[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Extract Keytab permissions

To: Alf Wachsmann <alfw@slac.stanford.edu>
Subject: Re: Extract Keytab permissions
From: Love Hörnquist Åstrand <lha@kth.se>
Date: Sat, 26 Mar 2005 11:18:14 +0100
Cc: heimdal-discuss@sics.se
In-Reply-To: <Pine.LNX.4.58.0503171434530.16290@iris01.slac.stanford.edu> (AlfWachsmann's message of "Thu, 17 Mar 2005 14:38:52 -0800 (PST)")
References: <b2857faf7d84078d2e315327e4f40686@jpl.nasa.gov><amzmx4lfpp.fsf@nutcracker.it.su.se><e1b8962a2d9ed78135736920a82d2f6c@jpl.nasa.gov><Pine.LNX.4.58.0503171434530.16290@iris01.slac.stanford.edu>
Sender: owner-heimdal-discuss@sics.se
User-Agent: Gnus/5.1006 (Gnus v5.10.6) Emacs/21.3 (berkeley-unix)

Alf Wachsmann <alfw@slac.stanford.edu> writes:

> do you have another patch like this so that a user can view his/her
> own but no other KDC entry just like this was the case in AFS.
>
> "kas examine" worked for your own account. To view others you needed
> to have the ADMIN flag set.
>
> It was always handy that users could get the age of their own password.

Yes, that would probably be a good idea. I need to go over the attributes
and see which of them that can be security exported to the user.

Love

PGP signature

References:
- Extract Keytab permissions
  - From: "Henry B. Hotz" <hotz@jpl.nasa.gov>
- Re: Extract Keytab permissions
  - From: "Henry B. Hotz" <hotz@jpl.nasa.gov>
- Re: Extract Keytab permissions
  - From: Alf Wachsmann <alfw@slac.stanford.edu>

Prev by Date: Re: kadmin.8 patch
Next by Date: Re: Kerberos attributes with ldap/samba for a heimdal backend
Prev by thread: Re: Extract Keytab permissions
Next by thread: ldap <--> heimdal again
Index(es):
- Date
- Thread