[Pkg-freeipa-devel] FreeIPA and Stretch

[Timo Aaltonen]

On 14.03.2017 14:39, Modestas Vainius wrote:
> Hi, Timo,
> 
> On 2017 m. kovo 14 d., antradienis 13:52:35 EET Timo Aaltonen wrote:
>> Dogtag is broken by updates to libresteasy-java and tomcat 8.5, and
>> it'll take upstream months to get them fixed, so freeipa won't be in
>> stretch. And softhsm 2.2 broke the Bind-integration..
> 
> Oh, that's unfortunate :/ But I could live without CA or DNS.

It still won't be in stretch because there are binary dependencies in place.

>> I'm still doing updates to freeipa in experimental so that I can
>> sync/merge stuff for Ubuntu, which does not have those regressing
>> updates. Waiting for 4.4.4 to happen, and then some minor packaging
>> issues to get sorted.
> 
> Which Ubuntu do you mean? Current dev one (but it is sync from sid)? Because 
> as far as I can tell, Xenial is pretty outdated for 4.4.x (but Xenial is 
> pretty Okay'ish for 4.3.2).

zesty, I probably should backport all the fixes to xenial though..

>> Right, that's up to the samba maintainers to fix, more or less.
> 
> Maybe a note in package description would be nice. Because current one implies 
> that everything is working as it reads:
> 
>  Cross-realm trusts with Active Directory in IPA require working Samba 4
>  installation. This package is provided for convenience to install all 
> required
>  dependencies at once.

Ok, I'll think about it.


-- 
t