On Thu, 18 Sep 2014 13:56:44 -0400
Nathaniel McCallum <npmccal...@redhat.com> wrote:

> -objectClasses:  (2.16.840.1.113730.3.8.16.2.2  NAME 'ipatokenTOTP'
> SUP ipaToken STRUCTURAL DESC 'TOTP Token Type' MUST (ipatokenOTPkey $
> ipatokenOTPalgorithm $ ipatokenOTPdigits $ ipatokenTOTPclockOffset $
> ipatokenTOTPtimeStep) MAY (ipatokenTOTPwatermark) X-ORIGIN 'IPA OTP')
> +objectClasses:  (2.16.840.1.113730.3.8.16.2.2  NAME 'ipatokenTOTP'
> SUP ipaToken STRUCTURAL DESC 'TOTP Token Type' MUST (ipatokenOTPkey $
> ipatokenOTPalgorithm $ ipatokenOTPdigits $ ipatokenTOTPclockOffset $
> ipatokenTOTPtimeStep $ ipatokenTOTPwatermark) X-ORIGIN 'IPA OTP')

NACK, you cannot move from MAY to MUST.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York

_______________________________________________
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel

Reply via email to