Hello all,
I'm trying to get katello (running on centos7) to work with freeipa
and libvirt.
Now I got libvirt already configured to accept kerberized
authentication using sasl and gssapi.
Now I want to try to get the foreman (katello) to use a keytab through
gssproxy, but sadly ran into a dependency problem with the gssproxy
package.
I wanted to try to use gssproxy, since the suggesyed solution using a
ssh-key that grants root access without password is kinda ugly if you
ask me ( remote root via ssh beeing one fo the uglies, full root acces
when only libvirt access is required beeing another ).
explained here :
http://theforeman.org/manuals/1.6/index.html#5.2.5LibvirtNotes
When I try to install gssproxy on my katello machine it tells me that
it only works with a specific version of certain packages :
Error: Package: gssproxy-0.3.0-9.el7.x86_64 (base)
Requires: libcollection.so.2()(64bit)
Available: libcollection-0.6.2-22.el7.x86_64 (base)
libcollection.so.2()(64bit)
Installed: libcollection-0.6.2-23.el7.centos.x86_64
(@adelton-identity_demo)
~libcollection.so.4()(64bit)
Error: Package: gssproxy-0.3.0-9.el7.x86_64 (base)
Requires: libini_config.so.3()(64bit)
Available: libini_config-1.0.0.1-22.el7.x86_64 (base)
libini_config.so.3()(64bit)
Installed: libini_config-1.1.0-23.el7.centos.x86_64
(@adelton-identity_demo)
~libini_config.so.5()(64bit
Ofcourse this is not so weird since katello requires quite a few non
default repositories to work properly and even some more if you wish
to integrate it with freeipa.
The culprit in this case is the 'adelton-identity_demo' repository
which is required to get the authentication from freeipa to work in
katello.
( explained here :
http://theforeman.org/manuals/1.6/index.html#5.7.3KerberosSingleSign-On )
So the two packages are libcollection and libini_config
As you can see below they are both from the adelton repo.
Since they are both only a minor realease above the required package,
does it break gssproxy if I ignore those dependencies ?
Rob
yum list --showduplicates libini_config
<snip>
Installed Packages
libini_config.x86_64 1.1.0-23.el7.centos
@adelton-identity_demo
Available Packages
libini_config.i686 1.0.0.1-22.el7
base
libini_config.x86_64 1.0.0.1-22.el7
base
libini_config.x86_64 1.1.0-23.el7.centos
adelton-identity_demo
yum list --showduplicates libcollection
<snip>
Installed Packages
libcollection.x86_64 0.6.2-23.el7.centos
@adelton-identity_demo
Available Packages
libcollection.i686 0.6.2-22.el7
base
libcollection.x86_64 0.6.2-22.el7
base
libcollection.x86_64 0.6.2-23.el7.centos
adelton-identity_demo
_______________________________________________
gss-proxy mailing list
gss-proxy(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/gss-proxy We need to fix this.
Without ding-libs gss proxy cant read ini file.
The interface changed so the new package is needed.
--
Thank you,
Dmitri Pal
Sr. Engineering Manager IdM portfolio
Red Hat, Inc.