[Freeipa-devel] [PATCH] 581 remove enrolledBy when unenrolled

[Dmitri Pal]

Simo Sorce wrote:
> On Fri, 15 Oct 2010 17:27:07 -0400
> Rob Crittenden <rcritten at redhat.com> wrote:
>
>   
>> Remove the enrolledBy when a host is unenrolled (which is the same as 
>> disabling the host).
>>
>> ticket 301
>>
>> rob
>>     
>
> nack, if host can write enrolledBy it can fake info
>
> Simo.
>
>   
I agree. I think it should be "delete" rather than "write".

-- 
Thank you,
Dmitri Pal

Engineering Manager IPA project,
Red Hat Inc.


-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/