[22] in pc-kerberos

home help back first fref pref prev next nref lref last post

Re: Kerberos on PC/TCP

daemon@ATHENA.MIT.EDU (Gordon Lee)
Fri Jun 3 14:17:58 1994

Date: Fri, 3 Jun 94 14:15:00 EDT
To: pbh@MIT.EDU
From: gordon@ftp.com  (Gordon Lee)
Reply-To: gordon@ftp.com
Cc: pc-kerberos@MIT.EDU

> From pbh@MIT.EDU  Thu Jun  2 21:00:52 1994
> 
> set KRB_TKF=foo
> 
> This would allow DOS boxes to have a different ticket file as well since a 
> modifcation to the environment in a box doesn't affect the master 
> environment.

Another ramification of this is that all winapps will see the same 
ticket file, and will therefore be constrained to a particular principal.
This is assuming that you set KRB_TKF before you start windows.
The winapps can only see the environment variable values which are set 
before you start windows.  

I'm not making a judgement as to whether this is good or bad, 
I am simply pointing it out.

A further thought, for the sake of building some expansion space
into the scheme, what if the variable pointed to a directory instead
of a file.  This would allow for multiple ticket files in the future,
or is this not needed ?

     - GL

==  Gordon Lee  ==  voice: (508) 685-4000  ==  fax: (508) 659-6105
==  FTP Software Inc.  ==  2 High St  ==  North Andover, MA  01845-2620


home help back first fref pref prev next nref lref last post