Re: [Freeipa-users] running ipa without local ntp on LXC (debian)

2016-05-08 Thread Peter Fern
On 05/08/16 21:32, Harald Dunkel wrote:
> Hi folks,
>
> the freeipa packages for client and server on Debian depend
> upon ntp. Is this hard requirement really necessary? Usually
> ntp is useless in containers (e.g. LXC), since the hardware
> access is not permitted and since there is exactly one system
> time managed by dom0.
>
> I understand that having the exact time is essential for
> Kerberos, but the install-server and install-client scripts
> are very verbose about not having ntp installed. That should
> be sufficient.
>
> I would suggest to drop the hard requirement for ntp in
> freeipa's debian/control.

You don't actually have to run NTP, and you can perform the
(client-|server-)install using the `--no-ntp` flag.

-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project


[Freeipa-users] running ipa without local ntp on LXC (debian)

2016-05-08 Thread Harald Dunkel
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Hi folks,

the freeipa packages for client and server on Debian depend
upon ntp. Is this hard requirement really necessary? Usually
ntp is useless in containers (e.g. LXC), since the hardware
access is not permitted and since there is exactly one system
time managed by dom0.

I understand that having the exact time is essential for
Kerberos, but the install-server and install-client scripts
are very verbose about not having ntp installed. That should
be sufficient.

I would suggest to drop the hard requirement for ntp in
freeipa's debian/control.


Regards
Harri
-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQEcBAEBCAAGBQJXLyPBAAoJEAqeKp5m04HLsWQIAIzSXjX8l3DtN7ARih6nm7eO
NNIy/siHm0V3jepusjMXFdRT1M4IFBG0iGfZbfjdmhBl58OqAxpCVR3W8noh6RNN
pbeAHat5SuJdGyFJuCQFjCXs/+k4sL/Qn0irO+5gudH5YeuGa4oP5W6DefBT0I+x
DuOTMmpB3USpdnF19wscKusb80u9VSbmaePymH7Wze/NE2T9hWkofBjqfJgC338V
iF0PvDWP9KCoWIDBhXgZQv+8BuOXGA2K7m2JoLiHfZyPTPIhFncG1LCqhm/u86r4
RQEEBVOjNntWDbY9zqQLs8BM8QKpEj6jmKa3AiNcxWPdgAwHMkpQPe5P+Gq4Ks8=
=EGCL
-END PGP SIGNATURE-

-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project