On Tue, May 05, 2009 at 06:23:29PM -0500, Will Fiveash wrote: > In > http://sac.sfbay.sun.com/Archives/CaseLog/arc/PSARC/2009/271/inception.materials/Overview-terse.txt > there is: > > Architecture: > > CPG membership is driven primarily by PAM modules and applications: > > ... > > - svc:/system/cpg/krb5:default registers the "krb5" CPG type and runs a > daemon to kdestroy Kerberos V credentials when the last reference to > a CPG vanishes. > > How does this interact with svc:/network/security/ktkt_warn? Seems to > me that there should be one service tending to the needs of the krb5 > related ccache. Perhaps the function of ktkt_warn can be folded into > svc:/system/cpg/krb5?
I think so too, but I haven't thought enough about this. Either ktkt_warn should move into svc:/system/cpg/krb5 or vice-versa. Nico --