openSUSE Recommended Update: Recommended update for kanidm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0045-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for kanidm fixes the following issues: - Update to version 1.1.0~rc16~git1.a917291: * Correct cargo versions * Release 1.1.0-rc.16 (#2483) * Fix for incorrect domain migration rollbacks (#2482) * Add tools for remigration and domain level raising (#2481) * chore(deps): bump cryptography from 41.0.6 to 42.0.0 in /pykanidm (#2480) * Support SPN in groups claim (#2474) * Credential update tweaks (#2475) * Oauth2 pkce faq (#2473) * Fix debian versioning (#2472) * chore(deps): bump the all group in /pykanidm with 7 updates (#2479) * chore(deps): bump the all group with 1 update (#2478) * Fix RUV trim (#2466) * 20240125 2217 client credentials grant (#2456) * docs: Add application passwords design document (#2427) * handling master docs (#2465) * update the artifact name in the download step (#2464) * Book SUMMARY.md: Fix part titles according to mdbook (#2463) * Update chat link, add keywords (#2462) * PyKanidm updates and testing (#2301) * chore(deps): bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461) * 1222 what rights does anonymous have (#2436) * Fix inverted key/chain logic from TLS error improvement (#2453) * Improve TLS configuration errors (#2447) * chore(deps): bump shlex from 1.2.0 to 1.3.0 (#2445) * chore(deps): bump the all group with 1 update (#2441) * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2443) * Return sshkey label to cli fields (#2440) * Add rfc8414 metadata (#2434) * Add test for delete referer invalid (#2435) * Clarify role of WebUI in README.md (#2431) * Adding max_ber_size option in config for ldap sync (#2416) * Debian build fixes (also the book) (#2400) * 2390 1980 allow native applications (#2428) * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2430) * cookies (#2426) * Clean RUV (#2424) * chore(deps-dev): bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425) * Upgrade replication to use anchors (#2423) * Minor fixes for oidc with single page applications (#2420) * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2421) * Use case insensitive match on substrings in line with ldap (#2419) * Change OAuth2 RS Origin from the CLI (#2418) * Add design diagrams (#2332) * chore(deps-dev): bump the all group in /pykanidm with 3 updates (#2410) * Fix deb release flow to find the matrix split artifacts (#2406) * 20231222 piv authentication (#2398) * Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405) * Build the kanidm cli tools deb as well (#2402) * Force apply idm migrations to apply access controls (#2401) * fixing up the integration script (#2392) * chore(deps): bump the all group in /pykanidm with 8 updates (#2396) * chore(deps): bump the all group with 2 updates (#2395) * fix backup filename and regexp pattern for cleanup (#2386) * idprovider: Provide the keystore during auth (#2385) * db: Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389) * daemon: Fix inverted logic on cache dir check (#2388) * Add improved domain migration framework and default MFA (#2382) * Trim and lowecase usernames (#2380) * Add DN as a virtual ldap attr (#2379) * fixing default for oauth2 request_parameter_supported metadata (#2378) * chore(deps): bump the all group in /pykanidm with 6 updates (#2375) * 20231218 ipa sync unix password (#2374) * chore(deps): bump the all group with 2 updates (#2372) * 1481 2024 access control rework (#2366) * chore(deps): bump zerocopy from 0.7.26 to 0.7.31 (#2368) * chore(deps): bump the all group with 3 updates (#2363) * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2362) * 249 2024 managed by syntax (#2359) * typo (#2356) * 20231204 ipa sync minor improvements (#2357) * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2355) * Unixd build/debugging updates (#2350) * 20231129 webauthn attestation (#2351) * Fix handling of TPM in some trait contexts (#2347) * docs: miniflux added pkce support (#2352) * Using proper axum http headers lib for compatibility (#2348) * Bearer should send with same caps we accept (#2345) * chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /pykanidm (#2341) * docs: improve grammar for book/src/developers/faq.md (#2343) * Expose machine key in auth phase (#2340) * 20231128 freeipa migration (#2338) * Unix crossbuild scripts and docs (#2326) * Expose TPM in more interface places (#2334) * chore(deps): bump the all group in /pykanidm with 6 updates (#2336) * Adding kanidm client config docs and notes ref #2248 (#2333) * Update to the latest compact-jwt version (#2331) * Adding env var configs for the server (#2329) * Better errors when TPM PIN file not found (#2330) * 20231120 2320 sssd compat (#2328) * Resolve future send issue with keystore (#2311) * chore(deps): bump the all group in /pykanidm with 6 updates (#2325) * chore(deps): bump the all group with 3 updates (#2324) * Add test (#2323) * OAuth2 scopes validation logging missing details (#2317) * Add systemd deps for unixd (#2314) * 20231115 oauth2 authreq (#2310) * Docs - Bump Fedora 36 to Fedora 38 (#2309) * chore(deps): bump the all group with 4 updates (#2306) * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2305) * Remove serde json from wasm (#2304) * Fix spelling (#2303) * 20231109 1122 credential class (#2300) * Moving daemon tracing to OpenTelemetry (#2292) * 20231101 add id cert to unixint (#2284) * Docs fixes for #2296 (#2297) * Update OpenAPI schema gen to actually... be kinda sorta valid. (#2296) * chore(deps-dev): bump the all group in /pykanidm with 2 updates (#2294) * chore(deps): bump the all group with 8 updates (#2293) * pw min length in account policy (#2289) * WASM troubleshooting docs closes #2286 (#2291) * oauth2 typo (#2290) * Update notes to avoid some possible interpretation errors (#2288) * Feature: kanidm CLI pulling OpenAPI schema (#2285) * Feature: configurable replication poll interval (#2283) * Minor improvements to incoming replication (#2279) * Problems with bash completion autocomplete (#2281) * Remove unused imports and clippy lint (#2276) * Rework ldap bind routine (#2268) * Disable inconsistent test (#2278) * make versions consistent * 1.1.0 rc.15 dev post-release (#2271) - Update to version 1.1.0~rc15~git8.122b6af: * Remove unused import that breaks builds on newer rust versions * Update to latest webauthn-rs version * fix version * Fix maint branch versions * Disable inconsistent test (#2278) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-45=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 x86_64): kanidm-1.1.0~rc16~git1.a917291-bp155.5.1 kanidm-clients-1.1.0~rc16~git1.a917291-bp155.5.1 kanidm-docs-1.1.0~rc16~git1.a917291-bp155.5.1 kanidm-server-1.1.0~rc16~git1.a917291-bp155.5.1 kanidm-unixd-clients-1.1.0~rc16~git1.a917291-bp155.5.1 References: