[30778] in Kerberos
Re: Long-running jobs with renewal of krb5 tickets and AFS tokens
daemon@ATHENA.MIT.EDU (Russ Allbery)
Sat Feb 28 18:38:38 2009
To: kerberos@mit.edu
In-Reply-To: <20090228230438.GJ9102@mcketrick.tproa.net> (Thomas Kula's
message of "Sat\, 28 Feb 2009 18\:04\:38 -0500")
From: Russ Allbery <rra@stanford.edu>
Date: Sat, 28 Feb 2009 15:35:48 -0800
Message-ID: <87zlg69lt7.fsf@windlord.stanford.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Thomas Kula <kula@tproa.net> writes:
> I don't think k5start has an option that prompts you for a password
> *and* remembers it to keep renewing credentials on your behalf, but
> since I always just use the keytab option I'm not as familiar with that
> use of k5start.
k5start intentionally doesn't support this because I think it undermines
the Kerberos security model.
--
Russ Allbery (rra@stanford.edu) <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
