[1249] in Kerberos_V5_Development

home help back first fref pref prev next nref lref last post

Re: kadm5_init, acquiring initial credentials

daemon@ATHENA.MIT.EDU (Barry Jaspan)
Wed May 29 22:56:30 1996

Date: Wed, 29 May 96 22:56:21 -0400
From: "Barry Jaspan" <bjaspan@MIT.EDU>
To: basch@lehman.com
Cc: krbdev@MIT.EDU
In-Reply-To: <199605300204.WAA00984@badger.lehman.com> (basch@lehman.com)


   Actually, kadmin5 stores the credentials in the ccache file if -c is
   specified (naming the ccache file).  kadmin5 even has an argument to
   specify the credential lifetime (constrained by the database lifetime,
   of course).

Both of those arguments only make sense if kadmin5 is the process that
acquires the credentials.  My question was whether or not the kadmin
client *should* acquire credentials, or whether they should be
acquirable by some external process (like kinit).  I suppose you are
suggesting that the kadmin client should acquire the credentials
outside of the kadm5 api, but that was not (explicitly) my question.

Barry


home help back first fref pref prev next nref lref last post