1. Proposed title of this feature request

For Certificate Enrollment Support in Samba we need to add the cepces package in RHEL.

Fedora package: https://src.fedoraproject.org/rpms/cepces

2. What is the nature and description of the request?

Certificate Auto Enrollment allows devices to enroll for certificates from Active Directory Certificate Services. It is enabled by Group Policy using Samba's samba-gpupdate command. In order to support this we need the cepces package for certmonger.

3. Why do we need this? (List the business requirements here)

This is needed to support customers who want to be able to enroll certificates from Active Directory to RHEL machines.

4. How would we like to achieve this? (List the functional requirements here)

We need to additional packages, cepces and oddjob-gpupdate in order to enable support for Certificate Auto Enrollment in Samba.

5. For each functional requirement listed, specify how we can test to confirm the requirement is successfully implemented.

The Samba developers will work together with QE to setup AD with certificates and add tests to check the Certificate Enrollment feature works.

6. Is there already an existing RFE upstream or in Red Hat Bugzilla?

Fedora package: https://src.fedoraproject.org/rpms/cepces
The Certifcate Enrollment feature is enabled in the Fedora Samba build.

7. Timeline and which release would they like to target?

• RHEL 9.4

8. List any affected packages or components.

• cepces (new package)
• samba (existing package)