[7844] in Kerberos
Re: destruction of Kerberos credentials upon logout
daemon@ATHENA.MIT.EDU (Rich Salz)
Fri Aug 23 01:03:19 1996
To: kerberos@MIT.EDU
Date: 23 Aug 1996 04:28:09 GMT
From: rsalz@osf.org (Rich Salz)
I'd like to be able to set KRB5CCNAME to something like "FD:17" meaning
that file descriptor 17 contains the cache. (But aren't caches spread
across multiple files these days, or is that just a DCE-ism?)
DCE uses the auth-data field for all its authen/authz info. Basic Kerberos
probably should use it, as Don (don? :) suggests because I thought the
protocol spec'd that that field would be left for apps to use. More
pragmatically, it'd be a shame if DCE interop were broken, as DCE is
probably the biggest krb5 deployment out there.
DFS puts (a copy of) the client credentials into the kernel, just as AFS does.
/r$
