On Tue, Dec 15, 2015 at 10:39 PM, Stephen Farrell <[email protected] > wrote:
> > Hi Phil, > > On 16/12/15 03:25, Phillip Hallam-Baker wrote: > > I think you probably overstate your difficulty just slightly. I think > > that if you were to make a case to the campus IT folk, you could get > > them to touch the DNS one time only to insert some records that > > will allow you to automate issue of certs. > > Hmm. I suspect our specific, and very local to TCD, 30-years > war between campus-wide IT and the dept of comp sci hasn't > been your prime time viewing;-) IOW, you're kinda right and > kinda not. But... > > ... that's not entirely facetious, iirc local bitter politics > has been a part of all corporate-wide re-naming (a.k.a PKI) > projects that I've seen, and always will be. > > One can draw different equally valid conclusions from that. > Mine, for now, is to try solve the low-hanging-fruit issues > and then, after that is working, go from there to try for > peace-making between those discommoded by naming politics. I have not had the pleasure of that little fracas. But I have seen more than a few just like it. One of the little known facts about the origin of the Web was that the big attraction to users on CERN campus was that it was finally possible to get access to all the data that CN division had hoarded on CERNVM. This is why minimizing the number of occasions that the DNS config needs to be touched is so important.
_______________________________________________ Acme mailing list [email protected] https://www.ietf.org/mailman/listinfo/acme
