[37868] in Kerberos
krb5.conf vs krb5.d/*.conf designs...
daemon@ATHENA.MIT.EDU (Keith Jones)
Thu Feb 23 16:37:53 2017
From: Keith Jones <K.E.Jones@brighton.ac.uk>
To: "kerberos@mit.edu" <kerberos@mit.edu>
Date: Thu, 23 Feb 2017 21:37:28 +0000
Message-ID: <0ECF655AB2C4F94F948451D7FABFF9F301414D437C@ALUDRA.university.brighton.ac.uk>
Content-Language: en-US
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit
Hiya,
My apologies for the newbie (and deeply naïve!) question but I've just joined the list because I can't find the google words to check if this has been discussed or explained to an idiot like me! :-).
Many distros (and packages) use a gently scaling concept where a system has a root "/etc/xxx,conf" file and then supports a "/etc/xxx.d/ " directory which contains multiple .conf files that are processed in traditional filename order (including paths directly seems to be going out of fashion). As Kerberos is security sensitive, I can imagine it might not be a very cool thing to support the "clobbering of settings" idea on any level, but it is rather flexible idea in real life to have config settings split into separate files and have things broken down into "override" global settings nicely.
Are there any feature request conversations going about supporting a krb5.d/ directory?
Regards,
Keith
___________________________________________________________
This email has been scanned by MessageLabs' Email Security System
on behalf of the University of Brighton. For more information see:
https://staff.brighton.ac.uk/is/computing/Pages/Email/spam.aspx
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
