ipaNTHash without winbind/samba
by Michael Mercier
Hello,
I would like to have the ipaNTHash stored in the IPA LDAP database without having to use winbind or samba. I installed ipa-server-trust-ad and did the basic setup. In order to now start IPA I now have to add the '--ignore-service-failure’ option, meaning I have to manually (re)start it at boot.
[root@ipa ~]# ipactl start --ignore-service-failure
Existing service file detected!
Assuming stale, cleaning and proceeding
Starting Directory Service
Starting krb5kdc Service
Starting kadmin Service
Starting named Service
Starting httpd Service
Starting ipa-custodia Service
Starting pki-tomcatd Service
Starting smb Service
Failed to start smb Service
Forced start, ignoring smb Service, continuing normal operation
Starting winbind Service
Failed to start winbind Service
Forced start, ignoring winbind Service, continuing normal operation
Starting ipa-otpd Service
Starting ipa-dnskeysyncd Service
ipa: INFO: The ipactl command was successful
Is there a way to have ipa-server-trust-ad setup and still have the service start without the winbind and/or samba dependancies?
Thanks,
Mike
3 years, 11 months
[freeipa PR#4560][opened] [ipa-4-6] ipatests: fix teardown method
by flo-renaud
URL: https://github.com/freeipa/freeipa/pull/4560
Author: flo-renaud
Title: #4560: [ipa-4-6] ipatests: fix teardown method
Action: opened
PR body:
"""
The teardown method of the integration tests is calling
tasks.uninstall_master(replica)
which in turn does ipa server-del + ipa-server-install --uninstall
The uninstallation is called by default with --ignore-last-of-role
and --ignore-topology-disconnect excepted if the domain-level is 0,
in which case these options are not supported by uninstall.
The issue is that the call to get domain level fails because the
server has already been removed, and the code handles that failure by
assuming domain level =0, resulting in missing --ignore-last-of-role.
To workaround the issue, the call to tasks.uninstall should be done
with the actual domain level:
tasks.uninstall_master(replica, domain_level=...)
Fixes: https://pagure.io/freeipa/issue/8280
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4560/head:pr4560
git checkout pr4560
3 years, 11 months
[freeipa PR#4568][opened] Improve Sphinx building and linting
by tiran
URL: https://github.com/freeipa/freeipa/pull/4568
Author: tiran
Title: #4568: Improve Sphinx building and linting
Action: opened
PR body:
"""
Run sphinx-builder with -W (fail on error), --keep-going, and -j auto.
Auto-job scaling speeds up sphinx-builder a LOT.
Add make lint target to doc/Makefile. The -E and -a option ensure that
all files arei always re-read and rewritten.
Add option to run sphinx-builder from a virtual env that mimics RTD
builds closer than Fedora packages.
Signed-off-by: Christian Heimes <cheimes(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4568/head:pr4568
git checkout pr4568
3 years, 11 months