[25] in pc-kerberos

home help back first fref pref prev next nref lref last post

Re: Kerberos on PC/TCP

daemon@ATHENA.MIT.EDU (Paul B. Hill )
Fri Jun 3 14:33:23 1994

To: gordon@ftp.com  (Gordon Lee)
Cc: pc-kerberos@MIT.EDU
Date: Fri, 3 Jun 94 14:29:08
From: pbh@MIT.EDU (Paul B. Hill )

>> This would allow DOS boxes to have a different ticket file as well since 
>>a modifcation to the environment in a box doesn't affect the master 
>> environment.


>Another ramification of this is that all winapps will see the same 
>ticket file, and will therefore be constrained to a particular principal.
>This is assuming that you set KRB_TKF before you start windows.
>The winapps can only see the environment variable values which are set 
>before you start windows.  
>

Applications can always have dialog boxes or command line options which 
specify the use of a new environment variable. If a Windows application 
modifes an environment variable it only modifes the environment for that 
application. A problem might be encountered if you were developing 
co-operting applications for which the user might wish to be using 
a non-default ticket file.

>I'm not making a judgement as to whether this is good or bad, 
>I am simply pointing it out.
>
>A further thought, for the sake of building some expansion space
>into the scheme, what if the variable pointed to a directory instead
>of a file.  This would allow for multiple ticket files in the future,
>or is this not needed ?
>
>     - GL

I'm not sure I understand what you are thinking of. Can you think of an 
example where it be useful? If you have a single variable whih points to a 
directory how would the application know which file to use within the 
directory?


home help back first fref pref prev next nref lref last post