[7832] in Kerberos
Re: destruction of Kerberos credentials upon logout
daemon@ATHENA.MIT.EDU (Ken Hornstein)
Wed Aug 21 23:59:11 1996
To: brian@nothing.ucsd.edu (Brian Kantor)
Cc: kerberos@MIT.EDU
In-Reply-To: Your message of "Wed, 21 Aug 1996 17:57:25 PDT."
<199608220057.RAA26538@nothing.ucsd.edu>
Date: Wed, 21 Aug 1996 23:43:05 -0400
From: Ken Hornstein <kenh@cmf.nrl.navy.mil>
>It seems to me that it would be very desireable to store credentials,
>tokens, and other such things in the process space rather than on the
>filesystem, so that they have the same scope of existence as the
>process that obtained and/or uses them.
>
>I have in mind something that resembles an inheritable 'environment variable'
>might be much closer to having the desired effect than a file does.
>
>Can this be done in the Unix context?
Certainly, but it wouldn't be very portable. You definately don't want to
use environment variables, as they are visible from other processes.
Other than the file descriptor hack that Sam mentioned with SSH (which
has it's own problems), I don't see a good way of doing it.
--Ken
