-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1

On 03/24/2014 10:00 AM, Radek Novacek wrote:

On Mon 24 of Mar 2014 14:41:07 Tomáš Smetana wrote:

...

Hi, I have copied and formatted Russ' QuickStart here: http://www.openlmi.org/node/62

It should be less verbose and more up-to-date. Please review the new text and once I stop receiving complaints and update requests I'll replace the old QuickStart with this one.

Thanks and regards,

Hi,

good job, I like this brief version much more that the original one.

I would add few formatting changes for us 'tl;dr' folks - when reading this step-by-step tutorials I usually just copy&paste the code blocks and don't read the text around (especially when doing it repeatedly).

So, I would add code block in 'Remote Access' section saying

$ passwd pegasus

and highlight the 'Alternatively' in second bullet.

I hope that more pages on OpenLMI.org will follow this simple and not-too- verbose style.

Let's please scrap the reference to giving root access via Pegasus, actually. It's not something we really want to encourage. I'd suggest linking to http://www.openlmi.org/PegasusAccessControl instead, which describes the manual approach of adding other users to the wbemNetwork access or using FreeIPA HBAC to control access.

I made two minor corrections to the content: 1) I normalized all the commands to use # as the prompt, since they really do need to be run as root. (The only exception being the 'lmi' command at the end, but that was already using #) 2) The command to get the certificate was copying server.pem, but it needs to be client.pem. The client.pem is the server certificate. In older versions of pegasus in Fedora and RHEL, the two were the same file (so it was working in our old guide), but in recent versions they have diverged and client.pem should be used (which would have always been correct).

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1

On 03/27/2014 05:28 AM, Tomáš Smetana wrote:

On Mon, 24 Mar 2014 16:52:19 -0400 Stephen Gallagher sgallagh@redhat.com wrote:

...

Let's please scrap the reference to giving root access via Pegasus, actually. It's not something we really want to encourage. I'd suggest linking to http://www.openlmi.org/PegasusAccessControl instead, which describes the manual approach of adding other users to the wbemNetwork access or using FreeIPA HBAC to control access.

Done.

Thanks everybody for their comments. I have Edited the left menu to point to the new page (special thanks to Jan Synacek for showing me how).

Regards,

I took care of reorganizing the Drupal book for "Using OpenLMI" as well (it didn't have the SlowStart page and if you advanced through it, it was still pointing at the old QuickStart). Should be good now.

On Mon, 24 Mar 2014 15:09:52 +0100 Peter Schiffer pschiffe@redhat.com wrote:

Hi,

usage of dollar and number sign should be unified for commands - if the command needs to be run with root privileges, it should be preceded with '#' or '$ sudo'.

Output in the last example is from the old command 'lmi> hwinfo', not 'lmi> hwinfo cpu'

Fixed, thanks.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1

On 03/24/2014 10:19 AM, Jan Safranek wrote:

On 03/24/2014 02:41 PM, Tomáš Smetana wrote:

...

Hi, I have copied and formatted Russ' QuickStart here: http://www.openlmi.org/node/62

It should be less verbose and more up-to-date. Please review the new text and once I stop receiving complaints and update requests I'll replace the old QuickStart with this one.

It looks much better than the older one. Just few remarks:

• A link to generic overview (with a picture!) would be helpful.

• Write somewhere that's Fedora-specific guide, other distros may

vary.

• "You may need to set SELinux to permissive mode" - it should be

possible to run OpenLMI in enforcing now. And it's bug if it is not. So, just mention that OpenLMI works well with SELinux and common precautions should be made when something does not work and SELinux logs should be checked (and bugs reported).

• Some markup around 'pegasus' user and 'passwd pegasus' commands

etc would be nice, now it's hard to read what's command and what's explanation.

There's a bug in the WYSIWYG editor with the markup. It sometimes loses it on clicking "preview". I'm sure we'll fix that up once the content is right.

• "configuring OpenPegasus to use other users is beyond the scope

of this article" - a link to a detailed guide would be helpful. Perhaps /usr/share/doc/tog-pegasus/Admin_Guide_Release.pdf and /usr/share/doc/tog-pegasus/README.RedHat.Security?

I'm currently working on a reference document for how to configure Pegasus to use FreeIPA's host-based access control rules through the SSSD. I'll post an update here when it's ready for review and editing.

• "For OpenLMI to work correctly you need to assign a unique name

to each server ...." -> "unique *host* name"

Good work!

Jan _______________________________________________ openlmi-devel mailing list openlmi-devel@lists.fedorahosted.org https://lists.fedorahosted.org/mailman/listinfo/openlmi-devel

On Mon, 24 Mar 2014 15:19:19 +0100 Jan Safranek jsafrane@redhat.com wrote:

On 03/24/2014 02:41 PM, Tomáš Smetana wrote:

...

Hi, I have copied and formatted Russ' QuickStart here: http://www.openlmi.org/node/62

It should be less verbose and more up-to-date. Please review the new text and once I stop receiving complaints and update requests I'll replace the old QuickStart with this one.

It looks much better than the older one. Just few remarks:

• A link to generic overview (with a picture!) would be helpful.

Yes. We don't have a nice picture though...

• Write somewhere that's Fedora-specific guide, other distros may vary.

Added as the first sentence to the article.

• "You may need to set SELinux to permissive mode" - it should be

possible to run OpenLMI in enforcing now. And it's bug if it is not. So, just mention that OpenLMI works well with SELinux and common precautions should be made when something does not work and SELinux logs should be checked (and bugs reported).

OK.

• Some markup around 'pegasus' user and 'passwd pegasus' commands etc

would be nice, now it's hard to read what's command and what's explanation.

OK. I've tried to format that paragraph somehow better...

• "configuring OpenPegasus to use other users is beyond the scope of

this article" - a link to a detailed guide would be helpful. Perhaps /usr/share/doc/tog-pegasus/Admin_Guide_Release.pdf and /usr/share/doc/tog-pegasus/README.RedHat.Security?

I'll find them online and see what I could do.

• "For OpenLMI to work correctly you need to assign a unique name to

each server ...." -> "unique *host* name"

OK.

The page has been updated with

Thanks and regards,

On 03/24/2014 05:53 PM, Jan Safranek wrote:

On 03/24/2014 04:37 PM, Tomáš Smetana wrote:

...

...

• Some markup around 'pegasus' user and 'passwd pegasus' commands etc

would be nice, now it's hard to read what's command and what's explanation.

OK. I've tried to format that paragraph somehow better...

cau, neco se rozbilo a muj chrome neukazuje _zadne_ formatovani v celem clanku...

oops, sorry for Czech, that should have been sent privately.

/me heads home for some rest.