On Mon, Aug 27, 2012 at 02:57:44PM +0200, Martin Kosek wrote: > I think that the right behavior of SSSD conf uninstall should be the > following: > > * sssd.conf existed before IPA install + non-IPA domains in sssd.conf found: > - move backed conf up sssd.conf.bkp (and inform the user) > - use SSSDConfig delete_domain function to remove ipa domain from sssd.conf > - restart sssd afterwards
I'm confused here, which of the files is the original pre-ipa-client-install file? How does the non-ipa domain end up in the sssd.conf file? Does it have to be configured manually or does ipa-client-install merge the list of domains on installation? Maybe it would be enough to just remove the IPA domain and inform the user about the original file. I suspect that in most environments the correct file would be restored with something like puppet anyway. > * sssd.conf did not exist before IPA install + non-IPA domains in sssd.conf > found: > - use SSSDConfig delete_domain function to remove ipa domain from sssd.conf > - restart sssd afterwards Sounds good to me. > * sssd.conf did not exist before IPA install + no other domains in sssd.conf: > - remove sssd.conf or rename it to sssd.conf.deleted > Sounds good to me. _______________________________________________ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel