[1648] in Kerberos_V5_Development
Re: default admin acl name
daemon@ATHENA.MIT.EDU (Richard Basch)
Wed Aug 28 07:52:31 1996
Date: Wed, 28 Aug 1996 07:51:04 -0400
To: "Barry Jaspan" <bjaspan@MIT.EDU>
Cc: krbdev@MIT.EDU
In-Reply-To: <9608271653.AA11364@DUN-DUN-NOODLES.MIT.EDU>
From: "Richard Basch" <basch@lehman.com>
I agree... Having all the pathnames in one place makes it easier to
reconfigure, if necessary by the site administrators. And I also agree
on having everything prefixed (not a high priority item, unless there is
something that could be generically used and likely to conflict, such as
DEFAULT_PATH).
-R
On Tue, 27-August-1996, "Barry Jaspan" wrote to "krbdev@MIT.EDU" saying:
> Ted and I discussed last night that all relations read from kdc.conf
> by the admin system should have defaults such that it is never
> necessary to set any particular field in kdc.conf. I agree with this
> basic premise, and am now changing the kadm5 api spec to conform with
> it.
>
> I would like to add some #defines to osconf.h for this purpose. In
> particular, DEFAULT_KADM5_ACL_FILE, DEFAULT_KADM5_KEYTAB,
> DEFAULT_KADM5_DICT_FILE, DEFAULT_KADM5_PORT. All the paths will be
> "$prefix/lib/krb5kdc/kadm5.<thing>", parallel to the current defaults.
> I think these should go in krb5/include/osconf.h, and not in a kadm5
> include file, to keep all site defaults in one place and so that we do
> not have to post-process yet another header file.
>
> As a side comment, some of the defaults in osconf.h have a KRB5_
> prefix, and others do not. All or none should, but fixing this is
> IMHO not a priority.
>
> Comments?
>
> Barry
--
Richard Basch
Sr. Developer/Analyst, DSO URL: http://web.mit.edu/basch/www/home.html
Lehman Brothers, Inc. Email: basch@lehman.com, basch@mit.edu
101 Hudson St., 38th Floor Fax: +1-201-524-5828
Jersey City, NJ 07302-3988 Voice: +1-201-524-5049
