On Thu, 2014-09-11 at 16:09 +0200, Ludwig Krispenz wrote: > On 09/11/2014 04:04 PM, Martin Kosek wrote: > > On 09/11/2014 03:47 PM, Nathaniel McCallum wrote: > >> On Thu, 2014-09-11 at 15:46 +0200, Petr Viktorin wrote: > >>> On 09/11/2014 01:37 PM, Martin Kosek wrote: > >>>> Hi team, > >>>> > >>>> It seems we have pretty serious bug in our FreeIPA 4.0.2 release, > >>>> breaking > >>>> upgrade from older releases: > >>>> > >>>> https://fedorahosted.org/freeipa/ticket/4529 > >>>> > >>>> We also have packaging fix requested by Fedora Server roles group: > >>>> > >>>> https://fedorahosted.org/freeipa/ticket/4430 > >>>> > >>>> It seems just these 2 bugs are enough for a quick FreeIPA 4.0.3 > >>>> release... > >>>> Makes sense? Any other tickets or patches we would like to get in? > >>> Looks like it's just those two. I'll start releasing shortly. > >> I'd like to get a fix in for the missing ciphers in the new NSS. I can > >> have a patch on the list shortly. > >> > >> Nathaniel > > Isn't this related to > > https://fedorahosted.org/freeipa/ticket/4395 > > ? I think we do not work with the newest DS which fixed the default ciphers. > yes > > > > Don't we need to set our SSL ciphers setting to > > > > https://fedorahosted.org/389/ticket/47838#comment:29 > yes > tjhe attached patch tries this, but at the moment I failed to build and > also to upgrade to F21
NACK LDAP error: OBJECT_CLASS_VIOLATION attribute "allowweakcipher" not allowed I suspect we are missing a spec file requirement on a newer version of 389... Nathaniel _______________________________________________ Freeipa-devel mailing list [email protected] https://www.redhat.com/mailman/listinfo/freeipa-devel
