Re: [Freeipa-devel] [freeipa] #6002: Default CA can be used without an ACL

2016-07-20 Thread Jan Cholasta
On 19.7.2016 09:01, Fraser Tweedale wrote: On Tue, Jul 19, 2016 at 08:26:22AM +0200, Jan Cholasta wrote: Hi, On 4.7.2016 09:06, Fraser Tweedale wrote: On Tue, Jun 28, 2016 at 01:47:23PM -, freeipa wrote: #6002: Default CA can be used without an ACL Comment (by ftweedal): This is expect

Re: [Freeipa-devel] [freeipa] #6002: Default CA can be used without an ACL

2016-07-19 Thread Fraser Tweedale
On Tue, Jul 19, 2016 at 08:26:22AM +0200, Jan Cholasta wrote: > Hi, > > On 4.7.2016 09:06, Fraser Tweedale wrote: > > On Tue, Jun 28, 2016 at 01:47:23PM -, freeipa wrote: > > > #6002: Default CA can be used without an ACL > > > > > > Comment (by ftweedal): > > > > > > This is expected behav

Re: [Freeipa-devel] [freeipa] #6002: Default CA can be used without an ACL

2016-07-18 Thread Jan Cholasta
Hi, On 4.7.2016 09:06, Fraser Tweedale wrote: On Tue, Jun 28, 2016 at 01:47:23PM -, freeipa wrote: #6002: Default CA can be used without an ACL Comment (by ftweedal): This is expected behaviour; if a CA ACL does not reference any CAs, and does not have cacat=all, then it is assumed to r

Re: [Freeipa-devel] [freeipa] #6002: Default CA can be used without an ACL

2016-07-04 Thread Fraser Tweedale
On Tue, Jun 28, 2016 at 01:47:23PM -, freeipa wrote: > #6002: Default CA can be used without an ACL > > Comment (by ftweedal): > > This is expected behaviour; if a CA ACL does not reference any CAs, > and does not have cacat=all, then it is assumed to refer to the > default CA. This is fo