On Mon, 2012-06-25 at 16:23 -0400, Rob Crittenden wrote: > Simo Sorce wrote: > > ----- Original Message ----- > >> This patch is more a WIP than anything. I want to see if I'm on the > >> right track. > > > > Hi Rob, > > I don't think we need ipaDefaultKrbAuthzData, we can use the same attribute > > both in ipaGuiConfig and ipaService, where it is placed makes the > > difference. > > > > You haven't changed ipaService in the base ldif. > > On new installs the updates are still applied, gets added.
Sure it 'works' but the ldif files are now incomplete and slightly misleading, is there a good reason to not update them ? > > The 'UNIX-PAC' curent name is 'PAD' for Posix Authorization Data, we can > > call it 'PAD' in the pac_type field I think. > > Ok done. > > The ticket mentions something about marking some as critical. Is that > within the scope of this? I'm not sure what you had in mind for that. It is for the multi-PAC case, where we may decide to not attach stuff if the ticket become too big. But I think we should defer that part for later, when we will have multiple formats. Simo. -- Simo Sorce * Red Hat, Inc * New York _______________________________________________ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel