[35832] in Kerberos
Re: Request to change MIT Kerberos behavior when principal is expired,
daemon@ATHENA.MIT.EDU (Russ Allbery)
Fri Mar 7 17:26:18 2014
From: Russ Allbery <eagle@eyrie.org>
To: "'kerberos\@mit.edu'" <kerberos@mit.edu>
In-Reply-To: <4DE25DED585CD840A23808AFDE3DA20601513D9E@RPITSEXMS4.its.uncc.edu>
(Jason Edgecombe's message of "Fri, 7 Mar 2014 22:17:42 +0000")
Date: Fri, 07 Mar 2014 14:25:18 -0800
Message-ID: <87d2hxd4tt.fsf@windlord.stanford.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
"Edgecombe, Jason" <jwedgeco@uncc.edu> writes:
> I don't see how anyone can object to rejecting requests for expired or
> deleted principals. I understand that the password changing aspect could
> be more controversial.
> Could we at least add the "reject requests for expired/removed
> principals" part?
+1. This seems like a much better default to me.
--
Russ Allbery (eagle@eyrie.org) <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
