Re: [Freeipa-devel] FreeIPA server package group
On 09/06/2013 03:05 PM, Rob Crittenden wrote: > Martin Kosek wrote: >> On 09/05/2013 07:50 PM, Rob Crittenden wrote: >>> Martin Kosek wrote: On 08/29/2013 12:22 PM, Tomas Babej wrote: > On 08/29/2013 11:55 AM, Petr Viktorin wrote: >> On 08/28/2013 12:20 PM, Tomas Babej wrote: >>> On 08/28/2013 12:03 PM, Petr Viktorin wrote: On 08/28/2013 11:46 AM, Tomas Babej wrote: > On 08/26/2013 10:14 AM, Tomas Babej wrote: >> On Mon 26 Aug 2013 10:12:09 AM CEST, Petr Vobornik wrote: >>> On 08/26/2013 09:54 AM, Tomas Babej wrote: Hi, I cooked up a patch for comps that adds a FreeIPA package group. Please chime in if you're OK with package selection / description. For illustration, see the attached image. FreeIPA will be added as an add-on in an installer under the Infrastructure server environment, that means, in the included images it will be at the same level as DNS or FTP server. It will also appear in the Software Selection tool (PackageKit). It should also be available under as yum groupinstall "FreeIPA server", and in PackageKit, as I understand comps is also source for that too. https://fedoraproject.org/wiki/How_to_use_and_edit_comps.xml_for_package_groups https://fedorahosted.org/freeipa/ticket/3630 >>> >>> IMO the Audit part in the description is false advertisement. Same >>> issue is in package descriptions. >> >> I know, it's taken directly from there. >> >> I'd rather have it consistent, if we're going to change it here, we >> should do >> there too, so that we do not end up with multiple (seemingly >> incomplete) >> descriptions at various places. > > Anybody else does have any other concerns? We need to move with this > effort since string freeze for F20 is coming. > > I'm particulary dubious about including the freeipa-tests package. I don't think that should be included, developer tests are unnecessary for a server. >>> It was marked as optional in the initial proposal, but I agree it's >>> unnecessary for >>> it to be there at all. > We discussed the A (as Audit) part in the description with Rob. The > fact is > that this is taken from the freeipa-server package description and > nobody > complained in 7 years. >>> >>> Updated tests attached. >>> >> >> Oh, one more thing I remembered just now -- is it too late? >> We should include bind-dyndb-ldap (which pulls in bind). Preferably as >> default. >> > > I included it there. > > If anyone else wants to chime in, please do now, I'll create a ticket with > rel-eng at the end of the day. > Thanks for this effort. What is the status of the bug - did you create the request already? We will need to do one more change and remove freeipa-server-strict package as up on the decision on today's developer meeting we decided to drop this subpackage in Fedora 20 and later and depend on our new FreeIPA Continuous Integration system instead. >>> >>> I missed that meeting so maybe I'm re-hashing things, but I don't see how CI >>> solves the problem that the strict subpackage does. Sure, it won't be as >>> much a >>> surprise to us when other packages are updated, but this doesn't prevent a >>> user >>> from also updating to the package. The strict package prevents upgrade until >>> we've confirmed that things are actually working. CI does not. >> >> CI should prevent problems at the begging, before they happen - right when >> the >> new Dogtag/Kerberos/389-ds-base is in updates-testing. That gives a change to >> give negative Karma and have that package fixed before it hits stable >> updates. >> >> IMO freeipa-server-strict subpackage is too heavy weight and does not provide >> the benefit we would want. So far, IMHO, it was rather a burden for >> maintainers >> and broke quite frequently. > > I'm not a huge fan of the strict package, I resisted it for a long time. But > it > does serve its intended purpose: stability for users. I agree it is a pain, > particularly in rawhide. Yeah, this is exactly a point where I am not sure if it serves it's purpose. We do not have some policy or official testing of new DS/CS/KRB releases. So I just do not know when exactly should be update the strict package. After the new DS version is used for a month in a community? Or after a smoke/unit test performed ad-h
Re: [Freeipa-devel] FreeIPA server package group
