IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2024-12-23 07:33:27 -06:00
Code Issues Packages Projects Releases Wiki Activity

Terminology improvements: use allow list

Browse Source 
See: https://tools.ietf.org/id/draft-knodel-terminology-01.html
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Alexander Bokovoy <abbra@users.noreply.github.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>
This commit is contained in:
Christian Heimes 2020-06-11 14:28:31 +02:00 committed by Florence Blanc-Renaud
parent 5c09dcdb98
commit 3ce816ba77
3 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
doc/designs/krb-ticket-policy.md
View File

@ -27,7 +27,7 @@ these two are assigned the same indicator to represent a brute-force hardened fo
By requiring certain authentication indicators to a user, we can force a user to be authenticated with one of
the mechanisms associated with those auth indicators to obtain a ticket.
By defining a white list of authentication indicators to a service, we can allow a user to use the service
By defining an allow list of authentication indicators to a service, we can allow a user to use the service
only if the user obtained a ticket with at least one of those indicators included.
### Note

2
ipaserver/plugins/host.py
View File

@ -584,7 +584,7 @@ class host(LDAPObject):
'krbprincipalauthind*',
cli_name='auth_ind',
label=_('Authentication Indicators'),
doc=_("Defines a whitelist for Authentication Indicators."
doc=_("Defines an allow list for Authentication Indicators."
" Use 'otp' to allow OTP-based 2FA authentications."
" Use 'radius' to allow RADIUS-based 2FA authentications."
" Use 'pkinit' to allow PKINIT-based 2FA authentications."

2
ipaserver/plugins/service.py
View File

@ -541,7 +541,7 @@ class service(LDAPObject):
'krbprincipalauthind*',
cli_name='auth_ind',
label=_('Authentication Indicators'),
doc=_("Defines a whitelist for Authentication Indicators."
doc=_("Defines an allow list for Authentication Indicators."
" Use 'otp' to allow OTP-based 2FA authentications."
" Use 'radius' to allow RADIUS-based 2FA authentications."
" Use 'pkinit' to allow PKINIT-based 2FA authentications."