Simo Sorce wrote: > With the transition to ipa-kdb and krb5 1.10 policy cheks were missing > as they are implemented at the driver level. > > This patch adds policy checks back. > > Fixes https://fedorahosted.org/freeipa/ticket/2393 > > Simo. ACK, pushed to master and ipa-2-2 rob