[Freeipa-devel] [PATCH] restrict setkeytab operation

[Rob Crittenden]

Simo Sorce wrote:
> As described in #232 start restricting the use of the setkeytab
> operation to just the computers objects.
>
> I haven't tested this with older RHEL/CentOS machines that actully use
> the setkeytab operation as I do not have such an old VM handy right now.
>
> Meanwhile I'd like to know if ppl agree with this approach.

What about services?

rob