[33645] in Kerberos
Re: how to "ban" clients?
daemon@ATHENA.MIT.EDU (Nico Williams)
Mon Jul 25 08:44:10 2011
MIME-Version: 1.0
In-Reply-To: <1311597188.19717.230.camel@willson.li.ssimo.org>
Date: Mon, 25 Jul 2011 07:44:00 -0500
Message-ID: <CAK3OfOin-Cu9fEG+oZpkZ4eG4+XJ+GpMq7m1PkYbLqBN868UMg@mail.gmail.com>
From: Nico Williams <nico@cryptonector.com>
To: Simo Sorce <simo@redhat.com>
Cc: "kerberos@mit.edu" <kerberos@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Jul 25, 2011 8:33 AM, "Simo Sorce" <simo@redhat.com> wrote:
>
> On Sun, 2011-07-24 at 16:30 -0500, Nico Williams wrote:
> > For performance reasons? It's like this forever, so there may not be a
> > performance reason anymore. IMO this should be fixed.
>
> What do you do for principals of trusted realms ?
Shorter-lived x-realm TGTs, thus shorter-lived svc tix :)
Nico
--
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
