[Freeipa-devel] [PATCH] 284 per-group password policy

[Rob Crittenden]

Add support for per-group kerberos password policy.

This uses a Class of Service to based on group membership to determine 
which policy should apply. The design doc called for non-overlapping 
groups but we can support that with cospriority.

You can pass a user to the pwpolicy plugin to see what policy applies to 
them to help debug overlapping issues if they come up.

rob
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-284-pwpolicy.patch
Type: application/mbox
Size: 21184 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20091002/5aca7c04/attachment.mbox>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3245 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20091002/5aca7c04/attachment.bin>