[18] in pc-kerberos

home help back first fref pref prev next nref lref last post

Re: Kerberos on PC/TCP

daemon@ATHENA.MIT.EDU (Paul B. Hill )
Thu Jun 2 20:57:32 1994

To: pc-kerberos@MIT.EDU
Date: Thu, 2 Jun 94 20:53:54
From: pbh@MIT.EDU (Paul B. Hill )

>...I can understand how people might think the use of pctcp.ini for ticket
>file location is too "proprietary" for a general solution.  If someone
>would like to propose a "standard" for how to locate ticket files, we'll
>gladly adopt it as soon as we can (while still supporting our current
>scheme as a fallback for our customers, of course... :-)  Sound 
>reasonable?

set KRB_TKF=foo

This would allow DOS boxes to have a different ticket file as well since a 
modifcation to the environment in a box doesn't affect the master 
environment. E.g. my master environment may have 
KRB_TKF=c:\net\ticket\pbh and a DOS box may have 
KRB_TKF=r:\ticket\pbh-root, where "r:" is a ramdrive and pbh-root holds my 
root instance tickets that I want to be really anal about and only use when 
I'm working with a server that must remain secure.

Each vendor could have their own default fallback but all implementations 
for DOS, Windows, Windows/NT, and OS/2 should use the environment variable 
KRB_TKF as the override.

Any objections?

Paul


home help back first fref pref prev next nref lref last post