diff options
| author | Simo Sorce <simo@redhat.com> | 2015-11-24 13:42:10 -0500 |
|---|---|---|
| committer | Simo Sorce <simo@redhat.com> | 2015-12-02 16:14:03 -0500 |
| commit | bde182421226bb32ab676c13a85bc95a2572f322 (patch) | |
| tree | 616b1a991bf03dbfde0766b104e119486a29d2c3 /ipalib/plugins/config.py | |
| parent | c6264b4344021b368077ffd2fee70f8541c2953f (diff) | |
| download | freeipa-bde182421226bb32ab676c13a85bc95a2572f322.tar.gz freeipa-bde182421226bb32ab676c13a85bc95a2572f322.tar.xz freeipa-bde182421226bb32ab676c13a85bc95a2572f322.zip | |
Introduce option to disable the SetKeytab exop
If DisableSetKeytab is set in ipaConfig options then setkeytab will not be
available. The default is still to allow this operation for backwards
compatibility towards older clients that do not know how to use the new
GetKeytab extended operation.
Signed-off-by: Simo Sorce <simo@redhat.com>
Ticket: https://fedorahosted.org/freeipa/ticket/5485
Diffstat (limited to 'ipalib/plugins/config.py')
| -rw-r--r-- | ipalib/plugins/config.py | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/ipalib/plugins/config.py b/ipalib/plugins/config.py index 86b7ca863..ce7966bf5 100644 --- a/ipalib/plugins/config.py +++ b/ipalib/plugins/config.py @@ -201,6 +201,7 @@ class config(LDAPObject): label=_('Password plugin features'), doc=_('Extra hashes to generate in password plug-in'), values=(u'AllowNThash', + u'DisableSetKeytab', u'KDC:Disable Last Success', u'KDC:Disable Lockout'), csv=True, ), |