[Freeipa-users] RHEL 5.x client functionality with ipa-server 3.0

[Dmitri Pal]

On 10/21/2013 12:25 PM, Brian Lee wrote:
> Hello All,
>
> We have a mixed RHEL environment (5.x, 6.x, x86, and x86_64). Our
> FreeIPA server is running RHEL 6.4 x86_64 with ipa-server 3.0.  My
> question is what are the hurdles or feature limitations should I
> expect to encounter in this mixed environment, especially in regards
> to the RHEL 5.x systems? I appreciate any feedback or experience provided.
>
> Thanks,
> Brian
>
>
> _______________________________________________
> Freeipa-users mailing list
> Freeipa-users at redhat.com
> https://www.redhat.com/mailman/listinfo/freeipa-users
The client and underlying SSSD component have evolved quite a bit since
they were introduced in RHEL 5.6.
The details would depend on different factors, for example which DNS you
use. Later versions of SSSD and ipa-client can be told to not rely on
the DNS auto-discovery for LDAP/Kerberos services.
Later versions of SSSD also have integration with sudo, automount etc.

So the bottom line is that you might have to do more manual/scripted
configuration of the client on top of ipa-client in earlier versions of
SSSD and ipa-client and some features just would not be available on
RHEL5 systems.
But basic authentication and identity lookups would work everywhere.


-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager for IdM portfolio
Red Hat Inc.


-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20131021/0cbed83b/attachment.htm>