Renewable ticket ?

eichin-krb@thok.org eichin-krb at thok.org
Wed May 8 11:47:19 EDT 2002


>     I agree with you, I would like to see some xlock that renews kerberos
> tickets also.

I've yet to see a good design for this that isn't either vulnerable to
the zanarotti attack, or needs xlock to be setuid root.  I have seen
implementations that combined both flaws :-)



More information about the Kerberos mailing list