[Freeipa-devel] Adding GUID to the user

[Richard Megginson]

Karl MacMillan wrote:
> On Fri, 2007-09-28 at 03:30 -0400, Simo Sorce wrote:
>   
>> It seem that many LDAP servers today provide GUIDs for their objects.
>> In particular while talking to OpenDirectory developers it came out that
>> a GUID would make things easier for an hypotetical MacOSX Client, also
>> it may make things a bit easier for a samba4 front-end using data on
>> freeIPA.
>>
>> I'd like to add GUIDs to all our entries, is there any reason why we
>> shouldn't ?
>> Not sure yet how much work that will be, and if it is too much we can
>> delay it by a few months eventually.
>>
>> Comments?
>>
>>     
>
> I think we should definitely do this as it is also needed by anyone that
> wants to store information about our objects in a separate datastore
> (like an sql database). Without a guaranteed stable identifier to use as
> a primary key it would not be safe to store, say, additional information
> about users in a separate data store.
>
> It would be nice if this could be done in v1 timeframe - any thoughts
> about how hard this is?
>   
Fedora DS generates the operational attribute nsUniqueID for each 
entry.  It is a GUID/UUID but it is formatted a little bit differently e.g.
xxxxxxxx-xxxxxxxx-xxxxxxxx-xxxxxxxx
instead of the usual
xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
> Karl
>
> _______________________________________________
> Freeipa-devel mailing list
> Freeipa-devel at redhat.com
> https://www.redhat.com/mailman/listinfo/freeipa-devel
>   

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3245 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20070928/c84c0bc5/attachment.bin>