[Freeipa-devel] Design Review Keytab Retrieval

[Simo Sorce]

On Fri, 2014-06-20 at 15:50 -0400, Nathaniel McCallum wrote:
> On Mon, 2014-06-16 at 11:34 -0400, Simo Sorce wrote:
> > Although the code is all done it would be nice to have a review of the
> > feature, to see if it has all been captured:
> > http://www.freeipa.org/page/V4/Keytab_Retrieval
> 
> Is there any need to create different permissions for password
> generation vs random generation? I think the answer is no because the
> only risk is a substandard password which you can control with password
> policy. I just wanted to bring it up.

Indeed we do not differentiate, password policy is what you want to use
if you want minimum guarantees, for now.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York