[Pkg-freeipa-devel] FreeIPA and Stretch

[Modestas Vainius]

Hi, Timo,

On 2017 m. kovo 14 d., antradienis 13:52:35 EET Timo Aaltonen wrote:
> Dogtag is broken by updates to libresteasy-java and tomcat 8.5, and
> it'll take upstream months to get them fixed, so freeipa won't be in
> stretch. And softhsm 2.2 broke the Bind-integration..

Oh, that's unfortunate :/ But I could live without CA or DNS.

> I'm still doing updates to freeipa in experimental so that I can
> sync/merge stuff for Ubuntu, which does not have those regressing
> updates. Waiting for 4.4.4 to happen, and then some minor packaging
> issues to get sorted.

Which Ubuntu do you mean? Current dev one (but it is sync from sid)? Because 
as far as I can tell, Xenial is pretty outdated for 4.4.x (but Xenial is 
pretty Okay'ish for 4.3.2).

> Right, that's up to the samba maintainers to fix, more or less.

Maybe a note in package description would be nice. Because current one implies 
that everything is working as it reads:

 Cross-realm trusts with Active Directory in IPA require working Samba 4
 installation. This package is provided for convenience to install all 
required
 dependencies at once.

FreeIPA documentation is kind of hard to get good grip on. So many things 
there and it is hard to to tell if they are current or no longer apply. What 
is more, users might not have a clue what Debian's Samba has been compiled 
against nor have a clue what requirements are.