807ccf1 Only use service PAC type as an override

Authored and Committed by mkosek 11 years ago
    Only use service PAC type as an override
    
    PAC type (ipakrbauthzdata attribute) was being filled for all new
    service automatically. However, the PAC type attribute was designed
    to serve only as an override to default PAC type configured in
    IPA config. With PAC type set in all services, users would have
    to update all services to get new PAC types configured in IPA config.
    
    Do not set PAC type for new services. Add new NONE value meaning that
    we do not want any PAC for the service (empty/missing attribute means
    that the default PAC type list from IPA config is read).
    
    https://fedorahosted.org/freeipa/ticket/2184
    
        
file modified
+3 -3
file modified
+1 -1
file modified
+2 -2
file modified
+28 -9