[Pki-devel] Design for new top level DN functionality in Dogtag

[Ade Lee]

Design at:
http://pki.fedoraproject.org/wiki/Top-Level_Tree

This is a feature to change the tree structure of the Dogtag internal
database so that a new top level baseDN is available.  This will
simplify the replication topology by allowing one to replicate all
subsystems in a tomcat instance with a single replication agreement,
instead of needing a separate replication agreement for each subsystem.

This is a feature that I plan to start implementing very shortly for
Dogtag 10.2  -- ie. within the next couple of weeks.  

There are implications both for IPA (and how Dogtag is deployed within
IPA) as well as implications for Dogtag.

Please take a look and provide comments.
Thanks, 
Ade