[Freeipa-devel] [PATCH] allow password changes to be delegated

Simo Sorce ssorce at redhat.com
Mon Mar 24 15:34:37 UTC 2008


On Mon, 2008-03-24 at 10:54 -0400, Rob Crittenden wrote:
> We are really changing the kerberos principal key and not the
> password 
> when we do updates, so use the right terminology internally. Also fix 
> the actual field we update (and grant permission appropriately in 
> delegations).
> 
> The DS password handles updating userPassword and any Samba passwords
> as necessary.
> 
> This was driven from the fact that a delegated password change would 
> fail because of incorrect permissions.

ack

-- 
Simo Sorce * Red Hat, Inc * New York




More information about the Freeipa-devel mailing list