freeipa

#9363 Set compat tree and NIS configuration disabled by default when deploying FreeIPA
Opened by abbra. Modified

Open
Close Issue

Fedora has already removed NIS support, only leaving libraries necessary to compile slapi-nis. RHEL 9 also removed NIS client side support. It is time to start phasing NIS server support out in FreeIPA as well and in addition to that start switching compatibility tree off by default.

In case of a NIS server we also should promote other methods to authenticate to the system and don't provide password hashes as part of NIS passwd maps.

This ticket will track a change of the defaults to:

  • not enable compat tree by default
  • not enable NIS server by default
  • change NIS server configuration defaults to not provide password hashes.

Update: NIS server support will be removed.

Metadata Update from @abbra:
- Custom field rhbz adjusted to https://issues.redhat.com/browse/RHEL-34186

Upstream PR: https://github.com/freeipa/freeipa/pull/7336

master:

  • e98a80827bcc42dc16b516355077fed844220107 Remove NIS server support

ipa-4-12:

  • add20a7d03e66ad3aa34433c2449f6e3621f1d97 Remove ipa-nis-manage on fedora 42+
Metadata
None
None
None
None
Low
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.