[Freeipa-devel] First cut of schema doc

Pete Rowley prowley at redhat.com
Wed Jul 11 22:23:26 UTC 2007


Simo Sorce wrote:
> On Wed, 2007-07-11 at 14:53 -0700, Pete Rowley wrote:
>   
>> Getting something up to argue over :)
>>
>> http://freeipa.com/page/SchemaV1
>>     
>
> Questions and remarks:
> - what is/why dc=com ?
>   
could be dc=org or whatever that component of the realm name is. The 
important thing is the splitting off of the most significant portion of 
the realm name from the suffix to be part of DIT (replacing cn=default 
which we didn't like)
> - I removed uniqueidentifier: IPA for now, as it is redundant (info: IPa
> v1.0 is enough)
>   
I don't think clients should have to parse the string in any fashion 
other than compare in order to be sure this is an IPA server.
> - more info on objcetcalss: ipaRealm ? Why do we need it ? The
> exp-lanation on the page is not really clear to me.
>
>   
OK I'll re-word it - it's discovery, since we have this partitioned off 
into a separate space so that clients can search through only the things 
they are interested in I thought it would be a good idea to be able to 
discover where that place is.

-- 
Pete

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3241 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20070711/d864238f/attachment.bin>


More information about the Freeipa-devel mailing list