[Freeipa-devel] [PATCH] root everything into /ipa
Rob Crittenden
rcritten at redhat.com
Mon May 5 21:20:34 UTC 2008
Simo Sorce wrote:
> On Mon, 2008-05-05 at 16:06 -0400, Rob Crittenden wrote:
>> Simo Sorce wrote:
>>> On Thu, 2008-04-03 at 15:24 -0400, Rob Crittenden wrote:
>>>> Refine our web space some more so that everything we reference is
>>>> in /ipa
>>>>
>>>> UI: /ipa/ui
>>>> XML-RPC: /ipa/xml
>>>> errors: /ipa/errors
>>>> config: /ipa/config
>>>>
>>>> I had to hardcode that URI into the CSS pages but TurboGears handles
>>>> the
>>>> rest of the translations with tg.url().
>>> Looks good!
>>>
>>> Thanks,
>>> Simo.
>>>
>> I'm ready to check this patch in but it will break any existing
>> installations (though not too badly).
>>
>> What we need to do is generate a new /etc/httpd/conf.d/ipa.conf and
>> /etc/httpd/conf.d/ipa-rewrite.conf.
>>
>> I was thinking we could do this in Fedora in a %post script. Rename the
>> current files and generate new ones (how, I'm not exactly sure yet). I
>> suppose we could use sed to replace $REALM with the default realm from
>> /etc/krb5.conf and the output of hostname -f for $FQDN in ipa-rewrite.conf.
>>
>> Opinions?
>
> do we distribute these files as part of the packaging or are they marked
> configuration files?
>
> The problem of %post is that it doesn't have a clue whether IPA is
> currently configured or just installed, we would need to find it out as
> well.
>
> If the mere upgrade does not break a running installation we could
> provide an upgrade script ?
>
They are not marked as config files. I suppose we need to ghost them.
In any case, if the file exists I think we can assume IPA is configured.
It will break the management of a running installation. Kerberos and
LDAP will continue to work fine but the UI and the command-line tools
will not work.
The thing about an upgrade script is that users would have to know to
run it.
rob
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3245 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20080505/10e52e4a/attachment.bin>
More information about the Freeipa-devel
mailing list