[29056] in Kerberos
Re: Fw: SSO with telnet/rlogin/rsh
daemon@ATHENA.MIT.EDU (Russ Allbery)
Tue Jan 15 14:40:01 2008
To: kerberos@mit.edu
In-Reply-To: <478D0760.60604@anl.gov> (Douglas E. Engert's message of "Tue\,
15 Jan 2008 13\:20\:00 -0600")
From: Russ Allbery <rra@stanford.edu>
Date: Tue, 15 Jan 2008 11:39:09 -0800
Message-ID: <87prw2j2ua.fsf@windlord.stanford.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
"Douglas E. Engert" <deengert@anl.gov> writes:
> OK that works too. But I thought the main problem as stated in the note
> was that the rpc.gssd could not read the environment of the process, and
> thus alway defaulted to using the default ticket cache.
>
> This is the same set if issues I have with Nico about session vs user
> based caches.
Asking that a daemon be able to read the environment of unrelated
processes is asking for quite a bit. The design maybe isn't the best, but
it's one of the simplest. We used various things at Stanford in the past
that had a similar design. It's a hack, but it's much easier to implement
than many of the other solutions. Without that, you end up wanting
per-user daemons, which gets more annoying.
--
Russ Allbery (rra@stanford.edu) <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
