[16359] in Kerberos_V5_Development

home help back first fref pref prev next nref lref last post

Re: Removing old keys

daemon@ATHENA.MIT.EDU (Greg Hudson)
Tue Sep 21 10:37:11 2010

From: Greg Hudson <ghudson@mit.edu>
To: Russ Allbery <rra@stanford.edu>
In-Reply-To: <87tylkgoe0.fsf@windlord.stanford.edu>
Date: Tue, 21 Sep 2010 10:37:06 -0400
Message-ID: <1285079826.20521.60.camel@ray>
Mime-Version: 1.0
Cc: "krbdev@mit.edu" <krbdev@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu

On Mon, 2010-09-20 at 16:18 -0400, Russ Allbery wrote:
> * Purge all old kvnos which are at least as old as an <age> argument.

It looks like keytab entries have a timestamp but key data entries do
not.  It's something to keep in mind for the future evolution of the
KDB, but for now I don't think we can do this.


_______________________________________________
krbdev mailing list             krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev

home help back first fref pref prev next nref lref last post