[Freeipa-devel] [PATCH] 0543 - dns: Add idnsSecInlineSigning attribute, add --dnssec option to zone

[Martin Kosek]

On 04/29/2014 08:17 PM, Simo Sorce wrote:
> On Tue, 2014-04-29 at 20:00 +0200, Petr Viktorin wrote:
>> This adds the "idnsSecInlineSigning" attribute and related option.
>>
>> https://fedorahosted.org/freeipa/ticket/3801
>>
>> Simo, is adding a MAY attribute to an existing objectClass okay?
>>
>
> Not unheard of, however in the past we discovered some schema
> replication issues that may have an impact, let's make sure DS team also
> agrees this is not going to cause issue.
>
>>From a purely functional pov a MAY attribute will not break any stored
> object, so it is fine.
>
> Simo.

Adding Thierry to the CC list to evaluate the risks, he was already involved in 
fixing related issue in the DS for a similar Dogtag schema extension.