Re: PCI SSL TLS certificate requirements change

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Fri, 2016-01-08 at 15:40 +0000, Mayberry, Alexander wrote:
> William, we plan to have RH Engineers come on site to help with the
> planning/deployment of RHDS. I'm planning to use RHEL7 and whatever
> the latest RHDS version is, unless someone tells me of some reason
> why an older version would be better suited.

Actually, I wanted to ensure you were planning to move to RHEL7 : The
version of 389-ds in RHEL7 should support the SSL features I discussed
that are key to your concerns.

> 
> I need to get my head around what actually needs to happen before
> they arrive, and hopefully minimize the time it takes for them to
> explain things to me.

> If it makes sense to wait for this event, and ensure the new RHDS
> systems are up to spec, and leave the existing systems alone until
> they are decommissioned, that's a very clean and manageable way to
> proceed in my view.

I'll let the RH engineers / consultants advise you on this, but I would
assume (and hope) the upgrade path they suggest is:

You have you existing Masters A and B.

You create new Masters C and D.

You put all 4 into replication group.

Apply the SSL settings discussed here to C and D.

Then you would put C and D into production alongside A and B.

Wait and test.

Then remove A and B from production for a period of time before you
decommision them.

> 
> Thanks for your insight, and info, I appreciate it.
> 

Any time! 

-- 
Sincerely,

William Brown
Software Engineer
Red Hat, Brisbane

Attachment: signature.asc
Description: This is a digitally signed message part

--
389 users mailing list
389-users@%(host_name)s
http://lists.fedoraproject.org/admin/lists/389-users@xxxxxxxxxxxxxxxxxxxxxxx

[Index of Archives]     [Fedora User Discussion]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [Fedora News]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Maintainers]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Legacy]     [Fedora Desktop]     [Fedora Fonts]     [ATA RAID]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Centos]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora QA]     [Fedora Triage]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Tux]     [Yosemite News]     [Yosemite Photos]     [Linux Apps]     [Maemo Users]     [Gnome Users]     [KDE Users]     [Fedora Tools]     [Fedora Art]     [Fedora Docs]     [Maemo Users]     [Asterisk PBX]     [Fedora Sparc]     [Fedora Universal Network Connector]     [Fedora ARM]

  Powered by Linux