Bug 692607

more notes and suggestions for

http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/96/html-single/Enterprise_Identity_Management_Guide/index.html


**********
5.7. DNS
...
You can use the domain name example.com and the realm FREEIPA.

==>
suggestion:
You can use the domain name example.com and the realm TESTIPA.


**********
6.1. Installing the IPA Server Packages
yum install freeipa-server
yum install freeipa-server bind bind-dyndb-ldap

==>
should be:
yum install ipa-server
yum install ipa-server bind bind-dyndb-ldap


**********
Procedure 8.3. To download and install the Fedora IPA packages and dependencies:

==>
Procedure 8.3. To download and install the IPA packages and dependencies:

**********

#
Install the appropriate IPA client packages:
For a user workstation, run the following command:
# yum install freeipa-client
For an administrator workstation, run the following command:
# yum install freeipa-client freeipa-admintools 

==>
yum install ipa-client
yum install ipa-client ipa-admintools


**********
22.1.4.2.1. Configuration Options
...
This is the same configuration as that provided for freeIPA v1.x 

==>
This is the same configuration as that provided for IPA v1.x 


**********
in:

1.1. Operating System Requirements
The main assumption here is that you have a computer installed with either a Red Hat Enterprise Linux or Fedora operating system (OS). While these examples were written based on Fedora 14, the concepts, procedures, and commands are the same for both OSes.

==>
Do we really need this last sentence?
If this is for an Enterprise Identify Management Guide, I would propose to remove it.


**********
in:

2.1. Determining Which Version to Install

==>
why do we suggest to install the upstream version using a personal Fedora account and personal yum repo?
If this is for an Enterprise Identify Management Guide, I would propose to remove this section, we should suggest the usage of RHN.


**********
in:

8.2.5. Configuring NFS v4 with Kerberos
Procedure 8.4. To configure NFS on the Fedora IPA client:

==>
If this is for an Enterprise Identify Management Guide, I would propose to provide an example using a RHEL client, not upstream ones.

Looks like it got built with a missing condition. Everywhere else "freeipa" -> "ipa" when referring to RHEL

wrt 2.1. Determining Which Version to Install

I think Dmitri's idea here was to provide alternatives; if you want to use the version of IPA provided with the OS release, that's fine, but you might not have all the latest devel bits, etc. (bearing in mind that for 6.1 IPA is still Tech Preview). If you want to get the latest bits and therefore a sneak preview of what's coming, you'll need to use devel repos.

Dmitri?

wrt 8.2.5. Configuring NFS v4 with Kerberos
Procedure 8.4. To configure NFS on the Fedora IPA client:


Both procedures are provided. There are currently separate sections for installing & configuring Fedora and RHEL clients. The long term plan is to combine these, but first I wanted to ensure that there were few, if any, differences (e.g., for IPAv1 we had separate and incompatible install scripts for RHEL4 & RHEL5). There was no time for this in the 6.1 time frame.

The other mods you mention are trivial and will only take a few minutes.

Thanks for the review.

(In reply to comment #3)
> Looks like it got built with a missing condition. Everywhere else "freeipa" ->
> "ipa" when referring to RHEL
> 
> wrt 2.1. Determining Which Version to Install
> 
> I think Dmitri's idea here was to provide alternatives; if you want to use the
> version of IPA provided with the OS release, that's fine, but you might not
> have all the latest devel bits, etc. (bearing in mind that for 6.1 IPA is still
> Tech Preview). If you want to get the latest bits and therefore a sneak preview
> of what's coming, you'll need to use devel repos.
> 
> Dmitri?

Yes.

If you are on RHEL you just install the version that is on RHEL and you do not need this section at all.
On fedora you might install the one that comes from Fedora or a version from upstream from the devel repo if you want the latest bits.
In some cases in the middle of Fedora release cycle there might be a stable upstream version that is better than the one available from Fedora. One can install that version but this release would most likely appear in the core Fedora in couple weeks after it has been released upstream. 


> 
> wrt 8.2.5. Configuring NFS v4 with Kerberos
> Procedure 8.4. To configure NFS on the Fedora IPA client:
> 
> 
> Both procedures are provided. There are currently separate sections for
> installing & configuring Fedora and RHEL clients. The long term plan is to
> combine these, but first I wanted to ensure that there were few, if any,
> differences (e.g., for IPAv1 we had separate and incompatible install scripts
> for RHEL4 & RHEL5). There was no time for this in the 6.1 time frame.
> 

Nothing changed regarding setup of of RHEL4. It needs to be configured manually using nss_ldap in nsswitch.conf and pam config files.

On RHEL 5 there is an ipa-client script.
In 5.6 it configures nss_ldap and pam_krb5. 
In later versions (5.7) the SSSD with native IPA back end (not generic LDAP + Kerberos back ends) will be used.
 


> The other mods you mention are trivial and will only take a few minutes.
> 
> Thanks for the review.

ok, I conditionalised that section to be fedora-specific. For the Enterprise doc it doesn't appear at all.

I don't discuss IPA configuration of IPA for RHEL 4 at all. It was not included in the list of supported clients for IPA 2.0.

Setting to MODIFIED.

Will brew and push when I can.

Red_Hat_Enterprise_Linux-Enterprise_Identity_Management_Guide-96-web-en-US-0.7-30.el5

You shouldn't see any references to devel repos, etc., in the Enterprise edition now.

Neither should there be any references to "freeipa-server" packages. For RHEL, the packages are "ipa-server" (and "ipa-client", etc.)

The final changes in comment #7 are done:
http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/96/html/Enterprise_Identity_Management_Guide/chap-Enterprise_Identity_Management_Guide-Installing_the_IPA_Server.html#sect-Enterprise_Identity_Management_Guide-Installing_the_IPA_Server-Installing_the_IPA_Server_Packages