[2162] in Kerberos-V5-bugs
Re: rlogin bugs
daemon@ATHENA.MIT.EDU (Barry Jaspan)
Mon Aug 19 12:35:40 1996
Date: Mon, 19 Aug 1996 12:35:22 -0400
From: "Barry Jaspan" <bjaspan@MIT.EDU>
To: Sam Hartman <hartmans@MIT.EDU>
Cc: krb5-bugs@MIT.EDU
In-Reply-To: [2159]
* The unable to convert to krb4 tickets message is a bit confusing if
you don't realize what is going on. Perhaps rewording to a warning or
notice would be appropriate--to make it clear that it may not be an
error.
I'm not even sure there should be a warning. A site that doesn't want
to acquire V4 tickets on every login should be warned that it didn't
happen every time; this is just going to end up like "Warning: No
Kerberos tickets obtained" that lasted for years and confused a lot of
people, except this warning would be even less useful.
* If rlogin -f fails and you aren't encrypting, it's not clear to me
you want to execute UCB login in preference to a Kerberized rlogin
without tickets being forwarded.
I think if krlogin fails for any reason, you never want to execute UCB
rlogin.
Barry
