-allow_tgs_req
Russ Allbery
eagle at eyrie.org
Mon Jan 8 23:42:00 EST 2018
Chris Hecker <checker at d6.com> writes:
> Right, I will disable the princ when I find out obviously, I just want
> the person to not be able to use it as a user princ to get tickets to
> other services in the meantime. Does that make sense or am I missing
> something?
It makes sense -- I just don't think it's something that currently exists
in the KDC's permission model, at least so far as I can tell. Although
it's entirely possible I'm missing something.
--
Russ Allbery (eagle at eyrie.org) <http://www.eyrie.org/~eagle/>
More information about the Kerberos
mailing list