Chris St. Pierre wrote: > On Tue, 31 Mar 2009, Rich Megginson wrote: > >> Here are some features we are considering for the next major version >> (tentatively called 1.3). These are not in any particular order, and >> this is quite an ambitious list, so we're not likely to complete all >> of these in a single release. We would appreciate your help in >> prioritizing this list, filling in any missing details, helping with >> requirements/design/coding/testing/docs, and letting us know if there >> are other features which would be nice to have. > > The "Security Enhancements" section contains several particularly > important items, particularly the ability to disallow plain text > binds. That gets asked for quite frequently on IRC. > > The named pipe for logging is needed, too; I helped one FDS user who > was using my Fedora DS Graph, but FDS produced such an enormous volume > of log information that the Perl File::Tail module I use in Fedora DS > Graph literally couldn't read the entire log before it was rotated. I > remember mentioning that using a named pipe could very well solve the > problem -- particularly if it could be put on a RAM disk, e.g. > > If syntax validation checking is added (which I support), there should > be three modes, much like SELinux: Enforcing (syntax checking enabled, > invalid values not allowed), Permissive (syntax checking enabled, > invalid values permitted but a warning raised in the log), and > Disabled. Additionally, there should be a way to check entire > branches of an LDAP tree for syntax compliance -- i.e., a > comprehensive auditing tool beyond just enabling Permissive mode and > watching the logs. Thanks - I've added these notes to http://directory.fedoraproject.org/wiki/Roadmap#Version_1.3 Anyone else? C'mon - surely you have an opinion about a new feature. > > Thanks for all your hard work on this! > > Chris St. Pierre > Unix Systems Administrator > Nebraska Wesleyan University > > -- > Fedora-directory-users mailing list > Fedora-directory-users at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3258 bytes Desc: S/MIME Cryptographic Signature Url : http://lists.fedoraproject.org/pipermail/389-users/attachments/20090408/ed90f36e/attachment.bin
