[16356] in Kerberos_V5_Development

home help back first fref pref prev next nref lref last post

Re: Removing old keys

daemon@ATHENA.MIT.EDU (Russ Allbery)
Mon Sep 20 19:43:16 2010

From: Russ Allbery <rra@stanford.edu>
To: "krbdev\@mit.edu" <krbdev@mit.edu>
In-Reply-To: <20100920233635.GH7857@oracle.com> (Nicolas Williams's message of
	"Mon, 20 Sep 2010 18:36:35 -0500")
Date: Mon, 20 Sep 2010 16:43:11 -0700
Message-ID: <87hbhkf0c0.fsf@windlord.stanford.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu

Nicolas Williams <Nicolas.Williams@oracle.com> writes:

> The point is: an automatic feature is easier to use than a manual one,
> particularly if you'd be pressed to automate the manual one (which I
> think we can agree, sites would).  Why do something only half-way?  Is
> this a sysadmin employment project?  :)  :)

Sure.  Automation is great.  Although the system is not usable on a fully
automated basis until one can add keys that only become valid at a future
date.

-- 
Russ Allbery (rra@stanford.edu)             <http://www.eyrie.org/~eagle/>
_______________________________________________
krbdev mailing list             krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev

home help back first fref pref prev next nref lref last post