[Freeipa-devel] [PROPOSAL] Kerberos flags

[Jan Cholasta]

On 12.3.2013 17:24, Simo Sorce wrote:
> On Tue, 2013-03-12 at 17:02 +0100, Jan Cholasta wrote:
>> Why can't we set the bitfield (krbTicketFlags) directly? (There is an
>> ACI preventing that, I'm just wondering what is the reason for this.)
>
> If you tell me who 'we' is (as in what user would set it) I can tell you
> why it is/isn't possible.

Why no IPA user (including admins) can set the attribute?

>
> Simo.
>

-- 
Jan Cholasta