<div dir="ltr"><div>Can do Alexander. Here is the updated patch.<br><br><br></div>Gabe<br></div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Oct 30, 2015 at 12:56 AM, Alexander Bokovoy <span dir="ltr"><<a href="mailto:abokovoy@redhat.com" target="_blank">abokovoy@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">On Thu, 29 Oct 2015, Gabe Alford wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Hello,<br>
<br>
Fix for <a href="https://fedorahosted.org/freeipa/ticket/5418" rel="noreferrer" target="_blank">https://fedorahosted.org/freeipa/ticket/5418</a><br>
</blockquote></span>
ACK but can you please add something like this in the commit message:<br>
<br>
----<br>
Remove lockout policy update file because all currently supported<br>
FreeIPA versions already have krbPwdMaxFailure defaulting to 6 and<br>
krbPwdLockoutDuration defaulting to 600.<br>
<br>
Keeping lockout policy update file prevents from creating a more strict<br>
policy in environments where it is subject to regulatory compliance.<br>
----<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<br>
Thanks,<br>
<br>
Gabe<br>
</blockquote>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
>From 7a9086162717bc414a1d65ea71a2d65729f6fa7e Mon Sep 17 00:00:00 2001<br>
From: Gabe <<a href="mailto:redhatrises@gmail.com" target="_blank">redhatrises@gmail.com</a>><br>
Date: Thu, 29 Oct 2015 20:30:35 -0600<br>
Subject: [PATCH] Remove 50-lockout-policy.update file<br>
<br>
<a href="https://fedorahosted.org/freeipa/ticket/5418" rel="noreferrer" target="_blank">https://fedorahosted.org/freeipa/ticket/5418</a><br>
---<br>
install/updates/50-lockout-policy.update | 4 ----<br>
install/updates/Makefile.am | 1 -<br>
2 files changed, 5 deletions(-)<br>
delete mode 100644 install/updates/50-lockout-policy.update<br>
<br>
diff --git a/install/updates/50-lockout-policy.update b/install/updates/50-lockout-policy.update<br>
deleted file mode 100644<br>
index a5730709e2b649466118502ece1cc530c10e0b40..0000000000000000000000000000000000000000<br>
--- a/install/updates/50-lockout-policy.update<br>
+++ /dev/null<br>
@@ -1,4 +0,0 @@<br>
-dn: cn=global_policy,cn=$REALM,cn=kerberos,$SUFFIX<br>
-replace:krbPwdLockoutDuration:10::600<br>
-replace: krbPwdMaxFailure:3::6<br>
-<br>
diff --git a/install/updates/Makefile.am b/install/updates/Makefile.am<br>
index 26e4c04ed66a4a2061a3bb3ca2f4a6cd84502598..04ddeb96de4e88d5909f13b13885d3207184e798 100644<br>
--- a/install/updates/Makefile.am<br>
+++ b/install/updates/Makefile.am<br>
@@ -39,7 +39,6 @@ app_DATA = \<br>
45-roles.update \<br>
50-7_bit_check.update \<br>
50-dogtag10-migration.update \<br>
- 50-lockout-policy.update \<br>
50-groupuuid.update \<br>
50-hbacservice.update \<br>
50-krbenctypes.update \<br>
-- <br>
2.4.3<br>
<br><span class="HOEnZb"><font color="#888888">
</font></span></blockquote><span class="HOEnZb"><font color="#888888">
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
-- <br>
Manage your subscription for the Freeipa-devel mailing list:<br>
<a href="https://www.redhat.com/mailman/listinfo/freeipa-devel" rel="noreferrer" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-devel</a><br>
Contribute to FreeIPA: <a href="http://www.freeipa.org/page/Contribute/Code" rel="noreferrer" target="_blank">http://www.freeipa.org/page/Contribute/Code</a><br>
</blockquote>
<br>
<br>
-- <br>
/ Alexander Bokovoy<br>
</font></span></blockquote></div><br></div>