[7815] in Kerberos
destruction of Kerberos credentials upon logout
daemon@ATHENA.MIT.EDU (Ken Hornstein)
Tue Aug 20 11:03:41 1996
To: kerberos@MIT.EDU
Date: Tue, 20 Aug 1996 10:49:49 -0400
From: Ken Hornstein <kenh@cmf.nrl.navy.mil>
I've noticed that the Kerberos login replacement hangs around and destroy
all of your Kerberos credentials upon logout, and it also destroys all of
your AFS tokens (if you compile AFS support in).
To me, this seems to violate the principal of least astonishment; users
expect that backgrounded jobs will still run with the same credentials that
existed in their login session after they logout.
I'm wondering if there is any interest in making this behavior configurable
via krb5.conf - something like "krb5_retain_ccache" under [login]. The
default would be to cleanup everything at logout time, but other sites
could change this behavior if they wanted to.
I have to do this anyway for our site, so I'm wondering that if I write
this code, is there a chance it would be accepted by the Kerberos team?
And while I'm on the subject -- if I've made a really really cool change
to Kerberos that I think everyone would benefit from, what's the proper
process to contribute it?
--Ken
