On Thu, 2015-05-28 at 16:04 +0200, Martin Kosek wrote:
> On 05/28/2015 04:04 PM, Ludwig Krispenz wrote:
> > On 05/28/2015 04:00 PM, Martin Kosek wrote:
> >> On 05/28/2015 03:57 PM, Ludwig Krispenz wrote:
> >>> On 05/28/2015 03:47 PM, Martin Kosek wrote:
> >>>> On 05/27/2015 04:59 PM, Martin Kosek wrote:
> >>>> ...
> >>>>> Domain Levels
> >>>>> - Done, committed
> >>>>> - Defaults to Level 1, i.e. Topology plugin powered infra enabled
> >>>> With respect to related Simo's response in
> >>>> http://www.redhat.com/archives/freeipa-devel/2015-May/msg00553.html
> >>>> Would we want to enable Topology (i.e. Domain Level 1) even if Replica
> >>>> promotion is not done?
> >>> who is we ? I thought there is an api to set the domain-level and the
> >>> admin
> >>> decides if, or do you mean to have it by default during installation ?
> >> The question here is if Topology plugin (i.e. Domain Level 1) shall be
> >> enabled
> >> during new FreeIPA 4.2 installation or if would be still disabled and only
> >> enabled by domain-level-set request.
> > I'm with Simo, this shoul be a deliberate action by an admin, based upon the
> > info that all servers support this domain level
> Guys, I am really talking about *new* FreeIPA server installation, not
> upgrades. If you are installing FreeIPA 4.2 server, you already know that
> servers support Topology as we do not allow installing replica with older
> version than a server.
> What do I miss here?
I think the only thing that may be missing is that the current installer
still does the dance of using SSL and then later transitioning to
GSSAPI, I am not sure the topology plugin copes with that.
Ludwig, can you comment ?
Manage your subscription for the Freeipa-devel mailing list:
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code