git: d991e32ce440 - main - net/freeipa-server: Update to 4.13.4
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Fri, 11 Sep 2026 08:21:51 UTC
The branch main has been updated by joneum:
URL: https://cgit.FreeBSD.org/ports/commit/?id=d991e32ce440214e0abd51c6b143c0cec3de83ee
commit d991e32ce440214e0abd51c6b143c0cec3de83ee
Author: Jochen Neumeister <joneum@FreeBSD.org>
AuthorDate: 2026-09-11 08:20:17 +0000
Commit: Jochen Neumeister <joneum@FreeBSD.org>
CommitDate: 2026-09-11 08:21:40 +0000
net/freeipa-server: Update to 4.13.4
Includes the 4.13.3 release. Adds a mod_reqtimeout slow-read
configuration to ipa.conf, removes the two minute delay from DNA
configuration during installation and updates the WebUI to 0.2.1.
Changes: https://www.freeipa.org/release-notes/4-13-3.html
Changes: https://www.freeipa.org/release-notes/4-13-4.html
Security: 9736fef3-ada6-11f1-a655-3497f65b111b
Sponsored by: Netzkommune GmbH
---
net/freeipa-server/Makefile | 3 +--
net/freeipa-server/distinfo | 6 +++---
.../files/patch-install_share_ipa.conf.template | 24 +++++++++++-----------
net/freeipa-server/pkg-plist | 20 +++++++++++++++---
4 files changed, 33 insertions(+), 20 deletions(-)
diff --git a/net/freeipa-server/Makefile b/net/freeipa-server/Makefile
index 72d1b6e72d85..8370485069da 100644
--- a/net/freeipa-server/Makefile
+++ b/net/freeipa-server/Makefile
@@ -1,6 +1,5 @@
PORTNAME= freeipa-server
-DISTVERSION= 4.13.2
-PORTREVISION= 3
+DISTVERSION= 4.13.4
CATEGORIES= net
MASTER_SITES= https://codeberg.org/freeipa/freeipa/releases/download/release-${DISTVERSION:S/./-/g}/
DISTNAME= freeipa-${DISTVERSION}
diff --git a/net/freeipa-server/distinfo b/net/freeipa-server/distinfo
index 4ef69ded907d..b9409ba8b87f 100644
--- a/net/freeipa-server/distinfo
+++ b/net/freeipa-server/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1787129871
-SHA256 (freeipa-4.13.2.tar.gz) = 56d593de47bdd008d5df7ce219ba468e115a207eed1a32b0799e270ec0ece2aa
-SIZE (freeipa-4.13.2.tar.gz) = 42032746
+TIMESTAMP = 1789106688
+SHA256 (freeipa-4.13.4.tar.gz) = b2f24d763875a9b5677384f7c6232291c641f5c3c2412614a8b8548b47416023
+SIZE (freeipa-4.13.4.tar.gz) = 48760674
diff --git a/net/freeipa-server/files/patch-install_share_ipa.conf.template b/net/freeipa-server/files/patch-install_share_ipa.conf.template
