OS: CentOS Stream release 9
As I said, FreeIPA was installed like:
- yum install ipa-server ipa-server-dns
Additional info: FreeIPA was configure as Intermediate CA. ipa.csr was signed by extenal
RootCA
Dependencies installed with packets of ipa:
Output of "rpm -q --requires ipa-server":
(pki-acme >= 10.10.5 if pki-ca >= 10.10.0)
389-ds-base >= 2.0.5-1
389-ds-base >= 2.0.5-1
acl
certmonger >= 0.79.7-3
chrony
config(ipa-server) = 4.11.0-1.el9
cracklib-dicts
cyrus-sasl-gssapi(x86-64)
font(fontawesome)
gssproxy >= 0.7.0-2
gzip
httpd >= 2.4.37-21
ipa-client = 4.11.0-1.el9
ipa-common = 4.11.0-1.el9
ipa-server-common = 4.11.0-1.el9
krb5-kdb-version = 9.0
krb5-server >= 1.20.1-1
krb5-server >= 1.21
libc.so.6()(64bit)
libc.so.6(GLIBC_2.14)(64bit)
libc.so.6(GLIBC_2.2.5)(64bit)
libc.so.6(GLIBC_2.25)(64bit)
libc.so.6(GLIBC_2.3)(64bit)
libc.so.6(GLIBC_2.3.4)(64bit)
libc.so.6(GLIBC_2.34)(64bit)
libc.so.6(GLIBC_2.4)(64bit)
libc.so.6(GLIBC_2.7)(64bit)
libc.so.6(GLIBC_2.8)(64bit)
libcom_err.so.2()(64bit)
libcrypto.so.3()(64bit)
libcrypto.so.3(OPENSSL_3.0.0)(64bit)
libgcc_s.so.1()(64bit)
libgcc_s.so.1(GCC_3.0)(64bit)
libgcc_s.so.1(GCC_3.3.1)(64bit)
libgssapi_krb5.so.2()(64bit)
libgssapi_krb5.so.2(gssapi_krb5_2_MIT)(64bit)
libjansson.so.4()(64bit)
libjansson.so.4(libjansson.so.4)(64bit)
libk5crypto.so.3()(64bit)
libk5crypto.so.3(k5crypto_3_MIT)(64bit)
libkrad.so.0()(64bit)
libkrad.so.0(krad_0_MIT)(64bit)
libkrb5.so.3()(64bit)
libkrb5.so.3(krb5_3_MIT)(64bit)
liblber.so.2()(64bit)
liblber.so.2(OPENLDAP_2.200)(64bit)
libldap.so.2()(64bit)
libldap.so.2(OPENLDAP_2.200)(64bit)
libndr-krb5pac.so.0()(64bit)
libndr-krb5pac.so.0(NDR_KRB5PAC_0.0.1)(64bit)
libndr-standard.so.0()(64bit)
libndr.so.3()(64bit)
libndr.so.3(NDR_0.0.1)(64bit)
libpopt.so.0()(64bit)
libpopt.so.0(LIBPOPT_0)(64bit)
libpwquality
libpwquality.so.1()(64bit)
libpwquality.so.1(LIBPWQUALITY_1.0)(64bit)
libsamba-errors.so.1()(64bit)
libsamba-errors.so.1(SAMBA_ERRORS_1.0.0)(64bit)
libsamba-util.so.0()(64bit)
libsamba-util.so.0(SAMBA_UTIL_0.0.1)(64bit)
libsss_certmap.so.0()(64bit)
libsss_certmap.so.0(SSS_CERTMAP_0.0)(64bit)
libsss_nss_idmap.so.0()(64bit)
libsss_nss_idmap.so.0(SSS_NSS_IDMAP_0.1.0)(64bit)
libsss_nss_idmap.so.0(SSS_NSS_IDMAP_0.4.0)(64bit)
libsss_nss_idmap.so.0(SSS_NSS_IDMAP_0.6.0)(64bit)
libtalloc.so.2()(64bit)
libtalloc.so.2(TALLOC_2.0.2)(64bit)
libtevent.so.0()(64bit)
libunistring.so.2()(64bit)
libuuid.so.1()(64bit)
libuuid.so.1(UUID_1.0)(64bit)
libverto.so.1()(64bit)
mod_auth_gssapi >= 1.5.0
mod_lookup_identity >= 0.9.9
mod_session >= 2.4.37-21
mod_ssl >= 2.4.37-21
nss-tools >= 3.44.0-4
oddjob
open-sans-fonts
openldap-clients > 2.4.35-4
openssl > 1.1.1i
p11-kit
pki-ca >= 10.10.5
pki-kra >= 10.10.5
policycoreutils >= 2.1.12-5
python3
python3
python3-gssapi >= 1.2.0-5
python3-ipaserver = 4.11.0-1.el9
python3-ldap >= 3.1.0-1
python3-mod_wsgi
python3-systemd
rpmlib(CompressedFileNames) <= 3.0.4-1
rpmlib(FileDigests) <= 4.6.0-1
rpmlib(PayloadFilesHavePrefix) <= 4.0-1
rpmlib(PayloadIsZstd) <= 5.4.18-1
rpmlib(RichDependencies) <= 4.12.0-1
rtld(GNU_HASH)
samba-client-libs >= 4.18.6-100.el9
selinux-policy >= 38.1.1-1
selinux-policy-base >= 38.1.1-1
shadow-utils
slapi-nis >= 0.56.4
softhsm >= 2.0.0rc1-1
sssd-dbus >= 2.9.0
systemd-units >= 246.6-3
systemd-units >= 246.6-3
systemd-units >= 246.6-3
systemd-units >= 246.6-3
systemd-units >= 246.6-3
tar
Output of "rpm -q --requires ipa-server-dns":
bind >= 9.11.20-6
bind-dnssec-utils >= 9.11.20-6
bind-dyndb-ldap >= 11.2-2
bind-utils >= 9.11.20-6
config(ipa-server-dns) = 4.11.0-1.el9
ipa-server = 4.11.0-1.el9
opendnssec >= 2.1.6-5
openssl-pkcs11 >= 0.4.10-6
rpmlib(CompressedFileNames) <= 3.0.4-1
rpmlib(FileDigests) <= 4.6.0-1
rpmlib(PayloadFilesHavePrefix) <= 4.0-1
rpmlib(PayloadIsZstd) <= 5.4.18-1
softhsm >= 2.5.0-4
As you wrote about idm-pki-ca, output "rpm -q --requires idm-pki-ca" for it:
idm-pki-server = 11.4.2-1.el9
rpmlib(CompressedFileNames) <= 3.0.4-1
rpmlib(FileDigests) <= 4.6.0-1
rpmlib(PayloadFilesHavePrefix) <= 4.0-1
rpmlib(PayloadIsZstd) <= 5.4.18-1