[389-users] Re: 389-DS Cockpit

2023-02-10 Thread Viktor Ashirov
Hi,


On Fri, Feb 10, 2023 at 2:47 PM Rosario Esposito 
wrote:

> Hello,
>
> I read from https://directory.fedoraproject.org/docs/389ds/download.html
> "cockpit-389-ds is not distributed in AppStream."
>
> I just downloaded the current 389-ds-base source rpm from Appstream:
> 389-ds-base-2.1.3-4.el9_1.src.rpm
>
> Inside the src rpm there's a 389-ds-base.spec containing the following
> line:
> %global use_cockpit 0
>
> If I just modify it to:
> %global use_cockpit 1
>
> ...and rebuild the source rpm, then I get the rpm:
> cockpit-389-ds-2.1.3-4.el9.noarch.rpm
>
> Is that safe to use ?

What is the reason for cockpit-389-ds not being directly distributed in
> Appstream repo ?
>
In RHEL 389-ds-base is intended to be used as part of Identity Management
(IPA) only. Standalone installations of 389-ds-base on RHEL are unsupported
by Red Hat. The supported option is to use a layered product - Red Hat
Directory Server, that comes with cockpit-389-ds. It's not included in the
RHEL subscription and should be purchased separately.
Since you're using Rocky, these support limitations should not be a concern
for you. cockpit-389-ds from a rebuilt srpm from AppStream should work just
fine. But the version from RHDS is more tested and usually contains
additional fixes (which are available upstream, of course).

>
> I'm asking this because I'd like to install the same version of 389-ds
> currently used by RHDS12 (2.1.3) on a Rocky Linux 9 machine.
> If I switch to "copr" repository then I get 389-ds version 2.2.x which
> seems to be too new.
>
2.2.x is well tested in Fedora and will be shipped in the upcoming RHEL 9.2
/ RHDS 12.2.
If you really want to have cockpit-389-ds for the same version of
389-ds-base as in the latest Rocky Linux, then srpm rebuild is the way.


>
> Thanks.
> ___
> 389-users mailing list -- 389-users@lists.fedoraproject.org
> To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org
> Do not reply to spam, report it:
> https://pagure.io/fedora-infrastructure/new_issue
>


-- 
Viktor
___
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


[389-users] Re: 389-DS Cockpit

2023-02-10 Thread Mark Reynolds


On 2/10/23 8:47 AM, Rosario Esposito wrote:

Hello,

I read from https://directory.fedoraproject.org/docs/389ds/download.html
"cockpit-389-ds is not distributed in AppStream."

I just downloaded the current 389-ds-base source rpm from Appstream:
389-ds-base-2.1.3-4.el9_1.src.rpm

Inside the src rpm there's a 389-ds-base.spec containing the following line:
%global use_cockpit 0

If I just modify it to:
%global use_cockpit 1

...and rebuild the source rpm, then I get the rpm: 
cockpit-389-ds-2.1.3-4.el9.noarch.rpm

Is that safe to use ?

Absolutely

What is the reason for cockpit-389-ds not being directly distributed in 
Appstream repo ?
Because downstream it is for the layered product (RHDS).  It's not a 
part of RHEL (IDM) so it's filtered out.

I'm asking this because I'd like to install the same version of 389-ds 
currently used by RHDS12 (2.1.3) on a Rocky Linux 9 machine.
If I switch to "copr" repository then I get 389-ds version 2.2.x which seems to 
be too new.


We also have 2.3.x :-)   389-ds-base-2.2 is what we are using for RHDS 
12.2 on RHEL 9.2.  I would not say 2.2 is "too" new or risky.  Now "2.3" 
is, but not 2.2.


HTH,

Mark



Thanks.
___
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


--
Directory Server Development Team
___
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


[389-users] Re: 389-DS Cockpit

2023-02-10 Thread Rosario Esposito
Hello,

I read from https://directory.fedoraproject.org/docs/389ds/download.html
"cockpit-389-ds is not distributed in AppStream."

I just downloaded the current 389-ds-base source rpm from Appstream:
389-ds-base-2.1.3-4.el9_1.src.rpm

Inside the src rpm there's a 389-ds-base.spec containing the following line:
%global use_cockpit 0 

If I just modify it to:
%global use_cockpit 1

...and rebuild the source rpm, then I get the rpm: 
cockpit-389-ds-2.1.3-4.el9.noarch.rpm 

Is that safe to use ?
What is the reason for cockpit-389-ds not being directly distributed in 
Appstream repo ?

I'm asking this because I'd like to install the same version of 389-ds 
currently used by RHDS12 (2.1.3) on a Rocky Linux 9 machine.
If I switch to "copr" repository then I get 389-ds version 2.2.x which seems to 
be too new.

Thanks.
___
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue


[389-users] Re: 389-DS Cockpit

2023-02-04 Thread Mark Reynolds
Yes, you install cockpit bridge on your other systems then you can link 
them in the Cockpit console.  After installing cockpit bridge on all the 
hosts, then goto the "man" Cockpit console, top left, open the menu and 
you can "add hosts".



HTH,

Mark


On 2/3/23 10:29 AM, Paul Whitney wrote:
Is it possible to manage more than one 389-ds HOST through the Cockpit 
if I import the host descriptions into the slapd-config instance?


In older version with the Java Console, there was a way to merger all 
of the LDAPS instances into a single view, and could manage them from 
a single console.


Kudos by the way on making the new Cockpit FIPS friendly!

If I cannot manage the LDAP hosts through a single cockpit, do I 
really need to create a slapd-config instance anymore?


Paul M. Whitney, CISSP
Chesapeake IT Consulting, Inc.
890 Hudson Road
Cambridge, MD 21613

Cell:   410.493.9448
Email: paul.whit...@chesapeake-it.com 


*CONFIDENTIALITY NOTICE*
The information contained in this facsimile or electronic message is 
confidential information intended for the use of the individual or 
entity named above. If the reader of this message is not the intended 
recipient, or an employee or agent responsible for delivering this 
facsimile message to the intended recipient, you are hereby notified 
that any dissemination, or copying of this communication is strictly 
prohibited. If this message contains non-public personal information 
about any consumer or customer of the sender or intended recipient, 
you are further prohibited under penalty of law from using or 
disclosing the information to any third party by provisions of the 
federal Gramm-Leach-Bliley Act. If you have received this facsimile or 
electronic message in error, please immediately notify us by telephone 
and return or destroy the original message to assure that it is not 
read, copied, or distributed by others.



___
389-users mailing list --389-users@lists.fedoraproject.org
To unsubscribe send an email to389-users-le...@lists.fedoraproject.org
Fedora Code of 
Conduct:https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:https://fedoraproject.org/wiki/Mailing_list_guidelines
List 
Archives:https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org
Do not reply to spam, report 
it:https://pagure.io/fedora-infrastructure/new_issue


--
Directory Server Development Team
___
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue