[19173] in Kerberos_V5_Development

home help back first fref pref prev next nref lref last post

Possible enhancement request for extra krb5.conf parameter support

daemon@ATHENA.MIT.EDU (Neng Xue)
Tue May 12 19:37:43 2015

Message-ID: <55528EB7.3070302@oracle.com>
Date: Tue, 12 May 2015 16:37:27 -0700
From: Neng Xue <neng.xue@oracle.com>
MIME-Version: 1.0
To: krbdev@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu

Hi,

I am Neng Xue who works in Oracle Solaris Security group. Recently when 
I was working on a kerberos related project I noticed that Solaris 
kerberos has a quite handy krb5.conf [appdefaults] parameter support for 
kinit command:

forwardable=[true | false]
Can forward tickets to a remote server.

renewable=[true | false]
Creates a TGT that can be renewed (prior to the ticket expiration time).

proxiable=[true | false]
Sets the proxiable flag in all tickets.

no_addresses=[true | false]
Creates tickets with no address bindings.

However, this solaris parameter support utilizes a set of solaris 
specific profile interfaces, for that matter, I cannot create a pull 
request directly using this changeset. I am wondering is it possible 
that I can request for such an enhancement from MIT kerberos dev team? 
Thanks a lot!

Best

-- 
Neng Xue
Oracle Solaris Software Engineer
Santa Clara, CA, USA

_______________________________________________
krbdev mailing list             krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev

home help back first fref pref prev next nref lref last post