Alexander Bokovoy via FreeIPA-users wrote: > On ke, 04 joulu 2019, Stephen John Smoogen via FreeIPA-users wrote: >> On Tue, 3 Dec 2019 at 21:43, TomK via FreeIPA-users >> <[email protected]> wrote: >>> >>> Hey All, >>> >>> Does FreeIPA fully support IPV6 or are there corner cases and >>> limitations that could make it a show stopper? >>> >> >> Can you define 'fully support' IPV6? I say this from seeing various IT >> groups still having to deal with major network hardware vendors saying >> they 'fully support IPV6' but still needing weekly firmware updates >> because of switch crashes due to IPv6 options. And the problem seems >> to be that the IPV6 spec is complex and spread out over multiple >> documents with parts implemented from draft documents that never got >> out of committee. At times I doubt anything fully supports IPv6 so it >> is better to come up with what you mean by what you need IPv6 support >> to do and work from there. > > Yep. On the other hand, FreeIPA does have few open IPv6-related problems > at the moment. It is known to work in the most IPv6 environments we have > seen so far but there are management issues in DNS handling, for > example. > > https://pagure.io/freeipa/issue/5658 > https://pagure.io/freeipa/issue/4674 > > Whether these issues prevent you to deploy FreeIPA in IPv6-only > environment is up to you. >
In IPV6-only there is also an issue with the CA because server.xml is configured with localhost as the hostname in some port configuration. I don't have a link handy. There are obvious workarounds so it isn't a deal breaker. rob _______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected]
