On Thu, Dec 13, 2018 at 09:36:57PM +0100, Jan Pazdziora via FreeIPA-users wrote:
On Mon, Nov 26, 2018 at 09:53:16AM +0100, Jan Pazdziora via FreeIPA-users wrote:
Hello,
in the past couple of week I've pushed multiple changes to the
https://github.com/freeipa/freeipa-container
repository, fixing and enabling Fedora 28 and Fedora 29 Dockerfiles, adding Travis CI configuration where we currently test IPA master and
Hello,
slightly related to the FreeIPA containerization effort, I've now updated
Web application authentication developer setup https://pagure.io/webauthinfra https://github.com/adelton/webauthinfra
to use Fedora 28. The developer setup shows the use of FreeIPA and Ipsilon IdP for GSSAPI and SAML authentication in Web applications, and it can be used as an example of IPA-enrolled client containers.
I've also added Travis CI configuration for the setup and it seems it's working fine:
https://travis-ci.org/adelton/webauthinfra
The multi-container CI setup can hopefully also serve as an example that people can reuse.
I've looked at the possibility of updating the Web application authentication developer setup to Fedora 29 so that we go with the latest greatest Fedora release.
We are hitting
https://bugzilla.redhat.com/show_bug.cgi?id=1660067
there, so that blocks us a bit. Thanks to Jakub H. for helping me isolate the issue so that we have it at least tracked.
Also, Ipsilon being Python 2 only prevents us moving the www-with-app container to Python 3, which would mean we'd have to support both Django 1.11 and Django 2.1. It likely is not a big deal to do so but it'd be nice to phase out Python 2 completely.
If anyone has spare cycles to help porting Ipsilon to Python 3, it'd be useful -- the issue for that request is
https://pagure.io/ipsilon/issue/309
So for now the setup is based on Fedora 28 and depending on the Ipsilon future, I will either update it to Fedora 29 later, or look at the possibility of using Keycloak instead. If people are interested in Keycloak and can show patch which would use that, I'd be happy to review and add it to the setup.