[35825] in Kerberos
Request to change MIT Kerberos behavior when principal is expired,
daemon@ATHENA.MIT.EDU (Edgecombe, Jason)
Thu Mar 6 11:53:53 2014
From: "Edgecombe, Jason" <jwedgeco@uncc.edu>
To: "'kerberos@mit.edu'" <kerberos@mit.edu>
Date: Thu, 6 Mar 2014 16:52:40 +0000
Message-ID: <4DE25DED585CD840A23808AFDE3DA20601511F1C@RPITSEXMS4.its.uncc.edu>
Content-Language: en-US
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit
Hi everyone,
I would like to request a change in how MIT Kerberos behaves. I would like for KDC's to reject all requests to issue or renew tickets if the principal is deleted or expired.
On a different note, it couldn't hurt to discuss rejecting old tickets after a password change as well.
The current behavior is that a valid ticket may be renewed even if the principal has expired, the principal is deleted or the password has been changed after tickets were issued.
I appreciate any help in how to request this.
Thanks,
Jason
---------------------------------------------------------------------------
Jason Edgecombe | Linux and Solaris Administrator
UNC Charlotte | The William States Lee College of Engineering
9201 University City Blvd. | Charlotte, NC 28223-0001
Phone: 704-687-1943
jwedgeco@uncc.edu | http://engr.uncc.edu | Facebook
---------------------------------------------------------------------------
If you are not the intended recipient of this transmission or a person responsible for delivering it to the intended recipient, any disclosure, copying, distribution, or other use of any of the information in this transmission is strictly prohibited. If you have received this transmission in error, please notify me immediately by reply e-mail or by telephone at 704-687-1943. Thank you.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
