#377 Test and support IPv6 networks with sssd.
Closed: Fixed None Opened 14 years ago by sgallagh.

We need to test the SSSD in environments using only IPv6 for communication.


Fields changed

milestone: NEEDS_TRIAGE => SSSD 1.1

Fields changed

status: new => assigned

Fields changed

owner: sgallagh => jhrozek
status: assigned => new

So far I have tested LDAP identity and authentication over IPv6. Seems to be working fine. One issue I found was the unability of c-ares to use IPv6 nameservers. A patch has been submitted upstream - http://c-ares.haxx.se/mail/c-ares-archive-2010-02/0002.shtml - and a bug was filed to track this in our distribution packages.

On to Kerberos..

As my research and testing is concluded, I'd like to close this ticket and follow up on individual tickets for each identified issue.

I have tested:
- name resolution - did not work with c-ares 1.7 using IPv6 nameservers. I have developed a patch and sent it upstream for review
- LDAP
- auth - works
- id - works
- chpass - works

- Kerberos
    - auth - works
    - chpass - does not work as upstream krb libs can only work with AF_INET family. Upstream bug is [6661](http://krbdev.mit.edu/rt/Ticket/Display.html?user=guest&pass=guest&id=6661).

doc: 0 => 1
fixedin: => 1.1.0
resolution: => fixed
status: new => closed

Documentation update

SSSD is now fully IPv6-compatible provided that it is built against c-ares 1.7.1 or later and krb5-libs 1.8.1 or later.

Concerning our distributions, the c-ares patch was backported to RHEL6 (1.7.0) and krb5-libs are patched on F-12 and F-13.

Fields changed

rhbz: => 0

Metadata Update from @sgallagh:
- Issue assigned to jhrozek
- Issue set to the milestone: SSSD 1.1

7 years ago

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/1419

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Login to comment on this ticket.

Metadata