Simo Sorce wrote:
> On Fri, 15 Oct 2010 17:27:07 -0400
> Rob Crittenden <rcrit...@redhat.com> wrote:
>
>   
>> Remove the enrolledBy when a host is unenrolled (which is the same as 
>> disabling the host).
>>
>> ticket 301
>>
>> rob
>>     
>
> nack, if host can write enrolledBy it can fake info
>
> Simo.
>
>   
I agree. I think it should be "delete" rather than "write".

-- 
Thank you,
Dmitri Pal

Engineering Manager IPA project,
Red Hat Inc.


-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/

_______________________________________________
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel

Reply via email to