Re: [Freeipa-users] hesitate to deploy freeipa

2015-07-06 Thread Harald Dunkel
Hi Simo, On 06/25/15 17:47, Simo Sorce wrote: Harald, the reason I (and others) started this project many years ago is that trying to set up all components myself was boring and highly error prone, and you would always end up with a bag of parts that had a lot of mismatches, and some

Re: [Freeipa-users] hesitate to deploy freeipa

2015-07-06 Thread Alexander Bokovoy
On Mon, 29 Jun 2015, Harald Dunkel wrote: Hi Simo, On 06/25/15 17:47, Simo Sorce wrote: Harald, the reason I (and others) started this project many years ago is that trying to set up all components myself was boring and highly error prone, and you would always end up with a bag of parts that

Re: [Freeipa-users] hesitate to deploy freeipa

2015-06-29 Thread Lukas Slebodnik
On (26/06/15 10:10), Prasun Gera wrote: More importantly, ipa-client-install is just a thin configuration tool. If ipa-client-install is not available on your platform you can configure everything manually and it will work (as long as the client is standard-compliant). I.e. the client side

Re: [Freeipa-users] hesitate to deploy freeipa

2015-06-26 Thread Christopher Lamb
under the hood and studying the guts of your LDAP directory. Cheers Chris From: Rich Megginson rmegg...@redhat.com To: freeipa-users@redhat.com Date: 25.06.2015 20:32 Subject:Re: [Freeipa-users] hesitate to deploy freeipa Sent by:freeipa-users-boun...@redhat.com On 06

Re: [Freeipa-users] hesitate to deploy freeipa

2015-06-26 Thread Petr Spacek
On 26.6.2015 09:21, Christopher Lamb wrote: A very important factor - at least to me is this community: It is vibrant and active, you get advice, they listen and change things. For example I can think of at least 3 changes made to the documentation in the last few months due to mistakes I had

Re: [Freeipa-users] hesitate to deploy freeipa

2015-06-26 Thread Prasun Gera
I've found that if you are setting up a new environment from scratch which is mostly going to involve RHEL/Fedora systems, and that you have full control over your network including DNS, DHCP etc., it should mostly be smooth sailing. However, if you already have a network of old and new machines

Re: [Freeipa-users] hesitate to deploy freeipa

2015-06-26 Thread Lukas Slebodnik
On (26/06/15 12:48), Petr Spacek wrote: On 26.6.2015 12:18, Lukas Slebodnik wrote: On (26/06/15 01:29), Prasun Gera wrote: I've found that if you are setting up a new environment from scratch which is mostly going to involve RHEL/Fedora systems, and that you have full control over your network

Re: [Freeipa-users] hesitate to deploy freeipa

2015-06-26 Thread Prasun Gera
More importantly, ipa-client-install is just a thin configuration tool. If ipa-client-install is not available on your platform you can configure everything manually and it will work (as long as the client is standard-compliant). I.e. the client side is *in the worst case* (without

Re: [Freeipa-users] hesitate to deploy freeipa

2015-06-26 Thread Natxo Asenjo
hi, On Wed, Jun 24, 2015 at 9:06 AM, Harald Dunkel harald.dun...@aixigo.de wrote: Hi folks, I have a general problem with freeipa: It is *highly* complex and depends upon too many systems working together correctly (IMHO). My concern is, if there is a problem, then the usual tools

Re: [Freeipa-users] hesitate to deploy freeipa

2015-06-26 Thread Lukas Slebodnik
On (26/06/15 01:29), Prasun Gera wrote: I've found that if you are setting up a new environment from scratch which is mostly going to involve RHEL/Fedora systems, and that you have full control over your network including DNS, DHCP etc., it should mostly be smooth sailing. However, if you already

Re: [Freeipa-users] hesitate to deploy freeipa

2015-06-26 Thread Petr Spacek
On 26.6.2015 12:18, Lukas Slebodnik wrote: On (26/06/15 01:29), Prasun Gera wrote: I've found that if you are setting up a new environment from scratch which is mostly going to involve RHEL/Fedora systems, and that you have full control over your network including DNS, DHCP etc., it should

[Freeipa-users] hesitate to deploy freeipa

2015-06-25 Thread Harald Dunkel
Hi folks, I have a general problem with freeipa: It is *highly* complex and depends upon too many systems working together correctly (IMHO). My concern is, if there is a problem, then the usual tools following the Unix paradigm (do one thing and do it well) don't help anymore. I can speak only

Re: [Freeipa-users] hesitate to deploy freeipa

2015-06-25 Thread Simo Sorce
On Thu, 2015-06-25 at 15:33 +, Craig White wrote: -Original Message- From: freeipa-users-boun...@redhat.com [mailto:freeipa-users-boun...@redhat.com] On Behalf Of Harald Dunkel Sent: Wednesday, June 24, 2015 12:07 AM To: freeipa-users Subject: [Freeipa-users] hesitate to deploy

Re: [Freeipa-users] hesitate to deploy freeipa

2015-06-25 Thread Brian Topping
+1. After maintaining these components separately for years, getting everything as a single package with tested integration between them from release-to-release is huge. If you are worried about the complexity, take a look at any good Windows Server documentation set. It's thousands of pages.

Re: [Freeipa-users] hesitate to deploy freeipa

2015-06-25 Thread Petr Spacek
On 24.6.2015 09:06, Harald Dunkel wrote: Hi folks, I have a general problem with freeipa: It is *highly* complex and depends upon too many systems working together correctly (IMHO). My concern is, if there is a problem, then the usual tools following the Unix paradigm (do one thing and

Re: [Freeipa-users] hesitate to deploy freeipa

2015-06-25 Thread Rich Megginson
On 06/25/2015 12:12 PM, Thomas Sailer wrote: Am 25.06.2015 um 17:47 schrieb Simo Sorce: Yes, the whole project is complex, but not because we like complexity, it is complex because the problem space is complex and we are bound to use existing protocols, which sometimes add in complexity, and

Re: [Freeipa-users] hesitate to deploy freeipa

2015-06-25 Thread Thomas Sailer
Am 25.06.2015 um 17:47 schrieb Simo Sorce: Yes, the whole project is complex, but not because we like complexity, it is complex because the problem space is complex and we are bound to use existing protocols, which sometimes add in complexity, and we want to offer useful features to admins, so

Re: [Freeipa-users] hesitate to deploy freeipa

2015-06-25 Thread Jakub Hrozek
On Thu, Jun 25, 2015 at 12:30:24PM -0600, Rich Megginson wrote: On 06/25/2015 12:12 PM, Thomas Sailer wrote: Am 25.06.2015 um 17:47 schrieb Simo Sorce: Yes, the whole project is complex, but not because we like complexity, it is complex because the problem space is complex and we are bound