Processing .k5login (another patch)

Sam Hartman hartmans at MIT.EDU
Thu Sep 2 11:47:54 EDT 2010


>>>>> "Nicolas" == Nicolas Williams <Nicolas.Williams at oracle.com> writes:

    Nicolas> I'd rather have an option for specifying the location of
    Nicolas> the k5login file, so it can be moved into a location where
    Nicolas> the user cannot control it.

+1

In preference order
1) Have an option to set directory where .k5login is found
2) Both 1 and 3
3) have an option to disable .k5login processing
4) none of the above

rationale: 1 gives you enough rope that 3 is not needed. I think I could
even explain that to an audit firm:-).



More information about the krbdev mailing list