[Freeipa-devel] [PATCH] Use more krb

[Kevin McCarthy]

Simo Sorce wrote:
> This patch changes a bit of code to rely more on kerberos.
> 
> It also changes ipa-adduser to something I think is a more useful
> workflow, it does not require an email for example as we don't need it.
> Instead it allows passing a principal name in case you need to create
> specific one or want to avoid conflicts with an exiting one.
> 
> This patch also removes some classes we don't want to use by default for
> users.
> 
> Note: this patch may not apply cleanly as a pull from upstream after the
> commit required me a merge. I have the merge patch in my tree so just
> ack/nack it and I will push both the patch and the merge patch at the
> same time.

I hadn't put the password setting code into Add User yet.  Should I be
prompting them for the principal?

If not, how shall I call modifyPassword after creating the user?  I
suppose I can query the user back after creating it to get the
principal.

-Kevin

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 4054 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20071001/b810e94b/attachment.bin>