[Freeipa-devel] [PATCH] 0017 configure DNA shared config entry to allow connection with GSSAPI

[Martin Kosek]

On 01/21/2016 04:22 PM, thierry bordaz wrote:
> On 01/21/2016 03:46 PM, Martin Kosek wrote:
>> On 01/21/2016 01:37 PM, thierry bordaz wrote:
>> Thanks! Couple comments:
>>
>> I miss ticket number of description.
> 
> Thanks Martin for looking at it.
> 
> Ouch... the ticket number is https://fedorahosted.org/freeipa/ticket/4026
>>
>> Does this patch mean that all blocker on DS side preventing remote DNA were
>> fixed? If yes, it may be worth updating Requires in the spec file in that case
>> and making sure the backport is in Fedora 23+ or at least FreeIPA 4.3 COPR repo.
> It required following 389-ds tickets that are now both fixed in 1.3.4.6
> 
>  * https://fedorahosted.org/389/ticket/47779
>  * https://fedorahosted.org/389/ticket/48362
> 
> Is it the change to do in the spec file ?
> 
> diff --git a/freeipa.spec.in b/freeipa.spec.in
> index 899af6c..87e80c9 100644
> --- a/freeipa.spec.in
> +++ b/freeipa.spec.in
> @@ -130,7 +130,7 @@ Requires: %{name}-client = %{version}-%{release}
>  Requires: %{name}-admintools = %{version}-%{release}
>  Requires: %{name}-common = %{version}-%{release}
>  Requires: python2-ipaserver = %{version}-%{release}
> -Requires: 389-ds-base >= 1.3.4.4
> +Requires: 389-ds-base >= 1.3.4.6
>  Requires: openldap-clients > 2.4.35-4
>  Requires: nss >= 3.14.3-12.0
>  Requires: nss-tools >= 3.14.3-12.0
> @@ -162,7 +162,7 @@ Requires: zip
>  Requires: policycoreutils >= 2.1.12-5
>  Requires: tar
>  Requires(pre): certmonger >= 0.78
> -Requires(pre): 389-ds-base >= 1.3.4.4
> +Requires(pre): 389-ds-base >= 1.3.4.6
>  Requires: fontawesome-fonts
>  Requires: open-sans-fonts
>  Requires: openssl

That spec file change should be OK, thanks. I did not do other testing, I would
leave that up to other developers.