[Freeipa-devel] Design Review Keytab Retrieval

[Nathaniel McCallum]

On Fri, 2014-06-20 at 15:50 -0400, Nathaniel McCallum wrote:
> On Mon, 2014-06-16 at 11:34 -0400, Simo Sorce wrote:
> > Although the code is all done it would be nice to have a review of the
> > feature, to see if it has all been captured:
> > http://www.freeipa.org/page/V4/Keytab_Retrieval
> 
> Is there any need to create different permissions for password
> generation vs random generation? I think the answer is no because the
> only risk is a substandard password which you can control with password
> policy. I just wanted to bring it up.

Other than this question and the ASN.1 issue, I am very happy with the
design. The new permissions ACI style looks very useful.

Nathaniel