[Freeipa-devel] [PATCH] 483 disable service/host

Pavel Zuna pzuna at redhat.com
Tue Jul 13 12:40:35 UTC 2010


On 07/12/2010 11:48 PM, Rob Crittenden wrote:
> This patch supercedes patch 479 which is now defunct. It relies on patch
> 481.
>
> Add API to delete a service principal key, service-disable and
> host-disable. This is so an admin can essentially revoke a service
> principal without deleting it (a host stores its own host service
> principal).
>
> I pulled usercertificate out of the global params and put into each
> appropriate function because it makes no sense for service-disable.
>
> This also adds a new output parameter, has_keytab. It is a boolean that
> indicates whether the entry has a kerberos principal key (or at least
> our best guess at it).
>
> rob
ACK.

Pavel




More information about the Freeipa-devel mailing list