Re: Question: Prefer to block on draft-ietf-krb-wg-kdc-model
Nico Williams <[email protected]> Thu, 28 Jun 2012 15:47:49 -0500
| Newsgroups | gmane.ietf.krb-wg |
|---|---|
| Message-ID | <CAK3OfOiDixHorTr2qBBj-wNJdv+8_M4d_vLay0aqXMX1cFzNdA@mail.gmail.com> |
On Thu, Jun 28, 2012 at 3:19 PM, Jeffrey Hutzelman <[email protected]> wrote: >> I'm talking about a locked attribute with no special semantics to read >> nor write. It'd be deleting the principal to lock and re-creating the >> principal to unlock, say, or deleting its keys and re-creating them, >> or setting a disallow-tix flag, only, of course, simpler than that. >> Speaking of which, I don't see that MIT krb5 attribute in the I-D >> (disallow-tix). > > It's 4.1.1.4, principalIsDisabled That's what I get for not having done a case-insensitive search. OK, so I'm for removing 4.1.1.5, 4.1.1.6, and 4.1.1.7. Nico -- _______________________________________________ ietf-krb-wg mailing list [email protected] https://lists.anl.gov/mailman/listinfo/ietf-krb-wg