Martin Kosek wrote: On 09/05/2013 07:50 PM, Rob Crittenden wrote: Martin Kosek wrote: On 08/29/2013 12:22 PM, Tomas Babej wrote: On 08/29/2013 11:55 AM, Petr Viktorin wrote: On 08/28/2013 12:20 PM, Tomas Babej wrote: On 08/28/2013 12:03 PM, Petr Viktorin wrote: On 08/28/2013 11:46 AM, Tomas Babej wrote: On 08/26/2013 10:14 AM, Tomas Babej wrote: On Mon 26 Aug 2013 10:12:09 AM CEST, Petr Vobornik wrote: On 08/26/2013 09:54 AM, Tomas Babej wrote: Hi, I cooked up a patch for comps that adds a FreeIPA package group. Please chime in if you're OK with package selection / description. For illustration, see the attached image. FreeIPA will be added as an add-on in an installer under the Infrastructure server environment, that means, in the included images it will be at the same level as DNS or FTP server. It will also appear in the Software Selection tool (PackageKit). It should also be available under as yum groupinstall "FreeIPA server", and in PackageKit, as I understand comps is also source for that too. https://fedoraproject.org/wiki/How_to_use_and_edit_comps.xml_for_package_groups https://fedorahosted.org/freeipa/ticket/3630 IMO the Audit part in the description is false advertisement. Same issue is in package descriptions. I know, it's taken directly from there. I'd rather have it consistent, if we're going to change it here, we should do there too, so that we do not end up with multiple (seemingly incomplete) descriptions at various places. Anybody else does have any other concerns? We need to move with this effort since string freeze for F20 is coming. I'm particulary dubious about including the freeipa-tests package. I don't think that should be included, developer tests are unnecessary for a server. It was marked as optional in the initial proposal, but I agree it's unnecessary for it to be there at all. We discussed the A (as Audit) part in the description with Rob. The fact is that this is taken from the freeipa-server package description and nobody complained in 7 years. Updated tests attached. Oh, one more thing I remembered just now -- is it too late? We should include bind-dyndb-ldap (which pulls in bind). Preferably as default. I included it there. If anyone else wants to chime in, please do now, I'll create a ticket with rel-eng at the end of the day. Thanks for this effort. What is the status of the bug - did you create the request already? We will need to do one more change and remove freeipa-server-strict package as up on the decision on today's developer meeting we decided to drop this subpackage in Fedora 20 and later and depend on our new FreeIPA Continuous Integration system instead. I missed that meeting so maybe I'm re-hashing things, but I don't see how CI solves the problem that the strict subpackage does. Sure, it won't be as much a surprise to us when other packages are updated, but this doesn't prevent a user from also updating to the package. The strict package prevents upgrade until we've confirmed that things are actually working. CI does not. CI should prevent problems at the begging, before they happen - right when the new Dogtag/Kerberos/389-ds-base is in updates-testing. That gives a change to give negative Karma and have that package fixed before it hits stable updates. IMO freeipa-server-strict subpackage is too heavy weight and does not provide the benefit we would want. So far, IMHO, it was rather a burden for maintainers and broke quite frequently. I'm not a huge fan of the strict package, I resisted it for a long time. But it does serve its intended purpose: stability for users. I agree it is a pain, particularly in rawhide. I guess I'm just not convinced that CI is going to catch everything. rob ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel
Re: [Freeipa-devel] FreeIPA server package group
On 09/05/2013 07:50 PM, Rob Crittenden wrote: > Martin Kosek wrote: >> On 08/29/2013 12:22 PM, Tomas Babej wrote: >>> On 08/29/2013 11:55 AM, Petr Viktorin wrote: On 08/28/2013 12:20 PM, Tomas Babej wrote: > On 08/28/2013 12:03 PM, Petr Viktorin wrote: >> On 08/28/2013 11:46 AM, Tomas Babej wrote: >>> On 08/26/2013 10:14 AM, Tomas Babej wrote: On Mon 26 Aug 2013 10:12:09 AM CEST, Petr Vobornik wrote: > On 08/26/2013 09:54 AM, Tomas Babej wrote: >> Hi, >> >> I cooked up a patch for comps that adds a FreeIPA package group. >> >> Please chime in if you're OK with package selection / description. >> >> For illustration, see the attached image. FreeIPA will be added as an >> add-on in an installer under the Infrastructure server environment, >> that means, in the included images it will be at the same level >> as DNS or FTP server. >> >> It will also appear in the Software Selection tool (PackageKit). >> >> It should also be available under as yum groupinstall "FreeIPA >> server", >> and in PackageKit, as I understand comps is also source for that too. >> >> https://fedoraproject.org/wiki/How_to_use_and_edit_comps.xml_for_package_groups >> >> >> >> >> >> >> >> https://fedorahosted.org/freeipa/ticket/3630 >> >> > > IMO the Audit part in the description is false advertisement. Same > issue is in package descriptions. I know, it's taken directly from there. I'd rather have it consistent, if we're going to change it here, we should do there too, so that we do not end up with multiple (seemingly incomplete) descriptions at various places. >>> >>> Anybody else does have any other concerns? We need to move with this >>> effort since string freeze for F20 is coming. >>> >>> I'm particulary dubious about including the freeipa-tests package. >> >> I don't think that should be included, developer tests are unnecessary >> for a server. >> > It was marked as optional in the initial proposal, but I agree it's > unnecessary for > it to be there at all. >>> We discussed the A (as Audit) part in the description with Rob. The >>> fact is >>> that this is taken from the freeipa-server package description and >>> nobody >>> complained in 7 years. >> > > Updated tests attached. > Oh, one more thing I remembered just now -- is it too late? We should include bind-dyndb-ldap (which pulls in bind). Preferably as default. >>> >>> I included it there. >>> >>> If anyone else wants to chime in, please do now, I'll create a ticket with >>> rel-eng at the end of the day. >>> >> >> Thanks for this effort. What is the status of the bug - did you create the >> request already? >> >> We will need to do one more change and remove freeipa-server-strict package >> as >> up on the decision on today's developer meeting we decided to drop this >> subpackage in Fedora 20 and later and depend on our new FreeIPA Continuous >> Integration system instead. > > I missed that meeting so maybe I'm re-hashing things, but I don't see how CI > solves the problem that the strict subpackage does. Sure, it won't be as much > a > surprise to us when other packages are updated, but this doesn't prevent a > user > from also updating to the package. The strict package prevents upgrade until > we've confirmed that things are actually working. CI does not. CI should prevent problems at the begging, before they happen - right when the new Dogtag/Kerberos/389-ds-base is in updates-testing. That gives a change to give negative Karma and have that package fixed before it hits stable updates. IMO freeipa-server-strict subpackage is too heavy weight and does not provide the benefit we would want. So far, IMHO, it was rather a burden for maintainers and broke quite frequently. Martin ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel
Re: [Freeipa-devel] FreeIPA server package group
Martin Kosek wrote: On 08/29/2013 12:22 PM, Tomas Babej wrote: On 08/29/2013 11:55 AM, Petr Viktorin wrote: On 08/28/2013 12:20 PM, Tomas Babej wrote: On 08/28/2013 12:03 PM, Petr Viktorin wrote: On 08/28/2013 11:46 AM, Tomas Babej wrote: On 08/26/2013 10:14 AM, Tomas Babej wrote: On Mon 26 Aug 2013 10:12:09 AM CEST, Petr Vobornik wrote: On 08/26/2013 09:54 AM, Tomas Babej wrote: Hi, I cooked up a patch for comps that adds a FreeIPA package group. Please chime in if you're OK with package selection / description. For illustration, see the attached image. FreeIPA will be added as an add-on in an installer under the Infrastructure server environment, that means, in the included images it will be at the same level as DNS or FTP server. It will also appear in the Software Selection tool (PackageKit). It should also be available under as yum groupinstall "FreeIPA server", and in PackageKit, as I understand comps is also source for that too. https://fedoraproject.org/wiki/How_to_use_and_edit_comps.xml_for_package_groups https://fedorahosted.org/freeipa/ticket/3630 IMO the Audit part in the description is false advertisement. Same issue is in package descriptions. I know, it's taken directly from there. I'd rather have it consistent, if we're going to change it here, we should do there too, so that we do not end up with multiple (seemingly incomplete) descriptions at various places. Anybody else does have any other concerns? We need to move with this effort since string freeze for F20 is coming. I'm particulary dubious about including the freeipa-tests package. I don't think that should be included, developer tests are unnecessary for a server. It was marked as optional in the initial proposal, but I agree it's