[Freeipa-devel] [PATCH 0061] Remove 50-lockout-policy.update file

[Alexander Bokovoy]

On Thu, 29 Oct 2015, Gabe Alford wrote:
>Hello,
>
>Fix for https://fedorahosted.org/freeipa/ticket/5418
ACK but can you please add something like this in the commit message:

----
Remove lockout policy update file because all currently supported
FreeIPA versions already have krbPwdMaxFailure defaulting to 6 and
krbPwdLockoutDuration defaulting to 600.

Keeping lockout policy update file prevents from creating a more strict
policy in environments where it is subject to regulatory compliance.
----

>
>Thanks,
>
>Gabe

>From 7a9086162717bc414a1d65ea71a2d65729f6fa7e Mon Sep 17 00:00:00 2001
>From: Gabe <redhatrises at gmail.com>
>Date: Thu, 29 Oct 2015 20:30:35 -0600
>Subject: [PATCH] Remove 50-lockout-policy.update file
>
>https://fedorahosted.org/freeipa/ticket/5418
>---
> install/updates/50-lockout-policy.update | 4 ----
> install/updates/Makefile.am              | 1 -
> 2 files changed, 5 deletions(-)
> delete mode 100644 install/updates/50-lockout-policy.update
>
>diff --git a/install/updates/50-lockout-policy.update b/install/updates/50-lockout-policy.update
>deleted file mode 100644
>index a5730709e2b649466118502ece1cc530c10e0b40..0000000000000000000000000000000000000000
>--- a/install/updates/50-lockout-policy.update
>+++ /dev/null
>@@ -1,4 +0,0 @@
>-dn: cn=global_policy,cn=$REALM,cn=kerberos,$SUFFIX
>-replace:krbPwdLockoutDuration:10::600
>-replace: krbPwdMaxFailure:3::6
>-
>diff --git a/install/updates/Makefile.am b/install/updates/Makefile.am
>index 26e4c04ed66a4a2061a3bb3ca2f4a6cd84502598..04ddeb96de4e88d5909f13b13885d3207184e798 100644
>--- a/install/updates/Makefile.am
>+++ b/install/updates/Makefile.am
>@@ -39,7 +39,6 @@ app_DATA =				\
> 	45-roles.update			\
> 	50-7_bit_check.update	        \
> 	50-dogtag10-migration.update	\
>-	50-lockout-policy.update	\
> 	50-groupuuid.update		\
> 	50-hbacservice.update		\
> 	50-krbenctypes.update		\
>-- 
>2.4.3
>

>-- 
>Manage your subscription for the Freeipa-devel mailing list:
>https://www.redhat.com/mailman/listinfo/freeipa-devel
>Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code


-- 
/ Alexander Bokovoy