index a0d93fe5afe5..3982c108a33e 100644
--- a/net/freeipa-server/files/patch-install_share_ipa.conf.template
+++ b/net/freeipa-server/files/patch-install_share_ipa.conf.template
@@ -1,9 +1,9 @@
---- install/share/ipa.conf.template.orig 2026-07-16 09:36:59 UTC
+--- install/share/ipa.conf.template.orig 2026-09-11 06:07:31 UTC
+++ install/share/ipa.conf.template
@@ -1,5 +1,5 @@
#
--# VERSION 40 - DO NOT REMOVE THIS LINE
-+# VERSION 41 - DO NOT REMOVE THIS LINE
+-# VERSION 41 - DO NOT REMOVE THIS LINE
++# VERSION 42 - DO NOT REMOVE THIS LINE
#
# This file may be overwritten on upgrades.
#
@@ -16,7 +16,7 @@
</IfModule>
TraceEnable Off
-@@ -42,10 +42,15 @@ WSGISocketPrefix $WSGI_PREFIX_DIR
+@@ -53,10 +53,15 @@ WSGISocketPrefix $WSGI_PREFIX_DIR
WSGISocketPrefix $WSGI_PREFIX_DIR
# Configure mod_wsgi handler for /ipa
@@ -35,7 +35,7 @@
application-group=%{GLOBAL}
WSGIScriptReloading Off
-@@ -78,6 +83,8 @@ ServerTokens Prod
+@@ -89,6 +94,8 @@ ServerTokens Prod
GssapiSessionKey file:$GSSAPI_SESSION_KEY
GssapiImpersonate On
@@ -44,7 +44,7 @@
GssapiDelegCcacheDir $IPA_CCACHES
GssapiDelegCcachePerms mode:0660
GssapiDelegCcacheUnique On
-@@ -104,7 +111,7 @@ ServerTokens Prod
+@@ -115,7 +122,7 @@ ServerTokens Prod
</Location>
# Target for login with internal connections
@@ -53,7 +53,7 @@
# Turn off Apache authentication for i18n messages
<Location "/ipa/i18n_messages">
-@@ -129,8 +136,10 @@ Alias /ipa/session/cookie "/usr/share/ipa/gssapi.login
+@@ -140,8 +147,10 @@ Alias /ipa/session/cookie "/usr/share/ipa/gssapi.login
LookupUserByCertificate On
LookupUserByCertificateParamName "username"
WSGIProcessGroup ipa
@@ -65,7 +65,7 @@
GssapiUseSessions On
Session On
-@@ -161,13 +170,13 @@ Alias /ipa/session/cookie "/usr/share/ipa/gssapi.login
+@@ -172,13 +181,13 @@ Alias /ipa/session/cookie "/usr/share/ipa/gssapi.login
</Location>
# This is where we redirect on failed auth
@@ -82,7 +82,7 @@
SetHandler None
AllowOverride None
Satisfy Any
-@@ -202,8 +211,8 @@ Alias /ipa/ui/fonts/fontawesome "${FONTS_FONTAWESOME_D
+@@ -213,8 +222,8 @@ Alias /ipa/ui/fonts/fontawesome "${FONTS_FONTAWESOME_D
# webUI is now completely static, and served out of that directory
@@ -93,7 +93,7 @@
SetHandler None
AllowOverride None
Satisfy Any
-@@ -216,8 +225,8 @@ Alias /ipa/ui "/usr/share/ipa/ui"
+@@ -227,8 +236,8 @@ Alias /ipa/ui "/usr/share/ipa/ui"
</Directory>
# Modern WebUI
@@ -104,7 +104,7 @@
SetHandler None
AllowOverride None
Satisfy Any
-@@ -230,8 +239,8 @@ Alias /ipa/modern-ui "/usr/share/ipa/modern-ui"
+@@ -241,8 +250,8 @@ Alias /ipa/modern-ui "/usr/share/ipa/modern-ui"
</Directory>
# Simple wsgi scripts required by ui
@@ -115,7 +115,7 @@
AllowOverride None
Satisfy Any
Require all granted
-@@ -240,8 +249,8 @@ Alias /ipa/wsgi "/usr/share/ipa/wsgi"
+@@ -251,8 +260,8 @@ Alias /ipa/wsgi "/usr/share/ipa/wsgi"
