Re: Add. comments on Kdc model, WAS[Re: I-D Action: draft-ietf-krb-wg-kdc-model-12.txt]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 06/06/2012 03:00 PM, Sam Hartman wrote:
> OK, at this point, I think we have seen enough support for
> lockouts based on number of failed auths since last successful auth
> that we need to re-open that previous discussion as Simo requested.
> I'm hoping that Simo and Leif can both or individually propose a
> solution for the WG to consider. Given that we seem to want to
> solve this it's a fairly low bar to accept the change.

I'm collecting some other post WGLC comments (mostly minor nits) and was
going to push out -13 (lucky 13??) with those included. I'll propose a
new attribute numberOfRecentFailedAuhnRequests (or something shorter...)
to represent the proposed semantic.

	Cheers Leif
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk/QXw8ACgkQ8Jx8FtbMZnfiUACcD9f5s5IyxreY2BN4Y0flWMOk
wYQAniO8qEJ1PV5qCFQEJw+AmQssk4g5
=H52Y
-----END PGP SIGNATURE-----
_______________________________________________
ietf-krb-wg mailing list
[email protected]
https://lists.anl.gov/mailman/listinfo/ietf-krb-wg