[Freeipa-users] Higher client versions joining 4.2.0 IPA cluster

[Rob Crittenden]

Andrey Ptashnik wrote:
> Rob,
>
> Thank you for confirmation.
> We will be relying on LDAP/DNS functionality and pulling policies like Sudo and HBA from client machines. We are not looking to make domain wide changes using ipa tools from those Ubuntu client machines.
> I guess that should work, right?

Yeah, ipa-client-* and sssd should work fine, you probably won't notice 
any issues. Just the ipa tool would notice that the API versions are off.

rob

>
> Regards,
>
> Andrey
>
>
>
>
>
>
> On 9/7/16, 1:48 PM, "Rob Crittenden" <rcritten at redhat.com> wrote:
>
>> Andrey Ptashnik wrote:
>>> Hello FreeIPA team,
>>>
>>> Our FreeIPA server cluster is at version 4.2.0 and expecting Ubuntu 16
>>> machines with FreeIPA client software 4.3.1 soon to join our IPA domain.
>>> Are there any compatibility issues that we may encounter?
>>
>> No, ipa-client-install should work around the API version differences.
>> Using the ipa tool directly will have problems though.
>>
>> This is fixed in the recently released freeIPA 4.4.1.
>>
>> rob