Re: #18 [**] Kerberos error type limitations (section 5.1.4)
Shoichi Sakane <[email protected]> Tue, 22 Feb 2005 10:57:20 +0900
| Newsgroups | gmane.ietf.kink |
|---|---|
| Message-ID | <[email protected]> |
I would like to close this issue #18 if anybody has objection. > > #18 [**] Kerberos error type limitations (section 5.1.4) > > > > Why should a sender send only those errors? I'm mostly asking > > for an explanation to be given to me or to be added to the document > > rather than liberalization of the requirement. (Sam Hartman) > > I am not sure why the document describes such limitations. > If we don't have any reason, remove the limitations, and remove the text: > > but the sender SHOULD send only the following errors: > > KRB5KRB_AP_ERR_BAD_INTEGRITY > KRB5KRB_AP_ERR_TKT_EXPIRED > KRB5KRB_AP_ERR_SKEW > KRB5KRB_AP_ERR_NOKEY > KRB5KRB_AP_ERR_BADKEYVER >