unnecessary for it to be there at all. We discussed the A (as Audit) part in the description with Rob. The fact is that this is taken from the freeipa-server package description and nobody complained in 7 years. Updated tests attached. Oh, one more thing I remembered just now -- is it too late? We should include bind-dyndb-ldap (which pulls in bind). Preferably as default. I included it there. If anyone else wants to chime in, please do now, I'll create a ticket with rel-eng at the end of the day. Thanks for this effort. What is the status of the bug - did you create the request already? We will need to do one more change and remove freeipa-server-strict package as up on the decision on today's developer meeting we decided to drop this subpackage in Fedora 20 and later and depend on our new FreeIPA Continuous Integration system instead. I missed that meeting so maybe I'm re-hashing things, but I don't see how CI solves the problem that the strict subpackage does. Sure, it won't be as much a surprise to us when other packages are updated, but this doesn't prevent a user from also updating to the package. The strict package prevents upgrade until we've confirmed that things are actually working. CI does not. rob ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel
Re: [Freeipa-devel] FreeIPA server package group
On 09/02/2013 05:41 PM, Martin Kosek wrote: On 08/29/2013 12:22 PM, Tomas Babej wrote: On 08/29/2013 11:55 AM, Petr Viktorin wrote: On 08/28/2013 12:20 PM, Tomas Babej wrote: On 08/28/2013 12:03 PM, Petr Viktorin wrote: On 08/28/2013 11:46 AM, Tomas Babej wrote: On 08/26/2013 10:14 AM, Tomas Babej wrote: On Mon 26 Aug 2013 10:12:09 AM CEST, Petr Vobornik wrote: On 08/26/2013 09:54 AM, Tomas Babej wrote: Hi, I cooked up a patch for comps that adds a FreeIPA package group. Please chime in if you're OK with package selection / description. For illustration, see the attached image. FreeIPA will be added as an add-on in an installer under the Infrastructure server environment, that means, in the included images it will be at the same level as DNS or FTP server. It will also appear in the Software Selection tool (PackageKit). It should also be available under as yum groupinstall "FreeIPA server", and in PackageKit, as I understand comps is also source for that too. https://fedoraproject.org/wiki/How_to_use_and_edit_comps.xml_for_package_groups https://fedorahosted.org/freeipa/ticket/3630 IMO the Audit part in the description is false advertisement. Same issue is in package descriptions. I know, it's taken directly from there. I'd rather have it consistent, if we're going to change it here, we should do there too, so that we do not end up with multiple (seemingly incomplete) descriptions at various places. Anybody else does have any other concerns? We need to move with this effort since string freeze for F20 is coming. I'm particulary dubious about including the freeipa-tests package. I don't think that should be included, developer tests are unnecessary for a server. It was marked as optional in the initial proposal, but I agree it's unnecessary for it to be there at all. We discussed the A (as Audit) part in the description with Rob. The fact is that this is taken from the freeipa-server package description and nobody complained in 7 years. Updated tests attached. Oh, one more thing I remembered just now -- is it too late? We should include bind-dyndb-ldap (which pulls in bind). Preferably as default. I included it there. If anyone else wants to chime in, please do now, I'll create a ticket with rel-eng at the end of the day. Thanks for this effort. What is the status of the bug - did you create the request already? We will need to do one more change and remove freeipa-server-strict package as up on the decision on today's developer meeting we decided to drop this subpackage in Fedora 20 and later and depend on our new FreeIPA Continuous Integration system instead. Martin Bug was not needed at the end. Only substantial amount of persuasion that FreeIPA is a big enough project to deserve its own package group :) As for the removing the freeipa-server-strict package from comps, I will take care of that. -- Tomas Babej Associate Software Engeneer | Red Hat | Identity Management RHCE | Brno Site | IRC: tbabej | freeipa.org ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel
Re: [Freeipa-devel] FreeIPA server package group
