Hi, would the maintainers be willing to submit this package to Factory and Leap?

Jacob Michalskie (hellcp) - over 1 year ago

Possibly, 4.10 should include the fixes needed for SUSE platform to work. We would just need to get off the git releases here and use stable.

on current tw: twvm:~ # klist klist: Credentials cache keyring 'persistent:0:0' not found twvm:~ # kinit admin Password for admin@EREGION.HOME: twvm:~ # ipa user-find admin Traceback (most recent call last): File "/usr/bin/ipa", line 27, in <module> from ipaclient.main import main File "/usr/lib/python3.10/site-packages/ipaclient/main.py", line 7, in <module> from ipalib import api, cli File "/usr/lib/python3.10/site-packages/ipalib/init.py", line 921, in <module> from ipalib.frontend import Command, LocalOrRemote, Updater File "/usr/lib/python3.10/site-packages/ipalib/frontend.py", line 31, in <module> from ipalib.parameters import create_param, Param, Str, Flag File "/usr/lib/python3.10/site-packages/ipalib/parameters.py", line 125, in <module> from ipalib.x509 import ( File "/usr/lib/python3.10/site-packages/ipalib/x509.py", line 91, in <module> @crypto_utils.register_interface(crypto_x509.Certificate) AttributeError: module 'cryptography.utils' has no attribute 'register_interface'. Did you mean: 'verify_interface'?

I'm able to install packages from this project and use them to manually configure a freeipa client, but if I use ipa-client-install I keep getting unable to convert the attribute 'cacertificate;binary' value b'<a bunch of hash stuff>' and am basically halted from that point on. Does anyone else using this project experience this? I had googled it about 3 weeks to a month ago and wasn't able to determine why this is the case and once that failed I put together my manual process and my TW clients work with it. The backend server is using the ALMALINUX9 container from https://hub.docker.com/r/freeipa/freeipa-server running via podman on microos and all seems good there. Maybe it's a simple cert config option that ALMALINUX does that this version of ipa-client-install doesn't like but my prior testing w/ a VM running Fedora as the server and Fedora/Ubuntu/Debian clients running ipa-client-install never exhibited this issue. My goal would be a fully openSUSE server/client implementation but not being about to use ipa-client-install is a snag.

mhurron (mhurron) - 9 months ago

This appears to have been fixed in the 4.10.2 release so the Tumbleweed package needs to be upgraded.

---

Malcolm Lewis (malcolmlewis) - 9 months ago

@mhurron, package updated and accepted.