[Freeipa-devel] [PATCH] 284 per-group password policy

Jason Gerard DeRose jderose at redhat.com
Mon Oct 5 19:37:27 UTC 2009


On Fri, 2009-10-02 at 16:07 +0200, Pavel Zuna wrote:
> Rob Crittenden wrote:
> > Add support for per-group kerberos password policy.
> > 
> > This uses a Class of Service to based on group membership to determine 
> > which policy should apply. The design doc called for non-overlapping 
> > groups but we can support that with cospriority.
> > 
> > You can pass a user to the pwpolicy plugin to see what policy applies to 
> > them to help debug overlapping issues if they come up.
> > 
> > rob
> ack.
> 
> You could have taken my latest pwpolicy plugin as a base for this, but no big 
> deal  - I'll merge the changes and post an updated version. :)
> 
> Pavel

ack.  pushed to master.




More information about the Freeipa-devel mailing list