[Freeipa-devel] [PATCH] 1028 service pac types

[Simo Sorce]

On Mon, 2012-06-25 at 16:23 -0400, Rob Crittenden wrote:
> Simo Sorce wrote:
> > ----- Original Message -----
> >> This patch is more a WIP than anything. I want to see if I'm on the
> >> right track.
> >
> > Hi Rob,
> > I don't think we need ipaDefaultKrbAuthzData, we can use the same attribute both in ipaGuiConfig and ipaService, where it is placed makes the difference.
> >
> > You haven't changed ipaService in the base ldif.
> 
> On new installs the updates are still applied, gets added.

Sure it 'works' but the ldif files are now incomplete and slightly
misleading, is there a good reason to not update them ?

> > The 'UNIX-PAC' curent name is 'PAD' for Posix Authorization Data, we can call it 'PAD' in the pac_type field I think.
> 
> Ok done.
> 
> The ticket mentions something about marking some as critical. Is that 
> within the scope of this? I'm not sure what you had in mind for that.

It is for the multi-PAC case, where we may decide to not attach stuff if
the ticket become too big.

But I think we should defer that part for later, when we will have
multiple formats.

Simo.


-- 
Simo Sorce * Red Hat, Inc * New York