[Freeipa-users] dns stops working after upgrade

[Stephen Benjamin]

On Wed, Nov 05, 2014 at 09:41:59AM -0500, Rob Crittenden wrote:
> >> Also when I look at the permissions in ipa there are no longer any
> >> permissions that have the 'System: ' prefix.
> >
> > AFAIK the foreman proxy is not necessary (and not supported) with IPA
> > 4.x because it was obsoleted by 'native' proxy delivered by Foreman
> > upstream.
> >
> > Am I right, Rob (Crittenden)? :-)
>
> I believe he's referring to the native smart proxy here. It includes a
> script to setup permissions. I guess it hasn't been tested against a 4.x
> IPA master.

The permissions have changed names in FreeIPA 4.0, which means the
script won't work.  I've tested this one against 4.1 on F21 and it
works:

  https://raw.githubusercontent.com/stbenjam/smart-proxy/8278/sbin/foreman-prepare-realm

There's an open pull request against foreman's Smart Proxy to include
that in the next release:

  https://github.com/theforeman/smart-proxy/pull/231




--
Stephen Benjamin

______________________________________________________
Red Hat GmbH | http://de.redhat.com/ | Sitz: Grasbrunn
Handelsregister: Amtsgericht München, HRB 153243
Geschäftsführer: Charles Cachera, Michael Cunningham,
Michael O'Neill, Charles Peters


-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20141105/12afbdb1/attachment.sig>