[7852] in Kerberos

home help back first fref pref prev next nref lref last post

Re: destruction of Kerberos credentials upon logout

daemon@ATHENA.MIT.EDU (Sam Hartman)
Fri Aug 23 17:04:45 1996

To: Ken Hornstein <kenh@cmf.nrl.navy.mil>
Cc: Sam Hartman <hartmans@MIT.EDU>, kerberos@MIT.EDU
From: Sam Hartman <hartmans@MIT.EDU>
Date: 23 Aug 1996 16:46:56 -0400
In-Reply-To: Ken Hornstein's message of Fri, 23 Aug 1996 14:09:10 -0400

>>>>> "Ken" == Ken Hornstein <kenh@cmf.nrl.navy.mil> writes:

    Ken> Hmmm ..... okay, how about something like this?

    Ken> [appdefaults]

    Ken> 	forward = false
    Ken> 	forwardable = false

    Ken> 	kinit = {
    Ken> 		forward = true
    Ken> 		renewable = false
    Ken> 		proxyable = true

	Ah, I lik,like it.  I guess it means you don't want to have a
realm called kinit, rlogin, etc, but honestly, I don't think that's a
major problem.

    Ken> I guess the search path would be something like:

    Ken> appdefaults -> app -> realm -> option

	I'm not sure you can nest a profile like  that.  I'll check
the code and see if it looks like it would work.

home help back first fref pref prev next nref lref last post