Shawn M Emery wrote:
Henry B. Hotz wrote:
On Nov 8, 2007, at 8:30 AM, Douglas E. Engert wrote:

2) Ticket stores should be per-session.

Yes, but I think there should also be a way of acquiring a TGT from outside of the session. For example; processes that are long running or delayed execution could use credentials acquired from another mechanism, such as from password authentication or delegation.
I haven't looked recently but in general there have not been cohesive sessions to tie processes (and kernel actions) to unless auditing is enabled.
        -Will
_______________________________________________
OpenAFS-devel mailing list
[email protected]
https://lists.openafs.org/mailman/listinfo/openafs-devel

Reply via email to