[Freeipa-devel] Merging dogtag and ipa databases

[Alexander Bokovoy]

On Mon, 19 Dec 2011, Dmitri Pal wrote:
> On 12/19/2011 11:11 AM, Ade Lee wrote:
> > Hi all, 
> >
> > Based on conversations with Adam, Simo and Rob, here are some thoughts
> > on $subject:
> > http://pki.fedoraproject.org/wiki/Merging_IPA_and_Dogtag_Databases
> >
> > I'll probably add more later - like the details on how cloned instance
> > installation will run.
> >
> > Comments are welcome.
> >
> > Ade
> >
> 
> Ade,
> 
> IPA has a notion of the system account too.
> It has system account for Kerberos for example.
> Those accounts are not exposed in UI and there is already a location for
> them.
There will be also system accounts for samba users on replicas in 
trust setup. And as freeipa-users@ discussion have shown, there are 
other uses for such accounts --- connecting with NAS systems, for 
example.

So there is definitely need to consider system accounts.

-- 
/ Alexander Bokovoy