[Freeipa-devel] [PATCH] ldif and acis for config

[Rob Crittenden]

Kevin McCarthy wrote:
> Simo Sorce wrote:
>> On Tue, 2007-10-23 at 15:21 -0700, Kevin McCarthy wrote:
>>>   dn=name=yi,.....,dc=freeipa,dc=org
>>>   objectClass=???
>>>   name=er
>>>   value=san
>>>   comment=chinese numbers are fun
>> This way of handling things have huge problems.
>>
>> 1. No way to control the attribute value syntax.
>> 2. No way to search all options with a single query on an object
>> 3. Uncontrollable proliferation of objects
>> 4. impossible to validate syntax of both attribute names and values
>>
>> Can you list exactly what you would like to set in conf options for real
>> so that we can evaluate why you are asking for this kind of schema?
> 
> Sure, some of the values we want to store were in the patch starting
> this thread:
> 
> userSearchFields: uid,givenName,sn,telephoneNumber,ou,title
> searchTimeLimit: 2
> maxUidLength: 8
> passwordExpireNotifyDays: 7
> 
> I'm sure there will be others.
> 
> The idea was just to take miscellaneous configs from webgui code out of
> the code and into an externally modifiable place.
> 
> However, if it's that big of a headache I'm inclined to just leave them
> in the code!  :-)
> 
> In all seriousness, I think you and Pete need to chat and work out
> something with Rob.  I think it will take a bit more time to think this
> through and I'm not sure it's worth it for Milestone 5 or V1.

FDS stores its entire configuration in LDAP. It can't be that hard to 
work something out.

rob
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3245 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20071024/12c8a4d1/attachment.bin>