FreeIPA-devel

freeipa-devel@lists.fedorahosted.org

1 participants
5548 discussions

Start a nNew thread

Request for OID allocation: Group Policy schema extension for FreeIPA
by Данила Скачедубов 01 Jul '26

01 Jul '26

2 4

freeipa/master locked in weblate
by Américo Monteiro 30 May '26

30 May '26

Hi Somebody please unlock the freeipa/master branch in weblate Thanks

1 0

FreeIPA 4.13.1
by Antonio Torres 16 Jan '26

16 Jan '26

The FreeIPA team would like to announce the FreeIPA 4.13.1 release! It can be downloaded from http://www.freeipa.org/page/Downloads. Builds for Fedora distributions will be available from the official repository soon. Full release notes are available at: https://www.freeipa.org/release-notes/4-13-1.html

1 0

FreeIPA 4.13.0
by Antonio Torres 05 Dec '25

05 Dec '25

The FreeIPA team would like to announce the FreeIPA 4.13.0 release! It can be downloaded from http://www.freeipa.org/page/Downloads. Builds for Fedora distributions will be available from the official repository soon. Full release notes are available at: https://www.freeipa.org/release-notes/4-13-0.html

1 0

FreeIPA 4.12.5
by Antonio Torres 30 Sep '25

30 Sep '25

The FreeIPA team would like to announce the FreeIPA 4.12.5 release! It can be downloaded from http://www.freeipa.org/page/Downloads. Builds for Fedora distributions will be available from the official repository soon. Full release notes are available at: https://www.freeipa.org/release-notes/4-12-5.html

1 0

FreeIPA 4.12.4
by Antonio Torres 17 Jun '25

17 Jun '25

The FreeIPA team would like to announce FreeIPA 4.12.4 release! It can be downloaded from http://www.freeipa.org/page/Downloads. Builds for Fedora distributions will be available from the official repository soon. Full release notes are available at: https://www.freeipa.org/release-notes/4-12-4.html

1 0

Mirroring FreeIPA’s SIDs and MS-pac-tickets in alternative MIT-LDAP setups?
by Jostein Fossheim 01 Apr '25

01 Apr '25

Hello all, I assume that the developer’s list is the right/best place to ask. We are helping a customer with a homebuilt MiT-kerberos and openldap based setup, and are considering if we can gently improve this setup, with SID and MS-PACs added to the users/tickets. Would it be possbile, to add a SID-attribute to the schema and users/hosts in such a setup, and mirror how this is done in freeIPA (or in Samba compiled with MiT)? I have not tried yet to investegate how this works/are done/configured in IPA or samba, so I was hoping for some pointers on where to start the investegation. Is there custom code, to handle this? or is it done via MIT-configuration attributes? Best Regards, Jostein Fossheim

2 3

ipalib.x509.IPACertificate can't subclass cryptography.x509.Certificate
by Wolfgang Eder 19 Mar '25

19 Mar '25

I am using FreeIPA 4.12.2 with python3-cryptography 44.0.1 on Python 3.12.8. The ipa-client-install command fails on me, and I have tracked down the reason. A simple way to reproduce: >>> import ipalib.x509 ..... gives a warning about TripleDES which is unrelated ..... File "/usr/lib/python3.12/site-packages/ipalib/ipalib/x509.py", line 91, in <module> class IPACertificate(crypto_x509.Certificate): (warning) TypeError: type 'cryptography.hazmat.bindings._rust.x509.Certificate' is not an acceptable base type The reason is that the class cryptography.x509.Certificate is not meant to be instantiated from the python side. To demonstrate: >>> from cryptography.x509 import Certificate >>> c = Certificate() Traceback (most recent call last): File "<stdin>", line 1, in <module> TypeError: No constructor defined for Certificate >>> from cryptography.x509 import Certificate >>> class X(Certificate): ... pass ... Traceback (most recent call last): File "<stdin>", line 1, in <module> TypeError: type 'cryptography.hazmat.bindings._rust.x509.Certificate' is not an acceptable base type To fix this, IPACertificate would need to be rewritten to use composition instead of inheritance. So my questions: Am I missing something? Which version of FreeIPA is known to work with what version of python3-cryptography? Thanks, Wolfgang

2 2

Assistance Required – Unable to Add Windows PC to FreeIPA as Client without AD
by Epixel IT 18 Feb '25

18 Feb '25

I have found a workaround with FreeIPA and successfully added a Debian PC as a client. However, I am facing issues when trying to add a Windows PC without AD. I can successfully ping the FreeIPA server from the Windows machine, and everything seems to be functioning correctly. However, when I attempt to log in, I receive the following error: "We can't sign you in with this credential because your domain is not available. Make sure your device is connected to your organization’s network and try again." i followed the below article https://computingforgeeks.com/join-windows-system-to-freeipa-realm/ I have tried multiple approaches multiple times but haven't been able to resolve this issue. Do you have any workaround to fix this Thank you for your support in advance , please let me know any input from myside

2 1

FreeIPA 4.12.3
by Antonio Torres 15 Jan '25

15 Jan '25

The FreeIPA team would like to announce FreeIPA 4.12.3 release! It can be downloaded from http://www.freeipa.org/page/Downloads. Builds for Fedora distributions will be available from the official repository soon. Full release notes are available at: https://www.freeipa.org/release-notes/4-12-3.html

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-devel