[16242] in Kerberos_V5_Development
Re: Processing .k5login (another patch)
daemon@ATHENA.MIT.EDU (Will Fiveash)
Thu Sep 2 15:13:23 2010
Date: Thu, 2 Sep 2010 14:12:40 -0500
From: Will Fiveash <will.fiveash@oracle.com>
To: Sam Hartman <hartmans@mit.edu>
Message-ID: <20100902191239.GA3661@sun.com>
Mail-Followup-To: Sam Hartman <hartmans@mit.edu>,
Nicolas Williams <Nicolas.Williams@oracle.com>,
"krbdev@mit.edu" <krbdev@mit.edu>
MIME-Version: 1.0
Content-Disposition: inline
In-Reply-To: <tslvd6ogn9x.fsf@live.mit.edu>
Cc: "krbdev@mit.edu" <krbdev@mit.edu>,
Nicolas Williams <nicolas.williams@oracle.com>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
On Thu, Sep 02, 2010 at 11:47:54AM -0400, Sam Hartman wrote:
> >>>>> "Nicolas" == Nicolas Williams <Nicolas.Williams@oracle.com> writes:
>
> Nicolas> I'd rather have an option for specifying the location of
> Nicolas> the k5login file, so it can be moved into a location where
> Nicolas> the user cannot control it.
>
> +1
>
> In preference order
> 1) Have an option to set directory where .k5login is found
> 2) Both 1 and 3
^^^^^^^^^^^^^^^^^ +1
> 3) have an option to disable .k5login processing
> 4) none of the above
>
> rationale: 1 gives you enough rope that 3 is not needed. I think I could
> even explain that to an audit firm:-).
--
Will Fiveash
Oracle
http://opensolaris.org/os/project/kerberos/
Sent using mutt, a sweet text based e-mail app: http://www.mutt.org/
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
