Apps aquiring tickets
Sam Hartman
hartmans at MIT.EDU
Tue May 6 17:40:44 EDT 2003
People looking at this should consider the Kerberos login library
architecture used by KFM and look at whether that architecture is
appropriate for other platforms.
Decisions that KLL makes:
1) The graphical prompting is done in the context of the application.
You could argue against this because it means any arbitrary
application can prompt you for a password.
2) Library functions may attempt to interact with the terminal and get
tickets in text mode.
Note that MIT will continue to have to support KLL for KFM, so any
significaantly different architecture will be harder for us to accept.
Personally I'm not yet convinced this problem is worth solving. I
think the Windows approach of getting tickets at login and continually
renewing them is appropriate.
More information about the Kerberos
mailing list