Re: [Freeipa-devel] User life cycle: authentication and preserved attributes

2014-06-19 Thread Simo Sorce
On Thu, 2014-06-19 at 17:32 +0200, thierry bordaz wrote: > On 06/19/2014 03:41 PM, Simo Sorce wrote: > > On Thu, 2014-06-19 at 15:32 +0200, thierry bordaz wrote: > >> (those values must be active DN entries) > >> userPassword/krb keys: copied from source entry if >

Re: [Freeipa-devel] User life cycle: authentication and preserved attributes

2014-06-19 Thread thierry bordaz
On 06/19/2014 03:41 PM, Simo Sorce wrote: On Thu, 2014-06-19 at 15:32 +0200, thierry bordaz wrote: (those values must be active DN entries) userPassword/krb keys: copied from source entry if they exists Uhmm this may actually fail, as we preven

Re: [Freeipa-devel] User life cycle: authentication and preserved attributes

2014-06-19 Thread Simo Sorce
On Thu, 2014-06-19 at 15:32 +0200, thierry bordaz wrote: > (those values must be active DN entries) > userPassword/krb keys: copied from source entry if > they > exists Uhmm this may actually fail, as we prevent storing pre-hashed passwords :/ We'll