[Freeipa-devel] Testing FreeIPA 4.3 for GA

[Jan Cholasta]

On 15.12.2015 07:24, Lukas Slebodnik wrote:
> On (15/12/15 01:05), Petr Vobornik wrote:
>> Blocking patches for FreeIPA 4.3 were pushed, ipa-4-3 branch was created.
>> Master branch is ready for 4.4 development.
>>
>> A build is available for testing in my pvoborni/freeipa-4-3 COPR repo [1]
>> until the official 4.3 repo is created. The repo contains only this build.
>> The build is not pure upstream ipa-4-3 branch but rather a build which will
>> go to Fedora rawhide and official 4.3 copr repo - Fedora downstream spec with
>> the SELinux workaround applied [2][3].
>>
>> Known issues:
>> * https://fedorahosted.org/freeipa/ticket/5469 - requires fix in PKI
>> * https://bugzilla.redhat.com/show_bug.cgi?id=1289930 - SELinux Policy update
>> needed for connection check
>>
> I would suggest to do small change in packaging.
>
> sh$ rpm -qp --requires ./freeipa-client-4.3.0-1.fc23.x86_64.rpm | grep pam
> pam_krb5
>
> pam_krb5 is not used by default. I will suggest to use weak dependencies here
> If you do not want to remove it completely.
> http://rpm.org/wiki/PackagerDocs/Dependencies#Weakdependencies

I would rather remove it completely, along with nss_ldap and 
pam-nss-ldapd support.

-- 
Jan Cholasta