[freeipa PR#4057][opened] Reset per-indicator Kerberos policy
by abbra
URL: https://github.com/freeipa/freeipa/pull/4057
Author: abbra
Title: #4057: Reset per-indicator Kerberos policy
Action: opened
PR body:
"""
When 'ipa krbtpolicy-reset' is called, we need to reset all policy
settings, including per-indicator ones. Per-indicator policy uses
subtyped attributes (foo;bar), the current krbtpolicy-reset code does
not deal with those.
Add support for per-indicator policy reset. It is a bit tricky, as we
need to drop the values to defaults but avoid adding non-per-indicator
variants of the same attributes.
Add test to check that policy has been resetted by observing a new
Kerberos TGT for the user after its policy reset.
Fixes: https://pagure.io/freeipa/issue/8153
Signed-off-by: Alexander Bokovoy <abokovoy(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4057/head:pr4057
git checkout pr4057
4 years, 4 months