10:18 a.m.
----- Original Message -----
From: "Sandro Bonazzola" <sbonazzo(a)redhat.com>
To: "Alon Bar-Lev" <alonbl(a)redhat.com>
Cc: "Barak Azulay" <bazulay(a)redhat.com>, "engine-devel"
<engine-devel(a)ovirt.org>, "Alex Lourie" <alourie(a)redhat.com>,
"Simon Grinberg" <simon(a)redhat.com>
Sent: Thursday, May 23, 2013 6:11:01 PM
Subject: Re: [Engine-devel] 3.3 scratch or upgraded installation must use Apache proxy
(https://bugzilla.redhat.com/905754)
Il 23/05/2013 17:08, Alon Bar-Lev ha scritto:
>
> ----- Original Message -----
>> From: "Alon Bar-Lev" <alonbl(a)redhat.com>
>> To: "Sandro Bonazzola" <sbonazzo(a)redhat.com>
>> Cc: "Barak Azulay" <bazulay(a)redhat.com>,
"engine-devel"
>> <engine-devel(a)ovirt.org>, "Alex Lourie"
<alourie(a)redhat.com>,
>> "Simon Grinberg" <simon(a)redhat.com>
>> Sent: Thursday, May 23, 2013 6:07:31 PM
>> Subject: Re: [Engine-devel] 3.3 scratch or upgraded installation must use
>> Apache proxy
>> (https://bugzilla.redhat.com/905754)
>>
>>
>>
>> ----- Original Message -----
>>> From: "Sandro Bonazzola" <sbonazzo(a)redhat.com>
>>> To: "Alon Bar-Lev" <alonbl(a)redhat.com>
>>> Cc: "Barak Azulay" <bazulay(a)redhat.com>,
"engine-devel"
>>> <engine-devel(a)ovirt.org>, "Alex Lourie"
<alourie(a)redhat.com>
>>> Sent: Thursday, May 23, 2013 5:26:19 PM
>>> Subject: Re: [Engine-devel] 3.3 scratch or upgraded installation must use
>>> Apache proxy
>>> (https://bugzilla.redhat.com/905754)
>>>
>>> Il 23/05/2013 16:19, Alon Bar-Lev ha scritto:
>>>> ----- Original Message -----
>>>>> From: "Sandro Bonazzola" <sbonazzo(a)redhat.com>
>>>>> To: "Alon Bar-Lev" <alonbl(a)redhat.com>
>>>>> Cc: "Barak Azulay" <bazulay(a)redhat.com>,
"engine-devel"
>>>>> <engine-devel(a)ovirt.org>, "Alex Lourie"
<alourie(a)redhat.com>
>>>>> Sent: Thursday, May 23, 2013 5:01:58 PM
>>>>> Subject: Re: [Engine-devel] 3.3 scratch or upgraded installation
must
>>>>> use
>>>>> Apache proxy
>>>>> (https://bugzilla.redhat.com/905754)
>>>> <snip>
>>>>
>>>>> I think I was missing something.
>>>>> I don't know if other distro do the same, but on Fedora 18
>>>>> freeipa-server has a package conflict with mod_ssl.
>>>>> So it is not possible having both IPA and the oVirt engine on the
same
>>>>> host.
>>>>> This should answer also for post IPA installation for Fedora.
>>>>>
>>>>> I think the best thing to do here is just warn that we are
requiring
>>>>> mod_ssl when enabling SSL support so any service that has conflicts
>>>>> like
>>>>> freeipa-server will have issues
>>>>> and let the administrator decide what to do.
>>>> We cannot warn... we attempt to configure it... and we do depend on
>>>> it...
>>>> So either it is installed before we run setup or we install it
>>>> during(?!?!)
>>>> setup.
>>>>
>>>> Alon
>>> So let me try to revert the logic.
>>> Can't we drop the dependency on mod_ssl and warn that if you want SSL
>>> support you've to install mod_ssl allowing the user to abort, install
>>> the module and run engine-setup again?
>> Right... this is just for 3.3...
>>
>> This matches the logic of multiple execution of setup to add new
>> components
>> :)
>>
>> Not sure this will be acceptable by those who like 'simple-on-click'
>> installation.
>>
>> Regards.
>> Alon
> Oh... sorry, we cannot work without SSL... it is not just a matter of
> support.
>
> We have to have valid SSL configuration or product will not work.
>
> Alon
We need the configuration in place also if we don't use mod_ssl?
We need active SSL configuration, as the application automatically redirect users to
https.
Alon