[27532] in Kerberos
kstart 3.9 released
daemon@ATHENA.MIT.EDU (Russ Allbery)
Sun Mar 4 03:41:09 2007
From: Russ Allbery <rra@stanford.edu>
To: kerberos@mit.edu
In-Reply-To: <87r6s5r7yn.fsf@windlord.stanford.edu> (Russ Allbery's message of
"Sat, 03 Mar 2007 19:41:36 -0800")
Date: Sun, 04 Mar 2007 00:40:49 -0800
Message-ID: <87bqj9o0z2.fsf@windlord.stanford.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Russ Allbery <rra@stanford.edu> writes:
> I'm pleased to announce release 3.8 of kstart.
> Changes from previous release:
> Allow -H to be used with a command in k4start and k5start. In this
> case, check the existing ticket cache and authenticate if it's
> stale, then run the command in either case. This is useful when
> running several commands with the same credentials at near the same
> time. It reduces Kerberos traffic and avoids service ticket
> requests being rejected as possible relay attacks.
This new feature didn't work quite right when running an aklog program.
aklog wasn't run unless new tickets were obtained, even though a new PAG
was created, so the command didn't have valid tokens. I've fixed that bug
and released kstart 3.9.
All other details remain the same.
--
Russ Allbery (rra@stanford.edu) <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
