[Freeipa-devel] New/Updated FreeIPA design pages

Simo Sorce simo at redhat.com
Fri Dec 19 16:39:40 UTC 2014


On Fri, 19 Dec 2014 17:01:56 +0100
Ludwig Krispenz <lkrispen at redhat.com> wrote:

> 
> On 12/18/2014 02:52 PM, Simo Sorce wrote:
> > On Thu, 18 Dec 2014 10:56:47 +0100
> > thierry bordaz <tbordaz at redhat.com> wrote:
> >
> >> On 12/16/2014 05:44 PM, Simo Sorce wrote:
> >>> On Tue, 16 Dec 2014 10:40:20 -0500
> >>> Simo Sorce <simo at redhat.com> wrote:
> >>>
> >>>> On Tue, 16 Dec 2014 15:57:34 +0100
> >>>> Ludwig Krispenz <lkrispen at redhat.com> wrote:
> >>>>
> >>>>> On 12/16/2014 03:22 PM, Simo Sorce wrote:
> >>>>>> On Tue, 16 Dec 2014 11:33:41 +0100
> >>>>>> Ludwig Krispenz <lkrispen at redhat.com> wrote:
> >>>>>>
> >>>>>>> Hi Simo,
> >>>>>>>
> >>>>>>> one thing is not quite clear to me: do you want a domain level
> >>>>>>> per feature or a global domain level or both ?
> >>>>>> The Domain Level is global.
> >>>>>> I described a "Feature Version" that is published by feature.
> >>>>>> The Feature Versions just state what is available they do not
> >>>>>> determine what is the current overall Domain Level.
> >>>>> Ok, just to confirm my understanding.
> >>>>>
> >>>>> - we have one domain level.
> >>>> Yes.
> >> Hello,
> >>
> >> Domain level can only be increased. Can it interfere with the
> >> ability of the admin to downgrade a software version ?
> > Yes it will interfere, but the domain level will never be
> > automatically raised, so the admin has time to do tests for normal
> > functionality, and can wait to raise the domain level if there are
> > reports of issues with newer functionality.
> there is one more scenario I would like to clarify. If a new replica
> is installed or a client promoted to a replica, this means th enew 
> installation of a DS instance, which for some time is not connected
> to the rest of the topology until its shared date are initialized
> from an existing server in the topology. After the total init is
> complete, it can check the set domain level and act accordingly.
> But how should it act before, assuming domain level 0, or should 
> admin/scripts set a temporary domain level in the neew server, even
> if it will be overwritten later by replica initialization ?

I would assume 0 until told otherwise for now.

Simo.


-- 
Simo Sorce * Red Hat, Inc * New York




More information about the Freeipa-devel mailing list