[124] in Zephyr_Comments

home help back first fref pref prev next nref lref last post

Re: inconsistent Kerberos behavior

daemon@ATHENA.MIT.EDU (John T Kohl)
Fri Oct 28 11:39:43 1988

Date: Fri, 28 Oct 88 11:39:24 EDT
From: John T Kohl <jtkohl@ATHENA.MIT.EDU>
To: Jerome H. Saltzer <Saltzer@ATHENA.MIT.EDU>
Cc: John T Kohl <jtkohl@ATHENA.MIT.EDU>, John T Kohl <jtkohl@ATHENA.MIT.EDU>,
In-Reply-To: [0123] Jerome H. Saltzer's message of Fri, 28 Oct 88 11:30:46 EDT,
   Date: Fri, 28 Oct 88 11:30:46 EDT
   From: Jerome H. Saltzer <Saltzer@ATHENA.MIT.EDU>

   > If the user explicitly requests authentication (-a), it probably
   > shouldn't send unauthentic.

   And, I assume, return an error saying that it didn't send the notice.

Of course.

   That seems right.  (But is there any way to assure that the notice
   isn't sent if the user specifies -a but the ticket is expired?)

Currently, no.  It would be possible to have the server reject the
notice completely, but that is a more complicated change with effects we
haven't explored fully.

John

home help back first fref pref prev next nref lref last post