On Tue, 2012-06-26 at 14:48 -0400, Rob Crittenden wrote: > Martin Kosek wrote: > > ipaNTHash contains security sensitive information, it should be hidden just > > like other password attributes. As a part of preparation for ticket #2511, > > the ACI allowing global access is also updated to hide DNS zones. > > > > https://fedorahosted.org/freeipa/ticket/2856 > > There is a comment referencing the DNS work. Fix that and ACK. > > rob
As agreed with Rob on IRC, this comment was left there on purpose so that it is obvious why I also added the (target != ...) part to the global allow ACI. Pushed to master as-is. Martin _______________________________________________ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel