[Freeipa-devel] [RFE] Remove source hosts from HBAC
Ana Krivokapic
akrivoka at redhat.com
Fri Apr 5 17:59:28 UTC 2013
Hello list,
I have been thinking about the possible implementation for a solution of
ticket https://fedorahosted.org/freeipa/ticket/3528. There are several
options:
1. Completely remove the commands and command options related to source
hosts in HBAC. This might not be a good idea as it could cause problems
for older clients.
2. Hide these commands/options from the web UI, but leave them in CLI.
This would keep the API intact, but I don't like the idea of introducing
inconsistencies between CLI and web UI.
3. Do not remove anything, but issue deprecation warnings. The user will
see a warning when using these commands/options, but everything will
still work.
4. Do not remove anything, but raise exceptions. This would effectively
prevent the user from using these commands/options, as the exception
will break the execution of a command.
In any case, any reference to source hosts should be removed from help
and documentation.
I am leaning towards options 3 or 4.
Thoughts, comments and ideas are welcome.
--
Regards,
Ana Krivokapic
Associate Software Engineer
FreeIPA team
Red Hat Inc.
More information about the Freeipa-devel
mailing list