Hello, we have IPA client on
[root@centos72-20160110 ~]# cat /etc/redhat-release CentOS Linux release 7.2.1511 (Core) with the following packages: [root@centos72-20160110 ~]# rpm -qf /usr/lib/python2.7/site-packages/ipapython/version.py ipa-python-4.2.0-15.el7.centos.3.x86_64 [root@centos72-20160110 ~]# rpm -qf /usr/bin/ipa ipa-admintools-4.2.0-15.el7.centos.3.x86_64 We try to call the ipa commands against old FreeIPA server version, taking advantage of the -e skip_version_check=1 option added by https://fedorahosted.org/freeipa/ticket/4768 [root@centos72-20160110 ~]# /usr/bin/ipa user-find ipa: ERROR: 2.156 client incompatible with 2.49 server at u'https://aab-ipaserver.example.com/ipa/xml' [root@centos72-20160110 ~]# /usr/bin/ipa -e skip_version_check=1 user-find ipa: ERROR: 2.51 client incompatible with 2.49 server at u'https://aab-ipaserver.example.com/ipa/xml' Alas, it seems that skip_version_check=1 sets the version to 2.51 which is still too new to the 2.49 version of the 6.4 based-server with ipa-server-3.0.0-42.el6.x86_64. Is this behaviour expected? Why does it force a particular value (2.51) rather than ignoring the difference altogether? I have verified that the option works on Fedora client against older Fedora server (but I did not try ipa-server-3.0.0 there). -- Jan Pazdziora Senior Principal Software Engineer, Identity Management Engineering, Red Hat -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project