[8081] in Kerberos
Re: kadmind4
daemon@ATHENA.MIT.EDU (Barry Jaspan)
Sat Sep 21 16:51:48 1996
Date: Sat, 21 Sep 1996 16:37:03 -0400
From: "Barry Jaspan" <bjaspan@MIT.EDU>
To: mcguire@neurotica.com
Cc: hartmans@MIT.EDU, kerberos@MIT.EDU
In-Reply-To: <199609211805.OAA01970@neurotica.neurotica.com> (message from
Dave McGuire on Sat, 21 Sep 1996 14:05:49 -0400 (EDT))
Ahh, ok. I hadn't thought about that. That policy stuff is cool.
Do the clients actually support that stuff now, i.e. if someone's
password expires in the database, will login.krb5 do something about
it? I haven't really gone through the new sources much yet.
login.krb5 has not been integrated with kadm5 much. OpenVision's
login program notifies users when their password or principal is about
to expire, and when the password does expire it allows the user to
change it during the login sequence (it actually inlines the
kpasswd-like behavior rather than just running kpasswd so that the
user only has to enter toe correct old password once). We do not have
that code from OpenVision but it would be pretty easy to rewrite it.
Barry