On 08/29/2013 12:22 PM, Tomas Babej wrote: > On 08/29/2013 11:55 AM, Petr Viktorin wrote: >> On 08/28/2013 12:20 PM, Tomas Babej wrote: >>> On 08/28/2013 12:03 PM, Petr Viktorin wrote: On 08/28/2013 11:46 AM, Tomas Babej wrote: > On 08/26/2013 10:14 AM, Tomas Babej wrote: >> On Mon 26 Aug 2013 10:12:09 AM CEST, Petr Vobornik wrote: >>> On 08/26/2013 09:54 AM, Tomas Babej wrote: Hi, I cooked up a patch for comps that adds a FreeIPA package group. Please chime in if you're OK with package selection / description. For illustration, see the attached image. FreeIPA will be added as an add-on in an installer under the Infrastructure server environment, that means, in the included images it will be at the same level as DNS or FTP server. It will also appear in the Software Selection tool (PackageKit). It should also be available under as yum groupinstall "FreeIPA server", and in PackageKit, as I understand comps is also source for that too. https://fedoraproject.org/wiki/How_to_use_and_edit_comps.xml_for_package_groups https://fedorahosted.org/freeipa/ticket/3630 >>> >>> IMO the Audit part in the description is false advertisement. Same >>> issue is in package descriptions. >> >> I know, it's taken directly from there. >> >> I'd rather have it consistent, if we're going to change it here, we >> should do >> there too, so that we do not end up with multiple (seemingly >> incomplete) >> descriptions at various places. > > Anybody else does have any other concerns? We need to move with this > effort since string freeze for F20 is coming. > > I'm particulary dubious about including the freeipa-tests package. I don't think that should be included, developer tests are unnecessary for a server. >>> It was marked as optional in the initial proposal, but I agree it's >>> unnecessary for >>> it to be there at all. > We discussed the A (as Audit) part in the description with Rob. The > fact is > that this is taken from the freeipa-server package description and > nobody > complained in 7 years. >>> >>> Updated tests attached. >>> >> >> Oh, one more thing I remembered just now -- is it too late? >> We should include bind-dyndb-ldap (which pulls in bind). Preferably as >> default. >> > > I included it there. > > If anyone else wants to chime in, please do now, I'll create a ticket with > rel-eng at the end of the day. > Thanks for this effort. What is the status of the bug - did you create the request already? We will need to do one more change and remove freeipa-server-strict package as up on the decision on today's developer meeting we decided to drop this subpackage in Fedora 20 and later and depend on our new FreeIPA Continuous Integration system instead. Martin ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel
Re: [Freeipa-devel] FreeIPA server package group
On 08/29/2013 11:55 AM, Petr Viktorin wrote: On 08/28/2013 12:20 PM, Tomas Babej wrote: On 08/28/2013 12:03 PM, Petr Viktorin wrote: On 08/28/2013 11:46 AM, Tomas Babej wrote: On 08/26/2013 10:14 AM, Tomas Babej wrote: On Mon 26 Aug 2013 10:12:09 AM CEST, Petr Vobornik wrote: On 08/26/2013 09:54 AM, Tomas Babej wrote: Hi, I cooked up a patch for comps that adds a FreeIPA package group. Please chime in if you're OK with package selection / description. For illustration, see the attached image. FreeIPA will be added as an add-on in an installer under the Infrastructure server environment, that means, in the included images it will be at the same level as DNS or FTP server. It will also appear in the Software Selection tool (PackageKit). It should also be available under as yum groupinstall "FreeIPA server", and in PackageKit, as I understand comps is also source for that too. https://fedoraproject.org/wiki/How_to_use_and_edit_comps.xml_for_package_groups https://fedorahosted.org/freeipa/ticket/3630 IMO the Audit part in the description is false advertisement. Same issue is in package descriptions. I know, it's taken directly from there. I'd rather have it consistent, if we're going to change it here, we should do there too, so that we do not end up with multiple (seemingly incomplete) descriptions at various places. Anybody else does have any other concerns? We need to move with this effort since string freeze for F20 is coming. I'm particulary dubious about including the freeipa-tests package. I don't think that should be included, developer tests are unnecessary for a server. It was marked as optional in the initial proposal, but I agree it's unnecessary for it to be there at all. We discussed the A (as Audit) part in the description with Rob. The fact is that this is taken from the freeipa-server package description and nobody complained in 7 years. Updated