Re: [Freeipa-users] changing domain name

2011-12-07 Thread Greg Swift
On Wed, Dec 7, 2011 at 14:22, Simo Sorce  wrote:

> On Wed, 2011-12-07 at 14:10 -0600, Greg Swift wrote:
> > I'm having a debate with our hostmaster.  His general complaint is
> > that systems like AD and FreeIPA should not be so closely tied to the
> > domain name because some standard such as his group distributes
> > include a hostname that may change every few years (moving datacenters
> > etc).
> >
> > Since I am not deep in AD for FreeIPA (i just lurk the list and play
> > with FreeIPA whenever I get a chance, which isn't as often as I'd
> > like), does anyone have any solid points about this to help educate me
> > so I can understand better, and thus hopefully get him to understand
> > why its necessary?
>
> Choose a name that is no particularly tied to your datacenter and can be
> moved with the AD/FreeIPA install.
>
> Keep in mind that unlike AD, FreeIPA allows your clients to use whatever
> hostname they want. This comes with some manual work on your krb5.conf
> files across the domain, but it is doable.


Hmm I realized you could disconnect the domain name from the DOMAIN, but
thought it was generally considered a bad practice and complicated
matters.  If FreeIPA is that much more flexible thats exciting, sadly for
others in our org, they have lots of AD though.

Thanks for the response
___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Re: [Freeipa-users] changing domain name

2011-12-07 Thread Simo Sorce
On Wed, 2011-12-07 at 14:10 -0600, Greg Swift wrote:
> I'm having a debate with our hostmaster.  His general complaint is
> that systems like AD and FreeIPA should not be so closely tied to the
> domain name because some standard such as his group distributes
> include a hostname that may change every few years (moving datacenters
> etc).
> 
> Since I am not deep in AD for FreeIPA (i just lurk the list and play
> with FreeIPA whenever I get a chance, which isn't as often as I'd
> like), does anyone have any solid points about this to help educate me
> so I can understand better, and thus hopefully get him to understand
> why its necessary?

Choose a name that is no particularly tied to your datacenter and can be
moved with the AD/FreeIPA install.

Keep in mind that unlike AD, FreeIPA allows your clients to use whatever
hostname they want. This comes with some manual work on your krb5.conf
files across the domain, but it is doable.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York

___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users


[Freeipa-users] changing domain name

2011-12-07 Thread Greg Swift
I'm having a debate with our hostmaster.  His general complaint is that
systems like AD and FreeIPA should not be so closely tied to the domain
name because some standard such as his group distributes include a hostname
that may change every few years (moving datacenters etc).

Since I am not deep in AD for FreeIPA (i just lurk the list and play with
FreeIPA whenever I get a chance, which isn't as often as I'd like), does
anyone have any solid points about this to help educate me so I can
understand better, and thus hopefully get him to understand why its
necessary?

-greg
___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users