kinit -S and krb 1.6

Sam Hartman hartmans at MIT.EDU
Mon Jul 30 17:37:04 EDT 2007


>>>>> "Mark" == Mark Phalan <Mark.Phalan at Sun.COM> writes:

    Mark> Unless the krb5.conf file is properly populated (and no
    Mark> fallbacks are being used) "kinit -S" is essentially rendered
    Mark> useless.


I've always viewed kinit -s as an incredibly special purpose function
that required you have complete control of the resulting credentials
and their use.


I think it might be reasonable to allow kinit -s host/foo.com@ to work
but I don't think it a requirement to provide a mechanism for knowing
whether a realm should be specified or not.





More information about the krbdev mailing list