[7850] in Kerberos
Re: destruction of Kerberos credentials upon logout
daemon@ATHENA.MIT.EDU (Ken Hornstein)
Fri Aug 23 14:26:10 1996
To: Sam Hartman <hartmans@MIT.EDU>
Cc: kerberos@MIT.EDU
In-Reply-To: Your message of "23 Aug 1996 13:56:16 EDT."
<tsl3f1e56in.fsf@tertius.mit.edu>
Date: Fri, 23 Aug 1996 14:09:10 -0400
From: Ken Hornstein <kenh@cmf.nrl.navy.mil>
> Two points. First, you want to separate kinit from everything
>else. There are many times I want to get forwardable tickets but
>don't always want to forward. Second, I think my misjudge the default
>Athena would choose for encryption. =)
Hmmm ..... okay, how about something like this?
[appdefaults]
forward = false
forwardable = false
kinit = {
forward = true
renewable = false
proxyable = true
ATHENA.MIT.EDU = {
proxyable = true
}
CMF.NRL.NAVY.MIL = {
forward = false
renewable = true
}
}
You could do this for any app, actually - not just kinit.
I guess the search path would be something like:
appdefaults -> app -> realm -> option
appdefaults -> app -> option
appdefaults -> realm -> option
appdefaults -> option
> I like the format. I would like to wait to see what Cygnus is
>going to do before writing any code myself. If they plan on
>contributing what they have so far, it would probably be worth
>minimizing differences.
Well, I need something pretty soon, so I think I'll just tackle it now
and see how it comes out.
--Ken
