Re: [Freeipa-users] Declarative configuration options?

2016-08-11 Thread Marc Boorshtein
> Something declarative which can be version controlled and considered a > "source of truth" and driven from configuration management (chef, > puppet, ansible - whatever your flavor) > This is generally not done with a configuration management system because it tends to be more dynamic. Usually y

Re: [Freeipa-users] Declarative configuration options?

2016-08-11 Thread Martin Basti
On 10.08.2016 22:52, Mike LoSapio wrote: Something declarative which can be version controlled and considered a "source of truth" and driven from configuration management (chef, puppet, ansible - whatever your flavor) A scheme to reconcile account properties, group memberships, permissions, et

Re: [Freeipa-users] Declarative configuration options?

2016-08-10 Thread Mike LoSapio
Something declarative which can be version controlled and considered a "source of truth" and driven from configuration management (chef, puppet, ansible - whatever your flavor) A scheme to reconcile account properties, group memberships, permissions, etc... I could see how this would be a slippery

Re: [Freeipa-users] Declarative configuration options?

2016-08-03 Thread Martin Basti
On 01.08.2016 22:50, Mike LoSapio wrote: Hi there, Is there anyone out there with a good system for storing users, groups, hosts, etc.. in some sort of version controlled repo w/ flat files that could plug into "two-man" workflows for user-account creation and privilege/group membership change

[Freeipa-users] Declarative configuration options?

2016-08-01 Thread Mike LoSapio
Hi there, Is there anyone out there with a good system for storing users, groups, hosts, etc.. in some sort of version controlled repo w/ flat files that could plug into "two-man" workflows for user-account creation and privilege/group membership changes, etc. There's some github projects out the