Re: Not building kcpytkt/kdeltkt
Andrew Bartlett <[email protected]> Tue, 03 Aug 2021 15:19:04 +1200
| Newsgroups | gmane.comp.encryption.kerberos.devel |
|---|---|
| Message-ID | <[email protected]> |
On Tue, 2021-08-03 at 03:00 +0000, Sam Hartman wrote: > > > > > > "Ken" == Ken Hornstein <[email protected]> writes: > > There was some internal discussion back in 2004. > The utilities were written to exercise new Windows functionality, and > no > one even talked about exposing them on other platforms. > My recollection after rereading that discussion is that we could see > why > you might want to delete a ticket from the LSA: deleting the entire > LSA > ccache seemed kind of like a big deal on Windows, and you might want > to > be able to delete a ticket to force that ticket to be retrieved again > or simply to remove it. > > But I don't think anyone particularly thought of use cases for other > platforms at the time. That's the use case of the underlying API in Samba. As per the link Samba had trouble with having tickets to servers that has been rebuilt under the same name (re-joining a DC in particular) that we wanted to force a re-fetch of tickets for. Andrew Bartlett -- Andrew Bartlett (he/him) https://samba.org/~abartlet/ Samba Team Member (since 2001) https://samba.org Samba Team Lead, Catalyst IT https://catalyst.net.nz/services/samba Samba Development and Support, Catalyst IT - Expert Open Source Solutions _______________________________________________ krbdev mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/krbdev