Re: [Freeipa-users] Installing on CentOS 5.X?
I did manage to get the 1.0.0 version compiled and running on CentOS 5.6, using the aforementioned spec file mucking. But the suggested course would be to wait for CentOS 6.X, change to RHEL 6, or is Fedora really the only distribution still being targeted? Cheers, -Gavin On Tue, Apr 12, 2011 at 3:34 PM, Doug Chapman prjctg...@gmail.com wrote: Recent builds, no. FreeIPA 1.2 will build on Centos5 with some work (as in mucking with spec files). We're using the 389-ds (1.2.4) package from Fedora. At this juncture I would not invest the time to get this working on Centos5. On Tue, Apr 12, 2011 at 1:57 PM, Gavin McQuillan ga...@urbanairship.comwrote: Hi, We're moving to a vendor which only supports servers with CentOS or RHEL. I see a 2 1/2 year old document for building SRC RPMs to get an older version of ipa-server running: http://howtoforge.com/how-to-build-rhel-ipa-rpms-for-centos-5. However there are problems with it. - It's missing several steps and/or or the package names have changed since 5.2. - Some people hint that 'centos-ds' located in the testing should serve the same purpose, but it looks like it only supports basic LDAP administration. - Naturally, this repo config doesn't work: http://freeipa.org/downloads/freeipa-devel.repo Has anybody in the community successfully gotten a relatively recent version of FreeIPA installed on CentOS 5.X? Thanks in advance, -Gavin ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users -- Doug Chapman ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
Re: [Freeipa-users] Installing on CentOS 5.X?
Hi, Its no where near a full IdM from what I can see so far but if you want to glue a straight forward but mixed environment together ie with MS AD and linux and get one password say across the lot plus some control then it looks good enough. So if you know what your goals are and want to see if it meets them a fedora testbed would be good enough I suspect. Ive gone through that, now I want 6 months of extended trial. You need a decent period, we bought Oracle's IdM and its still not working in #+ years and well past the odd million $ regards Steven From: freeipa-users-boun...@redhat.com [freeipa-users-boun...@redhat.com] on behalf of Gavin McQuillan [ga...@urbanairship.com] Sent: Thursday, 14 April 2011 8:18 a.m. To: Doug Chapman Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] Installing on CentOS 5.X? I did manage to get the 1.0.0 version compiled and running on CentOS 5.6, using the aforementioned spec file mucking. But the suggested course would be to wait for CentOS 6.X, change to RHEL 6, or is Fedora really the only distribution still being targeted? Cheers, -Gavin On Tue, Apr 12, 2011 at 3:34 PM, Doug Chapman prjctg...@gmail.commailto:prjctg...@gmail.com wrote: Recent builds, no. FreeIPA 1.2 will build on Centos5 with some work (as in mucking with spec files). We're using the 389-ds (1.2.4) package from Fedora. At this juncture I would not invest the time to get this working on Centos5. On Tue, Apr 12, 2011 at 1:57 PM, Gavin McQuillan ga...@urbanairship.commailto:ga...@urbanairship.com wrote: Hi, We're moving to a vendor which only supports servers with CentOS or RHEL. I see a 2 1/2 year old document for building SRC RPMs to get an older version of ipa-server running: http://howtoforge.com/how-to-build-rhel-ipa-rpms-for-centos-5. However there are problems with it. - It's missing several steps and/or or the package names have changed since 5.2. - Some people hint that 'centos-ds' located in the testing should serve the same purpose, but it looks like it only supports basic LDAP administration. - Naturally, this repo config doesn't work: http://freeipa.org/downloads/freeipa-devel.repo Has anybody in the community successfully gotten a relatively recent version of FreeIPA installed on CentOS 5.X? Thanks in advance, -Gavin ___ Freeipa-users mailing list Freeipa-users@redhat.commailto:Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users -- Doug Chapman ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
Re: [Freeipa-users] Installing on CentOS 5.X?
