URL: https://github.com/freeipa/freeipa/pull/764
Title: #764: Basic uninstaller for the CA
pvoborni commented:
"""
We need to develop something like this, but right now it is not the best time
for it. First we need to stabilize 4.5.1 (seems that's almost done). Then focus
on testing - current
URL: https://github.com/freeipa/freeipa/pull/764
Title: #764: Basic uninstaller for the CA
rcritten commented:
"""
As far as I can tell it is always recoverable using this. I wasn't able to
force a failure of replication, that could be a potential show-stopper. The PR
doesn't touch the
URL: https://github.com/freeipa/freeipa/pull/764
Title: #764: Basic uninstaller for the CA
stlaz commented:
"""
@pvoborni @rcritten @martbab This discussion at this PR makes no sense. Clearly
we can see that the impact is much higher and should be discussed on designated
channels, meaning
URL: https://github.com/freeipa/freeipa/pull/764
Title: #764: Basic uninstaller for the CA
martbab commented:
"""
@pvoborni We can try to move the uninstaller logic to the beginning of the
install, or make the affected steps idempotent. But still I would be hesitant
to merge this PR without
URL: https://github.com/freeipa/freeipa/pull/764
Title: #764: Basic uninstaller for the CA
pvoborni commented:
"""
Let's first clarify the problem to solve. If I understand @rcritten right, the
problem is that if ipa-ca-install fail then one must reinstall the whole
replica because the
URL: https://github.com/freeipa/freeipa/pull/764
Title: #764: Basic uninstaller for the CA
martbab commented:
"""
@rcritten If it is expected to not clean up properly after a fai;ed
installation then I would rather not advertise it as an uninstaller, otherwise
users will start to get ideas
URL: https://github.com/freeipa/freeipa/pull/764
Title: #764: Basic uninstaller for the CA
rcritten commented:
"""
What do you mean half-effective? Did you try it?
There already IS a unified framework for component uninstallation: each service
provides it. There are edge cases when trying to
URL: https://github.com/freeipa/freeipa/pull/764
Title: #764: Basic uninstaller for the CA
martbab commented:
"""
I would avoid having half-effective CA uninstaller given that other components
like Samba, DNS(Sec), and now also KRA (given the amount of bugs the
uninstaller caused) do not
