On Sat, 2015-09-26 at 12:25 +1000, Fraser Tweedale wrote:
On Fri, Sep 25, 2015 at 01:56:40PM -0400, Ade Lee wrote:
> Just the server and python client bits.
>
> Ade
>
I think that we should store the config in LDAP so that a change on
one replica is effected on clones. Obviously this is a fair bit
more work I am OK with using CS.cfg initially but we should have
this discussion.
Agreed that this is something we should discuss. Part of the reason
this is system specific though is that people tend to update one system
at a time -- in case something goes wrong. So you can very easily see
a situation where a feature is available on one system but not another.
Still, having it in LDAP would allow doing things like enabling
features topology-wide for instance.
Opening a ticket.
https://fedorahosted.org/pki/ticket/1634
I will conduct a review of this patch and the Python lightweight-CAs
patch on Monday.
Cheers,
Fraser