[39329] in Kerberos
Re: help with OTP
daemon@ATHENA.MIT.EDU (Ken Hornstein via Kerberos)
Fri Jan 5 10:03:47 2024
Message-Id: <202401051502.405F2RA8011173@hedwig.cmf.nrl.navy.mil>
To: Matt Zagrabelny <mzagrabe@d.umn.edu>
cc: kerberos <kerberos@mit.edu>
In-Reply-To: <CAOLfK3U9K+htja6eUzuwisSOQ6SnJSz3bDejaLvKE8b8o8rGZQ@mail.gmail.com>
MIME-Version: 1.0
Date: Fri, 05 Jan 2024 10:02:27 -0500
From: Ken Hornstein via Kerberos <kerberos@mit.edu>
Reply-To: Ken Hornstein <kenh@cmf.nrl.navy.mil>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
>Krb5 devs,
I'm not an official MIT krb5 developer, so I can't speak for them. But
in my experience things like this tend to be the most successful when they
are submitted as pull requests. That was my plan, eventually.
>Any thoughts about extending kinit to natively perform the two step process
>in the alias above? (And also have an option in /etc/krb5.conf so that it
>is "on" by default?)
I think this COULD be useful, but it would be more complicated. Also,
were you thinking of just changing the function of the kinit command
or ANYTHING that does the same things as kinit? The latter is much
gnarlier.
--Ken
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos