<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
On 10/21/2013 12:25 PM, Brian Lee wrote:
<blockquote
cite="mid:CAO8cXGY6F_cm_FfuMban-_F1BztXaeqWnsfy1iCiyW-JoTGeXg@mail.gmail.com"
type="cite">
<div dir="ltr">Hello All,
<div><br>
</div>
<div>We have a mixed RHEL environment (5.x, 6.x, x86, and
x86_64). Our FreeIPA server is running RHEL 6.4 x86_64 with
ipa-server 3.0. My question is what are the hurdles or
feature limitations should I expect to encounter in this mixed
environment, especially in regards to the RHEL 5.x systems? I
appreciate any feedback or experience provided.</div>
<div><br>
</div>
<div>Thanks,</div>
<div>Brian</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Freeipa-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a>
<a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</a></pre>
</blockquote>
The client and underlying SSSD component have evolved quite a bit
since they were introduced in RHEL 5.6.<br>
The details would depend on different factors, for example which DNS
you use. Later versions of SSSD and ipa-client can be told to not
rely on the DNS auto-discovery for LDAP/Kerberos services.<br>
Later versions of SSSD also have integration with sudo, automount
etc.<br>
<br>
So the bottom line is that you might have to do more manual/scripted
configuration of the client on top of ipa-client in earlier versions
of SSSD and ipa-client and some features just would not be available
on RHEL5 systems.<br>
But basic authentication and identity lookups would work everywhere.<br>
<br>
<br>
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager for IdM portfolio
Red Hat Inc.
-------------------------------
Looking to carve out IT costs?
<a class="moz-txt-link-abbreviated" href="http://www.redhat.com/carveoutcosts/">www.redhat.com/carveoutcosts/</a>
</pre>
</body>
</html>