<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
On 01/08/2013 05:20 PM, Erinn Looney-Triggs wrote:
<blockquote cite="mid:50EC9BC2.8090204@gmail.com" type="cite">
<pre wrap="">On 01/08/13 12:45, Rob Crittenden wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Erinn Looney-Triggs wrote:
</pre>
<blockquote type="cite">
<pre wrap="">On 01/08/13 11:44, Rob Crittenden wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Simo Sorce wrote:
</pre>
<blockquote type="cite">
<pre wrap="">On Tue, 2013-01-08 at 19:31 +0000, Steven Jones wrote:
</pre>
<blockquote type="cite">
<pre wrap="">HI,
I assume RHEL 6.4 is GA shortly just how straigh forward is the
upgrade from one IPA version to another please?
regards
</pre>
</blockquote>
<pre wrap="">
Should just require an rpm upgrade and a restart and nothing else.
Simo.
</pre>
</blockquote>
<pre wrap="">
If you have multiple servers you'll want to upgrade them one at a time
in a short period (days, not weeks).
rob
_______________________________________________
Freeipa-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a>
<a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</a>
</pre>
</blockquote>
<pre wrap="">
Is this the release where SELinux mapping in IPA actually starts working?
If so that is definitely something to watch out for (I realize this is
more of an SSSD thing, but still). If you aren't careful and you have
your users mapped to something like guest_u, well the upgrade can be
very inconvenient for them.
</pre>
</blockquote>
<pre wrap="">
I believe this was fixed.
rob
</pre>
</blockquote>
<pre wrap="">
Ok I am just going off of this:
<a class="moz-txt-link-freetext" href="https://bugzilla.redhat.com/show_bug.cgi?id=887193">https://bugzilla.redhat.com/show_bug.cgi?id=887193</a> which makes it appear
like it will be documented but there isn't much you can do about the
default being set to guest_u.
However, if it is fixed that is great news.</pre>
</blockquote>
<br>
You are right. People should prepare for the update by changing the
default SELinux user mapping setting in the existing deployments as
mentioned in the bug. <br>
There will be a release note.<br>
<br>
<blockquote cite="mid:50EC9BC2.8090204@gmail.com" type="cite">
<pre wrap="">
-Erinn
</pre>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Freeipa-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a>
<a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</a></pre>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager for IdM portfolio
Red Hat Inc.
-------------------------------
Looking to carve out IT costs?
<a class="moz-txt-link-abbreviated" href="http://www.redhat.com/carveoutcosts/">www.redhat.com/carveoutcosts/</a>
</pre>
</body>
</html>