[Freeipa-devel] [PATCH] 284 per-group password policy

[Pavel Zuna]

Rob Crittenden wrote:
> Add support for per-group kerberos password policy.
> 
> This uses a Class of Service to based on group membership to determine 
> which policy should apply. The design doc called for non-overlapping 
> groups but we can support that with cospriority.
> 
> You can pass a user to the pwpolicy plugin to see what policy applies to 
> them to help debug overlapping issues if they come up.
> 
> rob
ack.

You could have taken my latest pwpolicy plugin as a base for this, but no big 
deal  - I'll merge the changes and post an updated version. :)

Pavel