[Freeipa-devel] Design Review Keytab Retrieval
Simo Sorce
simo at redhat.com
Fri Jun 20 20:08:53 UTC 2014
On Fri, 2014-06-20 at 15:55 -0400, Nathaniel McCallum wrote:
> On Fri, 2014-06-20 at 15:50 -0400, Nathaniel McCallum wrote:
> > On Mon, 2014-06-16 at 11:34 -0400, Simo Sorce wrote:
> > > Although the code is all done it would be nice to have a review of the
> > > feature, to see if it has all been captured:
> > > http://www.freeipa.org/page/V4/Keytab_Retrieval
> >
> > Is there any need to create different permissions for password
> > generation vs random generation? I think the answer is no because the
> > only risk is a substandard password which you can control with password
> > policy. I just wanted to bring it up.
>
> Other than this question and the ASN.1 issue, I am very happy with the
> design. The new permissions ACI style looks very useful.
Thanks, I changed the page to reflect the new controls too.
Simo.
--
Simo Sorce * Red Hat, Inc * New York
More information about the Freeipa-devel
mailing list