[7846] in Kerberos
Re: destruction of Kerberos credentials upon logout
daemon@ATHENA.MIT.EDU (Ken Hornstein)
Fri Aug 23 12:07:44 1996
To: Sam Hartman <hartmans@MIT.EDU>
Cc: kerberos@MIT.EDU
In-Reply-To: Your message of "22 Aug 1996 18:08:04 EDT."
<tslviebqdh7.fsf@tertius.mit.edu>
Date: Fri, 23 Aug 1996 11:51:50 -0400
From: Ken Hornstein <kenh@cmf.nrl.navy.mil>
> Ken> Would it really belong in libdefaults? Maybe [defaults], eh?
>
> I would say appdefaults, but yes, this is more reasonable than
>having a separate default for each application. Forwarding really
>ought to be controlled on a realm-by-realm basis, though. I have very
>little control over other realms' DNS and may not wish to trust that
>I'm connecting to the host I think I'm connecting to.
Okay, how about something along the lines of this (based on the Cygnus stuff):
[appdefaults]
forward = false
forwardable = false
autologin = true
encrypted = true
ATHENA.MIT.EDU = {
forward = true
forwardable = true
encrypted = false
}
CMF.NRL.NAVY.MIL = {
forward = true
encrypted = true
}
Whaddya think?
--Ken
