Package Base Details: freeipa

Git Clone URL: https://aur.archlinux.org/freeipa.git (read-only, click to copy)
Keywords: freeipa identity management policy trusts
Submitter: chenxiaolong
Maintainer: patlefort
Last Packager: patlefort
Votes: 22
Popularity: 0.000607
First Submitted: 2012-11-15 23:50 (UTC)
Last Updated: 2024-01-27 15:47 (UTC)

Latest Comments

« First ‹ Previous 1 2 3 4 5 6 7

chenxiaolong commented on 2013-05-12 21:09 (UTC)

Updated to version 3.2.0. There are a huge amount changes for this release: https://github.com/chenxiaolong/ArchLinux-Packages/commit/4e0df0c4992ef8d0629586036fdf4f00a4e2c730 Installation is still the same as before: 1. Install freeipa 2. sudo sss-auth-setup --enable-nss --enable-pam 3. sudo ipa-client-install ... Note: freeipa on Arch Linux is still untested :P

chenxiaolong commented on 2013-05-12 15:50 (UTC)

Hi Gwmngilfen: My finals for school just finished two days ago, so I should have a lot more time to work on FreeIPA now. I'm guessing the dependencies are really outdated since I last updated the package. I'll fix all of those first :P

Gwmngilfen commented on 2013-05-12 12:53 (UTC)

Hi chenxiaolong, Just a headsup - FreeIPA 3.2 is out; and presently your 3.1 package doesn't build. Some of the dependencies are now "python2-pylint" and "samba" but even then the patches don't seem to apply to the source properly. Log here: https://gist.github.com/5563461 I might see if I can fix it if I get time, but I'm not familiar with the IPA codebase (only just installed freeipa server on a spare fedora box :P)

psi.neamf commented on 2013-01-09 14:29 (UTC)

Hi chenxiaolong, I've found for GSSAPI for SSH you need to change these to 'yes' : GSSAPIAuthentication yes GSSAPIDelegateCredentials yes in either /etc/ssh/ssh_config or ~/.ssh/config

chenxiaolong commented on 2012-12-28 17:05 (UTC)

@demaio (who flagged this package out of date): It may take me a little while (probably after New Year) to update this package. I have yet to upgrade my server to 3.1.0 and I still need to work out a few issues, such as making pam_mkhomedir or oddjob-mkhomedir work :)

chenxiaolong commented on 2012-12-01 21:04 (UTC)

@senorsmile: FreeIPA (the client) is partially working now. I would say it's usable :) Right now, I'm working on the PAM configuration files. There are some issues with the way it works. For example, if you press Control+C when you type the password to sudo, it will say that you typed the password incorrectly 3 times. Other than that, the only issue I know of is that GSSAPI (single sign on) does not work with ssh. I think that it's a problem with Arch's packages. I haven't written anything about using FreeIPA with Arch, so here's a basic rundown: Basically, you'll need to install this freeipa package and run "sudo sss-auth-setup --enable-nss --enable-pam". That will modify /etc/nsswitch.conf and /etc/pam.d/* for freeipa. If pacman ever does anything in /etc/pam.d/, such as updating something or installing a new login manager, you'll need to run: sudo sss-auth-setup --disable-pam sudo sss-auth-setup --enable-pam That's all for the Arch-specific FreeIPA changes. Afterwards, just run the usual "ipa-client-install" commands. I hope that answered your questions :)

senorsmile commented on 2012-12-01 19:07 (UTC)

How is the freeipa package running on Arch? Is it very stable? At least usable?