[Engine-devel] 3.3 scratch or upgraded installation must use Apache proxy (https://bugzilla.redhat.com/905754)

[Simon Grinberg]

----- Original Message -----
> From: "Alon Bar-Lev" <alonbl at redhat.com>
> To: "Sandro Bonazzola" <sbonazzo at redhat.com>
> Cc: "engine-devel" <engine-devel at ovirt.org>, "Simon Grinberg" <simon at redhat.com>
> Sent: Thursday, May 23, 2013 6:18:39 PM
> Subject: Re: [Engine-devel] 3.3 scratch or upgraded installation must use Apache	proxy
> (https://bugzilla.redhat.com/905754)
> 
> 
> 
> ----- Original Message -----
> > From: "Sandro Bonazzola" <sbonazzo at redhat.com>
> > To: "Alon Bar-Lev" <alonbl at redhat.com>
> > Cc: "Barak Azulay" <bazulay at redhat.com>, "engine-devel"
> > <engine-devel at ovirt.org>, "Alex Lourie" <alourie at redhat.com>,
> > "Simon Grinberg" <simon at redhat.com>
> > Sent: Thursday, May 23, 2013 6:11:01 PM
> > Subject: Re: [Engine-devel] 3.3 scratch or upgraded installation
> > must use Apache	proxy
> > (https://bugzilla.redhat.com/905754)
> > 
> > Il 23/05/2013 17:08, Alon Bar-Lev ha scritto:
> > >
> > > ----- Original Message -----
> > >> From: "Alon Bar-Lev" <alonbl at redhat.com>
> > >> To: "Sandro Bonazzola" <sbonazzo at redhat.com>
> > >> Cc: "Barak Azulay" <bazulay at redhat.com>, "engine-devel"
> > >> <engine-devel at ovirt.org>, "Alex Lourie" <alourie at redhat.com>,
> > >> "Simon Grinberg" <simon at redhat.com>
> > >> Sent: Thursday, May 23, 2013 6:07:31 PM
> > >> Subject: Re: [Engine-devel] 3.3 scratch or upgraded installation
> > >> must use
> > >> Apache	proxy
> > >> (https://bugzilla.redhat.com/905754)
> > >>
> > >>
> > >>
> > >> ----- Original Message -----
> > >>> From: "Sandro Bonazzola" <sbonazzo at redhat.com>
> > >>> To: "Alon Bar-Lev" <alonbl at redhat.com>
> > >>> Cc: "Barak Azulay" <bazulay at redhat.com>, "engine-devel"
> > >>> <engine-devel at ovirt.org>, "Alex Lourie" <alourie at redhat.com>
> > >>> Sent: Thursday, May 23, 2013 5:26:19 PM
> > >>> Subject: Re: [Engine-devel] 3.3 scratch or upgraded
> > >>> installation must use
> > >>> Apache	proxy
> > >>> (https://bugzilla.redhat.com/905754)
> > >>>
> > >>> Il 23/05/2013 16:19, Alon Bar-Lev ha scritto:
> > >>>> ----- Original Message -----
> > >>>>> From: "Sandro Bonazzola" <sbonazzo at redhat.com>
> > >>>>> To: "Alon Bar-Lev" <alonbl at redhat.com>
> > >>>>> Cc: "Barak Azulay" <bazulay at redhat.com>, "engine-devel"
> > >>>>> <engine-devel at ovirt.org>, "Alex Lourie" <alourie at redhat.com>
> > >>>>> Sent: Thursday, May 23, 2013 5:01:58 PM
> > >>>>> Subject: Re: [Engine-devel] 3.3 scratch or upgraded
> > >>>>> installation must
> > >>>>> use
> > >>>>> Apache	proxy
> > >>>>> (https://bugzilla.redhat.com/905754)
> > >>>> <snip>
> > >>>>
> > >>>>> I think I was missing something.
> > >>>>> I don't know if other distro do the same, but on Fedora 18
> > >>>>> freeipa-server has a package conflict with mod_ssl.
> > >>>>> So it is not possible having both IPA and the oVirt engine on
> > >>>>> the same
> > >>>>> host.
> > >>>>> This should answer also for post IPA installation for Fedora.

That should not be a problem.
Don't forget that one of the popular use cases for virtualization is to resolve conflict in services while still using the same amount of hardware. Instead of investing a huge effort to resolve conflicts you segregate services into virtual machines that in turn can share the same physical server. 


> > >>>>>
> > >>>>> I think the best thing to do here is just warn that we are
> > >>>>> requiring
> > >>>>> mod_ssl when enabling SSL support so any service that has
> > >>>>> conflicts
> > >>>>> like
> > >>>>> freeipa-server will have issues
> > >>>>> and let the administrator decide what to do.
> > >>>> We cannot warn... we attempt to configure it... and we do
> > >>>> depend on
> > >>>> it...
> > >>>> So either it is installed before we run setup or we install it
> > >>>> during(?!?!)
> > >>>> setup.
> > >>>>
> > >>>> Alon
> > >>> So let me try to revert the logic.
> > >>> Can't we drop the dependency on mod_ssl and warn that if you
> > >>> want SSL
> > >>> support you've to install mod_ssl allowing the user to abort,
> > >>> install
> > >>> the module and run engine-setup again?
> > >> Right... this is just for 3.3...
> > >>
> > >> This matches the logic of multiple execution of setup to add new
> > >> components
> > >> :)
> > >>
> > >> Not sure this will be acceptable by those who like
> > >> 'simple-on-click'
> > >> installation.

No it won't - but it's a moot point by now 


> > >>
> > >> Regards.
> > >> Alon
> > > Oh... sorry, we cannot work without SSL... it is not just a
> > > matter of
> > > support.
> > >
> > > We have to have valid SSL configuration or product will not work.
> > >
> > > Alon
> > 
> > We need the configuration in place also if we don't use mod_ssl?
> 
> We need active SSL configuration, as the application automatically
> redirect users to https.
> 
> Alon
> _______________________________________________
> Engine-devel mailing list
> Engine-devel at ovirt.org
> http://lists.ovirt.org/mailman/listinfo/engine-devel
>