[Freeipa-users] Aiisues to wathc out fro / anticipate when upgrading RHEL6.3 and IPA 2 to 6.4 and IPA 3

[Dmitri Pal]

On 01/08/2013 05:20 PM, Erinn Looney-Triggs wrote:
> On 01/08/13 12:45, Rob Crittenden wrote:
>> Erinn Looney-Triggs wrote:
>>> On 01/08/13 11:44, Rob Crittenden wrote:
>>>> Simo Sorce wrote:
>>>>> On Tue, 2013-01-08 at 19:31 +0000, Steven Jones wrote:
>>>>>> HI,
>>>>>>
>>>>>> I assume RHEL 6.4 is GA shortly just how straigh forward is the
>>>>>> upgrade from one IPA version to another please?
>>>>>> regards
>>>>> Should just require an rpm upgrade and a restart and nothing else.
>>>>>
>>>>> Simo.
>>>>>
>>>> If you have multiple servers you'll want to upgrade them one at a time
>>>> in a short period (days, not weeks).
>>>>
>>>> rob
>>>>
>>>> _______________________________________________
>>>> Freeipa-users mailing list
>>>> Freeipa-users at redhat.com
>>>> https://www.redhat.com/mailman/listinfo/freeipa-users
>>> Is this the release where SELinux mapping in IPA actually starts working?
>>>
>>> If so that is definitely something to watch out for (I realize this is
>>> more of an SSSD thing, but still). If you aren't careful and you have
>>> your users mapped to something like guest_u, well the upgrade can be
>>> very inconvenient for them.
>> I believe this was fixed.
>>
>> rob
> Ok I am just going off of this:
> https://bugzilla.redhat.com/show_bug.cgi?id=887193 which makes it appear
> like it will be documented but there isn't much you can do about the
> default being set to guest_u.
>
> However, if it is fixed that is great news.

You are right. People should prepare for the update by changing the
default SELinux user mapping setting in the existing deployments as
mentioned in the bug.
There will be a release note.

>
> -Erinn
>
>
>
> _______________________________________________
> Freeipa-users mailing list
> Freeipa-users at redhat.com
> https://www.redhat.com/mailman/listinfo/freeipa-users


-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager for IdM portfolio
Red Hat Inc.


-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20130108/8a21f0fe/attachment.htm>