On 04/13/2011 04:18 PM, Gavin McQuillan wrote: I did manage to get the 1.0.0 version compiled and running on CentOS 5.6, using the aforementioned spec file mucking. But the suggested course would be to wait for CentOS 6.X, change to RHEL 6, or is Fedora really the only distribution still being targeted? Red Hat will prvide a tech preview version in 6.1 and fully supported in 6.2. You can try beta bits now, they are already available for several weeks. Cheers, -Gavin On Tue, Apr 12, 2011 at 3:34 PM, Doug Chapman prjctg...@gmail.com mailto:prjctg...@gmail.com wrote: Recent builds, no. FreeIPA 1.2 will build on Centos5 with some work (as in mucking with spec files). We're using the 389-ds (1.2.4) package from Fedora. At this juncture I would not invest the time to get this working on Centos5. On Tue, Apr 12, 2011 at 1:57 PM, Gavin McQuillan ga...@urbanairship.com mailto:ga...@urbanairship.com wrote: Hi, We're moving to a vendor which only supports servers with CentOS or RHEL. I see a 2 1/2 year old document for building SRC RPMs to get an older version of ipa-server running: http://howtoforge.com/how-to-build-rhel-ipa-rpms-for-centos-5. However there are problems with it. - It's missing several steps and/or or the package names have changed since 5.2. - Some people hint that 'centos-ds' located in the testing should serve the same purpose, but it looks like it only supports basic LDAP administration. - Naturally, this repo config doesn't work: http://freeipa.org/downloads/freeipa-devel.repo Has anybody in the community successfully gotten a relatively recent version of FreeIPA installed on CentOS 5.X? Thanks in advance, -Gavin ___ Freeipa-users mailing list Freeipa-users@redhat.com mailto:Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users -- Doug Chapman ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users -- Thank you, Dmitri Pal Sr. Engineering Manager IPA project, Red Hat Inc. --- Looking to carve out IT costs? www.redhat.com/carveoutcosts/ ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
Re: [Freeipa-users] Installing on CentOS 5.X?
Recent builds, no. FreeIPA 1.2 will build on Centos5 with some work (as in mucking with spec files). We're using the 389-ds (1.2.4) package from Fedora. At this juncture I would not invest the time to get this working on Centos5. On Tue, Apr 12, 2011 at 1:57 PM, Gavin McQuillan ga...@urbanairship.comwrote: Hi, We're moving to a vendor which only supports servers with CentOS or RHEL. I see a 2 1/2 year old document for building SRC RPMs to get an older version of ipa-server running: http://howtoforge.com/how-to-build-rhel-ipa-rpms-for-centos-5. However there are problems with it. - It's missing several steps and/or or the package names have changed since 5.2. - Some people hint that 'centos-ds' located in the testing should serve the same purpose, but it looks like it only supports basic LDAP administration. - Naturally, this repo config doesn't work: http://freeipa.org/downloads/freeipa-devel.repo Has anybody in the community successfully gotten a relatively recent version of FreeIPA installed on CentOS 5.X? Thanks in advance, -Gavin ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users -- Doug Chapman ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
Re: [Freeipa-users] Installing on Centos
