[Pki-devel] Design for new top level DN functionality in Dogtag

Design at: http://pki.fedoraproject.org/wiki/Top-Level_Tree This is a feature to change the tree structure of the Dogtag internal database so that a new top level baseDN is available. This will simplify the replication topology by allowing one to replicate all subsystems in a tomcat instance with a single replication agreement, instead of needing a separate replication agreement for each subsystem. This is a feature that I plan to start implementing very shortly for Dogtag 10.2 -- ie. within the next couple of weeks. There are implications both for IPA (and how Dogtag is deployed within IPA) as well as implications for Dogtag. Please take a look and provide comments. Thanks, Ade