diff options
| author | Simo Sorce <simo@redhat.com> | 2015-11-24 14:02:01 -0500 |
|---|---|---|
| committer | Simo Sorce <simo@redhat.com> | 2015-12-11 15:20:52 -0500 |
| commit | 49b1d167ec3a39328630a8febd247ce48f2d8dce (patch) | |
| tree | 49e75f12ff667890f68ea2b9b5a4bf629e2d34ed /ipa-python/ipa-python.spec | |
| parent | 347fb7cea4676e61cb4d50ce5448bbd0842fd4d1 (diff) | |
| download | freeipa-49b1d167ec3a39328630a8febd247ce48f2d8dce.tar.gz freeipa-49b1d167ec3a39328630a8febd247ce48f2d8dce.tar.xz freeipa-49b1d167ec3a39328630a8febd247ce48f2d8dce.zip | |
Disable User's ability to use the setkeytab exop.
Users can still obtain a keytab for themselves using the getkeytab exop
which does not circumvent password policy checks.
Users are disallowed from using setkeytab by default in new installations
but not in existing installations (no forced upgrade).
Signed-off-by: Simo Sorce <simo@redhat.com>
Ticket: https://fedorahosted.org/freeipa/ticket/5485
Diffstat (limited to 'ipa-python/ipa-python.spec')
0 files changed, 0 insertions, 0 deletions