login process pairing

Frank Cusack fcusack at fcusack.com
Wed Jun 4 02:16:48 EDT 2003


On Tue, Jun 03, 2003 at 04:57:43AM -0400, Sam Hartman wrote:
> You want to run a slave login process to destroy tickets when the user
> logs out.
> 
> Note that a PAM login needs to do the same thing to implement
> pam_close_session.

How will you know if it's the last session?  You *could* have a per-session
ccache, but that's not friendly.  What if I open a dozen ssh's and work
in a few of them.  I don't want to later go back to a different window
and find that I have to kinit.

/fc


More information about the krbdev mailing list