On Thu, Dec 13, 2018 at 09:36:57PM +0100, Jan Pazdziora via FreeIPA-users wrote:
On Mon, Nov 26, 2018 at 09:53:16AM +0100, Jan Pazdziora via
> in the past couple of week I've pushed multiple changes to the
> repository, fixing and enabling Fedora 28 and Fedora 29 Dockerfiles,
> adding Travis CI configuration where we currently test IPA master and
slightly related to the FreeIPA containerization effort, I've now
Web application authentication developer setup
to use Fedora 28. The developer setup shows the use of FreeIPA and
Ipsilon IdP for GSSAPI and SAML authentication in Web applications,
and it can be used as an example of IPA-enrolled client containers.
I've also added Travis CI configuration for the setup and it seems
it's working fine:
The multi-container CI setup can hopefully also serve as an example
that people can reuse.
I've looked at the possibility of updating the Web application
authentication developer setup to Fedora 29 so that we go with the
latest greatest Fedora release.
We are hitting
there, so that blocks us a bit. Thanks to Jakub H. for helping me
isolate the issue so that we have it at least tracked.
Also, Ipsilon being Python 2 only prevents us moving the www-with-app
container to Python 3, which would mean we'd have to support both
Django 1.11 and Django 2.1. It likely is not a big deal to do so but
it'd be nice to phase out Python 2 completely.
If anyone has spare cycles to help porting Ipsilon to Python 3, it'd
be useful -- the issue for that request is
So for now the setup is based on Fedora 28 and depending on the
Ipsilon future, I will either update it to Fedora 29 later, or look at
the possibility of using Keycloak instead. If people are interested in
Keycloak and can show patch which would use that, I'd be happy to
review and add it to the setup.
Senior Principal Software Engineer, Security Engineering, Red Hat