tests attached. Oh, one more thing I remembered just now -- is it too late? We should include bind-dyndb-ldap (which pulls in bind). Preferably as default. I included it there. If anyone else wants to chime in, please do now, I'll create a ticket with rel-eng at the end of the day. -- Tomas Babej Associate Software Engeneer | Red Hat | Identity Management RHCE | Brno Site | IRC: tbabej | freeipa.org From 272fcf907816e42bb38803de4dc0ae14a8c98676 Mon Sep 17 00:00:00 2001 From: Tomas Babej Date: Mon, 26 Aug 2013 09:26:23 +0200 Subject: [PATCH] Add FreeIPA server package group --- comps-f20.xml.in | 15 +++ comps-f21.xml.in | 15 +++ 2 files changed, 30 insertions(+) diff --git a/comps-f20.xml.in b/comps-f20.xml.in index 5e3aa7985d1621b02da6aef322e47cdac3ba55bc..9494a5fdb941e6a94f18fde26b930081c8071639 100644 --- a/comps-f20.xml.in +++ b/comps-f20.xml.in @@ -2358,6 +2358,19 @@ +freeipa-server +<_name>FreeIPA Server +<_description>Integrated solution to provide centrally managed Identity, Policy and Audit. +false +true + + freeipa-server + freeipa-server-strict + freeipa-server-trust-ad + bind-dyndb-ldap + + + finnish-support <_name>Finnish Support <_description/> @@ -6373,6 +6386,7 @@ dogtag dns-server + freeipa-server ftp-server mail-server network-server @@ -6589,6 +6603,7 @@ directory-server dns-server dogtag + freeipa-server ftp-server ha haproxy diff --git a/comps-f21.xml.in b/comps-f21.xml.in index 8dea507bee171e0e4ada778a6104939ceafdddae..ce41839a3f52faaa530280b4ae701ac62069d4e9 100644 --- a/comps-f21.xml.in +++ b/comps-f21.xml.in @@ -2358,6 +2358,19 @@ +freeipa-server +<_name>FreeIPA Server +<_description>Integrated solution to provide centrally managed Identity, Policy and Audit. +false +true + + freeipa-server + freeipa-server-strict + freeipa-server-trust-ad + bind-dyndb-ldap + + + finnish-support <_name>Finnish Support <_description/> @@ -6386,6 +6399,7 @@ dogtag dns-server + freeipa-server ftp-server mail-server network-server @@ -6602,6 +6616,7 @@ directory-server dns-server dogtag + freeipa-server ftp-server ha haproxy -- 1.8.3.1 ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel
Re: [Freeipa-devel] FreeIPA server package group
On 08/28/2013 12:20 PM, Tomas Babej wrote: On 08/28/2013 12:03 PM, Petr Viktorin wrote: On 08/28/2013 11:46 AM, Tomas Babej wrote: On 08/26/2013 10:14 AM, Tomas Babej wrote: On Mon 26 Aug 2013 10:12:09 AM CEST, Petr Vobornik wrote: On 08/26/2013 09:54 AM, Tomas Babej wrote: Hi, I cooked up a patch for comps that adds a FreeIPA package group. Please chime in if you're OK with package selection / description. For illustration, see the attached image. FreeIPA will be added as an add-on in an installer under the Infrastructure server environment, that means, in the included images it will be at the same level as DNS or FTP server. It will also appear in the Software Selection tool (PackageKit). It should also be available under as yum groupinstall "FreeIPA server", and in PackageKit, as I understand comps is also source for that too. https://fedoraproject.org/wiki/How_to_use_and_edit_comps.xml_for_package_groups https://fedorahosted.org/freeipa/ticket/3630 IMO the Audit part in the description is false advertisement. Same issue is in package descriptions. I know, it's taken directly from there. I'd rather have it consistent, if we're going to change it here, we should do there too, so that we do not end up with multiple (seemingly incomplete) descriptions at various places. Anybody else does have any other concerns? We need to move with this effort since string freeze for F20 is coming. I'm particulary dubious about including the freeipa-tests package. I don't think that should be included, developer tests are unnecessary for a server. It was marked as optional in the initial proposal, but I agree it's unnecessary for it to be there at all. We discussed the A (as Audit) part in the description with Rob. The fact is that this is taken from the freeipa-server package description and nobody complained in 7 years. Updated tests attached. Oh, one more thing I remembered just now -- is it too late? We should include bind-dyndb-ldap (which pulls in bind). Preferably as default. -- Petr³ ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel
Re: [Freeipa-devel] FreeIPA server package group
