On 11.1.2019 12.10, Alexander Bokovoy wrote:
On pe, 11 tammi 2019, Timo Aaltonen via FreeIPA-users wrote:
> On 10.1.2019 0.14, Eric Engstrom via FreeIPA-users wrote:
>>> one option would be to only build freeipa-client, but that'd leave
>>> anyone using the server out in the cold.
>> Since some of us are running the server on different distros, what do
>> you see as the blockers to getting freeipa-client into debian,
>> presumably without -server?
>> And, in the interest of moving this forward, where should I look to
>> contribute to getting freeipa-client up on debian (buster, or ....).
> Actually, nss-pem got accepted so the last (functional) blocker is now
> kinda fixed for the client.
> The server is still blocked on other things, like Dogtag being broken
> with current java even while everything builds and should work with it..
could you describe in more detail what is missing/blocked?
What's missing is a working CA :) I sent a message to pki-users@ about this.
Other than that it needs update to 4.7.2 (now at 4.7.1), testing etc, so
the usual maintenance.. It's been a couple of months since I was able to
get a server up because of other components. And nss-pem is very fresh
on Debian. Once Dogtag is fixed I'm sure there will be new minor issues
since the last time. Still a month to go before Buster is frozen.
One thing to mention separately is missing support for opendnssec 2.x,
since Fedora is still on 1.4.x...
I'm not sure how much work is left to be done. Opendnssec got a new
maintainer this week, maybe we'll be able to sort this out together..