[Freeipa-devel] [freeipa PR#205][comment] Support DAL version 5 and version 6

[tomaskrizek]

  URL: https://github.com/freeipa/freeipa/pull/205
Title: #205: Support DAL version 5 and version 6

tomaskrizek commented:
"""
NACK

`ipa-server-install` will fail at:
```
Configuring kadmin
  [1/2]: starting kadmin 
  [2/2]: configuring kadmin to start on boot
Done configuring kadmin.
ipa.ipapython.install.cli.install_tool(Server): ERROR    CA did not start in 300.0s
ipa.ipapython.install.cli.install_tool(Server): ERROR    The ipa-server-install command failed
```
From `/var/log/pki/pki-tomcat/ca/debug`, it seems PKI can't authenticate towards LDAP:
```
[07/Nov/2016:16:42:11][localhost-startStop-1]: SSL handshake happened
Could not connect to LDAP server host vm-059.abc.idm.lab.eng.brq.redhat.com port 636 Error netscape.ldap.LDAPException: Authentication failed (48)
```
"""

See the full comment at https://github.com/freeipa/freeipa/pull/205#issuecomment-258879524