[Freeipa-devel] [PATCH] configure bind+ldap driver

[Rob Crittenden]

Simo Sorce wrote:
> This creates also role/task groups to authorize the ldap driver to
> perform DNS updates using its service principal.
> Does not support yet installing replicas.
> 
> Simo.
>

What is the rationale for creating the delegation entries via ldif 
rather than an update? I seem to recall a chicken-and-egg problem.

Can we create just the structural portions via the ldif and leave the 
taskgroups and rolegroups as updates?

rob
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3245 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20090629/8f0522f1/attachment.bin>