From 3aca4469af228bdc78c194751f0d19b6454e9f3e Mon Sep 17 00:00:00 2001 From: Simo Sorce Date: Tue, 24 Nov 2015 14:02:01 -0500 Subject: Disable User's ability to use the setkeytab exop. Users can still obtain a keytab for themselves using the getkeytab exop which does not circumvent password policy checks. Users are disallowed from using setkeytab by default in new installations but not in existing installations (no forced upgrade). Signed-off-by: Simo Sorce Ticket: https://fedorahosted.org/freeipa/ticket/5485 --- VERSION | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'VERSION') diff --git a/VERSION b/VERSION index b7f261b5c..d6c489fff 100644 --- a/VERSION +++ b/VERSION @@ -90,5 +90,5 @@ IPA_DATA_VERSION=20100614120000 # # ######################################################## IPA_API_VERSION_MAJOR=2 -IPA_API_VERSION_MINOR=161 -# Last change: pvoborni - topologysuffix: change iparepltopomanagedsuffix type +IPA_API_VERSION_MINOR=162 +# Last change: simo - Disable User's ability to use the setkeytab exop. -- cgit