[Freeipa-devel] RFE - Number of thoughts on FreeIPA

[William B]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Mon, 24 Nov 2014 15:10:49 -0700
Rich Megginson <rmeggins at redhat.com> wrote:

> >
> > Finally, back to our rich features. Not all businesses want all the
> > features of FreeIPA. For example, we don't want the Dogtag CA, NTP,
> > DNS or Kerberos components.
> 
> Then why do you want to use FreeIPA?  Is it just for 389 LDAP + nice 
> command line interface + nice web based UI?
> 

Yes, that's exactly what. When you think about FreeIPA, at it's core it's not
about dogtag ca, or ntp etc. It's about more effectively managed identity and
policy.

At my work, I have to observe the horrors of a directory instance that has
evolved by people who didn't have the discipline to put all objects in the
correct places, or use the correct objectClasses, who have hacked ACI's etc.

Having a nice webui, the commandline tools enforces consistency in actions that
admins take. It's not about the features as much as using the technology to 
enforce discipline and have vendor supported methodolgies. 


- -- 
Sincerely,

William Brown

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=w8jd
-----END PGP SIGNATURE-----