[16203] in Kerberos-V5-bugs
[krbdev.mit.edu #8761] ksu doesn't allow acquisition of
daemon@ATHENA.MIT.EDU (Greg Hudson via RT)
Tue Nov 13 12:02:37 2018
Mail-followup-to: rt@krbdev.mit.edu
mail-copies-to: never
From: "Greg Hudson via RT" <rt-comment@KRBDEV-PROD-APP-1.mit.edu>
In-Reply-To: <rt-8761@krbdev.mit.edu>
Message-ID: <rt-8761-49162.18.9004047942097@krbdev.mit.edu>
To: "'AdminCc of krbdev.mit.edu Ticket #8761'":;
Date: Tue, 13 Nov 2018 11:57:23 -0500 (EST)
Reply-To: rt-comment@KRBDEV-PROD-APP-1.mit.edu
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krb5-bugs-bounces@mit.edu
A ksu -F option seems reasonable, since it already has a -f option.
Adding a -P option at the same time for symmetry seems appropriate,
although I don't think proxiable tickets are used with any frequency.
Ticket 7871 would also address this problem on the KDC side. (But the
client changes are still valuable due to existing KDCs and other KDC
implementations.)
_______________________________________________
krb5-bugs mailing list
krb5-bugs@mit.edu
https://mailman.mit.edu/mailman/listinfo/krb5-bugs
