[15513] in Kerberos_V5_Development
Re: pkinit prompting behavior issue
daemon@ATHENA.MIT.EDU (Sam Hartman)
Tue Feb 23 12:55:21 2010
From: Sam Hartman <hartmans@mit.edu>
To: "Douglas E. Engert" <deengert@anl.gov>
Date: Tue, 23 Feb 2010 12:55:12 -0500
In-Reply-To: <4B840E5E.4090500@anl.gov> (Douglas E. Engert's message of "Tue,
23 Feb 2010 11:20:30 -0600")
Message-ID: <tslfx4r3khr.fsf@mit.edu>
MIME-Version: 1.0
Cc: MIT Kerberos Dev List <krbdev@mit.edu>,
Nicolas Williams <nicolas.williams@sun.com>,
Jeffrey Hutzelman <jhutz@cmu.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
Remember that a KDC may not be in a position to know whether a
particular user can use pkinit. So, no token will mean no pkinit when
such a user logs into a pkinit-enabled workstation.
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
