diff options
| author | Rob Crittenden <rcritten@redhat.com> | 2009-10-02 09:30:16 -0400 |
|---|---|---|
| committer | Jason Gerard DeRose <jderose@redhat.com> | 2009-10-05 13:29:55 -0600 |
| commit | dac224c25a2ff8a1400d0a746f600f81cfad6901 (patch) | |
| tree | bbdb2882717b5f47e39810b8e5d2c504f08f0e6e /ipalib/__init__.py | |
| parent | 97dfa586dea42d44ad8e1d9148547fd805abd046 (diff) | |
| download | freeipa-dac224c25a2ff8a1400d0a746f600f81cfad6901.tar.gz freeipa-dac224c25a2ff8a1400d0a746f600f81cfad6901.tar.xz freeipa-dac224c25a2ff8a1400d0a746f600f81cfad6901.zip | |
Add support for per-group kerberos password policy.
Use a Class of Service template to do per-group password policy. The
design calls for non-overlapping groups but with cospriority we can
still make sense of things.
The password policy entries stored under the REALM are keyed only on
the group name because the MIT ldap plugin can't handle quotes in the
DN. It also can't handle spaces between elements in the DN.
Diffstat (limited to 'ipalib/__init__.py')
0 files changed, 0 insertions, 0 deletions