kstart 3.9 released

Russ Allbery rra at stanford.edu
Sun Mar 4 03:40:49 EST 2007


Russ Allbery <rra at stanford.edu> writes:

> I'm pleased to announce release 3.8 of kstart.

> Changes from previous release:

>     Allow -H to be used with a command in k4start and k5start.  In this
>     case, check the existing ticket cache and authenticate if it's
>     stale, then run the command in either case.  This is useful when
>     running several commands with the same credentials at near the same
>     time.  It reduces Kerberos traffic and avoids service ticket
>     requests being rejected as possible relay attacks.

This new feature didn't work quite right when running an aklog program.
aklog wasn't run unless new tickets were obtained, even though a new PAG
was created, so the command didn't have valid tokens.  I've fixed that bug
and released kstart 3.9.

All other details remain the same.

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>



More information about the Kerberos mailing list