On Wed, Mar 17, 2010 at 10:28 AM, Gerrard Geldenhuis gerrard.geldenh...@betfair.com wrote: Thanks for all the feedback I have made some good headway and can at least start running the build, however I currently get this error: make[4]: Entering directory `/usr/src/redhat/BUILD/freeipa-1.2.2/ipa-server/ipa-gui' tg-admin i18n compile Traceback (most recent call last): File /usr/bin/tg-admin, line 5, in ? from pkg_resources import load_entry_point File /usr/lib/python2.4/site-packages/pkg_resources.py, line 2479, in ? working_set.require(__requires__) File /usr/lib/python2.4/site-packages/pkg_resources.py, line 585, in require needed = self.resolve(parse_requirements(requirements)) File /usr/lib/python2.4/site-packages/pkg_resources.py, line 483, in resolve raise DistributionNotFound(req) # XXX put more info here pkg_resources.DistributionNotFound: Cheetah=2.0.1 make[4]: *** [locales/ja/LC_MESSAGES/messages.mo] Error 1 make[4]: Leaving directory `/usr/src/redhat/BUILD/freeipa-1.2.2/ipa-server/ipa-gui' make[3]: *** [all-recursive] Error 1 make[3]: Leaving directory `/usr/src/redhat/BUILD/freeipa-1.2.2/ipa-server/ipa-gui' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/usr/src/redhat/BUILD/freeipa-1.2.2/ipa-server' make[1]: *** [all] Error 2 make[1]: Leaving directory `/usr/src/redhat/BUILD/freeipa-1.2.2/ipa-server' make: *** [all] Error 1 error: Bad exit status from /var/tmp/rpm-tmp.70572 (%build) I have the following Cheetah related packages installed: rpm -qa | grep -i cheetah python-cheetah-2.0.1-1.el5.rf python-turbocheetah-1.0-4.el5 I decided to stick with 389-DS, I don't know enough about the differences in the Centos-DS and 389-DS to make an informed decision about either. Defaults is thus good. I installed 389-DS from epel. Regards Hi, I'm not sure about that particular error; you may still be missing something. I just compiled FreeIPA on a relatively clean install of CentOS 5.4. I didn't try installing/running, but I've run it on RHEL 5. I'm using 389-ds. I've attached my diffs for the specs of slapi-nis and freeipa; these are against the Fedora 11 versions. Before compiling, I needed to install the following packages: 389-ds-base-devel, mozldap-devel, TurboGears, and selinux-policy-devel. Note that to install, you will need to get packages for krb5-server-ldap, python-pyasn1, and python-tgexpandingformwidget. I may be mistaken, but I don't think the binaries are available in any repositories. The SRPMS are available here: http://ftp.redhat.com/pub/redhat/linux/enterprise/5Server/en/RHEIPA/SRPMS/ Let me know if I've left out anything important. ipa.spec.diff Description: Binary data slapi-nis.spec.diff Description: Binary data ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
Re: [Freeipa-users] Installing on Centos
Hi, Follow the below steps provided by Mr.Rob from FreeIPA-Redhat, and I have successfully complied and Installed in my test environment. % cd rpmbuild/SOURCES % wget http://kojipkgs.fedoraproject.org/packages/ipa/1.2.2/2.fc11/src/ipa-1.2.2-2.fc11.src.rpm % rpm2cpio ipa-1.2.2-2.fc11.src.rpm |cpio -idv % apply this patch to ipa.spec --- ipa.spec.orig 2010-02-03 10:22:04.0 -0500 +++ ipa.spec2010-02-03 10:25:23.0 -0500 @@ -16,7 +16,7 @@ BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) Patch1: ipa-schema.patch -BuildRequires: fedora-ds-base-devel = 1.1.3 +BuildRequires: redhat-ds-base-devel = 8.1 BuildRequires: mozldap-devel BuildRequires: svrcore-devel BuildRequires: nspr-devel @@ -30,7 +30,7 @@ BuildRequires: autoconf BuildRequires: automake BuildRequires: libtool -BuildRequires: popt-devel +BuildRequires: popt BuildRequires: /usr/share/selinux/devel/Makefile BuildRequires: m4 BuildRequires: policycoreutils = %{POLICYCOREUTILSVER} @@ -49,7 +49,7 @@ Requires: %{name}-client = %{version}-%{release} Requires: %{name}-admintools = %{version}-%{release} Requires(post): %{name}-server-selinux = %{version}-%{release} -Requires: fedora-ds-base = 1.1.3 +Requires: redhat-ds-base = 8.1 Requires: openldap-clients Requires: nss Requires: nss-tools % rpmbuild -ba ipa.spec % su # cd ../RPMS/x86_64 # rpm -Uvh ipa-admintools-1.2.2-2.x86_64.rpm ipa-client-1.2.2-2.x86_64.rpm ipa-python-1.2.2-2.x86_64.rpm ipa-server-1.2.2-2.x86_64.rpm ipa-server-selinux-1.2.2-2.x86_64.rpm # /usr/sbin/ipa-server-install # kinit admin # /usr/sbin/ipa-finduser admin Home Directory: /home/admin Login Shell: /bin/bash Last Name: Administrator Login: admin # cat /etc/redhat-release Red Hat Enterprise Linux Server release 5.2 (Tikanga) The UI works too: # curl -k --negotiate -u : https://ipa.example.com/ipa/ui 21 | grep Logged On Wed, Mar 17, 2010 at 1:22 PM, Gerrard Geldenhuis gerrard.geldenh...