freeipa team mailing list archive

[Aaron Thomas <1802177@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

When installing ipa-client on ubuntu, it pulls in python2 packages on
LTS servers. IPA is an authentication service, and while ubuntu 18.04+
uses python3 by default for system services and software installs (no
python2 installed by default), IPA is still being built using python2.
This isn't necessary (you can compile all the packages using just
python3 with not much effort), and creates the problem that in a year
while the LTS server is still supported, the underlying python
interpreter will not be supported for security updates for an
authentication service.

https://pythonclock.org/

Building these packages to use the python3 dependencies instead of the
python2 versions would be better for everyone, and almost no code change
is needed to do so.

This is not yet a security vulnerability; but it might be one waiting to
happen.

** Affects: freeipa (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of FreeIPA,
which is subscribed to freeipa in Ubuntu.
https://bugs.launchpad.net/bugs/1802177

Title:
  Python2 is being deprecated; freeipa should compile under python3
  instead

Status in freeipa package in Ubuntu:
  New

Bug description:
  When installing ipa-client on ubuntu, it pulls in python2 packages on
  LTS servers. IPA is an authentication service, and while ubuntu 18.04+
  uses python3 by default for system services and software installs (no
  python2 installed by default), IPA is still being built using python2.
  This isn't necessary (you can compile all the packages using just
  python3 with not much effort), and creates the problem that in a year
  while the LTS server is still supported, the underlying python
  interpreter will not be supported for security updates for an
  authentication service.

  https://pythonclock.org/

  Building these packages to use the python3 dependencies instead of the
  python2 versions would be better for everyone, and almost no code
  change is needed to do so.

  This is not yet a security vulnerability; but it might be one waiting
  to happen.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/freeipa/+bug/1802177/+subscriptions