- FreeIPA-devel - Fedora mailing-lists

Cannot restart ipa.service and krb5kdc.service after reboot
by Vu Nguyen 02 Aug '23

02 Aug '23

After 7days, I tried to log in freeipa webUI and got this "Login failed due to an unknown reason" message. So I rebooted my machine. After that I cannot connect to freeipa webUI. Then I check ipa.service and got some errors related to krb5 like "Failed to start krb5kdc Service" so I tried to start krb5kdc.service but get errors too. Which is "krb5kdc: cannot initialize realm". I checked the log file and got something might helpful : "Cannot find master key record in database - while fetching master keys list for realm" "Didn't connect to LDAP on startup: 110" "Server error - while fetching master key K/M for realm" I also tried to run "kinit admin" command and got this message "kinit: Cannot contact any KDC for realm" I guess it is because my certificate expired which lead to this issue. Does anyone know what should I do to fix this issue and prevent it in the future?

2 1

[DRAFT] FreeIPA 4.11.0 Release notes
by Antonio Torres 27 Jul '23

27 Jul '23

Hello everyone, I have created a draft for the IPA 4.11.0 release notes. There are several commits that were added even if they were part of the IPA 4.10 branch already, so please review so we can remove them accordingly. https://github.com/freeipa/freeipa.github.io/pull/15

1 0

FreeIPA 4.11 planning
by Alexander Bokovoy 24 Jul '23

24 Jul '23

Hi, it is time to start planning for FreeIPA 4.11 release. I'd like us to see 4.11.0 beta released before August 8th so that we can push it to Fedora Rawhide before Fedora 39 is branched. This is primary to make FIDO2 support available for Fedora 39. We depend on SSSD for this to happen and SSSD 2.9.2 is already in Rawhide for couple months. Other dependencies are also present in Fedora Rawhide already (krb5 1.21, for example). Flo and I looked at our testing runs and it sounds like we should be stable enough for th release. Any thoughts? -- / Alexander Bokovoy Sr. Principal Software Engineer Security / Identity Management Engineering Red Hat Limited, Finland

1 0

API schema
by Yann Soubeyrand 01 Jul '23

01 Jul '23

Hello, There’s an attempt to autogenerate a Go package to interact with the API of FreeIPA, based on the schema returned by the API: https://github.com/ccin2p3/go-freeipa. However, the schema seems to be inexact in several places and the generation process have to use some dirty workarounds. For example, it seems that the managedby_host field returned in a host_show result is multi-valued, whereas it’s not stated in the schema. I was wondering how I could help fix this schema and I’d like to confirm that the line to modify in this case would be https://github.com/freeipa/freeipa/blob/7060e3a031fb4e4cdf85f616f1e1a3435d6… (to replace managedby_host with managedby_host*)? Also, is there something else to do in addition to this modification? Regards Yann

1 0

debian/ubuntu client support
by sv savage 09 Jun '23

09 Jun '23

I have tried to compile FreeIPA inDebian, but there are enough differences in existing libraries to make it very painful. But using Ubuntu/Debian as a client should be straight forward. both distros support SSSD but there is no doc describing how-to.

2 1

FreeIPA 4.10.2
by Antonio Torres 06 Jun '23

06 Jun '23

1 0

FreeIPA 4.9.12
by Antonio Torres 19 May '23

19 May '23

1 0

[DRAFT] FreeIPA 4.10.2 Release Notes
by Antonio Torres 21 Apr '23

21 Apr '23

FreeIPA 4.10.2 release notes draft: https://gist.github.com/antoniotorresm/6ccc393e6ec6fc238c8a39d105110719

2 1

[DRAFT] FreeIPA 4.9.12 Release Notes
by Antonio Torres 20 Apr '23

20 Apr '23

2 3

certmonger 0.79.18 upstream release
by Rob Crittenden 06 Apr '23

06 Apr '23

For those that follow certmonger, I did an upstream release today, 0.79.18. This will go into rawhide first. Fedora 37 and 38 will follow. - Rename DBus service and conf files to match canonical name - Add missing .TP tags in getcert-resubmit man page - migrated to SPDX license - Include owner and perms in getcert list output - Don't require an NSS database in cm_certread_n_parse - Add new certs to internal token, try harder to remove on renewal rob

1 0

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-devel