On 08/28/2013 12:03 PM, Petr Viktorin wrote: On 08/28/2013 11:46 AM, Tomas Babej wrote: On 08/26/2013 10:14 AM, Tomas Babej wrote: On Mon 26 Aug 2013 10:12:09 AM CEST, Petr Vobornik wrote: On 08/26/2013 09:54 AM, Tomas Babej wrote: Hi, I cooked up a patch for comps that adds a FreeIPA package group. Please chime in if you're OK with package selection / description. For illustration, see the attached image. FreeIPA will be added as an add-on in an installer under the Infrastructure server environment, that means, in the included images it will be at the same level as DNS or FTP server. It will also appear in the Software Selection tool (PackageKit). It should also be available under as yum groupinstall "FreeIPA server", and in PackageKit, as I understand comps is also source for that too. https://fedoraproject.org/wiki/How_to_use_and_edit_comps.xml_for_package_groups https://fedorahosted.org/freeipa/ticket/3630 IMO the Audit part in the description is false advertisement. Same issue is in package descriptions. I know, it's taken directly from there. I'd rather have it consistent, if we're going to change it here, we should do there too, so that we do not end up with multiple (seemingly incomplete) descriptions at various places. Anybody else does have any other concerns? We need to move with this effort since string freeze for F20 is coming. I'm particulary dubious about including the freeipa-tests package. I don't think that should be included, developer tests are unnecessary for a server. It was marked as optional in the initial proposal, but I agree it's unnecessary for it to be there at all. We discussed the A (as Audit) part in the description with Rob. The fact is that this is taken from the freeipa-server package description and nobody complained in 7 years. Updated tests attached. -- Tomas Babej Associate Software Engeneer | Red Hat | Identity Management RHCE | Brno Site | IRC: tbabej | freeipa.org From 6a6e84935213c38ce28b8767417c5037d25d0e95 Mon Sep 17 00:00:00 2001 From: Tomas Babej Date: Mon, 26 Aug 2013 09:26:23 +0200 Subject: [PATCH] Add FreeIPA server package group --- comps-f20.xml.in | 15 +++ comps-f21.xml.in | 15 +++ 2 files changed, 30 insertions(+) diff --git a/comps-f20.xml.in b/comps-f20.xml.in index b0820461c95ff5f20827adb432c04faefffad738..a84300d4f297ee67b19efa12956652e417eacd1e 100644 --- a/comps-f20.xml.in +++ b/comps-f20.xml.in @@ -2358,6 +2358,19 @@ +freeipa-server +<_name>FreeIPA Server +<_description>Integrated solution to provide centrally managed Identity, Policy and Audit. +false +true + + freeipa-server + freeipa-server-strict + freeipa-server-trust-ad + freeipa-tests + + + finnish-support <_name>Finnish Support <_description/> @@ -6374,6 +6387,7 @@ dogtag dns-server + freeipa-server ftp-server mail-server network-server @@ -6590,6 +6604,7 @@ directory-server dns-server dogtag + freeipa-server ftp-server ha haproxy diff --git a/comps-f21.xml.in b/comps-f21.xml.in index bd990709a347ff37ee354743317d11b55a983f5c..30aabe18d8c9f0dff91028734628d32025c85cdd 100644 --- a/comps-f21.xml.in +++ b/comps-f21.xml.in @@ -2358,6 +2358,19 @@ +freeipa-server +<_name>FreeIPA Server +<_description>Integrated solution to provide centrally managed Identity, Policy and Audit. +false +true + + freeipa-server + freeipa-server-strict + freeipa-server-trust-ad + freeipa-tests + + + finnish-support <_name>Finnish Support <_description/> @@ -6387,6 +6400,7 @@ dogtag dns-server + freeipa-server ftp-server mail-server network-server @@ -6603,6 +6617,7 @@ directory-server dns-server dogtag + freeipa-server ftp-server ha haproxy -- 1.8.3.1 ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel
Re: [Freeipa-devel] FreeIPA server package group
On 08/28/2013 11:46 AM, Tomas Babej wrote: On 08/26/2013 10:14 AM, Tomas Babej wrote: On Mon 26 Aug 2013 10:12:09 AM CEST, Petr Vobornik wrote: On 08/26/2013 09:54 AM, Tomas Babej wrote: Hi, I cooked up a patch for comps that adds a FreeIPA package group. Please chime in if you're OK with package selection / description. For illustration, see the attached image. FreeIPA will be added as an add-on in an installer under the Infrastructure server environment, that means, in the included images it will be at the same level as DNS or FTP server. It will also appear in the Software Selection tool (PackageKit). It should also be available under as yum groupinstall "FreeIPA server", and in PackageKit, as I understand comps is also source for that too. https://fedoraproject.org/wiki/How_to_use_and_edit_comps.xml_for_package_groups https://fedorahosted.org/freeipa/ticket/3630 IMO the Audit part in the description is false advertisement. Same issue is in package descriptions. I know, it's taken directly from there. I'd rather have it consistent, if we're going to change it here, we should do there too, so that we do not end up with multiple (seemingly incomplete) descriptions at various places. Anybody else does have any other concerns? We need to move with this effort since string freeze for F20 is coming. I'm particulary dubious about including the freeipa-tests package. I don't think that should be included, developer tests are unnecessary for a server. We discussed the A (as Audit) part in the description with Rob. The fact is that this is taken from the freeipa-server package description and nobody complained in 7 years. -- Petr³ ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel
Re: [Freeipa-devel] FreeIPA server package group
On 08/26/2013 10:14 AM, Tomas Babej wrote: On Mon 26 Aug 2013 10:12:09 AM CEST, Petr Vobornik wrote: On 08/26/2013 09:54 AM, Tomas Babej wrote: Hi, I cooked up a patch for comps that adds a FreeIPA package group. Please chime in if you're OK with package selection / description. For illustration, see the attached image. FreeIPA will be added as an add-on in an installer under the Infrastructure server environment, that means, in the included images it will be at the same level as DNS or FTP server. It will also appear in the Software Selection tool (PackageKit). It should also be available under as yum groupinstall "FreeIPA server", and in PackageKit, as I understand comps is also source for that too. https://fedoraproject.org/wiki/How_to_use_and_edit_comps.xml_for_package_groups https://fedorahosted.org/freeipa/ticket/3630 IMO the Audit part in the description is false advertisement. Same issue is in package descriptions. I know, it's taken directly from there. I'd rather have it consistent, if we're going to change it here, we should do there too, so that we do not end up with multiple (seemingly incomplete) descriptions at various places. Anybody else does have any other concerns? We need to move with this effort since string freeze for F20 is coming. I'm particulary dubious about including the freeipa-tests package. We discussed the A (as Audit) part in the description with Rob. The fact is that this is taken from the freeipa-server package description and nobody complained in 7 years. ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel
Re: [Freeipa-devel] FreeIPA server package group
On Mon 26 Aug 2013 10:12:09 AM CEST, Petr Vobornik wrote: On 08/26/2013 09:54 AM, Tomas Babej wrote: Hi, I cooked up a patch for comps that adds a FreeIPA package group. Please chime in if you're OK with package selection / description. For illustration, see the attached image. FreeIPA will be added as an add-on in an installer under the Infrastructure server environment, that means, in the included images it will be at the same level as DNS or FTP server. It will also appear in the Software Selection tool (PackageKit). It should also be available under as yum groupinstall "FreeIPA server", and in PackageKit, as I understand comps is also source for that too. https://fedoraproject.org/wiki/How_to_use_and_edit_comps.xml_for_package_groups https://fedorahosted.org/freeipa/ticket/3630 IMO the Audit part in the description is false advertisement. Same issue is in package descriptions. I know, it's taken directly from there. I'd rather have it consistent, if we're going to change it here, we should do there too, so that we do not end up with multiple (seemingly incomplete) descriptions at various places. -- Tomas Babej Associate Software Engeneer | Red Hat | Identity Management RHCE | Brno Site | IRC: tbabej | freeipa.org ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel
Re: [Freeipa-devel] FreeIPA server package group
On 08/26/2013 09:54 AM, Tomas Babej wrote: Hi, I cooked up a patch for comps that adds a FreeIPA package group. Please chime in if you're OK with package selection / description. For illustration, see the attached image. FreeIPA will be added as an add-on in an installer under the Infrastructure server environment, that means, in the included images it will be at the same level as DNS or FTP server. It will also appear in the Software Selection tool (PackageKit). It should also be available under as yum groupinstall "FreeIPA server", and in PackageKit, as I understand comps is also source for that too. https://fedoraproject.org/wiki/How_to_use_and_edit_comps.xml_for_package_groups https://fedorahosted.org/freeipa/ticket/3630 IMO the Audit part in the description is false advertisement. Same issue is in package descriptions. -- Petr Vobornik ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel
