Weekly Edition
Return to the Distributions page
| ||||||||||||||||||||||
New features for Fedora 18
=================================== #fedora-meeting: FESCO (2012-07-30) =================================== Meeting started by mmaslano at 17:00:27 UTC. The full logs are available at http://meetbot.fedoraproject.org/fedora-meeting/2012-07-3... . Meeting summary --------------- * init process (mmaslano, 17:01:09) * #911 F18 Feature: Samba 4.0 - https://fedoraproject.org/wiki/Features/Samba4 (mmaslano, 17:03:23) * AGREED: Samba4.0 is an approved feature (+8,-0) (mmaslano, 17:08:20) * #917 F18 Feature: MATE Desktop - https://fedoraproject.org/wiki/Features/MATE-Desktop (mmaslano, 17:08:31) * AGREED: MATE is accepted as a feature (+9,-0) (mmaslano, 17:20:14) * #913 F18 Feature: oVirt engine 3.1 - https://fedoraproject.org/wiki/Features/oVirtEngine_3.1 (mmaslano, 17:20:45) * AGREED: oVirt is approved as a feature (+7,-0) (mmaslano, 17:23:49) * #915 F18 Feature: Agent-Free Systems Management - https://fedoraproject.org/wiki/Features/AgentFreeManagement (mmaslano, 17:23:57) * AGREED: Agent-Free Systems Management's owner must answer few question first (+6,-0) (mmaslano, 17:30:21) * #916 F18 Feature: Sugar 0.98 - https://fedoraproject.org/wiki/Features/Sugar_0.98 (mmaslano, 17:30:29) * AGREED: Sugar 0.98 is approved as a feature (+6,-0) (mmaslano, 17:32:32) * #919 F18 Feature: LTTng 2.0 - https://fedoraproject.org/wiki/Features/LTTng (mmaslano, 17:32:43) * LTTng feature must update the feature page (notes about kernel module) (mmaslano, 17:36:56) * AGREED: LTTng 2.0 is approved as a feature (+8,-0) (mmaslano, 17:38:13) * #920 F18 Feature: ownCloud - https://fedoraproject.org/wiki/Features/OwnCloud (mmaslano, 17:38:19) * AGREED: ownCloud is approved as a feature (+8,-0) (mmaslano, 17:39:45) * #923 F18 Feature: Print Service - https://fedoraproject.org/wiki/Features/PrintService (mmaslano, 17:39:55) * AGREED: Print Service will be postponed to F-19. In F-18 will be tech preview. (mmaslano, 17:43:36) * #926 F18 Feature: SELinux Systemd Access Control - https://fedoraproject.org/wiki/Features/SELinuxSystemdAcc... (mmaslano, 17:43:51) * AGREED: SELinux Systemd Access Control is approved as a feature (+8,-0) (mmaslano, 17:46:48) * AGREED: SELinux Systemd Access Control is approved as a feature (+9,-0) (mmaslano, 17:47:06) * #921 F18 Feature: IPA v3 trusts update - https://fedoraproject.org/wiki/Features/IPAv3Trusts (mmaslano, 17:47:31) * AGREED: Feature: IPA v3 trusts update (+5,-0) (mmaslano, 17:49:04) * #914 F18 Feature: Python 3.3 - https://fedoraproject.org/wiki/Features/Python_3.3 (mmaslano, 17:49:09) * AGREED: Feature: Python 3.3 (+5,-0) (mmaslano, 17:49:30) * #918 F18 Feature: FedFS - https://fedoraproject.org/wiki/Features/FedFS (mmaslano, 17:49:40) * AGREED: Feature: FedFS (+5,-0) (mmaslano, 17:49:57) * #921 F18 Feature: Server KMS Drivers - https://fedoraproject.org/wiki/Features/ServerKMSDrivers (mmaslano, 17:50:05) * AGREED: Feature: Server KMS Drivers (+5,-0) (mmaslano, 17:50:26) * #922 F18 Feature: LLVM support on 64-bit POWER systems - https://fedoraproject.org/wiki/Features/LLVMonPPC64 (mmaslano, 17:50:34) * AGREED: Feature: LLVM support on 64-bit POWER systems (+5,-0) (mmaslano, 17:50:50) * #924 F18 Feature: Systemtap 2.0 - https://fedoraproject.org/wiki/Features/Systemtap2 (mmaslano, 17:50:57) * AGREED: Feature: Systemtap 2.0 (+5,-0) (mmaslano, 17:51:12) * #925 F18 Feature: NFSometer - https://fedoraproject.org/wiki/Features/NFSometer (mmaslano, 17:51:20) * AGREED: Feature: NFSometer (+5,-0) (mmaslano, 17:51:37) * #927 F18 Feature: VNCServer support for LLVMpipe/Mesa on 64-bit IBM Power Systems -https://fedoraproject.org/wiki/Features/VNCServerWithLLVM... (mmaslano, 17:51:49) * AGREED: Feature: VNCServer support for LLVMpipe/Mesa on 64-bit IBM Power Systems (+5,-0) (mmaslano, 17:52:04) * #928 F18 Feature: QXL/Spice KMS Driver - https://fedoraproject.org/wiki/Features/QXLKMSSupport (mmaslano, 17:52:11) * AGREED: Feature: QXL/Spice KMS Driver (+5,-0) (mmaslano, 17:52:25) * Next week's chair (mmaslano, 17:54:27) * ACTION: mitr will be chairman next week (mmaslano, 17:55:32) * Open Floor (mmaslano, 17:55:39) * LINK: https://fedoraproject.org/wiki/Features/AvahiDefaultOnDes... (mmaslano, 17:58:41) * 897 (mmaslano, 17:58:55) * ACTION: mitr will ask twoerner about co-operation of firewalld and avahi (mmaslano, 18:02:12) * Open Floor (mmaslano, 18:03:10) Meeting ended at 18:06:42 UTC. Action Items ------------ * mitr will be chairman next week * mitr will ask twoerner about co-operation of firewalld and avahi Action Items, by person ----------------------- * ab * mitr will ask twoerner about co-operation of firewalld and avahi * mitr * mitr will be chairman next week * mitr will ask twoerner about co-operation of firewalld and avahi * **UNASSIGNED** * (none) People Present (lines said) --------------------------- * mmaslano (112) * nirik (27) * dan408 (26) * mitr (25) * jwb (25) * mjg59 (22) * pjones (22) * notting (17) * zodbot (15) * limburgher (14) * Discordian (8) * twaugh (6) * ab (2) * scientist (1) * pknirsch (1) * t8m (0) Generated by `MeetBot`_ 0.1.4 .. _`MeetBot`: http://wiki.debian.org/MeetBot -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel (Log in to post comments)
Unity Posted Jul 31, 2012 23:04 UTC (Tue) by littlesandra88 (guest, #64017) [Link]
I really hope Unity makes it as well for F18.
Unity Posted Aug 1, 2012 0:52 UTC (Wed) by HelloWorld (guest, #56129) [Link]
How would that happen? As far as I know, Unity still requires patched versions of various libraries such as gtk+, and I don't think Fedora is going to ship those.
Unity Posted Aug 1, 2012 20:24 UTC (Wed) by jspaleta (subscriber, #50639) [Link]
It wont make F18. But my current understanding is that a version of Unity can make it into Fedora without patches, the tradeoff being that some functionality will not work.
There has been work upstream in recent versions of Unity to close the gap with stock gnome. It should be usable without patches. I'll find out how usable as I work my way up the the dependency chain and get the necessary dependencies in Fedora.
But unless someone else steps up to drives the effort to get Unity and its specialized lib stack through fedora's review process its going to be awhile before I can find the time to put a coherent set of packages together that have the ability to pass review. I'm working on it, but my travel schedule makes it slow going. I'm still willing to review packages if other people beat me to putting packages into the submission que. At the rate I'm going F18 update is possible, but not at release time.
-jef
Unity Posted Aug 1, 2012 17:01 UTC (Wed) by dashesy (subscriber, #74652) [Link]
I do not see any mention of Cinnamon, I really hope it makes it to F18 :)
Unity Posted Aug 1, 2012 20:35 UTC (Wed) by misc (subscriber, #73730) [Link]
It is already in rawhide and was pushed to F17.
New features for Fedora 18 Posted Jul 31, 2012 23:32 UTC (Tue) by gdt (subscriber, #6284) [Link]
Shipping Samba4 without the Domain Controller function somewhat misses the point.
New features for Fedora 18 Posted Aug 1, 2012 1:51 UTC (Wed) by augustz (subscriber, #37348) [Link]
I know, I was like huh?
Hopefully this is just the beginning and they can figure out how to add AD DC support back into Samba4 after removing it.
New features for Fedora 18 Posted Aug 1, 2012 2:16 UTC (Wed) by rahulsundaram (subscriber, #21946) [Link]
It clearly says that is the plan on the feature page.
New features for Fedora 18 Posted Aug 1, 2012 7:28 UTC (Wed) by ab (subscriber, #788) [Link]
Please read the explanation in the feature page. Together with IPA v3 trusts most of use cases will be addressed. There is still work to be done to make MIT Kerberos usable as part of Samba 4 AD DC server setup, hopefully in next Fedora releases we'll be able to adopt it.
New features for Fedora 18 Posted Aug 1, 2012 8:37 UTC (Wed) by drag (subscriber, #31333) [Link]
Being able to integrate IPA into Samba4 is certainly a very very awesome thing to do. Otherwise Fedora/Redhat will end up supporting two incompatible Kerberos/LDAP-based domain controller implementations.
Hopefully they can pull it off in such a way that no level of Active Directory compatibility will be lost. The ability to have a compatible AD implementation is a such as massive and important killer feature that it would be a fatal mistake to not take compatibility deadly seriously. It would be better to have two incompatible domain controller systems then it would be to have limited Windows/AD compatibility.
All in all it's very exiting. Kudos to the development groups behind this.
So far my experiences using and testing FreeIPA have been insanely positive. This with SSSD is a monumental step forward in terms of usability and effectiveness of Linux systems in a domain environment. Absolutely fantastic stuff. For people who are interested in network security or enterprise level domain controllers and have not taken time to evaluate FreeIPA on a Redhat/CentOS/Fedora system you are doing yourself a huge disservice!
This sort of stuff makes kerberos/ldap integration and support on the OS level deadly simple. Even doing something like taking a Debian host using a older revision of SSSD and having it join a FreeIPA 2 domain is almost laughably simple compared to the hell that was previously required with a more custom solution made up of configuring separate components like OpenLDAP + MIT kerberos.
And thinking that it can be possible to have compatibility with AD and thus be able to integrate Windows hosts naturally with Linux hosts can open up all sorts of new possibilities and markets. Lots of $$$ to be made by Redhat and anybody else that can manage to sell this support to corporations. (hint: Looking at you; Canonical)
Oh and integrating Kerberos support into web apps via the NSS apache module is very simple also. With a couple simple configuration modifications even Chrome/Chromium can support single sign on.
Very very cool stuff altogether.
New features for Fedora 18 Posted Aug 1, 2012 9:22 UTC (Wed) by ab (subscriber, #788) [Link]
IPA v3 will bring trusts with existing AD setup, that's first step. It will not be full blown AD DC but AD will treat IPA v3 users and machines as if they are from a native AD forest which will be enough for majority of use cases.
Getting Samba 4 AD DC out as proper AD DC is also important task. However, it should be viewed also in a perspective of being an application in a larger setup -- if you would run it in an isolated VM, you can already build your own samba4 package in Fedora for that purpose by changing few arguments to build process. It will use embedded Heimdal kerberos implementation. Unfortunately, you then cannot share the same VM with anything else relying on Kerberos in Fedora as those will be build against MIT Kerberos and use by default features unavailable in Heimdal like DIR: credential cache collections.
So in isolated environment it is already possible to build and use Samba 4 AD DC in Fedora 18 (Rawhide right now, of course). Integrating into distribution is a bit large scope and requires more effort.
New features for Fedora 18 Posted Aug 3, 2012 21:44 UTC (Fri) by drag (subscriber, #31333) [Link]
If I could set up Samba4 standalone with full AD support and then be able to set up some sort of trust relationship with a IPA v3 DC so that users and groups could be managed by either... then that would make me happy and fill the Windows requirements.
Also if SSSD could work with a standalone Samba4 domain then that would be great also.
I don't think that it's entirely necessary for IPA to be a AD compatible DC, although that would be ideal (less admin overhead, less stuff to break, etc). Having a requirement that a administrator must setup a standalone Windows or Samba4 DC then that would be fine, just as long as you can treat both in a identical manner.
New features for Fedora 18 Posted Aug 5, 2012 13:28 UTC (Sun) by ab (subscriber, #788) [Link]
Trust between Samba 4 AD DC and IPAv3 is not yet possible because Samba 4 AD DC does not support cross-forest trusts yet. Work is ongoing on that one. Once we'll (Samba Team) get cross-forest trusts working in Samba 4 AD DC, this setup will work automatically with IPAv3 cross-forest AD trusts.
SSSD can work with standalone Samba 4 AD DC domain already, either using LDAP or AD provider, it is cross-forest trusts that are not supported in Samba 4 AD DC yet.
New features for Fedora 18 Posted Aug 1, 2012 3:00 UTC (Wed) by dwa (subscriber, #24604) [Link]
That isn't the full list of F18 features - just the ones discussed at that particular meeting.
This gives a much better view of all the accepted features for F18: http://fedoraproject.org/wiki/Category:FeatureAcceptedF18
FedFS Posted Aug 1, 2012 5:45 UTC (Wed) by colo (subscriber, #45564) [Link]
Can anyone explain to me what's the benefit of FedFS over regular autofs? I mean, I can already store autofs maps in LDAP, and the mounting is transparent to userspace. What's the point of FedFS? It seems to be able to do just that, but only for NFS4.
FedFS Posted Aug 1, 2012 7:06 UTC (Wed) by drag (subscriber, #31333) [Link]
From the link:
> Fedfs is, in many ways, an addition of automount functionality along the line of something that I believe (as the autofs maintainer both upstream and here in Fedora) has been needed for a long time. That is a distributed autofs mount map resource manager and while fedfs isn't quite what I envisioned for autofs the functionality it provides is fairly close. Just how far integration with autofs will go isn't clear yet.
|
||||||||||||||||||||||