Quoting Jen Selby <[EMAIL PROTECTED]>: > > If I'm right, why would I want to expire the whole principal!? > > If you know that at a certain time, the individual with that principal > is going to be leaving your company/school/whatever, this is a good way > to ensure that they can no longer authenticate to your KDC after that > time.
Quoting Ken Hornstein <[EMAIL PROTECTED]>: > >If I'm right, why would I want to expire the whole principal!? > > You're right. I don't think most people would expire principals, but I > could think of a few reasons. For example, if you charged for accounts, you > might tie the expiration date to when the money for the account ran out. Why would I expire the PRINCIPAL, when I solve the above issue by expiring the password? If the password is expired, the account can't be used... I'm not getting it... ________________________________________________ Kerberos mailing list [EMAIL PROTECTED] https://mailman.mit.edu/mailman/listinfo/kerberos