</Directory>
# migration related pages
diff --git a/net/freeipa-server/pkg-plist b/net/freeipa-server/pkg-plist
index b3d3f931cc04..fb29e305cfc9 100644
--- a/net/freeipa-server/pkg-plist
+++ b/net/freeipa-server/pkg-plist
@@ -2045,6 +2045,8 @@
%%PYTHON_SITELIBDIR%%/ipatests/test_integration/__pycache__/test_ipahealthcheck%%PYTHON_TAG%%.pyc
%%PYTHON_SITELIBDIR%%/ipatests/test_integration/__pycache__/test_kerberos_flags%%PYTHON_TAG%%.opt-1.pyc
%%PYTHON_SITELIBDIR%%/ipatests/test_integration/__pycache__/test_kerberos_flags%%PYTHON_TAG%%.pyc
+%%PYTHON_SITELIBDIR%%/ipatests/test_integration/__pycache__/test_krbprinc_match%%PYTHON_TAG%%.opt-1.pyc
+%%PYTHON_SITELIBDIR%%/ipatests/test_integration/__pycache__/test_krbprinc_match%%PYTHON_TAG%%.pyc
%%PYTHON_SITELIBDIR%%/ipatests/test_integration/__pycache__/test_krbtpolicy%%PYTHON_TAG%%.opt-1.pyc
%%PYTHON_SITELIBDIR%%/ipatests/test_integration/__pycache__/test_krbtpolicy%%PYTHON_TAG%%.pyc
%%PYTHON_SITELIBDIR%%/ipatests/test_integration/__pycache__/test_legacy_clients%%PYTHON_TAG%%.opt-1.pyc
@@ -2162,6 +2164,7 @@
%%PYTHON_SITELIBDIR%%/ipatests/test_integration/test_ipa_join.py
%%PYTHON_SITELIBDIR%%/ipatests/test_integration/test_ipahealthcheck.py
%%PYTHON_SITELIBDIR%%/ipatests/test_integration/test_kerberos_flags.py
+%%PYTHON_SITELIBDIR%%/ipatests/test_integration/test_krbprinc_match.py
%%PYTHON_SITELIBDIR%%/ipatests/test_integration/test_krbtpolicy.py
%%PYTHON_SITELIBDIR%%/ipatests/test_integration/test_legacy_clients.py
%%PYTHON_SITELIBDIR%%/ipatests/test_integration/test_membermanager.py
@@ -2201,8 +2204,11 @@
%%PYTHON_SITELIBDIR%%/ipatests/test_ipaclient/__init__.py
%%PYTHON_SITELIBDIR%%/ipatests/test_ipaclient/__pycache__/__init__%%PYTHON_TAG%%.opt-1.pyc
%%PYTHON_SITELIBDIR%%/ipatests/test_ipaclient/__pycache__/__init__%%PYTHON_TAG%%.pyc
+%%PYTHON_SITELIBDIR%%/ipatests/test_ipaclient/__pycache__/test_epn%%PYTHON_TAG%%.opt-1.pyc
+%%PYTHON_SITELIBDIR%%/ipatests/test_ipaclient/__pycache__/test_epn%%PYTHON_TAG%%.pyc
%%PYTHON_SITELIBDIR%%/ipatests/test_ipaclient/__pycache__/test_ldapconf%%PYTHON_TAG%%.opt-1.pyc
%%PYTHON_SITELIBDIR%%/ipatests/test_ipaclient/__pycache__/test_ldapconf%%PYTHON_TAG%%.pyc
+%%PYTHON_SITELIBDIR%%/ipatests/test_ipaclient/test_epn.py
%%PYTHON_SITELIBDIR%%/ipatests/test_ipaclient/test_ldapconf.py
%%PYTHON_SITELIBDIR%%/ipatests/test_ipalib/__init__.py
%%PYTHON_SITELIBDIR%%/ipatests/test_ipalib/__pycache__/__init__%%PYTHON_TAG%%.opt-1.pyc
@@ -2364,6 +2370,7 @@
%%PYTHON_SITELIBDIR%%/ipatests/test_ipaserver/__pycache__/test_version_comparison%%PYTHON_TAG%%.opt-1.pyc
%%PYTHON_SITELIBDIR%%/ipatests/test_ipaserver/__pycache__/test_version_comparison%%PYTHON_TAG%%.pyc
%%PYTHON_SITELIBDIR%%/ipatests/test_ipaserver/data/full.xml
+%%PYTHON_SITELIBDIR%%/ipatests/test_ipaserver/data/pskc-entity.xml
