[Freeipa-devel] [PATCH] 401 Require new samba and krb5

[Rob Crittenden]

Petr Viktorin wrote:
> On 04/16/2013 01:16 PM, Martin Kosek wrote:
>> Require samba 4.0.5 (passdb API changed). Make sure that we use the
>> right epoch number with samba so that the Requires is correctly
>> enforced.
>>
>> Require krb5 1.11.2-1 to fix missing PAC issue.
>>
>> ---
>>
>> This patch makes sure we have the right dependencies in Fedora 19 (and
>> Fedora
>> 18 too for the samba one).
>>
>> Martin
>
> I've tested on f19 with Kerberos from Koji, and got the following test
> failure in test_cmdline/test_ipagetkeytab.py, test_2_run:
>
> ======================================================================
> FAIL: Create a keytab with `ipa-getkeytab` for an existing service.
> ----------------------------------------------------------------------
> Traceback (most recent call last):
>    File "/usr/lib/python2.7/site-packages/nose/case.py", line 197, in
> runTest
>      self.test(*self.arg)
>    File
> "/home/pviktori/freeipa/tests/test_cmdline/test_ipagetkeytab.py", line
> 110, in test_2_run
>      assert err == 'Keytab successfully retrieved and stored in: %s\n' %
> self.keytabname
> AssertionError
>
>
> The command works, the test fails because it doesn't expect warnings
> about Camellia on stderr. I assume they're benign?
>
> Failed to retrieve encryption type Camellia-128 CTS mode with CMAC (#25)
> Failed to retrieve encryption type Camellia-256 CTS mode with CMAC (#26)
> Keytab successfully retrieved and stored in: /tmp/tmpvLHm7l
>
>
>
> On f18 my smoke testing is going fine.
>

Yes, looks like new ciphers were added that we don't have enabled by 
default in IPA.

The patch looks ok to me, ACK.

rob