[1878] in Kerberos-V5-bugs

home help back first fref pref prev next nref lref last post

Re: K5B5 on AIX 4.1.4

daemon@ATHENA.MIT.EDU (Joe Ramus)
Tue Apr 16 12:38:01 1996

To: Barry Jaspan <bjaspan@MIT.EDU>
Cc: Sam Hartman <hartmans@MIT.EDU>, Doug Engert <DEEngert@anl.gov>,
        "Theodore Ts'o" <tytso@MIT.EDU>, krb5-bugs@MIT.EDU
Reply-To: ramus@es.net
Date: Tue, 16 Apr 1996 09:37:40 -0700
From: "Joe Ramus" <ramus@ES.NET>

 Barry Jaspan said:

>> Having krlogind base its behavior on "options" specified in the name
>> before "logind" is a total mistake.  There is not one single good
>> reason for it, and there is an extremely good reason not to do it: it
>> is *VERY* confusing, totally unlike any other Unix daemon in the
>> world, and dangerous because it will inevitably result in
>> misconfigured krloginds that allow connections they shoulnd't.  The
>> very message that started this thread is an excellent example of how
>> confusing it can be.  It is confusing even before you ask the next
>> logical question: how to options specified in the name and options
>> specified on the command line interact?  There is no good answer to
>> that question that is understandable and rememberable to normal
>> people.
>> 

I agree 100%.    Get rid of that KLUDGE.
Use command line options.

----------------------------------------------------------------
| Joe Ramus  ESnet, Livermore  (510) 423-8917   ramus@es.net    |
----------------------------------------------------------------



home help back first fref pref prev next nref lref last post