[36051] in Kerberos
Re: Accessing Kerberos NFS version 4 (not 2, 3) via /net automounter
daemon@ATHENA.MIT.EDU (Tomas Kuthan)
Tue Apr 15 15:49:35 2014
Message-ID: <534D8D12.6010901@oracle.com>
Date: Tue, 15 Apr 2014 21:48:34 +0200
From: Tomas Kuthan <tomas.kuthan@oracle.com>
MIME-Version: 1.0
To: Nico Williams <nico@cryptonector.com>
In-Reply-To: <CAK3OfOj3SnNGvNbfH0qnaj4o_bFiCXvDR4tP11MVZEL2t1Ng6A@mail.gmail.com>
Cc: "kerberos@mit.edu" <kerberos@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On 04/15/14 21:16, Nico Williams wrote:
> That said, it's best practice to key all devices. Still, nothing in
> NFSv4 requires such keys to be named in host-based ways.
Makes sense ... but still, basing on host is a nifty way of constructing
unique principal name. Is there a meaningful alternative for mobile devices?
Tomas
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
