalib depends.
     - Bump dep on bind9-dyndb-ldap.
     - Bump certmonger dependency to version that has helpers in the correct
       place.
   * patches:
     - prefix.patch: Fix ipalib install too.
     - Drop bits of platform.diff and other patches that are now upstream.
     - fix-kdcproxy-paths.diff: Fix paths in kdcproxy configs.
     - fix-oddjobs.diff: Fix paths and uids in oddjob configs.
     - fix-replicainstall.diff: Use ldap instead of ldaps for conncheck.
     - fix-dnssec-services.diff: Debianize ipa-dnskeysyncd & ipa-ods-
       exporter units.
     - create-sysconfig-ods.diff: Create an empty file for opendnssec
       daemons, until opendnssec itself is fixed.
     - purge-firefox-extension.diff: Clean obsolete kerberosauth.xpi.
     - enable-mod-nss-during-setup.diff: Split from platform.diff, call
       a2enmod/a2dismod from httpinstance.py.
     - fix-memcached.diff: Split from platform.diff, debianize memcached
       conf & unit.
     - hack-libarch.diff: Don't use fedora libpaths.
   * add-debian-platform.diff:
     - Update paths.py to include all variables, comment out ones we don't
       modify.
     - Use systemwide certificate store; put ipa-ca.crt in
       /usr/local/share/ca-certificates, and run update-ca-certificates
     - Map smb service to smbd (LP: #1543230)
     - Don't ship /var/cache/bind/data, fix named.conf a bit.
     - Use DebianNoService() for dbus. (LP: #1564981)
     - Add more constants
   * Split freeipa-server-dns from freeipa-server, add -dns to -server
     Recommends.
   * server.postinst: Use ipa-server-upgrade.
   * admintools: Use the new location for bash completions.
   * rules: Remove obsolete configure.jar, preferences.html.
   * platform: Fix ipautil.run stdout handling, add support for systemd.
   * server.postinst, tmpfile: Create state directories for
     mod_auth_gssapi.
   * rules, server.install: Install scripts under /usr/lib instead of
     multiarch path to avoid hacking the code too much.
   * fix-ipa-otpd-install.diff, rules, server.install: Put ipa-otpd in
     /usr/lib/ipa instead of directly under multiarch lib path.
   * control, server*.install: Move dirsrv plugins from server-trust-ad
     to server, needed on upgrades even if trust-ad isn't set up.
   * server: Enable mod_proxy_ajp and mod_proxy_http on postinst, disable
     on postrm.
   * rules: Add SKIP_API_VERSION_CHECK, and adjust directories to clean.
   * rules: Don't enable systemd units on install.
   * client: Don't create /etc/pki/nssdb on postinst, it's not used
     anymore.
   * platform.diff, rules, server.install: Drop generate-rndc-key.sh, bind
     already generates the keyfile.
Checksums-Sha1:
 8eb1a48ccf916481d3fdaa4b7fe7d02612aeb7c8 3439 freeipa_4.3.1-0ubuntu1.dsc
 d5e346ceb19583922add4cf095ce3255d788ac9d 6090874 freeipa_4.3.1.orig.tar.gz
 e75d80a6677e2bb5af8412cf1018ea319529b85b 32636 freeipa_4.3.1-0ubuntu1.debian.tar.xz
Checksums-Sha256:
 f08590fc2d299e4b0dedf92642473cc1c354b7838020d6fd844a3ce85a177b63 3439 freeipa_4.3.1-0ubuntu1.dsc
 8fe8a6add36f1859fb244245d01d0389f8839edf7a7c783414c35faf38a8207c 6090874 freeipa_4.3.1.orig.tar.gz
 aa07953e89449c5a12bc32d1c5d16ccc9e6d323df23e932085beb5e69ff15504 32636 freeipa_4.3.1-0ubuntu1.debian.tar.xz
Files:
 2db07f17fe6a7c264f723c7a5f8ca75c 3439 net extra freeipa_4.3.1-0ubuntu1.dsc
 ec222fd2c7dad6400df60f95222b1edd 6090874 net extra freeipa_4.3.1.orig.tar.gz
 3f2bf8b3a1519a60eabc5ecef48fa156 32636 net extra freeipa_4.3.1-0ubuntu1.debian.tar.xz