[16239] in Kerberos_V5_Development
Re: Processing .k5login (another patch)
daemon@ATHENA.MIT.EDU (Jeffrey Altman)
Thu Sep 2 11:55:43 2010
X-Envelope-From: jaltman@secure-endpoints.com
X-MDaemon-Deliver-To: krbdev@mit.edu
Message-ID: <4C7FC8F6.5010207@secure-endpoints.com>
Date: Thu, 02 Sep 2010 11:55:34 -0400
From: Jeffrey Altman <jaltman@secure-endpoints.com>
MIME-Version: 1.0
To: krbdev@mit.edu
In-Reply-To: <tslvd6ogn9x.fsf@live.mit.edu>
Reply-To: jaltman@secure-endpoints.com
Content-Type: multipart/mixed; boundary="===============0108977177=="
Errors-To: krbdev-bounces@mit.edu
This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--===============0108977177==
Content-Type: multipart/signed; micalg=pgp-sha1;
protocol="application/pgp-signature";
boundary="------------enigA987F0D920F56962E6BB0CDC"
This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enigA987F0D920F56962E6BB0CDC
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
On 9/2/2010 11:47 AM, Sam Hartman wrote:
>>>>>> "Nicolas" =3D=3D Nicolas Williams <Nicolas.Williams@oracle.com> wr=
ites:
>=20
> Nicolas> I'd rather have an option for specifying the location of
> Nicolas> the k5login file, so it can be moved into a location where=
> Nicolas> the user cannot control it.
>=20
> +1
>=20
> In preference order
> 1) Have an option to set directory where .k5login is found
> 2) Both 1 and 3
> 3) have an option to disable .k5login processing
> 4) none of the above
>=20
> rationale: 1 gives you enough rope that 3 is not needed. I think I coul=
d
> even explain that to an audit firm:-).
I would prefer
1) Sam's 2
2) Sam's 1
3) Sam's 3
4) Sam's 4
Jeffrey Altman
--------------enigA987F0D920F56962E6BB0CDC
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
iQEcBAEBAgAGBQJMf8j5AAoJENxm1CNJffh4EmcIAJ9JOthbsKqs3OGC9uXadQbU
O+0oSL1zUq94ZTh9nuzgpKodlsIhEbCvLNsP25D8Ejf5giCJMpLwb5kya0LAIiRE
8lizClVtFAGwwn0loxYyfBBciBBYmMvRHsbac8iecJAVJgW/LX/SZPzbRSjGixNU
OJ3gs6n2w5Ngy9QPKQ6sh4KrWJXdkDrQb9+CN3QAEU9Q4IeAsALaqFtgEWpZvdgP
T8b/JY3883jX1+XCtrMzG3qWR0MVW+jIZ/HGx95fwBxIX5IazZTl8SHwT0ou1B/J
9FEDuYxLcXSRXeGPWC2c2n/CwveAgATvFi1biF43+5cENOJouaaqlZtnHDYnhyA=
=MTja
-----END PGP SIGNATURE-----
--------------enigA987F0D920F56962E6BB0CDC--
--===============0108977177==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
--===============0108977177==--
