kinit -S and krb 1.6

Sam Hartman hartmans at MIT.EDU
Mon Jul 30 17:37:04 EDT 2007

>>>>> "Mark" == Mark Phalan <Mark.Phalan at Sun.COM> writes:

    Mark> Unless the krb5.conf file is properly populated (and no
    Mark> fallbacks are being used) "kinit -S" is essentially rendered
    Mark> useless.

I've always viewed kinit -s as an incredibly special purpose function
that required you have complete control of the resulting credentials
and their use.

I think it might be reasonable to allow kinit -s host/ to work
but I don't think it a requirement to provide a mechanism for knowing
whether a realm should be specified or not.

More information about the krbdev mailing list