freeipa

#9695 Switch IPA to use the v2 REST API against 11.6.0
Opened by rcritten. Modified

Open
Close Issue

Issue

IPA currently uses the pre-versioned 1.0 API using a base URL of /ca/rest/

PKI is introducing a new REST API v2 with 11.6.0.

IPA needs to start using that. It avoids calls that utilize VLV which is known to have performance issues with 389-ds when it uses an lmdb backend.

This new code needs fallback support from v2 to v1 in case of a 404 in case the local IPA server is talking to an older, remote CA.

The v2 API documentation has started at https://github.com/dogtagpki/pki/wiki/REST-API-v2

Metadata Update from @rcritten:
- Custom field rhbz adjusted to https://issues.redhat.com/browse/FREEIPA-11614

https://github.com/freeipa/freeipa/pull/7587
Metadata
None
None
None
Low
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.