In Centos 8, there are two streams for idm software. You need DL1 for a server. But it seems to have client software as well. Is that the same in both streams? We have a web server with the KDC proxy. It appears that we would need DL1 to get that. Is that reasonable for a system that isn’t a KDC?
Charles Hedrick via FreeIPA-users wrote:
In Centos 8, there are two streams for idm software. You need DL1 for a server. But it seems to have client software as well. Is that the same in both streams? We have a web server with the KDC proxy. It appears that we would need DL1 to get that. Is that reasonable for a system that isn’t a KDC?
DL1 contains ipa-client because a master is a client of itself.
As to your stream question sure, it's appropriate. The client stream is for pure clients that don't run any IPA services on them.
rob
so it’s valid to use DL1 on a system that isn’t a KDC but needs some package such as the proxy that isn’t in client?
On Nov 11, 2019, at 2:28 PM, Rob Crittenden rcritten@redhat.com wrote:
Charles Hedrick via FreeIPA-users wrote:
In Centos 8, there are two streams for idm software. You need DL1 for a server. But it seems to have client software as well. Is that the same in both streams? We have a web server with the KDC proxy. It appears that we would need DL1 to get that. Is that reasonable for a system that isn’t a KDC?
DL1 contains ipa-client because a master is a client of itself.
As to your stream question sure, it's appropriate. The client stream is for pure clients that don't run any IPA services on them.
rob
Charles Hedrick wrote:
so it’s valid to use DL1 on a system that isn’t a KDC but needs some package such as the proxy that isn’t in client?
Yep.
rob
On Nov 11, 2019, at 2:28 PM, Rob Crittenden rcritten@redhat.com wrote:
Charles Hedrick via FreeIPA-users wrote:
In Centos 8, there are two streams for idm software. You need DL1 for a server. But it seems to have client software as well. Is that the same in both streams? We have a web server with the KDC proxy. It appears that we would need DL1 to get that. Is that reasonable for a system that isn’t a KDC?
DL1 contains ipa-client because a master is a client of itself.
As to your stream question sure, it's appropriate. The client stream is for pure clients that don't run any IPA services on them.
rob
freeipa-users@lists.fedorahosted.org
-
Charles Hedrick -
Rob Crittenden