[Freeipa-devel] [freeipa PR#345][comment] ipa-kdb: search for password policies globally

[simo5]

  URL: https://github.com/freeipa/freeipa/pull/345
Title: #345: ipa-kdb: search for password policies globally

simo5 commented:
"""
I know this is already closed but NACK.
The problem here is in searching "base"
this means ending up serhing also in things like slapi-nis.
We need to change the code to search in cn=REALM, and, if that fails, search again in cn=accounts.

I do not know if we should revert or just patch on top.
"""

See the full comment at https://github.com/freeipa/freeipa/pull/345#issuecomment-267571798