Hi, would the maintainers be willing to submit this package to Factory and Leap?

Jay Michalska (hellcp) - almost 3 years ago

Possibly, 4.10 should include the fixes needed for SUSE platform to work. We would just need to get off the git releases here and use stable.

on current tw: twvm:~ # klist klist: Credentials cache keyring 'persistent:0:0' not found twvm:~ # kinit admin Password for admin@EREGION.HOME: twvm:~ # ipa user-find admin Traceback (most recent call last): File "/usr/bin/ipa", line 27, in <module> from ipaclient.main import main File "/usr/lib/python3.10/site-packages/ipaclient/main.py", line 7, in <module> from ipalib import api, cli File "/usr/lib/python3.10/site-packages/ipalib/init.py", line 921, in <module> from ipalib.frontend import Command, LocalOrRemote, Updater File "/usr/lib/python3.10/site-packages/ipalib/frontend.py", line 31, in <module> from ipalib.parameters import create_param, Param, Str, Flag File "/usr/lib/python3.10/site-packages/ipalib/parameters.py", line 125, in <module> from ipalib.x509 import ( File "/usr/lib/python3.10/site-packages/ipalib/x509.py", line 91, in <module> @crypto_utils.register_interface(crypto_x509.Certificate) AttributeError: module 'cryptography.utils' has no attribute 'register_interface'. Did you mean: 'verify_interface'?

I'm able to install packages from this project and use them to manually configure a freeipa client, but if I use ipa-client-install I keep getting unable to convert the attribute 'cacertificate;binary' value b'<a bunch of hash stuff>' and am basically halted from that point on. Does anyone else using this project experience this? I had googled it about 3 weeks to a month ago and wasn't able to determine why this is the case and once that failed I put together my manual process and my TW clients work with it. The backend server is using the ALMALINUX9 container from https://hub.docker.com/r/freeipa/freeipa-server running via podman on microos and all seems good there. Maybe it's a simple cert config option that ALMALINUX does that this version of ipa-client-install doesn't like but my prior testing w/ a VM running Fedora as the server and Fedora/Ubuntu/Debian clients running ipa-client-install never exhibited this issue. My goal would be a fully openSUSE server/client implementation but not being about to use ipa-client-install is a snag.

mhurron (mhurron) - about 2 years ago

This appears to have been fixed in the 4.10.2 release so the Tumbleweed package needs to be upgraded.

---

Malcolm Lewis (malcolmlewis) - about 2 years ago

@mhurron, package updated and accepted.

Joeri Verrept (joeri) - over 1 year ago

Same issue in Tumbleweed with the current 4.11.1+git0.e18ac353 version. But I see @mhurron created a request to update to 4.12.0, should be fixed in that version.

Hi,

Would the maintainers be so kind to look at the upgrade request to version 4.12.0 so that the IPA client installer script would work on Tumbleweed?

Eternal gratitude will be your part :)

Hello maintainers. The build for leap 15.6 is failing for a few weeks now. I would appreciate greatly if you could fix this build. Thank you in advance

mhurron (mhurron) - about 1 year ago

If I'm reading the logs correctly, the issue is with sssd not freeipa.

---

Daniel Pätzold (obel1x) - 12 months ago

Yes, it is. Using sssd V 2.9.5 instead of 2.9.3 from some testing, it works. See https://build.opensuse.org/project/show/home:obel1x (btw don't ask me about packages, i had no clue what i was doing there)

To the Maintainer: Any chance we could get this working fast?

---

Ciro Iriarte (ciriarte) - 11 months ago

Can the build be triggered once more?, I've built a branch of the package at home:ecsos:server which was also failing and magically worked with a fresh 15.6 repository

Are there any plans to re-add it to openSUSE:Factory ?