On 11.1.2019 12.10, Alexander Bokovoy wrote:
On pe, 11 tammi 2019, Timo Aaltonen via FreeIPA-users wrote:
> On 10.1.2019 0.14, Eric Engstrom via FreeIPA-users wrote:
>>> one option would be to only build freeipa-client, but that'd leave
>>> anyone using the server out in the cold.
>>
>> Since some of us are running the server on different distros, what do
>> you see as the blockers to getting freeipa-client into debian,
>> presumably without -server?
>>
>> And, in the interest of moving this forward, where should I look to
>> contribute to getting freeipa-client up on debian (buster, or ....).
>
> Actually, nss-pem got accepted so the last (functional) blocker is now
> kinda fixed for the client.
>
> The server is still blocked on other things, like Dogtag being broken
> with current java even while everything builds and should work with it..
Timo,
could you describe in more detail what is missing/blocked?
What's missing is a working CA :) I sent a message to pki-users@ about this.
Other than that it needs update to 4.7.2 (now at 4.7.1), testing etc, so
the usual maintenance.. It's been a couple of months since I was able to
get a server up because of other components. And nss-pem is very fresh
on Debian. Once Dogtag is fixed I'm sure there will be new minor issues
since the last time. Still a month to go before Buster is frozen.
One thing to mention separately is missing support for opendnssec 2.x,
since Fedora is still on 1.4.x...
https://pagure.io/freeipa/issue/6873
I'm not sure how much work is left to be done. Opendnssec got a new
maintainer this week, maybe we'll be able to sort this out together..
--
t