[Freeipa-devel] [PATCH] 435 Do not add kadmin/changepw ACIs on new installs

[Martin Kosek]

These ACI were needed when FreeIPA had a custom ipa_kpasswd daemon,
now that a standard kadmin is used, ACIs are not needed anymore as
kadmin uses the same driver as the KDC.

The ACIs is not removed on upgrades to avoid breaking older
replicas which may still use FreeIPA version with the ipa_kpasswd
daemon.

https://fedorahosted.org/freeipa/ticket/3987

--

Pushed to master, ipa-3-3 as a tested one(two) liner.

Martin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mkosek-435-do-not-add-kadmin-changepw-acis-on-new-installs.patch
Type: text/x-patch
Size: 5776 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20131025/3643a85e/attachment.bin>