From 5cd3a6fe3988677d865d666aeefd3ed2f2e549c5 Mon Sep 17 00:00:00 2001
From: Russ Allbery <rra@stanford.edu>
Date: Wed, 6 Feb 2008 21:29:51 +0000
Subject: Check naming policy on wallet object creation before checking the
 default ACLs to avoid creating and stranding an ACL when the naming policy
 check fails.

---
 NEWS | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'NEWS')

diff --git a/NEWS b/NEWS
index a0bcb0c..f485858 100644
--- a/NEWS
+++ b/NEWS
@@ -5,6 +5,10 @@ wallet 0.7 (unreleased)
     keytab-backend now passes kadmin.local ktadd its options in a specific
     order to satisfy the picky option parser.
 
+    Check naming policy on wallet object creation before checking the
+    default ACLs to avoid creating and stranding an ACL when the naming
+    policy check fails.
+
     Fix the example remctl configuration for keytab-backend to use the
     correct script name.
 
-- 
cgit v1.2.3