[Freeipa-devel] [PATCH] Add DS to IPA migration plugin and password migration page.

Dmitri Pal dpal at redhat.com
Fri Oct 30 20:25:02 UTC 2009


Simo Sorce wrote:
> On Fri, 2009-10-30 at 15:57 -0400, Rob Crittenden wrote:
>   
>> The message is not configurable, it just says that something is
>> trying 
>> to modify your user preferences.
>>     
>
> And rightly so, this is a security warning. If it were modifiable a
> rogue server could change the message to ask: "do you like bacon ?"
> To which *everyone* would have to answer Yes :-)
>
> Simo.
>
>   
Modifiable by the program no, I agree. But configurable centrally on per
server basis why not?
I would say that it would be nice to be able to configure FF centrally to:

* Automatically accept cert from IPA.
* Have a right configuration in the preferences for kerberos

I think it all boils down to enhancements to FF.
Let me see what I can do about it.

-- 
Thank you,
Dmitri Pal

Engineering Manager IPA project,
Red Hat Inc.


-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/




More information about the Freeipa-devel mailing list