[OpenAFS] Selecting a configuration file format for OpenAFS Services

Derrick Brashear shadow@gmail.com
Sat, 16 May 2009 20:57:02 -0400


Derrick


On May 16, 2009, at 12:39 PM, David Boyes <dboyes@sinenomine.net> wrote:

> On 5/16/09 12:33 AM, "Jeffrey Altman" <jaltman@secure-endpoints.com>  
> wrote:
>> OpenAFS does not have a configuration file for use by  
>> administrators to
>> configure the various services.  As a result, each time a new
>> configuration option is created it has been implemented either as a
>> compile time option or a run time option controlled by a command-line
>> switch.  The gatekeepers are opposed to the addition of new compile  
>> time
>> options because it puts packagers in the position of determining what
>> features administrators and end users are able to deploy without
>> building from source.  However, additional command-line parameters  
>> have
>> their own complexity issues.  For example, the current fileserver
>> command line has approximate forty options; many of which are no  
>> longer
>> optional for reasonable deployment configurations.
>
> Rather than scattering configuration around in files, I'd like to  
> see a
> configuration daemon that maintained the configurations for the  
> various
> pieces. A single command line argument identifying a set of  
> addresses to
> contact a config daemon would make this very simple to implement,  
> and the
> config daemon could be a simple "connect, id yourself, receive your  
> config,
> disconnect" operation. Would make configuration management a lot  
> simpler.

spoofable, or do you think we *never* need to configure encryption?