12:07 p.m.
New subject: Configuring SSL Ciphers for FreeIPA / DogTag on port 8443
On ke, 13 maalis 2019, Christopher Lamb via FreeIPA-users wrote:
Thanks, but that documentation is inconsistent.
Section 8.1.1 advises upgrading one version of RedHat IDM at a time. Fair
dos.
However section 8.1.2 advises running "yum update ipa-*" which will update
to the latest version of IPA available in the repo, which may well be a
jump of several IPA versions.
Despite lots of googling, I have not found anything mapping RHEL releases
to IPA releases (a support matrix). The release pages on the FreeIPA.org
site do generally mention a target Fedora version. e.g.
[1]https://www.freeipa.org/page/Releases/4.2.0
If the expert advice is to update IDM by updating the underlying RHEL one
version at at time, then maybe the update should be performed via
something like:
"yum --releasever=7.3 update"
Something like that, yep. Could you please open a bug for RHEL on the
documentation, describing your concerns with this? I'll then make sure
it is treated by the documentation team.
As to mapping of the releases, I have a plan to make something like that
with connection to what API is provided by each release. I have ways to
generate that automatically and hope to find some time relatively soon
to work on that.
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland
12:21 p.m.
New subject: Configuring SSL Ciphers for FreeIPA / DogTag on port 8443
Alexander Bokovoy via FreeIPA-users wrote:
On ke, 13 maalis 2019, Christopher Lamb via FreeIPA-users wrote:
> Thanks, but that documentation is
> inconsistent.
>
> Section 8.1.1 advises upgrading one version of RedHat IDM at a time.
> Fair
> dos.
>
> However section 8.1.2 advises running "yum update ipa-*" which will
> update to the latest version of IPA available in the repo, which
> may well be a jump of several IPA
> versions.
>
> Despite lots of googling, I have not found anything mapping RHEL
> releases to IPA releases (a support matrix). The release pages on
> the FreeIPA.org site do generally mention a target Fedora
> version. e.g.
> [1]https://www.freeipa.org/page/Releases/4.2.0
>
>
> If the expert advice is to update IDM by updating the underlying RHEL
> one version at at time, then maybe the update should be performed
> via something
> like:
>
> "yum --releasever=7.3
> update"
Something like that, yep. Could you please open a bug for RHEL on the
documentation, describing your concerns with this? I'll then make sure
it is treated by the documentation team.
IMHO there is nothing to do here. I'm sure somewhere on the OEL support
pages it says that all packages must be up-to-date. I'd swear I've read
then same on the RHEL side.
It boils down to the fact that with thousands of packages there is no
way to support every possible version combination, especially between
two versions released three years apart.
rob
As to mapping of the releases, I have a plan to make something like
that
with connection to what API is provided by each release. I have ways to
generate that automatically and hope to find some time relatively soon
to work on that.
1881
days inactive
1882
days old
freeipa-users@lists.fedorahosted.org
2 comments
3 participants
participants (3)
-
Alexander Bokovoy -
Christopher Lamb -
Rob Crittenden