[Freeipa-users] The -e skip_version_check=1 with 4.2 client against 6.4-based server

[Jan Pazdziora]

Hello,

we have IPA client on

	[root at centos72-20160110 ~]# cat /etc/redhat-release
	CentOS Linux release 7.2.1511 (Core)

with the following packages:

	[root at centos72-20160110 ~]# rpm -qf
	/usr/lib/python2.7/site-packages/ipapython/version.py
	ipa-python-4.2.0-15.el7.centos.3.x86_64
	[root at centos72-20160110 ~]# rpm -qf /usr/bin/ipa
	ipa-admintools-4.2.0-15.el7.centos.3.x86_64

We try to call the ipa commands against old FreeIPA server version,
taking advantage of the

	-e skip_version_check=1

option added by

	https://fedorahosted.org/freeipa/ticket/4768


[root at centos72-20160110 ~]# /usr/bin/ipa user-find
ipa: ERROR: 2.156 client incompatible with 2.49 server at u'https://aab-ipaserver.example.com/ipa/xml'

[root at centos72-20160110 ~]# /usr/bin/ipa -e skip_version_check=1 user-find
ipa: ERROR: 2.51 client incompatible with 2.49 server at u'https://aab-ipaserver.example.com/ipa/xml'

Alas, it seems that skip_version_check=1 sets the version to 2.51
which is still too new to the 2.49 version of the 6.4 based-server
with ipa-server-3.0.0-42.el6.x86_64.

Is this behaviour expected? Why does it force a particular value (2.51)
rather than ignoring the difference altogether?

I have verified that the option works on Fedora client against older
Fedora server (but I did not try ipa-server-3.0.0 there).

-- 
Jan Pazdziora
Senior Principal Software Engineer, Identity Management Engineering, Red Hat