krb5-1.12 is released

Russ Allbery eagle at eyrie.org
Wed Jan 8 21:46:17 EST 2014


Greg Hudson <ghudson at MIT.EDU> writes:

> Arguably we should also be lobbying Debian and Ubuntu and Gentoo to
> fix #1, so that session keyrings have the intended semantics.

The difficulty in doing this in the system PAM configuration in Debian at
least is that one generally should not do this for su and related
programs, just for login processes.  The current Debian configuration
system doesn't provide a separate common-session for those types of
sessions.

I'll file a wishlist bug for this in Debian, but it's going to be kind of
tricky.

-- 
Russ Allbery (eagle at eyrie.org)              <http://www.eyrie.org/~eagle/>


More information about the Kerberos mailing list