Le mer 07/01/2004 à 01:00, Michael Schwendt a écrit : > On Wed, 07 Jan 2004 00:35:46 +0100, Thomas M Steenholdt wrote: > > Name a core package that requires this amount of fiddling around before > > it will work, and I will comment on it if I have ever used it... I can't > > think on any! > > dhcpd, samba, ldap, mrtg, cvs, rsync, this-is-silly. There are many other > services which don't come preconfigured to a level you would just need to > run "service foo start" to get going. Not even mentioning any services > which require GUI tools to configure them. Don't get me wrong - I care zip about AV, never evaluated the different packages available, etc. I do care about the "RedHat touch", which is things should just work by default. Even atrocious packages like samba come with a sane default config that will do something if the samba service is started as-is. And yes it's useless in normal life (production) because some apps want to be customized before being really useful but it's a lifesaver for people acquainting themselves with a new app (ie test setups). Hell, even ntpd comes configured out of the box to sync with the internal clock (not terribly useful since that's the one clock source that would be used without ntp) but I've always found this kind of neutral setups as crucial as howtos and other readmes. It's not the case for everything - but one of the examples you give (ldap) was the subject of a few threads lately and the lack of a default usable config was described as a big bug/problme by pretty much everyone. If as you write there are security problems involved - make the default setup as insanely pedantically secure as you want to. The point is there should be a default setup, that should do something (even something so utterly naïve/limited as to be useless except as an example). When you argue users should just copy the example config in some magic place because it's dangerous out of the box that speaks volumes about the care you've spent on it. You're eluding problems and trying to push them onto the user - how is he supposed to write a sane config if you're not confident on your own ability to do it ? If such complex and potentially dangerous/exposed RedHat services as Apache, Postfix, Samba all come with a default config that is already installed in the right place I can't see how you can justify not doing it for your AV app. Regards, -- Nicolas Mailhot
Attachment:
signature.asc
Description: Ceci est une partie de message=?ISO-8859-1?Q?num=E9riquement?= =?ISO-8859-1?Q?_sign=E9e=2E?=