ipa-4.5.0-22.0.1.el7.AXS7

Asianux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

This update fixes the following bugs:

* Previously, the "ipa server-del " command did not delete LDAP records for the host name. As a consequence, the server remained recorded in LDAP if DNS was installed on this server. This bug has been fixed, and the host name record is now correctly deleted in the described situation. (BZ#1506525)

* The "ipa-cacert-manage renew --external-ca" previously generated a Certificate Signing Request (CSR) that did not contain the Basic Constraint "CA:TRUE". Consequently, the signing Certificate Authority (CA) needed to add the constraint to the CA certificate it issued, otherwise the resulting CA certificate was not valid. This bug has been fixed, and the Basic Constraint "CA:TRUE" is now correctly added to CSRs generated for the CA. (BZ#1506526)

* Previously, when a CA was unreachable, the following error messages were shown:

ERROR PKINIT certificate request failed: %s", e
ERROR Failed to configure PKINIT

This update changes the log level of the messages to a warning. (BZ#1506528)

Users of ipa are advised to upgrade to these updated packages, which fix these bugs.