@betfair.com wrote: Hi I was wondering if anyone has had any luck in getting FreeIPA compiled and installed on Centos. I am struggling a bit at the moment. I have downloaded a fedora source package which I have tried to compile but can’t even get the package to install at the moment. I get the error: error: unpacking of archive failed on file /usr/src/redhat/SOURCES/Fix-install-with-krb-1.7.patch;4ba0aaed: cpio: MD5 sum mismatch This is the file I downloaded: http://www.mirrorservice.org/sites/download.fedora.redhat.com/pub/fedora/linux/updates/12/SRPMS/ipa-1.2.2-3.fc12.src.rpm Regards In order to protect our email recipients, Betfair Group use SkyScan from MessageLabs to scan all Incoming and Outgoing mail for viruses. ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users -- Thanks Regards Shan Kumaraswamy ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
Re: [Freeipa-users] Installing on Centos
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 03/17/2010 11:22 AM, Gerrard Geldenhuis wrote: Hi I was wondering if anyone has had any luck in getting FreeIPA compiled and installed on Centos. I am struggling a bit at the moment. I have downloaded a fedora source package which I have tried to compile but can't even get the package to install at the moment. I get the error: error: unpacking of archive failed on file /usr/src/redhat/SOURCES/Fix-install-with-krb-1.7.patch;4ba0aaed: cpio: MD5 sum mismatch This is the file I downloaded: http://www.mirrorservice.org/sites/download.fedora.redhat.com/pub/fedora/linux/updates/12/SRPMS/ipa-1.2.2-3.fc12.src.rpm Regards Yes, newer Fedora (11 and later) releases are using SHA256 instead of MD5. I would suggest either building the source RPM from Fedora sources on the Centos 5 machine (cvs co freeipa, cd freeipa/F12/; make local), or just install the source RPM with --nomd5 and then rpmbuild the binary packages. Of course, the dependencies (both runtime and build) might be different on Centos vs. Fedora, so you might need to do some tweaking.. -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAkug0igACgkQHsardTLnvCVkQQCgq3rUgPcXPIa6wbSzkNaUBWuR nCMAnRmEn6V9g+CyY2W1qdRRUMKbCi5V =HoDo -END PGP SIGNATURE- ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
Re: [Freeipa-users] Installing on Centos
Gerrard Geldenhuis wrote: Hi I was wondering if anyone has had any luck in getting FreeIPA compiled and installed on Centos. I am struggling a bit at the moment. I have downloaded a fedora source package which I have tried to compile but can’t even get the package to install at the moment. I get the error: error: unpacking of archive failed on file /usr/src/redhat/SOURCES/Fix-install-with-krb-1.7.patch;4ba0aaed: cpio: MD5 sum mismatch This is the file I downloaded: http://www.mirrorservice.org/sites/download.fedora.redhat.com/pub/fedora/linux/updates/12/SRPMS/ipa-1.2.2-3.fc12.src.rpm Regards rpm changed around F10 or 11. IIRC it uses SHA256 instead of MD5, that's why you are getting the error unpacking it. Try this instead: % rpm2cpio ipa-1.2.2-3.fc12.src.rpm | cpio -idv You'd need to do this anyway since you need to make some spec file changes. Replace the BuildRequires: popt-devel with popt If you are going to build against the CentOS RHDS then replace occurrences of fedora-ds with redhat-ds. 389-ds has a Provides for fedora-ds so things will just work if you are using 389-ds. Then: rpmbuild -ba ipa.spec I think that should do it assuming all the other build and install time dependencies we have are available in CentOS. rob ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users