%%PYTHON_SITELIBDIR%%/ipatests/test_ipaserver/data/pskc-figure3.xml
%%PYTHON_SITELIBDIR%%/ipatests/test_ipaserver/data/pskc-figure4.xml
%%PYTHON_SITELIBDIR%%/ipatests/test_ipaserver/data/pskc-figure5.xml
@@ -2372,6 +2379,7 @@
%%PYTHON_SITELIBDIR%%/ipatests/test_ipaserver/data/pskc-figure8.xml
%%PYTHON_SITELIBDIR%%/ipatests/test_ipaserver/data/pskc-invalid.xml
%%PYTHON_SITELIBDIR%%/ipatests/test_ipaserver/data/pskc-mini.xml
+%%PYTHON_SITELIBDIR%%/ipatests/test_ipaserver/data/pskc-missingmac.xml
%%PYTHON_SITELIBDIR%%/ipatests/test_ipaserver/httptest.py
%%PYTHON_SITELIBDIR%%/ipatests/test_ipaserver/test_adtrust_mockup.py
%%PYTHON_SITELIBDIR%%/ipatests/test_ipaserver/test_changepw.py
@@ -2867,6 +2875,7 @@ lib/dirsrv/plugins/libipa_dns.so
lib/dirsrv/plugins/libipa_enrollment_extop.so
lib/dirsrv/plugins/libipa_extdom_extop.so
lib/dirsrv/plugins/libipa_graceperiod.so
+lib/dirsrv/plugins/libipa_krbprinc_mr.so
lib/dirsrv/plugins/libipa_lockout.so
lib/dirsrv/plugins/libipa_modrdn.so
lib/dirsrv/plugins/libipa_otp_counter.so
@@ -3010,6 +3019,7 @@ share/ipa/ipa-extdom-extop-conf.ldif
share/ipa/ipa-httpd-wsgi.conf.template
share/ipa/ipa-httpd.conf.template
share/ipa/ipa-kdc-proxy.conf.template
+share/ipa/ipa-krbprinc-mr-conf.ldif
share/ipa/ipa-pki-proxy.conf.template
share/ipa/ipa-rewrite.conf.template
share/ipa/ipa-sidgen-conf.ldif
@@ -3048,9 +3058,9 @@ share/ipa/modern-ui/assets/images/avatarImg.svg
share/ipa/modern-ui/assets/images/header-logo.png
share/ipa/modern-ui/assets/images/login-screen-background.jpg
share/ipa/modern-ui/assets/images/product-name.png
-share/ipa/modern-ui/assets/index-C_cJkds7.css
-share/ipa/modern-ui/assets/index-m1nJE7k7.js
-share/ipa/modern-ui/assets/index-m1nJE7k7.js.map
+share/ipa/modern-ui/assets/index-Bz42mWg7.css
+share/ipa/modern-ui/assets/index-dTcVthEv.js
+share/ipa/modern-ui/assets/index-dTcVthEv.js.map
share/ipa/modern-ui/assets/pf-v6-pficon-Dy6oiu9u.woff2
share/ipa/modern-ui/favicon.ico
share/ipa/modern-ui/index.html
@@ -3147,7 +3157,10 @@ share/ipa/updates/20-uuid.update
share/ipa/updates/20-whoami.update
share/ipa/updates/21-ca_renewal_container.update
share/ipa/updates/21-certstore_container.update
+share/ipa/updates/21-deny-anonymous-modify.update
+share/ipa/updates/21-deny-anonymous-sid-read.update
share/ipa/updates/21-replicas_container.update
+share/ipa/updates/21-selfservice-bindrule.update
share/ipa/updates/25-referint.update
share/ipa/updates/30-ipservices.update
share/ipa/updates/30-provisioning.update
@@ -3190,6 +3203,7 @@ share/ipa/updates/75-user-trust-attributes.update
share/ipa/updates/80-schema_compat.update
share/ipa/updates/81-externalmembers.update
share/ipa/updates/90-post_upgrade_plugins.update
+share/ipa/updates/91-admins-privileges.update
share/ipa/user_private_groups.ldif
share/ipa/uuid-conf.ldif
share/ipa/uuid.ldif