[Freeipa-devel] [PATCH] 274 detect whether to uninstall the CA or not

Rob Crittenden rcritten at redhat.com
Thu Oct 22 14:28:08 UTC 2009


David O'Brien wrote:
> Rob Crittenden wrote:
>> Pavel Zuna wrote:
>>> Rob Crittenden wrote:
>>>> You had to pass --ca when uninstalling if you wanted the CA 
>>>> uninstalled. This was nuts, auto-detect it.
>>>>
>>>> rob
>>> ack.
>>>
>>> Pavel
>>
>> pushed rebased patch to master
>>
>> rob
>>
> 
> do you mean when uninstalling ipa-server you had to pass --ca as well to 
> get rid of the CA?

Yes.

> if so, maybe we could add this to the --uninstall description on the 
> help page (i.e., this will automatically remove any CA that was 
> installed using the --ca option)
> if not so, what?

I don't think so. Uninstalling removes everything else, I don't see why 
we would treat this differently.

> Is there any case for not removing the CA when uninstalling the IPA server?

No because it isn't like you can re-use it with another IPA install 
later. Even if you wanted to maintain the data you just wouldn't 
uninstall IPA then, just disable all its services.

rob
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3245 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20091022/6d4011ab/attachment.bin>


More information about the Freeipa-devel mailing list