Bug 1123453 - [RFE] ipactl does not inlude whether or not nis and compat functions are enabled
Summary: [RFE] ipactl does not inlude whether or not nis and compat functions are enabled
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: ipa
Version: 7.2
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: rc
: ---
Assignee: Martin Kosek
QA Contact: Namita Soman
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2014-07-25 17:33 UTC by Xiyang Dong
Modified: 2014-07-28 07:33 UTC (History)
1 user (show)

Fixed In Version:
Doc Type: Enhancement
Doc Text:
Clone Of:
Environment:
Last Closed: 2014-07-28 07:33:52 UTC
Target Upstream Version:


Attachments (Terms of Use)

Description Xiyang Dong 2014-07-25 17:33:59 UTC
Description of problem:

NIS functionality is not enabled on ipa server by default

should we include nis and compat functions in ipactl status?

Version-Release number of selected component (if applicable):


How reproducible:

Always

Steps to Reproduce:

Actual results:

Expected results:

Additional info:

Comment 2 Rob Crittenden 2014-07-25 18:07:52 UTC
I don't think so. These aren't exactly running services.

Both are 389-ds plugins.

ipa-compat-manage status can be used to determine whether the plugin is enabled or not.

ipa-nis-manage has no status option. I can see how adding that might be nice.

It might also be nice to use autobind if these are executed as root (with some handling around in case the ldapi socket doesn't exist).

Comment 3 Martin Kosek 2014-07-28 07:33:52 UTC
(In reply to Xiyang Dong from comment #0)
> Description of problem:
> 
> NIS functionality is not enabled on ipa server by default
> 
> should we include nis and compat functions in ipactl status?

Rob is correct, NIS is a 389-ds-base plugin. As NIS is deprecating (ed) mean for IdM, it should not be enabled by default, but rather only when needed. For example, when NIS is being migrated:

https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Linux_Domain_Identity_Authentication_and_Policy_Guide/migrating-from-nis.html


(In reply to Rob Crittenden from comment #2)
...
> ipa-nis-manage has no status option. I can see how adding that might be nice.

Rob, please feel free to file an upstream RFE, I do not think it needs to be linked to this Bugzilla.

> It might also be nice to use autobind if these are executed as root (with
> some handling around in case the ldapi socket doesn't exist).

We have ticket #2957 to make that happen. I widened it's scope to also cover ipa-nis-manage and ipa-compat-manage:
https://fedorahosted.org/freeipa/ticket/2957

This is now in rather late release, if either of you consider that a priority, please tell me.

In any case, I think all points of this Bugzilla are now covered, closing as NOTABUG. Please re-open if you strongly disagree and we will discuss.


Note You need to log in before you can comment on or make changes to this bug.