Re: Question: Prefer to block on draft-ietf-krb-wg-kdc-model

On Thu, Jun 28, 2012 at 10:44 AM, Sam Hartman <[email protected]> wrote:
>>>>>> "Nico" == Nico Williams <[email protected]> writes:
>
>    Nico> Block.  Or fix.  But do not publish as-is.  I'd be happy with removal
>    Nico> of the N-strikes-related attributes as a fix, and any related text.
>
> What attributes do you see as related to n-strikes?
> As an individual I actually don't see any.

To be precise I want the following attributes to be made explicitly
optional, or better: removed:

4.1.1.5.  principalNumberOfFailedAuthenticationAttempts
4.1.1.6.  principalLastFailedAuthentication
4.1.1.7.  principalLastSuccessfulAuthentication

I'd be OK with adding a locked attribute.

Nico
--
_______________________________________________
ietf-krb-wg mailing list
[email protected]
https://lists.anl.gov/mailman/listinfo/ietf-krb-wg