[Freeipa-users] dns stops working after upgrade

Petr Spacek pspacek at redhat.com
Wed Nov 5 15:25:36 UTC 2014


On 5.11.2014 16:20, Rob Verduijn wrote:
> Hello,
>
> Yes I noticed the name change it took me a while to realise it was a known
> ruby bug in katello that caused the real problem.
>
> I also checked after I updated the 'katello integrated' update from 3.3.5
> to 4.1 and the permissions were neatly renamed to their new counterparts.
>
> However the internal dns no longer worked :(

So the permissions broke after upgrade to 4.1, right? pviktori, can you give 
us some advice?

Thanks!

Petr^2 Spacek

> Rob
>
> 2014-11-05 16:17 GMT+01:00 Stephen Benjamin <stephen at redhat.com>:
>
>> On Wed, Nov 05, 2014 at 09:41:59AM -0500, Rob Crittenden wrote:
>>>>> Also when I look at the permissions in ipa there are no longer any
>>>>> permissions that have the 'System: ' prefix.
>>>>
>>>> AFAIK the foreman proxy is not necessary (and not supported) with IPA
>>>> 4.x because it was obsoleted by 'native' proxy delivered by Foreman
>>>> upstream.
>>>>
>>>> Am I right, Rob (Crittenden)? :-)
>>>
>>> I believe he's referring to the native smart proxy here. It includes a
>>> script to setup permissions. I guess it hasn't been tested against a 4.x
>>> IPA master.
>>
>> The permissions have changed names in FreeIPA 4.0, which means the
>> script won't work.  I've tested this one against 4.1 on F21 and it
>> works:
>>
>>
>> https://raw.githubusercontent.com/stbenjam/smart-proxy/8278/sbin/foreman-prepare-realm
>>
>> There's an open pull request against foreman's Smart Proxy to include
>> that in the next release:
>>
>>    https://github.com/theforeman/smart-proxy/pull/231-- 
Petr^2 Spacek
-- 
Petr^2 Spacek
-- 
Petr^2 Spacek
-- 
Petr^2 Spacek
-- 
Petr^2 Spacek
-- 
Petr^2 Spacek
-- 
Petr^2 Spacek
-- 
Petr^2 Spacek
-- 
Petr^2 Spacek
-- 
Petr^2 Spacek
-- 
Petr^2 Spacek
-- 
Petr^2 Spacek
-- 
Petr^2 Spacek
-- 
Petr^2 Spacek
-- 
Petr^2 Spacek
-- 
Petr^2 Spacek
-- 
Petr^2 Spacek
-- 
Petr^2 Spacek
-- 
Petr^2 Spacek
-- 
Petr^2 Spacek
-- 
Petr^2 Spacek
-- 
Petr^2 Spacek
-- 
Petr^2 Spacek
-- 
Petr^2 Spacek
-- 
Petr^2 Spacek
-- 
Petr^2 Spacek
-- 
Petr^2 Spacek
-- 
Petr^2 Spacek
-- 
Petr^2 Spacek
-- 
Petr^2 Spacek
-- 
Petr^2 Spacek
-- 
Petr^2 Spacek
-- 
Petr^2 Spacek
-- 
Petr^2 Spacek
-- 
Petr^2 Spacek
-- 
Petr^2 Spacek
-- 
Petr^2 Spacek
-- 
Petr^2 Spacek




More information about the Freeipa-users mailing list