On Thu, 16 Nov 2006, Russ Allbery wrote:
> >> I'd rather recommend that people who have this concern provide a
> >> world-readable keytab for some other, otherwise unprivileged principal
> >> and let pam-krb5 do validation against it. Allowing someone to specify
> >> an alternate keytab is easy to do and is already on my to-do list.
>
> > Nice and impressing with its simplicity. Looking forward to that
> > feature.
>
> Do you think that would be sufficient?
On second thought, it wouldn't help at all. If everyone can read the
keytab then everyone can create tickets for it, right?
Peter
--
| .''`. ** Debian GNU/Linux **
Peter Palfrader | : :' : The universal
http://www.palfrader.org/ | `. `' Operating System
| `- http://www.debian.org/
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
