AFAIK Oracle still produce RHEL based Linux releases for free, however I haven't yet migrated to EL8.


From: Nico Maas via FreeIPA-users <>
Sent: 06 September 2021 07:52
To: Ian Willis <>
Cc: FreeIPA users list <>; Timo Aaltonen <>; Nico Maas <>; Ilya Kogan <>
Subject: [Freeipa-users] Re: freeIPA Status Debian/Ubuntu
Dear Ian,
thanks for the infos :)
I did need to migrate to CentOS 8 Stream as it was assured in this group this would be the best way in the future a few months ago.
Is there an easy way to go from CentOS 8 Stream to Rocky Linux and would this be the prefered way now?
(I need to have freeIPA running obviously and don't want anything to break :))

Second question:
We were talking about the Debian Bullseye Client, not freeIPA server.
e.g. how to integrate a Debian Bullseye machine into freeIPA...
With Buster, we had the freeipa-client which was easy to install via apt, now, it looks like thats not an option anymore... or are we just too early to the party? :



Am Mo., 6. Sept. 2021 um 02:23 Uhr schrieb Ian Willis <>:
Hi All,

If you're looking for a relatively simple solution the migration to Rocky linux can be achieved relatively painlessly. We've been kicking the tyres over the past few months and it fits our use case and Centos8 going forward doesn't. This isn't a shot at either Centos, Redhat or IBM its a simple statement of fact given the future direction of Centos.

They have a script for migration and the maintainer is one of the original creators of Centos which provides a degree of assurance in terms of project scope and continuity.

While I like Debian, the body of knowledge associated with Redhat based platforms and relative complexity/fragility of freeIPA would make me think twice before going down this path. 
That being said, I would like to see a vibrant Debian freeIPA community however depending upon your use case there may be some issues.



-----Original Message-----
From: Ilya Kogan via FreeIPA-users <>
Reply-To: FreeIPA users list <>
To: FreeIPA users list <>
Cc: Nico Maas <>, Timo Aaltonen <>, Ilya Kogan <>
Subject: [Freeipa-users] Re: freeIPA Status Debian/Ubuntu
Date: Sun, 5 Sep 2021 16:19:38 -0400

It looks like Bullseye doesn't even have the client, if I'm not mistaken? After an upgrade, it's telling me that `freeipa-common` is no longer needed and there's no longer a `freeipa-client` package.
Is there any way to get an idea of what the situation is with this?

Ilya Kogan
w:   e:

On Thu, Dec 10, 2020 at 2:20 PM Nico Maas via FreeIPA-users <> wrote:
Thank you for your update and hard work Timo :)!

Am Do., 10. Dez. 2020 um 19:38 Uhr schrieb Timo Aaltonen <>:
On 9.12.2020 13.30, Nico Maas via FreeIPA-users wrote:
> Hello there,
> with the decline of CentOS I need to migrate away from CentOS 8 to something different.
> I just wanted to ask how currently the status of the Debian or Ubuntu versions of freeIPA is - and if there is any possibility to migrate freeIPA installation / "backup and restore"?
> Best regards,
> Nico


Short answer:

ipaserver-install fails (Debian bug #970880), but client works. Debian
'bullseye' will be frozen for release next month, so it's likely that it
comes only with the client, just like Ubuntu since 20.04. But miracles
could happen during the holidays..

Long answer:

The server worked fine back in April (with bind 9.11 forced in) when I
set up an Azure pipeline and worked through some kinks there to get
through the tests. Best coverage I got to was around 95% of all tests.
But since then things fell apart and I don't have a working baseline
anymore, and shoving updates on top of others haven't helped.. The
blocker bug is somewhere between Certmonger, Dogtag CA, Tomcat, and TLS.
We'll see how long it still takes until the bug is found and fixed..

FreeIPA-users mailing list --

To unsubscribe send an email to

Fedora Code of Conduct:

List Guidelines:

List Archives:

Do not reply to spam on the list, report it: