6:16 a.m.
On (23/02/18 13:08), Martin Kosek via FreeIPA-devel wrote:
On 02/21/2018 03:39 PM, Rob Crittenden via FreeIPA-devel wrote:
>>> - install client
>>> a) if we replace rpm dependancy on authconfig with aushselect we can
>>> go only this way: new installations done with authselect. if --no-sssd
>>> option is provided, then fail.
>> --no-sssd option is already deprecated and should not be used, you don't
>> have to think about that scenario. You can therefore go the a) way and
>> remove the option as a whole so that you can be sure it won't fiddle
>> with new installations.
> I can't seem to find anywhere that this deprecation was announced or
> discussed other than the ticket and commit,
> dfc271fdf4514481c11c342fabda135feeb44de6.
>
> Did anyone ask users, or anyone, if they use this option?
>
> In any case it isn't even clear that the option *is* deprecated. It just
> doesn't show as an option to ipa-client -install (hiding is not
> deprecating).
>
> IMHO to properly deprecate something it should yell loudly whenever
> invoked with a dire warning that it will disappear in the future.
This mostly seems as a review feedback that could have come in
https://pagure.io/freeipa/issue/5860
but did not. But it does not change anything on the fact that the option
is deprecated.
> There is also no man page mention of deprecation, in fact the option is
> still there.
>
> So even if the deprecation is fine and considered, removing the option
> completely has had no visible discussion.
Let's discuss it then. From Fedora/RHEL point of view, I do not see big
value in spending much time in maintaining, supporting or developing
non-SSSD scenarios. Fedora itself does not support these scenarios any
more, after the authselect Fedora change. These very corner cases are
left for manual administrator configuration.
The non-SSSD work and code should be left to FreeIPA platform code, for
platforms that do not use or want to use SSSD.
Which platform do you have in mind?
Because I do not know any platform/distribution which has freeipa-client
and does not have sssd.
LS