[25159] in Kerberos
Re: kinit uses libdefaults in krb5.conf instead of appdefaults
daemon@ATHENA.MIT.EDU (Russ Allbery)
Thu Dec 22 18:05:40 2005
From: Russ Allbery <rra@stanford.edu>
Date: Thu, 22 Dec 2005 14:13:43 -0800
Message-ID: <8764pgsru0.fsf@windlord.stanford.edu>
To: kerberos@mit.edu
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
"Nate Yocom" <nate.yocom@centrify.com> writes:
> In looking at things, and a quick browse of the code, the [appdefaults]
> section of krb5.conf is never used by kinit and the other 'built in'
> tools - instead they use [libdefaults]. I'm just wondering as to the
> thinking here, should kinit (as an application) use appdefaults? Or does
> "application" in this sense mean 'third party'?
*Everything* uses libdefaults. Ideally, IMO, kinit and the like should
take their defaults from libdefaults and then override those with
appdefaults settings, if present. We have some local patches at Stanford
to do that, but it looks like the profile parser is going to be rewritten
and I'm holding off a little on trying to beat those patches into place
until I see if the profile API changes (since we had to change it in order
to do some things properly).
--
Russ Allbery (rra@stanford.edu) <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
