[1888] in Moira
AD/Moira Meeting Results
daemon@ATHENA.MIT.EDU (Danilo Almeida)
Tue Oct 30 14:49:42 2001
Message-ID: <198901c1617b$cf6f63e0$1b011212@mit.edu>
From: "Danilo Almeida" <dalmeida@MIT.EDU>
To: <pismere-team@mit.edu>, <moiradev@mit.edu>
Date: Tue, 30 Oct 2001 14:48:13 -0500
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
We talked about the various issues in data replication into AD from Moira
and the data warehouse.
With respect to machines in groups, one basic problem we have is how to make
Moira the canonical source for that information in light of our current need
to delete machines from AD in reinstalls. We don't want to have to do that
because we'd then get a new SID for the machine when it gets
reinstalled...thus breaking any ACLs that machine might be on.
Dave Stevens at CMU is a good resource for RIS info. He does reinstalls w/o
deleting the machine. He may be able to help us.
We need a document on the current schema mappings between AD and Moira/Data
Warehouse.
We talked about the ACL issues with respect to group policy. How do we
control who can create group policies? The roles database may be able to
provide that kind of information. Note that creating group policies is
different from being able to link (apply) it into a container.
We should look to the Win2k Higher Ed list to see what others are doing in
this space.
TODO:
zacheiss - Investigate adding machines in groups in Moira
dtanner - Document on current Schema Mappings and the various propagation
programs currently in use. The document will also include a reference
to the Moira schema and directions on getting the AD schema. The
document will go in pismere/doc/site/moira for now.
pbh - Provide Dave with detailed instructions (a script?) on getting the AD
schema so that Dave can put this info in the document. Also look into
the state of the roles database and whether we may be able to use it.
dalmeida - Play with RIS. Determine whether we can pre-populate machines
into AD before RISing them. Figure out how to eliminate need to delete
machines from AD when re-RISing. Also take into account what happens
if a machine gets installed as "a.mit.edu" then the user changes
the hardware and re-RISes. Talk to Dave Stevens.
jcalz - Keep a running document (in pismere/doc/site/moira?) on the issues
that crop up in relation to schema mappings, especially with respect
to machines and containers. This includes things like ACLs on
containers as well as various properties on objects (such as
descriptions, etc.).
- Danilo
