On to, 15 maalis 2018, Rob Crittenden via FreeIPA-devel wrote:
Christian Heimes wrote:
> On 2018-03-15 14:19, Rob Crittenden via FreeIPA-devel wrote:
>> freeIPA in Fedora 28 is currently broken for a number of reasons:
>>
>> - The NSS switch to sqlite
>> - 389-ds now provides a default security entry
>> - many changes in dogtag
>>
>> FESCO has given us and dogtag a reprieve on the beta deadline but we
>> need to get something working ASAP.
>>
>> The dogtag team has their code in mostly working shape now.
>>
>> For IPA we need to decide what to release. I see the choices as:
>>
>> 1. Use 4.6.3 + NSS and other patches
>> 2. Release 4.7.0 now even though it doesn't have everything we planned
>> and ship that with F-28
>> 3. Do a 4.7.0 pre-release (set IPA_VERSION_PRE_RELEASE in VERSION and
>> release a tarball).
>> 4. Use a git pull from master for F-28 and name it something that will
>> be upgradable (this is the tricky bit).
>
> I'm for option (3) or option (2) in that order. We need to get some
> working release out ASAP. Dogtag won't release 10.6 to F28 until we have
> confirmed that 10.6 works with FreeIPA. It doesn't have to be a final
> version and it doesn't have to support migration for now.
>
> Perhaps we should replace ipa-server-upgrade with a dummy so people
> cannot update a production system until we have ironed out all kinks.
>
> Authselect and ntpd to chrony port are mostly done. I'm confident that
> Lex and Tibor will be able to deliver the improvements in time for
> Fedora 28.
I also prefer 3 or 2, in that order.
If we do a pre-release do we want to crank up the full Release engine
including release notes, etc? Or just tag it, generate a tarball and
release into F28?
Given that Debian already moved to Tomcat 8.5, they would also
benefit
from a proper release to get FreeIPA packaged back.
--
/ Alexander Bokovoy