[164] in Zephyr_Comments
Suggestion
daemon@ATHENA.MIT.EDU (Jonathan I. Kamens)
Thu Feb 23 19:51:02 1989
Date: Thu, 23 Feb 89 19:50:26 EST
From: Jonathan I. Kamens <jik@ATHENA.MIT.EDU>
To: marc@ATHENA.MIT.EDU
Cc: rfrench@ATHENA.MIT.EDU, bjaspan@ATHENA.MIT.EDU,
In-Reply-To: Marc Horowitz's message of Thu, 23 Feb 89 17:14:52 EST <8902232214.AA21394@BEEBLEBROX.MIT.EDU>
From: Marc Horowitz <marc@ATHENA.MIT.EDU>
Date: Thu, 23 Feb 89 17:14:52 EST
Request for clarification:
Does net-* imply that anyone w/ kerberos tickets for any realm can
zlocate, but people w/ no tickets cannot, or does it imply that anyone
can zlocate? If the former is the case, I recommend that world-visible
and world-announced be implemented, as many sites lack kerberos, and
even at sites with kerberos, some accounts (e.g. root) don't
get tickets.
Marc
Note that I have taken watchmakers out of the distribution of this
message. I see no reason to send this discussion to all the
watchmakers, who can read it in zephyr-comments if they want to.
No, net-visible and net-announced do not imply that "anyone with
kerberos tickets can zlocate," they imply that anyone in one Kerberos
realm can zlocate people in other Kerberos realms *in which their
realms are trusted.* For example, LCS and Athena Kerberos realms
trust each other, so if LCS were running zephyr (and the net stuff
were implemented, I don't know if it is), people at LCS could zlocate
us and vice versa.
jik
