[Freeipa-devel] [PATCH] 0543 - dns: Add idnsSecInlineSigning attribute, add --dnssec option to zone

Martin Kosek mkosek at redhat.com
Tue Apr 29 20:07:42 UTC 2014

On 04/29/2014 08:17 PM, Simo Sorce wrote:
> On Tue, 2014-04-29 at 20:00 +0200, Petr Viktorin wrote:
>> This adds the "idnsSecInlineSigning" attribute and related option.
>> https://fedorahosted.org/freeipa/ticket/3801
>> Simo, is adding a MAY attribute to an existing objectClass okay?
> Not unheard of, however in the past we discovered some schema
> replication issues that may have an impact, let's make sure DS team also
> agrees this is not going to cause issue.
>>From a purely functional pov a MAY attribute will not break any stored
> object, so it is fine.
> Simo.

Adding Thierry to the CC list to evaluate the risks, he was already involved in 
fixing related issue in the DS for a similar Dogtag schema extension.

More information about the Freeipa-devel mailing list