11:10 a.m.
----- Original Message -----
From: "Alon Bar-Lev" <alonbl(a)redhat.com>
To: "Sandro Bonazzola" <sbonazzo(a)redhat.com>
Cc: "engine-devel" <engine-devel(a)ovirt.org>, "Simon Grinberg"
<simon(a)redhat.com>
Sent: Thursday, May 23, 2013 6:18:39 PM
Subject: Re: [Engine-devel] 3.3 scratch or upgraded installation must use Apache proxy
(https://bugzilla.redhat.com/905754)
----- Original Message -----
> From: "Sandro Bonazzola" <sbonazzo(a)redhat.com>
> To: "Alon Bar-Lev" <alonbl(a)redhat.com>
> Cc: "Barak Azulay" <bazulay(a)redhat.com>, "engine-devel"
> <engine-devel(a)ovirt.org>, "Alex Lourie" <alourie(a)redhat.com>,
> "Simon Grinberg" <simon(a)redhat.com>
> Sent: Thursday, May 23, 2013 6:11:01 PM
> Subject: Re: [Engine-devel] 3.3 scratch or upgraded installation
> must use Apache proxy
> (https://bugzilla.redhat.com/905754)
>
> Il 23/05/2013 17:08, Alon Bar-Lev ha scritto:
> >
> > ----- Original Message -----
> >> From: "Alon Bar-Lev" <alonbl(a)redhat.com>
> >> To: "Sandro Bonazzola" <sbonazzo(a)redhat.com>
> >> Cc: "Barak Azulay" <bazulay(a)redhat.com>,
"engine-devel"
> >> <engine-devel(a)ovirt.org>, "Alex Lourie"
<alourie(a)redhat.com>,
> >> "Simon Grinberg" <simon(a)redhat.com>
> >> Sent: Thursday, May 23, 2013 6:07:31 PM
> >> Subject: Re: [Engine-devel] 3.3 scratch or upgraded installation
> >> must use
> >> Apache proxy
> >> (https://bugzilla.redhat.com/905754)
> >>
> >>
> >>
> >> ----- Original Message -----
> >>> From: "Sandro Bonazzola" <sbonazzo(a)redhat.com>
> >>> To: "Alon Bar-Lev" <alonbl(a)redhat.com>
> >>> Cc: "Barak Azulay" <bazulay(a)redhat.com>,
"engine-devel"
> >>> <engine-devel(a)ovirt.org>, "Alex Lourie"
<alourie(a)redhat.com>
> >>> Sent: Thursday, May 23, 2013 5:26:19 PM
> >>> Subject: Re: [Engine-devel] 3.3 scratch or upgraded
> >>> installation must use
> >>> Apache proxy
> >>> (https://bugzilla.redhat.com/905754)
> >>>
> >>> Il 23/05/2013 16:19, Alon Bar-Lev ha scritto:
> >>>> ----- Original Message -----
> >>>>> From: "Sandro Bonazzola" <sbonazzo(a)redhat.com>
> >>>>> To: "Alon Bar-Lev" <alonbl(a)redhat.com>
> >>>>> Cc: "Barak Azulay" <bazulay(a)redhat.com>,
"engine-devel"
> >>>>> <engine-devel(a)ovirt.org>, "Alex Lourie"
<alourie(a)redhat.com>
> >>>>> Sent: Thursday, May 23, 2013 5:01:58 PM
> >>>>> Subject: Re: [Engine-devel] 3.3 scratch or upgraded
> >>>>> installation must
> >>>>> use
> >>>>> Apache proxy
> >>>>> (https://bugzilla.redhat.com/905754)
> >>>> <snip>
> >>>>
> >>>>> I think I was missing something.
> >>>>> I don't know if other distro do the same, but on Fedora 18
> >>>>> freeipa-server has a package conflict with mod_ssl.
> >>>>> So it is not possible having both IPA and the oVirt engine on
> >>>>> the same
> >>>>> host.
> >>>>> This should answer also for post IPA installation for Fedora.
That should not be a problem.
Don't forget that one of the popular use cases for virtualization is to resolve
conflict in services while still using the same amount of hardware. Instead of investing a
huge effort to resolve conflicts you segregate services into virtual machines that in turn
can share the same physical server.
> >>>>>
> >>>>> I think the best thing to do here is just warn that we are
> >>>>> requiring
> >>>>> mod_ssl when enabling SSL support so any service that has
> >>>>> conflicts
> >>>>> like
> >>>>> freeipa-server will have issues
> >>>>> and let the administrator decide what to do.
> >>>> We cannot warn... we attempt to configure it... and we do
> >>>> depend on
> >>>> it...
> >>>> So either it is installed before we run setup or we install it
> >>>> during(?!?!)
> >>>> setup.
> >>>>
> >>>> Alon
> >>> So let me try to revert the logic.
> >>> Can't we drop the dependency on mod_ssl and warn that if you
> >>> want SSL
> >>> support you've to install mod_ssl allowing the user to abort,
> >>> install
> >>> the module and run engine-setup again?
> >> Right... this is just for 3.3...
> >>
> >> This matches the logic of multiple execution of setup to add new
> >> components
> >> :)
> >>
> >> Not sure this will be acceptable by those who like
> >> 'simple-on-click'
> >> installation.
No it won't - but it's a moot point by now
> >>
> >> Regards.
> >> Alon
> > Oh... sorry, we cannot work without SSL... it is not just a
> > matter of
> > support.
> >
> > We have to have valid SSL configuration or product will not work.
> >
> > Alon
>
> We need the configuration in place also if we don't use mod_ssl?
We need active SSL configuration, as the application automatically
redirect users to https.
Alon
_______________________________________________
Engine-devel mailing list
Engine-devel(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/engine-devel