[7847] in Kerberos
Re: destruction of Kerberos credentials upon logout
daemon@ATHENA.MIT.EDU (Sam Hartman)
Fri Aug 23 14:01:33 1996
To: rsalz@osf.org (Rich Salz)
Cc: kerberos@MIT.EDU
From: Sam Hartman <hartmans@MIT.EDU>
Date: 23 Aug 1996 13:48:26 -0400
In-Reply-To: rsalz@osf.org's message of 23 Aug 1996 04:28:09 GMT
>>>>> "Rich" == Rich Salz <rsalz@osf.org> writes:
Rich> I'd like to be able to set KRB5CCNAME to something like
Rich> "FD:17" meaning that file descriptor 17 contains the cache.
Rich> (But aren't caches spread across multiple files these days,
Rich> or is that just a DCE-ism?)
We don't distribute any ccache types that have multiple files.
Rich> DCE uses the auth-data field for all its authen/authz info.
Rich> Basic Kerberos probably should use it, as Don (don? :)
Rich> suggests because I thought the protocol spec'd that that
Rich> field would be left for apps to use. More pragmatically,
Rich> it'd be a shame if DCE interop were broken, as DCE is
Rich> probably the biggest krb5 deployment out there.
Ah, but the Kerberos library can qualify as a Kerberos
application. I thought there was an authorization data type so you
could have multiple authorization data objects associated with the ticket. If there is, then there shouldn't be a problem. If not, this should be fixed.
