8:41 a.m.
Hi,
I have copied and formatted Russ' QuickStart here:
http://www.openlmi.org/node/62
It should be less verbose and more up-to-date. Please review the new text and
once I stop receiving complaints and update requests I'll replace the old
QuickStart with this one.
Thanks and regards,
--
Tomáš Smetana
Platform Engineering, Red Hat
8:54 a.m.
Looks good to me.
Russ
On Mon, 2014-03-24 at 14:41 +0100, Tomáš Smetana wrote:
Hi,
I have copied and formatted Russ' QuickStart here:
http://www.openlmi.org/node/62
It should be less verbose and more up-to-date. Please review the new text and
once I stop receiving complaints and update requests I'll replace the old
QuickStart with this one.
Thanks and regards,
9 a.m.
On Mon 24 of Mar 2014 14:41:07 Tomáš Smetana wrote:
Hi,
I have copied and formatted Russ' QuickStart here:
http://www.openlmi.org/node/62
It should be less verbose and more up-to-date. Please review the new text
and once I stop receiving complaints and update requests I'll replace the
old QuickStart with this one.
Thanks and regards,
Hi,
good job, I like this brief version much more that the original one.
I would add few formatting changes for us 'tl;dr' folks - when reading this
step-by-step tutorials I usually just copy&paste the code blocks and don't
read the text around (especially when doing it repeatedly).
So, I would add code block in 'Remote Access' section saying
$ passwd pegasus
and highlight the 'Alternatively' in second bullet.
I hope that more pages on OpenLMI.org will follow this simple and not-too-
verbose style.
Radek
3:52 p.m.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 03/24/2014 10:00 AM, Radek Novacek wrote:
On Mon 24 of Mar 2014 14:41:07 Tomáš Smetana wrote:
> Hi, I have copied and formatted Russ' QuickStart here:
> http://www.openlmi.org/node/62
>
> It should be less verbose and more up-to-date. Please review the
> new text and once I stop receiving complaints and update requests
> I'll replace the old QuickStart with this one.
>
> Thanks and regards,
Hi,
good job, I like this brief version much more that the original
one.
I would add few formatting changes for us 'tl;dr' folks - when
reading this step-by-step tutorials I usually just copy&paste the
code blocks and don't read the text around (especially when doing
it repeatedly).
So, I would add code block in 'Remote Access' section saying
$ passwd pegasus
and highlight the 'Alternatively' in second bullet.
I hope that more pages on OpenLMI.org will follow this simple and
not-too- verbose style.
Let's please scrap the reference to giving root access via Pegasus,
actually. It's not something we really want to encourage. I'd suggest
linking to http://www.openlmi.org/PegasusAccessControl instead, which
describes the manual approach of adding other users to the wbemNetwork
access or using FreeIPA HBAC to control access.
I made two minor corrections to the content:
1) I normalized all the commands to use # as the prompt, since they
really do need to be run as root. (The only exception being the 'lmi'
command at the end, but that was already using #)
2) The command to get the certificate was copying server.pem, but it
needs to be client.pem. The client.pem is the server certificate. In
older versions of pegasus in Fedora and RHEL, the two were the same
file (so it was working in our old guide), but in recent versions they
have diverged and client.pem should be used (which would have always
been correct).
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iEYEARECAAYFAlMwmwIACgkQeiVVYja6o6MUbwCfT+zYYN3J2RXWqpou9yi7T3rT
88MAn2a9c8FIKV8jkhToXtkE8isDOmqe
=zYF9
-----END PGP SIGNATURE-----
4:28 a.m.
On Mon, 24 Mar 2014 16:52:19 -0400
Stephen Gallagher <sgallagh(a)redhat.com> wrote:
Let's please scrap the reference to giving root access via
Pegasus,
actually. It's not something we really want to encourage. I'd suggest
linking to http://www.openlmi.org/PegasusAccessControl instead, which
describes the manual approach of adding other users to the wbemNetwork
access or using FreeIPA HBAC to control access.
Done.
Thanks everybody for their comments. I have Edited the left menu to point
to the new page (special thanks to Jan Synacek for showing me how).
Regards,
--
Tomáš Smetana
Platform Engineering, Red Hat
7:57 a.m.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 03/27/2014 05:28 AM, Tomáš Smetana wrote:
On Mon, 24 Mar 2014 16:52:19 -0400 Stephen Gallagher
<sgallagh(a)redhat.com> wrote:
> Let's please scrap the reference to giving root access via
> Pegasus, actually. It's not something we really want to
> encourage. I'd suggest linking to
> http://www.openlmi.org/PegasusAccessControl instead, which
> describes the manual approach of adding other users to the
> wbemNetwork access or using FreeIPA HBAC to control access.
Done.
Thanks everybody for their comments. I have Edited the left menu
to point to the new page (special thanks to Jan Synacek for showing
me how).
