5:48 p.m.
What version of IPA is available in 7.4?
cheers
L.
------
"The antidote to apocalypticism is *apocalyptic civics*. Apocalyptic civics
is the insistence that we cannot ignore the truth, nor should we panic
about it. It is a shared consciousness that our institutions have failed
and our ecosystem is collapsing, yet we are still here — and we are
creative agents who can shape our destinies. Apocalyptic civics is the
conviction that the only way out is through, and the only way through is
together. "
*Greg Bloom* @greggish
https://twitter.com/greggish/status/873177525903609857
7:59 p.m.
On 24 August 2017 at 10:30, Fraser Tweedale <ftweedal(a)redhat.com> wrote:
On Thu, Aug 24, 2017 at 08:48:55AM +1000, Lachlan Musicman via
FreeIPA-users wrote:
> What version of IPA is available in 7.4?
>
FreeIPA 4.5.
Great - thanks Fraser.
cheers
L.
------
"The antidote to apocalypticism is *apocalyptic civics*. Apocalyptic civics
is the insistence that we cannot ignore the truth, nor should we panic
about it. It is a shared consciousness that our institutions have failed
and our ecosystem is collapsing, yet we are still here — and we are
creative agents who can shape our destinies. Apocalyptic civics is the
conviction that the only way out is through, and the only way through is
together. "
*Greg Bloom* @greggish
https://twitter.com/greggish/status/873177525903609857
9:18 a.m.
If you are using Samba with FreeIPA, you may want to wait to upgrade to
7.4. There is a bug in a library that comes with sssd that will break it
for you. RedHat is recommending to wait for now.
On Wed, Aug 23, 2017 at 6:59 PM, Lachlan Musicman via FreeIPA-users <
freeipa-users(a)lists.fedorahosted.org> wrote:
On 24 August 2017 at 10:30, Fraser Tweedale
<ftweedal(a)redhat.com> wrote:
> On Thu, Aug 24, 2017 at 08:48:55AM +1000, Lachlan Musicman via
> FreeIPA-users wrote:
> > What version of IPA is available in 7.4?
> >
> FreeIPA 4.5.
>
>
Great - thanks Fraser.
cheers
L.
------
"The antidote to apocalypticism is *apocalyptic civics*. Apocalyptic
civics is the insistence that we cannot ignore the truth, nor should we
panic about it. It is a shared consciousness that our institutions have
failed and our ecosystem is collapsing, yet we are still here — and we are
creative agents who can shape our destinies. Apocalyptic civics is the
conviction that the only way out is through, and the only way through is
together. "
*Greg Bloom* @greggish https://twitter.com/greggish/
status/873177525903609857
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
--
Kristian Petersen
System Administrator
Dept. of Chemistry and Biochemistry
1:55 p.m.
On Thu, Aug 24, 2017 at 08:18:42AM -0600, Kristian Petersen via FreeIPA-users wrote:
If you are using Samba with FreeIPA, you may want to wait to upgrade
to
7.4. There is a bug in a library that comes with sssd that will break it
for you. RedHat is recommending to wait for now.
The only bug I know about that fits this description is a missing
requires: from samba on the correct version of krb5-libs. Typically,
users run into this issue if they yum upgrade with the --security flag
which upgrades the samba package, but not krb5..
This bug will be fixed soon in RHEL-7.4.
4:17 p.m.
On to, 24 elo 2017, Jakub Hrozek via FreeIPA-users wrote:
On Thu, Aug 24, 2017 at 08:18:42AM -0600, Kristian Petersen via
FreeIPA-users wrote:
> If you are using Samba with FreeIPA, you may want to wait to upgrade to
> 7.4. There is a bug in a library that comes with sssd that will break it
> for you. RedHat is recommending to wait for now.
The only bug I know about that fits this description is a missing
requires: from samba on the correct version of krb5-libs. Typically,
users run into this issue if they yum upgrade with the --security flag
which upgrades the samba package, but not krb5..
This bug will be fixed soon in RHEL-7.4.
No, you missed the bug with a semantic
change in libwbclient usage in
Samba 4.6 or later where SSSD version returns 'not implemented' instead
of 'winbindd is not available' and that stops the flow. By returning
'winbindd is not available' return code it is able to proceed.
This is addressed by Lukas' patches in https://github.com/SSSD/sssd/pull/353
--
/ Alexander Bokovoy
5:01 p.m.
On 25 August 2017 at 07:17, Alexander Bokovoy via FreeIPA-users <
freeipa-users(a)lists.fedorahosted.org> wrote:
On to, 24 elo 2017, Jakub Hrozek via FreeIPA-users wrote:
> On Thu, Aug 24, 2017 at 08:18:42AM -0600, Kristian Petersen via
> FreeIPA-users wrote:
>
>> If you are using Samba with FreeIPA, you may want to wait to upgrade to
>> 7.4. There is a bug in a library that comes with sssd that will break it
>> for you. RedHat is recommending to wait for now.
>>
>
> The only bug I know about that fits this description is a missing
> requires: from samba on the correct version of krb5-libs. Typically,
> users run into this issue if they yum upgrade with the --security flag
> which upgrades the samba package, but not krb5..
>
> This bug will be fixed soon in RHEL-7.4.
>
No, you missed the bug with a semantic change in libwbclient usage in
Samba 4.6 or later where SSSD version returns 'not implemented' instead
of 'winbindd is not available' and that stops the flow. By returning
'winbindd is not available' return code it is able to proceed.
I'm not 100% on the CentOS upgrade cycle with regard to patches after
Redhat releases. I'll need to check. Thanks for the warning.
cheers
L.
12:49 p.m.
On (25/08/17 00:17), Alexander Bokovoy via FreeIPA-users wrote:
On to, 24 elo 2017, Jakub Hrozek via FreeIPA-users wrote:
> On Thu, Aug 24, 2017 at 08:18:42AM -0600, Kristian Petersen via FreeIPA-users wrote:
> > If you are using Samba with FreeIPA, you may want to wait to upgrade to
> > 7.4. There is a bug in a library that comes with sssd that will break it
> > for you. RedHat is recommending to wait for now.
>
> The only bug I know about that fits this description is a missing
> requires: from samba on the correct version of krb5-libs. Typically,
> users run into this issue if they yum upgrade with the --security flag
> which upgrades the samba package, but not krb5..
>
> This bug will be fixed soon in RHEL-7.4.
No, you missed the bug with a semantic change in libwbclient usage in
Samba 4.6 or later where SSSD version returns 'not implemented' instead
of 'winbindd is not available' and that stops the flow. By returning
'winbindd is not available' return code it is able to proceed.
This is addressed by Lukas' patches in https://github.com/SSSD/sssd/pull/353
sssd-libwbclient is not installed by default.
But if it is installed then in can break things.
LS
2437
days inactive
2439
days old
freeipa-users@lists.fedorahosted.org
7 comments
6 participants
participants (6)
-
Alexander Bokovoy -
Fraser Tweedale -
Jakub Hrozek -
Kristian Petersen -
Lachlan Musicman -
Lukas Slebodnik