Default client keytab name
Nico Williams
nico at cryptonector.com
Mon Jul 23 12:15:22 EDT 2012
I prefer consistency, so I prefer UIDs for keytabs because we already
use that for ccaches. That said, I won't mind if there's a token that
means "username" and one that means "uid" and then we can leave it up
to the vendors and sysadmins which to use.
Also, it's not /etc that worries me but nscd. In self-credentialed
mode nscd would deadlock if getpwuid() were needed.
More information about the krbdev
mailing list