[90] in Kerberos

home help back first fref pref prev next nref lref last post

Re: knetd

jon@ATHENA.MIT.EDU (jon@ATHENA.MIT.EDU)
Sun Aug 9 21:25:05 1987

From jis@BITSY.MIT.EDU  Wed Sep 17 16:43:22 1986
Date: Wed, 17 Sep 86 16:41:57 EDT
From: jis@BITSY.MIT.EDU (Jeffrey I. Schiller)
To: kerberos@athena.mit.edu
Subject: Re: knetd

I agree with John's approach. It makes sense to have a knetd daemon
which gobbles down an ascii service name and authenication strings
and passes this information on (via a standard calling convention) to
a spawned service process. The spawned processes could then use
rd_ap_req() on the authenicant (as they do today) to determine whether
or not the authenication is valid (though it is still up to the server
to decide AUTHORIZATION issues, ie. whether or not it will in fact grant
the service).

			-Jeff


home help back first fref pref prev next nref lref last post