Dear Ian,
thanks for the infos :)
I did need to migrate to CentOS 8 Stream as it was assured in this group
this would be the best way in the future a few months ago.
Is there an easy way to go from CentOS 8 Stream to Rocky Linux and would
this be the prefered way now?
(I need to have freeIPA running obviously and don't want anything to break
:))
Second question:
We were talking about the Debian Bullseye Client, not freeIPA server.
e.g. how to integrate a Debian Bullseye machine into freeIPA...
With Buster, we had the freeipa-client which was easy to install via apt,
now, it looks like thats not an option anymore... or are we just too early
to the party? :
Cheers
Nico
Am Mo., 6. Sept. 2021 um 02:23 Uhr schrieb Ian Willis <
fedora(a)checksum.net.au>:
Hi All,
If you're looking for a relatively simple solution the migration to Rocky
linux can be achieved relatively painlessly. We've been kicking the tyres
over the past few months and it fits our use case and Centos8 going forward
doesn't. This isn't a shot at either Centos, Redhat or IBM its a simple
statement of fact given the future direction of Centos.
They have a script for migration and the maintainer is one of the original
creators of Centos which provides a degree of assurance in terms of project
scope and continuity.
While I like Debian, the body of knowledge associated with Redhat based
platforms and relative complexity/fragility of freeIPA would make me think
twice before going down this path.
That being said, I would like to see a vibrant Debian freeIPA community
however depending upon your use case there may be some issues.
Regards
Ian
-----Original Message-----
*From*: Ilya Kogan via FreeIPA-users <freeipa-users(a)lists.fedorahosted.org
<Ilya%20Kogan%20via%20FreeIPA-users%20%3cfreeipa-users(a)lists.fedorahosted.org%3e>
>
*Reply-To*: FreeIPA users list <freeipa-users(a)lists.fedorahosted.org
<FreeIPA%20users%20list%20%3cfreeipa-users(a)lists.fedorahosted.org%3e>>
*To*: FreeIPA users list <freeipa-users(a)lists.fedorahosted.org
<FreeIPA%20users%20list%20%3cfreeipa-users(a)lists.fedorahosted.org%3e>>
*Cc*: Nico Maas <mail(a)nico-maas.de <Nico%20Maas%20%3cmail(a)nico-maas.de%3e>>,
Timo Aaltonen <tjaalton(a)ubuntu.com
<Timo%20Aaltonen%20%3ctjaalton(a)ubuntu.com%3e>>, Ilya Kogan <
ikogan(a)mythicnet.org <Ilya%20Kogan%20%3cikogan(a)mythicnet.org%3e>>
*Subject*: [Freeipa-users] Re: freeIPA Status Debian/Ubuntu
*Date*: Sun, 5 Sep 2021 16:19:38 -0400
It looks like Bullseye doesn't even have the client, if I'm not mistaken?
After an upgrade, it's telling me that `freeipa-common` is no longer needed
and there's no longer a `freeipa-client` package.
Is there any way to get an idea of what the situation is with this?
Ilya Kogan
w:
github.com/ikogan e: ikogan(a)mythicnet.org
<
http://twitter.com/ilkogan> <
https://www.linkedin.com/in/ilyakogan/>
On Thu, Dec 10, 2020 at 2:20 PM Nico Maas via FreeIPA-users <
freeipa-users(a)lists.fedorahosted.org> wrote:
Thank you for your update and hard work Timo :)!
Am Do., 10. Dez. 2020 um 19:38 Uhr schrieb Timo Aaltonen <
tjaalton(a)ubuntu.com>:
On 9.12.2020 13.30, Nico Maas via FreeIPA-users wrote:
> Hello there,
>
> with the decline of CentOS I need to migrate away from CentOS 8 to
something different.
> I just wanted to ask how currently the status of the Debian or Ubuntu
versions of freeIPA is - and if there is any possibility to migrate freeIPA
installation / "backup and restore"?
>
> Best regards,
>
> Nico
Hi,
Short answer:
ipaserver-install fails (Debian bug #970880), but client works. Debian
'bullseye' will be frozen for release next month, so it's likely that it
comes only with the client, just like Ubuntu since 20.04. But miracles
could happen during the holidays..
Long answer:
The server worked fine back in April (with bind 9.11 forced in) when I
set up an Azure pipeline and worked through some kinks there to get
through the tests. Best coverage I got to was around 95% of all tests.
But since then things fell apart and I don't have a working baseline
anymore, and shoving updates on top of others haven't helped.. The
blocker bug is somewhere between Certmonger, Dogtag CA, Tomcat, and TLS.
We'll see how long it still takes until the bug is found and fixed..
_______________________________________________
FreeIPA-users mailing list --
freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to
freeipa-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...
Do not reply to spam on the list, report it:
https://pagure.io/fedora-infrastructure