I agreed. And I will make the refactor. Thanks~

Regards,
Lin




------------------ Original ------------------
From:  "zhengkai";<[email protected]>;
Date:  Fri, Nov 20, 2015 00:06 AM
To:  "[email protected]"<[email protected]>; 

Subject:  About TokenPreauth related configurations



Hi,

I just noticed we had added the following listed configuration items in KDC 
side. I guess they're for the TokenPreauth mechanism.
    VERIFY_KEY(),
    DECRYPTION_KEY(),
ISSUERS();

It looks like they're too short or not clear in which domain in the global 
configuration namespace. I would change them to be something like follows.
    TOKEN_VERIFY_KEYS(),
    TOKEN_DECRYPTION_KEYS(),
TOKEN_ISSUERS();

I guess such change may affect you, so please be noted. Also let me know if you 
have any concern or suggestion. Thanks.

Regards,
Kai

Reply via email to