[Freeipa-devel] [PATCH] 25 Create Tool for Enabling Disabling Managed Entry

Alexander Bokovoy abokovoy at redhat.com
Fri Sep 16 14:25:18 UTC 2011


On Fri, 16 Sep 2011, JR Aquino wrote:
> On Sep 16, 2011, at 4:41 AM, "Alexander Bokovoy" <abokovoy at redhat.com> wrote:
> > Can't we have a shortcut that allows to specify only name of the 
> > managed entry and we will expand it to full DN? Current approach is 
> > way error-prone for admins to accidently make a typo or two...
> It may look intimidating via email, but the tool provides --list to 
> show the exact line thats needed to copy past, it also does checks 
> to prevent accidental typos.
> 
> The user isn't expected to know the full dn off the top of their 
> head :)
> 
> The other nice thing is that the tool is not limited to only the 
> stock FreeIPA managed entries, so it will also list, enable, and 
> disable any custom user created managed entries, or future FreeIPA 
> entries without modification.
That is all fine but having *always* go through complete DN is simply 
wrong from user experience perspective. If we can have helper shortcut 
for most common cases for stock FreeIPA, we should do that.

For example, if DN provided by user does not include = sign, treat it 
as last component CN. That would already cover majority of cases.

-- 
/ Alexander Bokovoy




More information about the Freeipa-devel mailing list