[Freeipa-devel] [PATCH] 282 update the KDC aci

[Jason Gerard DeRose]

On Fri, 2009-10-02 at 09:37 -0400, Rob Crittenden wrote:
> The API protecting the kerberos master key was a bit broad, also 
> preventing adds and deletes to its subtree. I've relaxed that so I can 
> add password policy entries which must be stored under the realm entry.
> 
> I also changed the formatting of the code. It was getting written to the 
> DS with leading and trailing \n causing DS to base64-encode the value 
> when displaying it. I'm hoping this wasn't done on purpose :-)
> 
> rob

ack.  pushed to master.