[Freeipa-users] running ipa without local ntp on LXC (debian)

[Harald Dunkel]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi folks,

the freeipa packages for client and server on Debian depend
upon ntp. Is this hard requirement really necessary? Usually
ntp is useless in containers (e.g. LXC), since the hardware
access is not permitted and since there is exactly one system
time managed by dom0.

I understand that having the exact time is essential for
Kerberos, but the install-server and install-client scripts
are very verbose about not having ntp installed. That should
be sufficient.

I would suggest to drop the hard requirement for ntp in
freeipa's debian/control.


Regards
Harri
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBCAAGBQJXLyPBAAoJEAqeKp5m04HLsWQIAIzSXjX8l3DtN7ARih6nm7eO
NNIy/siHm0V3jepusjMXFdRT1M4IFBG0iGfZbfjdmhBl58OqAxpCVR3W8noh6RNN
pbeAHat5SuJdGyFJuCQFjCXs/+k4sL/Qn0irO+5gudH5YeuGa4oP5W6DefBT0I+x
DuOTMmpB3USpdnF19wscKusb80u9VSbmaePymH7Wze/NE2T9hWkofBjqfJgC338V
iF0PvDWP9KCoWIDBhXgZQv+8BuOXGA2K7m2JoLiHfZyPTPIhFncG1LCqhm/u86r4
RQEEBVOjNntWDbY9zqQLs8BM8QKpEj6jmKa3AiNcxWPdgAwHMkpQPe5P+Gq4Ks8=
=EGCL
-----END PGP SIGNATURE-----