ipsilon

#308 Replace ipalib with ipa command line
Closed by puiterwijk. Opened by cheimes.
cheimes/ipsilon ipa_cli  into  master

Download 308.patch

Ipsilion uses ipalib just to parse FreeIPA's config file and to create a
service principal. This can be easily archived by shelling out to the
ipa command line tool. The server, realm, and domain names are not
required either.

  • Use subprocess.check_output()
  • ipa-getkeytab no longer needs '-s server' argument. It can parse
    /etc/ipa/default.conf on its own.
  • The service principal name doesn't need the @REALM suffix. FreeIPA
    adds it automatically.

The change is necessary, because FreeIPA 4.8 will drop support for
Python 2 and Ipsilon is still not fully ported to Python 3.

See: https://fedoraproject.org/wiki/Changes/FreeIPA_Python_2_Removal
Signed-off-by: Christian Heimes cheimes@redhat.com

rebased onto d3f0aeb9a176216875aa9602d2aca8f5d540d057

I have successfully tested the patch with a client machine on freeipa-client-4.7.0-1.fc28.x86_64 against a server a server with FreeIPA 4.6.4.

1 new commit added

  • Remove duplicate BuildArch entry

Jenkins is failing because pylint-2 is missing

rebased onto 51e5a633c9262176b2ea68e4c83ff5959dfbb43f

@puiterwijk any chance this could be merged?

This looks nice, +1 for merge

Merged as of 98f1f374ec95bfe0778608c47b5a9f5a5a432f61

Pull-Request has been closed by puiterwijk
Metadata
None
No Tags
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.