how to "ban" clients?

[Nico Williams]

On Jul 25, 2011 8:33 AM, "Simo Sorce" <simo at redhat.com> wrote:
>
> On Sun, 2011-07-24 at 16:30 -0500, Nico Williams wrote:
> > For performance reasons?  It's like this forever, so there may not be a
> > performance reason anymore.  IMO this should be fixed.
>
> What do you do for principals of trusted realms ?

Shorter-lived x-realm TGTs, thus shorter-lived svc tix :)

Nico
--