kstart 3.9 released
Russ Allbery
rra at stanford.edu
Sun Mar 4 03:40:49 EST 2007
Russ Allbery <rra at stanford.edu> writes:
> I'm pleased to announce release 3.8 of kstart.
> Changes from previous release:
> Allow -H to be used with a command in k4start and k5start. In this
> case, check the existing ticket cache and authenticate if it's
> stale, then run the command in either case. This is useful when
> running several commands with the same credentials at near the same
> time. It reduces Kerberos traffic and avoids service ticket
> requests being rejected as possible relay attacks.
This new feature didn't work quite right when running an aklog program.
aklog wasn't run unless new tickets were obtained, even though a new PAG
was created, so the command didn't have valid tokens. I've fixed that bug
and released kstart 3.9.
All other details remain the same.
--
Russ Allbery (rra at stanford.edu) <http://www.eyrie.org/~eagle/>
More information about the Kerberos
mailing list