Re: Question: Prefer to block on draft-ietf-krb-wg-kdc-model

Jeffrey Hutzelman <[email protected]> Thu, 28 Jun 2012 14:33:03 -0400
Newsgroups gmane.ietf.krb-wg
Message-ID <[email protected]>
On Thu, 2012-06-28 at 12:01 -0500, Nico Williams wrote:
> On Thu, Jun 28, 2012 at 10:44 AM, Sam Hartman <[email protected]> wrote:
> >>>>>> "Nico" == Nico Williams <[email protected]> writes:
> >
> >    Nico> Block.  Or fix.  But do not publish as-is.

Agree.

> To be precise I want the following attributes to be made explicitly
> optional, or better: removed:
> 
> 4.1.1.5.  principalNumberOfFailedAuthenticationAttempts
> 4.1.1.6.  principalLastFailedAuthentication
> 4.1.1.7.  principalLastSuccessfulAuthentication
> 
> I'd be OK with adding a locked attribute.

Agree.

_______________________________________________
ietf-krb-wg mailing list
[email protected]
https://lists.anl.gov/mailman/listinfo/ietf-krb-wg