Klaus Heinrich Kiwi wrote:
On Wed, 2008-06-18 at 16:54 -0400, Ken Raeburn wrote:I think it should be pointed out that such a change would allow tickets to start being issued where currently they would not when the KDC software gets updated -- even if the latter really was the intent of the realm administrator. Because of that, we might instead want to create a new flag with the semantics Jeff wants, and leave the existing flag with its current (suboptimal) behavior.Sorry if this question sounds silly, but how much of both these solutions are implementation specific? Wouldn't such a change require changes to the current RFC?
Its not a silly question. The allow_tix flag is 100% implementation specific. There is no standardized KDC database format nor is there a standardized kadmin interface. Jeffrey Altman
smime.p7s
Description: S/MIME Cryptographic Signature
________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
