[Freeipa-devel] [PATCH 0066] Make ipatokenTOTPwatermark a required attribute

[Simo Sorce]

On Thu, 18 Sep 2014 13:56:44 -0400
Nathaniel McCallum <npmccallum at redhat.com> wrote:

> -objectClasses:  (2.16.840.1.113730.3.8.16.2.2  NAME 'ipatokenTOTP'
> SUP ipaToken STRUCTURAL DESC 'TOTP Token Type' MUST (ipatokenOTPkey $
> ipatokenOTPalgorithm $ ipatokenOTPdigits $ ipatokenTOTPclockOffset $
> ipatokenTOTPtimeStep) MAY (ipatokenTOTPwatermark) X-ORIGIN 'IPA OTP')
> +objectClasses:  (2.16.840.1.113730.3.8.16.2.2  NAME 'ipatokenTOTP'
> SUP ipaToken STRUCTURAL DESC 'TOTP Token Type' MUST (ipatokenOTPkey $
> ipatokenOTPalgorithm $ ipatokenOTPdigits $ ipatokenTOTPclockOffset $
> ipatokenTOTPtimeStep $ ipatokenTOTPwatermark) X-ORIGIN 'IPA OTP')

NACK, you cannot move from MAY to MUST.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York