On 10/10/2014 06:30 PM, James wrote:
On 10 October 2014 12:21, Simo Sorce <[email protected]> wrote:
First thing, I do not think we want a new command here.
If we need commands outside of the ipa framework they should be
integrated in the ipa-replica-manage tool.
But really one of the reasons to move data in the shared tree was that
we could grow native framework command to handle the topology so we can
manage the topology directly from the UI.
So I am not happy with ipa-tology-manage
I agree here... I think the current interface of ipa-replica-manage is
fine, however the need to copy the credentials around and the need for
a password are the problem. In fact, I particularly like the current
interface, and puppet-ipa has already wrapped this successfully. In
other words, the design checks out. Good job IPA team.
All management should happen in the shared tree, moving to be able to
avoid directly touching cn=config and avoid the need for DM password is
one of the main reasons to do this work ...
I'll comment later on Simmo's other comments, but I need access to
cn=config for two reasons,
- I need to know if the plugin is deployed and enabled
- the plugin configuration contains the location in the the shared tree
where the toplogy information is
stored. I do not like to have hardcoded paths.
I'd just like to +1 / re-iterate this point...
In addition, thank you for hacking on this and for posting this for
early review.
Cheers,
James
_______________________________________________
Freeipa-devel mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/freeipa-devel