Regards,
I took care of reorganizing the Drupal book for "Using OpenLMI" as
well (it didn't have the SlowStart page and if you advanced through
it, it was still pointing at the old QuickStart). Should be good now.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iEYEARECAAYFAlM0IDIACgkQeiVVYja6o6OqoACfSMsNsR0M7+eX3pd1MKlRrX5o
1f0An2hChymeJ7Bg9tyTOjtMp+y6Ecsi
=bBhk
-----END PGP SIGNATURE-----
9:09 a.m.
Hi,
usage of dollar and number sign should be unified for commands - if the
command needs to be run with root privileges, it should be preceded
with '#' or '$ sudo'.
Output in the last example is from the old command 'lmi> hwinfo', not
'lmi> hwinfo cpu'
peter
On 24/03/14 14:41, Tomáš Smetana wrote:
Hi,
I have copied and formatted Russ' QuickStart here:
http://www.openlmi.org/node/62
It should be less verbose and more up-to-date. Please review the new text and
once I stop receiving complaints and update requests I'll replace the old
QuickStart with this one.
Thanks and regards,
3:28 a.m.
On Mon, 24 Mar 2014 15:09:52 +0100
Peter Schiffer <pschiffe(a)redhat.com> wrote:
Hi,
usage of dollar and number sign should be unified for commands - if the
command needs to be run with root privileges, it should be preceded
with '#' or '$ sudo'.
Output in the last example is from the old command 'lmi> hwinfo', not
'lmi> hwinfo cpu'
Fixed, thanks.
--
Tomáš Smetana
Platform Engineering, Red Hat
9:19 a.m.
On 03/24/2014 02:41 PM, Tomáš Smetana wrote:
Hi,
I have copied and formatted Russ' QuickStart here:
http://www.openlmi.org/node/62
It should be less verbose and more up-to-date. Please review the new text and
once I stop receiving complaints and update requests I'll replace the old
QuickStart with this one.
It looks much better than the older one. Just few remarks:
- A link to generic overview (with a picture!) would be helpful.
- Write somewhere that's Fedora-specific guide, other distros may vary.
- "You may need to set SELinux to permissive mode" - it should be
possible to run OpenLMI in enforcing now. And it's bug if it is not. So,
just mention that OpenLMI works well with SELinux and common precautions
should be made when something does not work and SELinux logs should be
checked (and bugs reported).
- Some markup around 'pegasus' user and 'passwd pegasus' commands etc
would be nice, now it's hard to read what's command and what's explanation.
- "configuring OpenPegasus to use other users is beyond the scope of
this article" - a link to a detailed guide would be helpful. Perhaps
/usr/share/doc/tog-pegasus/Admin_Guide_Release.pdf and
/usr/share/doc/tog-pegasus/README.RedHat.Security?
- "For OpenLMI to work correctly you need to assign a unique name to
each server ...." -> "unique *host* name"
Good work!
Jan
9:28 a.m.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 03/24/2014 10:19 AM, Jan Safranek wrote:
On 03/24/2014 02:41 PM, Tomáš Smetana wrote:
> Hi, I have copied and formatted Russ' QuickStart here:
> http://www.openlmi.org/node/62
>
> It should be less verbose and more up-to-date. Please review the
> new text and once I stop receiving complaints and update requests
> I'll replace the old QuickStart with this one.
It looks much better than the older one. Just few remarks:
- A link to generic overview (with a picture!) would be helpful.
- Write somewhere that's Fedora-specific guide, other distros may
vary.
- "You may need to set SELinux to permissive mode" - it should be
possible to run OpenLMI in enforcing now. And it's bug if it is
not. So, just mention that OpenLMI works well with SELinux and
common precautions should be made when something does not work and
SELinux logs should be checked (and bugs reported).
- Some markup around 'pegasus' user and 'passwd pegasus' commands
etc would be nice, now it's hard to read what's command and what's
explanation.
There's a bug in the WYSIWYG editor with the markup. It sometimes
loses it on clicking "preview". I'm sure we'll fix that up once the
content is right.
- "configuring OpenPegasus to use other users is beyond the
scope
of this article" - a link to a detailed guide would be helpful.
Perhaps /usr/share/doc/tog-pegasus/Admin_Guide_Release.pdf and
/usr/share/doc/tog-pegasus/README.RedHat.Security?
I'm currently working on a reference document for how to configure
Pegasus to use FreeIPA's host-based access control rules through the
SSSD. I'll post an update here when it's ready for review and editing.
- "For OpenLMI to work correctly you need to assign a unique name
to each server ...." -> "unique *host* name"
Good work!
Jan _______________________________________________ openlmi-devel
mailing list openlmi-devel(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/openlmi-devel
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iEYEARECAAYFAlMwQP0ACgkQeiVVYja6o6OHwgCfQd3PLqCO+5u8PNrS99ixunio
BnIAn2giAu7VDVZkIWzBe7YNMO4WksJi
=J5y9
-----END PGP SIGNATURE-----
12:56 p.m.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 03/24/2014 10:28 AM, Stephen Gallagher wrote:
On 03/24/2014 10:19 AM, Jan Safranek wrote:
> - "configuring OpenPegasus to use other users is beyond the
> scope of this article" - a link to a detailed guide would be
> helpful. Perhaps
> /usr/share/doc/tog-pegasus/Admin_Guide_Release.pdf and
> /usr/share/doc/tog-pegasus/README.RedHat.Security?
I'm currently working on a reference document for how to configure
Pegasus to use FreeIPA's host-based access control rules through
the SSSD. I'll post an update here when it's ready for review and
editing.
True to my word: http://www.openlmi.org/PegasusAccessControl
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iEYEARECAAYFAlMwccEACgkQeiVVYja6o6OhVwCfUu5jVw35Ngs73y5PGWzGJWHX
zxsAn0hmcBjkoF1UTvN7sKpLk5d4oy4v
=Klr2
-----END PGP SIGNATURE-----
10:37 a.m.
On Mon, 24 Mar 2014 15:19:19 +0100
Jan Safranek <jsafrane(a)redhat.com> wrote:
On 03/24/2014 02:41 PM, Tomáš Smetana wrote:
> Hi,
> I have copied and formatted Russ' QuickStart here:
> http://www.openlmi.org/node/62
>
> It should be less verbose and more up-to-date. Please review the new text
> and once I stop receiving complaints and update requests I'll replace the
> old QuickStart with this one.
It looks much better than the older one. Just few remarks:
- A link to generic overview (with a picture!) would be helpful.
Yes. We don't have a nice picture though...
- Write somewhere that's Fedora-specific guide, other distros may
vary.
Added as the first sentence to the article.
- "You may need to set SELinux to permissive mode" - it
should be
possible to run OpenLMI in enforcing now. And it's bug if it is not. So,
just mention that OpenLMI works well with SELinux and common precautions
should be made when something does not work and SELinux logs should be
checked (and bugs reported).
OK.
- Some markup around 'pegasus' user and 'passwd
pegasus' commands etc
would be nice, now it's hard to read what's command and what's explanation.
OK. I've tried to format that paragraph somehow better...
- "configuring OpenPegasus to use other users is beyond the
scope of
this article" - a link to a detailed guide would be helpful. Perhaps
/usr/share/doc/tog-pegasus/Admin_Guide_Release.pdf and
/usr/share/doc/tog-pegasus/README.RedHat.Security?
I'll find them online and see what I could do.
- "For OpenLMI to work correctly you need to assign a unique
name to
each server ...." -> "unique *host* name"
OK.
The page has been updated with
Thanks and regards,
--
Tomáš Smetana
Platform Engineering, Red Hat
11:53 a.m.
On 03/24/2014 04:37 PM, Tomáš Smetana wrote:
> - Some markup around 'pegasus' user and 'passwd
pegasus' commands etc
> would be nice, now it's hard to read what's command and what's
explanation.
OK. I've tried to format that paragraph somehow better...
cau, neco se rozbilo a muj chrome neukazuje _zadne_ formatovani v celem
clanku...
H.
11:55 a.m.
On 03/24/2014 05:53 PM, Jan Safranek wrote:
On 03/24/2014 04:37 PM, Tomáš Smetana wrote:
>> - Some markup around 'pegasus' user and 'passwd pegasus' commands
etc
>> would be nice, now it's hard to read what's command and what's
explanation.
>
> OK. I've tried to format that paragraph somehow better...
cau, neco se rozbilo a muj chrome neukazuje _zadne_ formatovani v celem
clanku...
oops, sorry for Czech, that should have been sent privately.
/me heads home for some rest.
3:56 a.m.
On Mon, 24 Mar 2014 15:19:19 +0100
Jan Safranek <jsafrane(a)redhat.com> wrote:
On 03/24/2014 02:41 PM, Tomáš Smetana wrote:
> Hi,
> I have copied and formatted Russ' QuickStart here:
> http://www.openlmi.org/node/62
>
> It should be less verbose and more up-to-date. Please review the new text
> and once I stop receiving complaints and update requests I'll replace the
> old QuickStart with this one.
It looks much better than the older one. Just few remarks:
- A link to generic overview (with a picture!) would be helpful.
One more thought to this one: We need some nice, easy to understand overview
of the project (with pictures!). And it belongs to the openlmi.org front
page. I would really like it to contain:
- The project introduction with one sentence
- A nice picture of the components and their connections
- A link to the Quick Start Guide
- List of the providers with links to usage examples and API documentation:
one line of text per provider
- A link to a page with links to more specific or related information
- Nothing else
Regards,
--
Tomáš Smetana
Platform Engineering, Red Hat
3690
days inactive
3693
days old
openlmi-devel@lists.fedorahosted.org
14 comments
6 participants
participants (6)
-
Jan Safranek -
Peter Schiffer -
Radek Novacek -
Russell Doty -
Stephen Gallagher -
Tomáš Smetana