Create a top level tree for a dogtag tomcat instance

pki-bot commented 3 years ago

This issue was migrated from Pagure Issue #1045. Originally filed by vakwetu (@vakwetu) on 2014-06-20 16:21:34:

Assigned to nobody

The idea here is to create a top level tree for a dogtag tomcat instance, under which all subsystem subtrees would be created. This change:

simplifies replication - only one replication instance needed per instance
allows for the creation of top level users and groups that can be shared across instances.
allows the dogtag db to be imported as part of an exisiting ldap subtree.

Along with this, a migration script will be needed to migrate old instances to the new structure (will file a separate ticket), along with other tickets to backport this fix to relevant releases to allow IPA upgrades.

Design is located here: http://pki.fedoraproject.org/wiki/Top-Level_Tree

pki-bot commented 3 years ago

Comment from vakwetu (@vakwetu) at 2014-06-23 20:02:45

Based on discussion with nkinder and mkosek, the migration/upgrade steps may be too invasive for this time. We will extract part of this functionality to perform now (ticket 1051) and will push the remainder till later.

Suggested timeframe; Future.

pki-bot commented 3 years ago

Comment from vakwetu (@vakwetu) at 2017-02-27 14:12:06

Metadata Update from @vakwetu:

Issue set to the milestone: UNTRIAGED

pki-bot / pki-issues-final

Create a top level tree for a dogtag tomcat instance #1037