[19174] in Kerberos_V5_Development
Re: Possible enhancement request for extra krb5.conf parameter support
daemon@ATHENA.MIT.EDU (Greg Hudson)
Wed May 13 14:02:26 2015
Message-ID: <555391A2.5070606@mit.edu>
Date: Wed, 13 May 2015 14:02:10 -0400
From: Greg Hudson <ghudson@mit.edu>
MIME-Version: 1.0
To: Neng Xue <neng.xue@oracle.com>, krbdev@mit.edu
In-Reply-To: <55528EB7.3070302@oracle.com>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
On 05/12/2015 07:37 PM, Neng Xue wrote:
> I am Neng Xue who works in Oracle Solaris Security group. Recently when
> I was working on a kerberos related project I noticed that Solaris
> kerberos has a quite handy krb5.conf [appdefaults] parameter support for
> kinit command:
>
> forwardable=[true | false]
> Can forward tickets to a remote server.
>
> proxiable=[true | false]
> Sets the proxiable flag in all tickets.
>
> no_addresses=[true | false]
> Creates tickets with no address bindings.
We already support forwardable, proxiable, and noaddresses options under
[libdefaults].
> renewable=[true | false]
> Creates a TGT that can be renewed (prior to the ticket expiration time).
We support a renew_lifetime option under [libdefaults]. I don't know
what it would mean to request a renewable ticket without a specific
renewable lifetime.
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
